16日 金曜日、仏滅

+ HPSBMU02915 rev.1 - HP Service Manager, Remote Unauthenticated Access and Elevation of Privilege
https://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c03888320-1%257CdocLocale%253Dja_JP%257CcalledBy%253D&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken

+ UPDATE: Oracle Critical Patch Update Advisory - July 2013
http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html

+ Kingsoft Writer Buffer Overflow Let Remote Users Execute Arbitrary Code
http://www.securitytracker.com/id/1028920

+ Google Android PRNG Initialization Flaw Causes Some Cryptographic Applications to Be Less Secure
http://www.securitytracker.com/id/1028916

+ Cisco IOS XR ICMP Memory Corruption Flaw Lets Local Users Deny Service
http://www.securitytracker.com/id/1028914
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3464

+ VU#912156 Dell BIOS in some Latitude laptops and Precision Mobile Workstations vulnerable to buffer overflow
http://www.kb.cert.org/vuls/id/912156
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3582

+ REMOTE: Oracle Java IntegerInterleavedRaster.verify() Signed Integer Overflow
http://www.exploit-db.com/exploits/27611

+ Linux Kernel 3.11-rc ARM/perf priviledge escalation
http://cxsecurity.com/issue/WLB-2013080128

+ SA53266 Kingsoft Writer 2012 WPS Font Names Buffer Overflow Vulnerability
http://secunia.com/advisories/53266/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3934

+ PHP SSL Certificate Validation CVE-2013-4248 Security Bypass Vulnerability
http://www.securityfocus.com/bid/61776
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4248

REMOTE: Intrasrv 1.0 Buffer Overflow
http://www.exploit-db.com/exploits/27606

REMOTE: MiniWeb (Build 300) Arbitrary File Upload
http://www.exploit-db.com/exploits/27607

REMOTE: Ultra Mini HTTPD Stack Buffer Overflow
http://www.exploit-db.com/exploits/27608

REMOTE: Joomla Media Manager File Upload Vulnerability
http://www.exploit-db.com/exploits/27610

LOCAL: Chasys Draw IES Buffer Overflow
http://www.exploit-db.com/exploits/27609