Apple Patches Security Flaw in Terminal.app

Currawong writes "Apple has posted Security Update 2002-09-20 for Mac OS X 10.2 and above in Software Update, fixing a security hole in Terminal.app which could 'allow an attacker to remotely execute arbitrary commands on the user's system.' Apple also has a useful page listing all the security updates with a short summary and links to what they patch."

Comments

Re:Apple patch installation?

[xTina]

It is done via the Software Update application. This app checks in certain intervals (default weekly) if new updates are available and lets the user choose the updates to install. Most updates are also available for download from Apple's website. Apple provides a security mailing list which will alert you to security updates. Since summer, all updates are signed and the signature is being checked by Software Update before installing.

The test of this problem:

[Anonymous Coward]

I found this bug 2002/09/20, and start to make report for Apple.
In fortunate thing, Apple fixed this bug and begin to distribute updater.
Since Apple fixed this serious bug, I decided to open to the public.

This is very serious security bug.
All Jaguar user should update immediately.
I prepared the test easy here.
If link below is clicked, a Terminal will start and "ls -la" command will be executed by your authority.
telnet://|ls -la

Your use of updater vanishes this brittleness.

name:Taiyo FUJII
E-Mail:taiyo@vinet.or.jp
Sorry, I don't have slashdot account.

Re:The test of this problem:

[Karma Sink]

Actually, I just clicked the link on multiple unpatched machines running OS X 10.2.1. The machine tried telneting to ls -la, to no effect. However, after giving it a good look, this is only because your link does not include the pipe. This is a pretty dangerous exploit, and could easily be changed to rm -rf * rather than a simple ls.

It's a damned good thing that Apple is so quick on the draw with security fixes...

Re:The test of this problem:

[Phroggy]

Verified that before the patch, typing telnet://|ls%20-la in Internet Explorer's address bar gives me a directory listing, and after the patch it's fixed by turning the | into %7C which doesn't work. I couldn't get it to work by clicking your link though, or in Mozilla.

Also verified that it launched in two bounces before the patch and one bounce after, on my 700MHz G4 eMac.

The changes to Terminal.app

[Paladeen]

This update replaces the entire Terminal.app.

It is now 528kb in size, as opposed to the previous 439kb.

I've also noticed that it launches noticably faster after the update. Perhaps Apple added some tweaks in addition to the security changes.

(no, it isn't the updated prebindings. I just did that myself this morning).

Re:The changes to Terminal.app

[norwoodites]

not on a weekly basis but automatic when you launch the program and if it needs it, the dynamic library loader (dylib) will automatically do it for you, so the ext time it will launch faster.

This is from reading the sources of dylib and the release notes of cctools which contains the sources.

Re:The changes to Terminal.app

[DavidRavenMoon]

(no, it isn't the updated prebindings. I just did that myself this morning).

I believe Jaguar updates prebindings automatically now at boot time.

When I was running an old version of Classic Spy, OS X would write a log saying it couldn't update prebinding when I started up.

Re:its sad

[jtdubs]

Simple solution.

Use the Mac like it's supposed to be used, not like a damned windows box.

When you close a terminal window, use Apple+W, NOT Apple+Q. Mac's are document-based, not application-based. Close the window, not the terminal app.

Now, when you click on the terminal again it will open up a new window in a fraction of the time.

Justin Dubs

Re:its sad

[MoneyT]

Like highlighting the text to copy then just middle clicking to paste

If I recall correctly, this feature existed in the Sparc 2 which we had at our highschool which ran solaris. This is not a linux development. It may be a *NIX varient development, but not linux.

Linux is completely customizable, you can change everything about the desktop, kde and gnome are very flexable. If you dont like something you can pull the src apart and change it. (I wrote a couple patches my self because I like to use the mouse scroll to shade and unshade windows on the top bar)

All of this can be done with OS X too. You can even kill Aqua and just use it for apps that require Agua and use another windower in it's place for most of your work.

We have also made our own freetype fonts. So we dont have to steal them from microsoft. But we can also install the microsoft fonts if we want our desktop to look like a windows box.

Apple has their own fonts too, what's your point?

Linux developers are very innovative we have more updates and enhancements than macosx and windows put together

And how many of those updates were because they were nessesary to get a feature that has been availible in other OSes for a long time? Seriously, most of linux updates have just brought it closer to being comparable with the modern OSes, not major improvements.

A good Itunes replacement would be xmms, yes its a clone of winamp, but there is nothing wrong with that, FREE THEMES!

Themes don't replace functionality. You have no idea how useful something like a live search feature is untill you've become used to it iTunes is far superior to WinAMP

I will grant that linux developers are innovative and that Linux is a fun system to toy arround with, but they are no more innovative than paid programmers and sadly do make most of their software from other peoples ideas (because otherwise no one would use Linux because people are too fricken dumb to learn a new OS, but that's an entirely differnt rant)

Re:its sad

[Cadre]

Linux developers have came up with alot of cool stuff. Like highlighting the text to copy then just middle clicking to paste. Of course you can do this on bsd or anything that runs X but its still cool.

I think you mean "XFree86 Developers" and not Linux developers. XFree86 runs on many kernels, not just Linux. The functionality they developed was not specific to Linux, it was specific to XFree86.

Linux is completely customizable, you can change everything about the desktop, kde and gnome are very flexable.

I don't mean to nitpick, but once again, you're mixing the names up. The desktop customizability is a function of XFree86 and whatever desktop manager you use, not Linux (which I'll reiterate, is a kernel).