6日 火曜日、大安

+ UPDATE: OSPF LSA Manipulation Vulnerability in Multiple Cisco Products
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130801-lsaospf

+ マイクロソフト セキュリティ アドバイザリ (2876146) ワイヤレス PEAP-MS-CHAPv2 認証により、情報漏えいが起こる可能性がある
http://technet.microsoft.com/ja-jp/security/advisory/2876146

+ RHSA-2013:1135 Moderate: nss and nspr security, bug fix, and enhancement update
http://rhn.redhat.com/errata/RHSA-2013-1135.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0791
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1620

+ Dovecot 2.2.5 released
http://www.dovecot.org/list/dovecot-news/2013-August/000261.html

+ Samba 4.0.8, 3.6.17, 3.5.22 released
http://samba.org/samba/history/samba-4.0.8.html
http://samba.org/samba/history/samba-3.6.17.html
http://samba.org/samba/history/samba-3.5.22.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4124

+ Samba smbd CPU Processing Loop Lets Remote Users Deny Service
http://www.securitytracker.com/id/1028882
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4124

+ Windows Phone PEAP-MS-CHAPv2 Authentication Protocol Weakness May Let Remote Users Obtain Authentication Information
http://www.securitytracker.com/id/1028874

+ Google Web Toolkit (GWT) XSS
http://cxsecurity.com/issue/WLB-2013080038

+ SA54354 PuTTY SSH Handshake Integer Overflow Vulnerabilities
http://secunia.com/advisories/54354/

+ SA54409 phpMyAdmin Clickjacking Vulnerability
http://secunia.com/advisories/54409/

+ SA54381 phpMyAdmin Clickjacking Vulnerability
http://secunia.com/advisories/54381/

+ PuTTY 'getstring()' Function Multiple Integer Overflow Vulnerabilities
http://www.securityfocus.com/bid/61599
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4852

+ Samba CVE-2013-4124 Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/61597
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4124

+ Microsoft Windows Phone PEAP-MS-CHAPv2 Authentication Protocol Security Weakness
http://www.securityfocus.com/bid/61592

【デジタル世界の知られざる真相、米国10代のネット事情】
第2回：スマートデバイスに精通、驚くべき10代の行動
http://itpro.nikkeibp.co.jp/article/COLUMN/20130730/495366/?ST=security

富士通研究所、手のひら静脈認証で特徴をビット化する新技術を発表
http://itpro.nikkeibp.co.jp/article/NEWS/20130805/496692/?ST=security

JVNVU#94916481 HTTPS レスポンスから暗号化されたデータの一部を推測可能な脆弱性 (BREACH)
http://jvn.jp/cert/JVNVU94916481/index.html