INTEGO SECURITY MEMO - JANUARY 6, 2007
Apple Disk Management BOM Local Privilege Escalation Vulnerability

Exploit: OSX.Rooter.BlackCat.A

Discovered: January 6, 2007

Risk: Critical

Description: This 0-day hacker rooter tool, which has been seen in the wild, takes advantage of a vulnerability in the way the diskutil tool repairs Mac OS X file permissions. This vulnerability can allow arbitrary code to be executed and rogue permissions to be set, allowing backdoors to be installed, or granting root access. The vulnerability exists in Mac OS X 10.4.8 and may also exist in previous versions of Mac OS X.

Means of protection: Intego VirusBarrier X and VirusBarrier X4, with virus definitions dated January 6, 2007 or later, protect against this vulnerability.

About Intego

Intego develops and sells Internet security and privacy software exclusively for Macs and iOS devices.

Intego provides the widest range of software to protect users and their Macs and iOS devices from the dangers of the Internet. Intego's multilingual software and support regularly receives awards from Mac magazines, and protects more than one million users in over 100 countries. Intego has headquarters in the USA, France and Japan. For further information, visit www.intego.com.

home | contact