Flaws in Mac OS X's Darwin

[Nomad559]

Security Firm Uncovers Flaws in Mac OS X's Darwin



-Snip-

Security company Immunity says it has found several vulnerabilities in Darwin, the implementation of Unix that underlies Apple Computer Inc.'s Mac OS X operating system.

Immunity discovered the flaws during a security audit of the source code, which Apple has made freely available under its own Apple Public Source license. The flaws, which affect versions of Mac OS X up to and including 10.3.4, affect the operating system's SearchFS function and 'at' command. The company also found several potential kernel memory overflows.

Immunity is working on producing reliable exploits for them, as part of its security testing program. The company produces a penetration testing tool called Canvas, which allows users to test their own system's security.