Business IT - Technology for your business

No. 1 Story

Telstra adds one million mobile services, but Sensis plummets

Telstra has revealed the addition of almost one million new mobile services in the six months to December 2011, but Sensis revenues plummeted 24 percent in 12 months.

read more

Mac security under renewed question

Business IT - Technology

Unpatched vulnerabilities in Mac OS X and a Mac-based botnet! What is the world coming to?
Heise Security has confirmed the effectiveness of a privilege escalation exploit for Mac OS X.

The result of mounting a maliciously formed HFS disk image file is that the user gains root privileges.

The exploit is one of several revealed at last month's CanSecWest 2009 conference by Christer Oberg and Neil Kettle.

It could be used by someone that has legitimate access to a system with normal user privileges in order to carry out unauthorised activities that require admin rights.

The vulnerability is said to be present in all versions of Mac OS X from 10.4.0 onwards, including the Snow Leopard betas.

Other Mac OS X vulnerabilities disclosed by Oberg and Kettle involve kernel memory leaks and/or denial of service conditions.

The two researchers also disclosed an exploit for FreeBSD that gives root privileges to a local user. Unlike the Mac OS X flaws, this one has already been patched.

In other security news, researchers at Symantec have linked the iService trojan (malware distributed by hiding it inside pirated iWork 09 and Photoshop CS4 installers) with the first known Mac OS X based botnet.

The botnet appears to have carried out a distributed denial of service attack against a website.

At least one user (a Melbourne-based software developer) figured out what was going on a few months ago, but the Trojan itself received much more coverage than its payload.

Loading comments ...

- sponsored feature -

The Death of Traditional BI: What’s Next?

How to Make Business Discovery Work for Your Business IP PABX BUYING GUIDE

Business Discovery takes its cues from consumer apps. Like Google, it encourages us- ers to hunt for and explore data without worrying about or even noticing the underly- ing technology. Their entire experience is working within an intuitive interface to get real-time, self-service results with only minimal training. ...more