[X-Newbies] MAC VIRUS

[Scott]

That security update is most likely *not* for the trojan in question.  
While Apple can be fairly responsive in regards to security updates,  
they're not that fast, especially for something they deem to be low  
risk. It would also be packaged as a separate update. As Norman  
wrote, the 10.4.5 update has been in the works for a good while, and  
would not be rewritten at this late date to include a fix.




On Feb 18, 2006, at 1:36 PM, J wrote:

> Um, now that I have read your link it DOES say that you can get  
> this update via the Software Update Control Panel.
> So that security update is indeed within this update, but only as  
> of 02/14.
>
> If you already updated to 10.4.5 prior to the 14th, then I suggest  
> running that Control Panel once again to see if there is any other  
> update in there.
>
> On Feb 18, 2006, at 1:22 PM, Norman Cohen wrote:
>
>> I'm up to date on all the updates on all my machines.
>>
>> From Apple's website <http://docs.info.apple.com/article.html? 
>> artnum=303290>, the security fix listed for 10.4.5 is:
>>
>> Mac OS X 10.4.5 Update
>>
>> Kernel
>> CVE-ID: CVE-2006-0382
>> Available for: Mac OS X 10.4.5, Mac OS X Server 10.4.5
>> Impact: A malicious local user can cause a system crash
>> Description: A malicious local user may trigger a system crash by  
>> invoking an undocumented system call. This update addresses the  
>> issue by removing the system call from the kernel. Credit to David  
>> Goldsmith of Matasano for reporting this issue.
>>
>>
>> I just wanted to confirm that the 10.4.5 update (which was in the  
>> works long before the worm became an issue) does NOT provide  
>> protection. It would be bad for the Newbies on this list to think  
>> otherwise. Your original post seemed to indicate that 10.4.5  
>> provided protection for this specific threat, and that doesn't  
>> appear to be so.
>>
>> As mentioned previously, those interested (and who shouldn't be)  
>> should refer to Kirk and Rob's very nice article at MacWorld, the  
>> information at Ambrosia and perhaps the information at the various  
>> virus protection software sites for methods to protect themselves  
>> from this issue.
>>
>> Norm
>>
>> ---
>> Norman A. Cohen
>> nacohen at mac.com
>>
>> "Programming today is a race between software engineers striving
>> to build bigger and better idiot-proof programs, and the Universe
>> trying to produce bigger and better idiots.  So far, the Universe
>> is winning."
>> Rich Cook
>
> _______________________________________________
> X-Newbies mailing list
> X-Newbies at listserver.themacintoshguy.com
> http://listserver.themacintoshguy.com/mailman/listinfo/x-newbies
>
> Listmom is trying to clean out his closets! Vintage Mac and random  
> stuff:
>         http://search.ebay.com/_W0QQsassZmacguy1984
>
>

-- 
Scott Buntin