12日 金曜日、友引

+ UPDATE: HPSBGN02740 rev.2 - HP Operations Manager, Operations Agent, Performance Agent, Service Health Reporter, Service Health Optimizer, Performance Manager, Remote Execution of Arbitrary Code
https://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?spf_p.tpst=kbDocDisplay&spf_p.prp_kbDocDisplay=wsrp-navigationalState%3DdocId%253Demr_na-c03179825-2%257CdocLocale%253Dja_JP%257CcalledBy%253D&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken

+ VMSA-2014-0009 VMware NSX and vCNS product updates address a critical information disclosure vulnerability.
http://www.vmware.com/security/advisories/VMSA-2014-0009.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3796

+ VMware vCloud Networking and Security (vCNS) Input Validation Flaw Lets Remote Users Obtain Sensitive Information
http://www.securitytracker.com/id/1030835
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3796

+ SA60934 NetBSD Kernel Compatibility Multiple Vulnerabilities
http://secunia.com/advisories/60934/

+ SA60339 NetBSD Kernel "execve()" Two Denial of Service Vulnerabilities
http://secunia.com/advisories/60339/

+ SA59970 NetBSD Kernel "setsockopt()" Denial of Service Vulnerability
http://secunia.com/advisories/59970/

【「ソーシャル新人類」の不夜城?10代は何を考えているのか】
炎上事件やネット依存を生む「承認欲求」の暴走、コントロールの秘訣は
http://itpro.nikkeibp.co.jp/atcl/column/14/537662/090400007/?ST=security

【新人D太と先輩M子のITビジネス日誌】
サイバースパイの新手法「水飲み場型攻撃」登場！セキュリティリテラシー向上で被害を防げ
http://itpro.nikkeibp.co.jp/atcl/column/14/493082/090800004/?ST=security

約500万件のGmailアドレスとパスワードが漏えい、流出元は別サイトか
http://itpro.nikkeibp.co.jp/atcl/news/14/091100836/?ST=security

VU#646748 Embarcadero Delphi and C++Builder VCL BMP file processing buffer overflow
http://www.kb.cert.org/vuls/id/646748