Proof-of-concept code has been posted for a new vulnerability in
Apple's
AirPort
wireless networking hardware. The company told
vnunet.com
that it is investigating the issue.
According to the report, written by security researcher H D Moore, the
vulnerability exists in PowerBooks and iBooks manufactured between 1999 and
2003.
The report suggests that the vulnerability could allow for remote code
execution on a user's machine. The computer used in the proof-of-concept was a
fully-patched PowerBook running MacOS 10.4.8.
The vulnerability was posted as part of the
Month
Of Kernel Bugs project which aims to point out a new vulnerability in an
existing operating system every day during November. The vulnerability is not
currently being exploited.
Apple issued a fix for another
AirPort
vulnerability last month that affected computers manufactured after 2004.
Earlier this year, black hat researchers demonstrated a
vulnerability
in Mac OS systems that used third-party wireless cards.
Do you agree?
Have your say on this article