troubleshooting/tutorials/security
05/21/2004, 11:40pm, EDT
Friday, May 21st
Another URI exploit in Mac OS X?
A MacNN reader points to yet another URI exploit in Mac OS X, not fixed in the recent Apple Security Update, that allows malicious users to embed links that can launch the Terminal application and potentially delete files: "In addition to the 'disk:', 'disks:', and 'help:' URI protocols mentioned yesterday, you should also turn off the 'telnet:' protocol. By default, it’s assigned to Terminal; I recommend using RCDefaultApp to set it to 'disabled'." Update: Unsanity describes yet another exploit method in a new white paper on not-yet-fixed security issues and offers an update to the freeware Paranoid Android 1.1 to protect Mac OS X until an official fix is available from Apple.
Filed under: troubleshooting
, 
, 8
, 
, 
, 
, 
, 
Top
subscribe to comments
for this article
The update for 10.2.8 says:
"Security Update 2004-05-24 delivers a number of security enhancements and is recommended for all Macintosh users. This update includes the following components:
HelpViewer
Terminal"
Well, here it is. The real fix is to completely separate the 'helper' type->handler resolution into two separate sections: one for trusted references generated by local applications that know they are local and that already have local access; and one for untrusted references embedded in documents. ANY document, whether local or remote, should not be able to cause the launch of any helper unless that helper is known to be prepared to deal with untrusted data.
Not "unless it's not known to have a flaw", but unless it is known to be designed to expect untrusted data.
If Microsoft had done that almost a decade ago there would have been about 90% fewer virus and worm incidents in the Windows world. If Apple doesn't do it, they will soon lose the cachet of being "virus free by design" that they have now.