Secunia

Description

Apple has acknowledged several vulnerabilities in Mac OS X, which potentially can be exploited by malicious people to compromise a vulnerable system or cause a DoS (Denial of Service).

Apple reports that Mac OS X is affected by the buffer management vulnerabilities in OpenSSH. According to Apple, these can be exploited to cause the SSH service to crash.

For more information:
SA9743

The OpenSSL implementation is affected by various vulnerabilities in the ASN.1 parser, which could lead to a DoS and potentially system access.

For more information:
SA9886

Boundary errors in the Sendmail address parsing code and ruleset parsing can be exploited to cause buffer overflows. This potentially allows execution of arbitrary code.

For more information:
SA9758

An off-by-one error in the "fb_realpath()" function can potentially be exploited to execute arbitrary code via an application using this function. This is done by specifying a path, which resolves to a 1024 character long path length. This vulnerability was also addressed in Mac OS X 10.2.6.

For more information:
SA9535

An unspecified error in the "arplookup()" function can be exploited by malicious people on a LAN to exhaust kernel memory and cause a DoS by sending multiple spoofed ARP requests.

Solution
Update to Mac OS X 10.2.8 manually or via the Software Update pane in System Preferences.
Further details available in Customer Area

Changelog
Further details available in Customer Area

Original Advisory
http://docs.info.apple.com/article.html?artnum=61798

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area