Attack code out for Apple flaw

News.com (excerpt) ^ | June 29, 2006

[HAL9000]

Excerpt -

Attack code that exploits a flaw in Apple Computer's Mac OS X was publicly released Wednesday, increasing the urgency to patch.

The code's arrival comes just a day after Apple made an update available for its operating system. The malicious program takes advantage of a locally exploitable vulnerability in an operating system component called "launchd".

"Attackers may exploit this issue to execute arbitrary code with elevated privileges," Symantec said in a security alert to customers that was updated on Thursday.

On Tuesday, Apple delivered Mac OS X 10.4.7. The operating system update repairs a total of five flaws. Four of them affect both the client version of Mac OS X. The other, in the ClamAV antivirus software, has an impact on the server release.

~ snip ~

[HAL9000]

It's not a virus or a worm. In my opinion, this exploit won't be getting much usage.

[coconutt2000]

Not a virus, not a worm - and you have to have local access to the machine.