———- Forwarded message ———-<\/p>\n
From: CERT Advisory <cert-advisory@cert.org<\/a>> —–BEGIN PGP SIGNED MESSAGE—– National Cyber Alert System<\/p>\n Technical Cyber Security Alert TA06-062A<\/p>\n Apple Mac Products are Affected by Multiple Vulnerabilities<\/p>\n Original release date: March 3, 2006 Systems Affected<\/p>\n * Apple Mac OS X version 10.3.9 (Panther) and version 10.4.5 (Tiger) Previous versions of Mac OS X may also be affected.Please see Apple Overview<\/p>\n Apple has released Security Update 2006-001 to correct multiple I. Description<\/p>\n Apple Security Update 2006-001 resolves a number of vulnerabilities VU#999708 – Apple Safari automatically executes arbitrary shell Apple Safari fails to properly determine file safety, allowing a VU#351217 – Apple Safari WebKit component vulnerable to buffer Apple Safari WebKit component is vulnerable to buffer overflow. This VU#176732 – Apple Safari vulnerable to buffer overflow<\/p>\n Apple Safari is vulnerable to a stack-based buffer overflow. This Please note that Apple Security Update 2006-001 addresses additional II. Impact<\/p>\n The impacts of these vulnerabilities vary. For information about III. Solution<\/p>\n Install an update<\/p>\n Install the update as described in Apple Security Update 2006-001. In Appendix A. References<\/p>\n * US-CERT Vulnerability Note VU#999708 – * US-CERT Vulnerability Note VU#351217 – * US-CERT Vulnerability Note VU#176732 – * US-CERT Technical Cyber Security Alert TA06-053A – * Securing Your Web Browser – * Apple Security Update 2006-001 – * Mac OS X: Updating your software – ____________________________________________________________________<\/p>\n The most recent version of this document can be found at:<\/p>\n <www.us-cert.gov\/cas\/techalerts\/TA06-062A.html<\/a>> Feedback can be directed to US-CERT Technical Staff. Please send For instructions on subscribing to or unsubscribing from this Produced 2006 by US-CERT, a government organization.<\/p>\n Terms of use:<\/p>\n
\nTo: cert-advisory@cert.org<\/a>
\nSubject: US-CERT Technical Cyber Security Alert TA06-062A — Apple Mac
\n Products are Affected by Multiple Vulnerabilities <\/p>\n
\nHash: SHA1<\/p>\n
\n Last revised: —
\n Source: US-CERT<\/p>\n
\n * Apple Mac OS X Server version 10.3.9 and version 10.4.5
\n * Apple Safari web browser<\/p>\n
\n Security Update 2006-001 for further information.<\/p>\n
\n vulnerabilities affecting Mac OS X, Mac OS X Server, Safari web
\n browser, and other products. The most serious of these vulnerabilities
\n may allow a remote attacker to execute arbitrary code. Impacts of
\n other vulnerabilities include bypassing security restrictions and
\n denial of service.<\/p>\n
\n affecting Mac OS X, OS X Server, Safari web browser, and other
\n products. Further details are available in the following Vulnerability
\n Notes:<\/p>\n
\n commands or code<\/p>\n
\n remote unauthenticated attacker to execute arbitrary commands or code.
\n (CVE-2006-0848)<\/p>\n
\n overflow<\/p>\n
\n vulnerability may allow are remote attacker to execute arbitrary code
\n or cause a denial-of-service condition.
\n (CVE-2005-4504)<\/p>\n
\n vulnerability may allow a remote attacker to execute arbitrary code on
\n a vulnerable system.
\n (CVE-2006-0387)<\/p>\n
\n vulnerabilities not described above. As further information becomes
\n available, we will publish individual Vulnerability Notes. In
\n addition, more information about VU#999708 is available in US-CERT
\n Technical Cyber Security Alert TA06-053A.<\/p>\n
\n specific impacts, please see the Vulnerability Notes. Potential
\n consequences include remote execution of arbitrary code or commands,
\n bypass of security restrictions, and denial of service.<\/p>\n
\n addition, this update is available via Apple Update.<\/p>\n
\n <www.kb.cert.org\/vuls\/id\/999708<\/a>><\/p>\n
\n <www.kb.cert.org\/vuls\/id\/351217<\/a>><\/p>\n
\n <www.kb.cert.org\/vuls\/id\/176732<\/a>><\/p>\n
\n <www.us-cert.gov\/cas\/techalerts\/TA06-053A.html<\/a>><\/p>\n
\n <www.us-cert.gov\/reading_room\/securing_browser\/#Safari<\/a>><\/p>\n
\n <docs.info.apple.com\/article.html?artnum=303382<\/a>><\/p>\n
\n <docs.info.apple.com\/article.html?artnum=106704<\/a>><\/p>\n
\n ____________________________________________________________________<\/p>\n
\n email to <cert@cert.org<\/a>> with “TA06-062A Feedback VU#351217” in the
\n subject.
\n ____________________________________________________________________<\/p>\n
\n mailing list, visit <www.us-cert.gov\/cas\/signup.html<\/a>>.
\n ____________________________________________________________________<\/p>\n