Security Maintenance: Early September - Apple Mac OS X

Who:  Apple Mac OS X computer users

What:  Early September Security Maintenance

When:  Sept 6, 2007

How:
Apple computers running Apple iTunes may be vulnerable to exploits. The most serious of these vulnerabilities may allow an unauthorized user to take complete control of an affected system by convincing the user to open a maliciously crafted music file.

What You Need To Do:
If you suspect your computer has already been compromised, STOP! Read and follow Responding to a Compromised Computer.

If your computer is managed by a Carnegie Mellon departmental computing administrator, please consult that person before making any system changes.

If your computer is NOT managed by a Carnegie Mellon departmental computing administrator, follow the detailed steps below:

NOTE: You must login with an administrative account/password to complete steps marked with ***.

1. Run Software Update***
   
   1. Quit all applications. Avoid performing any other operations while the update is in progress.
   2. Move all Apple installed applications and utilities back to their original locations. Moving one of these applications to a different location on your hard drive can result in an incomplete update.
   3. Disconnect any FireWire/USB devices before applying the update except for your startup drive (if it is FireWire or USB) and your keyboard/mouse.
   4. From the Apple menu, select System Preferences.
   5. Select Software Update.
   6. With the Update Software tab selected, click Check Now.
   7. Restart your Mac when prompted. If not prompted, restart anyways.
   8. Re-connect any FireWire/USB devices one by one and check for issues created by any particular device.
   
   
2. Run Norton LiveUpdate
   Mac instructions
   
   
3. Secure Your Computer***
   Mac instructions
   
   
4. Update Your Windows Virtual Machines (if you use Virtual PC, Parallels Desktop or VMware Fusion)***
   See Early September Security Maintenance - Microsoft Windows.

Contact:
Please direct any questions or comments to the Computing Services Help Center at x8-HELP (4357) or advisor@andrew.cmu.edu, or to your departmental administrator or DSP consultant.

• Apple Article ID 306404: About the security content of iTunes 7.4