Security-announce

Download

security-announce@lists.apple.com

June 2003

1 participants
2 discussions

APPLE-SA-2003-06-12 Security Update 2003-06-12 Apache 2
by Apple Product Security 12 Jun '03

12 Jun '03

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2003-06-12 Security Update 2003-06-12 Apache 2 Security Update 2003-06-12 is now available. It contains fixes for the following potential security issues for Mac OS X Server. Mac OS X client does not contain the issues being addressed by this software update. Apache 2.0: Fixes CAN-2003-0245 by updating Apache 2.0.45 to 2.0.46 to address a security hole in the mod_dav module that could be exploited remotely causing an Apache Web server process to crash. Apache 1.3 is unaffected and is the primary web server on Mac OS X Server. Apache 2.0 is installed with Mac OS X Server, but off by default. dsimportexport: Fixes CAN-2003-0420 where a logged-in user could potentially view the name and password of the account running the dsimportexport tool. Security Update 2003-06-12 may be obtained from: * Software Update pane in System Preferences - OR - * Apple's Software Downloads web site: http://www.info.apple.com/kbnum/n120215 The download file is named: "SecurityUpd2003-06-12.dmg" Its SHA-1 digest is: 1f8e101111ae059ebd6eaf91b69267808517b4a1 Information is also posted to the Apple Support web site: http://docs.info.apple.com/article.html?artnum=61798 This message is signed with Apple's Product Security PGP key, and details are available at: http://www.apple.com/support/security/security_pgp.html -----BEGIN PGP SIGNATURE----- Version: PGP 8.0.2 iQEVAwUBPukFjHeI0z6bzFr0AQIZQAgAgKNZ4eFeiTYQNyHC6Xa3A0AVAz84RkFQ 5Eb7BivZgBH+Wa0AMfs4OH9Z7+XtBFH5GbkKHL9MOSeW97cDCyBxTaNk/G98SFgj DdAmnbNY5GUA5mhEq4gRMChICJGE+Fc9zQLqwGFZ4NDlpOpoDWILOABM4E4NeeVe 3AEPZe4WeVXRup+kAfYfY2oyKz74AxU2CeHnEwQC3OFpBM1zFu59x2S1TPdwi8Ti 6K2Uyzv0bjKtSNxgeoCLzJgiah9B7otzOyR0h5xqJ/shlwAX4f3/GEeK//V0B6a+ +GimSMrHQPPvSFRRWpRdHAEB24vasaDG6SjJ/dUDqCwcCH6jekWxdA== =Gs31 -----END PGP SIGNATURE----- _______________________________________________ security-announce mailing list | security-announce(a)lists.apple.com Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/security-announce Do not post admin requests to the list. They will be ignored.

1 0

APPLE-SA-2003-06-09 Security Update 2003-06-09
by Product Security 09 Jun '03

09 Jun '03

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2003-06-09 Security Update 2003-06-09 Security Update 2003-06-09 is now available. It contains fixes for the following potential security issues: * AFP: CAN-2003-0379. When Apple File Service (AFP Server) in Mac OS X Server is serving files on a UFS or re-shared NFS volume, there is a potential vulnerability that can allow a remote user to overwrite arbitrary files. * Directory Services: CAN-2003-0378. When logging in via Kerberos on an LDAPv3 server, the account password may be sent in cleartext format when Login Window falls back to trying a simple bind on the server. Security Update 2003-06-09 may be obtained from: * Software Update pane in System Preferences - OR - * Apple's Software Downloads web site: http://www.info.apple.com/kbnum/n120223 The download file is named: "SecurityUpd2003-06-09.dmg" Its SHA-1 digest is: cc533ba3a6ef1825557e288df1c5abfd7d83c82b Information is also posted to the Apple Support web site: http://docs.info.apple.com/article.html?artnum=61798 This message is signed with Apple's Product Security PGP key, and details are available at: http://www.apple.com/support/security/security_pgp.html -----BEGIN PGP SIGNATURE----- Version: PGP 8.0.2 iQEVAwUBPuTZsneI0z6bzFr0AQIxYQgAuBy6d6Ihu8f6GHhi2m683bEVnYTgc/JW BukaGPvCjs6ImTV/iCqBsl1NxICCR351y448nHOCfLgOB54OZpadgBuH5Ry+nL3Q 7ZeTVA5xL5PA7cB+WBNvBQWmlG8+jRTNuELnKFDnEaLAkOFU9PpcKPg7ewtQviU5 rheBhljSMiPVMZFiNh/HBo/bjMN63/ZyWF+C50kin+yzLNFu1d5xHqSHMS9x+39s 7nQyNt+XHE1aY0TsFXFjalb2Up40plGcAVPdHFEyGcsz9qJ+9SNuZlirl+yrxlLL aH5lfrwTMCx8Mar/eTq45NpbKfiK+HYNrH9j+DNKg/y2GOKlOiADMg== =qf6G -----END PGP SIGNATURE----- _______________________________________________ security-announce mailing list | security-announce(a)lists.apple.com Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/security-announce Do not post admin requests to the list. They will be ignored.

1 0