Apple Fixes Security Holes In Mac OS X, Adobe Flash
The fixes came in an Apple Mac OS X and Adobe Flash security update on Wednesday that ComputerWorld is calling an Apple security patch record. ComputerWorld said Apple patched more than 130 vulnerabilities in Mac OS X, breaking the high set last March when Apple fixed over 90 flaws. Apple also fixed 55 vulnerabilities in the Mac Adobe Flash Player Plug in.
Among the Apple Mac OS X security patches are a fix available for Mac OS X Server v 10.5.8 and Mac OS X Server v 10.6 through 10.6.4 that could allow a remote attacker to shutdown the server, according to an Apple Security Update. Apple said it fixed the Apple network file protocol hole with an "improved validation of reconnect packets."
Among the other Mac OS X security fixes are a patch to prevent a denial of service attack on a Mac OS X based Apache web server. That fix is available for: Mac OS X v10.6 through v10.6.4, Mac OS X Server v10.6 through v10.6.4
Apple also issued a Mac OS X patch for Mac OS X (v10.5.8, Mac OS X Server v10.5.8, Mac OS X v10.6 through v10.6.4, Mac OS X Server v10.6 through v10.6.4) that prevents remote attackers from determining the "existence of an AFP (Apple Filing Protocol) share with a given name," according to the update.
The Adobe Flash Player Plug in security fixes were for Mac OS X v10.5.8, Mac OS X Server v10.5.8, Mac OS X v10.6 through v10.6.4, Mac OS X Server v10.6 through v10.6.4.
Adobe itself listed the security fixes for Adobe Flash Media Server and its Adobe Flash Player on its own security bulletin.