US-CERT Technical Cyber Security Alert TA07-352A -- Apple Updates for Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

National Cyber Alert System

Technical Cyber Security Alert TA07-352A

Apple Updates for Multiple Vulnerabilities

Original release date: December 18, 2007
Last revised: --
Source: US-CERT

Systems Affected

* Apple Mac OS X versions prior to and including 10.4.11 and 10.5.1
* Apple Mac OS X Server versions prior to and including 10.4.11 and
10.5.1

These vulnerabilities affect both Intel and PowerPC platforms.

Overview

Apple has released Security Update 2007-009 to correct multiple
vulnerabilities affecting Apple Mac OS X and Mac OS X Server.
Attackers could exploit these vulnerabilities to execute arbitrary
code, gain access to sensitive information, surreptitiously initiate a
video conference, or cause a denial of service.

I. Description

Apple Security Update 2007-009 addresses a number of vulnerabilities
affecting Apple Mac OS X and OS X Server versions 10.4.11 and 10.5.1.
Further details are available in the related vulnerability notes.

The update addresses vulnerabilities in other vendors' products that
ship with Apple OS X or OS X Server. These products include:
* Adobe Flash
* Adobe Shockwave
* GNU Tar

II. Impact

The impacts of these vulnerabilities vary. Potential consequences
include arbitrary code execution, sensitive information disclosure,
surreptitious video conference initiation, and denial of service.

III. Solution

Install updates from Apple

Install Apple Security Update 2007-009. This and other updates are
available via Software Update or via Apple Downloads.

IV. References

* Vulnerability notes for Apple Security Update 2007-009 -
<http://www.kb.cert.org/vuls/byid?searchview&query=apple-2007-009>

* About Security Update 2007-009 -
<http://docs.info.apple.com/article.html?artnum=307179>

* Mac OS X: Updating your software - <http://docs.info.apple.com/article.html?artnum=106704>

* Apple - Support - Downloads - <http://www.apple.com/support/downloads/>

_________________________________________________________________

The most recent version of this document can be found at:

<http://www.us-cert.gov/cas/techalerts/TA07-352A.html>
_________________________________________________________________

Feedback can be directed to US-CERT Technical Staff. Please send
email to <cert@cert.org> with "TA07-352A Feedback VU#905292" in the
subject.
_________________________________________________________________

For instructions on subscribing to or unsubscribing from this
mailing list, visit <http://www.us-cert.gov/cas/signup.html>.
_________________________________________________________________

Produced 2007 by US-CERT, a government organization.

Terms of use:

<http://www.us-cert.gov/legal.html>
_________________________________________________________________

Revision History

December 18, 2007: Initial release

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iQEVAwUBR2hR0fRFkHkM87XOAQL7Egf+NvQEwnN2IGDdDwMEb9C2RDw58FXq0EMZ
7SRO8qbrM0c+G3apLFlmCCivWpGHqms2hzrSeon/Ym1YstHQOQeoJANmsHA3SyKz
Wx8TIG10jEiAgytMuyrYjf0w3alXBEsDgXcu8FRc5Z4dg7osMPe7Lco7vVfMvoZG
IpEEQu98zxh2p+Vhf1XKr9UfUnkD4O88rRAs+M1oDZd46GH+JvkYLgLCmkMSwIcs
Vi4M7J+KHUBBkaMZYjnp+YqRwNDq9sGskVEOVDMk9OXw7VhAR7Kf8/zo9Tt1h3P0
h9JeMBHHb0M0MEtYHx/7JxpleXS3LtyiL0kDb9cbMjxU0kKK9SKb/Q==
=Y1jd
-----END PGP SIGNATURE-----

California Fire News

World News - Australia - State Coroner accuses Fire department of FUBAR Posted: 17 Dec 2007 10:28 PM CST Coroner slams CFS over fatal bushfires The Country Fire Service (CFS) failed to take adequate measures to minimize the impact of the Eyre Peninsula bush fires that killed nine people, a South Australian coroner has found. Deputy state coroner Anthony Schapel on Tuesday handed down his findings after a long-running inquiry into the January, 2005 bushfires that burnt about 80,000 hectares of land on the lower Eyre Peninsula and caused more than $100 million in damage. Mr Schapel was critical of the CFS handling of the fires and said many public warnings were mistimed and not particularly appropriate for the locations at which they were directed. He said communications between CFS staff in Port Lincoln and the state headquarters in Adelaide were inadequate at the beginning of the fires and not enough pre-emptive steps were taken to battle the blaze including backburning and fire breaks. "The fact of the matter was that no adequate measures were put in place or attempted which meant that opportunities to alter the outcome were not taken," Mr Schapel said at the Port Lincoln racecourse. "Because the risks to the public was never properly addressed or appreciated, none of those measures were ever adequately considered. "For the same reason no adequate warning was given." Mr Schapel said the CFS had since improved its fire warning system and communication strategies. The deputy Coroner confirmed the fire was started by sparks coming from a faulty exhaust on a car driven over dry vegetation at Wangary

