
Macs 'vulnerable to wireless attack'...
By Joris Evers
Published: 2 November 2006 08:50 GMT
A security researcher has released attack code he claims exploits a new security hole in wireless software from Apple.
The vulnerability lies in the Apple AirPort driver, according to details on the flaw published by HD Moore, the developer of the Metasploit security tool. It affects only the AirPort driver provided with wireless cards shipped between 1999 and 2003 with PowerBooks and iMacs, the posting said.
To launch an attempt, the hacker would have to be on the same wireless network as a vulnerable Mac. The attack entails trying to trigger a memory corruption flaw by sending a malformed data packet to the computer, according to Moore's advisory. But the process isn't easy, and Moore hasn't yet been able to gain complete control over a vulnerable Mac.
Got two seconds?
Make your voice heard - take our latest poll.
Moore said in an email interview: "The vulnerability itself only affects older hardware and is going to be difficult to turn into a remote code execution exploit but it's definitely possible, just a matter of time and motivation. The current proof-of-concept triggers a fatal kernel panic and forces the user to power cycle their machine."
Apple is investigating the flaw, according to a spokeswoman for the Mac maker. "This issue affects a small percentage of previous generation AirPort-enabled Macs and does not affect currently shipping or AirPort Extreme enabled Macs," she said.
Moore's proof-of-concept exploit has been added to Metasploit Framework 3.0. This latest version of the security tool, popular with both security professionals and miscreants, has the ability to probe for vulnerabilities in wireless software.
Joris Evers writes for CNET News.com
The hole that everybody is reporting on affects ol...
The truth
MOSS 2007 (Sharepoint) Consultant required to design an initial proof of concept for a small scale MOSS 2007 application. You will be experienced in ...
My client based in London requires someone with at least 2 years commercial experience supporting Apple Macs and PC's in a busy environment. My ...
You will provide 1st and 2nd line support and ensure smooth day to day operation, maintenance and development of all office systems including Macs, ...
CIO Agenda 2008
The exclusive silicon.com CIO Agenda 2008 survey looks at the CIO's tech shopping list for the year, examines whether IT budgets are rising or falling and reveals what the pain points are for tech chiefs this year. Find out more in our latest special report.
Staffing Service Coordinates Sales Activities, Utilizes Business Intelligence With...
Maximizing Revenues in Troubled Times: Proven Methods of Extracting Water From a...
Teachers Association Turns to Centralized Data Repository to Improve Member Service
Service Management Companies: Will You Grow With or Outgrow QuickBooks?
Stories from the web...
Copyright ©1995-2008 CNET Networks, Inc. All rights reserved. Top of page
silicon.com Dear silicon.com... XP lives, the femtocell 'truth', BlackBerry bashing… Reader Comments of the Week
Martin Brampton The Brampton Factor: Open source 'brotherhood' closed to co-operation Where's the real sharing?