Alert GCSA-09037 - Security Update 2009-002 / Mac OS X v10.5.7

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


**********************************************************************

    Alert ID : GCSA-09037
        Data : 14 maggio 2009
      Titolo : Security Update 2009-002 / Mac OS X v10.5.7

**********************************************************************


:: Descrizione del problema:

   Apple ha rilasciato il Security Update 2009-002 per correggere
   varie vulnerabilta' che affliggono il sistema operativo Mac OS X
   ed alcune applicazioni distribuite insieme al sistema stesso.


:: Piattaforme e Software interessati:

   Apple Mac OS X Server 10.5.6
   Apple Mac OS X Server 10.5.5
   Apple Mac OS X Server 10.5.4
   Apple Mac OS X Server 10.5.3
   Apple Mac OS X Server 10.5.2
   Apple Mac OS X Server 10.5.1
   Apple Mac OS X Server 10.5
   Apple Mac OS X 10.5.6
   Apple Mac OS X 10.5.5
   Apple Mac OS X 10.5.4
   Apple Mac OS X 10.5.3
   Apple Mac OS X 10.5.2
   Apple Mac OS X 10.5.1
   Apple Mac OS X 10.5


:: Impatto:

     Security Bypass
     Cross Site Scripting
     Spoofing
     Esposizione di informazioni sensibili
     Acquisizione di privilegi piu' elevati
     Denial of Service
     Accesso al sistema


:: Soluzione:

   Applicare il Security Update 2009-002:
   http://www.apple.com/support/downloads/


:: Riferimenti:

Security Update 2009-002 / Mac OS X v10.5.7
   http://support.apple.com/kb/HT3549

US-CERT Technical Cyber Security Alert TA09-133A archive
   http://www.us-cert.gov/cas/techalerts/TA09-133A.html

Security Focus
   http://www.securityfocus.com/bid/34926
   http://www.securityfocus.com/bid/34947
   http://www.securityfocus.com/bid/34951
   http://www.securityfocus.com/bid/34942
   http://www.securityfocus.com/bid/34950
   http://www.securityfocus.com/bid/34952
   http://www.securityfocus.com/bid/34932
   http://www.securityfocus.com/bid/34937
   http://www.securityfocus.com/bid/34938
   http://www.securityfocus.com/bid/34939
   http://www.securityfocus.com/bid/34948

Secunia: Apple Mac OS X Security Update Fixes Multiple Vulnerabilities
   http://secunia.com/advisories/35074/

Mitre CVE
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0154
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0144
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0157
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0145
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0155
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0150
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0149
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0942
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0943
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0152
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0153
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1517
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0156
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0160
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0010
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0944
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0158

-----BEGIN PGP SIGNATURE-----

iQCVAwUBSgwyOPOB+SpikaiRAQIHigQAmuchM5UtQfXBtOWKKGfiykqmzR2Sbnbw
WauNljxQehDBkA5NTy5bKdh41Y/fKMH5VlDOQvXI5Plp3GLu19Rnot2am9HR9gN4
GpvPtYo0jTSmeeHYQXUJ0W5ozSYWDMLG7QllDZQI26ZD/BBgWlEcjqmsn5ybzCl7
dLTh90kaEZA=
=qY4+
-----END PGP SIGNATURE-----