:: IT Security Neophyte Investigator's MEMO ::

3日金曜日、赤口

2012-02-03T11:15:00.002+09:00

[ANNOUNCE] Apache Lucy (incubating) 0.3.0 released
http://incubator.apache.org/lucy/

不正請求の画面でお困りのお客さまのトラブルを解決する
『おまかせ！不正請求クリーンナップサービス?』提供開始
～面倒な作業なしで専門の技術者が問題解決までご案内～
http://www.trendmicro.co.jp/support/news.asp?id=1732

コンピュータウイルス・不正アクセスの届出状況[1月分]について
http://www.ipa.go.jp/security/txt/2012/02outline.html

JVNVU#382755: Apple Mac OS X における複数の脆弱性に対するアップデート
http://jvn.jp/cert/JVNVU382755/index.html

JVNVU#410281: Apple Mac OS X CoreText に解放済みメモリ使用 (use-after-free) の脆弱性
http://jvn.jp/cert/JVNVU410281/index.html

JVNVU#403593: Apple Mac OS X ATS にメモリ破損の脆弱性
http://jvn.jp/cert/JVNVU403593/index.html

Google、マルウエアスキャン機能「Bouncer」をAndroid Marketに導入
http://itpro.nikkeibp.co.jp/article/NEWS/20120203/380062/?ST=security

Critical PHP bug patched
http://isc.sans.edu/diary.html?storyid=12520

PHP php_register_variable_ex() Lets Remote Users Execute Arbitrary Code
http://www.securitytracker.com/id/1026631

Novell iPrint Server "attributes-natural-language" Buffer Overflow Vulnerability
http://secunia.com/advisories/47805/

Fortinet FortiOS (FortiGate) "fields_sorted_opt" Cross-Site Scripting Vulnerabilities
http://secunia.com/advisories/47693/

libpng "png_formatted_warning()" Off-by-One Vulnerability
http://secunia.com/advisories/47827/

TYPO3 Modern FAQ Extension Two Vulnerabilities
http://secunia.com/advisories/47823/

pragmaMx "message" Script Insertion Vulnerability
http://secunia.com/advisories/47841/

TYPO3 Kitchen recipe Extension SQL Injection Vulnerability
http://secunia.com/advisories/47437/

Drupal Security Issue and Security Bypass Vulnerability
http://secunia.com/advisories/47796/

HTC Products Wi-Fi Credentials Disclosure Weakness
http://secunia.com/advisories/47837/

phpLDAPadmin "base" Cross-Site Scripting Vulnerability
http://secunia.com/advisories/47852/

Ubuntu update for usbmuxd
http://secunia.com/advisories/47809/

Red Hat update for openssl
http://secunia.com/advisories/47808/

Blue Coat Reporter OpenSSL Two Vulnerabilities
http://secunia.com/advisories/47863/

Blue Coat Reporter OpenSSL Two Vulnerabilities
http://secunia.com/advisories/47807/

EMC Documentum Content Server Privilege Escalation Vulnerability
http://secunia.com/advisories/47860/

+ libpng 1.5.8 released
http://www.libpng.org/pub/png/libpng.html
http://www.libpng.org/pub/png/src/libpng-1.5.8-README.txt

+- libpng 1.5.4 through 1.5.7 contain a one-byte (stack) buffer-overrun bug in png_formatted_warning()
http://www.libpng.org/pub/png/libpng.html

+ PHP 5.3.10 Released!
http://www.php.net/
http://www.php.net/releases/5_3_10.php
http://www.php.net/ChangeLog-5.php#5.3.10

+ RHSA-2012:0095 Moderate: ghostscript security update
http://rhn.redhat.com/errata/RHSA-2012-0095.html

+ RHSA-2012:0093 Critical: php security update
http://rhn.redhat.com/errata/RHSA-2012-0093.html

+ RHSA-2012:0096 Moderate: ghostscript security update
http://rhn.redhat.com/errata/RHSA-2012-0096.html

+- Apache HTTP Server CVE-2012-0021 mod_log_config Denial Of Service Vulnerability
http://www.securityfocus.com/bid/51705

+ PHP 'crypt()' Function Security Bypass Vulnerability
http://www.securityfocus.com/bid/49376

- Fixed arbitrary remote code execution vulnerability reported by Stefan Esser, CVE-2012-0830
http://www.php.net/
http://www.vupen.com/english/ADV-2012-0075.php
http://www.securityfocus.com/bid/51830

- Memory leak/Denial of service.
http://www.samba.org/samba/security/CVE-2012-0817

- PHP CVE-2012-0057 Security Bypass Vulnerability
http://www.securityfocus.com/bid/51806

[ANNOUNCE] Apache MRUnit 0.8.0-incubating released
http://www.apache.org/dyn/closer.cgi/incubator/mrunit/

MySQL Connector/ODBC 5.1.10 is available!
http://dev.mysql.com/downloads/connector/odbc/5.1.html

[ANNOUNCE] Slony-I 2.1.1 & 1.2.23 released
http://www.slony.info/

HPSBGN02740 SSRT100741 rev.1 - HP Operations Manager, Operations Agent, Performance Agent, Service Health Reporter, Service Health Optimizer, Performance Manager, Remote Execution of Arbitrary Code
https://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?javax.portlet.tpst=ba847bafb2a2d782fcbb0710b053ce01&javax.portlet.prp_ba847bafb2a2d782fcbb0710b053ce01=wsrp-navigationalState%3DdocId%25253Demr_na-c03179825%25257CdocLocale%25253Dja_JP&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken

RHSA-2012:0092 Critical: php53 security update
http://rhn.redhat.com/errata/RHSA-2012-0092.html

Code Audit Labs : [CAL-2012-0004] Opera - Integer Overflow Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=37556

Independant Researcher : Bugzilla - Spoofing Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=37554

Red Hat : [RHSA-2012:0079-01] Firefox - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=37549

Red Hat : [RHSA-2012:0080-01] Thunderbird - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=37550

Red Hat : [RHSA-2012:0084-01] SeaMonkey - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=37551

Red Hat : [RHSA-2012:0085-01] Thunderbird - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=37552

[security bulletin] HPSBMU02739 SSRT100280 rev.1 - HP Data Protector Media Operations, Remote Ex
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2012-02/msg00011.html

[ MDVSA-2012:012 ] apache
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2012-02/msg00006.html

GLSA (Gentoo Linux Security Advisory) publication changes
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2012-02/msg00012.html

[CAL-2012-0004] opera array integer overflow
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2012-02/msg00010.html

Fwd: RA-Guard: Advice on the implementation (feedback requested)
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2012-02/msg00009.html

APPLE-SA-2012-02-01-1 OS X Lion v10.7.3 and Security Update 2012-001
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2012-02/msg00007.html

Call For Paper
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2012-02/msg00008.html

新たな「Androidウイルス」出現、SymbianやWindows Mobileから移植
エフセキュアが報告、有料SMSにメッセージを勝手に送信
http://itpro.nikkeibp.co.jp/article/NEWS/20120202/380050/?ST=security

ソリトン、標的型攻撃マルウエア対策ソフトを販売
http://itpro.nikkeibp.co.jp/article/NEWS/20120202/380016/?ST=security

JVNDB-2012-001201 Drupal 用 Panels モジュールにおけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001201.html

JVNDB-2012-001163 OpenSSL におけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001163.html

JVNDB-2012-001264 Sudo の sudo_debug 関数における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001264.html

VU#410281 Apple Mac OS X CoreText embedded font vulnerability
http://www.kb.cert.org/vuls/id/410281

VU#403593 Apple Mac OS X ATS data-font memory corruption vulnerability
http://www.kb.cert.org/vuls/id/403593

REMOTE: Icona SpA C6 Messenger DownloaderActiveX Control Arbitrary File Download and Execute
http://www.exploit-db.com/exploits/18449

REMOTE: Sunway Forcecontrol SNMP NetDBServer.exe Opcode 0x57
http://www.exploit-db.com/exploits/18448

REMOTE: Webkit normalize bug for android 2.2 (CVE-2010-1759)
http://www.exploit-db.com/exploits/18446

DoS/PoC: NetSarang Xlpd Printer Daemon 4 Denial of Service Vulnerability
http://www.exploit-db.com/exploits/18454

DoS/PoC: OfficeSIP Server 3.1 Denial Of Service Vulnerability
http://www.exploit-db.com/exploits/18453

Novell iPrint Server "attributes-natural-language" Remote Code Execution
http://www.vupen.com/english/ADV-2012-0081.php

Samba "smbd" Daemon Memory Leak Remote Denial of Service Vulnerability
http://www.vupen.com/english/ADV-2012-0080.php

Apple Mac OS X Code Execution and Security Bypass Vulnerabilities
http://www.vupen.com/english/ADV-2012-0079.php

EMC Documentum Content Server Local Privilege Escalation Vulnerability
http://www.vupen.com/english/ADV-2012-0078.php

Bugzilla Account Impersonation and Cross Site Request Forgery
http://www.vupen.com/english/ADV-2012-0077.php

Mozilla Products Multiple Code Execution and Information Disclosure
http://www.vupen.com/english/ADV-2012-0076.php

PHP "php_register_variable_ex()" Parameter Handling Memory Corruption
http://www.vupen.com/english/ADV-2012-0075.php

PHP 'php_register_variable_ex()' Function Arbitrary Code Execution Vulnerability
http://www.securityfocus.com/bid/51830

Mozilla Firefox/Thunderbird/Seamonkey Multiple Memory Corruption Vulnerabilities
http://www.securityfocus.com/bid/51756

Mozilla Firefox IPv6 Literal Syntax Cross Domain Information Disclosure Vulnerability
http://www.securityfocus.com/bid/51786

Mozilla Firefox/SeaMonkey/Thunderbird XSLT Stylesheets Denial of Service Vulnerability
http://www.securityfocus.com/bid/51754

Mozilla Firefox/Thunderbird/SeaMonkey XUL Document Handling Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/48360

Apache Tomcat Hash Collision Denial Of Service Vulnerability
http://www.securityfocus.com/bid/51200

Apache Tomcat Request Object Security Bypass Vulnerability
http://www.securityfocus.com/bid/51442

Apache Tomcat Parameter Handling Denial of Service Vulnerability
http://www.securityfocus.com/bid/51447

Apache Tomcat HTTP DIGEST Authentication Multiple Security Weaknesses
http://www.securityfocus.com/bid/49762

Apache Tomcat AJP Protocol Security Bypass Vulnerability
http://www.securityfocus.com/bid/49353

Apache Tomcat 'sendfile' Request Attributes Information Disclosure Vulnerability
http://www.securityfocus.com/bid/48667

Apache Tomcat 'MemoryUserDatabase' Information Disclosure Vulnerability
http://www.securityfocus.com/bid/48456

glFusion 'users.php' SQL Injection Vulnerability
http://www.securityfocus.com/bid/46575

glFusion SQL Injection and Arbitrary File Upload Vulnerabilities
http://www.securityfocus.com/bid/51650

Siemens SIMATIC WinCC Flexible Runtime 'HmiLoad.exe' Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/50828

Apple Mac OS X Prior To 10.7.3 CoreText Use After Free Code Execution Vulnerability
http://www.securityfocus.com/bid/51812

JBoss Operations Network Multiple Cross Site Scripting Vulnerabilities
http://www.securityfocus.com/bid/51095

HP Data Protector 'DBServer.exe' Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/47004

Moodle Multiple Security Bypass Vulnerabilities
http://www.securityfocus.com/bid/51450

Todd Miller Sudo 'Sudo_Debug()' Path Resolution Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/51719

MIT Kerberos KDC TGS Handling NULL Pointer Dereference Denial Of Service Vulnerability
http://www.securityfocus.com/bid/50929

BackupPC 'index.cgi' Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/50406

Polipo POST/PUT Requests HTTP Header Processing Denial Of Service Vulnerability
http://www.securityfocus.com/bid/49908

Apache HTTP Server CVE-2012-0021 mod_log_config Denial Of Service Vulnerability
http://www.securityfocus.com/bid/51705

Apache HTTP Server 'httpOnly' Cookie Information Disclosure Vulnerability
http://www.securityfocus.com/bid/51706

Apache HTTP Server Scoreboard Local Security Bypass Vulnerability
http://www.securityfocus.com/bid/51407

Mozilla Firefox/Thunderbird/SeaMonkey SVG Polygon Parsing Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/48358

Mozilla Firefox/Thunderbird/SeaMonkey XUL Document Use-After-Free Vulnerability
http://www.securityfocus.com/bid/48373

Mozilla Firefox/Thunderbird/SeaMonkey 'Array.reduceRight()' Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/48372

Mozilla Firefox and Thunderbird CVE-2011-2364 Memory Corruption Vulnerability
http://www.securityfocus.com/bid/48367

Mozilla Firefox/Thunderbird/SeaMonkey Cookie Cross Domain Information Disclosure Vulnerability
http://www.securityfocus.com/bid/48376

Oracle Sun Solaris CVE-2012-0099 Remote Security Vulnerability
http://www.securityfocus.com/bid/51500

Suhosin Extension Transparent Cookie Encryption Stack Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/51574

PHP 'crypt()' Function Security Bypass Vulnerability
http://www.securityfocus.com/bid/49376

PHP CVE-2012-0057 Security Bypass Vulnerability
http://www.securityfocus.com/bid/51806

RETIRED: Apple Mac OS X Prior to 10.7.3 Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/51798

Sunway ForceControl Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/49747

OpenSSL OCSP Stapling 'ClientHello' Handshake Message Parsing Security Vulnerability
http://www.securityfocus.com/bid/46264

OpenSSL TLS Server Extension Parsing Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/44884

Mozilla Firefox/Thunderbird/SeaMonkey Ogg Vorbis Files Memory Corruption Vulnerability
http://www.securityfocus.com/bid/51753

Mozilla Firefox/Thunderbird/SeaMonkey nsDOMAttribute Use After Free Memory Corruption Vulnerability
http://www.securityfocus.com/bid/51755

OpenSSL Multiple Vulnerabilities
http://www.securityfocus.com/bid/51281

2日木曜日、大安

2012-02-02T10:16:00.000+09:00

Trend Micro ビジネスセキュリティ6.0 Service Pack 3 Critical Patch (build 4254)公開のお知らせ
http://www.trendmicro.co.jp/support/news.asp?id=1730

「CRYPTRECシンポジウム2012」開催のお知らせ
http://www.ipa.go.jp/security/event/2012/crypt-sympo2012/index.html

JVNVU#763355 HTC 製 Android 端末に Wi-Fi 認証情報漏えいの脆弱性
http://jvn.jp/cert/JVNVU763355/index.html

JVN#33021167 Pocket WiFi (GP02) におけるクロスサイトリクエストフォージェリの脆弱性
http://jvn.jp/jp/JVN33021167/index.html

Apple Mac OS X Multiple Flaws Let Remote Users Execute Arbitrary Code, Obtain Information, and Conduct Cross-Site Scripting Attacks and Local Users Gain Elevated Privileges
http://www.securitytracker.com/id/1026627

HP Data Protector Media Operations Lets Remote Users Execute Arbitrary Code
http://www.securitytracker.com/id/1026626

EMC Documentum Content Server Lets Local Administrative Users Gain Elevated Privileges
http://www.securitytracker.com/id/1026624

REMOTE: Webkit normalize bug for android 2.2 (CVE-2010-1759)
http://www.exploit-db.com/exploits/18446

WebKit 'Node.normalize' Method Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/40665

Wireshark Versions Prior to 1.4.5/1.2.16 Multiple Remote Vulnerabilities
http://www.securityfocus.com/bid/47392

Subversion 'mod_dav_svn' Multiple Denial of Service and Information Disclosure Vulnerabilities
http://www.securityfocus.com/bid/48091

PHP CVE-2011-2202 Security Bypass Vulnerability
http://www.securityfocus.com/bid/48259

cURL/libcURL GSS/Negotiate Feature Spoofing Security Vulnerability
http://www.securityfocus.com/bid/48434

libTIFF ThunderCode Decoder Heap Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/46951

PHP 'substr_replace()' Use After Free Remote Memory Corruption Vulnerability
http://www.securityfocus.com/bid/46843

FreeType Font Document Multiple Memory Corruption Vulnerabilities
http://www.securityfocus.com/bid/50155

Apple iOS Libinfo Component CVE-2011-3441 Information Disclosure Vulnerability
http://www.securityfocus.com/bid/50641

RoundCube Webmail '_mbox' Parameter Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/49229

Apple iOS and Mac OS X CFNetwork Cross Domain Information Disclosure Vulnerability
http://www.securityfocus.com/bid/50115

SquirrelMail Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/42399

SquirrelMail Multiple HTML Injection, Cross Site Scripting, and Security Bypass Vulnerabilities
http://www.securityfocus.com/bid/48648

Apple Safari ImageIO TIFF Image Handling Heap Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/48833

Apple Mac OS X ColorSync (CVE-2011-0200) Integer Overflow Vulnerability
http://www.securityfocus.com/bid/48416

SquirrelMail 'mail_fetch' Remote Information Disclosure Vulnerability
http://www.securityfocus.com/bid/40291

Apache Tomcat 'MemoryUserDatabase' Information Disclosure Vulnerability
http://www.securityfocus.com/bid/48456

Apple iTunes CoreAudio (CVE-2011-3252) Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/50065

Mozilla Firefox and SeaMonkey 'Firefox Recovery Key.html' Insecure File Permissions Vulnerability
http://www.securityfocus.com/bid/51787

PHP 'crypt()' Function Security Bypass Vulnerability
http://www.securityfocus.com/bid/49376

