Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > comp.sys.mac.system > #72982
| Path | csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!nntp.club.cc.cmu.edu!micro-heart-of-gold.mit.edu!bloom-beacon.mit.edu!bloom-beacon.mit.edu!panix!MIX!Blackbird |
|---|---|
| From | billy@MIX.COM |
| Newsgroups | comp.sys.mac.system |
| Subject | Re: Hidden backdoor API to root privileges in Apple OS X |
| Date | Fri, 10 Apr 2015 08:47:57 +0000 (UTC) |
| Organization | PANIX Public Access Internet and UNIX, NYC |
| Lines | 17 |
| Message-ID | <mg82nt$b6t$1@reader2.panix.com> (permalink) |
| References | <mg7im2$5io$1@dont-email.me> |
| NNTP-Posting-Host | panix5.panix.com |
| X-Trace | reader2.panix.com 1428655677 11485 166.84.1.5 (10 Apr 2015 08:47:57 GMT) |
| X-Complaints-To | abuse@panix.com |
| NNTP-Posting-Date | Fri, 10 Apr 2015 08:47:57 +0000 (UTC) |
| Xref | csiph.com comp.sys.mac.system:72982 |
Show key headers only | View raw
tmo1138 <tmo1138@tmo1138.org> quotes Emil Kvarnhammar:
> The Admin framework in Apple OS X contains a hidden backdoor API to
> root privileges. It's been there for several years (at least since
> 2011), I found it in October 2014 and it can be exploited to escalate
> privileges to root from any user account in the system.
Now we know what's up with what was mentioned here last October.
OSX 10.10 hack - privilege escalation through rootpipe
https://www.youtube.com/watch?v=fCQg2I_pFDk
Billy Y..
--
sub #'9+1 ,r0 ; convert ascii byte
add #9.+1 ,r0 ; to an integer
bcc 20$ ; not a number
Back to comp.sys.mac.system | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Hidden backdoor API to root privileges in Apple OS X tmo1138 <tmo1138@tmo1138.org> - 2015-04-09 21:14 -0700
Re: Hidden backdoor API to root privileges in Apple OS X Oregonian Haruspex <bob_davis_retired@yahoo.com> - 2015-04-09 23:29 -0700
Re: Hidden backdoor API to root privileges in Apple OS X billy@MIX.COM - 2015-04-10 08:47 +0000
Re: Hidden backdoor API to root privileges in Apple OS X dempson@actrix.gen.nz (David Empson) - 2015-04-19 18:05 +1200
Re: Hidden backdoor API to root privileges in Apple OS X Tim Streater <timstreater@greenbee.net> - 2015-04-19 10:07 +0100
Re: Hidden backdoor API to root privileges in Apple OS X Lewis <g.kreme@gmail.com.dontsendmecopies> - 2015-04-19 09:56 +0000
Re: Hidden backdoor API to root privileges in Apple OS X dempson@actrix.gen.nz (David Empson) - 2015-04-19 22:02 +1200
Re: Hidden backdoor API to root privileges in Apple OS X Tim Streater <timstreater@greenbee.net> - 2015-04-19 13:11 +0100
Re: Hidden backdoor API to root privileges in Apple OS X Electric Comet <electric-comet@mail.invalid> - 2015-04-22 08:59 -0700
Re: Hidden backdoor API to root privileges in Apple OS X Tim Streater <timstreater@greenbee.net> - 2015-04-22 17:33 +0100
Re: Hidden backdoor API to root privileges in Apple OS X Electric Comet <electric-comet@mail.invalid> - 2015-04-22 09:40 -0700
Re: Hidden backdoor API to root privileges in Apple OS X dempson@actrix.gen.nz (David Empson) - 2015-04-23 12:10 +1200
Re: Hidden backdoor API to root privileges in Apple OS X Electric Comet <electric-comet@mail.invalid> - 2015-04-24 13:42 -0700
Re: Hidden backdoor API to root privileges in Apple OS X dempson@actrix.gen.nz (David Empson) - 2015-04-25 12:50 +1200
Re: Hidden backdoor API to root privileges in Apple OS X Electric Comet <electric-comet@mail.invalid> - 2015-04-27 09:36 -0700
Re: Hidden backdoor API to root privileges in Apple OS X Electric Comet <electric-comet@mail.invalid> - 2015-04-22 09:01 -0700
csiph-web