Secunia

Apple has issued an update for Mac OS X, which fixes various vulnerabilities.

1) An input validation error can be exploited to access arbitrary files on a Bluetooth-enabled system using directory traversal attacks via the Bluetooth file and object exchange services.

2) An error can be exploited by malicious web sites to download and install Dashboard widgets on a user's system via Safari without the Safe Download Validation warning.

3) A weakness in two system calls allows local users to gain knowledge of the names of files placed in unsearchable locations (e.g. files in users' ~/Public/Drop Box).

4) An error in the "nfs_mount()" function due to insufficient input value checks can be exploited by malicious, local users to cause a kernel panic.

5) An error can be exploited by malicious people with physical access to a system to start background applications behind locked screensaver windows.

The vulnerabilities affect Mac OS X v10.4 and Mac OS X Server v10.4.

Solution
Apply Mac OS X 10.4.1 Update.
Further details available in Customer Area

Provided and/or discovered by
1) Kevin Finisterre, digitalmunition.com.
3) John M. Glenn

Original Advisory
Apple:
http://docs.info.apple.com/article.html?artnum=301630

Deep Links
Links available in Customer Area