Slashdot Mirror

← Back to Stories (view on slashdot.org)

Flaw Found in Apple Bug-Fix Tool

Posted by ScuttleMonkey on from the month-of-bug-creation dept.

eldavojohn writes "The Month of Apple Bugs (MOAB) is well under way with a startling bug released Monday. From the description: 'Application Enhancer (APE) is affected by a local privilege escalation vulnerability which allows local users to gain root privileges.' APE is the same software used to deploy fixes during 'The Month of Apple Fixes' (MOAF). I know it's confusing but MOAB came first and MOAF was a developer's answer to the bugs — after all, the purpose of posting bugs is to have them identified, confirmed and eradicated. The article talks about potential remote root access by an intruder. Note that this is third party software that all of the bugs seem to be stemming from. I guess Apple has made a fairly secure system but they can't expect all third party developers to follow the same rigorous standards."

3 of 168 comments (clear)

  1. A HA! by Thansal · · Score: 5, Funny
    I guess Apple has made a fairly secure system but they can't expect all third party developers to follow the same rigorous standards.


    I see it now. This entire MOAB thing is just there to tout how great and secure Apple Products are, and that the only bugs possible HAVE to come from 3rd party software!

    It is all a plot by Jobs!

    A PLOT I TELL YOU!

    [/psycho]
    --
    Do Or Do Not, There Is No Spoon, There Is Only Zuul. Everything in the above post is probably opinion.
  2. Instead ... by Salvance · · Score: 5, Funny

    Rather than just tell people not to use APE, Landon Fuller (who reported this bug on his blog), should have written an APE SHell Investigative Tool to help people find and fix this error.

    Technology needs more catchy acronyms

    --
    Crack - Free with every butt and set of boobs
  3. Bugs in apples.. by FrostyCoolSlug · · Score: 4, Funny

    When I find a bug in my apple, I throw it away..