27日 木曜日、大安

+ CESA-2013:0981 Critical CentOS 6 firefox Update
http://lwn.net/Alerts/556371/

+ CESA-2013:0981 Critical CentOS 5 firefox Update
http://lwn.net/Alerts/556372/

+ CESA-2013:0982 Important CentOS 6 thunderbird Update
http://lwn.net/Alerts/556373/

+ CESA-2013:0982 Important CentOS 5 thunderbird Update
http://lwn.net/Alerts/556374/

+ CESA-2013:0981 Critical CentOS 6 xulrunner Update
http://lwn.net/Alerts/556375/

+ CESA-2013:0981 Critical CentOS 5 xulrunner Update
http://lwn.net/Alerts/556376/

+ CESA-2013:0983 Moderate CentOS 6 curl Update
http://lwn.net/Alerts/556377/

+ CESA-2013:0983 Moderate CentOS 5 curl Update
http://lwn.net/Alerts/556378/

+ Multiple Vulnerabilities in Cisco Web Security Appliance
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130626-wsa
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3383
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3384

+ Multiple Vulnerabilities in Cisco Content Security Management Appliance
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130626-sma
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3384

+ Multiple Vulnerabilities in Cisco Email Security Appliance
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130626-esa
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3384

+ Cisco ASA Next-Generation Firewall Fragmented Traffic Denial of Service Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130626-ngfw
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3382

+ HPSBST02890 rev.1 - HP StoreOnce D2D Backup System, Unauthorized Remote Access and Modification
https://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c03813919-1%257CdocLocale%253Dja_JP%257CcalledBy%253D&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2342

+ Dovecot 2.1.17 released
http://www.dovecot.org/list/dovecot-news/2013-June/000259.html

+ LOCAL: FreeBSD 9 Address Space Manipulation Privilege Escalation
http://www.exploit-db.com/exploits/26454

+ SA53858 Oracle VirtualBox Paravirtualised Network Adapter Denial of Service Vulnerability
http://secunia.com/advisories/53858/

+ Kingsoft Spreadsheets CVE-2013-0723 Multiple Buffer Overflow Vulnerabilities
http://www.securityfocus.com/bid/60801
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0723

PureMessage for Unix Vulnerability
http://www.sophos.com/en-us/support/knowledgebase/119510.aspx

無人機のネットワークで洪水を予測（WIRED.jp）
http://itpro.nikkeibp.co.jp/article/NEWS/20130627/488002/?ST=security

ネット選挙、ここが危ない！
第1回　試される「民度」と常識
http://itpro.nikkeibp.co.jp/article/COLUMN/20130621/486804/?ST=security

機密情報を狙う「獅子身中の虫」　内部不正対策は万全か
第4回：職場環境の不備が内部不正の温床に、ルール違反防ぐ体制作り
http://itpro.nikkeibp.co.jp/article/COLUMN/20130619/486170/?ST=security

トヨタやリコーなど相次ぐWebサイト改ざん、IPAが対策を呼びかけ
http://itpro.nikkeibp.co.jp/article/NEWS/20130626/487922/?ST=security

OCNに不正アクセス、756件の接続パスワードが不正変更
http://itpro.nikkeibp.co.jp/article/NEWS/20130626/487902/?ST=security

Google、「Transparency Report」にマルウエア／フィッシング関連セクションを追加
http://itpro.nikkeibp.co.jp/article/NEWS/20130626/487761/?ST=security

Googleは検索結果の個人情報を削除する義務はない、欧州裁判所法務官の見解
http://itpro.nikkeibp.co.jp/article/NEWS/20130626/487742/?ST=security

ネットを介した企業への個人データ提供、米国人は寛容、ドイツ人は厳格
http://itpro.nikkeibp.co.jp/article/NEWS/20130626/487723/?ST=security

VU#662676 Digital Alert Systems DASDEC and Monroe Electronics R189 One-Net firmware exposes private root SSH key
http://www.kb.cert.org/vuls/id/662676

LOCAL: AudioCoder 0.8.22 (.lst) - Direct Retn Buffer Overflow
http://www.exploit-db.com/exploits/26448

LOCAL: ZPanel zsudo Local Privilege Escalation Exploit
http://www.exploit-db.com/exploits/26451

LOCAL: Novell Client 2 SP3 nicm.sys Local Privilege Escalation
http://www.exploit-db.com/exploits/26452

DoS/PoC: Baby FTP Server 1.24 - Denial Of Service
http://www.exploit-db.com/exploits/26450