Apple QuickTime Prior To 7.7.1 'Flic' Movie File Handling Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/50404

Apple QuickTime Prior To 7.7.1 Movie File Handling Integer Overflow Vulnerability
http://www.securityfocus.com/bid/50401

PHP Prior to 5.3.7 Multiple NULL Pointer Dereference Denial Of Service Vulnerabilities
http://www.securityfocus.com/bid/49249

Apple QuickTime Prior To 7.7.1 Movie File Handling Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/50400

Apple Mac OS X Keychain Certificate Settings Security Bypass Vulnerability
http://www.securityfocus.com/bid/49429

About the security content of OS X Lion v10.7.3 and Security Update 2012-001
http://support.apple.com/kb/HT5130

CentOS alert CESA-2012:0085 (thunderbird)
http://lwn.net/Alerts/478685/

CentOS alert CESA-2012:0080 (thunderbird)
http://lwn.net/Alerts/478687/

CentOS alert CESA-2012:0079 (firefox)
http://lwn.net/Alerts/478688/

CentOS alert CESA-2012:0084 (seamonkey)
http://lwn.net/Alerts/478691/

Firefox 10 is now available
http://mozilla.jp/firefox/10.0/releasenotes/

+- RHSA-2012:0084-1: Critical: seamonkey security update
http://rhn.redhat.com/errata/RHSA-2012-0084.html
対象名：Red Hat 4 (seamonkey パッケージ)
コメント：使用パッケージが対象ではない

+ RHSA-2012:0086-1: Moderate: openssl security update
http://rhn.redhat.com/errata/RHSA-2012-0086.html
対象名：Red Hat 4 (openssl パッケージ)

+? PHP 'socket_connect()' Function Stack Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/47950
CVE-2011-1938
対象名：PHP 5.x
コメント：少々古いが報告していないようです。

- HPSBMU02739 SSRT100280 rev.1 - HP Data Protector Media Operations, Remote Execution of Arbitrary Code
https://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?javax.portlet.tpst=ba847bafb2a2d782fcbb0710b053ce01&javax.portlet.prp_ba847bafb2a2d782fcbb0710b053ce01=wsrp-navigationalState%3DdocId%25253Demr_na-c03179046%25257CdocLocale%25253Dja_JP&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken

[ANNOUNCE] JMeter 2.6 is released
http://jmeter.apache.org/docs/changes.html

Multiple vulnerabilities in OpenEMR
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2012-02/msg00003.html

802.1X password exploit on many HTC Android devices
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2012-02/msg00001.html

ESA-2012-009: EMC Documentum Content Server privilege elevation vulnerability
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2012-02/msg00004.html

Security advisory for Bugzilla 4.2rc2, 4.0.4, 3.6.8 and 3.4.14
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2012-02/msg00002.html

[Announce] Apache HTTP Server 2.2.22 Released
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2012-02/msg00000.html

XSS phpLDAPadmin: 1.2.0.5 (Debian package) and 1.2.2 (sourceforge)
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2012-02/msg00005.html

IPA重要インフラ情報セキュリティシンポジウム2012
http://www.ipa.go.jp/security/event/2012/cip_sympo/index.html

IIJがDDoS対策の容量を拡大、1Gbps超える攻撃にも耐える
http://itpro.nikkeibp.co.jp/article/NEWS/20120201/379906/?ST=security

Debian : [DSA-2399-1] php5 - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=37546

Hewlett-Packard : [HPSBMU02738 SSRT100748] HP - Network Automation - Unauthorized Access Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=37547

Hewlett-Packard : [HPSBUX02737 SSRT100747] HP-UX - Denial-Of-Service Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=37548

Ubuntu Security Notice : [USN-1351-1] AccountsService - Denial-Of-Service Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=37545

ISC Feature of the Week: ISC Search
http://isc.sans.edu/diary.html?storyid=12496

Apple and Apache security fixes and releases
http://isc.sans.edu/diary.html?storyid=12502

RHSA-2012:0085 Critical: thunderbird security update
http://rhn.redhat.com/errata/RHSA-2012-0085.html

Bugzilla Bugs Permit Remote Cross-Site Request Forgery and Remote Authenticated Account Impersonation Attacks
http://www.securitytracker.com/id/1026623

Novell iPrint 'attributes-natural-language' Buffer Overflow Lets Remote Users Execute Arbitrary Code
http://www.securitytracker.com/id/1026618

Mozilla Thunderbird IPv6 Address Processing Lets Remote Users Bypass Same-Origin Restrictions to Obtain Error Messages
http://www.securitytracker.com/id/1026610

Mozilla Seamonkey IPv6 Address Processing Lets Remote Users Bypass Same-Origin Restrictions to Obtain Error Messages
http://www.securitytracker.com/id/1026609

RealNetworks RealPlayer Malformed AAC File Parsing Code Execution Vulnerability
http://www.securiteam.com/securitynews/5HP2V0A6AW.html

RealNetworks RealPlayer genr Sample Size Parsing Code Execution Vulnerability
http://www.securiteam.com/securitynews/5JP2X0A6AS.html

RealNetwork RealPlayer MPG Width Integer Underflow Code Execution Vulnerability
http://www.securiteam.com/securitynews/5KP2Y0A6AK.html

RealNetworks RealPlayer ATRC Code Data Parsing Code Execution Vulnerability
http://www.securiteam.com/securitynews/5IP2W0A6AC.html

VU#763355: 802.1X password exploit on many HTC Android devices
http://www.kb.cert.org/vuls/id/763355

OpenEMR File Inclusion and Command Injection Vulnerabilities
http://secunia.com/advisories/47781/

Red Hat update for thunderbird
http://secunia.com/advisories/47791/

Red Hat update for firefox
http://secunia.com/advisories/47789/

Red Hat update for thunderbird
http://secunia.com/advisories/47800/

MiTalk Messenger for Android Security Bypass Security Issue
http://secunia.com/advisories/47767/

Ubuntu update for accountsservice
http://secunia.com/advisories/47834/

phpShowtime Directory and Image File Disclosure Weakness
http://secunia.com/advisories/47802/

Pale Moon Multiple Vulnerabilities
http://secunia.com/advisories/47751/

MindManager Insecure Library Loading Vulnerability
http://secunia.com/advisories/47797/

GForge Community Edition / Advanced Server Multiple Cross-Site Scripting Vulnerabilities
http://secunia.com/advisories/47790/

ManageEngine Applications Manager Multiple Cross-Site Scripting Vulnerabilities
http://secunia.com/advisories/47724/

Red Hat update for seamonkey
http://secunia.com/advisories/47778/

Red Hat update for JBoss products
http://secunia.com/advisories/47793/

Ubuntu update for software-properties
http://secunia.com/advisories/47833/

Mozilla Firefox / Thunderbird Multiple Vulnerabilities
http://secunia.com/advisories/47839/

Mozilla SeaMonkey Multiple Vulnerabilities
http://secunia.com/advisories/47840/

Mozilla Firefox / Thunderbird Multiple Vulnerabilities
http://secunia.com/advisories/47816/

Emobile Pocket WiFi GP02 Cross-Site Request Forgery Vulnerability
http://secunia.com/advisories/47795/

Bugzilla Spoofing and Cross-Site Request Forgery Vulnerabilities
http://secunia.com/advisories/47814/

4images "cat_parent_id" Cross-Site Scripting Vulnerability
http://secunia.com/advisories/47811/

Oracle Multiple Products Web Form Hash Collision Denial of Service Vulnerability
http://secunia.com/advisories/47819/

Pligg CMS 'status' Parameter SQL Injection Vulnerability
2012-12-29
http://www.securityfocus.com/bid/51273

PHP 'ZipArchive::addGlob' and 'ZipArchive::addPattern' Denial Of Service Vulnerabilities
http://www.securityfocus.com/bid/49252

Mozilla Firefox/SeaMonkey/Thunderbird XSLT Stylesheets Denial of Service Vulnerability
http://www.securityfocus.com/bid/51754

Apache HTTP Server CVE-2011-3348 Denial Of Service Vulnerability
http://www.securityfocus.com/bid/49616

X.Org libXfont LZW Decompression 'BufCompressedFill()' Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/49124

libpng Malformed cHRM Divide-By-Zero Denial of Service Vulnerability
http://www.securityfocus.com/bid/49744

SSL/TLS Protocol Initialization Vector Implementation Information Disclosure Vulnerability
http://www.securityfocus.com/bid/49778

PHP 'socket_connect()' Function Stack Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/47950

PHP Versions Prior to 5.3.7 Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/49241

Mozilla Firefox/Thunderbird/SeaMonkey CVE-2012-0447 Information Disclosure Vulnerability
http://www.securityfocus.com/bid/51757

Mozilla Firefox/SeaMonkey/Thunderbird XPConnect Security Check Cross Domain Scripting Vulnerability
http://www.securityfocus.com/bid/51752

Mozilla Firefox/SeaMonkey/Thunderbird Cross Domain Security Bypass Vulnerability
http://www.securityfocus.com/bid/51765

Mozilla Firefox/Thunderbird/SeaMonkey Ogg Vorbis Files Memory Corruption Vulnerability
http://www.securityfocus.com/bid/51753

1日水曜日、仏滅

2012-02-01T11:04:00.002+09:00

RHSA-2012:0080 Critical: thunderbird security update
http://rhn.redhat.com/errata/RHSA-2012-0080.html

RHSA-2012:0079 Critical: firefox security update
http://rhn.redhat.com/errata/RHSA-2012-0079.html

MFSA 2012-09 Firefox Recovery Key.html is saved with unsafe permission
http://www.mozilla.org/security/announce/2012/mfsa2012-09.html

MFSA 2012-08 Crash with malformed embedded XSLT stylesheets
http://www.mozilla.org/security/announce/2012/mfsa2012-08.html

MFSA 2012-07 Potential Memory Corruption When Decoding Ogg Vorbis files
http://www.mozilla.org/security/announce/2012/mfsa2012-07.html

MFSA 2012-06 Uninitialized memory appended when encoding icon images may cause information disclosure
http://www.mozilla.org/security/announce/2012/mfsa2012-06.html

MFSA 2012-05 Frame scripts calling into untrusted objects bypass security checks
http://www.mozilla.org/security/announce/2012/mfsa2012-05.html

MFSA 2012-04 Child nodes from nsDOMAttribute still accessible after removal of nodes
http://www.mozilla.org/security/announce/2012/mfsa2012-04.html

MFSA 2012-03 ＜iframe＞ element exposed across domains via name attribute
http://www.mozilla.org/security/announce/2012/mfsa2012-03.html

MFSA 2012-02 Overly permissive IPv6 literal syntax
http://www.mozilla.org/security/announce/2012/mfsa2012-02.html

MFSA 2012-01 Miscellaneous memory safety hazards (rv:10.0/ rv:1.9.2.26)
http://www.mozilla.org/security/announce/2012/mfsa2012-01.html

FAXシステムメンテナンスのお知らせ
http://www.trendmicro.co.jp/support/news.asp?id=1728

JVNDB-2011-003658 Support Incident Tracker の translate.php における重要な情報を取得される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003658.html

JVNDB-2012-001257 Support Incident Tracker におけるクロスサイトリクエストフォージェリの脆弱性
http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001257.html

JVNDB-2012-001256 Support Incident Tracker におけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001256.html

JVNDB-2012-001255 Support Incident Tracker における SQL インジェクションの脆弱性
http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001255.html

JVNDB-2011-003657 Support Incident Tracker における任意の PHP コードを実行可能な言語ファイルに挿入される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003657.html

JVNDB-2012-001254 Support Incident Tracker における SQL インジェクションの脆弱性
http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001254.html

JVNDB-2012-001253 Support Incident Tracker におけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001253.html

JVNDB-2012-001252 Support Incident Tracker の incident_attachments.php における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001252.html

JVNDB-2012-001251 Support Incident Tracker におけるクロスサイトリクエストフォージェリの脆弱性
http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001251.html

JVNDB-2012-001250 Support Incident Tracker の move_uploaded_file.php における重要な情報を取得される脆弱性
http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001250.html

JVNDB-2012-001249 Support Incident Tracker の ftp_upload_file.php における任意の PHP コードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001249.html

JVNDB-2012-001248 Support Incident Tracker の config.php における任意の PHP コードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001248.html

JVNDB-2012-001247 Support Incident Tracker の incident_attachments.php における SQL インジェクションの脆弱性
http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001247.html

JVNDB-2012-001246 Support Incident Tracker の search.php におけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001246.html

JVNDB-2012-001245 Support Incident Tracker の ftp_upload_file.php における重要な情報を取得される脆弱性
http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001245.html

JVNDB-2012-000010 Pocket WiFi (GP02) におけるクロスサイトリクエストフォージェリの脆弱性
http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-000010.html

JVNDB-2012-001244 OpenNMS におけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001244.html

JVNDB-2012-001243 Aryadad CMS の Default.aspx における SQL インジェクションの脆弱性
http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001243.html

JVNDB-2012-001242 WordPress 用 Theme Tuner プラグインにおける任意の PHP コードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001242.html

JVNDB-2012-001241 Acidcat CMS におけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001241.html

JVNDB-2012-001240 Lead Capture Page System におけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001240.html

JVNDB-2012-001239 OpenSSH における重要な情報を取得される脆弱性
http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001239.html

JVNDB-2012-001238 Schneider Electric Modicon Quantum PLC におけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001238.html

JVNDB-2012-001237 Schneider Electric Modicon Quantum PLC におけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001237.html

JVNDB-2012-001236 Schneider Electric Modicon Quantum PLC におけるバッファオーバーフローの脆弱性
http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001236.html

JVN#33021167 Pocket WiFi (GP02) におけるクロスサイトリクエストフォージェリの脆弱性
http://jvn.jp/jp/JVN33021167/index.html

「脆弱性体験学習ツールAppGoatハンズオンセミナー」開催のご案内
http://www.ipa.go.jp/security/vuln/seminar/lab_semi_appgoat_2012_1.html

Mozilla Firefox IPv6 Address Processing Lets Remote Users Bypass Same-Origin Restrictions to Obtain Error Messages
http://www.securitytracker.com/id/1026608

Mozilla Thunderbird Multiple Flaws Permit Remote Code Execution, Information Disclosure, and Cross-Site Scripting Attacks
http://www.securitytracker.com/id/1026607

Mozilla Firefox Multiple Flaws Permit Remote Code Execution, Information Disclosure, and Cross-Site Scripting Attacks
http://www.securitytracker.com/id/1026605

DoS/PoC: EdrawSoft Office Viewer Component ActiveX 5.6 (officeviewermme.ocx) BoF PoC
http://www.exploit-db.com/exploits/18440

- DoS/PoC: sudo 1.8.0 - 1.8.3p1 Format String Vulnerability
http://www.exploit-db.com/exploits/18436

LuraWave JP2 Browser Plug-In 'npjp2.dll' Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/51732

Mozilla Firefox/Thunderbird/SeaMonkey nsDOMAttribute Use After Free Memory Corruption Vulnerability
http://www.securityfocus.com/bid/51755

Mozilla Firefox/SeaMonkey/Thunderbird XSLT Stylesheets Denial of Service Vulnerability
http://www.securityfocus.com/bid/51754

Mozilla Firefox/Thunderbird/Seamonkey Multiple Memory Corruption Vulnerabilities
http://www.securityfocus.com/bid/51756

Apache HTTP Server 'httpOnly' Cookie Information Disclosure Vulnerability
http://www.securityfocus.com/bid/51706

Mozilla Firefox/Thunderbird/SeaMonkey Ogg Vorbis Files Memory Corruption Vulnerability
http://www.securityfocus.com/bid/51753

PHP 'exif_process_IFD_TAG()' Remote Integer Overflow Vulnerability
http://www.securityfocus.com/bid/50907

Adobe Flash Player CVE-2011-2140 Remote Memory Corruption Vulnerability
http://www.securityfocus.com/bid/49083

PHP CVE-2011-2202 Security Bypass Vulnerability
http://www.securityfocus.com/bid/48259

+ Apache HTTP 2.2.22 released
http://www.apache.org/dist/httpd/Announcement2.2.html
http://ftp.meisei-u.ac.jp/mirror/apache/dist//httpd/CHANGES_2.2.22

+ Postfix 2.9 Patchlevel 0, Postfix 2.8 Patchlevel 8 released
http://mirror.postfix.jp/postfix-release/index.html
http://mirror.postfix.jp/postfix-release/official/postfix-2.9.0.HISTORY
http://mirror.postfix.jp/postfix-release/official/postfix-2.8.8.HISTORY

+ Suhosin Patch 0.9.10 released
http://www.hardened-php.net/suhosin/download.html
http://www.hardened-php.net/suhosin/download.html#suhosin_patch_0.9.10

+ GnuPG 1.4.12 released
http://lists.gnupg.org/pipermail/gnupg-announce/2012q1/000313.html

+ Critical: firefox security update
http://rhn.redhat.com/errata/RHSA-2012-0079.html

++ Oracle Security Alert for CVE-2011-5035
http://www.oracle.com/technetwork/topics/security/alert-cve-2011-5035-1506603.html

Linux kernel 3.3-rc2 released
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux.git;a=summary

HS12-006 uCosminexus製品におけるクロスサイトスクリプティングの脆弱性
http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS12-006/index.html
http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS12-006/index.html

HS12-005 JP1製品におけるクロスサイトスクリプティングの脆弱性
http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS12-005/index.html
http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS12-005/index.html

