8日 木曜日、友引

+ RHSA-2013:1144 Moderate: nss, nss-util, nss-softokn, and nspr security update
http://rhn.redhat.com/errata/RHSA-2013-1144.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0791
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1620

+ RHSA-2013:1142 Important: thunderbird security update
http://rhn.redhat.com/errata/RHSA-2013-1142.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1701
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1709
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1710
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1713
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1714
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1717

+ RHSA-2013:1140 Critical: firefox security update
http://rhn.redhat.com/errata/RHSA-2013-1140.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1701
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1709
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1710
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1713
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1714
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1717

+ CESA-2013:1140 Critical CentOS 5 firefox Update
http://lwn.net/Alerts/562424/

+ CESA-2013:1140 Critical CentOS 6 firefox Update
http://lwn.net/Alerts/562425/

+ Cisco TelePresence System Default Credentials Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130807-tp
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3454

+ iptables 1.4.20 released
http://www.hu.netfilter.org/projects/iptables/downloads.html#iptables-1.4.20
http://www.hu.netfilter.org/projects/iptables/files/changes-iptables-1.4.20.txt

+ REMOTE: Apache suEXEC Privilege Elevation / Information Disclosure
http://www.exploit-db.com/exploits/27397

+ REMOTE: HP Data Protector Arbitrary Remote Command Execution
http://www.exploit-db.com/exploits/27400

+ Apache suEXEC privilege elevation / information disclosure
http://cxsecurity.com/issue/WLB-2013080067

+ Microsoft Yammer Social Network oAuth Bypass (Session Token) Vulnerability
http://cxsecurity.com/issue/WLB-2013080059

+ McAfee Superscan 4.0 Cross Site Scripting
http://cxsecurity.com/issue/WLB-2013080058

+ Facebook Friends Disclosure
http://cxsecurity.com/issue/WLB-2013080056

JVNDB-2013-000075 ドコモ海外利用アプリにおける接続処理に関する脆弱性
http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-000075.html

最新サイバー攻撃に備えるITpro
ユーザーIDの役割を分離する
http://itpro.nikkeibp.co.jp/article/COLUMN/20130807/497103/?ST=security

【デジタル世界の知られざる真相、米国10代のネット事情】
第4回：いじめとカンニングの温床に、ネットの負の側面
http://itpro.nikkeibp.co.jp/article/COLUMN/20130730/495368/?ST=security

FFRI、複数環境で並行解析できるマルウエア解析ツール新版を出荷
http://itpro.nikkeibp.co.jp/article/NEWS/20130807/497242/?ST=security

アシストが特権IDの利用申請パックを強化、申請外ログインを検知可能に
http://itpro.nikkeibp.co.jp/article/NEWS/20130807/497142/?ST=security

JVN#44035194 ドコモ海外利用アプリにおける接続処理に関する脆弱性
http://jvn.jp/jp/JVN44035194/

REMOTE: Open&Compact FTP Server 1.2 - Auth Bypass & Directory Traversal SAM Retrieval Exploit
http://www.exploit-db.com/exploits/27401