Warning: Security Hole in StuffitDeluxe 6.5

iTuner

Registered
Today I discovered some kind of a security hole or a bug in the Magic Menu of StuffitDeluxe for Mac OS X. In the Magic Menu there is a entry called "Get More Info..."
Select a folder and select "Get More Info...". In the new window, click on "Permissions" and here it comes. You can set the permission of every file/folder to anything you want WITHOUT entering a password. :( If somebody else, maybe a user with only a few privileges, he or she is able to break into every single folder. :eek:


iTuner
 
Back
Top