Follow MacBlips on Twitter
New OS X Security Update (2009-004) patches DNS issue
Infinite Loop —
... According to Apple's security page for the 2009-004 update, there's only one major fix included in this package, and it has to do with BIND. "By sending a maliciously crafted update message to the BIND DNS server, a remote attacker may be able to interrupt the BIND service," writes Apple. "The issue affects servers which are masters for one or more zones, regardless of whether they accept updates. BIND is included with Mac OS X and Mac OS X Server but it is not enabled by default. This update addresses the issue by properly rejecting messages with a record of type 'ANY' where an ...
Security Update 2009-004 fixes BIND vulnerability
Macworld —
... With the security content of all the updates Apple has been rolling out in the last few weeks, you might have thought the tides of darkness stemmed. But hackers never sleep—or so it seems—so neither can Apple. On Wednesday, the company released Security Update 2009-004, which is recommended for all Mac OS X users. There’s just one fix listed in 2009-004’s knowledge base document , but it’s a pretty nasty one: a vulnerability in software package BIND that could let a remote party interrupt the Domain Name System service. BIND has previously been the target of hackers, most ...
Security Update 2009-004 DNS Patch Applies to Few Systems
TidBITS: Mac News for the Rest of Us —
... Security Update 2009-004 for Mac OS X and Mac OS X Server 10.4.11 and 10.5.8 has nothing to do with fundamental DNS flaws that Rich Mogull and I wrote about in " ...
Apple releases Security Update 2009-004
The Unofficial Apple Weblog (TUAW) —
Filed under: Software Update, SecurityAmidst the Safari and AirPort updates yesterday, Apple has released yet another update today, Security Update 2009-004. This update patches a single vulnerability affecting the BIND DNS server. It's available now through Software Update or Apple's support downloads page, and is available to download for Mac OS X Leopard, Tiger (PPC and Intel) and Tiger Server (PPC and Universal). TUAWApple releases Security Update 2009-004 originally ...
Apple Releases Security Update 2009-004
Mac|Life —
[image] Fire up Software Update, because Apple has pushed through Security Update 2009-004. What does this update do, you might ask? Well, in the wonderfully concise words of Apple Support :"A logic issue in the handling of dynamic DNS update messages may cause an assertion to be triggered. By sending a maliciously crafted update message to the BIND DNS server, a remote attacker may be able to interrupt the BIND service. The issue affects servers which are masters for one or more zones, regardless of whether they accept updates. BIND is included with Mac OS X and Mac OS X ...
Apple released Security Update 2009-004
MacCentre701 —
Apple released Security Update 2009-004 Security Update Box Apple has released Security Update 2009-004 addressing vulnerability that may cause DNS server to terminate unexpectedly. Security Update 2009-004 is available for Mac OS X 10.5.8 and Mac OS X 10.4.11 on both client and server versions. Security Update 2009-004 is recommended for all users and improves the security of Mac OS X. For information on the security content of this update, please visit this website: http://support.apple.com/kb/HT1222.>> more ...
