Apple OS X gets critical update

Zardon · Mar 1, 2004, 08:51 PM

Good to see its not just windows with "critical" updates being needed for their OSES.

Chris Adams has reported a vulnerability in Mac OS X, which may allow malicious people to gain knowledge of sensitive data like user credentials.

The problem is that the Apple Filing Protocol (AFP) silently falls back to plain-text authentication when configured to use SSH when a remote host fails to accept SSH.

The vulnerability has been reported in Apple Macintosh OS X versions 10.2 through 10.3.2.

Solution:
Filter traffic to prevent plain text AFP traffic over insecure networks.

Use manual SSH or VPN tunnels. Secunia

Mar 1, 2004, 08:51 PM	#1
Zardon DriverHeaven Founder Join Date: May 2002 Posts: 32,480 Rep Power: 179	Apple OS X gets critical update Good to see its not just windows with "critical" updates being needed for their OSES. Chris Adams has reported a vulnerability in Mac OS X, which may allow malicious people to gain knowledge of sensitive data like user credentials. The problem is that the Apple Filing Protocol (AFP) silently falls back to plain-text authentication when configured to use SSH when a remote host fails to accept SSH. The vulnerability has been reported in Apple Macintosh OS X versions 10.2 through 10.3.2. Solution: Filter traffic to prevent plain text AFP traffic over insecure networks. Use manual SSH or VPN tunnels. Secunia