| MoAB day five reveals 'in the wild' exploit |
|
| by Stephen Withers | |
| Saturday, 06 January 2007 | |
  
Featured Whitepaper
5 Best Practices for Smartphone Support
This situation can then be exploited to "plant a backdoor, overwrite resources or simply gain root privileges." One example presented involves the creation of malicious cron tasks for the root user. Cron is a system function that runs tasks according to a schedule, such as the overnight system maintenance tasks. Cron tasks for the root user run with root privileges, which means they can do anything. A temporary fix is said to be to remove the setuid bit from DiskManagementTool and to check that the system hasn't already been compromised by comparing the hashes of specified receipt files with those of a new installation.
Yesterday's iPhoto vulnerability has been patched by Finlay Dobbie, a member of Landon Fuller's MOAB Fixes group. "His patch guards the -[SubscribedAlbum registerPublishError:withTitle:] method, escaping all occurances of '%' in the title argument," wrote Fuller. |
Tags
| < Next story in category | Previous story in the category > |
|---|
