SecurityFocus

Heap overflow in RealPlayer ID3 tag parser Oct 29 2007 08:03PM
NGSSoftware Insight Security Research (nisr ngssoftware com) (1 replies)

Holes in the firewall of Mac OS X Leopard Oct 29 2007 09:49PM
Juergen Schmidt (ju heisec de) (2 replies)

Leopard's firewall damages Skype and WoW Nov 05 2007 07:36PM
Juergen Schmidt (ju ct heise de)

Re: Holes in the firewall of Mac OS X Leopard Oct 29 2007 10:02PM
Brandon S. Allbery KF8NH (allbery ece cmu edu) (1 replies)

On Oct 29, 2007, at 17:49 , Juergen Schmidt wrote:

> - if you set it to "Block all incoming connections" it still allows
> access
> to certain system services. We could access the ntp daemon that is
> running
> per default over the internet. In a LAN based scenario, we were
> able to
> query the Netbios naming service even with full blocking enabled.

The firewall in Tiger, and presumably Leopard, only affects TCP
services by default (you can enable UDP filtering in the Advanced
settings). So no change here from the status quo.

--
brandon s. allbery [solaris,freebsd,perl,pugs,haskell] allbery (at) kf8nh (dot) com [email concealed]
system administrator [openafs,heimdal,too many hats] allbery (at) ece.cmu (dot) edu [email concealed]
electrical and computer engineering, carnegie mellon university KF8NH

[ reply ]

Re: Holes in the firewall of Mac OS X Leopard Oct 29 2007 11:55PM
Juergen Schmidt (ju heisec de)