Desktop platforms Toolkit

Apple fixes critical security holes

Alorie Gilbert CNET News

Published: 26 Sep 2005 09:05 BST

Apple released 10 security fixes to address Mac OS X flaws that security experts described as "critical".

Apple issued the patches, available through its Web site, late last week. The flaws affect versions 10.3.9 and 10.4.2 of the Mac OS X operating system, as well as related server software.

Symantec and FrSirt both said the vulnerabilities are serious and that the need to patch them is urgent. However, no exploits for them have been reported, Symantec noted in an alert sent to members of its DeepSight service Friday.

The flaws expose affected machines to remote attack using arbitrary commands and email interception, according to Apple's bulletin. Certain vulnerabilities could also be exploited for a DoS attack, FrSirt said in an online advisory.

Apple declined to comment on the security patches on Friday.

The company has previously released patches for these Mac OS X versions. In one of its bigger security updates, the company last month unloaded fixes for 44 flaws. Last May, it released an update for 20 vulnerabilities, and in March, it distributed an update for a dozen security bugs.