Advertisement
To print: Select File and then Print from your browser's menu
-------------------------------------------------------------- This story was printed from ZDNet Australia. --------------------------------------------------------------
Apple closes another Wi-Fi hole

By Joris Evers , CNET News.com
January 26, 2007
URL: http://www.zdnet.com.au/news/security/soa/-Apple-closes-another-Wi-Fi-hole/0,130061744,339273245,00.htm


Apple late on Thursday released a security update to plug a publicly known security hole in its AirPort product.

The update fixes a vulnerability that affects both the server and client versions of Mac OS X, Apple said in its alert. The problem was disclosed in November as part of the Month of Kernel Bugs campaign.

An attacker could exploit the flaw over a wireless network by sending malicious data to a vulnerable Mac, Apple said. "An attacker in local proximity may be able to trigger a system crash by sending a maliciously-crafted frame to an affected system," it said in the alert.

The issue affects the Intel Core Duo-based versions of Mac mini, MacBook and MacBook Pro computers equipped with wireless, Apple said. Other systems, including the Core 2 Duo versions of the same machines are not affected, it said.

Apple fixed the issue by adding more validation of wireless frames. The AirPort Extreme Update 2007-001 may be obtained from the Software Update feature in Mac OS X or Apple's Software Downloads Web site.

Vulnerabilities in the Mac OS X have been rising, leading some experts to note that the Macintosh platform is not impervious to security problems. The vast majority of security vulnerabilities, however, affect computers running Microsoft Windows. Also, attacks so far on Macs have largely been theoretical.


Copyright © 2009 CBS Interactive, a CBS Company. All Rights Reserved.
ZDNET is a registered service mark of CBS Interactive. ZDNET Logo is a service mark of CBS Interactive.