HS12-004 JP1/IT Desktop Management - Managerにおけるクロスサイトスクリプティングの脆弱性
http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS12-004/index.html
http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS12-004/index.html

[SECURITY] [DSA 2399-2] php5 regression fix
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2012-01/msg00190.html

[SECURITY] [DSA 2399-1] php5 security update
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2012-01/msg00189.html

VMSA-2012-0001 VMware ESXi and ESX updates to third party library and ESX Service Console
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2012-01/msg00188.html

[security bulletin] HPSBUX02724 SSRT100650 rev.3 - HP-UX Running System Administration Manag
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2012-01/msg00187.html

[security bulletin] HPSBUX02697 SSRT100591 rev.2 - HP-UX Running Java, Remote Unauthorized A
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2012-01/msg00186.html

[security bulletin] HPSBUX02737 SSRT100747 rev.1 - HP-UX Running OpenSSL, Remote Denial of S
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2012-01/msg00185.html

“500万台感染のAndroidウイルス”、正体はアドウエアの可能性大
広告を表示させてお金もうけ、端末の乗っ取りなどは行わない
http://itpro.nikkeibp.co.jp/article/NEWS/20120201/379863/?ST=security

「高まるセキュリティの懸念、一人ひとりが適切な対応を」――官房長官
2月1日から「情報セキュリティ月間」開始
http://itpro.nikkeibp.co.jp/article/NEWS/20120201/379866/?ST=security

JVNDB-2011-003656 Linux kernel の hfs_mac2asc 関数におけるスタックベースのバッファオーバーフローの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003656.html

JVNDB-2012-001235 Linux kernel の NFS 実装におけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001235.html

JVNDB-2012-001234 Linux kernel におけるサービス運用妨害 (アサーションエラーおよび kernel oops) の脆弱性
http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001234.html

JVNDB-2012-001233 Linux kernel におけるサービス運用妨害 (NULL ポインタデリファレンスおよび kernel oops) の脆弱性
http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001233.html

JVNDB-2012-001232 Linux kernel の xfs_readlink 関数におけるバッファオーバーフローの脆弱性
http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001232.html

JVNDB-2012-001231 Linux kernel におけるサービス運用妨害 (NULL ポインタデリファレンスおよび OOPS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001231.html

JVNDB-2012-001230 Linux kernel の tpm_read 関数における TPM コマンドの結果を読まれる脆弱性
http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001230.html

JVNDB-2012-001229 Linux kernel の mem_write 関数における権限を取得される脆弱性
http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001229.html

OSINT tactics: parsing from FOCA for Maltego
http://isc.sans.edu/diary/OSINT+tactics+parsing+from+FOCA+for+Maltego/12481

Firefox 10 and VMWare advisories and updates
http://isc.sans.edu/diary/Firefox+10+and+VMWare+advisories+and+updates/12490

RHSA-2012:0073 Low: Red Hat Enterprise Linux 4 - 30 day End Of Life Notice
http://rhn.redhat.com/errata/RHSA-2012-0073.html

RHSA-2012:0079 Critical: firefox security update
http://rhn.redhat.com/errata/RHSA-2012-0079.html

ProFTPD Response Pool Use-After-Free Code Execution Vulnerability
http://www.securiteam.com/unixfocus/5MP3Q0A60W.html

InduSoft WebStudio CEServer Operation 0x15 Code Execution Vulnerability | 0 Comments and 0 Reactions
http://www.securiteam.com/securitynews/5NP3R0A60M.html

InduSoft WebStudio Unauthenticated Operations Code Execution Vulnerabilityy | 0 Comments and 0 Reactions
http://www.securiteam.com/securitynews/5OP3S0A60C.html

HP Data Protector LogBackupLocationStatus SQL Injection Vulnerabilty | 0 Comments and 0 Reactions
http://www.securiteam.com/securitynews/5PP3T0A60S.html

TWiki Input Validation Flaw in 'Organization' Field Permits Cross-Site Scripting Attacks
http://www.securitytracker.com/id/1026604

IBM SPSS SamplePower VsVIEW6 ActiveX Control Let Remote Users Execute Arbitrary Code
http://www.securitytracker.com/id/1026603

IBM SPSS Data Collection ActiveX Controls Let Remote Users Execute Arbitrary Code
http://www.securitytracker.com/id/1026602

FishEye / Crucible Webwork 2 Code Injection Vulnerability
http://secunia.com/advisories/47780/

RESTEasy JAXB XML Entity References Information Disclosure Vulnerability
http://secunia.com/advisories/47832/

RESTEasy XML Entity References Information Disclosure Vulnerability
http://secunia.com/advisories/47818/

HostBill Ticket Subject Code Injection Vulnerability
http://secunia.com/advisories/47799/

SilverStripe Page Title Script Insertion Vulnerability
http://secunia.com/advisories/47812/

Debian update for php5
http://secunia.com/advisories/47785/

VMware ESX Server Multiple Vulnerabilities
http://secunia.com/advisories/47758/

VMware ESXi Server Python Multiple Vulnerabilities
http://secunia.com/advisories/47608/

Hitachi JP1/IT Resource Management Unspecified Cross-Site Scripting Vulnerability
http://secunia.com/advisories/47825/

Hitachi JP1/IT Service Level Management Unspecified Cross-Site Scripting Vulnerability
http://secunia.com/advisories/47804/

Hitachi JP1/IT Desktop Management Unspecified Cross-Site Scripting Vulnerability
http://secunia.com/advisories/47774/

Hitachi uCosminexus Products Unspecified Cross-Site Scripting Vulnerability
http://secunia.com/advisories/47815/

Hitachi uCosminexus EUR Print Manager Unspecified Cross-Site Scripting Vulnerability
http://secunia.com/advisories/47773/

HP Network Automation Unspecified Security Bypass Vulnerability
http://secunia.com/advisories/47826/

HP Network Automation Unspecified Security Bypass Vulnerability
http://secunia.com/advisories/47738/

TWiki User Organization Script Insertion Vulnerability
http://secunia.com/advisories/47784/

Mibew Messenger Cross-Site Request Forgery Vulnerability
http://secunia.com/advisories/47787/

LuraWave JP2 Browser Plug-In File Processing Buffer Overflow Vulnerability
http://secunia.com/advisories/47831/

LuraWave JP2 ActiveX Control File Processing Buffer Overflow Vulnerability
http://secunia.com/advisories/47350/

Image Hosting Script DPI "showseries" Cross-Site Scripting Vulnerability
http://secunia.com/advisories/47786/

Debian update for curl
http://secunia.com/advisories/47764/

sudo "sudo_debug()" Format String Privilege Escalation Vulnerability
http://secunia.com/advisories/47743/

Red Hat update for php
http://secunia.com/advisories/47820/

Red Hat update for ruby
http://secunia.com/advisories/47821/

Red Hat update for ruby
http://secunia.com/advisories/47822/

Apache httpOnly Cookie Disclosure
http://www.exploit-db.com/exploits/18442/

Adobe Flash Player MP4 SequenceParameterSetNALUnit Remote Code Execution Exploit
http://www.exploit-db.com/exploits/18437/

PHP CVE-2011-2202 Security Bypass Vulnerability
2012-02-01
http://www.securityfocus.com/bid/48259

PHP Web Form Hash Collision Denial Of Service Vulnerability
2012-02-01
http://www.securityfocus.com/bid/51193

PHP Exif Extension 'exif_read_data()' Function Remote Denial of Service Vulnerability
2012-02-01
http://www.securityfocus.com/bid/46365

PHP Versions Prior to 5.3.7 Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/49241

Ruby Hash Collision Denial Of Service Vulnerability
http://www.securityfocus.com/bid/51198

Ruby Random Number Values Security Weakness
http://www.securityfocus.com/bid/49126

Oracle GlassFish Server Hash Collision Denial Of Service Vulnerability
http://www.securityfocus.com/bid/51194

Samba SWAT Cross Site Request Forgery Vulnerability
http://www.securityfocus.com/bid/48899

Xen 'x86_64 __addr_ok()' Local Denial Of Service Vulnerability
http://www.securityfocus.com/bid/49370

Samba 'client/mount.cifs.c' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/38326

Samba 'etc/mtab' File Appending Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/49939

Linux Kernel NFS File Locking Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/49141

Linux Kernel 'fs/partitions/osf.c' Information Disclosure Vulnerability
http://www.securityfocus.com/bid/46878

Linux Kernel 'ib_uverbs_poll_cq()' Function Local Information Disclosure Vulnerability
http://www.securityfocus.com/bid/46488

PHP 'exif_process_IFD_TAG()' Remote Integer Overflow Vulnerability
http://www.securityfocus.com/bid/50907

PHP 'socket_connect()' Function Stack Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/47950

Linux Kernel 'ib_uverbs_poll_cq()' Integer Overflow Vulnerability
http://www.securityfocus.com/bid/46073

Linux Kernel SCTP Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/49373

Linux Kernel SCTP INIT/INIT-ACK Chunk Length Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/47308

Linux Kernel EFI Partition Denial of Service Vulnerability
http://www.securityfocus.com/bid/47343

Linux Kernel Netfilter and Econet Local Information Disclosure Vulnerabilities
http://www.securityfocus.com/bid/46919

Linux Kernel Request Handling 'cm.c' Denial of Service Vulnerability
http://www.securityfocus.com/bid/46839

Samba SWAT 'user' Field Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/48901

Samba 'mount.cifs' Utility Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/37992

Linux Kernel Signal Code Spoofing Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/47003

Linux Kernel GFS2 'fs/gfs2/file.c' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/48677

Linux Kernel 'inet_diag_bc_audit()' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/48333

Xen SAHF Emulation Denial of Service Vulnerability
http://www.securityfocus.com/bid/49375

Linux Kernel FSGEOMETRY_V1 IOCTL Local Information Disclosure Vulnerability
http://www.securityfocus.com/bid/46417

Expat XML Parsing Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/37203

Python 'audioop' Module Integer Overflow Vulnerability
http://www.securityfocus.com/bid/40370

Python 'audioop' Module Memory Corruption Vulnerability
http://www.securityfocus.com/bid/40863

Linux Kernel 'agp_ioctl()' Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/47534

Linux Kernel 'agp_allocate_memory/agp_create_user_memory' Local Privilege Escalation Vulnerabilities
http://www.securityfocus.com/bid/47535

Python 'urllib' and 'urllib2' Modules Information Disclosure and Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/47024

Python Multiple Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/44533

Linux Kernel '/proc/[pid]/stat' Local Information Disclosure Vulnerability
http://www.securityfocus.com/bid/47791

Linux Kernel '/proc/PID/io' Local Information Disclosure Vulnerability
http://www.securityfocus.com/bid/49408

Linux Kernel 'next_pidmap()' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/47497

Linux Kernel Bluetooth 'l2cap_sock.c' and 'rfcomm/sock.c' Information Disclosure Vulnerability
http://www.securityfocus.com/bid/48441

Expat UTF-8 Character XML Parsing Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/36097

Python CGIHTTPServer Module Information Disclosure Vulnerability
http://www.securityfocus.com/bid/46541

Red Hat Xen Hypervisor Implementation Local Guest Denial Of Service Vulnerability
http://www.securityfocus.com/bid/48058

Linux Kernel SSID Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/48538

Linux Kernel OOPS 'qdisc_dev()' Dereference Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/48641

Linux Kernel 'agp_ioctl()' Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/47843

Linux Kernel EFI Partition Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/47796

Xen 'get_free_port()' Denial of Service Vulnerability
http://www.securityfocus.com/bid/48048

Linux Kernel Multiple Local Information Disclosure Vulnerabilities
http://www.securityfocus.com/bid/46616

Linux Kernel 'oops' on Reset NULL Pointer Dereference Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/46793

Oracle Sun Solaris CVE-2012-0100 Local Security Vulnerability
http://www.securityfocus.com/bid/51475

Apache HTTP Server 'ap_pregsub()' Function Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/50494

Linux Kernel CVE-2012-0056 Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/51625

MIT Kerberos KDC TGS Handling NULL Pointer Dereference Denial Of Service Vulnerability
http://www.securityfocus.com/bid/50929

PostgreSQL 'intarray' Module 'gettoken()' Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/46084

Apache HTTP Server 'mod_proxy' Reverse Proxy Security Bypass Vulnerability
http://www.securityfocus.com/bid/50802

Adobe Acrobat and Reader CVE-2011-0604 Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/46217

RESTEasy JaxB XML Entity References Information Disclosure Vulnerability
http://www.securityfocus.com/bid/51766

HostBill PHP Code Injection Vulnerability
http://www.securityfocus.com/bid/51763

FishEye and Crucible Webwork 2 Framework Remote Code Injection Vulnerability
http://www.securityfocus.com/bid/51762

SilverStripe 'Title' Parameter HTML Injection Vulnerability
http://www.securityfocus.com/bid/51761

Mozilla Firefox/Thunderbird/SeaMonkey CVE-2012-0447 Information Disclosure Vulnerability
http://www.securityfocus.com/bid/51757

Mozilla Firefox/Thunderbird/Seamonkey Multiple Memory Corruption Vulnerabilities
http://www.securityfocus.com/bid/51756

Mozilla Firefox/Thunderbird/SeaMonkey nsDOMAttribute Use After Free Memory Corruption Vulnerability
http://www.securityfocus.com/bid/51755

Mozilla Firefox/SeaMonkey/Thunderbird XSLT Stylesheets Denial of Service Vulnerability
http://www.securityfocus.com/bid/51754

Mozilla Firefox/Thunderbird/SeaMonkey Ogg Vorbis Files Memory Corruption Vulnerability
http://www.securityfocus.com/bid/51753

Mozilla Firefox/SeaMonkey/Thunderbird XPConnect Security Check Cross Domain Scripting Vulnerability
http://www.securityfocus.com/bid/51752

Hitachi JP1 Products Unspecified Cross-Site Scripting Vulnerability
http://www.securityfocus.com/bid/51749

RESTEasy XML Entity References Information Disclosure Vulnerability
http://www.securityfocus.com/bid/51748

Hitachi JP1/IT Desktop Management Manager Unspecified Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/51747

HP Network Automation Remote Unauthorized Access Vulnerability
http://www.securityfocus.com/bid/51746

Hitachi uCosminexus Products Unspecified Cross-Site Scripting Vulnerability
http://www.securityfocus.com/bid/51745

LuraWave JP2 ActiveX Control 'jp2_x.dll' Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/51744

Clixint Technologies DPI 'showseries' Parameter Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/51734

LuraWave JP2 Browser Plug-In 'npjp2.dll' Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/51732

TWiki 'organization' Field HTML Injection Vulnerability
http://www.securityfocus.com/bid/51731

Joomla! 'com_crhotels' Component 'catid' Parameter Remote SQL Injection Vulnerability
http://www.securityfocus.com/bid/51728

2日水曜日、仏滅

2011-11-02T10:46:00.002+09:00

+ Multiple vulnerabilities in Adobe Flashplayer
http://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_adobe_flashplayer2

+ Multiple vulnerabilities in Adobe Flashplayer
http://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_adobe_flashplayer1

+ Multiple Buffer Overflow vulnerabilities in GIMP
http://blogs.oracle.com/sunsecurity/entry/multiple_buffer_overflow_vulnerabilities_in

+ Microsoft Windows Kernel Word File Handling Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/50462

+- Linux Kernel '/mm/oom_kill.c' Integer Overflow Vulnerability
http://www.securityfocus.com/bid/50459

HPSBMU02712 SSRT100649 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code
https://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?javax.portlet.tpst=ba847bafb2a2d782fcbb0710b053ce01&javax.portlet.prp_ba847bafb2a2d782fcbb0710b053ce01=wsrp-navigationalState%3DdocId%25253Demr_na-c03054052%25257CdocLocale%25253Dja_JP&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken

Wireshark 1.6.3 Released
http://www.wireshark.org/docs/relnotes/wireshark-1.6.3.html

[security bulletin] HPSBMU02712 SSRT100649 rev.1 - HP OpenView Network Node Manager (OV NNM), Re
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-11/msg00005.html

Oracle Hyperion Financial Management TList6 ActiveX Control Remote Code Execution Vulnerability
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-11/msg00009.html

XSS and SQL Injection Vulnerabilities on Symphony CMS 2.2.3
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-11/msg00008.html

XSS Vulnerabilities in eFront
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-11/msg00007.html

[ MDVSA-2011:162 ] kdelibs4
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-11/msg00006.html

GDTelcom Speedtest ActiveX Control "FTPDownLoad Class"-ActiveX.dll Remote Denial of Service Vuln
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-11/msg00004.html

[ GLSA 201111-01 ] Chromium, V8: Multiple vulnerabilities
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-11/msg00003.html

IBSng all version Cross-Site Scripting Vulnerability
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-11/msg00002.html

CVE-2011-3682: 2WIRE-SINGTEL 2701HGV-E/2700HGV-2/2700HG GATEWAY ROUTER MANAGEMEN
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-11/msg00001.html

DDIVRT-2011-33 IBM WebSphere Application Server help Servlet Plug-in Bundle Directory Tr
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-11/msg00000.html

Oracle DataDirect ODBC Drivers HOST Attribute arsqls24.dll Stack Based Buffer Overflow PoC (*.oce)
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00215.html

[SECURITY] [DSA 2333-1] phpldapadmin security update
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00212.html

PlotLineControl ActiveX Control "LinePutPoint" Integer Overflow
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00214.html

YaTFTPSvr TFTP Server Directory Traversal Vulnerability
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00216.html

Apples Mail.app mail of death
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00213.html

Securiteam
http://www.derkeiler.com/Mailing-Lists/Securiteam/

[SECURITY] [DSA 2332-1] python-django security update
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00211.html

