Major security update fixes AFP, CUPS, more

Apple today unveiled Security Update 2008-002, which provides a number of fixes for several system vulnerabilities found in AFP, CUPS, AppKit, and several other system-level resources. Most of the vulnerabilities revolve around maliciously crafted URLs granting access to system-level privileges, while others allow users to bypass system security. The majority of fixes are for Mac OS X 10.4 Tiger and Tiger Server users, while some apply to the 10.5 Leopard equivalents.

The update also fixes several Denial of Service issues, as well as application termination or unexpected restart/shutdown occurrences. Leopard and Leopard Server authenticated print queues were also addressed, as a certain exploit could lead to a malicious user discovering login information through a vulnerability in communication protocols.

Filed under: security, software, networking, Apple
Other story tags: servers, Leopard, Tiger, vulnerabilities

, 2

2 comments

Reader Reactions (Please use <i></i> for italic text)

subscribe to comments
for this article

Expand All

Global Settings

testudo

so...

03/19, 9:43am, EDT

Does this mean that 10.3.9 is not affected by any of these issues, or that Apple no longer supports security issues with 10.3.9?

These are the kind of answers a company serious about growing in the Enterprise has to have published, out front, and for everyone to see....

Fresh-Faced Recruit

Joined Aug 2001

User is offline

UmarOMC

YEAH!

03/19, 1:24pm, EDT

What about 10.2 and 10.1!? Where are my System 7 Security updates!?

Fresh-Faced Recruit

Joined Aug 2001

User is offline

Your Comments