New Remote Root in Mac OS X

Cysgod writes "I've released a security advisory detailing a new remote root vulnerability in Mac OS X 10.3, 10.2 and possibly earlier versions." The main thrust is that it exploits a problem in the DHCP client, to gain root access, and turning off various services can prevent attack. It is unclear why an exploit was made public before Apple resolved the problem. Apple's fix is apparently scheduled for a December release.

i thought i would never say this

[Anonymous Coward]

thank goodness iam running Windows

Re:i thought i would never say this

[toastmaster]

because windows never had any security issues...

Watch out Bill

[bodin]

Apple are about to catch up on Microsoft!

Re:i thought i would never say this

[ePhil_One]

Crazy fools! I run DOS with one of those big NFL Replay Review hoods, while inside a farady cage.

Its the only way to be safe.

Re:i thought i would never say this

[helzerr]

Damn it, why don't I ever have mod points when I need 'em... That's funny!

Slashdotting to the rescue!

[SuperBanana]

It is unclear why an exploit was made public before Apple resolved the problem

Slashdotting to the rescue! Apple has at least a few more hours now.

Re:What is telling

[Boing]

Any unix-os is a friend of mine

He's a friend of SCO! Burn him!

MAC

[Anonymous Coward]

Oh noes! A MAC exploit, that's unpossible! I thought only Windows was capable of having bugs.

why?

[silicongodcom]

"It is unclear why an exploit was made public before Apple resolved the problem."

no SCO news!

Re:Call me an Apple Apologist, but..

[feepness]

You are an Apple Apologist.

Blasted City Folks!

[GussT]

Everybody knows in the sticks that when you get a worm in your apple it just means you are getting a little extra protein in your snack.

Re:i thought i would never say this

[wo1verin3]

NO! It's because we are safe, windows doesn't have a root user. :0

Re:Exploitability Questionable

[Vandil X]

In most cases, the Mac will need to be booted into the malicious environment to be exploitable by this flaw.

In the Windows world, we call this malicious environment "Internet Explorer".

Damn

[Anonymous Coward]

Can you imagine what will happen when the hundreds of Macs on the Internet get hacked? No, me either.

Re:Exploitability Questionable

[sharkey]

In the Windows world, we call this malicious environment "Internet Explorer".

Actually, it's just called "explorer". Go ahead and check, I bet you've got this malware running on your Windows PC right now.