29日 木曜日、赤口

+ RHSA-2016:1944 Important: bind security update
https://rhn.redhat.com/errata/RHSA-2016-1944.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2776

+ RHSA-2016:1945 Important: bind97 security update
https://rhn.redhat.com/errata/RHSA-2016-1945.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2776

+ RHSA-2016:1944 Important: bind security update
https://rhn.redhat.com/errata/RHSA-2016-1944.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2776

+ UPDATE: Cisco Email Security Appliance Internal Testing Interface Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160922-esa

+ UPDATE: Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: September 2016
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160927-openssl

+ Cisco Videoscape Distribution Suite Service Manager Reflective Cross-Site Scripting Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-vds
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6418

+ Cisco IOS and IOS XE Software Smart Install Memory Leak Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-smi
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6385

+ Cisco IOS XR Software Open Shortest Path First Link State Advertisement Denial of Service Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-ospf
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6421

+ Cisco IOS and IOS XE Software Multicast Routing Denial of Service Vulnerabilities
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-msdp
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6382
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6392

+ Cisco IOS and IOS XE Software IP Detail Record Denial of Service Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-ipdr
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6379

+ Cisco IOS and IOS XE Software Internet Key Exchange Version 1 Fragmentation Denial of Service Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-ios-ikev1
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6381

+ Cisco IOS and IOS XE Software H.323 Message Validation Denial of Service Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-h323
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6384

+ Cisco IOS XE Software IP Fragment Reassembly Denial of Service Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-frag
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6386

+ Cisco Firepower Management Center SQL Injection Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-fpmc
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6419

+ Cisco Firepower Management Center Privilege Escalation Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-fmc1
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6420

+ Cisco Firepower Management Center and FireSIGHT System Software Cross-Site Request Forgery Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-fmc
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6417

+ Cisco IOS XE Software NAT Denial of Service Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-esp-nat
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6378

+ Cisco IOS and IOS XE Software DNS Forwarder Denial of Service Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-dns
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6380

+ Cisco IOS Software Common Industrial Protocol Request Denial of Service Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-cip
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6391

+ Cisco AsyncOS File Transfer Protocol Denial of Service Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-aos
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6416

+ Cisco IOS and IOS XE Software AAA Login Denial of Service Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-aaados
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6393

+ JVNVU#90255292 ISC BIND 9 にサービス運用妨害 (DoS) の脆弱性
http://jvn.jp/vu/JVNVU90255292/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2776

+ UPDATE: JVNVU#98667810 OpenSSL に複数の脆弱性
http://jvn.jp/vu/JVNVU98667810/index.html

VU#706359 Aternity version 9 vulnerable to cross-site scripting and remote code execution
https://www.kb.cert.org/vuls/id/706359

NECネクサ、Syslogログを分析してサイバー攻撃の定期レポートを作成するサービス
http://itpro.nikkeibp.co.jp/atcl/news/16/092802820/?ST=security?itp_list_theme