Or just turn on Remote Management on System Preferences Sharing and disable all privileges (the disable privileges is optional). And RESTART your computer.
I tried in every machine in my house and I kept getting the (-1708) error mentioned above. Then on the last one it worked. As I looked for a reason, I noticed the machine that it worked on had screen sharing and remote management disabled in the Sharing Pane of System Preferences, while the rest of my machines have remote management to only allow me to access.
I enabled Remote Management and it plugged this particular ARDAgent hole. I tried on one of my machines that had Remote Management already on to disable it, and the exploit works, but as I turned Remote Management back on it didn't plug the hole right away. So I restared and the fix worked.
Obviously this only fixes the ARDAgent use, it doesn't fix the essential flaw in Applescript to allow an app running as root to receive script commands from a non root app.
Slashdot Mirror
Or just turn on Remote Management on System Preferences Sharing and disable all privileges (the disable privileges is optional). And RESTART your computer.
I tried in every machine in my house and I kept getting the (-1708) error mentioned above. Then on the last one it worked. As I looked for a reason, I noticed the machine that it worked on had screen sharing and remote management disabled in the Sharing Pane of System Preferences, while the rest of my machines have remote management to only allow me to access.
I enabled Remote Management and it plugged this particular ARDAgent hole. I tried on one of my machines that had Remote Management already on to disable it, and the exploit works, but as I turned Remote Management back on it didn't plug the hole right away. So I restared and the fix worked.
Obviously this only fixes the ARDAgent use, it doesn't fix the essential flaw in Applescript to allow an app running as root to receive script commands from a non root app.