Security-announce

Download

security-announce@lists.apple.com

July 2003

1 participants
2 discussions

APPLE-SA-2003-07-23 Workgroup Manage
by Apple Product Security 24 Jul '03

24 Jul '03

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2003-07-23 Workgroup Manager in Mac OS X Server Security Update 2003-07-23 is now available for Mac OS X Server. It fixes CAN-2003-xxxx to improve the security of your system by assigning a "disabled" password to a new account created by Workgroup Manager until that account has been saved for the first time. This ensures the new account cannot be accessed by an unauthorized individual. Affected Systems: Workgroup Manager is only shipped with Mac OS X Server 10.2 and later versions. Since it is possible for someone to manually install the Workgroup Manager utility onto a Mac OS X client system, the Security Update will also fix the vulnerability for Mac OS X client systems that contain Workgroup Manager. There is no need for the Security Update on Mac OS X client systems unless Workgroup Manager has been installed, and the update will not appear in the System Preferences Software Update pane if Workgroup Manager is not present. Security Update 2003-07-23 may be obtained from: * Software Update pane in System Preferences - OR - * Apple's Software Downloads web site: http://www.info.apple.com/kbnum/n120235 The download file is named: "SecurityUpd2003-07-23.dmg" Its SHA-1 digest is: fd065888b45355cc01a66df8eaf9df29c92cd8e2 Information will also be posted to the Apple Support web site: http://docs.info.apple.com/article.html?artnum=61798 This message is signed with Apple's Product Security PGP key, and details are available at: http://www.apple.com/support/security/security_pgp.html -----BEGIN PGP SIGNATURE----- Version: PGP 8.0.2 iQEVAwUBPx9e6XeI0z6bzFr0AQK+Agf+KdpzjIOumlSrevPrgCiVd+rasPC0KWqX YDXct886hY8tWCdU8iHsYjXkRZMcqRknc4ayhnvjmcIvCncpEBjVlBCs5ixJ6eju Ck4Kvfueggr4CGIa0Ecam0XfubakS5DpmyeciJnF3hQ6H34h0pMtxD4sa5oZdRFf 22/tY8zEpXLUw+Ytli83eOfQQG2U9R+qI/3RWI7bTrrqZc69hJm4sfQyoj4o51dU fXdrXvlbgSvXV3+dMtZQtK2SqY0+/NeBVlqnBjxRm/09Qvka1vHQm/j8H/BBqAln 5EU/fMW3WsO2YzXRjGKVnTG7L1JRyfF3//MF7TmaIMfA9KHB6P0Thw== =yWX/ -----END PGP SIGNATURE----- _______________________________________________ security-announce mailing list | security-announce(a)lists.apple.com Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/security-announce Do not post admin requests to the list. They will be ignored.

1 0

Apple-SA-2003-07-14 Screen Effects Password
by Product Security 14 Jul '03

14 Jul '03

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2003-07-14 Screen Effects Password Security Update 2003-07-14 is now available. It fixes CAN-2003-0518, a potential vulnerability when a password is required upon waking from the Screen Effects feature, which could allow an unauthorized user access to the desktop of the logged in user. Security Update 2003-07-14 may be obtained from: * Software Update pane in System Preferences - OR - * Apple's Software Downloads web site: http://www.info.apple.com/kbnum/n120232 The download file is named: "SecurityUpd2003-07-14.dmg" Its SHA-1 digest is: 210f4819b8559b590632cd62b4055a437b9a0267 Information will also be posted to the Apple Support web site: http://docs.info.apple.com/article.html?artnum=61798 This message is signed with Apple's Product Security PGP key, and details are available at: http://www.apple.com/support/security/security_pgp.html -----BEGIN PGP SIGNATURE----- Version: PGP 8.0.2 iQEVAwUBPxM3yneI0z6bzFr0AQKztAf9FmNZG7jMC209Zz2lj4JGwpIfvHphGUEx r6EO78LpBe+YGkqcoq4A/50A4h9eZyYcoxeB/MvIv/xtGlTPXlgOEBJTSLCVWt0v kduH1HBF6wtV/IhfE7x0wHKd7ia8+TxB2Eku38GVYrK1EEacoTsnAf5LdsCX2UiB k0LrUYAR7SMGB7+7HA7iCUemoJULqbc/eBqC9YgUOVxVpoUJIf/nEfFACC80sF9n rCLnb3mpZUKDs2KiHXcDnVRdxz/4I2L5brYmhUovkpsM9A3c21dMRDNWGjWwyeiw aQI7yjAzdqKPTFr+dxYKadrBNXJ1i+HtE5h1Wj/dSkwJ4/+edYXBXg== =ADvv -----END PGP SIGNATURE----- _______________________________________________ security-announce mailing list | security-announce(a)lists.apple.com Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/security-announce Do not post admin requests to the list. They will be ignored.

1 0