May 25, 2012 - 05:30 PM EDT — AAPL: 562.29 (-3.03, -0.54%) | NASDAQ: 2837.53 (-1.85, -0.07%)

Report: Apple developing fix for automatic execution of shell scripts

Tuesday, February 21, 2006 · 4:14 pm · 37 Comments

“A serious flaw in Mac OS X could be a conduit for attackers to install malicious code on computers running the Apple Computer software, experts warned Tuesday,” Joris Evers reports for CNET News. “Visiting a malicious Web site using Apple’s Safari Web browser could result in a rootkit, a back door or other malicious software being installed on the computer without the user noticing anything, experts said. ‘This could be really bad,’ the SANS Internet Storm Center, which tracks network threats, said Tuesday. ‘Attackers can run shell scripts on your computer remotely just by visiting a malicious Web site.’”

“Apple is developing a patch for the flaw, a company representative told CNET News.com. ‘We’re working on a fix so that this doesn’t become something that could affect customers,’ the representative said, but could not give a delivery date for the update,” Evers reports.

Full article here.

MacDailyNews Note: Apple’s Mail is also affected. Please see related articles below. For now, move your Terminal application from /Applications/Utilities into a different folder until Apple’s fix is ready. As usual, only accept and open files from vendors and Web sites that you know and trust.

Advertisements:
• MacBook Pro. The first Mac notebook built upon Intel Core Duo with iLife ’06, Front Row and built-in iSight. Starting at $1999. Free shipping.
• iMac. Twice as amazing — Intel Core Duo, iLife ’06, Front Row media experience, Apple Remote, built-in iSight. Starting at $1299. Free shipping.
• iMac and MacBook Pro owners: Apple USB Modem. Easily connect to the Internet using dial-up service. Only $49.
• iPod Radio Remote. Listen to FM radio on your iPod and control everything with a convenient wired remote. Just $49.
• iPod. 15,000 songs. 25,000 photos. 150 hours of video. The new iPod. 30GB and 60GB models start at just $299. Free shipping.
• Connect iPod to your television set with the iPod AV Cable. Just $19.

Related MacDailyNews articles:
Safari web browser auto executes shell scripts; disable ‘Open ‘safe’ files after downloading’ option – February 21, 2006
Warning: Like Safari, Apple’s Mail also auto executes shell scripts – February 21, 2006

Categories: All Sites, News

Thank You for supporting MacDailyNews!

♥ Adobe Photoshop CS6 Extended for Mac - Student and Teacher Edition DVD (65171323) only $249!
♥ Blowout: Apple 15.4" MacBook Pro i7/4Core/2.0GHz/4GB/500GB (MC721LL/A) only $1,549.99 + Free Shipping from MacMall
♥ Mac Madness Save 25% on Parallels Desktop 7!
♥ 15% Off Compatible Ink. 10% Off All Others (excludes OEMs). Free Shipping over $55. Coupon: 123BLOSSOM, Expires 6.18.12
♥ Save up to 60% at the Hammacher Schlemmer Special Values Sale-While supplies last.
♥ Dragon Dictate for Mac 2.5 - New! Simply Smarter Speech Recognition
♥ Up to 30% OFF Accessories from Verizon Wireless
♥ Limited Time Offer: Get free ZAGGsmartbuds when you buy a ZAGGsparq!

Comment Feed

37 Comments

1 2 Next »

Thomas from Germany

Tuesday, February 21, 2006 - 5:29 pm · Reply

Great, I hope the warning says something like “You are about to run a shell script – press “Cancel” if you are not sure what you are doing!”
gRen

Tuesday, February 21, 2006 - 5:31 pm · Reply

Can I move terminal to the Applications folder?
tank

Tuesday, February 21, 2006 - 5:51 pm · Reply

Just rename Terminal to Term, Termin, Therminal, etc.
Thomas

Tuesday, February 21, 2006 - 5:52 pm · Reply

What about just adjusting the Terminal preferences to not automatically run scripts? Then it doesn’t matter what application attempts to launch Terminal. That would be less maintenance than moving the Terminal back and forth whenever there are system updates.

It might be some time before Apple comes up with a really good alternative, and unfortunately the guy who blabbed and shouted this flaw worldwide didn’t bother to inform Apple and let them come up with a solution. Not uncommon in this world of show-offs who don’t really care about other people’s security.

