Met Security Update 2003-08-14 wordt een potentieel beveiligingsprobleem verholpen in de functie fb_realpath(). Dit probleem zou ertoe kunnen leiden dat een lokale of externe gebruiker ongeoorloofde rootbevoegdheden voor de computer krijgt.
Compare Mac OS-X vs Windows on Data Security:Mac OS-X has an enhanced BSD-UNIX as its foundation, with an enhanced OpenStep user interface layer ("Cocoa") driving a standards-based graphics layer ("Quartz"),BSD-UNIX is widely regarded as the most secure version of UNIX. OS-X's UNIX core ("Darwin") is open-source, and Apple has rapidly (within days) released OS-X security updates for every BSD-related security advisory. Most such updates have been optional for most users, as they affected only BSD-specific command-line tools which are disabled by default in the standard OS-X distribution.Note that actual "in the wild" exploits of these potential security holes have yet to materialize because the open-source paradigm allows fixes to be determined and distributed before "black hat" hackers even know of the vulnerability."Cocoa", the API and user interface layer, is not strictly open-source at this time, but there is an open-source OpenStep project ("GnuStep") that tracks it very closely. Historically, Cocoa's OpenStep foundation has been popular with "three-letter" intelligence agencies and investment banks. It has been examined very closely for security issues, and passed.Microsoft Windows, on the other hand, is riddled with security issues, many of which Microsoft appears unwilling or unable to resolve. Microsoft itself has stated that if they were to open-source Windows, that hackers would be able to find many more ways to breach Windows' tattered security model. A seemingly constant stream of Windows vulnerabilities is reported in the computer press, many revolving around Microsoft's flagship business suite, Microsoft Office, lending credibility to at least that Microsoft claim.
Gast
