Slashdot Mirror

← Back to Stories (view on slashdot.org)

New Remote Root in Mac OS X

Posted by pudge on from the batten-down-the-hatches dept.

Cysgod writes "I've released a security advisory detailing a new remote root vulnerability in Mac OS X 10.3, 10.2 and possibly earlier versions." The main thrust is that it exploits a problem in the DHCP client, to gain root access, and turning off various services can prevent attack. It is unclear why an exploit was made public before Apple resolved the problem. Apple's fix is apparently scheduled for a December release.

9 of 445 comments (clear)

  1. And now the question of support... by gumpish · · Score: -1, Flamebait
    It is unclear why an exploit was made public before Apple resolved the problem. Apple's fix is apparently scheduled for a December release.


    Even more unclear is which releases of Mac OS X Apple plans to continute to release security fixes for...
  2. Mirror by Anonymous Coward · · Score: -1, Flamebait

    Karma, meet your whore! Anonymous what?

    The security advisory

    Disclosure Policy

  3. Re:Call me an Apple Apologist, but.. by Anonymous Coward · · Score: -1, Flamebait


    The only hole around here is YOUR GAPING WHOREHOLE YOU GODDAMNED WHORE!

    You are such a fucking whore.

  4. Re:The Reason the exploit was made public.. by Anonymous Coward · · Score: -1, Flamebait

    You stupid git, they DID downplay it, they also released a OS upgrade without the fix, a security update for the same without the fix, and missed 3 deadlines! What the fuck else do you let them get away with? Let them come to your house and piss on your welcome mat before you release the info?

  5. Ummm, no it isn't, fuckface....N/T by WiseWeasel · · Score: -1, Flamebait

    N/T

    --
    "I like systems, their application excepted", George Sand (French)
  6. what fud by Anonymous Coward · · Score: -1, Flamebait

    face it , OS X blows chunks.

    what a joke

  7. Tech TV by wangotango · · Score: 1, Flamebait

    Anyone giving odds on the Tech TV Mac lovers saying absolutely nothing about this tomarrow, much less today.....? My guess is they can't do a story on this one without at least pointing to something Microsoft.

  8. Questionable Ethics by t0ny · · Score: -1, Flamebait
    It is unclear why an exploit was made public before Apple resolved the problem

    Maybe so it wouldnt be swept under the carpet, like all the other Apple security problems. They do this intentionally to bolser the image that Mac is somehow more 'secure' than Windows; even Slashdot is guilty of this, since every minor Windows, IE, Office, etc. issue is reported here, but when there is an issue with any other OS, browser, or office suite, it only gets reported about 5% of the time.

    Its good to finally see a non-MS exploit finally making front page news. Hopefully it will set a trend, and Mac, Linux, Opera, Mozilla, etc people cant just keep their heads in the sand about security anymore. If you ignore security, it will go away.

    --

    Manipulate the moderator system! Mod someone as "overrated" today.

  9. Re:Why it was made public by siphoncolder · · Score: 0, Flamebait

    You'll have to excuse my earlier post - it was tongue-in-cheek sarcasm. I was merely echoing typical responses that would be heard from such a snotty OSSer.

    As it is, I hate Linux, and the zealotry that lingers in that community (as you might notice from my other posts). I hate the design of the product itself, I hate the Microsoft bashing, and I hate the hype around it, and I hate the constant socialist overtones that fan the flames of such hatred.

    At least NOW you can judge me for what I really am.

    --
    i'm amazed that i survived - an airbag saved my life.