8日 水曜日、先勝

+ New Look. New CentOS.
http://www.centos.org/

+ UPDATE: HPSBUX02926 SSRT101281 rev.2 - HP-UX Running BIND, Remote Denial of Service (DoS)
https://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c03922396-2%257CdocLocale%253Dja_JP%257CcalledBy%253D&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken

+ Samba 4.0.14 Available for Download
http://samba.org/samba/history/samba-4.0.14.html

+ Sudo 1.8.9p1 released
http://www.sudo.ws/sudo/stable.html#1.8.9p1

+ OpenSSL TLS Handshake Null Pointer Exception Lets Remote Users Deny Service
http://www.securitytracker.com/id/1029557
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4353

+ VU#615910 Synology DiskStation Manager arbitrary file modification
http://www.kb.cert.org/vuls/id/615910
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6955

チェックしておきたい脆弱性情報＜2014.1.8＞
http://itpro.nikkeibp.co.jp/article/COLUMN/20140107/528187/?ST=security

［続報］もんじゅPCは韓国と33回不正通信、動画再生フリーソフト更新が契機か
http://itpro.nikkeibp.co.jp/article/NEWS/20140107/528287/?ST=security

2013年のフィッシング攻撃、ホスティング国ワースト1は？
http://itpro.nikkeibp.co.jp/article/COLUMN/20140106/528044/?ST=security

JVNVU#92956361 RealPlayer に複数の脆弱性
http://jvn.jp/cert/JVNVU92956361/index.html

REMOTE: vTiger CRM SOAP AddEmailAttachment Arbitrary File Upload
http://www.exploit-db.com/exploits/30787

LOCAL: IcoFX Stack Buffer Overflow
http://www.exploit-db.com/exploits/30788

LOCAL: IBM Forms Viewer Unicode Buffer Overflow
http://www.exploit-db.com/exploits/30789