News: Esperanza Fire - Trial rescheduled to April Posted: 17 Dec 2007 12:02 PM CST Trial for Esperanza Fire defendant rescheduled to April 08:22 PM PST on Friday, December 14, 2007 By SONJA BJELLAND The Press-Enterprise A Superior Court judge has ordered that the next hearing in one of Riverside County's most significant murder cases be closed to the public. Raymond Lee Oyler returns to court next month to face murder and arson charges in the deaths of five U.S. Forest Service firefighters during the October 2006 Esperanza Fire. The attorneys involved are not allowed to say what the Jan. 25 hearing is about or why it has been closed. Judge Jeffrey Prevost said in court that the hearing could "cause prejudice" if it was open to the public. The defense and prosecution met with Prevost in chambers before a hearing Friday. Prevost also ordered the transcript of that discussion sealed. At Friday's hearing, Prevost postponed Oyler's jury trial, rescheduling it for April 14. On Oct. 26, 2006, fire overran the Engine 57 crew of Capt. Mark Loutzenhiser, of Idyllwild; Jess McLean, of Beaumont; Jason McKay, of Phelan; Daniel Hoover-Najera, of San Jacinto; and Pablo Cerda, of Fountain Valley. They were trying to protect a vacant octagonal home in Twin Pines from a wildfire. A federal report later concluded that the crew and the U.S. Forest Service committed six serious violations that compromised firefighter safety during the blaze. Oyler also faces 23 counts of arson and 17 counts of setting fires with an incendiary device. He has pleaded not guilty and remains in custody. The district attorney's office is seeking the death penalty.

You are subscribed to email updates from California Fire News - Structure, Wildland, EMS To stop receiving these emails, you may unsubscribe now.	Email Delivery powered by FeedBurner
Inbox too full? Subscribe to the feed version of California Fire News - Structure, Wildland, EMS in a feed reader.
If you prefer to unsubscribe via postal mail, write to: California Fire News - Structure, Wildland, EMS, c/o FeedBurner, 20 W Kinzie, 9th Floor, Chicago IL USA 60610

California Fire News

Burglary Arrests Made in Grass Valley Fire Area Posted: 15 Dec 2007 06:54 PM CST By G.T. Houts Saturday, December 15, 2007 Lake Arrowhead, CA – San Bernardino County Sheriff's deputies have been making extra area checks of the Grass Valley and Slide Fire areas since a "state of emergency" was declared by Governor Arnold Schwarzenegger. Friday (December 14) deputies made two more felony arrests of individuals who allegedly burglarized or looted dwellings within the emergency zone. Twin Peaks officers arrested Heather Mignon Puckett, 39, and Brian Randolph Gerold, 45, shortly after 4:00 pm in the 900 block of Trinity Drive in Lake Arrowhead. Both were charged with violating California Penal Code Section 463(a) for second-degree burglary during and within an affected county in a "state of emergency" or a "local emergency" resulting from an earthquake, fire flood, riot, or other natural or manmade disaster. Deputies, who also charged Puckett with two counts of failure to appear in court and possession of stolen property, placed Puckett under arrest at 1:39 pm. She was transported to the Central Detention Center in San Bernardino and booked at 4:14 pm. Bail was set at $50,000 on the second-degree burglary count and $25,000 for failure to appear. Gerold, whose bail was also set at $50,000, was arrested at 1:39 p.m. and booked at the Central Detention Center at 4:10 p.m. Both remained in custody early Saturday morning. Source: RIMOFTHEWORLD.net - Columns: Burglary Arrests Made in Grass Valley Fire Area

