Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.sys.mac.system > #72982

Re: Hidden backdoor API to root privileges in Apple OS X

From billy@MIX.COM
Newsgroups comp.sys.mac.system
Subject Re: Hidden backdoor API to root privileges in Apple OS X
Date 2015-04-10 08:47 +0000
Organization PANIX Public Access Internet and UNIX, NYC
Message-ID <mg82nt$b6t$1@reader2.panix.com> (permalink)
References <mg7im2$5io$1@dont-email.me>

Show all headers | View raw

tmo1138 <tmo1138@tmo1138.org> quotes Emil Kvarnhammar:

> The Admin framework in Apple OS X contains a hidden backdoor API to 
> root privileges. It's been there for several years (at least since 
> 2011), I found it in October 2014 and it can be exploited to escalate 
> privileges to root from any user account in the system.

Now we know what's up with what was mentioned here last October.

OSX 10.10 hack - privilege escalation through rootpipe
https://www.youtube.com/watch?v=fCQg2I_pFDk

Billy Y..
-- 
        sub     #'9+1   ,r0             ; convert ascii byte
	add     #9.+1   ,r0             ; to an integer
	bcc     20$                     ; not a number

Back to comp.sys.mac.system | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Hidden backdoor API to root privileges in Apple OS X tmo1138 <tmo1138@tmo1138.org> - 2015-04-09 21:14 -0700
  Re: Hidden backdoor API to root privileges in Apple OS X Oregonian Haruspex <bob_davis_retired@yahoo.com> - 2015-04-09 23:29 -0700
  Re: Hidden backdoor API to root privileges in Apple OS X billy@MIX.COM - 2015-04-10 08:47 +0000
    Re: Hidden backdoor API to root privileges in Apple OS X dempson@actrix.gen.nz (David Empson) - 2015-04-19 18:05 +1200
      Re: Hidden backdoor API to root privileges in Apple OS X Tim Streater <timstreater@greenbee.net> - 2015-04-19 10:07 +0100
        Re: Hidden backdoor API to root privileges in Apple OS X Lewis <g.kreme@gmail.com.dontsendmecopies> - 2015-04-19 09:56 +0000
        Re: Hidden backdoor API to root privileges in Apple OS X dempson@actrix.gen.nz (David Empson) - 2015-04-19 22:02 +1200
          Re: Hidden backdoor API to root privileges in Apple OS X Tim Streater <timstreater@greenbee.net> - 2015-04-19 13:11 +0100
          Re: Hidden backdoor API to root privileges in Apple OS X Electric Comet <electric-comet@mail.invalid> - 2015-04-22 08:59 -0700
            Re: Hidden backdoor API to root privileges in Apple OS X Tim Streater <timstreater@greenbee.net> - 2015-04-22 17:33 +0100
              Re: Hidden backdoor API to root privileges in Apple OS X Electric Comet <electric-comet@mail.invalid> - 2015-04-22 09:40 -0700
            Re: Hidden backdoor API to root privileges in Apple OS X dempson@actrix.gen.nz (David Empson) - 2015-04-23 12:10 +1200
              Re: Hidden backdoor API to root privileges in Apple OS X Electric Comet <electric-comet@mail.invalid> - 2015-04-24 13:42 -0700
                Re: Hidden backdoor API to root privileges in Apple OS X dempson@actrix.gen.nz (David Empson) - 2015-04-25 12:50 +1200
                Re: Hidden backdoor API to root privileges in Apple OS X Electric Comet <electric-comet@mail.invalid> - 2015-04-27 09:36 -0700
  Re: Hidden backdoor API to root privileges in Apple OS X Electric Comet <electric-comet@mail.invalid> - 2015-04-22 09:01 -0700

csiph-web