Live data from Hacker News

Mac OS X Sudo Password Bypass

packetstormsecurity.com

51–53 of 53 posts

Re: Mac OS X Sudo Password Bypass

#52

Unable to access this url from UAE :-(

Also unable to access it from a Virgin train in the UK: 'restricted' because the site is considered 'malicious or inappropriate'.

Can't help wondering if this is how things will be under the upcoming UK Internet 'safety' measures (assuming Cameron survives that long.)

Re: Mac OS X Sudo Password Bypass

#53
post #46

sudo offers updated binaries for OS X 10.5 and up so you don't have to wait for Apple: http://www.sudo.ws/sudo/download.html#binary If you don't trust the binaries, I found it easy to update the vulnerable sudo v1.7.0 on my OS X 10.6 machine by building from source and overwriting the one supplied by Apple: 0) Backup /usr/bin/sudo (temporarily; you'll want to delete the old sudo after verifying the new one works), an…

If you use `configure --prefix=/usr/bin`, you'll end up with sudo installed in /usr/bin/bin/sudo. Instead, try ./configure --prefix=/usr to use the /usr hierarchy (/usr/bin, /usr/sbin, /usr/share, etc...) instead of the /usr/local hierarchy. Also, if you're able to run an executable in the current directory without specifying its location, as in configure instead of ./configure, then you have . (pwd) in your $PATH, w…

You're absolutely right on all counts. You caught me writing that sloppily from memory. Thank you for the corrections!
Post reply on HN