Mac OS X vulnerable to one-two combo attack

TalkBack 14 of 38:

Next »

« Previous

• Thread View
• Flat View

Genuine Issue

According to this advisory at Secunia, this is a critical flaw
that Apple put into OS X.

1) The problem is that the "help" URI handler allows
execution of arbitrary local scripts (.scpt) via the classic
directory traversal character sequence using
"help:runscript".

2) It is reportedly also possible to silently place arbitrary
files in a known location, including script files, on a user's
system using the "disk" URI handler.

Various variants of the URI handler vulnerabilities are
currently being discussed.

This has been confirmed on Macintosh OS X using Safari
1.2.1 (v125.1) and Internet Explorer 5.2. Other browsers
may also be used as attack vectors.

NOTE: The rating has been upgraded to "Extremely Critical"
because the issues are very easy to exploit and a large
number of working exploits are available.

Solution:{/b]
There is no efficient solution.

Ref:http://secunia.com/advisories/11622/

Posted by: Fred Fredrickson   Posted on: 05/19/04 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Building the Virtualized Enterprise with VMware Iinfrastructure VMware VMware virtualization software has been adopted by over 120,000 enterprise ... Download Now
• Three Steps You Need to Know to Stop Data Loss Varonis Sensitive data exposed to misuse or loss... it is the stuff of nightmares ... Download Now
• Why Isn't Server Virtualization Saving Us More? A Few Small Changes May Dramatically Increase Your Efficiency VMware Companies have rapidly adopted server virtualization over the past few ... Download Now