Secunia

Apple has released an update for Mac OS X. This fixes some known vulnerabilities as well as some new issues.

1) OpenSSL has an information disclosure vulnerability. This can be exploited by malicious people to gain knowledge of the pre-master secret, which can be used to identify the session keys used during SSL/TLS sessions.

2) The included Apache Server has an exceptional handling error. This can be exploited by malicious people to cause a Denial of Service by sending multiple HTTP requests, which include large chunks of linefeeds.

3) Sendmail has a boundary error in "parseaddr.c", which is caused by a "char" to "int" conversion problem. A malicious person can exploit the vulnerability to cause a buffer overflow by constructing an email with a specially crafted email address.

4+5) Two vulnerabilities in the DirectoryService can be exploited by malicious people to cause a DoS (Denial of Service), or by local users to escalate their privileges.

The first issue is caused due to insecure execution of the "touch" utility during startup of DirectoryService. The problem is that the full path to "touch" isn't specified, which makes it possible for a malicious, local user to make DirectoryService execute a malicious version of "touch" by modifying the PATH environment variable.

The second issue is due to an exceptional handling error. A malicious person can connect to port 625 repeatedly, which causes DirectoryService to crash.

6) The File Sharing/Service has an access control error, which makes it possible for a guest user to read the contents of the write-only "DropBox" folder.

7) Samba has a boundary error in the function "call_trans2open()". This can be exploited by anonymous users to compromise a vulnerable system.


For more information:
http://secunia.com/advisories/8360/
http://secunia.com/advisories/8499/
http://secunia.com/advisories/8446/
http://secunia.com/advisories/8533/

Solution
Update to version 10.2.5.
Further details available in Customer Area

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area