OS X Attack Code Released, and iTunes AAC Security Vulnerability Patched

MacRumors · 05:24 PM

http://www.macrumors.com/images/macrumorsthreadlogo.gif

According to News.com, security researcher Kevin Finisterre at Digital Munition has released "attack code" to the public that can locally exploit the launchd daemon.

Quote:

"Attackers may exploit this issue to execute arbitrary code with elevated privileges," Symantec said in a security alert to customers that was updated on Thursday.

The code affects Mac OS 10.4.0 - 10.4.6 (excluding the recently released 10.4.7 and 10.3.x). The same researcher also created a proof-of-concept Bluetooth exploiting worm earlier this year. According to News.com, his actions are in part to show that Apple software is not unbreakable.

Also mentioned in the article is that iTunes 6.0.5 is quietly patching an AAC parsing flaw.

Quote:

Parsing a maliciously-crafted AAC file could cause iTunes to terminate or potentially execute arbitrary code. iTunes 6.0.5 addresses this issue by improving the validation checks used when loading AAC files.

Digg this story

dizastor · Jun 29, 2006, 04:12 PM

another proof of concept. This isn't cool. Eventually someone will release one of these things in a less than sanitary manner.

iGary · Jun 29, 2006, 04:13 PM

How about in English?

KEL9000 · Jun 29, 2006, 04:16 PM

Quote:

Originally Posted by greenmonsterman

another proof of concept. This isn't cool. Eventually someone will release one of these things in a less than sanitary manner.

at least they released it after it had been fixed by apple.

Peace · Jun 29, 2006, 04:18 PM

More bad publicity for Apple..Shows me that Apple is becoming a threat to the PeeCee world and because of this is coming under increasing PR attacks.

michaeldmartin · Jun 29, 2006, 04:19 PM

They have released a virus in a less-than-sanitary manner: Skype. (Leaked Beta) It was an accident, from a bug.. If you want to think of it as a virus, that is.

joshysquashy · Jun 29, 2006, 04:21 PM

Yet another example of why you should always download updates as soon as they are released - they often fix issues, and often highlight previous flaws which some people then take advantage of.

caveman_uk · Jun 29, 2006, 04:21 PM

Quote:

Originally Posted by Macrumors

[ According to News.com, his actions are in part to show that Apple software is not unbreakable.

So it's not just willy waving then? Oh good.

Seriously, Apple has one day to get people patched and this 'security researcher' releases exploit code on the web. Well thank you. At least it's only a local exploit.

rowanhall · Jun 29, 2006, 04:22 PM

Quote:

Originally Posted by greenmonsterman

another proof of concept. This isn't cool. Eventually someone will release one of these things in a less than sanitary manner.

exactally what i was thinking bro! i like living in my wee bubble...

RichP · Jun 29, 2006, 04:25 PM

http://rtechnic.com/images/quantumleap.jpg

As stated indirectly by mlr, still better than Windows. Unfortuneatly, Apple's high profile is going to make it more of a target, even if the marketshare is as low as it is.

zap2 · Jun 29, 2006, 04:25 PM

well since 10.4.7 stops it, no real worrys

michaelrjohnson · Jun 29, 2006, 04:29 PM

Gosh... a single proof of concept of a local exploit...

This really isn't that big of a deal. Moral of the story: run Software Update regularly. Apple has done really well in patching their own holes, and responding to these types of "exploits".

That being said, nobody (even Apple) claimed that Macs are somehow immune to security exploits, attacks, and viruses. Nobody should be surprised that these types of things exist, and will someday have a greater impact on your workflow.

MacsRgr8 · Jun 29, 2006, 04:30 PM

Quote:

Originally Posted by zap2

well since 10.4.7 stops it, no real worrys

Yep.. the're too late IMHO.

Doctor Q · Jun 29, 2006, 04:30 PM

Quote:

Originally Posted by KEL9000

at least they released it after it had been fixed by apple.

