Security Update 2009-004
Security Update 2009-004 is recommended for all users and improves the security of Mac OS X. Previous security updates have been incorporated into this security update.
- Security Update 2009-004 (Leopard) - 10 MB
- Security Update 2009-004 (Tiger Intel) - 166 MB
- Security Update 2009-004 (Tiger PPC) - 130 MB
- Security Update 2009-004 (Server Tiger Universal) - 204 MB
- Security Update 2009-004 (Server Tiger PPC) - 130.97 MB
A logic issue in the handling of dynamic DNS update messages may cause an assertion to be triggered. By sending a maliciously crafted update message to the BIND DNS server, a remote attacker may be able to interrupt the BIND service. The issue affects servers which are masters for one or more zones, regardless of whether they accept updates. BIND is included with Mac OS X and Mac OS X Server but it is not enabled by default. This update addresses the issue by properly rejecting messages with a record of type 'ANY' where an assertion would previously have been raised.