9日 火曜日、赤口

+ RHSA-2013:0714 Moderate: stunnel security update
http://rhn.redhat.com/errata/RHSA-2013-0714.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1762

+ phpMyAdmin 3.5.8 released
http://sourceforge.net/p/phpmyadmin/news/2013/04/phpmyadmin-358-is-released/

+ SA52868 Linux Kernel Denial of Service and Privilege Escalation Vulnerabilities
http://secunia.com/advisories/52868/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2137
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4461

+ SA52966 Apache Subversion mod_dav_svn Multiple Denial of Service Vulnerabilities
http://secunia.com/advisories/52966/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1845
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1846
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1847
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1849
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1884

パスワードマネージャー プログラムアップデートのお知らせ
http://www.trendmicro.co.jp/support/news.asp?id=1944

PostgreSQL participating in Google Summer of Code 2013
http://www.postgresql.org/about/news/1458/

トレンドマイクロ、パスワード管理ツールを店頭販売
POSA技術使いレジでライセンスキー発行、1年版の予想実売価格は1780円前後
http://itpro.nikkeibp.co.jp/article/NEWS/20130409/469402/?ST=security

国内で相次ぐWebサイトの改ざん、管理ソフトの脆弱性が原因か
管理者は「Parallels Plesk Panel」の確認を
http://itpro.nikkeibp.co.jp/article/NEWS/20130409/469401/?ST=security

サイバー攻撃を察知する「SIEM」に新機軸
NTTコムは月額制、RSAは攻撃を完全再現
http://itpro.nikkeibp.co.jp/article/COLUMN/20130328/466649/?ST=security

最新サイバー攻撃に備える
gooIDやYahooが標的　会員サービス狙う不正アクセスの狙いは
http://itpro.nikkeibp.co.jp/article/COLUMN/20130405/469047/?ST=security

JVNVU#95651153 NVIDIA 製ビデオカードのディスプレイドライバにバッファオーバーフローの脆弱性
http://jvn.jp/cert/JVNVU95651153/

JVNVU#98376265 PHP Address Book に SQL インジェクションの脆弱性
http://jvn.jp/cert/JVNVU98376265/

VU#557252 AirDroid web interface XSS vulnerability
http://www.kb.cert.org/vuls/id/557252

REMOTE: Netgear DGN1000B setup.cgi Remote Command Execution
http://www.exploit-db.com/exploits/24931

REMOTE: MongoDB nativeHelper.apply Remote Code Execution
http://www.exploit-db.com/exploits/24935

REMOTE: Linksys E1500/E2500 apply.cgi Remote Command Injection
http://www.exploit-db.com/exploits/24936

REMOTE: HP System Management Anonymous Access Code Execution
http://www.exploit-db.com/exploits/24937

REMOTE: Novell ZENworks Configuration Management Remote Execution
http://www.exploit-db.com/exploits/24938

LOCAL: Google AD Sync Tool - Exposure of Sensitive Information Vulnerability
http://www.exploit-db.com/exploits/24923

LOCAL: HP System Management Homepage Local Privilege Escalation
http://www.exploit-db.com/exploits/24929

LOCAL: PonyOS 0.4.99-mlp - Multiple Vulnerabilities
http://www.exploit-db.com/exploits/24933

LOCAL: HexChat 2.9.4 Local Exploit Submission
http://www.exploit-db.com/exploits/24919

DoS/PoC: Groovy Media Player 3.2.0 (.mp3) - Buffer Overflow Vulnerability
http://www.exploit-db.com/exploits/24930