A certain configuration of Android 2.3.7 on the Motorola Defy XT phone for Republic Wireless uses init to create a /dev/socket/init_runit socket that listens for shell commands, which allows local users to gain privileges by interacting with a LocalSocket object.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Android | 2.3.7 (including) | 2.3.7 (including) |