23日 月曜日、赤口

+ CESA-2014:0771 Important CentOS 6 kernel Update
http://lwn.net/Alerts/602994/

+ phpMyAdmin 4.1.14.1 released
http://sourceforge.net/p/phpmyadmin/news/2014/06/phpmyadmin-41141-has-been-released/

+ PMASA-2014-3 Self-XSS due to unescaped HTML output in navigation items hiding feature
http://www.phpmyadmin.net/home_page/security/PMASA-2014-3.php

+ UPDATE: Multiple Vulnerabilities in OpenSSL Affecting Cisco Products
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140605-openssl

+ SYM14-011 Security Advisories Relating to Symantec Products - Symantec Encryption Desktop for OS X World-Writable Files Insecure File Handling
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140620_00
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3431

+ UPDATE: Advisory: OpenSSL Security Advisory [05 Jun 2014]
http://www.sophos.com/en-us/support/knowledgebase/121108.aspx

+ FreeBSD-9.3 RC1 released
http://www.freebsd.org/news/newsflash.html#event20140621:01

+ LOCAL: Linux Kernel <= 3.13 - Local Privilege Escalation PoC (gid)
http://www.exploit-db.com/exploits/33824
2014-4014

+ Linux Kernel user namespace Local Privilege Escalation PoC
http://cxsecurity.com/issue/WLB-2014060120
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4014

+ Linux Kernel user namespace bug
http://cxsecurity.com/issue/WLB-2014060069
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4014

+ Symantec Encryption Desktop for OS X CVE-2014-3431 Insecure File Permissions Vulnerability
http://www.securityfocus.com/bid/68077
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3431

JVNDB-2014-000060 Webmin におけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-000060.html

JVNDB-2014-000059 Webmin におけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-000059.html

JVNDB-2014-000058 Usermin におけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-000058.html

JVNDB-2014-000057 Usermin における OS コマンドインジェクションの脆弱性
http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-000057.html

企業内のネット接続機器、不適切な情報公開とその対策
http://itpro.nikkeibp.co.jp/article/COLUMN/20140610/562885/?ST=security

企業内のネット接続機器、不適切な情報公開とその対策
第1回　狙われるオフィス機器、サーバー機能が脅威の温床に
http://itpro.nikkeibp.co.jp/article/COLUMN/20140610/562886/?ST=security