ESET antivirus cracks opens Apple Macs to remote root execution via man-in-middle

Minimalist · Feb 28, 2017

As outlined in this advisory today, all you need to get root-level remote code execution on a Mac is to intercept the ESET antivirus package's connection to its backend servers, put yourself in as a man-in-the-middle, and exploit an XML library hole.

Or, to use the technically correct language of Google Security Team's Jason Geffner and Jan Bee: “Vulnerable versions of ESET Endpoint Antivirus 6 are statically linked with an outdated XML parsing library and do not perform proper server authentication, allowing for remote unauthenticated attackers to perform arbitrary code execution as root on vulnerable clients.” Lovely.
Click to expand...

https://www.theregister.co.uk/2017/02/28/eset_antivirus_opens_macs_to_remote_execution_as_root/

itman · Feb 28, 2017

ESET has fixed the issue in version 6.4.168.0. Make sure you're patched up to date to avoid any trouble
Click to expand...

Log in or Sign up

ESET antivirus cracks opens Apple Macs to remote root execution via man-in-middle

Minimalist Registered Member

itman Registered Member

Log in or Sign up

ESET antivirus cracks opens Apple Macs to remote root execution via man-in-middle

Minimalist Registered Member

itman Registered Member

Useful Searches