Darwin flaws survive in Apple’s Mac OS X
By UsaydA source-code audit of the open-source operating system from which Apple Computer borrowed much of the code for Mac OS X revealed four vulnerabilities of varying severity in Apple’s software, a security company said Monday.
The flaws in Darwin affect Mac OS X version 10.3–dubbed Panther–and are caused by memory errors in the kernel, according to an advisory released by ImmunitySec, the security company that found the flaws.
“In terms of criticalness, this kind of bug mostly affects remote systems with multiple users,” said David Aitel, founder and security consultant with ImmunitySec, adding that since Mac OS X is most often used on the desktop, the flaws will not be overly important on most people’s systems.
The company originally found the flaws in June and published them to a private list of customers but did not notify Apple. It published the flaws on Monday, after presenting them at a seminar.
Apple confirmed that it had not been told of the flaws and said it was analyzing the vulnerabilities but would not elaborate…
I didn’t know about Mac OSX being ‘borrowed’ from another OS. I guess they keep things like that a bit more ‘hidden’.