-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2003-07-23 Workgroup Manager in Mac OS X Server Security Update 2003-07-23 is now available for Mac OS X Server. It fixes CAN-2003-xxxx to improve the security of your system by assigning a "disabled" password to a new account created by Workgroup Manager until that account has been saved for the first time. This ensures the new account cannot be accessed by an unauthorized individual. Affected Systems: Workgroup Manager is only shipped with Mac OS X Server 10.2 and later versions. Since it is possible for someone to manually install the Workgroup Manager utility onto a Mac OS X client system, the Security Update will also fix the vulnerability for Mac OS X client systems that contain Workgroup Manager. There is no need for the Security Update on Mac OS X client systems unless Workgroup Manager has been installed, and the update will not appear in the System Preferences Software Update pane if Workgroup Manager is not present. Security Update 2003-07-23 may be obtained from: * Software Update pane in System Preferences - OR - * Apple's Software Downloads web site: http://www.info.apple.com/kbnum/n120235 The download file is named: "SecurityUpd2003-07-23.dmg" Its SHA-1 digest is: fd065888b45355cc01a66df8eaf9df29c92cd8e2 Information will also be posted to the Apple Support web site: http://docs.info.apple.com/article.html?artnum=61798 This message is signed with Apple's Product Security PGP key, and details are available at: http://www.apple.com/support/security/security_pgp.html -----BEGIN PGP SIGNATURE----- Version: PGP 8.0.2 iQEVAwUBPx9e6XeI0z6bzFr0AQK+Agf+KdpzjIOumlSrevPrgCiVd+rasPC0KWqX YDXct886hY8tWCdU8iHsYjXkRZMcqRknc4ayhnvjmcIvCncpEBjVlBCs5ixJ6eju Ck4Kvfueggr4CGIa0Ecam0XfubakS5DpmyeciJnF3hQ6H34h0pMtxD4sa5oZdRFf 22/tY8zEpXLUw+Ytli83eOfQQG2U9R+qI/3RWI7bTrrqZc69hJm4sfQyoj4o51dU fXdrXvlbgSvXV3+dMtZQtK2SqY0+/NeBVlqnBjxRm/09Qvka1vHQm/j8H/BBqAln 5EU/fMW3WsO2YzXRjGKVnTG7L1JRyfF3//MF7TmaIMfA9KHB6P0Thw== =yWX/ -----END PGP SIGNATURE----- _______________________________________________ security-announce mailing list | security-announce@lists.apple.com Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/security-announce Do not post admin requests to the list. They will be ignored.