26日 木曜日、大安

+ CESA-2013:1282 Important CentOS 6 rtkit Update
http://lwn.net/Alerts/568253/

+ Cisco IOS Software Multicast Network Time Protocol Denial of Service Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130925-ntp
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5472

+ Cisco IOS Software Network Address Translation Vulnerabilities
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130925-nat
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5479
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5480
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5481

+ Cisco IOS Software IPv6 Virtual Fragmentation Reassembly Denial of Service Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130925-ipv6vfr
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5474

+ Cisco IOS Software Zone-Based Firewall and Content Filtering Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130925-cce
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5476

+ Cisco IOS Software DHCP Denial of Service Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130925-dhcp
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5475

+ Cisco IOS Software Queue Wedge Denial of Service Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130925-wedge
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5477

+ Cisco IOS Software Resource Reservation Protocol Interface Queue Wedge Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130925-rsvp
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5478

+ Cisco IOS Software Internet Key Exchange Memory Leak Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130925-ike
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5473

+ Dovecot 2.2.6 released
http://www.dovecot.org/list/dovecot-news/2013-September/000262.html

+ Samba 3.6.19 Available for Download
http://samba.org/samba/history/samba-3.6.19.html

+ Google Chrome 31.0 Webkit Auditor Bypass
http://cxsecurity.com/issue/WLB-2013090173

+ Google Chrome CVE-2013-0837 Denial of Service Vulnerability
http://www.securityfocus.com/bid/59435
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0837

InterScan Web Security Virtual Appliance 5.0 Patch 3 (Build 1471) 公開のお知らせ
http://www.trendmicro.co.jp/support/news.asp?id=2008

世界のセキュリティ・ラボから
Android端末を人質に取るランサムウエア
http://itpro.nikkeibp.co.jp/article/COLUMN/20130923/506204/?ST=security

3万円台の低価格Raspberry Piロボット「ラピロ」
［3］DUALSHOCK3の信号を解析して制御
http://itpro.nikkeibp.co.jp/article/COLUMN/20130917/504910/?ST=security

クライアントソフトウエアの脆弱性対策
第3回　脆弱性の悪用を防ぐEMET、検証でわかるその有用性
http://itpro.nikkeibp.co.jp/article/COLUMN/20130917/505095/?ST=security

マトリクス認証ソフト「SECUREMATRIX」が強化、スマホの使い勝手を向上
http://itpro.nikkeibp.co.jp/article/NEWS/20130925/506784/?ST=security

総務省がサイバー攻撃の防御演習を実施、大規模LAN環境で実地対策
http://itpro.nikkeibp.co.jp/article/NEWS/20130925/506744/?ST=security

Dropbox、米政府による情報要求のデータ公開を巡りGoogleやMSらに加勢
http://itpro.nikkeibp.co.jp/article/NEWS/20130925/506683/?ST=security

JVNVU#99680484 HP System Management Homepage にスタックバッファオーバーフローの脆弱性
http://jvn.jp/cert/JVNVU99680484/

JVN#62507275 複数のブロードバンドルータがオープンリゾルバとして機能してしまう問題
http://jvn.jp/jp/JVN62507275/