-----BEGIN PGP SIGNED MESSAGE-----

===========================================================================
             AUSCERT External Security Bulletin Redistribution

                 ESB-2003.0803 -- Apple Security Advisory
              APPLE-SA-2003-11-19 Security Update 2003-11-19
                             20 November 2003

===========================================================================

        AusCERT Security Bulletin Summary
        ---------------------------------

Product:                gm4
                        groff
                        Mail
                        OpenSSL
                        Personal File Sharing (slpd)
                        QuickTime for Java
                        zlib
Publisher:              Apple
Operating System:       Mac OS X 10.3.1
                        Mac OS X 10.2.8
Platform:               PowerPC
Impact:                 Increased Privileges
                        Overwrite Arbitrary Files
                        Denial of Service
Access Required:        Remote
CVE Names:              CAN-2001-1411 CAN-2003-0881 CAN-2003-0851
                        CAN-2003-0878 CAN-2003-0871 CAN-2003-0107

Ref:                    ESB-2003.0750
                        ESB-2003.0761

- --------------------------BEGIN INCLUDED TEXT--------------------

- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

APPLE-SA-2003-11-19 Security Update 2003-11-19

Security Update 2003-11-19 is now available for Mac OS X 10.2.8 and
Mac OS X 10.3.

It is Apple's policy to quickly address significant vulnerabilities in
past releases of Mac OS X wherever feasible.  Security Update
2003-11-19 includes updates to several components of Mac OS X v10.2
"Jaguar" that meet this criteria.

Updates for Mac OS X v10.2.8 "Jaguar" and Mac OS X Server v10.2.8
=================================================================

gm4: Fixes CAN-2001-1411 a format string vulnerability in the gm4
utility. No setuid root programs relied on gm4 and this fix is a
preventive measure against a possible future exploit.

groff: Fixes VU#399883 where the groff component pic contained a
format-string vulnerability.

Mail: Fixes CAN-2003-0881 the Mac OS X Mail application will no longer
fall back to plain text login when an account is configured to use MD5
Challenge Response.

OpenSSL: Fixes CAN-2003-0851 parsing particular malformed ASN.1
sequences are now handled in a more secure manner.

Personal File Sharing: Fixes CAN-2003-0878 when Personal File Sharing
is enabled, the slpd daemon can no longer create a root-owned file in
the /tmp directory to gain elevated privileges.

QuickTime for Java: Fixes CAN-2003-0871 a potential vulnerability that
could allow unauthorized access to a system.

zlib: Addresses CAN-2003-0107.  While there were no functions in Mac
OS X that used the vulnerable gzprintf() function, the underlying
issue in zlib has been fixed to protect any third-party applications
that may potentially use this library.


Updates for Mac OS X v10.3.1 "Panther" and Mac OS X Server v10.3.1
==================================================================

OpenSSL: Fixes CAN-2003-0851 parsing particular malformed ASN.1
sequences are now handled in a more secure manner.

zlib: Addresses CAN-2003-0107.  While there were no functions in Mac
OS X that used the vulnerable gzprintf() function, the underlying
issue in zlib has been fixed to protect any third-party applications
that may potentially use this library.

================================================

Security Update 2003-11-19 may be obtained from:

  * Software Update pane in System Preferences

  * Apple's Software Downloads web site:
  
    Security update 2003-11-19 for Jaguar 10.2.8
    http://www.info.apple.com/kbnum/n120277
    The download file is named: "SecurityUpd2003-11-19Jag.dmg"
    Its SHA-1 digest is: bf6dfd69f084d1ffc0a0db9eff5252fb3213178b

    Security Update 2003-11-19 for Panther 10.3.1
    http://www.info.apple.com/kbnum/n120278
    The download file is named: "SecurityUpd2003-11-19.dmg"
    Its SHA-1 digest is: 0cfb4c9048859a2e8a60424400e081da5ff84b80
    
Information will also be posted to the Apple Product Security web
site:
http://www.apple.com/support/security/security_updates.html

This message is signed with Apple's Product Security PGP key, and
details are available at:
http://www.apple.com/support/security/security_pgp.html

- -----BEGIN PGP SIGNATURE-----
Version: PGP 8.0.2

iQEVAwUBP7wbJ3eI0z6bzFr0AQLqBgf/VosadrRIxai1AJe4th5MfYPOSxz5aJBM
aMcuIdXhGLK01/Zynr//DSNSwJ1gPZefMQtFrvaF5BJvUS8hmWOu9PyCZbEo8hiX
YJc14ON7/edXEA0JDB9BuB6Hbaflh+DgW2FIp8pjDScvudtFheMWFPQDMhBR3Az3
B6y6lIe9olZ+wUsML9ireLzKfhBFZGF7c/kYIoSS4X5WlmQ19F30RdBbJI/b8Sn2
nIBgBM9YtgkuMVSoqhPgBPIrQLQ0Qa8NVPY9NpBjFHnDgpUjiqCtYYL97TATOiMi
khl84JnBdIOk8j/S8z1zTSPwMG1v7LJPxdzhMRC3UhdiKOHDPTrofg==
=DdeD
- -----END PGP SIGNATURE-----

- --------------------------END INCLUDED TEXT--------------------

You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.

This security bulletin is provided as a service to AusCERT's members.  As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.

NOTE: This is only the original release of the security bulletin.  It may
not be updated when updates to the original are made.  If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.

Contact information for the authors of the original document is included
in the Security Bulletin above.  If you have any questions or need further
information, please contact them directly.

Previous advisories and external security bulletins can be retrieved from:

        http://www.auscert.org.au/render.html?cid=1980

If you believe that your computer system has been compromised or attacked in 
any way, we encourage you to let us know by completing the secure National IT 
Incident Reporting Form at:

        http://www.auscert.org.au/render.html?it=3192

Internet Email: auscert@auscert.org.au
Facsimile:      (07) 3365 7031
Telephone:      (07) 3365 4417 (International: +61 7 3365 4417)
                AusCERT personnel answer during Queensland business 
                hours which are GMT+10:00 (AEST).  On call after hours 
                for member emergencies only.
-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967

iQCVAwUBP7xOlCh9+71yA2DNAQHHCAP9FY6lmgvUdIEAtUOo0Zuhar4NeFxrn3PM
G5jlP6Vqm0Cl4Xn80B8dmheKAOTjVI+dkokYeSZjP2Rmvdw23f436ljBU72+CpSD
XTl4kmtYcSL7hf8X53aDBGbmWxq/W+7c3UvS7XHL6gRYImM9yo/tCCu5KE8BRFci
EYYaFMoS6ik=
=xIT7
-----END PGP SIGNATURE-----