Apple Patches Wireless Security Flaw
101525
Apple has issued a fix for its Airport Extreme product, which it says would prevent attackers from causing system crashes on computers connected to a network. Only Intel Core Duo systems are affected, according to an advisory.
336518
Mac OS X 10.4.8 fixes several flaws that could lead to remote code execution, the company says.
130977
A team of computer security consultants say they have found a flaw in the Apple iPhone that allows them to take control of the device.
374793
Wireless security threats are overhyped and easily stopped. You have bigger things to worry about, says a Computerworld editor.
713098
The bug fixes kept coming Monday, as Apple shipped critical security updates for its Mac OS X operating system.The latest security updates fix 11&#160;bugs in the Mac operating system, including eight bugs in the recently released Mac OS X 10.5, known as &quot;Leopard.&quot; Apple released the security fixes in conjunction with an 10.5.2 update to Leopard, which includes dozens of other updates.Some of the security flaws are extremely serious, and could be exploited by hackers to run unauthorized software on a victim&#39;s computer, although Apple did not report any incidents of this occurring.The patches include fixes for Safari, Mail, Launch Services, the Mac OS Directory Services, Open Directory and Parental Controls. There are also patches for several Unix components that ship with Apple&#39;s software, including a recently patched flaw in the Samba file-and-print software.&quot;The Samba bug was expected, since all the open-source distributions released fixes a while ago,&quot; said Andrew Storms, nCircle&#39;s director of security operations, via instant message.It&#39;s been a busy time for software developers working on some widely used software products.Apple&#39;s patches come a day before&#160;Microsoft is set to issue a massive set of updates&#160;itself. Last week, the software vendor said it expected to release 12 security updates for a variety of products including critical updates for Windows, Internet Explorer and Office.Last week other&#160;critical patches were also released for Adobe Reader&#160;and Apple&#39;s QuickTime media player.&#160;
258666
A problem with Duke University's wireless network caused outages at the school, officials said Friday, exonerating the initial suspect, Apple Inc.'s new iPhone.
148460
InfoWorld - Apple has released a security fix for its QuickTime media player software, fixing a critical bug that had been worrying security experts for nearly a month.
272513
Apple Inc.'s flashy new iPhones may be jamming parts of the wireless network at Duke University, where technology officials worked with the company Wednesday to fix problems before classes begin next month.
673126
Apple released its fifth security update of 2007 on Friday, correcting 13 bugs in both client and server versions of its Mac OS X operating system. The most serious security hole could lead to arbitrary code execution or a denial of service attack, although most require local access to the Mac.
666084
New Apple security updates plug a trio of flaws that could be exploited to break into Macs via Wi-Fi connections.
449839
PC Magazine - The security update, which aims to fix 12 flaws in the company's Mac operating systems, comes at a time when Apple's security practices have come under an increasing amount of scrutiny.
49080
The iPhone and Apple Inc.&#39;s   desktop computers may be vulnerable to hackers due to a flaw in  their Web browser, according to a security firm, which said it  found a way to hack into the iPhone.
302863
Wi-fi users could be at risk as researchers reveal another attack on the security built into networks.
682316
(InfoWorld) - More than a year after claiming to have found a way to take over a Macintosh computer using a flaw in the system's wireless card, David Maynor has published details of his exploit. The details were included in a paper published in the September issue of Uninformed.org, an online hacking magazine. The lengthy paper describes how to run unauthorized software on a Macintosh by taking advantage of a flaw in Apple's AirPort wireless drivers. Apple patched the bug in September 21 without crediting Maynor for discovering the problem. Instead,Â Apple's engineers found the bug during an internal audit, the company said. Maynor and researcher Jon Ellch first described this type of problem during an August 2006 presentation at the Black Hat security conference in Las Vegas. He was widely criticized by the Apple community for failing to back up his claims with technical details and for presenting a video demonstration that used a third-party wireless card instead of the one that ships with the Mac. On Tuesday, Maynor said that at the time of the Black Hat demonstration, he had found similar wireless bugs in a number of wireless cards, including Apple's AirPort and that he had been told to use the third-party card in the video because it was deemed "the least offensive to people." So why publish the Mac hack now? Maynor said that he had been under a nondisclosure agreement, which had previously prevented him from publishing details of the hack. The security researcher wouldn't say who his NDA was with, but that agreement is no longer in force, allowing him to talk about the exploit. "I published it now because I can publish it now," he said. By going public with the information, Maynor hopes to help other Apple researchers with new documentation on things like Wi-Fi debugging and the Mac OS X kernel core dumping facility. "There's a lot of interesting information in the paper that, if you're doing vulnerability research on Apple, you'd find useful." Maynor will soon publish a second paper on Uniformed.org explaining how to write software that will run on a compromised system, he said. As for his detractors, who will say that this disclosure comes too late, Maynor says he just doesn't care what they think. "Let them tear me apart all they want but at the end of the day the technical merit of the paper will stand on its own."
476280
TechWeb - Unlike Microsoft and other vendors, Apple doesn't rank or rate the vulnerabilities it patches, but about two-thirds of the bugs could result in an attacker hijacking an unpatched Mac.
259181
In early October Apple released a small series of patches for Mac OS X version 10.2 and later. Most of the fixes in this group blocked possible denial-of-service problems that are, to date, theoretical.
570759
Blog: This rare, tenth update of an Apple OS includes a networking security patch.