| InputManager provides route to root for Mac attackers |
|
| by Stephen Withers | |
| Wednesday, 24 January 2007 | |
  
Featured Whitepaper
5 Best Practices for Smartphone Support
The InputManager then replaces installAssistant (part of System Preferences) with a shell wrapper giving root access, then makes it executable again by repairing privileges. The attacker is then able to run this program to operate with root privileges. The exploit can also be triggered by kernel panics caused by corrupted font or disk image files. As it stands, this appears to be a local vulnerability, but that's still an issue in shared environments as it could be used by someone with a ordinary user account to make unauthorised changes to the system or to gain access to other users' files. The suggested workaround is to limit user's access to their InputManagers folder and prevent permissions repair.{moscomment} |
Tags
| < Next story in category | Previous story in the category > |
|---|
