Tag Archives: command

ARDAgent security hole with MacOS X 10.5.4

A security hole has been recently discovered, relayed by all websites of the Mac community. This vulnerability with the ARDAgent program gives access to the root superuser with a simple Applescript command :

$ osascript -e ‘tell app “ARDAgent” to do shell script “whoami”‘
root

If it does not always work with MacOS X 10.5.3 (and previous [...]