Security Bulletin Summary February 27, 2006

Cert Security Advisory
Overview
Who is Affected

Recommended Actions

Administrative Users
Academic PC Users
All Home PC Users
Academic Mac Users

Further Assistance

Other Bulletins

ADMINISTRATIVE Staff: If you use a computer at HOME, please read on.

STUDENTS, FACULTY, ADMINISTRATIVE STAFF, ACADEMIC STAFF AND ALL HOME USERS must follow the recommendations below.

I. OVERVIEW

Security flaws have been found in the Macintosh OS X and the default setting of Safari. While Apple and others work on a solution, we request that all Mac 0S X users follow the steps below to help mitigate the problem. On March 3, ACC sent a follow-up bulletin with additional instructions.

II. WHO IS AFFECTED?

All Mac OS X users are affected. The flaw does not affect Windows users, or those with Mac OS 9 or older versions of the Mac OS.

III. RECOMMENDED ACTION - ADMINISTRATIVE USERS ON CAMPUS

Please follow the recommended action for home systems.

IV. RECOMMENDED ACTION - ACADEMIC WINDOWS USERS and ALL HOME WINDOWS USERS

No immediate action is needed for this alert. However, if your computer is not automatically receiving critical updates, see http://www.haverford.edu/acc/docs/general/osupdates.html for instructions on how to set up your computer to automatically notify you and install Microsoft updates as they are released.

V. RECOMMENDED ACTION - ACADEMIC MAC USERS and ALL HOME MAC USERS

Turn off Safari's option to automatically run files after downloading.

1. From the Safari menu select Preferences.
2. Select the General options.
3. Uncheck the option "Open 'safe' files after downloading"
   
   

Also be sure to get all critical operating system updates and Office updates. Look for the Software Update tool in your Control Panel (OS 9) or in System Preferences (OS X) for operating system updates. For detailed instructions see http://www.haverford.edu/acc/docs/general/osupdates.html.

For information and downloads of current anti-virus software, go to http://www.haverford.edu/acc/virus/macantivirus.html

VI. FOR FURTHER ASSISTANCE

Students, faculty and academic staff please contact Academic Computing:
Telephone: 610-896-1480
Email: compctr@haverford.edu
Web: http://www.haverford.edu/acc/helpdesk/
In Person: Stokes 204 9am to 5pm, Monday through Friday and until 9am to 9pm on Tuesdays.

Administrative staff please contact Administrative Computing:
Telephone: 610-896-1355
Email: admincc@haverford.edu

VII. MORE INFORMATION

For additional information on this threat, please refer to the following web sites:

*CERT
http://www.us-cert.gov/cas/techalerts/TA06-053A.html