Hidden backdoor API to root privileges in Apple OS X

From	tmo1138 <tmo1138@tmo1138.org>
Newsgroups	comp.sys.mac.system
Subject	Hidden backdoor API to root privileges in Apple OS X
Date	2015-04-09 21:14 -0700
Organization	tmo1138
Message-ID	<mg7im2$5io$1@dont-email.me> (permalink)

Show all headers | View raw

tl;dr

The Admin framework in Apple OS X contains a hidden backdoor API to 
root privileges. It’s been there for several years (at least since 
2011), I found it in October 2014 and it can be exploited to escalate 
privileges to root from any user account in the system.

<https://truesecdev.wordpress.com/2015/04/09/hidden-backdoor-api-to-root-privileges-in-apple-os-x/> 




-- 
The game of life is a game of boomerangs.  Our thoughts, deeds and words 
return to us sooner or later with astounding accuracy.

Back to comp.sys.mac.system | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

Hidden backdoor API to root privileges in Apple OS X tmo1138 <tmo1138@tmo1138.org> - 2015-04-09 21:14 -0700
  Re: Hidden backdoor API to root privileges in Apple OS X Oregonian Haruspex <bob_davis_retired@yahoo.com> - 2015-04-09 23:29 -0700
  Re: Hidden backdoor API to root privileges in Apple OS X billy@MIX.COM - 2015-04-10 08:47 +0000
    Re: Hidden backdoor API to root privileges in Apple OS X dempson@actrix.gen.nz (David Empson) - 2015-04-19 18:05 +1200
      Re: Hidden backdoor API to root privileges in Apple OS X Tim Streater <timstreater@greenbee.net> - 2015-04-19 10:07 +0100
        Re: Hidden backdoor API to root privileges in Apple OS X Lewis <g.kreme@gmail.com.dontsendmecopies> - 2015-04-19 09:56 +0000
        Re: Hidden backdoor API to root privileges in Apple OS X dempson@actrix.gen.nz (David Empson) - 2015-04-19 22:02 +1200
          Re: Hidden backdoor API to root privileges in Apple OS X Tim Streater <timstreater@greenbee.net> - 2015-04-19 13:11 +0100
          Re: Hidden backdoor API to root privileges in Apple OS X Electric Comet <electric-comet@mail.invalid> - 2015-04-22 08:59 -0700
            Re: Hidden backdoor API to root privileges in Apple OS X Tim Streater <timstreater@greenbee.net> - 2015-04-22 17:33 +0100
              Re: Hidden backdoor API to root privileges in Apple OS X Electric Comet <electric-comet@mail.invalid> - 2015-04-22 09:40 -0700
            Re: Hidden backdoor API to root privileges in Apple OS X dempson@actrix.gen.nz (David Empson) - 2015-04-23 12:10 +1200
              Re: Hidden backdoor API to root privileges in Apple OS X Electric Comet <electric-comet@mail.invalid> - 2015-04-24 13:42 -0700
                Re: Hidden backdoor API to root privileges in Apple OS X dempson@actrix.gen.nz (David Empson) - 2015-04-25 12:50 +1200
                Re: Hidden backdoor API to root privileges in Apple OS X Electric Comet <electric-comet@mail.invalid> - 2015-04-27 09:36 -0700
  Re: Hidden backdoor API to root privileges in Apple OS X Electric Comet <electric-comet@mail.invalid> - 2015-04-22 09:01 -0700

csiph-web