11日 月曜日、赤口

+ HPSBMI02210 SSRT071396 rev.3 - ProCurve Series 9300m Switches, Remote Denial of Service (DoS)
https://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c01034753-3%257CdocLocale%253Dja_JP%257CcalledBy%253D&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken

+ OpenSSH 6.4 released
http://www.openssh.com/txt/release-6.4

+ OpenSSH AES-GCM Memory Corruption Flaw Lets Remote Authenticated Users Bypass Access Controls
http://www.securitytracker.com/id/1029312
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4548

+ Linux Kernel 2.6.18 bt8xx Video Driver IOCTL Heap Overflow
http://cxsecurity.com/issue/WLB-2013110071

+ SA55594 OpenSSH AES-GCM Ciphers Privilege Escalation Vulnerability
http://secunia.com/advisories/55594/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4548

+ IBM Lotus Sametime Enterprise Meeting server CVE-2013-3045 Unspecified Security Vulnerability
http://www.securityfocus.com/bid/63617
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3045

+ Apple Mac OS X Hard Link Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/63612

+ ISC BIND 'localnets' ACL Security Bypass Vulnerability
http://www.securityfocus.com/bid/63610
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6230

Sophos Cloud Frequently Asked Questions (FAQ)
http://www.sophos.com/en-us/support/knowledgebase/119598.aspx

チェックしておきたい脆弱性情報＜2013.11.11＞
http://itpro.nikkeibp.co.jp/article/COLUMN/20131104/515705/?ST=security

サイボウズ、“突貫工事”な脆弱性発見コンテストの舞台裏
サイボウズ グローバル開発本部品質保証部 伊藤彰嗣氏
http://itpro.nikkeibp.co.jp/article/Interview/20131107/516722/?ST=security

FacebookとMicrosoft、脆弱性発見の報奨金プログラムを発足
http://itpro.nikkeibp.co.jp/article/NEWS/20131108/516843/?ST=security

セキュアなネットワークインフラを築くには
http://itpro.nikkeibp.co.jp/article/COLUMN/20131104/515707/?ST=security

チェックしておきたい脆弱性情報＜2013.11.08＞
http://itpro.nikkeibp.co.jp/article/COLUMN/20131104/515704/?ST=security

JVNVU#92615138 信頼できないパラメータを使用して生成した Dual_EC_DRBG の出力結果が推測可能な問題
http://jvn.jp/cert/JVNVU92615138/index.html

JVNVU#91825366 IBM Tivoli Federated Identity Manager および IBM Tivoli Federated Identity Manager Business Gateway にオープンリダイレクトの脆弱性
http://jvn.jp/cert/JVNVU91825366/index.html

REMOTE: VICIdial Manager Send OS Command Injection
http://www.exploit-db.com/exploits/29513