In fact... those vulnerabilities *have* affected machines in the wild... it just hasn't been made public. In fact, there is exploit code for the AFP buffer overflow vulnerability in limited usage with limited success... limited to a large degree by the Automatic Software Update feature that is turned on by default in Mac OS X. For all those who have turned off their software update, Apple was very prompt (IMO) in releasing a security update, so the onus now rests on the end user.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/256/27668#27668