10日 月曜日、赤口

+ Sysstat 10.1.6 released (development version)
http://sebastien.godard.pagesperso-orange.fr/

+ PHP Heap Overflow in quoted_printable_encode() Lets Remote Users Execute Arbitrary Code
http://www.securitytracker.com/id/1028641
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2110

SA53666 Linux Kernel "dispatch_discard_io()" RO Disk Manipulation Security Issue
http://secunia.com/advisories/53666/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2140

+ SA53736 PHP "php_quot_print_encode()" Buffer Overflow Vulnerability
http://secunia.com/advisories/53736/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2110

+ mysql-5.5/5.5.31+dfsg-0+wheezy1 Insecure creation of debian.cnf
http://cxsecurity.com/issue/WLB-2013060066

+ Linux kernel before 3.3 batman-adv ICMP Remote DoS
http://cxsecurity.com/issue/WLB-2013060060

+ Linux Kernel block layer & b43 wireless driver format string
http://cxsecurity.com/issue/WLB-2013060054
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2851

+ Linux Kernel Leak information in cdrom driver
http://cxsecurity.com/issue/WLB-2013060056

+ Microsoft Internet Explorer textNode Use-After-Free
http://cxsecurity.com/issue/WLB-2013060050

+ REMOTE: Microsoft Internet Explorer textNode Use-After-Free
http://www.exploit-db.com/exploits/25999

+ Microsoft Internet Explorer XML Files Handling Information Disclosure Vulnerability
http://www.securityfocus.com/bid/60421

+ Linux Kernel 'b43' Wireless Driver Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/60410
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2852

+ FreeBSD 8.4-RELEASE released
http://www.freebsd.org/releases/8.4R/relnotes.html

定期サーバメンテナンスのお知らせ（2013年6月14日）
http://www.trendmicro.co.jp/support/news.asp?id=1967

チェックしておきたい脆弱性情報＜2013.06.10＞
http://itpro.nikkeibp.co.jp/article/COLUMN/20130604/482163/?ST=security

「炎上」対策だけでは不十分～企業を脅かすソーシャルリスク
【第1回】ソーシャルが変えた企業の業務、リスク対策は待ったなし
http://itpro.nikkeibp.co.jp/article/COLUMN/20130604/481984/?ST=security

「Webサイト改ざん報告が昨年の10倍、4月から2カ月で1000件」、JPCERT/CCが注意喚起
http://itpro.nikkeibp.co.jp/article/NEWS/20130607/483291/?ST=security

米国政府機関が大手ネットサービスのユーザーデータを収集か、米・英紙が相次ぎ報道
http://itpro.nikkeibp.co.jp/article/NEWS/20130607/483282/?ST=security

Microsoft、金融業界やFBIと協力しCitadelボットネットを摘発
http://itpro.nikkeibp.co.jp/article/NEWS/20130607/483061/?ST=security

JVN#39218538 Android 版 ピザハット公式アプリ　宅配ピザのPizzaHut における SSL サーバ証明書の検証不備の脆弱性
http://jvn.jp/jp/JVN39218538/

JVN#63901692 Internet Explorer における情報漏えいの脆弱性
http://jvn.jp/jp/JVN63901692/

VU#673343 Parallels Plesk Panel phppath/php vulnerability
http://www.kb.cert.org/vuls/id/673343

REMOTE: Novell Zenworks Mobile Device Managment Local File Inclusion Vulnerability
http://www.exploit-db.com/exploits/26012

DoS/PoC: Quick TFTP Server 2.2 - Denial of Service
http://www.exploit-db.com/exploits/26010