• info
• discussion
• exploit
• solution
• references

Rsync Daemon Excludes Multiple File Access Vulnerabilities

Solution:
Updates are available. Please see the references for more information.


Apple Mac OS X 10.4.11

• Apple SecUpd2008-005Intel.dmg
  For Mac OS X v10.4.11 (Intel)
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=20387&cat= 1&platform=osx&method=sa/SecUpd2008-005Intel.dmg


• Apple SecUpd2008-005PPC.dmg
  For Mac OS X v10.4.11 (PPC)
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=20386&cat= 1&platform=osx&method=sa/SecUpd2008-005PPC.dmg

Apple Mac OS X Server 10.4.11

• Apple SecUpdSrvr2008-005PPC.dmg
  For Mac OS X Server v10.4.11 (PPC)
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=20384&cat= 1&platform=osx&method=sa/SecUpdSrvr2008-005PPC.dmg


• Apple SecUpdSrvr2008-005Univ.dmg
  For Mac OS X Server v10.4.11 (Universal)
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=20385&cat= 1&platform=osx&method=sa/SecUpdSrvr2008-005Univ.dmg

Apple Mac OS X 10.5.4

• Apple SecUpd2008-005.dmg
  For Mac OS X v10.5.4 and Mac OS X Server 10.5.4
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=20388&cat= 1&platform=osx&method=sa/SecUpd2008-005.dmg