From; Oxygen3: "Tradition is not inherited, it is conquered" André Malraux (1901-1976), French author and philosopher. - Security updates for Apple Mac OS X - Oxygen3 24h-365d, by Panda Software (http://www.pandasoftware.com) Madrid, March 22, 2005 - Apple has released an update to resolve nine security problems affecting its MAC OS. The update includes the fix for the following problems: - Two errors in the Apple Filing Protocol (AFP) that could allow an attacker to launch a denial of service attack or discover the contents of a drop box. - A local security bypass affecting Bluetooth input devices. - A buffer overflow problem in Core Foundation, which could allow execution of arbitrary code. - Multiple vulnerabilities in Cyrus IMAP, including remotely exploitable denial of service and buffer overflows. - A problem affecting the assigning of write permissions, which could allow different types of attacks. - Directory traversal in Mailman, which could allow access to arbitrary files - A script is also included for the Safari browser to correct a problem in the processing of URLs in International Domain Names (IDN) format that could allow phishing attacks. The updates can be downloaded from: Client http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=05529&platform=osx&method=sa/SecUpd2005-003Pan.dmg Server http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty1.pl/product=05530&platform=osx&method=sa/SecUpdSrvr2005-003Pan.dmg NOTE: The addresses above may not show up on your screen as single lines. This would prevent you from using the links to access the web pages. If this happens, just use the 'cut' and 'paste' options to join the pieces of the URL. ------------------------------------------------------------ The 5 viruses most frequently detected by Panda ActiveScan, Panda Software's free online scanner: 1)Mhtredir.gen; 2)Netsky.P; 3)Downloader.GK; 4)Shinwow.E; 5)Sdbot.ftp. ------------------------------------------------------------ To contact with Panda Software, please visit: http://www.pandasoftware.com/about/contact/ ------------------------------------------------------------ *********** MIKE"S REPLY SEPARATOR *********** Mike ~ It is a good day if I learned something new. Editor MikesWhatsNews see a sample on my web page http://www3.telus.net/mikebike <mikeswhatsnews-request@xxxxxxxxxxxxx?Subject=subscribe> http://www3.telus.net/mikebike/worm_removal.htm See my Anti-Virus pages http://virusinfo.hackfix.org/index <virusinfo-request@xxxxxxxxxxxxx?Subject=subscribe> A Technical Support Alliance and OWTA Charter Member