News: Poomacha fire - Riot on the Crew bus story Posted: 15 Dec 2007 05:03 PM CST Inmate firefighters pulled after melee during California fires SACRAMENTO—Two inmate firefighting crews were pulled away during the height of the wind-driven wildfires that flared across Southern California this fall, after a "riot" broke out on their bus, according to documents obtained Friday. White and Hispanic inmates began fighting in the back of a crew bus while they were supposed to be fighting the Poomacha fire in San Diego County, according to reports obtained by the Associated Press. Other inmates had to be separated after they moved to join the fight, the reports say. The Poomacha fire burned nearly 50,000 acres near Highway 76 near Pauma Valley, destroying 217 homes and other buildings. It was one of more than a dozen fires driven by Santa Ana winds that burned 800 square miles and destroyed 2,196 homes. San Diego Sheriff's spokeswoman Jan Caldwell confirmed that deputies were called to the scene by fire captains to maintain order until more prison guards could arrive. The reports say about 10 deputies kept the two racial groups separated after the fighting stopped. "It's very rare that there are any kind of incidents among fire crew inmates," said Seth Unger, spokesman for the California Department of Corrections and Rehabilitation. "The benefits of this program far outweigh the very few small incidents like this one, which was controlled very quickly." The department had 3,100 inmates fighting fires that day, "one of the largest deployments we've had in our history," Unger said. Inmate crews annually spend three million hours fighting fires, he said, saving taxpayers $80 million a year. The two inmate crews were sent to a maximum security prison, while their entire unit was sent back to its base at Gabilan Conservation Camp in Soledad, according to the reports. Four inmates were administratively charged with "participating in a riot" and sent to segregation cells after the Oct. 27 incident, the reports say. Another 15 inmates faced a lesser administrative charge of "unlawful assembly." No employees were involved or injured, and inmates suffered only minor injuries, according to the reports. Source: Mercury News - By DON THOMPSON Associated Press Writer Article Launched: 12/14/2007 05:14:30 PM PST

Bayscan news: Sad Christmas story Posted: 15 Dec 2007 04:18 PM CST East Palo Alto- Person in a tree hanging Christmas lights was electrocuted this afternoon. When the Christmas lights came into contact with high power lines. Location: Euclid Avenue in East Palo Alto Sizeup: Battalion 1, Engines 1 & 2, and Truck 1 all on scene Victim is unconscious and is smoking and the christmas tree lights are still in contact with the high power line. Resources: PG&E was requested Code 3? and they have a 30 minute ETA. Narrative: Sounds like they're going to have Truck 1 try to cut the Christmas tree lights due to PG&E extended ETA. Comms: Control 1 - 153.89 (Dispatch) Control 2 - 154.37 (Command/Tac) No further updates unless warranted. Source: Bayscan - Yahoo group

You are subscribed to email updates from California Fire News - Structure, Wildland, EMS To stop receiving these emails, you may unsubscribe now.	Email Delivery powered by FeedBurner
Inbox too full? Subscribe to the feed version of California Fire News - Structure, Wildland, EMS in a feed reader.
If you prefer to unsubscribe via postal mail, write to: California Fire News - Structure, Wildland, EMS, c/o FeedBurner, 20 W Kinzie, 9th Floor, Chicago IL USA 60610

California Fire News

Funny Video: Fire SUV - Caution very funny Posted: 14 Dec 2007 12:37 PM CST This video is not for Battalion chiefs, Division Chiefs or higher rank without rank and file personnel nearby to assist in proper interpretation of the video which could confuse persons of such higher rank. Fire SUV video also can be used for study of NIMS, ICS clear text course materials. Video was found at: Firefighterclosecalls.com This posting includes an audio/video/photo media file: Download Now

News Releases: LPF prescribed burn - 800-acres Posted: 14 Dec 2007 11:53 AM CST News Releases: 2007 News Release USDA Forest Service Los Padres National Forest Contact: Joe Pasinato (805) 961-5745 Mike Kremke (831) 385-5434, ext 231 Forest Service to Conduct Prescribed Burn Near Piney Creek The Forest Service plans to conduct a series of prescribed burns starting this month in the Piney Creek area of Los Padres National Forest in Monterey County. The 800-acre project area is one half mile west of Carmel Valley Road between mile markers 35.5 and 38.5. This area is approximately 2.5 miles north of Arroyo Seco and 8 miles southwest of Carmel Valley. The purpose of the prescribed burn is to reduce flammable vegetation in the wildland-urban interface and improve the wildlife habitat and watershed condition. Additionally, it will reduce the threat of a wildfire coming out of the wilderness in that area. While the Piney Creek project will take an estimated 5-10 days to complete, the starting date and progress will depend on the weather. If the fuels and weather are within prescription, burning could begin as early as December 12th and continue into April 2008. Firefighters will burn approximately 200 acres from the ground and then use a helicopter-transported ignition device to treat the remaining 600 acres. The Piney Creek Road and campsites will remained closed during the prescribed burns. Smoke may be visible from several miles away and residual smoke could be present in the area for up to two weeks following the burns. For further information, contact the Monterey Ranger District office in King City, at (831) 385-5434.

