14日 火曜日、友引

+ RHSA-2013:0815 Moderate: httpd security update
http://rhn.redhat.com/errata/RHSA-2013-0815.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3499
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4558
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1862

+ Memory disclosure with specially crafted HTTP backend responses Severity: medium
http://mailman.nginx.org/pipermail/nginx-announce/2013/000114.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2070

+ CESA-2013:0807 Low CentOS 5 hypervkvpd Update
http://lwn.net/Alerts/550430/

+ UPDATE: HPSBMU02786 SSRT100877 rev.2 - HP System Management Homepage (SMH) Running on Linux, Windows, and VMware ESX, Remote Unauthorized Access, Disclosure of Information, Data Modification, Denial of Service (DoS), Execution of Arbitrary Code
https://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c03360041-2%257CdocLocale%253Dja_JP%257CcalledBy%253D&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken

+ Apache HTTP Server Terminal Escape Sequence in Logs Command Injection Vulnerability
http://www.securityfocus.com/bid/59826
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1862

トレンドマイクロ： 個人のお客様向け製品の管理システム改修のお知らせ
http://www.trendmicro.co.jp/support/news.asp?id=1956

PostgreSQL 9.3 Beta 1 Released
http://www.postgresql.org/about/news/1463/

脅威高まる車載ソフトへの攻撃
第2回 車載ソフトへの攻撃例が続々
http://itpro.nikkeibp.co.jp/article/COLUMN/20130507/475085/?ST=security

ヤフーとデジタルハーツ、政治家向けにHPセキュリティ診断サービスを提供
http://itpro.nikkeibp.co.jp/article/NEWS/20130513/476572/?ST=security

UPDATE: JVNVU#97576465 Internet Explorer 8 に任意のコードが実行される脆弱性
http://jvn.jp/cert/JVNVU97576465/

JVN#18501376 OpenPNE におけるクロスサイトスクリプティングの脆弱性
http://jvn.jp/jp/JVN18501376/

LOCAL: Kloxo 6.1.6 - Local Privilege Escalation
http://www.exploit-db.com/exploits/25406

DoS/PoC: No-IP Dynamic Update Client (DUC) 2.1.9 - Local IP Address Stack Overflow
http://www.exploit-db.com/exploits/25411