2日 月曜日、先負

+ CentOS 6.5 released
http://wiki.centos.org/Manuals/ReleaseNotes/CentOS6.5

+ PDFCreator 1.7.2 released
http://www.pdfforge.org/blog/pdfcreator-172-released

+ HPSBGN02942 rev.2 - HP Service Manager and ServiceCenter, Remote Code Execution
https://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c04026812-2%257CdocLocale%253Dja_JP%257CcalledBy%253D&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4844

+ Linux kernel 3.12.2, 3.11.10, 3.10.21, 3.4.71 released
https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.12.2
https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.11.10
https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.21
https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.71

+ Google Nexus SMS Processing Flaw Lets Remote Users Deny Service
http://www.securitytracker.com/id/1029414

+ Linux Kernel Buffer Read Error in ieee80211_radiotap_iterator_init() Lets Remote Users Deny Service
http://www.securitytracker.com/id/1029413

+ Linux Kernel Networking recvmsg Memory Leak Lets Local Users Obtain Portions of Kernel Memory
http://www.securitytracker.com/id/1029412
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6405

+ Microsoft Enhanced Mitigation Experience Toolkit Lets Users Bypass ASLR Protections
http://www.securitytracker.com/id/1029411

+ Google Android 'com.android.settings' Lets Local Applications Remote Device Locks
http://www.securitytracker.com/id/1029410

+ PHP parse_iso_intervals Buffer Read Error May Let Remote Users Deny Service
http://www.securitytracker.com/id/1029409
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6712

+ Kingsoft Office Writer 2012 8.1.0.3385 Buffer Overflow
http://cxsecurity.com/issue/WLB-2013120002
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3934

+ SA55606 Linux Kernel Radiotap Header Processing Denial of Service Vulnerability
http://secunia.com/advisories/55606/

+ Linux Kernel 'ieee80211_radiotap_iterator_init()' Function Denial of Service Vulnerability
http://www.securityfocus.com/bid/64013

JVNDB-2013-000112 改造版 TOWN におけるディレクトリトラバーサルの脆弱性
http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-000112.html

日本を守る「七人の侍」
ユーザーの不正からシステムを守る、オンラインゲームの門番（ゲートキーパー）
ネットエージェント サービス事業部 研究開発グループ 秋月 康志 氏
http://itpro.nikkeibp.co.jp/article/COLUMN/20131115/518338/?ST=security

AppleのiOSを巡るプライバシー訴訟、地裁が訴えを棄却
http://itpro.nikkeibp.co.jp/article/NEWS/20131129/521542/?ST=security

Googleのプライバシーポリシー、オランダのデータ保護当局が「違法」と判断
http://itpro.nikkeibp.co.jp/article/NEWS/20131129/521522/?ST=security

世界のセキュリティ・ラボから
2014年の8大セキュリティ脅威予測
http://itpro.nikkeibp.co.jp/article/COLUMN/20131125/520507/?ST=security

Microsoftがサービスの暗号化強化を検討中---海外メディアの報道
http://itpro.nikkeibp.co.jp/article/NEWS/20131129/521463/?ST=security

チェックしておきたい脆弱性情報＜2013.11.29＞
http://itpro.nikkeibp.co.jp/article/COLUMN/20131125/520505/?ST=security

DoS/PoC: TP-Link TL-WR740N / TL-WR740ND - 150M Wireless Lite N Router HTTP DoS
http://www.exploit-db.com/exploits/29919

DoS/PoC: Uptime Agent 5.0.1 - Stack Overflow Vulnerability
http://www.exploit-db.com/exploits/29920

DoS/PoC: ZIP Password Recovery Professional 5.1 (.zip) - Crash POC
http://www.exploit-db.com/exploits/29934