Telstra has revealed the addition of almost one million new mobile services in the six months to December 2011, but Sensis revenues plummeted 24 percent in 12 months.
When the suite is remotely installed via Apple Remote Desktop or similar software, it provides someone with physical access to the computer to run an application from the Dock with root privileges.
The flaw affects Mac OS X 10.4.9 and later, but not any versions of Mac OS X 10.5.
It arises when the target computer is sitting at the login prompt. The installer is unable to install Dock icons in these circumstances, and uses a postflight script (a script that is executed after the main installation process) instead. That script opens the Dock with root privileges, which allows anyone sitting at the computer to use the Dock to open applications with root privileges.
Microsoft recommends the deletion of the postflight script from the installer before it is used remotely on systems running affected versions of Mac OS X.
Another possibility is to lock the target system's screen (possible with Apple Remote Desktop 3) during installation to prevent exploitation. Restarting the computer after installation is also necessary.
This is the second installer-related issue with Office 2008. It was previously revealed that the installer incorrectly sets user ID 502 as the owner of the software, which could result in a user without admin rights to modify Office program files.
Microsoft has described a manual fix for that issue, and is expected to correct the installer files some time in the future.
David Bass
| For the fourth year in a row, IDC has placed content security provider Websense (NASDAQ: WBSN) at the top of the IDC Worldwide Web Security 2011 –…
How to Make Business Discovery Work for Your Business
Business Discovery takes its cues from consumer apps. Like Google, it encourages us- ers to hunt for and explore data without worrying about or even noticing the underly- ing technology. Their entire experience is working within an intuitive interface to get real-time, self-service results with only minimal training. ...more
Try an easy-to-use set of web-enabled
tools for business-class productivity services. Office 365 provides
anywhere-access to email, important documents, contacts, and calendars
on almost any device.
LATEST HEADLINES FROM YOUR IT
