{"id":17283,"date":"2013-08-28T09:40:12","date_gmt":"2013-08-28T16:40:12","guid":{"rendered":"http:\/\/www.intego.com\/mac-security-blog\/?p=17283"},"modified":"2013-09-03T11:20:57","modified_gmt":"2013-09-03T18:20:57","slug":"java-and-sudo-exploits-added-to-popular-toolkits","status":"publish","type":"post","link":"https:\/\/www.intego.com\/mac-security-blog\/java-and-sudo-exploits-added-to-popular-toolkits\/","title":{"rendered":"Java and Sudo Exploits Added to Popular Toolkits"},"content":{"rendered":"

\"JavaSudoExploits\"<\/a><\/p>\n

This is apparently the week for people to add interesting things to exploit kits!<\/p>\n

In case you’ve not already scoured all traces of Java from your machine, it’s time for your (ir)regular reminder that Java is very problematic and should be updated religiously if you’re going to use it at all. The Neutrino exploit kit has added code for a Java exploit<\/a> that is unpatched in Java 6. Java 7 was patched in June of 2013.<\/p>\n

And, that sudo vulnerability<\/a> we mentioned a few months back has been added to the Metasploit exploit kit<\/a>, which makes it easier for attackers to implement. It’s still not fixed in OS X, though its utility is somewhat limited here. According to the Packetstorm post, “This Metasploit module will fail silently if the user is not an admin or if the user has never run the sudo command.” I imagine the bulk of users are in the latter camp, and the former is an excellent reminder that you shouldn’t be running with Admin permissions for day-to-day activities. The NSA will even back me up on that<\/a> recommendation! Granted, a malicious user or a trojan grabbing admin rights can get around those conditions.<\/p>\n

If you’re following good security practices, neither of these things are going to be a big deal for you. Just in case, here’s a quick reminder:<\/p>\n