- This topic is empty.
Viewing 2 posts - 1 through 2 (of 2 total)
-
Posts
-
Bug has been reported to Apple, and should be in the hands of the ARD Project Manager this morning. The exploit details will not be released at this time. I found it a few weeks ago, and thought it was a fluke. I reproduced it several times yesterday, and its very easy to do. Once exploited, a user can login as root using THEIR username and password, or they can delete system related files without authentication from the loginwindow.
result of teh exploit at:
http://www.flickr.com/photos/metfoo/246858852/(sorry, it didnt like my image url)
Viewing 2 posts - 1 through 2 (of 2 total)
- You must be logged in to reply to this topic.