Thursday, January 6, 2011

Apple fixes CVE-2010-4013 in Mac OS X v10.6.6 update

It's always nice to see Apple fix security holes I've reported.  Thanks for promptly addressing this issue.

The official description from their bulletin (http://support.apple.com/kb/HT4498):


PackageKit
CVE-ID: CVE-2010-4013
Available for: Mac OS X v10.6 through v10.6.5, Mac OS X Server v10.6 through v10.6.5
Impact: A man-in-the-middle attacker may be able to cause an unexpected application termination or arbitrary code execution
Description: A format string issue exists in PackageKit's handling of distribution scripts. A man-in-the-middle attacker may be able to cause an unexpected application termination or arbitrary code execution when Software Update checks for new updates. This issue is addressed through improved validation of distribution scripts. This issue does not affect systems prior to Mac OS X v10.6. Credit to Aaron Sigel of vtty.com for reporting this issue.
Posted by aaron at 9:12 AM

1 comment:

  1. AnonymousJanuary 7, 2011 at 3:50 AM

    Forgive me if I'm missing something obvious, but are they actually distributing update scripts without TLS/SSL? If they are, how are you doing the MITM? If not, WTF?

    While I'm on the subject, I'm pretty sure they code-sign all their updates. Why aren't they code-signing the scripts too?

    ReplyDelete

Subscribe to: Post Comments (Atom)