The client versions of Mac OS X are still vulnerable to a DNS security issue according to a security firms, nCircle and SANS Institute. They tested Tiger version 10.4.11 and Leopard version 10.5.4.

“So Apple might have fixed some of the more important parts for servers, but is far from done yet as all the clients linked against a DNS client library still need to get the workaround for the protocol weakness,” said Swa Frantzen of SANS.

The author of the article at The Register guessed why Apple did not make the patch to be applicable to client systems. He writes that they may have overlooked it or it does not make sense since client systems handle only a few DNS queries.

Source: The Register