[security bulletin] HPSBUX02707 SSRT100626 rev.2 - HP-UX Apache Web Server, Remote Denial of
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00210.html

[security bulletin] HPSBUX02702 SSRT100606 rev.5 - HP-UX Apache Web Server, Remote Denial of
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00209.html

シマンテックがAndroid端末用セキュリティソフトの新版
遠隔操作でアラームを鳴らす機能などを追加
http://itpro.nikkeibp.co.jp/article/NEWS/20111102/372023/?ST=security

化学メーカーを狙った「標的型攻撃」が相次ぐ、国内企業も被害
世界中で48社がターゲットに、米シマンテックが報告
http://itpro.nikkeibp.co.jp/article/NEWS/20111102/372022/?ST=security

JVN#98649286 CSWorks の LiveData Service におけるサービス運用妨害 (DoS) の脆弱性
http://jvn.jp/jp/JVN98649286/index.html

JVNDB-2011-000095 CSWorks の LiveData Service におけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000095.html

JVNDB-2011-002643 Google Chrome におけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002643.html

JVNDB-2011-002642 Google Chrome における URL バーを偽造される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002642.html

JVNDB-2011-002641 Google Chrome における MIME タイプに関する詳細不明な脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002641.html

JVNDB-2011-002640 Linux 上で稼働する Google Chrome における PIC および PIE コンパイラオプションの使用に関する脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002640.html

JVNDB-2011-002639 Google Chrome における詳細不明な脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002639.html

JVNDB-2011-002638 Google Chrome におけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002638.html

JVNDB-2011-002637 Google Chrome にて使用される libxml2 におけるメモリ二重開放の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002637.html

JVNDB-2011-002636 Google Chrome におけるサービス運用妨害 (out-of-bounds read) の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002636.html

JVNDB-2011-002635 Google Chrome にて使用される Google V8 におけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002635.html

JVNDB-2011-002634 Google Chrome における詳細不明な脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002634.html

JVNDB-2011-002633 Google Chrome におけるサービス運用妨害 (out-of-bounds read) の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002633.html

JVNDB-2011-002632 Google Chrome にて使用される Google V8 における詳細不明な脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002632.html

JVNDB-2011-002631 Google Chrome における、詳細不明な脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002631.html

JVNDB-2011-002630 Google Chrome のサービス運用妨害の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002630.html

JVNDB-2011-002629 Google Chrome における詳細不明な脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002629.html

JVNDB-2011-002628 Google Chrome におけるサービス運用妨害 (out-of-bounds read) の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002628.html

JVNDB-2011-002627 Cisco IOS の cat6000-dot1x コンポーネントにおけるサービス運用妨害 (トラフィックストーム) の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002627.html

JVNDB-2011-002626 Cisco CiscoWorks Common Services における重要な情報を取得される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002626.html

JVNDB-2011-002625 Cisco IOS の ethernet-lldp コンポーネントにおけるサービス運用妨害 (デバイスクラッシュ) の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002625.html

JVNDB-2011-002624 NexusPHP の thanks.php における SQL インジェクションの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002624.html

JVNDB-2011-002623 OCS Inventory NG の ocsinventory におけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002623.html

JVNDB-2011-002622 OpenOffice.org および LibreOffice の oowriter におけるサービス運用妨害 (クラッシュ) の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002622.html

JVNDB-2011-002621 Simple Machines Forum におけるクロスサイトリクエストフォージェリの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002621.html

JVNDB-2011-002620 KENT-WEB WEB FORUM におけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002620.html

JVNDB-2011-002619 IBM WebSphere ILOG Rule Team Server の content/error.jsp におけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002619.html

JVNDB-2011-002618 Simple Machines Forum における SQL インジェクションの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002618.html

JVNDB-2011-002617 Novell ZENworks Handheld Management (ZHM) の ZfHSrvr.exe における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002617.html

JVNDB-2011-002616 Novell ZENworks Handheld Management (ZHM) の ZfHSrvr.exe における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002616.html

JVNDB-2011-000094 複数のスカイアークシステム製品におけるクロスサイトリクエストフォージェリの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000094.html

JVNDB-2011-000093 複数のスカイアークシステム製品におけるアクセス制限不備の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000093.html

JVNDB-2011-002615 Asterisk Open Source の chan_sip.c におけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002615.html

JVNDB-2011-002614 ATCOM Netvolution における SQL インジェクションの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002614.html

JVNDB-2011-002613 BlackBerry Collaboration Service における任意のユーザアカウントへログインされる脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002613.html

JVNDB-2011-002612 ATCOM Netvolution の default.asp における SQL インジェクションの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002612.html

JVNDB-2011-002611 ATCOM Netvolution の default.asp におけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002611.html

JVNDB-2011-002610 ATCOM Netvolution におけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002610.html

JVNDB-2011-002609 ATCOM Netvolution の default.asp における SQL インジェクションの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002609.html

JVNDB-2011-002608 MIT Kerberos の krb5_db2_lockout_audit 関数におけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002608.html

JVNDB-2011-002607 MIT Kerberos の lookup_lockout_policy 関数におけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002607.html

JVNDB-2011-002606 MIT Kerberos の krb5_ldap_lockout_audit 関数におけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002606.html

JVNDB-2011-002605 MIT Kerberos の kdb_ldap プラグインにおけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002605.html

JVNDB-2011-002604 Empathy の theme_adium_append_message 関数におけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002604.html

JVNDB-2011-002603 Empathy の theme_adium_append_message 関数におけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002603.html

JVNDB-2011-002602 HP MFP Digital Sending ソフトウェアにおける重要なワークフローメタデータ情報を取得される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002602.html

JVNDB-2011-002601 Linux kernel の napi_reuse_skb 関数におけるサービス運用妨害 (NULL ポインタデリファレンス) の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002601.html

JVNDB-2011-002600 Cisco Adaptive Security Appliances デバイスにおけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002600.html

JVNDB-2011-002599 Cisco IOS の ipv6 コンポーネントにおけるフィンガープリンティング攻撃を誘導される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002599.html

JVNDB-2011-002598 Cisco IOS の cat6000-dot1x コンポーネントにおけるサービス運用妨害 (トラフィックストーム) の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002598.html

Honeynet Project: Android Reverse Engineering (A.R.E.) Virtual Machine released
http://isc.sans.edu/diary.html?storyid=11926

Secure languages & frameworks
http://isc.sans.edu/diary.html?storyid=11929

Linux Kernel clock_gettime() Negative Divisor Bug Lets Local Users Deny Service
http://www.securitytracker.com/id/1026261

HP OpenView Network Node Manager Bugs Let Remote Users Execute Arbitrary Code
http://www.securitytracker.com/id/1026260

Novell GroupWise Messenger Discloses Arbitrary Memory Contents to Remote Users
http://www.securitytracker.com/id/1026257

IBM AIX BIND Multiple Vulnerabilities
http://secunia.com/advisories/46641/

Gentoo update for chromium and v8
http://secunia.com/advisories/46636/

NJStar Communicator MiniSmtp Packet Processing Buffer Overflow Vulnerability
http://secunia.com/advisories/46630/

Joomla! Alameda Component "storeid" SQL Injection Vulnerability
http://secunia.com/advisories/46635/

Squid DNS Replies Invalid Free Denial of Service Vulnerability
http://secunia.com/advisories/46609/

CSWorks LiveData Service TCP Packets Processing Denial of Service Vulnerability
http://secunia.com/advisories/46625/

Megatops YaTFTPSvr Directory Traversal Vulnerability
http://secunia.com/advisories/46665/

Oracle Hyperion Enterprise Performance Management arsqls24.dll Buffer Overflow Vulnerability
http://secunia.com/advisories/46652/

WordPress ClassiPress Theme "twitter_id" and "facebook_id" Script Insertion Vulnerabilities
http://secunia.com/advisories/46658/

Joomla! Vik Real Estate Extension "contract" and "imm" SQL Injection Vulnerabilities
http://secunia.com/advisories/46661/

Joomla! HM Community Component Script Insertion and SQL Injection Vulnerabilities
http://secunia.com/advisories/46656/

Novell Messenger Server Process Memory Information Disclosure Vulnerability
http://secunia.com/advisories/46677/

Gobby Two Weaknesses
http://secunia.com/advisories/46698/

net6 Two Weaknesses
http://secunia.com/advisories/46605/

Debian update for python-django
http://secunia.com/advisories/46614/

Debian update for radvd
http://secunia.com/advisories/46639/

Debian update for tor
http://secunia.com/advisories/46640/

Ubuntu update for empathy
http://secunia.com/advisories/46684/

Openswan Cryptographic Helper Use-After-Free Denial of Service Vulnerability
http://secunia.com/advisories/46681/

WordPress Simple Balance Theme "s" Cross-Site Scripting Vulnerability
http://secunia.com/advisories/46671/

eFront Multiple Vulnerabilities
http://secunia.com/advisories/46613/

SUSE update for java-1_6_0-openjdk
http://secunia.com/advisories/46695/

Debian update for phpldapadmin
http://secunia.com/advisories/46672/

Fedora update for kernel
http://secunia.com/advisories/46687/

Fujitsu Interstage HTTP Server Two Vulnerabilities
http://secunia.com/advisories/46648/

NJStar Communicator 3.00 MiniSMTP Server Remote Exploit
http://www.exploit-db.com/exploits/18057

Linux Kernel TCP Sequence Number Generation Security Weakness
http://www.securityfocus.com/bid/49289

KDE KSSL Common Name SSL Certificate Spoofing Vulnerability
http://www.securityfocus.com/bid/49925

Linux Kernel 'clock_gettime()' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/50311

Oracle Java SE CVE-2011-3553 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50246

IBM WebSphere Application Server Administration Console Information Disclosure Vulnerability
http://www.securityfocus.com/bid/49362

Oracle Java SE CVE-2011-3556 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50231

Oracle Java SE CVE-2011-3561 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50250

Oracle Java SE CVE-2011-3557 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50234

Oracle Java SE CVE-2011-3558 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50242

Oracle Java SE CVE-2011-3554 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50216

Oracle Java SE CVE-2011-3551 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50224

Oracle Java SE CVE-2011-3552 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50248

Oracle Java SE CVE-2011-3548 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50211

Oracle Java SE CVE-2011-3549 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50223

Oracle Java SE CVE-2011-3547 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50243

Oracle Java SE CVE-2011-3521 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50215

Oracle Java SE CVE-2011-3545 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50220

Oracle Java SE CVE-2011-3550 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50226

Oracle Java SE CVE-2011-3546 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50239

SSL/TLS Protocol Initialization Vector Implementation Information Disclosure Vulnerability
http://www.securityfocus.com/bid/49778

Oracle Java SE Rhino Script Engine Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/50218

Oracle Java SE CVE-2011-3516 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50229

KDE KSSL NULL Character CA SSL Certificate Validation Security Bypass Vulnerability
http://www.securityfocus.com/bid/36229

ISC BIND 9 DNSSEC Query Response Additional Section Remote Cache Poisoning Vulnerability
http://www.securityfocus.com/bid/37118

Apache Tomcat AJP Protocol Security Bypass Vulnerability
http://www.securityfocus.com/bid/49353

ISC BIND 9 DNSSEC Bogus NXDOMAIN Response Remote Cache Poisoning Vulnerability
http://www.securityfocus.com/bid/37865

Multiple Vendor OpenSSL 'DSA_verify' Function Signature Verification Vulnerability
http://www.securityfocus.com/bid/33151

Google Chrome Prior to 13.0.782.215 Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/49279

Google Chrome Prior to 14.0.835.202 Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/49938

Google Chrome Prior to 14.0.835.163 Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/49658

Google Chrome Prior to 15.0.874.102 Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/50360

Google Chrome Prior to 12.0.742.112 Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/48479

Google Chrome prior to 14.0.835.163 PDF File Handling Memory Corruption Vulnerability
http://www.securityfocus.com/bid/49933

Oracle Hyperion Financial Management 'TList6.ocx' ActiveX Control Insecure Method Vulnerability
http://www.securityfocus.com/bid/50476

GE Proficy Historian Data Archiver Service Remote Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/50475

GE Proficy Plant Application Components Remote Stack Based Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/50474

GE Proficy Historian Web Administrator Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/50473

HP OpenView Network Node Manager Multiple Remote Code Execution Vulnerabilities
http://www.securityfocus.com/bid/50471

Symphony Multiple SQL Injection and Cross Site Scripting Vulnerabilities
http://www.securityfocus.com/bid/50470

eFront Multiple Cross Site Scripting Vulnerabilities
http://www.securityfocus.com/bid/50469

IBSng 'str' Parameter Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/50468

Google App Engine Python SDK 'FakeFile' Object Local Security Bypass Vulnerability
http://www.securityfocus.com/bid/50464

Microsoft Windows Kernel Word File Handling Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/50462

Linux Kernel '/mm/oom_kill.c' Integer Overflow Vulnerability
http://www.securityfocus.com/bid/50459

Hyperic HQ Enterprise Cross Site Scripting and Multiple Unspecified Security Vulnerabilities
http://www.securityfocus.com/bid/50456

vBulletin Multiple Remote File Include Vulnerabilities
http://www.securityfocus.com/bid/50455

Domain Shop 'index.php' Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/50454

BroadWin WebAccess Client 'bwocxrun.ocx ' Multiple Remote Vulnerabilities
http://www.securityfocus.com/bid/49428

Microsoft Windows AFD Driver CVE-2011-2005 Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/49941

Apple QuickTime Prior To 7.7.1 'Flic' Movie File Handling Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/50404

phpLDAPadmin Cross Site Scripting and PHP Code Injection Vulnerabilities
http://www.securityfocus.com/bid/50331

Apache APR 'apr_fnmatch()' Denial of Service Vulnerability
http://www.securityfocus.com/bid/47820

Apache HTTP Server 'mod_proxy' Reverse Proxy Information Disclosure Vulnerability
http://www.securityfocus.com/bid/49957

Apache APR 'apr_fnmatch.c' Denial of Service Vulnerability
http://www.securityfocus.com/bid/47929

Django Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/49573

NJStar Communicator MiniSMTP Server Remote Stack Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/50452

Joomla! Alameda Component 'storeid' Parameter SQL Injection Vulnerability
http://www.securityfocus.com/bid/50451

Squid Proxy Caching Server CNAME Denial of Service Vulnerability
http://www.securityfocus.com/bid/50449

Multiple SKYARC System Products Unspecified Security Bypass Vulnerability
http://www.securityfocus.com/bid/50448

Novell Messenger Server Memory Information Disclosure Vulnerability
http://www.securityfocus.com/bid/50443

net6 Session Hijacking and Information Disclosure Vulnerabilities
http://www.securityfocus.com/bid/50442

YaTFTPSvr TFTP Server Directory Traversal Vulnerability
http://www.securityfocus.com/bid/50441

Openswan Crpyotgraphic Helper Use After Free Remote Denial Of Service Vulnerability
http://www.securityfocus.com/bid/50440

Joomla! 'com_hmcommunity' Component Multiple Input Validation Vulnerabilities
http://www.securityfocus.com/bid/50439

e107 CMS jbShop Plugin 'item_id' SQL Injection Vulnerability
http://www.securityfocus.com/bid/50438

phpAlbum Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/50437

Joomla Component JEEMA SMS Multiple SQL Injection Vulnerabilities
http://www.securityfocus.com/bid/50436

Joomla Component Vik Real Estate Multiple SQL Injection Vulnerabilities
http://www.securityfocus.com/bid/50435

WordPress WP Glossary Plugin 'ajax.php' SQL Injection Vulnerability
http://www.securityfocus.com/bid/50434

WordPress Classipress Theme Multiple HTML Injection Vulnerabilities
http://www.securityfocus.com/bid/50433

Barter Sites Joomla! Component Multiple HTML Injection Vulnerabilities
http://www.securityfocus.com/bid/50432

PROMOTIC ActiveX Control 'GetPromoticSite' Method Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/50430

GFI Faxmaker Divide-By-Zero Denial of Service Vulnerability
http://www.securityfocus.com/bid/50429

31日月曜日、友引

2011-10-31T10:24:00.000+09:00

JVN#56667137 複数のスカイアークシステム製品におけるクロスサイトリクエストフォージェリの脆弱性
http://jvn.jp/jp/JVN56667137/index.html

JVN#41032068 複数のスカイアークシステム製品におけるアクセス制限不備の脆弱性
http://jvn.jp/jp/JVN41032068/index.html

REMOTE: BroadWin WebAccess SCADA/HMI Client Remote Code Execution
http://www.exploit-db.com/exploits/18051

DoS/PoC: Oracle DataDirect ODBC Drivers HOST Attribute arsqls24.dll Stack Based Buffer Overflow PoC
http://www.exploit-db.com/exploits/18052

DoS/PoC: Microsys PROMOTIC 8.1.4 ActiveX GetPromoticSite Unitialized Pointer
http://www.exploit-db.com/exploits/18049

+ Linux Kernel Network Bridge NULL Pointer Dereference Denial of Service Vulnerability
http://www.securityfocus.com/bid/50417

[ANNOUNCEMENT] Apache Commons Digester 3.1 released!
http://commons.apache.org/digester/download_digester.cgi

[courier-announce] Courier and courier-imap builds 20111028
http://www.courier-mta.org/download.php

