Archive | MacOS X RSS feed for this section

A parody to save the XServe

ARDAgent security hole with MacOS X 10.5.4

A security hole has been recently discovered, relayed by all websites of the Mac community. This vulnerability with the ARDAgent program gives access to the root superuser with a simple Applescript command : $ osascript -e ‘tell app “ARDAgent” to do shell script “whoami”‘ root If it does not always work with MacOS X 10.5.3 [...]