4日 水曜日、先負

+ RHSA-2015:0118 Moderate: mariadb security update
https://access.redhat.com/errata/RHSA-2015:0118
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6568
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0374
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0381
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0382
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0391
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0411
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0432

+ UPDATE: GNU glibc gethostbyname Function Buffer Overflow Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150128-ghost

+ UPDATE: Multiple Vulnerabilities in ntpd Affecting Cisco Products
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141222-ntpd

+ UPDATE: JVNVU#99234709 glibc ライブラリにバッファオーバーフローの脆弱性
http://jvn.jp/vu/JVNVU99234709/index.html

+ MIT Kerberos Multiple Flaws in kadmind Let Remote Users Obtain Potentially Sensitive Information and Remote Authenticted Users Execute Arbitrary Code
http://www.securitytracker.com/id/1031691
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5352
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9421
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9422
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9423

+ Microsoft Internet Explorer Cross-Site Scripting Flaw Lets Remote Users Bypass Same Origin Policy
http://www.securitytracker.com/id/1031689

+ LOCAL: MS15-004 Microsoft Remote Desktop Services Web Proxy IE Sandbox Escape
http://www.exploit-db.com/exploits/35983

+ Microsoft Remote Desktop Services Web Proxy IE Sandbox Escape
http://cxsecurity.com/issue/WLB-2015020012
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0016

+ Internet Explorer 11 Same Origin Bypass
http://cxsecurity.com/issue/WLB-2015020011

CSIRTメモ
チェックしておきたい脆弱性情報＜2015.02.04＞
http://itpro.nikkeibp.co.jp/atcl/column/14/268561/020200041/?ST=security

ニフティ、家庭内のデバイスを保護するセキュリティサービス
http://itpro.nikkeibp.co.jp/atcl/news/15/020300395/?ST=security

首都大学東京から10万通の迷惑メール、学内のNASが踏み台に
http://itpro.nikkeibp.co.jp/atcl/news/15/020300390/?ST=security

JVNVU#93153088 SerVision HVG Video Gateway のウェブインターフェースに複数の脆弱性
http://jvn.jp/vu/JVNVU93153088/

JVN#88559134 シンクグラフィカ製ダウンロードログCGI におけるディレクトリトラバーサルの脆弱性
http://jvn.jp/jp/JVN88559134/