Comments on: Mac OS X – Epic Fail

By: changelog

changelog — Mon, 23 Jun 2008 11:20:45 +0000

@Scott Swank: It still works, because it is compressed recursively.

@Gerry Power: Thanks. Updated

Gerry Power — Sun, 22 Jun 2008 19:27:56 +0000

You created a tar file of the app, but you also need to remove the original app:
sudo rm -r ARDAgent.app

Otherwise, the application is still available, leaving the security hole.

Web 2.0 Announcer — Fri, 20 Jun 2008 15:18:16 +0000

Mac OS X root escalation through security flaw…

[...]Security breach that allows a regular user to escalate to root privileges using AppleScript. Works through SSH too.[...]…

Scott Swank — Fri, 20 Jun 2008 15:02:50 +0000

You forgot /Content/ at the end of that path.

Mac OS X - Epic Fail — Fri, 20 Jun 2008 14:53:52 +0000

Anonymous — Thu, 19 Jun 2008 12:29:21 +0000

zomgwtfbbq!

Anyways, sudo rm -rf / also solves it >:3