UPDATE: HPSBUX02715 SSRT100623 rev.3 - HP-UX Containers (SRP), Local Unauthorized Access and Increased Privileges
https://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?javax.portlet.tpst=ba847bafb2a2d782fcbb0710b053ce01&javax.portlet.prp_ba847bafb2a2d782fcbb0710b053ce01=wsrp-navigationalState%3DdocId%25253Demr_na-c03057703%25257CdocLocale%25253Dja_JP&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken

Benetl, a free ETL tool for postgreSQL, is out in version 3.8
http://www.postgresql.org/about/news.1361

PostgreSQL Data Sync released
http://www.postgresql.org/about/news.1360

LedgerSMB 1.3.0 Released
http://www.postgresql.org/about/news.1359

Debian : [DSA-2329-1] torque - Buffer Overflow Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=37003

Hewlett-Packard : [HPSBMU02714 SSRT100244] - HP - Network Node Manager i - Information Disclosure Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36996

High-Tech Bridge SA : [HTB23052] SPIP - Path Disclosure Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=37002

Red Hat : [RHSA-2011:1402-01] FreeType - Denial-Of-Service Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=37004

Red Hat : [RHSA-2011:1409-01] OpenSSL - Security Bypass Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=37005

Ubuntu Security Notice : [USN-1238-2] Puppet - Man-In-The-Middle Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=37006

Ubuntu Security Notice : [USN-1247-1] Nova - Information Disclosure Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=37007

Ubuntu Security Notice : [USN-1248-1] KDE-Libs - Spoofing Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=37008

VMware : [VMSA-2011-0013] Multiple Products - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=37009

ZDI : [ZDI-11-311] Apple - QuickTime - Code Execution Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=37010

ZDI : [ZDI-11-312] Apple - QuickTime - Code Execution Isshe
http://www.criticalwatch.com/support/security-advisories.aspx?AID=37011

ZDI : [ZDI-11-313] Apple - QuickTime - Code Execution Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=37012

ZDI : [ZDI-11-314] Apple - QuickTime - Code Execution Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=37013

ZDI : [ZDI-11-315] Apple - QuickTime - Code Execution Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=37014

ZDI : [ZDI-11-316] Apple - QuickTime - Code Execution Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=37015

Cisco : [cisco-sa-20111026-webex] Cisco - WebEx Player - Multiple Buffer Overflow Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36997

Cisco : [cisco-sa-20111026-csa] Cisco - Security Agent - Multiple Code Execution Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36998

Cisco : [cisco-sa-20111026-cucm] Cisco - Unified Communications Manager - Directory Traversal Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36999

Cisco : [cisco-sa-20111026-uccx] Cisco - Unified Contact Center Express - Directory Traversal Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=37000

Cisco : [cisco-sa-20111026-camera] Cisco - Video Surveillance IP Cameras - Denial-Of-Service Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=37001

Gentoo Linux : [GLSA 201110-24] Squid - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36982

Gentoo Linux : [GLSA 201110-25] Pure-FTPd - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36983

Gentoo Linux : [GLSA 201110-26] libxml2 - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36984

Hewlett-Packard : [HPSBUX02700 SSRT100506] HP-UX - VEA - Denial-Of-Service and Code Execution Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36972

Ubuntu Security Notice : [USN-1238-1] Puppet - Man-In-The-Middle Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36974

Ubuntu Security Notice : [USN-1239-1] Linux kernel - EC2 - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36975

Ubuntu Security Notice : [USN-1240-1] Linux kernel - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36976

Ubuntu Security Notice : [USN-1241-1] Linux Kernel - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36977

Ubuntu Security Notice : [USN-1242-1] Linux Kernel - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36978

Ubuntu Security Notice : [USN-1243-1] Linux Kernel - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36979

Ubuntu Security Notice : [USN-1245-1] Linux Kernel - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36980

ZDI : [ZDI-11-308] Cisco - WebEx Player - Code Execution Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36985

ZDI : [ZDI-11-309] Novell - iPrint Client - Code Execution Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36986

ZDI : [ZDI-11-310] Adobe - Reader - Code Execution Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36987

ZDI : [ZDI-11-296] Adobe - Reader - Code Execution Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36988

ZDI : [ZDI-11-297] Adobe - Reader - Code Execution Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36989

ZDI : [ZDI-11-298] Adobe - Reader - Code Execution Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36990

ZDI : [ZDI-11-299] Adobe - Reader - Code Execution Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36991

ZDI : [ZDI-11-300] Adobe - Reader - Code Execution Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36992

ZDI : [ZDI-11-301] Adobe - Reader - Code Execution Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36993

ZDI : [ZDI-11-302] Adobe - Reader - Buffer Overflow and Code Execution Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36994

Cisco : Cisco Nexus OS (NX-OS) - Command Injection Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36968

Gentoo Linux : [GLSA 201110-22] PostgreSQL - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36995

Gentoo Linux : [GLSA 201110-23] Apache - mod_authnz_external - SQL Injection Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36995

Independant Researcher : zFtp Server - Denial-Of-Service Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36981

Mandriva : [MDVSA-2011:161] postgresql - Weak Encrypted Password Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36964

Red Hat : [RHSA-2011:1401-01] xen - Denial-Of-Service Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36963

Ubuntu Security Notice : [USN-1237-1] PAM - Multiple Denial-Of-Service Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36962

Debian : [DSA-2326-1] PAM - Code Execution Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36966

Debian : [DSA-2327-1] libfcgi-perl - Authentication Bypass Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36970

Debian : [DSA 2328-1] Freetype - Denial-Of-Service and Code Execution Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36973

Gentoo Linux : [GLSA 201110-21] Asterisk - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36971

Independant Researcher : [TC-SA-2011-01] OmniTouch - Instant Communication Suite - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36965

Debian : [DSA-2325-1] kfreebsd-8 - Buffer Overflow Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36967

[SECURITY] [DSA 2323-1] radvd security update
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00205.html

[SECURITY] [DSA 2331-1] tor security update
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00206.html

[PT-2011-30] Disclosure of sensitive information in D-Link DIR-300 Router
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00204.html

[PT-2011-29] Arbitrary file reading and arbitrary code execution in Router Manager for D-
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00203.html

[PT-2011-21] SQL injection vulnerability in OneOrZero AIMS
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00202.html

[PT-2011-20] Authorization bypass vulnerability in OneOrZero AIMS
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00201.html

VMSA-2011-0013 VMware third party component updates for VMware vCenter Server, vCenter Updat
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00199.html

[security bulletin] HPSBUX02715 SSRT100623 rev.2 - HP-UX Containers (SRP), Local Unauthorize
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00198.html

[security bulletin] HPSBUX02719 SSRT100658 rev.1 - HP-UX Running BIND, Remote Denial of Serv
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00197.html

ZDI-11-316 : Apple QuickTime H264 Matrix Conversion Remote Code Execution Vulnerability
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00196.html

ZDI-11-315 : Apple QuickTime FLC Delta Decompression Remote Code Execution Vulnerability
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00195.html

ZDI-11-314 : Apple Quicktime PnPixPat PatType 3 Parsing Remote Code Execution Vulnerability
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00194.html

ZDI-11-313 : Apple QuickTime FLC RLE Packet Count Decompression Remote Code Execution Vulner
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00192.html

ZDI-11-312 : Apple QuickTime Atom Hierarachy Argument Size Mismatch Remote Code Execution Vu
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00193.html

ZDI-11-311 : Apple Quicktime Empty URL Data Handler Remote Code Execution Vulnerability
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00191.html

[SECURITY] [DSA 2330-1] simplesamlphp security update
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00190.html

eFront <= 3.6.10 (build 11944) Multiple Security Vulnerabilities
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00207.html

[SECURITY] [DSA 2329-1] torque security update
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00174.html

foofus.net security advisory - Toshiba eStudio Multifunction Printer Information Leakage
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00189.html

APPLE-SA-2011-10-26-1 QuickTime 7.7.1
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00188.html

[ GLSA 201110-26 ] libxml2: Multiple vulnerabilities
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00187.html

[ GLSA 201110-25 ] Pure-FTPd: Multiple vulnerabilities
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00186.html

[ GLSA 201110-24 ] Squid: Multiple vulnerabilities
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00185.html

DDIVRT-2011-35 Cisco Unified Contact Center Express Directory Traversal [CVE-2011-33
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00184.html

ZDI-11-310 : Adobe Reader Compound Glyph Index Sign Extension Remote Code Execution Vulnerab
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00183.html

ZDI-11-309 : Novell iPrint Client nipplib.dll GetDriverSettings Remote Code Execution Vulner
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00182.html

ZDI-11-308 : Cisco WebEx Player ATAS32.DLL linesProcessed Remote Code Execution Vulnerabilit
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00181.html

ZDI-11-307 : Oracle Java MixerSequencer.nAddControllerEventCallback Remote Code Execution Vu
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00180.html

ZDI-11-306 : Oracle Java IIOP Deserialization Type Confusion Remote Code Execution Vulnerabi
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00178.html

ZDI-11-305 : Oracle Java Applet Rhino Script Engine Remote Code Execution Vulnerability
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00179.html

ZDI-11-304 : Apple Quicktime Advanced Audio Codec Frame Parsing Remote Code Execution Vulner
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00177.html

ZDI-11-303 : Apple QuickTime H264 Stream frame_cropping Remote Code Execution Vulnerability
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00176.html

SANS AppSec 2012 CFP is Open
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00175.html

JVN#72640744 複数の D-Link 製品におけるバッファオーバーフローの脆弱性
http://jvn.jp/jp/JVN72640744/index.html

JVNVU#402731 Enspire eClient に SQL インジェクションの脆弱性
http://jvn.jp/cert/JVNVU402731/index.html

プレス発表
複数のD-Link製品におけるセキュリティ上の弱点（脆弱性）の注意喚起
http://www.ipa.go.jp/about/press/20111028.html

The Sub Critical Control? Evidence Collection
http://isc.sans.edu/diary.html?storyid=11914

IBM Lotus Sametime Configuration Servlet Lets Remote Users Obtain Configuration Data
http://www.securitytracker.com/id/1026255

Cisco NX-OS Command Validation Flaw Lets Local Users Gain Elevated Privileges
http://www.securitytracker.com/id/1026254

HP Power Manager 'formExportDataLogs' Buffer Overflow
http://securityreason.com/securityalert/8482

Apple Safari Webkit libxslt Arbitrary File Creation
http://securityreason.com/securityalert/8481

Ubuntu update for backuppc
http://secunia.com/advisories/46621/

VMware vCenter Products JRE Multiple Vulnerabilities
http://secunia.com/advisories/46651/

HP-UX update for BIND
http://secunia.com/advisories/46633/

VMware ESX Server Multiple Vulnerabilities
http://secunia.com/advisories/46529/

Enspire eClient Unspecified SQL Injection Vulnerability
http://secunia.com/advisories/46638/

Tor TLS Certificate Reuse User De-Anonymisation Security Issue
http://secunia.com/advisories/46634/

VMware ESXi Server "sblim-sfcb" Integer Overflow Vulnerability
http://secunia.com/advisories/46650/

Gentoo update for libxml2
http://secunia.com/advisories/46601/

BackupPC "num" Cross-Site Scripting Vulnerability
http://secunia.com/advisories/46615/

Cisco NX-OS / Unified Computing System "section" and "less" Privilege Escalation Vulnerabilities
http://secunia.com/advisories/46569/

D-Link Products SSH Server Buffer Overflow Vulnerability
http://secunia.com/advisories/46637/

FFFTP Insecure Executable Loading Vulnerability
http://secunia.com/advisories/46649/

IBM Lotus Sametime Configuration Servlet Authentication Security Issue
http://secunia.com/advisories/46647/

SUSE update for kernel
http://secunia.com/advisories/46608/

HP-UX BIND Requests Processing Remote Denial of Service Vulnerability
http://www.vupen.com/english/ADV-2011-2244.php

Tor Security Update Fixes Multiple Information Disclosure Vulnerabilities
http://www.vupen.com/english/ADV-2011-2243.php

IBM DB2 for Linux, UNIX and Windows "STMM" Security Vulnerability
http://www.vupen.com/english/ADV-2011-2242.php

IBM Lotus Sametime Configuration Servlet Remote Information Disclosure
http://www.vupen.com/english/ADV-2011-2241.php

VMware Products Code Execution and Denial of Service Vulnerabilities
http://www.vupen.com/english/ADV-2011-2240.php

Enspire eClient Data Processing Remote SQL Injection Vulnerability
http://www.vupen.com/english/ADV-2011-2239.php

Winamp Data Processing Multiple Heap and Integer Overflow Vulnerabilities
http://www.vupen.com/english/ADV-2011-2238.php

LOCAL: Xorg 1.4 to 1.11.2 File Permission Change PoC
http://www.exploit-db.com/exploits/18040

LOCAL: GTA SA-MP server.cfg Buffer Overflow
http://www.exploit-db.com/exploits/18038

DoS/PoC: GFI Faxmaker - Fax Viewer v10.0[build 237] DoS (Poc).
http://www.exploit-db.com/exploits/18043

Oracle Solaris CVE-2011-2311 ZFS Component Local Vulnerability
http://www.securityfocus.com/bid/50266

Oracle Solaris CVE-2011-2312 'ZFS' Sub Component Local Vulnerability
http://www.securityfocus.com/bid/50269

Oracle Sun Products Suite CVE-2011-3536 Local Vulnerability
http://www.securityfocus.com/bid/50262

Oracle Sun Products Suite CVE-2011-2286 Remote Vulnerability
http://www.securityfocus.com/bid/50265

Oracle Solaris CVE-2011-2304 Remote Vulnerability
http://www.securityfocus.com/bid/50257

Oracle Solaris CVE-2011-2313 Local Solaris Vulnerability
http://www.securityfocus.com/bid/50254

Oracle Sun Solaris CVE-2011-3508 Remote Vulnerability
http://www.securityfocus.com/bid/50201

Oracle Sun Solaris CVE-2011-3515 Local Vulnerability
http://www.securityfocus.com/bid/50235

Oracle Sun Product Suite CVE-2011-3537 Local Vulnerability
http://www.securityfocus.com/bid/50259

Oracle Sun Solaris CVE-2011-3535 Remote Vulnerability
http://www.securityfocus.com/bid/50255

Oracle Sun Solaris CVE-2011-3534 Remote Vulnerability
http://www.securityfocus.com/bid/50251

RETIRED: Linux Kernel kexec-tools Multiple Information Disclosure Vulnerabilities
http://www.securityfocus.com/bid/49944

Linux Kernel CVE-2011-3589 kexec-tools 'mkdumprd' Utility Information Disclosure Vulnerability
http://www.securityfocus.com/bid/50415

Empathy 'nickname' Field Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/50323

Oracle Java SE and Java for Business CVE-2010-3541 Remote Networking Vulnerability
http://www.securityfocus.com/bid/44032

Oracle Java SE and Java for Business CVE-2010-4469 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/46400

Cisco Nexus OS 'section' and 'less' Local Command Injection Vulnerabilities
http://www.securityfocus.com/bid/50347

Oracle Java SE and Java for Business NTLM Credentials Information Disclosure Vulnerability
http://www.securityfocus.com/bid/46411

Oracle Java SE and Java for Business Java Runtime Environment CVE-2010-4454 Remote Vulnerability
http://www.securityfocus.com/bid/46391

Oracle Java SE and Java for Business CVE-2011-0871 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/48142

Oracle Java SE and Java for Business CVE-2011-0802 Remote Integer Overflow Vulnerability
http://www.securityfocus.com/bid/48149

Oracle Java SE and Java for Business CVE-2011-0864 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/48139

Apache APR 'apr_fnmatch()' Denial of Service Vulnerability
http://www.securityfocus.com/bid/47820

Apache APR 'apr_fnmatch.c' Denial of Service Vulnerability
http://www.securityfocus.com/bid/47929

Oracle Java SE and Java for Business CVE-2010-3574 Remote Networking Vulnerability
http://www.securityfocus.com/bid/44011

Microsoft Windows Local DNS Cache Poisoning Vulnerabilities
http://www.securityfocus.com/bid/50281

radvd Multiple Local and Remote Vulnerabilities
http://www.securityfocus.com/bid/50395

Oracle Java SE and Java for Business CVE-2010-3573 Same Origin Bypass Vulnerability
http://www.securityfocus.com/bid/44028

Oracle Java SE and Java for Business CVE-2010-3571 ICC Profile Vulnerability
http://www.securityfocus.com/bid/43965

Oracle Java SE and Java for Business CVE-2010-3572 Remote Sound Vulnerability
http://www.securityfocus.com/bid/44030

Oracle Java SE and Java for Business CVE-2010-3570 Remote Deployment Toolkit Vulnerability
http://www.securityfocus.com/bid/44020

Oracle Java SE and Java for Business 'defaultReadObject' Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/44016

Oracle Java SE and Java for Business CVE-2010-3568 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/44012

Oracle Java SE and Java for Business CVE-2010-3565 JPEGImageWriter.writeImage Vulnerability
http://www.securityfocus.com/bid/43985

Oracle Java SE and Java for Business CVE-2010-3567 Remote 2D Vulnerability
http://www.securityfocus.com/bid/43992

Oracle Java SE and Java for Business CVE-2010-3566 ICC Profile Vulnerability
http://www.securityfocus.com/bid/43988

Oracle Java SE and Java for Business CVE-2010-3562 Remote 2D Vulnerability
http://www.securityfocus.com/bid/43979

Oracle Java SE and Java for Business CVE-2010-3563 BasicServiceImpl Vulnerability
http://www.securityfocus.com/bid/43999

Oracle Java SE and Java for Business CVE-2010-3561 Remote CORBA Vulnerability
http://www.securityfocus.com/bid/44013

