• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

MacOS X SoftwareUpdate Arbitrary Package Installation Vulnerability

Solution:
Look for updates from Apple on http://www.info.apple.com/support/downloads.html.

Apple has released fixes.


Apple Mac OS X 10.1

• Apple SecUpd7-18-02forv.10.1.dmg.bin
  http://download.info.apple.com/Mac_OS_X/061-0094.20020719.E4K9m/SecUpd 7-18-02forv.10.1.dmg.bin

Apple Mac OS X 10.1.1

• Apple SecurityUpdate7-18-02.dmg.bin
  http://download.info.apple.com/Mac_OS_X/061-0091.20020719.cfT6H/Securi tyUpdate7-18-02.dmg.bin

Apple Mac OS X 10.1.2

• Apple SecurityUpdate7-18-02.dmg.bin
  http://download.info.apple.com/Mac_OS_X/061-0091.20020719.cfT6H/Securi tyUpdate7-18-02.dmg.bin

Apple Mac OS X 10.1.3

• Apple SecurityUpdate7-18-02.dmg.bin
  http://download.info.apple.com/Mac_OS_X/061-0091.20020719.cfT6H/Securi tyUpdate7-18-02.dmg.bin

Apple Mac OS X 10.1.4

• Apple SecurityUpdate7-18-02.dmg.bin
  http://download.info.apple.com/Mac_OS_X/061-0091.20020719.cfT6H/Securi tyUpdate7-18-02.dmg.bin

Apple Mac OS X 10.1.5

• Apple SecurityUpdate7-18-02.dmg.bin
  http://download.info.apple.com/Mac_OS_X/061-0091.20020719.cfT6H/Securi tyUpdate7-18-02.dmg.bin