Brief Hands-On Report--Apple Released Airport Update 2006-001 and Security Update 2009-005

The Airport Update 2006-001 is available for download from Software Update or as a stand-alone file from this Apple Web page. This update is for Intel-based Macs running Mac OS X 10.4.7 Build 8J2135 or 8J2135a. Other Macs should download Security Update 2006-005 from Software Update or for the appropriate system from this Apple Web page.

Both updates do the same thing. According to the ReadMe files,

The AirPort Update 2006-001 improves AirPort reliability on Macintosh computers.

or

Security Update 2006-005 is recommended for all users and improves the security of the following component. Airport

They fix three security issues:

CVE-2006-3507 for: Mac OS X v10.3.9, Mac OS X Server v10.3.9, Mac OS X v10.4.7, Mac OS X Server v10.4.7--Attackers on the wireless network may cause arbitrary code execution. This issue affects Power Mac, PowerBook, iMac, Mac Pro, Xserve, and PowerPC-based Mac mini computers equipped with wireless. Intel-based Mac mini, MacBook, and MacBook Pro computers are not affected. This update addresses the issues by performing additional validation of wireless frames.

CVE-2006-3508 for: Mac OS X v10.4.7, Mac OS X Server v10.4.7--Attackers on the wireless network may cause system crashes, privilege elevation, or arbitrary code execution. This issue affects Intel-based Mac mini, MacBook, and MacBook Pro computers equipped with wireless. Power Mac, PowerBook, iMac, Mac Pro, Xserve, and PowerPC-based Mac mini computers are not affected. This update addresses the issue by performing additional validation of wireless frames. This issue does not affect systems prior to Mac OS X v10.4.

CVE-2006-3509 for: Mac OS X v10.4.7, Mac OS X Server v10.4.7--Depending upon third-party wireless software in use, attackers on the wireless network may cause crashes or arbitrary code execution. This issue affects Intel-based Mac mini, MacBook, and MacBook Pro computers equipped with wireless. Power Mac, PowerBook, iMac, Mac Pro, Xserve, and PowerPC-based Mac mini computers are not affected. This update addresses the issues by performing additional validation of wireless frames. This issue does not affect systems prior to Mac OS X v10.4.

There are no know exploits for any of these issues.

We downloaded and installedAirport Update 2006-001 in a Mac mini Core Duo, iMac Core Duo and 15" MacBook Pro running Mac OS X 8J2135a with no problems. We also downloaded and installedSecurity Update 2006-005 in a Power Mac G4 Cube, PowerBook G4s, iMac G5 and iMac Core 2 Duo with no problems. Then we used each Mac on our wireless networks and found no problems. [Bill Fox & Dana Baggett]