News Release: LPF Fire Restrictions Reduced Posted: 14 Dec 2007 11:50 AM CST News Releases: 2007 News Release USDA Forest Service Los Padres National Forest Contact: Joe Pasinato (805) 961-5745 Mary Blair, (805) 646-4348 Ext. 317 Date: December 12, 2007 Fire Restrictions Reduced in Los Padres National Forest Forest Service officials announced today that fire restrictions in Los Padres National Forest, will be reduced as of Friday, December 14. Visitors to the forest are reminded that wildfires can still occur and caution should be used with any fire or heat source. Restrictions will be lifted when rainfall totals increase significantly across the forest. Activities that will be allowed: Smoking in enclosed vehicles, buildings, at developed recreation sites and while stopped in an area at least three feet in diameter, that is barren or cleared of all flammable material Wood and charcoal fires at Campfire Use Sites. (list follows) Portable gas, jellied petroleum or pressurized liquid fuel stoves with a valid California Campfire Permit in areas other than Campfire Use Sites. Recreational target shooting. Activities that will continue to not be allowed: Wood and charcoal fires in areas other than Campfire Use Sites Burning Permits. Year round requirements: Spark arresters are required on all off-highway vehicles, chainsaws and other equipment. Permits are required for welding, grinding and cutting. Tracer ammunition, fireworks and the use of explosives are not allowed. Areas in the forest that are currently closed because of the Zaca and Ranch fire will remain closed until further notice. For a list of Campfire Use Sites in Los Padres National Forest, or further information regarding Fire-Safe camping, contact your nearest Forest Service office or visit the Los Padres National Forest website at www.fs.fed.us/r5/lospadres. Campfire Use Sites Campfires and barbecues are permitted in these Forest Service Campfire Use Sites. This list may be revised during extreme fire conditions. Monterey Ranger District Arroyo Seco Campground /Group Camp Arroyo Seco Day Use Area Bottchers Gap Campground China Camp Escondido Campground Kirk Creek Campground Nacimiento Campground Mill Creek Day Use Area Plaskett Creek Campground/Group Camp Ponderosa Campground Sand Dollar Day Use Area Santa Lucia Memorial Park Campground White Oaks Camp NOTE: Alder Creek Campground is not a Campfire Use Site as indicated on the Visitor Recreation Map. Mount Pinos Ranger District Aliso Park Campground Ballinger Campground Caballo Campground Campo Alto Campground Chuchupate Campground Chula Vista Campground Dome Springs Campground Dutchman Campground Halfmoon Campground Hardluck Campground Kings Camp Campground Marian Campground McGill Campground McGill Group Campground Mt. Pinos Campground Nettle Springs Campground Ozena Campground Pine Springs Campground Rancho Nuevo Campground Reyes Creek Campground Thorn Meadows Campground Tinta Campground Toad Springs Campground Valle Vista Campground Ojai Ranger District Holiday Group Campground Middle Lion Campground Pine Mountain Campground Reyes Peak Campground Rose Valley Campground Wheeler Gorge Campground Santa Lucia Ranger District American Canyon Campground Baja Campground Barrel Spring Campground Bates Canyon Campground Brookshire Campground Buck Spring Campground Cerro Alto Campground Colson Campground Cumbre Day Use Area Davy Brown Campground Figueroa Campground Friis Campground Hi Mountain Campground Horseshoe Spring Campground La Panza Campground Miranda Pine Campground Navajo Campground Navajo OHV Staging Area Nira Campground Pino Alto Day Use Area Wagon Flat Campground Santa Barbara Ranger District Cachuma Campground Falls Day Use Area Fremont Campground Live Oak Day Use Area Los Prietos Campground Lower Oso Day Use Area Middle Santa Ynez Campground Mono Campground P-Bar Flat Campground Paradise Campground Red Rock Day Use Area Rock Camp Sage Hill Campground Upper Oso Campground White Rock Day Use Area ###

SLO - Three controlled burns - State Parks Dept. Posted: 14 Dec 2007 11:55 AM CST The California State Parks Department has scheduled three controlled burns in the San Luis Obispo area. The burns could will take place during the next week until Friday, if conditions permit. The department plans to burn 20 acres at Estero Bluffs State Park, 20 acres at the Washburn day use area in San Simeon State Park, and nine acres at Broken Bridge, near San Simeon Cove.

You are subscribed to email updates from California Fire News - Structure, Wildland, EMS To stop receiving these emails, you may unsubscribe now.	Email Delivery powered by FeedBurner
Inbox too full? Subscribe to the feed version of California Fire News - Structure, Wildland, EMS in a feed reader.
If you prefer to unsubscribe via postal mail, write to: California Fire News - Structure, Wildland, EMS, c/o FeedBurner, 20 W Kinzie, 9th Floor, Chicago IL USA 60610