6 matches found
Apple-Mac-OS-X-10.x
Mac OS X is prone to a local privilege-escalation vulnerability affecting ARDAgent Apple Remote Desktop. Successful exploits allow local attackers to execute arbitrary code with superuser privileges, completely compromising the affected computer. This issue is confirmed to affect Mac OS X 10.5...
Apple Mac OS X 10.x AppleScript ARDAgent Shell Local Privilege Escalation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/29831/info Mac OS X is prone to a local privilege-escalation vulnerability affecting ARDAgent Apple Remote Desktop. Successful exploits allow local attackers to execute arbitrary code with superuser privileges, completely...
Apple Mac OS X ARDAgent本地权限提升漏洞
BUGTRAQ ID: 29831 Mac OS X是苹果家族机器所使用的操作系统。 本地攻击者可以通过AppleScript(如osascript)调用Mac OS X的ARDAgent。ARDAgent属于root用户,且设置了setuid位,也就是攻击者可以利用这个漏洞以root权限执行任意shell命令。 目前这个漏洞正在被名为AppleScript.THT的木马积极的利用。一旦用户受骗安装了带有木马的恶意文件,木马就会打开文件共享、Web共享和远程登录。木马的默认文件名为AStht06.app,安装位置/Library/Caches。 Apple Mac OS X 10.5...
Apple Mac OS X AppleScript ARDAgent Shell Local Privilege Escalation Vulnerability
Description Mac OS X is prone to a local privilege-escalation vulnerability affecting ARDAgent Apple Remote Desktop. Successful exploits allow local attackers to execute arbitrary code with superuser privileges, completely compromising the affected computer. This issue is confirmed to affect Mac ...
Apple Mac OSX 10.x - Applescript ARDAgent Shell Privilege Escalation
source: https://www.securityfocus.com/bid/29831/info Mac OS X is prone to a local privilege-escalation vulnerability affecting ARDAgent Apple Remote Desktop. Successful exploits allow local attackers to execute arbitrary code with superuser privileges, completely compromising the affected compute...
Apple Mac OSX 10.x - Applescript ARDAgent Shell Privilege Escalation
Apple Mac OSX 10.x - Applescript ARDAgent Shell Privilege Escalation source: https://www.securityfocus.com/bid/29831/info Mac OS X is prone to a local privilege-escalation vulnerability affecting ARDAgent Apple Remote Desktop. Successful exploits allow local attackers to execute arbitrary code wi...