Slashdot Mirror

← Back to Stories (view on slashdot.org)

New Remote Root in Mac OS X

Posted by pudge on from the batten-down-the-hatches dept.

Cysgod writes "I've released a security advisory detailing a new remote root vulnerability in Mac OS X 10.3, 10.2 and possibly earlier versions." The main thrust is that it exploits a problem in the DHCP client, to gain root access, and turning off various services can prevent attack. It is unclear why an exploit was made public before Apple resolved the problem. Apple's fix is apparently scheduled for a December release.

12 of 445 comments (clear)

  1. Your first post is good... by Anonymous Coward · · Score: -1, Offtopic

    Good enough for me to poop on!

  2. ridiculous by Anonymous Coward · · Score: -1, Offtopic

    its ridiculous how microsoft will take these little unlikely security breaches for apple and linux and blow them out of perportion like they are somehow worse than windows security holes

  3. PREPARE TO GET MODDED DOWN! by Anonymous Coward · · Score: -1, Offtopic

    damn karma whores.... mod the AC below me UP!

  4. Michael, is that you? by Anonymous Coward · · Score: -1, Offtopic

    Is it perverted if I install a fleshlight in a "Tickle-Me-Elmo"?

  5. Re:And now the question of support... -idiot os9 by tomhudson · · Score: 0, Offtopic
    poster wrote:
    os 9 has no vulnerabilities that need patching you retard.

    OS9 has NEVER had any exploits possible according to bugtraqs entire database history.

    Every time I see OS9 mentioned, I think of this, the original OS9. No exploits there, and links to versions running on dif. platforms, etc., that you can download.
  6. rfp by Anonymous Coward · · Score: -1, Offtopic

    rainforest puppy is an unmitigated jerk

  7. Ok we all hate windows by Anonymous Coward · · Score: -1, Offtopic
    OK, there's a hole. Still, when Apple (or OpenBSD) have a security hole it's newsworthy rather than just Business As Usual.. unlike other companies which promise security but can't deliver.
    Yadda yadda yadda... Windows sucks.. OSX and NIX rocks.. yea okay..
    and what do you know low and behold a root explot for OS X. I mean dont kid yourself... run a company with 3000 windows boxes and 3000 nix boxes and tell me who get 0wned first... bet you it will be the nix.. beside what does anyone want with an owned m$ box...
    No really....
    Ok so lets all buy MAC's but then we buy M$ virtual PC so are MAC's run like PC's...
    No really...
    "The life of a Windows Admin - A Sad Story"
    / No really... "l-ess what do you mean - no ls -- idiot!!!"
  8. Re:I GOT A GREASED UP YODA DOLL tsarkon reports 9 by Anonymous Coward · · Score: -1, Offtopic
    9 steps to greasing your anus for Yoda Doll Insertion!
    v 3.76.0
    $YodaBSD: src/release/doc/en_US.ISO8859-1/yodanotes/9steppro cess.sgml,v 3.76.0 2003/11/24 20:30:25 tsarkon Exp $
    1. Defecate. Preferably after eating senna, ex lax, prunes, cabbage, pickled eggs, and Vietnamese chili garlic sauce. Defecation could be performed in the Return of the Jedi wastebasket for added pleasure.
    2. Wipe ass with witch hazel, soothes horrific burns. (Rob "CmdrTaco" Malda can use witch-hazel on mouth to soothe the horrific burns from performing so much analingus.)
    3. Prime anus with anal ease. (Now Cherry Flavored for those butthole lick-o-phillic amongst you - very popular with 99% of the Slashdotting public!)
    4. Slather richly a considerable amount of Vaseline and/or other anal lubricants into your rectum at least until the bend and also take your Yoda Doll , Yoda Shampoo bottle or Yoda soap-on-a-rope and liberally apply the lubricants to the Doll/Shampoo/Soap-on-a-rope.
    5. Pucker your balloon knot several times actuating the sphincter muscle in order to work it in.
    6. Put a nigger do-rag on Yoda's head so the ears don't stick out like daggers!
    7. Make sure to have a mechanism by which to fish Yoda out of your rectum, the soap on the rope is especially useful because the retrieval mechanism is built in.
    8. Slowly rest yourself onto your Yoda figurine. Be careful, he's big!
    9. Gyrate gleefully in your computer chair while your fat sexless geek nerd loser fat shit self enjoys the prostate massage you'll be getting. Think about snoodling with the Sarlaac pit. Read Slashdot. Masturbate to anime. Email one of the editors hoping they will honor you with a reply. Join several more dating services - this time, you don't check the (desired - speaks English) and (desired - literate). You figure you might get a chance then. Order some fucking crap from Think Geek. Get Linux to boot on a Black and Decker Appliance. Wish you could afford a new computer. Argue that IDE is better than SCSI because you can't afford SCSI. Make claims about how Linux rules. Compile a kernel on your 486SX. Claim to hate Windows but use it for Everquest. Admire Ghyslain's courage in making that wonderful star wars movie. Officially convert to the Jedi religion. Talk about how cool Mega Tokyo is. Try and make sure you do your regular 50 story submissions to Slashdot, all of which get rejected because people who aren't fatter than CowboyNeal can't submit. Fondle shrimpy penis while making a Yoda voice and saying, use the force, padawan, feeel the foooorce, hurgm. Yes. Yes. When 900 years you reach, a dick half as big you will not have.

    All in a days work with a Yoda figurine rammed up your ass.

    I HAVE A GREASED UP YODA DOLL SHOVED UP MY ASS!

    What you can do with you ass after sitting on a GREASED UP YODA DOLL. y______________________________YODA_ANUS

  9. Sezwhat? by HarveyBirdman · · Score: -1, Offtopic
    cock-smocking

    Why would someone put a smock on a cock, other than the obvious poetic reason?

    I didn't think chickens could paint.

    Huh.

    --
    --- Ban humanity.
  10. Actually... by FredFnord · · Score: -1, Offtopic

    It's another word for 'condom-using', silly.

    Those wacky Republicans have got to make perfectly normal things sound bad. 'That cock-smocking bastard! Doesn't he know that every sperm is sacred?'

    -fred

    --
    Sign #11 of Slashdot overdose: You see the phrase 'moderate Republican' and you wonder if that would be a +1 or a -1.
  11. Re:i thought i would never say this by Anonymous Coward · · Score: -1, Offtopic

    > [SIG] Somewhere in Texas, there's a village missing its idiot.

    You bastard! How DARE you insult the Right Honourable President George Williamson Bush, legally elected leader of the United States of North America? You may not like him, or you may even disagree with some of the ways he is leading this great nation, but please have a modicum of RESPECT for the man! To do otherwise makes you a seditionist and treasoner, deserving of being hanged in the gallows like the rat you are.

  12. A full grown stallion's cock, when fully erect, wi by Anonymous Coward · · Score: -1, Offtopic

    A full grown stallion's cock, when fully erect, will measure some two to three feet long