12日 火曜日、先勝

+ Tomcat Maven Plugin 2.2 Released
http://tomcat.apache.org/maven-plugin-2.2/jira-report.html

+ Samba 4.1.1, 4.0.11 and 3.6.20 Security Releases Available for Download
http://www.samba.org/samba/history/samba-4.1.1.html
http://www.samba.org/samba/history/samba-4.0.11.html
http://www.samba.org/samba/history/samba-3.6.20.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4475
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4476

+ SA55611 Microsoft Internet Explorer ActiveX Control Code Execution Vulnerability
http://secunia.com/advisories/55611/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3918

+ SA55638 Samba Insecure File Permissions and Security Bypass Security Issues
http://secunia.com/advisories/55638/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4475
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4476

+ Samba 'key.pem' Local Insecure File Permissions Vulnerability
http://www.securityfocus.com/bid/63649
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4476

+ Samba ACL Check Security Bypass Vulnerability
http://www.securityfocus.com/bid/63646
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4475

狙われる複合機、情報漏えい源だけでなくサーバーテロの“踏み台”にも
http://itpro.nikkeibp.co.jp/article/COLUMN/20131111/517104/?ST=security

IPAがオフィス機器のセキュリティに関する注意喚起、「管理者パスワード変更を」
http://itpro.nikkeibp.co.jp/article/NEWS/20131111/517225/?ST=security

富士通SSLが標的型攻撃対策のSIサービスを強化、製品素材を8種から12種に拡大
http://itpro.nikkeibp.co.jp/article/NEWS/20131111/517117/?ST=security