Bugtraq mailing list archives

Re: Mac OS X setuid root security hole

From: Chris Adams <chris () improbable org>
Date: Sat, 20 Oct 2001 00:23:07 -0700

On Wednesday, October 17, 2001, at 09:53 , rotaiv wrote:

Try these steps on an OS X machine (not logged in as root)

 - Open up the terminal application
 - Quit the terminal application
 - Open up NetInfo Manager (leave it in the foreground)
- Open up the Terminal application form the "Recent Items" list in theApple Menu.

Apple's Software Update app has a vaguely-described "Security Update10-19-01" which fixes this problem.


Chris

Current thread:

ISS Security Advisory: Citrix MetaFrame Remote Denial of Service Vulnerability X-Force (Oct 16)
- Mac OS X setuid root security hole rotaiv (Oct 17)
  - Re: Mac OS X setuid root security hole Florian Kohl (Oct 17)
  - Re: Mac OS X setuid root security hole Chris Adams (Oct 17)
  - Re: Mac OS X setuid root security hole Ken Schweigert (Oct 17)
  - Re: Mac OS X setuid root security hole Kee Hinckley (Oct 17)
  - Re: Mac OS X setuid root security hole Chris Adams (Oct 20)
    - Re: Mac OS X setuid root security hole Ryan Tucker (Oct 20)