15日 火曜日、仏滅

+ UPDATE: OpenSSL Alternative Chains Certificate Forgery Vulnerability (July 2015) Affecting Cisco Products
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150710-openssl

+ Linux kernel 4.1.7, 3.14.52, 3.10.88 released
https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.7
https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.14.52
https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.10.88

+ PHP Multiple Bugs Let Remote Users Obtain Potentially Sensitive Information, View Files, and Execute Arbitrary Code
http://www.securitytracker.com/id/1033548
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6834
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6835
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6836
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6837
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6838

+ phpMyAdmin Lets Remote Users Bypass reCaptcha Feature on the Target System
http://www.securitytracker.com/id/1033546
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6830

+ Bugzilla Account Creation Username Truncation Lets Remote Users Gain Elevated Privileges
http://www.securitytracker.com/id/1033542
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4499

+ Linux Kernel AUFS Filesystem Use-After-Free Lets Local Users Gain Elevated Privileges
http://www.securitytracker.com/id/1033535

+ Microsoft Windows arbitrary code execution (and UAC bypass) via RegEdit.exe
https://cxsecurity.com/issue/WLB-2015090074

+ Microsoft Internet Explorer 11 Stack Underflow Crash PoC
https://cxsecurity.com/issue/WLB-2015090073

+ OpenLDAP: ber_get_next denial of service vulnerability
https://cxsecurity.com/issue/WLB-2015090065
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6908

JVNDB-2015-000129 PIXUS MG7530 におけるクロスサイトリクエストフォージェリの脆弱性
http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-000129.html

JVNDB-2015-000116 Japan Connected-free Wi-Fi におけるスクリプトインジェクションの脆弱性
http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-000116.html

JVNDB-2015-000115 Japan Connected-free Wi-Fi におけるアクセス制限不備の脆弱性
http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-000115.html

やばいぞ日本、セキュリティ最前線からの警告
やばいぞセキュリティオペレーション［2］、演習で主体性を身に付ける
http://itpro.nikkeibp.co.jp/atcl/column/15/090800214/090800002/?ST=security

やばいぞ日本、セキュリティ最前線からの警告
やばいぞセキュリティオペレーション［1］、監視だけでは防げない
http://itpro.nikkeibp.co.jp/atcl/column/15/090800214/090800001/?ST=security

JVNVU#99004652 Securifi Almond ルータ製品に複数の脆弱性
http://jvn.jp/vu/JVNVU99004652/index.html

JVNVU#99671861 UPnP を実装した複数のルータ製品にセキュリティ機能の実装が不十分な問題
http://jvn.jp/vu/JVNVU99671861/index.html