Apple Mac OS X AirPort Card Automatic Network Association Issue

[Brad]

* Technical Description *

A vulnerability was identified in Apple Mac OS X, which could cause a vulnerable system to connect to a malicious network. This flaw is due to an error in the AirPort Card that, when not associated with a known or trusted network, connects to a randomly generated network with a default WEP key, which can cause mobile users to automatically associate with untrusted networks without warning.

Note : This vulnerability does not affect AirPort Express Cards.

 * Affected Products *

Mac OS X version 10.4.2
Mac OS X version 10.3.3 through 10.3.9

 * Solution *

Apply patches :
http://docs.info.apple.com/article.html?artnum=301988

 * References *

http://www.frsirt.com/english/advisories/2005/1139
http://docs.info.apple.com/article.html?artnum=301988