Mac Security Alert - Secunia Reports New, "Less Critical" Mac OS X Exploit

by , 12:25 PM EDT, July 27th, 2004

Security firm Secunia is reporting a new exploit in Mac OS X 10.3.4. The exploit is called "Apple Mac OS X Internet Connection Privilege Escalation," and basically allows local users to gain privileges on a Mac they shouldn't otherwise have. In other words, the exploit could allow a user with a non-admin account on a Mac, for instance in a school or business setting, to gain access to otherwise restricted parts of the Mac in question.

Secunia rates the exploit as "less critical," and offers a simple solution to the potential problem. From Secunia:

Description:
B-r00t has reported a vulnerability in Mac OS X, which can be exploited by malicious, local users to gain escalated privileges.

The problem is that "Internet Connect.app" creates the file "/tmp/ppp.log" in an insecure manner, which can be exploited via symlink attacks.

The vulnerability has been reported in Mac OS X 10.3.4 with "Internet Connect.app" version 1.3. Prior versions may also be affected.

Solution:
Remove "Internet Connect.app" from systems with untrusted users if it isn't needed.

According to the description, the flaw is only exploitable by users who have physical access and an account on a local Mac. As such, it isn't likely to affect Mac users in trusted environments, for instance in a single user situation, a home, or any environment where all users have admin powers.

Secunia has reported a few Mac OS X security flaws in recent months (see: New "Serious" Security Flaw Found In OS X - May 18th, 2004, Exploit May Cause Safari To Toss Its Cookies - November 26th, 2003), and criticized Apple's initial response to the flaw reported in May. Today's new vulnerability was reported to Secunia by someone going by the name 'B-r00t,' and was not a product of Secunia's own research.

Apple spokespersons were not immediately available for comment on this story. You can find the alert at Secunia's Web site.

Apple Mac OS X Internet Connection Privilege Escalation