SillyDog701 Message Centre

[Antony]

Apple released Security Update 2006-001 Mac OS X 10.4.5

[J-M]

Serious flaw in Safari browser (see http://sillydog.org/forum/viewtopic.php?t=10910 for details) has been reportedly fixed as well:

Report from SANS Internet Storm Center
http://isc.sans.org/diary.php?storyid=1160

ISC says iChat and Mail are also immune now. Time to patch:
http://www.apple.com/support/downloads/

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.0; fi-FI; rv:1.7.12) Gecko/20050919 Firefox/1.0.7

[Antony]

Thanks for confirming Safari and iChat, Mail security related issues, J-M.

UserAgent: Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en) AppleWebKit/417.9 (KHTML, like Gecko) Safari/417.8

---

MozInfo701 | MacCentre701 | AntBlog701 | don't steal music.

[Antony]

Security Update 2006-001 for Mac OS X 10.3.9 Panther users is also available.

Security Update 2006-001(10.3.9 Client)

[J-M]

There is an exploit code for "passwd" program temporary file creation vulnerability published too.

Details at
http://www.frsirt.com/english/advisories/2006/0791

-> see The fourth issue...

Code was published at
http://www.frsirt.com/exploits/20060301.xosx-passwd.pl.php

late on Wednesday.

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.0; fi-FI; rv:1.7.12) Gecko/20050919 Firefox/1.0.7

[J-M]

More information about these security issues has been published at Secunia Advisory SA19064; see
http://secunia.com/advisories/19064/

FrSIRT has its advisory FrSIRT/ADV-2006-0791 located at
http://www.frsirt.com/english/advisories/2006/0791

Both of these have highest severity level in use; Secunia says Extremely Critical (5/5) and FrSIRT Critical Risk (4/4).

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.0; fi-FI; rv:1.7.12) Gecko/20050919 Firefox/1.0.7

[Pu7o]

The Panther version of the security update seems to bump the Safari useragent to v312.6.

UserAgent: Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en) AppleWebKit/312.8 (KHTML, like Gecko) Safari/312.6