NSX-Racer said:
That's this weird machine with an operating system for which no known virus was built for...
I guess you haven't been watching the news, stories like
this one...
Monster patch tames the Panther
Thursday, May 05 2005
by Charlie Taylor
Apple has issued a number of security updates for its Panther OS in the wake of news that virus writers are increasingly targeting the firm's products.
The company has posted security updates to fix 20 vulnerabilities in its Mac OS X v10.3.9 operating system (OS), dubbed Panther. This comes less than a week after the launch of its successor, OS X 10.4, also known as Tiger.
The security updates, which patch both client and server versions of the software, cover a multitude of holes that could potentially allow virus writers to hi-jack machines.
One of the biggest flaws discovered is a vulnerability in the AppKit that relates to TIFF image files. Another worrying security hole affects Applescript and could lead users to accept script from a website containing code that had not been expected.
Two vulnerabilities were also found in Panther's Bluetooth wireless capabilities. One of the flaws could allow files to be shared without properly notifying the user, while another could be used to access files outside of the default file exchange directory. In addition, flaws in the libXpm library could allow code execution via another image format, XPM.
Apple's updates also include fixes for Finder, Foundation, Help Viewer, LDAP, lukemftpd, NetInfo, Server Admin, sudo, Terminal and VPN.
The new patches can be downloaded from Apple's website or via the operating system's software update service.
The latest Top 20 internet vulnerabilities study from the Sans Institute, which was released on Monday, indicates that virus authors are increasingly turning to other OS' such as Apple and Linux as Microsoft gets faster at patching flaws in Windows.
The Institute lists five criteria used to assess the criticality of security issues. These are, the number of users affected by the issue, the likelihood of the hole not having been patched in the majority of systems, the degree to which the issues allow remote control of a system, the fact that attackers are likely to know of an exploit, and how recent the issues are believed to be.
Antivirus programs and media players including Apple's iTunes, topped the list of the most pressing security problems discovered by the Institute during the first three months of the year.