Alert GCSA-09084 - Apple Security Update 2009-005
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
************************************************************************
Alert ID : GCSA-09084
Data : 14 settembre 2009
Titolo : Apple Security Update 2009-005
************************************************************************
:: Descrizione del problema
Apple ha rilasciato il Security Update 2009-005 per correggere
varie vulnerabilta' che affliggono il sistema operativo Mac OS X
ed alcune applicazioni distribuite insieme al sistema stesso.
:: Software interessato
Apple Macintosh OS X
:: Impatto
- - Esposizione di informazioni sensibili
- - Security Bypass
- - Cross Site Scripting
- - Privilege escalation
- - DoS
:: Soluzione
Aggiornare il sistema alla versione Mac OS X v10.6.1
o applicare il Security Update 2009-005:
http://www.apple.com/support/downloads/
:: Riferimenti
Apple
http://support.apple.com/kb/HT3864
http://support.apple.com/kb/HT3865
Secunia
http://secunia.com/advisories/36701/
Mitre's CVE ID
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2079
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5498
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-6680
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0590
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0591
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0789
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0949
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1241
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1270
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1271
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1272
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1371
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1372
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1862
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1863
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1864
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1865
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1866
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1867
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1868
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1869
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1870
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2468
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2800
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2803
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2804
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2805
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2807
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2809
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2811
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2812
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2813
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2814
-----BEGIN PGP SIGNATURE-----
iQCVAwUBSq3w5fOB+SpikaiRAQJRsAQAi6OAWmyfPla5/037EYaTovO/D6XBwNl6
kTFJjZTS6OH8eVk4r3Vuv1bk3GkybKszGCIUafJr3vBwT/XVodKvgAV7mVWhu6BH
cIi1boUQGfqOMn9GQ1xfZ+ckrfmWVPh8bcnhXQ0JAkoNgoxBeyjy0VDTBHTUggKy
H25xF+LIY8Q=
=b1jR
-----END PGP SIGNATURE-----
Hash: SHA1
************************************************************************
Alert ID : GCSA-09084
Data : 14 settembre 2009
Titolo : Apple Security Update 2009-005
************************************************************************
:: Descrizione del problema
Apple ha rilasciato il Security Update 2009-005 per correggere
varie vulnerabilta' che affliggono il sistema operativo Mac OS X
ed alcune applicazioni distribuite insieme al sistema stesso.
:: Software interessato
Apple Macintosh OS X
:: Impatto
- - Esposizione di informazioni sensibili
- - Security Bypass
- - Cross Site Scripting
- - Privilege escalation
- - DoS
:: Soluzione
Aggiornare il sistema alla versione Mac OS X v10.6.1
o applicare il Security Update 2009-005:
http://www.apple.com/support/downloads/
:: Riferimenti
Apple
http://support.apple.com/kb/HT3864
http://support.apple.com/kb/HT3865
Secunia
http://secunia.com/advisories/36701/
Mitre's CVE ID
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2079
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5498
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-6680
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0590
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0591
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0789
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0949
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1241
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1270
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1271
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1272
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1371
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1372
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1862
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1863
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1864
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1865
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1866
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1867
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1868
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1869
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1870
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2468
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2800
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2803
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2804
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2805
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2807
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2809
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2811
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2812
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2813
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2814
-----BEGIN PGP SIGNATURE-----
iQCVAwUBSq3w5fOB+SpikaiRAQJRsAQAi6OAWmyfPla5/037EYaTovO/D6XBwNl6
kTFJjZTS6OH8eVk4r3Vuv1bk3GkybKszGCIUafJr3vBwT/XVodKvgAV7mVWhu6BH
cIi1boUQGfqOMn9GQ1xfZ+ckrfmWVPh8bcnhXQ0JAkoNgoxBeyjy0VDTBHTUggKy
H25xF+LIY8Q=
=b1jR
-----END PGP SIGNATURE-----