Apple Releases New Batch of Patches, Fixes International Domain Names Phishing Flaw in Safari   3/21/2005 - 922 views, 1 Comment

Summary: Apple has released nine new patches today, designed to patch and repair several flaws in the standard OS X operating system and programs. One of the most critical of these is the flaw which allows phishers to take advantage of browsers which ...

Previous Article « Identity Theft Insurance Now Available
Read Next Article » Utah Gets New Internet Pornography Law

Apple has released nine new patches today, designed to patch and repair several flaws in the standard OS X operating system and programs. One of the most critical of these is the flaw which allows phishers to take advantage of browsers which support the International Domain Name standard. Safari is one such browser which supports the International Domain Name (IDN) standard, and as such users running Safari were vulnerable to the phishing attacks which take advantage of the flaw. Other browsers susceptible to the International Domain Name standard spoof include Firefox, Mozilla, and Opera.

The way that the IDN spoof works is by taking advantage of the fact that these browsers will render certain non-traditional characters in an international domain name as more commonly recognized Latin characters. Thus, for example, a phisher could register “àmazon.com”, but in one of the affected browsers it would appear as “amazon.com”, and thus be trusted by the user. (For those of you whose browsers did not render the first “àmazon.com” correctly, there is an accent over the first “a”, and well, now you see the problem.)

In addition to the patch for Safari, Apple released two different patches for AFP Server, a patch for Bluetooth Setup Assistant, one for Core Foundation, one each for Cyrus IMAP and SASL, one for Folder permissions, and one for Mailman.

The patches are all available from the Apple Website.

Previous Article « Identity Theft Insurance Now Available
Read Next Article » Utah Gets New Internet Pornography Law

Get a FREE summary of the week's articles every Friday!
(You can stop it any time!)
    *We never share your email address with anyone

Email Address:
Date of first visit:
How you found us:

Be sure to watch for the confirmation email!

Subscribe to The Internet Patrol on your cell phone    Email the link for this page to a friend!

Read more:

»  Has Safari Suddenly Appeared on Your Windows XP or Windows Vista Machine? Surprise!

»  Two More Windows Patches from Microsoft

»  New Critical Internet Explorer (IE) Flaw Involves Msdds.dll

»  New Security Update for Firefox Fixes High Risk Issues

For additional similar stories check out our archives on Security

 

1 Comment »

  1. Short, and to the point. Great little site

    Comment by Roy Markowitz — 3/22/2005 @ 12:48 pm

RSS feed for comments on this post.

Leave a comment

Warning! All comments which contain URLs and are clearly just spam to generate a link back to the URL will be deleted on sight. Don't bother wasting your time!

If you are going to include a URL in your comment,
please keep it under 25 characters in length,
or use TinyURL to shorten it before including it in your comment.

Line and paragraph breaks are automatic, your email address is never displayed.
HTML allowed: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

(required)

(required)


If you have not posted a comment here before, we apologize for having to ask you to enter the letters and numbers you see in the image above to validate your comment, but we are being attacked by thousands of comment form spams every day! You only need to do this once; once you have successfuly posted a comment here you will not be asked to do this again. Thank you for your understanding!

 
The Internet Patrol
Patrolling the Internet for You!