Bugtraq mailing list archives

Re: Mac OS X setuid root security hole

From: Florian Kohl <floh () blafasel org>
Date: Wed, 17 Oct 2001 20:50:29 +0200

 - Open up the terminal application
 - Quit the terminal application
 - Open up NetInfo Manager (leave it in the foreground)
- Open up the Terminal application form the "Recent Items" list inthe Apple Menu.
You should now be logged in as root!




confirmed on osx 10.1 with all available updates (none)

[malaria:~] floh% uname -a

Darwin malaria 1.4 Darwin Kernel Version 1.4: Sun Sep 9 15:39:59 PDT2001; root:xnu/xnu-201.obj~1/RELEASE_PPC Power Macintosh powerpc



cheers floh

Current thread:

ISS Security Advisory: Citrix MetaFrame Remote Denial of Service Vulnerability X-Force (Oct 16)
- Mac OS X setuid root security hole rotaiv (Oct 17)
  - Re: Mac OS X setuid root security hole Florian Kohl (Oct 17)
  - Re: Mac OS X setuid root security hole Chris Adams (Oct 17)
  - Re: Mac OS X setuid root security hole Ken Schweigert (Oct 17)
  - Re: Mac OS X setuid root security hole Kee Hinckley (Oct 17)
  - Re: Mac OS X setuid root security hole Chris Adams (Oct 20)
    - Re: Mac OS X setuid root security hole Ryan Tucker (Oct 20)