19日 火曜日、友引

+ MFSA 2013-103 Miscellaneous Network Security Services (NSS) vulnerabilities
http://www.mozilla.org/security/announce/2013/mfsa2013-103.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5605
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5606
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1741
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5607
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2566

+ FreeBSD <= 10 kernel qlxge/qlxgbe Driver IOCTL Multiple Kernel Memory Leak Bugs
http://cxsecurity.com/issue/WLB-2013110118

+ FreeBSD 10 <= nand Driver IOCTL Kernel Memory Leak Bug
http://cxsecurity.com/issue/WLB-2013110117

+ Apple Mac OS X Hard Link Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/63612
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6799

+ Linux Kernel '__nfs4_get_acl_uncached()' Function Local Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/63791
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4591

+ Linux Kernel 'kvm_main.c' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/63790
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4592

SCSK、IPSでパッチを代用するWindows XP保護システムを提供開始
http://itpro.nikkeibp.co.jp/article/NEWS/20131118/518649/?ST=security

Anonymousの新手のサイバーテロか、複合機が勝手に数万枚の印刷物を出力
http://itpro.nikkeibp.co.jp/article/COLUMN/20131118/518594/?ST=security

Facebook、ポリシー改定で批判のあった一部文章を削除
http://itpro.nikkeibp.co.jp/article/NEWS/20131118/518587/?ST=security

Anonymousが約1年にわたって米政府機関に不正アクセス、海外メディアの報道
http://itpro.nikkeibp.co.jp/article/NEWS/20131118/518544/?ST=security

UPDATE: JVNTA13-317A Microsoft 製品の複数の脆弱性に対するアップデート
http://jvn.jp/cert/JVNTA13-317A/index.html

VU#295276 Adobe ColdFusion is vulnerable to cross-site scripting with directory traversal via the logviewer directory
http://www.kb.cert.org/vuls/id/295276

REMOTE: Supermicro Onboard IPMI close_window.cgi Buffer Overflow
http://www.exploit-db.com/exploits/29666

DoS/PoC: Avira Secure Backup 1.0.0.1 Build 3616 (.reg) - Buffer Overflow
http://www.exploit-db.com/exploits/29671