[22881] in bugtraq
Re: Mac OS X setuid root security hole
daemon@ATHENA.MIT.EDU (Florian Kohl)
Wed Oct 17 16:13:19 2001
Mime-Version: 1.0
Message-Id: <p05101000b7f3830f1e97@[10.0.1.2]>
In-Reply-To: <5.1.0.14.2.20011017124659.02820020@mail.biapo.com>
Date: Wed, 17 Oct 2001 20:50:29 +0200
To: bugtraq@securityfocus.com
From: Florian Kohl <floh@blafasel.org>
Content-Type: text/plain; charset="us-ascii" ; format="flowed"
> - Open up the terminal application
> - Quit the terminal application
> - Open up NetInfo Manager (leave it in the foreground)
> - Open up the Terminal application form the "Recent Items" list in
>the Apple Menu.
>
>You should now be logged in as root!
confirmed on osx 10.1 with all available updates (none)
[malaria:~] floh% uname -a
Darwin malaria 1.4 Darwin Kernel Version 1.4: Sun Sep 9 15:39:59 PDT
2001; root:xnu/xnu-201.obj~1/RELEASE_PPC Power Macintosh powerpc
cheers floh
