toggle

AAPL Stock: 559.1 ( -6.22 )

Mac OS X web exploit not resolved by recent patch

updated 07:40 pm EST, Wed December 8, 2004

Apple web hole still open


Apple has , released last week to address a number of Apache and other vulnerabilities, "will only address the security flaw for OS X systems running the Apache web server which is shipped by default. Customers using other web servers such as 4D WebSTAR remain vulnerable the managed security specialist has claimed. In addition, those running modified versions of the Apache web server on OS X would not have received the update patch automatically, but would not necessarily realise this. The vulnerability risks allowing attackers to exploit URLs to gain access to back-end data structures and carry out website defacement or information theft."


by MacNN Staff

print
email
(3)

TAGS :

 troubleshooting

Related Articles

Recent Articles

toggle

Comments

  1. dashiel

    Fresh-Faced Recruit

    Joined: Sep 2001

    0
    12/08, 08:31pm | report spam | Reply |

    uhmm....

    you know i hope apple does fix this, however if you're running a modified apache server or webStar i assume that you would be well on top of your security situation. at least you should be.

  1. DesiSoftSystems

    Fresh-Faced Recruit

    Joined: May 2002

    0
    12/08, 09:16pm | report spam | Reply |

    Apple not responsible...

    Just as Apple has released a fix for their special version of Apache, so any other company that serves web pages through their Mac OS X-based products are responsible for their own bug fixes, not Apple. The only way Apple could fix this the way these unknowledgable individuals are wanting is by disabling basic functionality in the operating system that permits valid users the ability to get a listing of their named forks of files via appropriate Unix functionality.

  1. hayesk

    Professional Poster

    Joined: Sep 1999

    0
    12/09, 11:26am | report spam | Reply |

    This is bull

    This is not an OS problem. Accessing data through named forks is perfectly valid. It's up to the web server developers to fix their own products so they don't serve data they shouldn't be.

Login Here

Not a member of the MacNN forums? Register now for free.

 
close
Photo
toggle

Network Headlines

toggle

Most Popular

MacNN Sponsor

Recent Reviews

iHome iW2 AirPlay speaker

iHome generally isn't known as a luxury brand when it comes to audio, but it is prolific -- the company's docks and speakers are every ...

Logitech Ultrathin Keyboard Cover

One of the iPad's main weaknesses has always been productivity. It's not a question of apps; while it has taken a little time for a na ...

Logitech UE Air Speaker

If maybe a little more slowly than Apple would like, AirPlay is becoming a staple of the wireless speaker market for iOS devices. The ...

toggle

Most Commented

 

Popular News