31日 金曜日、先勝

+ RHSA-2013:0884 Moderate: libtirpc security update
http://rhn.redhat.com/errata/RHSA-2013-0884.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1950

+ RHSA-2013:0883 Important: gnutls security update
http://rhn.redhat.com/errata/RHSA-2013-0883.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2116

+ UPDATE: HPSBGN02589 SSRT100296 rev.2 - HP ProCurve Access Points, Access Controllers, and Mobility Controllers, Privilege Escalation
https://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c02544568-2%257CdocLocale%253Dja_JP%257CcalledBy%253D&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken

Check Point response to 'SSH encapsulated in DNS traffic is not detected by Application Control'
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk92938&src=securityAlerts

Trend Micro Web Security for Yamaha 新機種のサポート開始のお知らせ
http://www.trendmicro.co.jp/support/news.asp?id=1964

チェックしておきたい脆弱性情報＜2013.05.31＞
http://itpro.nikkeibp.co.jp/article/COLUMN/20130527/479962/?ST=security

IDとパスワードに頼る認証は、もう破綻している
http://itpro.nikkeibp.co.jp/article/Watcher/20130530/480791/?ST=security

阪急阪神百貨店のショッピングサイトで、クレジットカード情報など2382人分の個人情報が漏洩
http://itpro.nikkeibp.co.jp/article/NEWS/20130530/480861/?ST=security

Cisco NX-OS Nexus 1000v Bugs Let Remote Users Gain Control, Deny Service, and Bypass Security
http://www.securitytracker.com/id/1028606

REMOTE: Logic Print 2013 - Stack Overflow (vTable Overwrite)
http://www.exploit-db.com/exploits/25835

REMOTE: Intrasrv Simple Web Server 1.0 - SEH Based Remote Code Execution
http://www.exploit-db.com/exploits/25836

REMOTE: IBM SPSS SamplePower C1Tab ActiveX Heap Overflow
http://www.exploit-db.com/exploits/25814

DoS/PoC: Monkey HTTPD 1.1.1 - Crash PoC
http://www.exploit-db.com/exploits/25837