Apple fixes 'urgent' AirPort flaws

The AirPort vulnerabilities could allow remote code execution

Apple has released a security patch to address three vulnerabilities in its AirPort wireless networking technology. 

The vulnerabilities could allow remote code execution, although Apple claimed that it is not aware of any attacks actively exploiting the flaw.

The patch applies to systems running OS X 10.3.9 through 10.4.7. It is designed for Apple systems released in the past two years, including the Xserve, PowerBook, Power Mac and all the firm's Intel-based systems.

Because of the possibility of remote code execution, the SANS Internet Storm Center has classified the update as 'urgent'. The company recommends users to install the update as soon as possible. 

The security fix is unrelated to a widely publicised vulnerability in wireless device drivers demonstrated last summer by two security consultants at the Black Hat security conference in Las Vegas. 

The consultants used a third-party wireless card plugged into an Apple laptop, prompting a debate about Apple's security record.

• AirPort Update 2006-001 and Security Update 2006-005