Oracle Java SE and Java for Business CVE-2010-3560 Remote Networking Vulnerability
http://www.securityfocus.com/bid/44024

Oracle Java SE and Java for Business CVE-2010-3559 HeadspaceSoundbank.nGetName Vulnerability
http://www.securityfocus.com/bid/44026

Oracle Java SE and Java for Business CVE-2010-3557 Remote Swing Vulnerability
http://www.securityfocus.com/bid/44014

Oracle Java SE and Java for Business CVE-2010-3558 Remote Java Web Start Vulnerability
http://www.securityfocus.com/bid/44021

Oracle Java SE and Java for Business CVE-2010-3556 Remote 2D Vulnerability
http://www.securityfocus.com/bid/43971

Oracle Java SE and Java for Business CVE-2010-3554 Remote CORBA Vulnerability
http://www.securityfocus.com/bid/43994

Oracle Java SE and Java for Business CVE-2010-3555 Remote ActiveX Plug-in Vulnerability
http://www.securityfocus.com/bid/44038

Oracle Java SE and Java for Business CVE-2010-3553 Remote Swing Vulnerability
http://www.securityfocus.com/bid/44035

Oracle Java SE and Java for Business CVE-2010-3552 Remote New Java Plug-in Vulnerability
http://www.securityfocus.com/bid/44023

Oracle Java SE and Java for Business CVE-2010-3551 Remote Networking Vulnerability
http://www.securityfocus.com/bid/44009

Oracle Java SE and Java for Business CVE-2010-3549 HTTP Response Splitting Vulnerability
http://www.securityfocus.com/bid/44027

Oracle Java SE and Java for Business CVE-2010-3550 Remote Java Web Start Vulnerability
http://www.securityfocus.com/bid/44040

Cisco IOS 'ethernet-lldp' Component Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/50377

MIT Kerberos GSS-API Checksum NULL Pointer Dereference Denial Of Service Vulnerability
http://www.securityfocus.com/bid/40235

Oracle Java SE and Java for Business CVE-2010-3548 Remote JNDI Vulnerability
http://www.securityfocus.com/bid/44017

Oracle Java SE and Java for Business CVE-2010-4472 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/46404

Oracle Java SE and Java for Business CVE-2010-4470 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/46387

Oracle Java SE and Java for Business CVE-2010-4471 Remote Security Vulnerability
http://www.securityfocus.com/bid/46399

Oracle Java SE and Java for Business CVE-2010-4474 Remote Java DB Vulnerability
http://www.securityfocus.com/bid/46407

Oracle Java SE and Java for Business CVE-2010-4467 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/46395

Oracle Java SE and Java for Business CVE-2010-4422 Remote Vulnerability
http://www.securityfocus.com/bid/46402

Oracle Java 'Applet2ClassLoader' Class Unsigned Applet Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/46388

Oracle Java SE and Java for Business Java Runtime Environment Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/46386

Oracle Java SE and Java for Business CVE-2010-4451 Vulnerability
http://www.securityfocus.com/bid/46405

Oracle Java Floating-Point Value Denial of Service Vulnerability
http://www.securityfocus.com/bid/46091

Oracle Java SE and Java for Business CVE-2010-4473 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/46403

Oracle Java SE and Java for Business CVE-2010-4475 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/46410

Oracle Java SE and Java for Business CVE-2010-4468 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/46393

Cisco IOS dot1x Port Handling Multiple Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/50375

Oracle Java SE and Java for Business CVE-2010-4450 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/46397

Oracle Java SE and Java for Business Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/46394

Oracle Java Applet Clipboard Injection Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/46406

Oracle Java SE and Java for Business CVE-2010-4448 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/46398

Oracle Java SE and Java for Business CVE-2010-4447 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/46409

Linux Kernel 'CIFSFindNext()' Function Denial of Service Vulnerability
http://www.securityfocus.com/bid/49295

Linux Kernel EFI Partition Denial of Service Vulnerability
http://www.securityfocus.com/bid/47343

Linux Kernel CIFS Mount Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/49626

Linux Kernel Auerswald USB Device Driver Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/48687

Oracle Java SE and Java for Business CVE-2011-0815 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/48143

Oracle Java SE and Java for Business ICC Profile Multiple Remote Code Execution Vulnerabilities
http://www.securityfocus.com/bid/48137

Oracle Java SE and Java for Business CVE-2011-0865 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/48147

Oracle Java SE and Java for Business CVE-2011-0873 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/48148

Oracle Java SE and Java for Business CVE-2011-0867 Remote Information Disclosure Vulnerability
http://www.securityfocus.com/bid/48144

Oracle Java SE and Java for Business CVE-2011-0814 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/48145

Linux Kernel EFI Partition Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/47796

X.Org X11 File Read Permission Information Disclosure Vulnerability
http://www.securityfocus.com/bid/50196

ISC BIND 9 Unspecified Packet Processing Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/48566

Multiple Browser Wild Card Certificate Spoofing Vulnerability
http://www.securityfocus.com/bid/42817

libuser 'luseradd' Default Password Security Bypass Vulnerability
http://www.securityfocus.com/bid/45791

SBLIM-SFCB Multiple Buffer Overflow Vulnerabilities
http://www.securityfocus.com/bid/40475

OpenSSL Ciphersuite Downgrade Security Weakness
http://www.securityfocus.com/bid/45164

OpenSSL Ciphersuite Modification Allows Disabled Cipher Security Bypass Vulnerability
http://www.securityfocus.com/bid/45254

Dovecot Sieve Plugin Multiple Unspecified Buffer Overflow Vulnerabilities
http://www.securityfocus.com/bid/36377

Plici Search 'p48-search.html' Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/50428

SjXjV 'post.php' SQL Injection Vulnerability
http://www.securityfocus.com/bid/50426

D-Link DIR-300 Unspecified Remote Code Execution and Remote File Disclosure Vulnerabilities
http://www.securityfocus.com/bid/50424

simpleSAMLphp Multiple Remote Security Vulnerabilities
http://www.securityfocus.com/bid/50423

Joomla! Techfolio Component 'catid' Parameter SQL Injection Vulnerability
http://www.securityfocus.com/bid/50422

Opera Web Browser Escape Sequence Stack Buffer Overflow Denial of Service Vulnerability
http://www.securityfocus.com/bid/50421

eFront 'professor.php' Script Multiple SQL Injection Vulnerabilities
http://www.securityfocus.com/bid/50419

Empathy 'nickname' Field 'me-type' Event Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/50418

Linux Kernel Network Bridge NULL Pointer Dereference Denial of Service Vulnerability
http://www.securityfocus.com/bid/50417

Tor Directory Remote Information Disclosure Vulnerability Bridge Enumeration Weaknesses
http://www.securityfocus.com/bid/50414

FFFTP Insecure Excutable File Loading Arbitrary Code Execution Vulnerability
http://www.securityfocus.com/bid/50412

Touhou Hisouten Unspecified Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/50411

IBM Lotus Sametime Configuration Servlet Authentication Security Bypass Vulnerability
http://www.securityfocus.com/bid/50410

bzexe '/tmp/$prog' Insecure Temporary File Creation Vulnerability
http://www.securityfocus.com/bid/50409

Serendipity Karma Plugin Unspecified Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/50408

BackupPC 'index.cgi' Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/50406

D-Link Multiple Products Unspecified Remote Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/50405

28日金曜日、大安

2011-10-28T09:48:00.002+09:00

Trend Micro Mobile Security 7.0 Critical Patch 公開のお知らせ
http://www.trendmicro.co.jp/support/news.asp?id=1672

VMSA-2011-0013: VMware third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX
http://www.vmware.com/security/advisories/VMSA-2011-0013.html

UPDATE: HS11-019: DoS Vulnerability in Hitachi Web Server
http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS11-019/index.html

UPDATE: HS11-019: Hitachi Web ServerにおけるRangeヘッダによるDoS脆弱性
http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS11-019/index.html

プレス発表
複数のD-Link製品におけるセキュリティ上の弱点（脆弱性）の注意喚起
http://www.ipa.go.jp/about/press/20111028.html

JVNVU#402731 Enspire eClient に SQL インジェクションの脆弱性
http://jvn.jp/cert/JVNVU402731/index.html

JVN#50227837 東方緋想天におけるサービス運用妨害 (DoS) の脆弱性
http://jvn.jp/jp/JVN50227837/index.html

JVN#72640744 複数の D-Link 製品におけるバッファオーバーフローの脆弱性
http://jvn.jp/jp/JVN72640744/index.html

JVN#62336482 FFFTP における実行ファイル読み込みに関する脆弱性
http://jvn.jp/jp/JVN62336482/index.html

JVNDB-2011-000089 東方緋想天におけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000089.html

JVNDB-2011-000092 複数の D-Link 製品におけるバッファオーバーフローの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000092.html

JVNDB-2011-000091 FFFTP における実行ファイル読み込みに関する脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000091.html

JVNDB-2011-002597 Cisco CiscoWorks Common Services の Home Page コンポーネントにおける任意のコマンドを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002597.html

JVNDB-2011-002596 Cisco Show and Share における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002596.html

JVNDB-2011-002595 Cisco Show and Share における複数の管理者用ページにアクセスされる脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002595.html

JVNDB-2011-002594 Oracle Java SE の Java Runtime Environment (JRE) コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002594.html

JVNDB-2011-002593 Oracle Java SE の Java Runtime Environment (JRE) コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002593.html

JVNDB-2011-002592 Oracle Java SE の Java Runtime Environment (JRE) コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002592.html

JVNDB-2011-002591 Oracle Java SE の Java Runtime Environment (JRE) コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002591.html

JVNDB-2011-002590 Oracle Java SE の Java Runtime Environment (JRE) コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002590.html

JVNDB-2011-002589 Oracle Java SE の Java Runtime Environment (JRE) コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002589.html

JVNDB-2011-002588 Oracle Java SE の Java Runtime Environment (JRE) コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002588.html

JVNDB-2011-002587 Oracle Java SE の Java Runtime Environment (JRE) コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002587.html

JVNDB-2011-002586 Oracle Java SE の Java Runtime Environment (JRE) コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002586.html

JVNDB-2011-002585 Oracle Java SE の Java Runtime Environment (JRE) コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002585.html

JVNDB-2011-002584 Oracle Java SE の Java Runtime Environment (JRE) コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002584.html

JVNDB-2011-002583 Oracle Java SE の Java Runtime Environment (JRE) コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002583.html

JVNDB-2011-002582 Oracle Java SE の Java Runtime Environment (JRE) コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002582.html

JVNDB-2011-002581 Oracle Java SE の Java Runtime Environment (JRE) コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002581.html

JVNDB-2011-002580 Oracle Java SE の Java Runtime Environment (JRE) コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002580.html

JVNDB-2011-002579 Oracle Java SE の Java Runtime Environment (JRE) コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002579.html

JVNDB-2011-002578 Oracle Java SE の Java Runtime Environment (JRE) コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002578.html

JVNDB-2011-002577 Oracle Java SE の Java Runtime Environment (JRE) コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002577.html

JVNDB-2011-002576 Windows 上で稼働する Oracle Java SE の Java Runtime Environment (JRE) コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002576.html

Critical Control 19: Data Recovery Capability
http://isc.sans.edu/diary.html?storyid=11905

Dovecot Sieve Plugin Multiple Unspecified Buffer Overflow Vulnerabilities
http://www.securityfocus.com/bid/36377

+ HPSBUX02719 SSRT100658 rev.1 - HP-UX Running BIND, Remote Denial of Service (DoS)
https://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?javax.portlet.tpst=ba847bafb2a2d782fcbb0710b053ce01&javax.portlet.prp_ba847bafb2a2d782fcbb0710b053ce01=wsrp-navigationalState%3DdocId%25253Demr_na-c03070783%25257CdocLocale%25253Dja_JP&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken
対象名：HP-UX B.11.11/11.23

UPDATE: HPSBUX02715 SSRT100623 rev.2 - HP-UX Containers (SRP), Local Unauthorized Access and Increased Privileges
https://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?javax.portlet.tpst=ba847bafb2a2d782fcbb0710b053ce01&javax.portlet.prp_ba847bafb2a2d782fcbb0710b053ce01=wsrp-navigationalState%3DdocId%25253Demr_na-c03057703%25257CdocLocale%25253Dja_JP&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken

「マニュアル」のGR4000/GS4000/GS3000マニュアル訂正資料(Ver.10-10-/K対応)を更新しました。
http://www.hitachi.co.jp/Prod/comp/network/manual/manualtop.html

ウェブルートがセキュリティソフトの新版などを展示会に出展
http://itpro.nikkeibp.co.jp/article/NEWS/20111027/371598/?ST=security

シマンテック、約2週間で社内のボットネットを洗い出すサービスを発表
http://itpro.nikkeibp.co.jp/article/NEWS/20111027/371549/?ST=security

JVNDB-2011-002575 FreeBSD の "linux emulation" サポートにおけるバッファオーバーフローの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002575.html

JVNDB-2011-002574 IBM DB2 Express Edition の FreeBSD の db2rspgn における権限を取得される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002574.html

JVNDB-2011-002573 QNX Neutrino RTOS の runtime linker におけるファイルを上書きされる脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002573.html

JVNDB-2011-002572 Oracle Solaris における Remote Quota Server の処理に関する脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002572.html

JVNDB-2011-002571 Oracle OpenSSO における認証の処理に関する脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002571.html

JVNDB-2011-002570 Oracle Sun Products Suite の Oracle Communications Unified コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002570.html

JVNDB-2011-002569 Oracle OpenSSO における認証の処理に関する脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002569.html

JVNDB-2011-002568 Oracle Sun Products Suite の Oracle Communications Unified コンポーネントおける脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002568.html

JVNDB-2011-002567 Oracle Sun Products Suite の Oracle Waveset コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002567.html

JVNDB-2011-002566 Oracle Solaris 11 Express における iSCSI DataMover の処理に関する脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002566.html

JVNDB-2011-002565 racle Solaris における Kernel/Performance Counter BackEnd Module の処理に関する脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002565.html

JVNDB-2011-002564 Oracle Solaris における Process File System (procfs) の処理に関する脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002564.html

JVNDB-2011-002563 Oracle Solaris における LDAP library の処理に関する脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002563.html

JVNDB-2011-002562 Oracle Solaris における ZFS の処理に関する脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002562.html

Critical Control 18: Incident Response Capabilities
http://isc.sans.edu/diary.html?storyid=11899

Software Update Potpourri
http://isc.sans.edu/diary.html?storyid=11902

Trend Micro InterScan Web Security Lets Local Users Gain Elevated Privileges
http://www.securitytracker.com/id/1026252

Apple QuickTime Multiple Flaws Let Remote Users Execute Arbitrary Code
http://www.securitytracker.com/id/1026251

HP-UX Containers Lets Local Users Gain Elevated Privileges
http://www.securitytracker.com/id/1026250

VU#402731: Enspire eClient SQL injection allows authentication bypass
http://www.kb.cert.org/vuls/id/402731

SUSE update for puppet
http://secunia.com/advisories/46628/

Debian update for torque
http://secunia.com/advisories/46577/

HP-UX Containers Unspecified Privilege Escalation Vulnerability
http://secunia.com/advisories/46617/

Red Hat update for openssl
http://secunia.com/advisories/46629/

Gentoo update for squid
http://secunia.com/advisories/46604/

Gentoo update for pure-ftpd
http://secunia.com/advisories/46603/

Apple QuickTime Multiple Vulnerabilities
http://secunia.com/advisories/46618/

HP Network Node Manager i JMX Console Security Bypass Security Issue
http://secunia.com/advisories/46627/

Libxml2 Two XSLT Double Free Vulnerabilities
http://secunia.com/advisories/46632/

SPIP Unspecified SQL Injection Vulnerability
http://secunia.com/advisories/46622/

Winamp Multiple Vulnerabilities
http://secunia.com/advisories/45279/

Cisco Multiple Products Directory Traversal Vulnerability
http://secunia.com/advisories/46600/

Trend Micro InterScan Web Security Suite "patchCmd" Privilege Escalation Vulnerability
http://secunia.com/advisories/46610/

Cisco WebEx Player WRF File Processing Vulnerabilities
http://secunia.com/advisories/46607/

Oracle Solaris Vino Framebuffer Update Handling Denial of Service Vulnerability
http://secunia.com/advisories/46619/

Joomla! YJ Contact Us Component "view" Local File Inclusion Vulnerability
http://secunia.com/advisories/46588/

Fedora update for radvd
http://secunia.com/advisories/46626/

Online Subtitles Workshop "comment" Script Insertion Vulnerability
http://secunia.com/advisories/46616/

Drupal Organic groups Module Security Bypass Vulnerability
http://secunia.com/advisories/46623/

Cisco Video Surveillance IP Cameras RTSP TCP Packets Processing Denial of Service
http://secunia.com/advisories/46612/

Cisco Video Surveillance IP Cameras RTSP TCP Packets Processing Denial of Service
http://secunia.com/advisories/46611/

OpenLDAP "UTF8StringNormalize()" Off-by-One Denial of Service Vulnerability
http://secunia.com/advisories/46599/

Cisco Security Agent Outside In Technology File Processing Vulnerabilities
http://secunia.com/advisories/46631/

Novell iPrint Client "GetDriverSettings()" Buffer Overflow Vulnerability
http://secunia.com/advisories/46606/

Winamp Data Processing Multiple Heap and Integer Overflow Vulnerabilities
http://www.vupen.com/english/ADV-2011-2238.php

