25日 火曜日、友引

+ CTX140303 SSL Certificate Validation Vulnerability in the Citrix ShareFile Mobile Application for Android and the Citrix ShareFile Mobile for Tablets Application for Android
http://support.citrix.com/article/CTX140303

+ RHSA-2014:0206 Moderate: openldap security update
http://rhn.redhat.com/errata/RHSA-2014-0206.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4449

+ OpenSSL 1.0.2 released
http://www.openssl.org/news/changelog.html

+ REMOTE: Symantec Endpoint Protection Manager Remote Command Execution Exploit
http://www.exploit-db.com/exploits/31853

+ iOS/MacOSX/AppleTV man-in-the-middle attack
http://cxsecurity.com/issue/WLB-2014020197
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1266

+ Symantec Endpoint Protection Manager Remote Command Execution
http://cxsecurity.com/issue/WLB-2014020199
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5014
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5015

+ PostgreSQL CVE-2014-0061 Security Bypass Vulnerability
http://www.securityfocus.com/bid/65724
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0061

+ PostgreSQL CVE-2014-0062 Security Bypass Vulnerability
http://www.securityfocus.com/bid/65727
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0062

Check Point response to Apple CVE-2014-1266
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk98693&src=securityAlerts

緊急サーバメンテナンスのお知らせ（2014/2/24）
http://app.trendmicro.co.jp/support/news.asp?id=2080

Trend Micro Control Manager 5.5 Service Pack 1 Patch 4 build 1903 公開のお知らせ
http://app.trendmicro.co.jp/support/news.asp?id=2070

PostgreSQL participating in Google Summer of Code 2014
http://www.postgresql.org/about/news/1509/

はてなで不正ログインの可能性、パスワード変更を呼びかけ
http://itpro.nikkeibp.co.jp/article/NEWS/20140224/538764/

UPDATE: JVN#14876762 Apache Commons FileUpload におけるサービス運用妨害 (DoS) の脆弱性
http://jvn.jp/jp/JVN14876762/index.html