30日 木曜日、赤口

+ CESA-2013:0868 Moderate CentOS 6 haproxy Update
http://lwn.net/Alerts/552183/

+ CESA-2013:0869 Important CentOS 6 tomcat6 Update
http://lwn.net/Alerts/552184/

+ CESA-2013:0870 Important CentOS 5 tomcat5 Update
http://lwn.net/Alerts/552157/

+ BIND 9.9.3, 9.8.5, 9.6-ESV-R9 released
https://kb.isc.org/article/AA-00927
https://kb.isc.org/article/AA-00928
https://kb.isc.org/article/AA-00929

+ DHCP 4.2.5-P1 released
https://kb.isc.org/article/AA-00891

+ A Vulnerability in libdns Could Cause Excessive Memory Use in ISC DHCP 4.2
https://www.isc.org/software/dhcp/advisories/cve-2013-2494
CVE-2013-2494

+ A Maliciously Crafted Regular Expression Can Cause Memory Exhaustion in named
https://www.isc.org/software/bind/advisories/cve-2013-2266
CVE-2013-2266

+ UPDATE: HPSBPI02869 SSRT100936 rev.2 - HP LaserJet MFP Printers, HP Color LaserJet MFP Printers, Certain HP LaserJet Printers, Remote Unauthorized Access to Files
https://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c03744742-2%257CdocLocale%253Dja_JP%257CcalledBy%253D&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken

+ SA53154 Apache HTTP Server mod_rewrite Vulnerability
http://secunia.com/advisories/53154/
CVE-2013-1862

+ Linux kernel net oops from tcp_collapse() using splice(2)
http://cxsecurity.com/issue/WLB-2013050210

VSX Virtual System might be left without 'Default Policy' if installation of policy fails
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk92812&src=securityAlerts

世界のセキュリティ・ラボから
企業に提案するサイバーセキュリティのロードマップ
http://itpro.nikkeibp.co.jp/article/COLUMN/20130529/480401/?ST=security

JVN#90289505 モバツイtouch の Content Provider にアクセス制限不備の脆弱性
http://jvn.jp/jp/JVN90289505/

JVN#22756333 Sleipnir Mobile for Android におけるアドレスバー偽装の脆弱性
http://jvn.jp/jp/JVN22756333/

REMOTE: IBM SPSS SamplePower C1Tab ActiveX Heap Overflow
http://www.exploit-db.com/exploits/25814

DoS/PoC: CodeBlocks 12.11 (Mac OS X) - Crash POC
http://www.exploit-db.com/exploits/25809