HP-UX Containers Local Unauthorized Access and Privilege Escalation
http://www.vupen.com/english/ADV-2011-2237.php

Oracle Sun Solaris Vino GNOME Desktop Sharing Server Denial of Service
http://www.vupen.com/english/ADV-2011-2236.php

OpenLDAP "UTF8StringNormalize()" Remote Off-by-one Buffer Overflow
http://www.vupen.com/english/ADV-2011-2235.php

Cisco WebEx Player WRF and ATAS32 Buffer Overflow Vulnerabilities
http://www.vupen.com/english/ADV-2011-2234.php

Cisco Security Agent Outside-In Remote Code Execution Vulnerabilities
http://www.vupen.com/english/ADV-2011-2233.php

Cisco Video Surveillance IP Cameras Denial of Service Vulnerability
http://www.vupen.com/english/ADV-2011-2232.php

Cisco Unified Contact Center Express Directory Traversal Vulnerability
http://www.vupen.com/english/ADV-2011-2231.php

Organic Groups for Drupal Access Bypass Remote Unauthorized Access
http://www.vupen.com/english/ADV-2011-2230.php

Apple QuickTime Multiple Code Execution and Information Disclosure
http://www.vupen.com/english/ADV-2011-2229.php

Apple QuickTime Prior To 7.7.1 Pict File Handling Integer Overflow Vulnerability
http://www.securityfocus.com/bid/50399

RETIRED: Apple QuickTime Prior To 7.7.1 Multiple Arbitrary Code Execution Vulnerabilities
http://www.securityfocus.com/bid/50388

Apple Mac OS X FLIC Files CVE-2011-3223 Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/50101

Apple QuickTime CVE-2011-3221 Movie File Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/50131

Apple QuickTime Prior To 7.7.1 TKHD Atoms Handling Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/50403

phpScheduleIt 'reserve.php' Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/31520

Apple Mac OS X FlashPix Files CVE-2011-3222 Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/50100

Apple Mac OS X QuickTime Player CVE-2011-3228 Multiple Memory Corruption Vulnerabilities
http://www.securityfocus.com/bid/50127

Apple Mac OS X QuickTime 'Save for Web' Feature HTML Injection Vulnerability
http://www.securityfocus.com/bid/50122

Apple Mac OS X CoreMedia H.264 Encoded Movie Files Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/50068

Apple QuickTime CVE-2011-3220 Information Disclosure Vulnerability
http://www.securityfocus.com/bid/50130

X.Org X11 File Read Permission Information Disclosure Vulnerability
http://www.securityfocus.com/bid/50196

X.Org X11 Local Privilege Escalation Vulnerability and Memory Leak Vulnerability
http://www.securityfocus.com/bid/50002

OpenSSL Internal Certificate Verification Routine Security Bypass Vulnerability
http://www.securityfocus.com/bid/49469

Linux Kernel GHASH Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/50366

torque 'job name' Argument Remote Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/48374

Vino Framebuffer Request Processing Multiple Remote Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/47681

Mozilla Firefox RegExp Remote Integer Underflow Vulnerability
http://www.securityfocus.com/bid/49809

libxml2 'XPATH' Expressions Memory Corruption Vulnerability
http://www.securityfocus.com/bid/45617

Apple QuickTime Prior To 7.7.1 'Flic' Movie File Handling Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/50404

RoundCube Webmail Denial of Service Vulnerability
http://www.securityfocus.com/bid/50402

Apple QuickTime Prior To 7.7.1 Movie File Handling Integer Overflow Vulnerability
http://www.securityfocus.com/bid/50401

Apple QuickTime Prior To 7.7.1 Movie File Handling Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/50400

Enspire eClient Unspecified SQL Injection Vulnerability
http://www.securityfocus.com/bid/50398

HP-UX Containers Unspecified Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/50396

radvd Multiple Local and Remote Vulnerabilities
http://www.securityfocus.com/bid/50395

Toshiba e-Studio Devices Password Information Disclosure Vulnerability
http://www.securityfocus.com/bid/50392

eFront 3.6.10 Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/50391

SPIP Versions Prior to 1.9.2k Unspecified SQL Injection Vulnerability
http://www.securityfocus.com/bid/50390

WordPress WPtouch Plugin 'ajax.php' SQL Injection Vulnerability
http://www.securityfocus.com/bid/50389

QuickTime 7.7.1 のセキュリティアップデート

2011-10-27T13:12:00.000+09:00

About the security content of QuickTime 7.7.1

http://support.apple.com/kb/HT5016

上記 URL の QuickTime 7.7.1 のセキュリティアップデートの翻訳

1) QuickTime
　QuickTime が H.264 エンコードされた動画ファイルを取り扱う際にバッファオーバーフローが発生することが原因で、アプリケーションを異常終了させたり任意のコードを実行されたりする脆弱性。(CVE-2011-3219)

2) QuickTime
　QuickTime が動画ファイルの URL データハンドラを取り扱う際に初期化されてないメモリへアクセスすることが原因で、メモリ上のコンテンツを取得される脆弱性。(CVE-2011-3220)

3) QuickTime
　QuickTime が動画ファイルの atom 階層を取り扱う際に実装上の欠陥が存在することが原因で、アプリケーションを異常終了させたり任意のコードを実行されたりする脆弱性。(CVE-20113221)

4) QuickTime
　QuickTime Player の "Save for Web" にクロスサイトスクリプティングの欠陥が存在することが原因で、ローカルドメインからスクリプトを注入される脆弱性。(CVE-2011-3218)

5) QuickTime
　QuickTime が FlashPix ファイルを取り扱う際にバッファオーバーフローが発生することが原因で、アプリケーションを異常終了させたり任意のコードを実行されたりする脆弱性。(CVE-2011-3222)

6) QuickTime
　QuickTime が FLIC ファイルを取り扱う際にバッファオーバーフローが発生することが原因で、アプリケーションを異常終了させたり任意のコードを実行されたりする脆弱性。(CVE-2011-3223)

7) QuickTime
　QuickTime が動画ファイルを取り扱う際に複数のメモリ破壊が発生することが原因で、アプリケーションを異常終了させたり任意のコードを実行されたりする脆弱性。(CVE-2011-3228)

8) QuickTime
　PICT ファイルの取り扱いにおいて整数オーバーフローが発生することが原因で、アプリケーションを異常終了させたり任意のコードを実行されたりする脆弱性。(CVE-2011-3247)

9) QuickTime
　QuickTime の動画ファイルに埋め込まれたフォントテーブルの取り扱いにおいて署名問題が存在することが原因で、アプリケーションを異常終了させたり任意のコードを実行されたりする脆弱性。(CVE-2011-3248)

10) QuickTime
　FLC エンコードされた動画ファイルの取り扱いにおいてバッファオーバーフローが発生することが原因で、アプリケーションを異常終了させたり任意のコードを実行されたりする脆弱性。(CVE-2011-3249)

11) QuickTime
　JPEG2000 エンコードされた動画ファイルの取り扱いにおいて整数オーバーフローが発生することが原因で、アプリケーションを異常終了させたり任意のコードを実行されたりする脆弱性。(CVE-2011-3250)

12) QuickTime
　QuickTime の動画ファイル内の TKHD atom の取り扱いにおいてメモリ破壊が発生することが原因で、アプリケーションを異常終了させたり任意のコードを実行されたりする脆弱性。(CVE-2011-3251)

27日木曜日、仏滅

2011-10-27T11:06:00.000+09:00

Lotus Notes の一太郎ファイルビューアーにおけるバッファーオーバーフローの潜在的な脆弱性の問題
http://www-06.ibm.com/ibm/jp/security/info/lotus/si20111025a.html

JVNVU#784211 Apple Quicktime における複数の脆弱性に対するアップデート
http://jvn.jp/cert/JVNVU784211/index.html

JVNDB-2011-002561 Oracle Supply Chain Products Suite の Oracle Agile Product Supplier Collaboration for Process コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002561.html

JVNDB-2011-002560 Oracle Industry Applications の Health Sciences - Oracle Thesaurus Management System コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002560.html

JVNDB-2011-002559 Oracle Industry Applications の Health Sciences - Oracle Clinical、Remote Data Capture における脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002559.html

JVNDB-2011-002558 Oracle Virtualization の Sun Ray コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002558.html

JVNDB-2011-002557 Oracle Linux の Oracle Validated 処理に関する脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002557.html

JVNDB-2011-002556 複数の Oracle Sun 製品における Integrated Lights Out Manager CLI の処理に関する脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002556.html

JVNDB-2011-002555 Oracle PeopleSoft Enterprise HRMS における JPM の処理に関する脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002555.html

JVNDB-2011-002554 Oracle PeopleSoft Enterprise HRMS における Talent Acquisition Manager の処理に関する脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002554.html

JVNDB-2011-002553 Oracle PeopleSoft Enterprise HRMS における Candidate Gateway の処理に関する脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002553.html

JVNDB-2011-002552 Oracle PeopleSoft Enterprise PeopleTools におけるセキュリティの処理に関する脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002529.html

JVNDB-2011-002551 Oracle PeopleSoft Enterprise PeopleTools における Personalization の処理に関する脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002551.html

JVNDB-2011-002550 Oracle PeopleSoft Enterprise HRMS における eDevelopment の処理に関する脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002550.html

JVNDB-2011-002549 Oracle PeopleSoft Enterprise HRMS における eProfile の処理に関する脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-0025549.html

JVNDB-2011-002548 Oracle Siebel CRM の Siebel Core - UIF Server コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-0025548.html

JVNDB-2011-002547 Oracle Siebel CRM の Siebel Core - UIF Client コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-0025547.html

JVNDB-2011-002546 Oracle Siebel CRM の Siebel Apps - Marketing コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-0025546.html

JVNDB-2011-002545 Oracle Solaris における Zone の処理に関する脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-0025545.html

JVNDB-2011-002544 Oracle Solaris における Kernel/Filesystem の処理に関する脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-0025544.html

JVNDB-2011-002543 Oracle Solaris における DTrace Software Library の処理に関する脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-0025543.html

JVNDB-2011-002542 Oracle Solaris における Network Status Monitor の処理に関する脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-0025542.html

JVNDB-2011-002541 Oracle Solaris における ZFS の処理に関する脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-0025541.html

JVNDB-2011-002540 Oracle Solaris における ZFS の処理に関する脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-0025540.html

JVNDB-2011-002539 Oracle Solaris における libnsl の処理に関する脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-0025539.html

JVNDB-2011-002538 Oracle Solaris における xscreensaver の処理に関する脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-0025538.html

JVNDB-2011-002537 Oracle Solaris における ZFS の処理に関する脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-0025537.html

JVNDB-2011-002536 Oracle Sun Products Suite の複数の製品における Web Container の処理に関する脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-0025536.html

JVNDB-2011-002535 Oracle Database Server の Application Express コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-0025535.html

JVNDB-2011-002534 Oracle Database Server の Core RDBMS コンポーネントおける脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-0025534.html

JVNDB-2011-002533 Oracle Database Server の Database Vault コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-0025533.html

JVNDB-2011-002532 Oracle Database Server の Database Vault コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-0025532.html

JVNDB-2011-002531 Oracle Database Server の Oracle Text コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-0025531.html

JVNDB-2011-002530 Oracle E-Business Suite の Oracle Applications Framework コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-0025530.html

JVNDB-2011-002529 Oracle E-Business Suite の Oracle Application Object Library コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-0025529.html

JVNDB-2011-002528 Oracle E-Business Suite の Oracle Application Object Library コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-0025528.html

JVNDB-2011-002527 Oracle E-Business Suite の Oracle Application Object Library コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-0025527.html

JVNDB-2011-002526 Oracle E-Business Suite の Oracle Application Object Library コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-0025526.html

JVNDB-2011-002525 Oracle Fusion Middleware の Oracle Outside In Technology コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-0025525.html

JVNDB-2011-002524 Oracle Fusion Middleware の Oracle Web Services Manager コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-0025524.html

JVNDB-2011-002523 Oracle Fusion Middleware の Oracle Business Intelligence Enterprise Edition コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-0025523.html

JVNDB-2011-002522 Oracle WebLogic Server における Web Services の処理に関する脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-0025522.html

JVNDB-2011-002521 Oracle WebLogic Server における JMS の処理に関する脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-0025521.html

JVNDB-2011-002520 Oracle WebLogic Server における WLS Security の処理に関する脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-0025520.html

JVNDB-2011-002519 Oracle Fusion Middleware の Oracle Containers for J2EE コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-0025519.html

JVNDB-2011-002518 Oracle Fusion Middleware の Oracle WebLogic Portal コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-0025158.html

JVNDB-2011-002517 Oracle Fusion Middleware の Oracle Web Services Manager コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-0025157.html

Critical Control 17:Penetration Tests and Red Team Exercises
http://isc.sans.edu/diary.html?storyid=11887

Mozilla Firefox RegExp Remote Integer Underflow Vulnerability
http://www.securityfocus.com/bid/49809

libxml2 'XPATH' Expressions Memory Corruption Vulnerability
http://www.securityfocus.com/bid/45617

+- HPSBUX02715 SSRT100623 rev.1 - HP-UX Containers (SRP), Local Unauthorized Access and Increased Privileges
https://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?javax.portlet.tpst=ba847bafb2a2d782fcbb0710b053ce01&javax.portlet.prp_ba847bafb2a2d782fcbb0710b053ce01=wsrp-navigationalState%3DdocId%25253Demr_na-c03057703%25257CdocLocale%25253Dja_JP&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken

+ GCC 4.6.2 released
http://gcc.gnu.org/gcc-4.6/

+ SA46591: Linux Kernel XFS "xfs_readlink()" Buffer Overflow Vulnerability
http://secunia.com/advisories/46591/
http://www.securityfocus.com/bid/50370

+ SA46584: Linux Kernel ghash NULL Pointer Dereference Vulnerability
http://secunia.com/advisories/46584/
http://www.securityfocus.com/bid/50366

+ OpenLDAP 'UTF8StringNormalize()' Remote Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/50384

++ Cisco IOS Fingerprinting ICMPv6 Echo Request Information Disclosure Vulnerability
http://www.securityfocus.com/bid/50379

++ Cisco IOS 'ethernet-lldp' Component Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/50377

++ Cisco IOS dot1x Port Handling Multiple Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/50375

- HPSBMU02714 SSRT100244 rev.1 - HP Network Node Manager i (NNMi) for HP-UX, Linux, Solaris, and Windows, Remote Unauthorized Disclosure of Information
https://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?javax.portlet.tpst=ba847bafb2a2d782fcbb0710b053ce01&javax.portlet.prp_ba847bafb2a2d782fcbb0710b053ce01=wsrp-navigationalState%3DdocId%25253Demr_na-c03057508%25257CdocLocale%25253Dja_JP&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken

- Multiple Denial of Service vulnerabilities in Vino GNOME desktop sharing server
http://blogs.oracle.com/sunsecurity/entry/multiple_denial_of_service_vulnerabilities

[ANNOUNCE] Apache Archiva 1.4-M1 Released!
http://archiva.apache.org/docs/1.4-M1/release-notes.html

[ANNOUNCE] Apache Derby 10.8.2.2 released
http://db.apache.org/derby/derby_downloads.html

RHSA-2011:1409 Moderate: openssl security update
http://rhn.redhat.com/errata/RHSA-2011-1409.html

About the security content of QuickTime 7.7.1
http://support.apple.com/kb/HT5016

Google Chrome 15.0.874.106 released
http://googlechromereleases.blogspot.com/2011/10/stable-channel-update_26.html

CESA-2011:1402 (freetype)
http://lwn.net/Alerts/464550/

HPSBUX02702 SSRT100606 rev.5 - HP-UX Apache Web Server, Remote Denial of Service (DoS)
https://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?javax.portlet.tpst=ba847bafb2a2d782fcbb0710b053ce01&javax.portlet.prp_ba847bafb2a2d782fcbb0710b053ce01=wsrp-navigationalState%3DdocId%25253Demr_na-c02997184%25257CdocLocale%25253Dja_JP&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken

PHP 5.4 beta2 released
http://www.php.net/archive/2011.php#id-1

ZDI-11-302 : Adobe Reader U3D TIFF Resource Buffer Overflow Remote Code Execution Vulnerabil
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00173.html

ZDI-11-301 : Adobe Reader U3D PICT 0Eh Encoding Remote Code Execution Vulnerability
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00172.html

ZDI-11-300 : Adobe Reader U3D PICT 10h Encoding Remote Code Execution Vulnerability
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00171.html

ZDI-11-299 : Adobe Reader PICT Parsing Remote Code Execution Vulnerability
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00170.html

ZDI-11-298 : Adobe Reader U3D IFF RGBA Parsing Remote Code Execution Vulnerability
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00169.html

ZDI-11-297 : Adobe Reader U3D PCX Parsing Remote Code Execution Vulnerability
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00168.html

ZDI-11-296 : Adobe Reader BMP Image RLE Decoding Remote Code Execution Vulnerability
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00166.html

Cisco Security Advisory: Cisco Security Agent Remote Code Execution Vulnerabilities
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00167.html

Cisco Security Advisory: Buffer Overflow Vulnerabilities in the Cisco WebEx Player
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00165.html

Cisco Security Advisory: Cisco Unified Contact Center Express Directory Traversal Vulnerability
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00164.html

Cisco Security Advisory: Denial of Service Vulnerability in Cisco Video Surveillance IP Cameras
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00163.html

Cisco Security Advisory: Cisco Unified Communications Manager Directory Traversal Vulnerability
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00162.html

