Security hole in DNS library may affect OS X
updated 11:00 pm EDT, Sat June 29, 2002
CERT has issued a new CA-2002-19 Advisory: A buffer overflow vulnerability exists in multiple implementations of DNS resolver libraries....A remote attacker who is able to send malicious DNS responses could potentially exploit this vulnerability to execute arbitrary code or cause a denial of service on a vulnerable system." The advisory notes that it affects most BSD-based systems that use ISC BIND DNS resolver library (libbind) or BSD DNS resolver library (libc), which are part of many BSD-based systems (Mac OS X is not listed, but Apple has not formally responded to the security bulletin.)



Fresh-Faced Recruit
Joined: Jul 2001
Security Update2 Anyone
Apple seem, recently, to be quite good at releasing updates for security. I'm sure if this affects Mac OS X Apple will get something out to us soon.