Alert GCSA-06104 - Vulnerabilita' multiple in Apple Mac OS X

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


*****************************************************************************

       Alert ID : GCSA-06104
           Data : 30 Novembre 2006
         Titolo : Vulnerabilita' multiple in Apple Mac OS X

*****************************************************************************

:: Descrizione del problema:

Il sistema operativo Mac OS X ed alcuni applicativi per tale piattaforma sono
affetti da vulnerabilita'.

Per risolvere queste vulnerabilita' la Apple ha rilasciato il Security Update 
2006-007.


:: Piattaforme e Software interessati:

Apple Mac OS X versione 10.3.9 e precedenti
Apple Mac OS X Server versione 10.3.9 e precedenti
Apple Mac OS X versione 10.4.8 e precedenti
Apple Mac OS X Server versione 10.4.8 e precedenti


:: Impatto:

Manipolazione di dati
Denial of Service
Esposizione di dati sensibili
Security Bypass
Accesso non autorizzato al sistema
Privilege Escalation.


:: Soluzioni:

Applicare la Apple Security Update 2006-007:

http://www.apple.com/support/downloads/


:: Riferimenti:

Apple - About Security Update 2006-007
http://docs.info.apple.com/article.html?artnum=304829

FrSirt:
http://www.frsirt.com/english/advisories/2006/4750

Secunia:
http://secunia.com/advisories/23155/

Mitre's CVE ID:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3962
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1490
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1990
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2937
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2940
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3403
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3738
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4182
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4334
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4335
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4336
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4337
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4338
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4339
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4343
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4396
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4398
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4400
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4401
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4402
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4403
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4404
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4406
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4407
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4408
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4409
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4410
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4411
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4412
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5465
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5710
-----BEGIN PGP SIGNATURE-----

iQCVAwUBRW6xmfOB+SpikaiRAQKj4wQAofyiitunLIDhiTMTB1aSvSK0lm9fZM5c
TV6IWQFUyChTBFNPotgUcuwJuzRZgy8mKht0INNx8nl+cvREqqClFto3vfswylOG
BG/UvZzZqMSADDQD1cZRpLkwAIyOBN6/ElGmENAs5mI/+mU5aZrynhiMkHAkTjpB
+EWmJ/Qnc24=
=vQnb
-----END PGP SIGNATURE-----