Alert GCSA-06037 - Vulnerabilita' multiple in Apple Mac OS X
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
******************************************************************
Alert ID : GCSA-06037
Data : 29 giugno 2006
Titolo : Vulnerabilita' multiple in Apple Mac OS X
******************************************************************
- - Descrizione del problema
Il sistema operativo Mac OS X ed alcuni applicativi
per tale piattaforma sono affetti da vulnerabilita'.
- - Piattaforme, software e moduli interessati
- Apple Mac OS X versione 10.4.6 e precedenti
- Apple Mac OS X Server versione 10.4.6 e precedenti
- AFP
- ClamAV
- ImageIO
- launchd
- OpenLDAP
- - Impatto
- Esposizione di dati sensibili
- Esecuzione di codice arbitrario
- Denial of service
- Privilege elevation
- - Soluzioni
Per risolvere questi problemi la Apple ha rilasciato l'aggionamento
Mac OS X 10.4.7. Installare l'upgrade tramite la
Software Update feature del sistema operativo o scaricandolo da
http://www.apple.com/support/downloads/
- - Riferimenti
Apple Security Advisory: APPLE-SA-2006-06-27
http://lists.apple.com/archives/Security-announce/2006/Jun/msg00000.html
Apple: About the security content of the Mac OS X 10.4.7 Update
http://docs.info.apple.com/article.html?artnum=303973
Mitre's CVE ID:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1468
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1469
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1470
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1471
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1989
Bugtraq ID: 18686
http://www.securityfocus.com/bid/18686
-----BEGIN PGP SIGNATURE-----
iQCVAwUBRKO8qvOB+SpikaiRAQKJpgP+Jb/2gGX0YQjWcpa5nGShF2mLpVbXkCEz
OxsN3cvNVYqjVqlolDuR5ukdj/B4iHBbt5bw8o3vCkprpc2dPpd6WLYblymylVpp
mCjAsrT3KOo/yAONIQoejLyrdsiuRd9o0j9J1gsrcmASBsRou2uf/JggSj/hNxBD
KfmwF9sjU90=
=Y0zR
-----END PGP SIGNATURE-----