4 ms·
It's my understanding that the vector for end users would be DHCP in a coffee shop, but I could be wrong.
by bphogan 12y ago
It's my understanding that the vector for end users would be DHCP in a coffee shop, but I could be wrong.
- eli 12y agoI'm 99% sure that does not apply to OS X.
- legulere 12y agoAs I read it before DHCP is implemented in the kernel in OS X and not glued together with bash scripts like in some cases in Linux.
- k_roy 12y agoAs others have mentioned, OSX is immune from the DHCP side. Even then, at least the exploit for DHCP I saw manifests on the SERVER, not the client. When you are in a coffee shop, you are the client not the server. That means you would be the one to exploit the coffee shop, not the other way around.
- thefreeman 12y agoYes OSX is not vulnerable to the DHCP exploit. No, the DHCP exploit was not on the server. It showed a sample payload a malicious DHCP could send to a client to achieve RCE. Also apparently some networks allow other clients to send DHCP commands so even if you trust the DHCP server it doesn't necessarily mean you are safe.
- k_roy 12y agoAhh, yep. The POC was definitely from server to client, not the other way around. A huge concern for Linux laptops then.
- thefreeman 12y agoat least until the `apt-get upgrade` or similar :)