Apple v� h�ng lo?t l? h?ng cho Mac OS X

Apple v?a tung ra phi�n b?n n�ng c?p m?i cho h? ?i?u h�nh Mac OS X ?? kh?c ph?c m?t lo?t l? h?ng d? b? tin t?c l?i d?ng t?n c�ng.



C? th? c�c l? h?ng n�y bao g?m:



1. L? h?ng trong BIND: T? l? h?ng n�y tin t?c s? th�m nh?p v�o cache c?a DNS tr�n m�y ch? ph�n gi?i t�n mi?n DNS.



2. L?i tr�n b? ??m c?a CarbonCore trong t�n file s? g�y tr�n b? ??m t? c�c t�n file qu� d�i so v?i ?? d�i m� ph?n m?m qu?n l� file API c?a framework CarbonCore cho ph�p. Tr??ng h?p khai th�c th�nh c�ng s? cho ph�p th?c thi m� nh? ph�n.



3. L?i trong ph?n m?m x? l� ?? ho? CoreGraphics khi nh?n c�c th�ng s? s? g�y ra t�nh tr?ng ng?t b? nh?. Tr??ng h?p khai th�c th�nh c�ng s? cho ph�p th?c thi m� nh? ph�n.



4. L?i tr�n t?p h?p s? nguy�n trong ph?n m?m x? l� ?? ho? CoreGraphics khi t?o file PDF ch?a font Type 1. L?i n�y s? g�y tr�n b? ??m heap th�ng qua m?t font c� ?? d�i qu� l?n.



5. C�c l? h?ng trong Quicklook khi t?i t?p tin c?a Microsoft Office s? khi?n b? nh? b? l?i. Tr??ng h?p khai th�c th�nh c�ng s? cho ph�p th?c thi m� nh? ph�n.



6. L? h?ng trong Data Detectors khi xem c�c tin nh?n gi? m?o.



7. L? h?ng trong c�ng c? Repair Permissions, cho ph�p th?c thi l?nh nh? ph�n v?i quy?n h? th?ng.



8. L?i trong OpenLDAP khi ph�n t�ch c�c g�i m� ho� ASN.1 BER c� th? b? l?i d?ng ?? t?n c�ng t? ch?i d?ch v? (DoS).



9. L?i v??t qu� gi?i h?n trong h�m OpenSSL "SSL_get_shared_ciphers()". ?�y l� l?i trong x? l� d? li?u ASN.1 b?ng c�u l?nh OpenSSL s? g�y v�ng l?p v� h?n v� ti�u t?n r?t nhi?u b? nh? c?a h? th?ng.



10. M?t v�i l? h?ng trong ng�n ng? PHP c� th? b? khai th�c ?? qua m?t c�c gi?i h?n b?o m?t v� d�ng ?? t?n c�ng DoS.



11. Hai l?i trong t�nh n?ng rsync cho ph�p qua m?t c�c gi?i h?n b?o m?t.



Gi?i ph�p: C?n n�ng c?p l�n phi�n b?n Apply Security Update 2008-005, bao g?m:



Security Update 2008-005 Server (PPC):

http://www.apple.com/support/downloads/securityupdate2008005serverppc.html  



Security Update 2008-005 Server (Intel):

http://www.apple.com/support/downloads/securityupdate2008005serverintel.html



Security Update 2008-005 (PPC):

http://www.apple.com/support/downloads/securityupdate2008005ppc.html



Security Update 2008-005 (Intel):

http://www.apple.com/support/downloads/securityupdate2008005intel.html



Security Update 2008-005 (Leopard):

http://www.apple.com/support/downloads/securityupdate2008005leopard.html

(VnMedia-Secunia)

Submit Article :- Digg + Technorati + del.icio.us + Stumbleupon + Reddit + BlinkList + Furl + Yahoo+ Blogmarks + Ekstreme Socializer

|