Secunia Logo  


Secunia PSI WorldMap
 
Mac OS X Security Update Fixes Multiple Vulnerabilities
Secunia Advisory: SA29420
Release Date: 2008-03-19
Last Update: 2008-03-27
Popularity: 12,947 views

Critical:
Highly critical
Impact: Unknown
Security Bypass
Cross Site Scripting
Spoofing
Exposure of sensitive information
Privilege escalation
DoS
System access
Where: From remote
Solution Status: Vendor Patch

OS:Apple Macintosh OS X

Secunia CVSS-2 Score: Available in Secunia business solutions

Subscribe: Instant alerts on relevant vulnerabilities


Advisory Content (Page 2 of 3)[ 1 ] [ 2 ] [ 3 ]

Solution:
Apply Security Update 2008-002.

Security Update 2008-002 v1.0 (PPC):
http://www.apple.com/support/downloads/securityupdate2008002v10ppc.html

Security Update 2008-002 v1.0 (Universal):
http://www.apple.com/support/downloads/securityupdate2008002v10universal.html

Security Update 2008-002 v1.1 (Leopard):
http://www.apple.com/support/downloads/securityupdate2008002v11leopard.html

Security Update 2008-002 v1.1 Server (Leopard):
http://www.apple.com/support/download...ityupdate2008002v11serverleopard.html

Security Update 2008-002 v1.0 Server (PPC):
http://www.apple.com/support/downloads/securityupdate2008002v10serverppc.html

Security Update 2008-002 v1.0 Server (Universal):
http://www.apple.com/support/download...yupdate2008002v10serveruniversal.html

Provided and/or discovered by:
The vendor credits:
1) Ragnar Sundblad of KTH - Royal Institute of Technology, Stockholm
11) regenrecht via iDefense
19) Daniel Jalkut, Red Sweater Software
22) Brian Mastenbrook
24) Mike Ash, Rogue Amoeba Software
29) Maximilian Reiss, Chair for Applied Software Engineering, TUM
33) Paul Wagland of Redwood Software, and Wayne Linder of Iomega

34) Rodrigo Carvalho CORE Security Technologies

Changelog:
2008-03-24: Added CVE reference.
2008-03-27: Updated "Solution" section. The vendor has issued "Security Update 2008-002 v1.1 (Leopard)" and "Security Update 2008-002 v1.1 Server (Leopard)". Reportedly, previous security updates have been incorporated into this security update.

Original Advisory:
Apple:
http://docs.info.apple.com/article.html?artnum=307562

CORE-2008-0123:
http://www.coresecurity.com/?action=item&id=2189

Other References:
SA17907:
http://secunia.com/advisories/17907/

SA18008:
http://secunia.com/advisories/18008/

SA21187:
http://secunia.com/advisories/21197/

SA22900:
http://secunia.com/advisories/22900/

SA23347:
http://secunia.com/advisories/23347/

SA24187:
http://secunia.com/advisories/24187/

SA24548:
http://secunia.com/advisories/24548/

SA24891:
http://secunia.com/advisories/24891/

SA25292:
http://secunia.com/advisories/25292/

SA26038:
http://secunia.com/advisories/26038/

SA26530:
http://secunia.com/advisories/26530/

SA26636:
http://secunia.com/advisories/26636/

SA27040:
http://secunia.com/advisories/27040/

SA27093:
http://secunia.com/advisories/27093/

SA27130:
http://secunia.com/advisories/27130/

SA27648:
http://secunia.com/advisories/27648/

SA27508:
http://secunia.com/advisories/27508/

SA27906:
http://secunia.com/advisories/27906/

SA28046:
http://secunia.com/advisories/28046/

SA28117:
http://secunia.com/advisories/28117/

SAS28318:
http://secunia.com/advisories/28318/

SA28532:
http://secunia.com/advisories/28532/

SA28907:
http://secunia.com/advisories/28907/

SA29428:
http://secunia.com/advisories/29428/

SA29431:
http://secunia.com/advisories/29431/

Change Page:
[ 1 ] [ 2 ] [ 3 ]



Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.

Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
  
Latest Advisories

Today
New advisories: 4
New vulnerabilities: 17
Updated advisories: 13

Moderately // 48 views
Red Hat update for tomcat
Highly // 71 views
HP-UX update for JRE / JDK
Highly // 64 views
Red Hat update for libvorbis

9th Nov, 2009
New advisories: 6
New vulnerabilities: 23
Updated advisories: 65

Not // 250 views
Debian update for pidgin
Less // 300 views
Debian update for linux-2.6
Less // 246 views
Debian update for drupal6
Highly // 283 views
Debian update for nspr

Solutions | More...  


Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.

Ideas, suggestions, and other feedback are most welcome.

Most Popular - 3 Hours

1. Sun Java JDK / JRE Multiple Vulnerabilities // 78 views
2. CUPS "kerberos" Cross-Site Scripting Vulnerability // 72 views
3. HP-UX update for JRE / JDK // 66 views
4. Red Hat update for libvorbis // 60 views
5. Red Hat update for tomcat // 44 views
6. Mozilla Firefox Multiple Vulnerabilities // 37 views
7. Internet Explorer Charset Inheritance Cross-Site Scripting Vulnerability // 35 views
8. Linux Kernel 2.4 Multiple Vulnerabilities // 31 views
9. Google Chrome Two Vulnerabilities // 30 views
10. Adobe Flash Player Multiple Vulnerabilities // 27 views