Mac OS X 10.4.7 may fix it for Mac OS X 10.4, but Mac OS X 10.3 and earlier may have the same vulnerability. I generally feel safer with the latest O.S. release, even though new flaws will invariably be discovered, because at least the widely known flaws are fixed.

longofest · Jun 29, 2006, 04:31 PM

Quote:

Originally Posted by Doctor Q

Mac OS X 10.4.7 may fix it for Mac OS X 10.4, but Mac OS X 10.3 and earlier may have the same vulnerability. I generally feel safer with the latest O.S. release, even though new flaws will invariably be discovered, because at least the widely known flaws are fixed.

10.3 is not affected by the launchd vulnerability.

Jetson · Jun 29, 2006, 04:32 PM

I liked that worm crawling out of the apple graphic

Mac Pwnz You · Jun 29, 2006, 04:32 PM

Who really cares? No software is "un-breakable" and nobody ever said that Apple software was. It is still, better, more user-friendly, and more secure than Windows.

Texas04 · Jun 29, 2006, 04:33 PM

I have to agree with the Water analogy posted above...

My mac alows me to be safer, not immune, and work better than I could ever do with Windows... And Apple does a good job of securing its software, and making sure that everything runs fine "out of the box".

"I'd rather drink water from my local restaraunt, than one in Mexico"

P.S. I'm Mexican to....

And i still love my heritiage and home country!!!

longofest · Jun 29, 2006, 04:35 PM

Quote:

Originally Posted by Jetson

I liked that worm crawling out of the apple graphic

It's actually a really old graphic we have on the system. We've shunned some of the older ones for the more classic "news" and "rumor" graphics (aka the newspaper and question mark), but I thought I'd bring out the worm for this one

Cubert · Jun 29, 2006, 04:36 PM

Obviously, Apple is on top of things. Their latest releases patch the issue.

iJaz · Jun 29, 2006, 04:37 PM

"Mac's not invulnerable"

tveric · Jun 29, 2006, 04:46 PM

Quote:

Originally Posted by iJaz

"Mac's not invulnerable"

We really need a Slashdot-like moderating system.... -1 Troll!

yellow · Jun 29, 2006, 04:54 PM

Quote:

Originally Posted by Macrumors

According to News.com, his actions are in part to show that Apple software is not unbreakable.

Damnit, who keeps saying that it is? Well, cut it out!!

Onizuka · Jun 29, 2006, 04:55 PM

*yawn*

So, really, who gives a damn? I don't want proof-of-concept. I want proof that it works in the wild. Come on now. Someone do something here. Quit making all of these claims. It's like foreplay without the ending. Ya know? WTF?

dejo · Jun 29, 2006, 04:56 PM

Wait. According to the "security through obscurity" people, nobody is writing exploits for Mac OS X because of its low marketshare. How can this be?

Jun 29, 2006, 04:12 PM	#2
dizastor macrumors 6502a Join Date: Dec 2001 Location: Los Angeles	another proof of concept. This isn't cool. Eventually someone will release one of these things in a less than sanitary manner. __________________ ejc on Twitter

Jun 29, 2006, 04:13 PM	#3
iGary macrumors Demi-God Join Date: May 2004 Location: La Villa Strangiato	How about in English? __________________ Mac Pro Octophallus 2.8 \| 13" UMBP 2.26

Jun 29, 2006, 04:25 PM	#10
RichP macrumors 68000 Join Date: Jun 2003 Location: Motor City	http://rtechnic.com/images/quantumleap.jpg As stated indirectly by mlr, still better than Windows. Unfortuneatly, Apple's high profile is going to make it more of a target, even if the marketshare is as low as it is. __________________ "My ultimate vocation in life is to be an irritant" – Elvis Costello

Jun 29, 2006, 04:25 PM	#11
zap2 macrumors 601 Join Date: Mar 2005 Location: NJ	well since 10.4.7 stops it, no real worrys __________________ "We can't all be heroes because somebody has to sit on the curb and clap as they go by." Will Rogers

