[X-Newbies] MAC VIRUS

[J]

Um, now that I have read your link it DOES say that you can get this  
update via the Software Update Control Panel.
So that security update is indeed within this update, but only as of  
02/14.

If you already updated to 10.4.5 prior to the 14th, then I suggest  
running that Control Panel once again to see if there is any other  
update in there.

On Feb 18, 2006, at 1:22 PM, Norman Cohen wrote:

> I'm up to date on all the updates on all my machines.
>
> From Apple's website <http://docs.info.apple.com/article.html? 
> artnum=303290>, the security fix listed for 10.4.5 is:
>
> Mac OS X 10.4.5 Update
>
> Kernel
> CVE-ID: CVE-2006-0382
> Available for: Mac OS X 10.4.5, Mac OS X Server 10.4.5
> Impact: A malicious local user can cause a system crash
> Description: A malicious local user may trigger a system crash by  
> invoking an undocumented system call. This update addresses the  
> issue by removing the system call from the kernel. Credit to David  
> Goldsmith of Matasano for reporting this issue.
>
>
> I just wanted to confirm that the 10.4.5 update (which was in the  
> works long before the worm became an issue) does NOT provide  
> protection. It would be bad for the Newbies on this list to think  
> otherwise. Your original post seemed to indicate that 10.4.5  
> provided protection for this specific threat, and that doesn't  
> appear to be so.
>
> As mentioned previously, those interested (and who shouldn't be)  
> should refer to Kirk and Rob's very nice article at MacWorld, the  
> information at Ambrosia and perhaps the information at the various  
> virus protection software sites for methods to protect themselves  
> from this issue.
>
> Norm
>
> ---
> Norman A. Cohen
> nacohen at mac.com
>
> "Programming today is a race between software engineers striving
> to build bigger and better idiot-proof programs, and the Universe
> trying to produce bigger and better idiots.  So far, the Universe
> is winning."
> Rich Cook