![]() |
Sign Up! | Tags | Domains | Statistics | Options | Advanced Search |
Tagged: osx, exploit, tuaw, slashdot, applescript, ard, appleremotedesktop, ardagent
Filed under: macs hacks, security hacks Yesterday, Slashdot reported a privilege escalation vulnerability in OSX. Using AppleScript you can tell the ARDAgent to execute arbitrary shell script. Since, ARDAgent is running as root, all child processes inherit root privleges. Intego points out that if the user has activated Apple Remote Desktop sharing the ARDAgent can't be exploited in this … Continue Reading »