12日 木曜日、先負

+ HPSBPV02918 rev.1 - HP ProCurve Manager (PCM), HP PCM+ and HP Identity Driven Manager (IDM), SQL Injection, Remote Code Execution, Session Reuse
https://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c03897409-1%257CdocLocale%253Dja_JP%257CcalledBy%253D&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2572
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4809
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4810
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4811
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4812
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4813

+ Wireshark Multiple Bugs Let Remote Users Deny Service
http://www.securitytracker.com/id/1029020
http://secunia.com/advisories/54765/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5717
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5718
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5719
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5720
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5721
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5722

+ Juniper Junos J-Web '/jsdm/ajax/port.php' Script Lets Remote Authenticated Users Execute Arbitrary Commands
http://www.securitytracker.com/id/1029016

+ Microsoft SharePoint 2013 (Cloud) Persistent Exception Handling Web Vulnerability
http://cxsecurity.com/issue/WLB-2013090084

+ Microsoft SharePoint CVE-2013-3179 Multiple HTML Injection Vulnerabilities
http://www.securityfocus.com/bid/62227
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3179

+ ProFTPD 'mod_sftp_pam' Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/62328

+ Wireshark Bluetooth HCI ACL Dissector CVE-2013-5717 Denial of Service Vulnerability
http://www.securityfocus.com/bid/62322
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5717

+ Wireshark LDAP Dissector CVE-2013-5722 Denial of Service Vulnerability
http://www.securityfocus.com/bid/62321
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5722

+ Wireshark MQ Dissector CVE-2013-5721 Denial of Service Vulnerability
http://www.securityfocus.com/bid/62320
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5721

+ Wireshark RTPS Dissector CVE-2013-5720 Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/62319
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5720

+ Wireshark ASSA R3 Dissector CVE-2013-5719 Denial of Service Vulnerability
http://www.securityfocus.com/bid/62318
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5719

携帯／スマホのフィルタリング使用率は未成年で32.8％、デジタルアーツ調査
10～18歳の男女とその保護者の1236人を調査
http://itpro.nikkeibp.co.jp/article/NEWS/20130911/503865/?ST=security

シマンテック、会津大学にサイバー演習方式のセキュリティ人材育成プログラムを提供
http://itpro.nikkeibp.co.jp/article/NEWS/20130910/503842/?ST=security

Google、Facebook、Yahoo！が米政府にさらなる透明性向上を要求
http://itpro.nikkeibp.co.jp/article/NEWS/20130910/503565/?ST=security

三井住友銀行がワンタイムパスワード生成カードを本格導入、将来はMITB攻撃対策も
http://itpro.nikkeibp.co.jp/article/NEWS/20130910/503543/?ST=security

JVNTA13-253A Microsoft 製品の複数の脆弱性に対するアップデート
http://jvn.jp/cert/JVNTA13-253A/