Mac Forum / Applications / Mac Applications / June 2008

-------- Original Message --------
Subject:     [Fwd: Major Mac OS X Vulnerability]
Date:     Thu, 19 Jun 2008 13:42:34 -0400
From:     Vivian Hasiuk <hasiuk@physics.upenn.edu>
To:     undisclosed-recipients:;

Vivian, could you please forward this along to the department?  Thanks.
-------- Original Message --------
Subject:     Major Mac OS X Vulnerability
Date:     Thu, 19 Jun 2008 12:25:14 -0400
From:     Christopher M. Leary <learycm@sas.upenn.edu>
To:     hasiuk@physics.upenn.edu
CC:     help@physics.upenn.edu <help@physics.upenn.edu>

---

Hello Everyone,

There has been a major vulnerability found in the screen sharing utility
built into Mac OS X 10.4 and 10.5 which allows root (admin) access to
the attacker.  It is a simple attack to execute and is a very large
vulnerability.  This attack will work even if you do not use or have not
enabled the screen sharing utility.

However, there is an easy fix where we can just remove permissions from
the vulnerable client.

You can fix this by opening up Terminal (hit Apple-Spacebar then type in
Terminal) and pasting in the following command:

sudo chmod -s
/System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/MacOS/ARDAgent

After executing the above command it will ask you for your password.
While typing in your password no asterisks will appear, just blank
space.  If the command executed properly it should look like nothing
happened and you can just type exit and hit Apple-Q to quit.

If you have any Mac machines with OS X 10.4 or 10.5 installed and would
like assistance closing this hole please let us know by emailing
"help@physics.upenn.edu" and one of us will come help.