Apple finally patches dangerous DNS flaw
Apple posted a security advisory on Friday, August 1, saying that they have issued a patch that will fix Apple's implementation of the Berkeley Internet Name Domain (BIND) DNS server in Mac OS X v10.4.11, Mac OS X Server v10.4.11, Mac OS X v10.5.4, and Mac OS X Server v10.5.4. The DNS flaw is considered one of the most dangerous vulnerabilities ever to affect the Internet. Apple was very slow in providing the patch. The existence of the flaw was disclosed on July 8 and on July 21 details of how to exploit the flaw were leaked, leaving un-patched systems vulnerable to attack.
read more »
Bury