INTEGO SECURITY MEMO - JANUARY 6, 2007
Apple Disk Management BOM Local Privilege Escalation Vulnerability

Exploit: OSX.Rooter.BlackCat.A

Discovered: January 6, 2007

Risk: Critical

Description: This 0-day hacker rooter tool, which has been seen in the wild, takes advantage of a vulnerability in the way the diskutil tool repairs Mac OS X file permissions. This vulnerability can allow arbitrary code to be executed and rogue permissions to be set, allowing backdoors to be installed, or granting root access. The vulnerability exists in Mac OS X 10.4.8 and may also exist in previous versions of Mac OS X.

Means of protection: Intego VirusBarrier X and VirusBarrier X4, with virus definitions dated January 6, 2007 or later, protect against this vulnerability.

About Intego
Intego develops and sells desktop Internet security and privacy software for Macs.

Intego provides the widest range of software to protect users and their Macs from the dangers of the Internet. Intego's multilingual software and support repeatedly receives awards from Mac magazines, and protects more than one million users in over 60 countries. Intego has headquarters in the USA, France and Japan. For further information, please visit www.intego.com.

home | contact