Jun 29, 2006, 04:29 PM	#12
michaelrjohnson macrumors 68020 Join Date: Aug 2000 Location: 54140	Gosh... a single proof of concept of a local exploit... This really isn't that big of a deal. Moral of the story: run Software Update regularly. Apple has done really well in patching their own holes, and responding to these types of "exploits". That being said, nobody (even Apple) claimed that Macs are somehow immune to security exploits, attacks, and viruses. Nobody should be surprised that these types of things exist, and will someday have a greater impact on your workflow. __________________

Jun 29, 2006, 04:18 PM	#5
Peace macrumors Demi-God Join Date: Apr 2005 Location: On top of the Storm Peaks waiting for the Time-Lost Proto Drake	More bad publicity for Apple..Shows me that Apple is becoming a threat to the PeeCee world and because of this is coming under increasing PR attacks.

Jun 29, 2006, 04:19 PM	#6
michaeldmartin macrumors regular Join Date: Jun 2006 Location: Testicles. That is all.	They have released a virus in a less-than-sanitary manner: Skype. (Leaked Beta) It was an accident, from a bug.. If you want to think of it as a virus, that is.

Jun 29, 2006, 04:21 PM	#7
joshysquashy macrumors 6502a Join Date: May 2005 Location: UK	Yet another example of why you should always download updates as soon as they are released - they often fix issues, and often highlight previous flaws which some people then take advantage of.

Jun 29, 2006, 04:32 PM	#16
Jetson macrumors 6502 Join Date: Oct 2003	I liked that worm crawling out of the apple graphic

Jun 29, 2006, 04:32 PM	#17
Mac Pwnz You macrumors newbie Join Date: Jun 2006	Who really cares? No software is "un-breakable" and nobody ever said that Apple software was. It is still, better, more user-friendly, and more secure than Windows.

Jun 29, 2006, 04:33 PM	#18
Texas04 macrumors 6502a Join Date: Jul 2005 Location: Texas	I have to agree with the Water analogy posted above... My mac alows me to be safer, not immune, and work better than I could ever do with Windows... And Apple does a good job of securing its software, and making sure that everything runs fine "out of the box". "I'd rather drink water from my local restaraunt, than one in Mexico" P.S. I'm Mexican to.... And i still love my heritiage and home country!!! __________________ My Computers- MacBook Pro 2.0 GHZ~ 1.25 GB Ram MacBook 1.86 GHZ 2GB Ram 30GB iPod Won from NASA (its engraved) Texas04's Website!

Jun 29, 2006, 04:36 PM	#20
Cubert macrumors member Join Date: Apr 2005	Obviously, Apple is on top of things. Their latest releases patch the issue.

Jun 29, 2006, 04:37 PM	#21
iJaz macrumors 6502a Join Date: Dec 2004	"Mac's not invulnerable" __________________ Home: PM G5 2.3 GHz 4.5 GB RAM, 20" ACD, 1G 512 MB and 2G 1GB Shuffle, 4 GB nano RED, 80 GB iPod, iPhone 3G S⃣ 32 GB Black. Work: MacBook C2D 2.0 GHz 4GB RAM

Jun 29, 2006, 04:55 PM	#24
Onizuka macrumors 68040 Join Date: Apr 2005 Location: Why are you wearing that stupid man suit?	yawn So, really, who gives a damn? I don't want proof-of-concept. I want proof that it works in the wild. Come on now. Someone do something here. Quit making all of these claims. It's like foreplay without the ending. Ya know? WTF? __________________ On Diebold: "i went to get cash last night and ended up voting republican. wonder how much that's gonna cost me." -Zimv20

Jun 29, 2006, 04:56 PM	#25
dejo macrumors Demi-God Join Date: Sep 2004 Location: On the roadside	Wait. According to the "security through obscurity" people, nobody is writing exploits for Mac OS X because of its low marketshare. How can this be?

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode