Path: csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!nntp.club.cc.cmu.edu!micro-heart-of-gold.mit.edu!bloom-beacon.mit.edu!bloom-beacon.mit.edu!panix!MIX!Blackbird From: billy@MIX.COM Newsgroups: comp.sys.mac.system Subject: Re: Hidden backdoor API to root privileges in Apple OS X Date: Fri, 10 Apr 2015 08:47:57 +0000 (UTC) Organization: PANIX Public Access Internet and UNIX, NYC Lines: 17 Message-ID: References: NNTP-Posting-Host: panix5.panix.com X-Trace: reader2.panix.com 1428655677 11485 166.84.1.5 (10 Apr 2015 08:47:57 GMT) X-Complaints-To: abuse@panix.com NNTP-Posting-Date: Fri, 10 Apr 2015 08:47:57 +0000 (UTC) Xref: csiph.com comp.sys.mac.system:72982 tmo1138 quotes Emil Kvarnhammar: > The Admin framework in Apple OS X contains a hidden backdoor API to > root privileges. It's been there for several years (at least since > 2011), I found it in October 2014 and it can be exploited to escalate > privileges to root from any user account in the system. Now we know what's up with what was mentioned here last October. OSX 10.10 hack - privilege escalation through rootpipe https://www.youtube.com/watch?v=fCQg2I_pFDk Billy Y.. -- sub #'9+1 ,r0 ; convert ascii byte add #9.+1 ,r0 ; to an integer bcc 20$ ; not a number