Apple Post Update for Kaminsky DNS Flaw and OSA Script Issues

      by Dusty Schnabel

Apple has release update “Security Update 2008-005″ for both OS X 10.5.4 and 10.4.11. This much needed update address a couple serious vulnerabilities in Apples OS X operating system. Most notable is the Kaminsky DNS vulnerability. Sadly, this patch comes at least a couple weeks behind other vendors such as Ubunut, RedHat, and even Microsoft.

What a N00b covered the release of the exploit code for the DNS issue here.

Another critical hole that was fixed, was the ability of a user to execute any arbitrary command as root via an AppleScript call. This was covered on SlashDot.. Anyone that offers shell or console access to their users should be concerned. Thank goodness it is not exploitable remotely.

Other updates included OpenSSL, OpenLDAP, RSync, PHP, CoreGraphics, CarbonCore, and Disk Utility to name a few.

For more information on this specific update, visit Security Update 2008-005.

To read more about each security update Apple releases, visit Apple’s Security Page

Filed under Uncategorized : Comments (0) : Aug 1st, 2008