Microsoft gets the same treatment from a lot of people “reporting” security flaws by shouting them worldwide while trying to become famous for finding one. Of course, it doesn’t work because few people remember them, or at least I never do. But I am reminded of how there will always be people who care more about getting attention for themselves than caring about other people’s safety.
G3, 4 5 users

Tuesday, February 21, 2006 - 5:53 pm · Reply

A free open source app called ClamXav is a very good Anti Virus program for the Mac OS. It currently is PPC only, but the developer is working on a version for Intel based Macs. This has been used widely by many who were required to have AV software installed as a condition by IT for access to the work net.
Really

Tuesday, February 21, 2006 - 5:53 pm · Reply

I’ve turned off the open safe files setting and that’s enough for now. As with all of these “warnings,” until we see any stories of real life impacts out in the wild, I’m not going to lose any sleep over it. You can pull your hair out all day if you get scared over every use of concept that pops up out there.
Sorry, Here's The Link

Tuesday, February 21, 2006 - 5:53 pm · Reply

http://www.clamxav.com/
Mike

Tuesday, February 21, 2006 - 5:55 pm · Reply

It’s not a virus.
JohnE

Tuesday, February 21, 2006 - 5:56 pm · Reply

hmmm…I guess even at apple they have to work some crisis overtime every now and then.
Kenneth Dalton Pangburn III

Tuesday, February 21, 2006 - 5:57 pm · Reply

<quote>What about just adjusting the Terminal preferences to not automatically run scripts? </quote>

I agree. I just changed the permissions of Terminal.app to only run when i’m logged in as an administrator. My non-admin-user can’t even open terminal now (or run scripts of course).
Be scared

Tuesday, February 21, 2006 - 5:57 pm · Reply

“For now, move your Terminal application from /Applications/Utilities into a different folder until Apple’s fix is ready.”

Yeah, like my mom and grandma are going to understand that….

“You told us when we bought the applecomputer that nothing ever is wrong with it!”
Preston

Tuesday, February 21, 2006 - 6:06 pm · Reply

Hey, not everything’s perfect. But I doubt anybody’s mom or grandmas will ever be affected by this anyway. A Security Update will be in Software Update by tomorrow, I’d guess.
Jim

Tuesday, February 21, 2006 - 6:07 pm · Reply

Be scared,

Write an AppleScript for Grandma that does it for her, then compress it and send it to her.

Could this idea be another flaw
MacDude

Tuesday, February 21, 2006 - 6:24 pm · Reply

Well at least we can count on Apple acting fast.

However this causes a problem because Apple throws in some curves in the updates which break programs.

They also tend to shorten the lifespan of their hardware by introducing things to make the OS slow down.

But you can’t get the security updates, unless you take the baggage along with it.
gwm

Tuesday, February 21, 2006 - 6:29 pm · Reply

I’m a grandpa. Former carpenter without tech background. Grandkids are approaching thirty years old. My Terminal’s in another folder. The do-hickey in the Safari prefs is unchecked.

Next?
Wingsy

Tuesday, February 21, 2006 - 6:46 pm · Reply

MacDude said “They also tend to shorten the lifespan of their hardware by introducing things to make the OS slow down.”

Huh??? Dude, where have you been? You seem to forget that with nearly every system update, things run FASTER, not SLOWER, especially on older systems. You must be thinking of Windows updates, cause what you just said is absolutely false.
informed

Tuesday, February 21, 2006 - 7:01 pm · Reply

MacDude says “…tend to shorten the lifespan of their hardware by introducing things to make the OS slow down.”

I respond: “Huh?”

I can only recall one security update that was released and quickly pulled. None have broken any programs that were properly written with respect to Apple developer guidelines.

This isn’t an issue that will require a 10.4.6 update. The security update will likely only require changing some default permissions and a line or two to prevent Terminal from running scripts without proper “shebang” headers.

How is that going to shorten hardware lifespan?
me

Tuesday, February 21, 2006 - 7:04 pm · Reply

it’s the end of an era for us mac-folk. it was good while it lasted…
gwm

Tuesday, February 21, 2006 - 7:07 pm · Reply

>They also tend to shorten the lifespan of their hardware by introducing things to make the OS slow down<

uhh .. I’ve thought that too, in years past. Hasn’t seemed to happen to me recently, however.
Noraa Haras

Tuesday, February 21, 2006 - 7:17 pm · Reply

A rootkit? I don’t think a shell script is going to have root access unless sudo at least is invoked, that would require yet another password.

People, this is easily fixed and avoided altogether.

Anyone running as Admin, please create another admin account and turn your normal user into a non-admin account. That will solve half the problem right there.