INTEGO SECURITY MEMO - JANUARY 10, 2007
Local Privilege Escalation Vulnerability And Mac OS X Backdoors

Exploits: OSX.Rooter.ApeGate.A, OSX.ApeGate.A, OSX.ApeGate.B

Discovered: January 10, 2007

Risk: Critical

Description: This rooter tool takes advantage of a vulnerability in the way Mac OS X handles some folder permissions. This vulnerability can allow arbitrary code to be executed and rogue permissions to be set, thereby allowing backdoors to be installed, or granting root access. The vulnerability exists in Mac OS X 10.4.8 and may also exist in previous versions of Mac OS X.

Means of protection: Intego VirusBarrier X and VirusBarrier X4, with virus definitions dated January 10, 2007 or later, protect against this vulnerability.

About Intego
Intego develops and sells desktop Internet security and privacy software for Macintosh.

Intego provides the widest range of software to protect users and their Macs from the dangers of the Internet. Intego's multilingual software and support repeatedly receives awards from Mac magazines, and protects more than one million users in over 60 countries. Intego has headquarters in the USA, France and Japan.

As the dangers of the Internet grow, Intego is hard at work, developing new software to protect users and their Macs from the latest security and privacy threats.

We protect your world.

home | contact