Maynor Reveals Apple Flaw

March 2007
Maynor reveals missing Apple flaw.
Security researcher David Maynor got some measure of vindication at the
Black Hat DC Conference this year. Six monthsafter the security researcher
and his colleague Jon Ellch claimed that Mac OS X wireless drivers were vulnerable to attack, Maynor on Wednesday, February 28, revealed the code he used to exploit a native flaw in the platform as well as e_mails showing he notified Apple as to the danger. Maynor said the flaw was in the driver for the Broadcom wireless chip.

The flaw affected not only Mac OS X, but any platform that used drivers based
on the Broadcom reference driver, he said. While MacBooks and PowerBooks
were affected, so were Dell laptops running Windows XP. Apple fixed the flaw
on September 21, but did not give Maynor or Ellch credit. The flaw could have
allowed a remote attacker to compromise a vulnerable MacBook or PowerBook
remotely via an overly long service set identifier.
Source: http://www.securityfocus.com/news/11445