ARD root privilege escalation expolit

[image: 246858852]

Bug has been reported to Apple, and should be in the hands of the ARD Project Manager this morning. The exploit details will not be released at this time. I found it a few weeks ago, and thought it was a fluke. I reproduced it several times yesterday, and its very easy to do. Once exploited, a user can login as root using THEIR username and password, or they can delete system related files without authentication from the loginwindow.