[security bulletin] HPSBMU02714 SSRT100244 rev.1 - HP Network Node Manager i (NNMi) for HP-U
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00161.html

Path disclosure in SPIP
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00160.html

[ GLSA 201110-23 ] Apache mod_authnz_external: SQL injection
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00159.html

Androidを狙う新手口、アプリをアップデートするとウイルスに
エフセキュアが報告、インストール時に追加のアクセス許可
http://itpro.nikkeibp.co.jp/article/NEWS/20111027/371504/?ST=security

衆院事務局がウイルス感染問題で初会合、「報道でサイバー攻撃の可能性を認識」
http://itpro.nikkeibp.co.jp/article/NEWS/20111027/371481/?ST=security

Cisco Video Surveillance IP Cameras RTSP Processing Flaw Lets Remote Users Deny Service
http://www.securitytracker.com/id/1026248

Cisco WebEx Player Buffer Overflows Let Remote Users Execute Arbitrary Code
http://www.securitytracker.com/id/1026244

Cisco Unified Communications Manager Directory Traversal Flaw Lets Remote Users Obtain Files
http://www.securitytracker.com/id/1026243

Google Chrome Multiple Flaws Let Remote Users Execute Arbitrary Code
http://www.securitytracker.com/id/1026242

WordPress BackWPUp Remote Code Execution Vulnerability
http://www.securiteam.com/securitynews/6U03G1P2UA.html

Linux Kernel XFS "xfs_readlink()" Buffer Overflow Vulnerability
http://secunia.com/advisories/46591/

WordPress NextGEN Gallery Plugin Cross-Site Scripting and Request Forgery Vulnerabilities
http://secunia.com/advisories/46602/

phpMyFAQ Code Injection Vulnerability
http://secunia.com/advisories/46582/

Ubuntu update for linux-ti-omap4
http://secunia.com/advisories/46571/

Ubuntu update for linux
http://secunia.com/advisories/46585/

Ubuntu update for linux-mvl-dove
http://secunia.com/advisories/46587/

Ubuntu update for linux-ec2
http://secunia.com/advisories/46589/

Ubuntu update for linux
http://secunia.com/advisories/46590/

Ubuntu update for linux-lts-backport-maverick
http://secunia.com/advisories/46595/

Ubuntu update for linux-fsl-imx51
http://secunia.com/advisories/46598/

Ubuntu update for nova
http://secunia.com/advisories/46597/

Google Chrome Multiple Vulnerabilities
http://secunia.com/advisories/46594/

OpenStack Compute (Nova) "EC2_SECRET_KEY" Credentials Disclosure Weakness
http://secunia.com/advisories/46576/

SUSE update for hplip
http://secunia.com/advisories/46593/

Linux Kernel ghash NULL Pointer Dereference Vulnerability
http://secunia.com/advisories/46584/

Ubuntu update for kde4libs
http://secunia.com/advisories/46592/

Gentoo update for mod_authnz_external
http://secunia.com/advisories/46581/

IBM WebSphere ILOG Rule Team Server Unspecified Cross-Site Scripting Vulnerability
http://secunia.com/advisories/46574/

HP Network Node Manager i (NNMi) Remote Information Disclosure
http://www.vupen.com/english/ADV-2011-2228.php

IBM WebSphere ILOG Rule Team Server Cross Site Scripting Vulnerability
http://www.vupen.com/english/ADV-2011-2227.php

phpMyFAQ ImageManager Library Remote PHP Code Injection Vulnerability
http://www.vupen.com/english/ADV-2011-2226.php

Google Chrome Multiple Memory Corruption and Information Disclosure
http://www.vupen.com/english/ADV-2011-2225.php

Novell iPrint Client for Windows Activex Remote Code Execution Vulnerability
http://www.vupen.com/english/ADV-2011-2224.php

Novell ZENworks 7 Handheld Management Directory Traversal Vulnerability
http://www.vupen.com/english/ADV-2011-2223.php

Google Chrome Prior to 13.0.782.215 Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/49279

libxml2 'XPATH' Memory Corruption Vulnerability
http://www.securityfocus.com/bid/44779

libxml2 Invalid XPath Multiple Memory Corruption Vulnerabilities
http://www.securityfocus.com/bid/48056

Google Chrome Prior to 14.0.835.163 Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/49658

GNU libc glob(3) 'pattern' Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/47671

Multiple Vendors STARTTLS Implementation Plaintext Arbitrary Command Injection Vulnerability
http://www.securityfocus.com/bid/46767

Squid 'DNS' Reply Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/42645

Squid Web Proxy Cache HTCP Request Processing Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/38212

Squid Web Proxy Cache Authentication Header Parsing Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/36091

Squid Proxy String Processing NULL Pointer Dereference Denial Of Service Vulnerability
http://www.securityfocus.com/bid/42982

Squid Header-Only Packets Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/37522

Squid Proxy Gopher Remote Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/49356

Squid Multiple Remote Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/35812

Cisco WebEx WRF and ATAS32 File Format Multiple Remote Buffer Overflow Vulnerabilities
http://www.securityfocus.com/bid/50373

Mozilla Firefox/Thunderbird/SeaMonkey CVE-2011-3000 HTTP Response Splitting Vulnerability
http://www.securityfocus.com/bid/49849

Mozilla Firefox CVE-2011-2995 Remote Memory Corruption Vulnerability
http://www.securityfocus.com/bid/49810

Mozilla Firefox/Thunderbird/SeaMonkey Enter Key Dialog Bypass Weakness
http://www.securityfocus.com/bid/49811

Mozilla Firefox/SeaMonkey/Thunderbird CVE-2011-2999 Cross Domain Scripting Vulnerability
http://www.securityfocus.com/bid/49848

Adobe Acrobat and Reader CVE-2011-2441 Multiple Remote Stack Buffer Overflow Vulnerabilities
http://www.securityfocus.com/bid/49581

Novell iPrint Client 'nipplib.dll' Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/50367

X.Org X11 Local Privilege Escalation Vulnerability and Memory Leak Vulnerability
http://www.securityfocus.com/bid/50002

Oracle Java SE CVE-2011-3545 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50220

Oracle Java SE CVE-2011-3521 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50215

Oracle Java SE Rhino Script Engine Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/50218

Adobe Acrobat and Reader CVE-2011-2436 Remote Heap Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/49578

Apple iTunes CoreAudio (CVE-2011-3252) Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/50065

Apple Mac OS X CoreMedia H.264 Encoded Movie Files Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/50068

OpenSSL Internal Certificate Verification Routine Security Bypass Vulnerability
http://www.securityfocus.com/bid/49469

Red Hat Linux Kernel CVE-2011-3347 VLAN Packets Handling Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/50312

Red Hat Linux Kernel Ethernet Bridge Interface Denial of Service Vulnerability
http://www.securityfocus.com/bid/50313

Linux Kernel TCP Sequence Number Generation Security Weakness
http://www.securityfocus.com/bid/49289

Linux Kernel Generic Receive Offload (GRO) CVE-2011-2723 Denial of Service Vulnerability
http://www.securityfocus.com/bid/48929

Adobe Acrobat and Reader CVE-2011-2433 Remote Heap Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/49576

Adobe Acrobat and Reader CVE-2011-2435 Remote Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/49575

Adobe Acrobat and Reader U3D Tiff Remote Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/49572

Adobe Acrobat and Reader CVE-2011-2434 Remote Heap Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/49577

Adobe Acrobat and Reader CVE-2011-2438 Multiple Remote Stack Buffer Overflow Vulnerabilities
http://www.securityfocus.com/bid/49580

Adobe Acrobat and Reader CVE-2011-2437 Remote Heap Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/49579

Oracle Outside In Technology Microsoft CAB File Parsing Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/47437

Oracle Outside In Technology Lotus 123 File Parsing Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/47435

Retired: Microsoft Outlook Web Access Session Replay Security Bypass Vulnerability
http://www.securityfocus.com/bid/50361

IBM WebSphere ILOG Rule Team Server 'project' Parameter Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/50056

FreeType Font Document Multiple Memory Corruption Vulnerabilities
http://www.securityfocus.com/bid/50155

KDE KSSL Common Name SSL Certificate Spoofing Vulnerability
http://www.securityfocus.com/bid/49925

Cyrus IMAP Server 'split_wildmats()' Remote Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/49534

phpMyFAQ 'ajax_create_folder.php' Code Injection Vulnerability
http://www.securityfocus.com/bid/50385

OpenLDAP 'UTF8StringNormalize()' Remote Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/50384

NextGEN Gallery for WordPress Cross Site Scripting and Cross Site Request Forgery Vulnerabilities
http://www.securityfocus.com/bid/50383

Online Subtitles Workshop 'video_comments.php' HTML Injection Vulnerability
http://www.securityfocus.com/bid/50382

XAMPP Multiple Cross Site Scripting Vulnerabilities
http://www.securityfocus.com/bid/50381

Trendmicro IWSS 3.1 Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/50380

Cisco IOS Fingerprinting ICMPv6 Echo Request Information Disclosure Vulnerability
http://www.securityfocus.com/bid/50379

Cisco Adaptive Security Appliances (ASA) 5500 'platform-sw' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/50378

Cisco IOS 'ethernet-lldp' Component Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/50377

Cisco CiscoWorks Common Services Information Disclosure Vulnerability
http://www.securityfocus.com/bid/50376

Cisco IOS dot1x Port Handling Multiple Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/50375

PrestaShop Presta2PhpList Module 'list' SQL Injection Vulnerability
http://www.securityfocus.com/bid/50374

Multiple Cisco Products (CVE-2011-3315) Directory Traversal Vulnerability
http://www.securityfocus.com/bid/50372

Cisco Video Surveillance 2421, 2500, and 2600 Series IP Cameras Denial of Service Vulnerability
http://www.securityfocus.com/bid/50371

Linux Kernel 'xfs_readlink()' Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/50370

Novell ZENworks Handheld Management 'Common.dll' Directory Traversal Vulnerability
http://www.securityfocus.com/bid/50369

IBM WebSphere ILOG Rule Team Server Unspecified Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/50368

Linux Kernel GHASH Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/50366

vtiger CRM 'index.php' Multiple Cross Site Scripting Vulnerabilities
http://www.securityfocus.com/bid/50364

26日水曜日、友引

2011-10-26T17:28:00.000+09:00

+ Linux kernel 3.0.8 released
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.0.8

+ Important: freetype security update
http://rhn.redhat.com/errata/RHSA-2011-1402.html

+ Sudo 1.7.8p1, 1.8.3p1 released
http://www.sudo.ws/sudo/stable.html#1.7.8p1
http://www.sudo.ws/sudo/stable.html#1.8.3p1

- Linux Kernel 'net/can/raw.c' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/47835

- Linux Kernel 'bcm_release()' NULL Pointer Dereference Denial of Service Vulnerability
http://www.securityfocus.com/bid/47503

? Linux Kernel 'perf' Utility Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/49140

? Linux Kernel KSM Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/48101

Google Chrome 15.0.874.102 released
http://googlechromereleases.blogspot.com/2011/10/chrome-stable-release.html

SafeSyncモバイルクライアントバージョン1.3（iOS/Android）にログインできない現象について
http://www.trendmicro.co.jp/support/news.asp?id=1671

zFtp Server <= 2011-04-13 | "STAT,CWD" Remote Denial of Service Vulnerability
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00155.html

[ GLSA 201110-22 ] PostgreSQL: Multiple vulnerabilities
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00156.html

[SECURITY] [DSA 2328-1] freetype security update
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00154.html

[security bulletin] HPSBUX02700 SSRT100506 rev.2 - HP-UX running VEA, Remote Denial of Servi
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00153.html

[ MDVSA-2011:161 ] postgresql
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00152.html

[ GLSA 201110-21 ] Asterisk: Multiple vulnerabilities
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00151.html

[SECURITY] [DSA 2327-1] libfcgi-perl security-update
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00150.html

「DMで偽サイトに誘導」――Twitter悪用のフィッシングに注意
英ソフォスが報告、目的はパスワードの奪取
http://itpro.nikkeibp.co.jp/article/NEWS/20111026/371422/?ST=security

テラス、SSHリモート操作を動画記録する監査証跡SaaSを開始
http://itpro.nikkeibp.co.jp/article/NEWS/20111025/371350/?ST=security

JVNDB-2011-002516 Apple Mac OS X のオープンディレクトリにおけるパスワードデータを閲覧される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002516.html

JVNDB-2011-002515 Apple Mac OS X の QuickTime における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002515.html

JVNDB-2011-002514 Apple Mac OS X の libsecurity における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002514.html

JVNDB-2011-002513 Apple Mac OS X のオープンディレクトリにおけるパスワード要求を回避される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002513.html

JVNDB-2011-002512 Apple Mac OS X の SMB ファイルサーバコンポーネントにおける閲覧制限を回避される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002512.html

JVNDB-2011-002511 Apple Mac OS X の User Documentation コンポーネントにおける任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002511.html

JVNDB-2011-002510 Apple Mac OS X の QuickTime におけるバッファオーバーフローの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002510.html

JVNDB-2011-002509 Apple Mac OS X の QuickTime におけるバッファオーバーフローの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002509.html

JVNDB-2011-002508 Apple Mac OS X の QuickTime における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002508.html

JVNDB-2011-002507 Apple Mac OS X の QuickTime における重要な情報を取得される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002507.html

JVNDB-2011-002506 Django の CSRF 保護メカニズムにおける認証されずに偽造されたリクエストを誘発される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002506.html

JVNDB-2011-002505 Django におけるキャッシュポイズニング攻撃を誘発される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002505.html

JVNDB-2011-002504 Django の URLField 実装内にある verify_exists 機能における任意の GET リクエストを誘発される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002504.html

JVNDB-2011-002503 Django の URLField 実装内にある verify_exists 機能におけるサービス運用妨害 (リソース消費) の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002503.html

JVNDB-2011-002502 Django の django.contrib.sessions におけるセッションを変更される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002502.html

JVNDB-2011-002501 Cisco TelePresence Video Communication Servers の管理インターフェイスにおけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002501.html

JVNDB-2011-002500 HP Data Protector における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002500.html

JVNDB-2011-002499 HP Data Protector における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002499.html

JVNDB-2011-002498 HP Data Protector における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002498.html

JVNDB-2011-002497 HP Data Protector における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002497.html

JVNDB-2011-002496 HP Data Protector における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002496.html

JVNDB-2011-002495 HP Data Protector における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002495.html

JVNDB-2011-002494 Apple Mac OS X の Application Firewall のデバッグログ機能における権限を取得される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002494.html

JVNDB-2011-002493 Apple iOS および Apple TV のカーネルにおけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002493.html

JVNDB-2011-002492 Apple iOS および Mac OS X の CFNetwork における重要な情報を取得される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002492.html

JVNDB-2011-002491 Mac OS X 上で稼動する Apple Safari のプライベートブラウズ機能におけるユーザを追跡可能な脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002491.html

JVNDB-2011-002490 Mac OS X 上で動作する Apple Safari の SSL 実装における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002490.html

JVNDB-2011-002489 Mac OS X 上で動作する Apple Safari における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002489.html

JVNDB-2011-002488 Apple Safari におけるディレクトリトラバーサルの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002488.html

JVNDB-2011-002487 Apple Mac OS X の Apple Type Services (ATS) における整数符号エラーの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002487.html

JVNDB-2011-002486 Apple Mac OS の Open Directory におけるパスワード変更の制限を回避される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002486.html

Critical Control 17:Penetration Tests and Red Team Exercises
http://isc.sans.edu/diary.html?storyid=11887

Recurring reporting made easy?
http://isc.sans.edu/diary.html?storyid=11884

VMware ESXi and ESX updates to third party libraries and ESX Service Console
http://securityreason.com/securityalert/8480

HP MFP Digital Sending Software Running on Window Local Information Disclosure
http://securityreason.com/securityalert/8479

astersik open source 1.8.7 Remote crash vulnerability
http://securityreason.com/securityalert/8478

OCS Inventory NG 2.0.1 Persistent XSS
http://securityreason.com/securityalert/8477

ibm db2 9.7 Exploiting the linker
http://securityreason.com/securityalert/8476

Linux Kernel ext4 Extent Splitting Bug in ext4_ext_convert_to_initialized() Lets Local Users Deny Service
http://www.securitytracker.com/id/1026240

Xen Buffer Overflow in SCSI Emulation Lets a Local Guest User Cause the Guest to Crash
http://www.securitytracker.com/id/1026238

Cisco Network Registrar Default Credentials Vulnerability
http://www.securiteam.com/securitynews/6L03H1F2UE.html

Cisco IOS XR Software IP Packet Vulnerability
http://www.securiteam.com/securitynews/6P03L1F2UU.html

Cisco Media Experience Engine 5600 Default Credentials Vulnerability
http://www.securiteam.com/securitynews/6N03J1F2UM.html

Cisco IOS XR Software SSHv1 Denial of Service Vulnerability
http://www.securiteam.com/securitynews/6K03G1F2UK.html

Cisco Unified IP Phones 7900 Series Multiple Vulnerabilities
http://www.securiteam.com/securitynews/6M03I1F2UW.html

Cisco XR 12000 Series Shared Port Adapters Interface Processor Vulnerability
http://www.securiteam.com/securitynews/6Q03M1F2UO.html

Cisco RVS4000 and WRVS4400N Web Management Interface Vulnerabilities
http://www.securiteam.com/securitynews/6O03K1F2UC.html

PrestaShop Presta2PhpList Module "list" SQL Injection Vulnerability
http://secunia.com/advisories/46531/

Red Hat update for freetype
http://secunia.com/advisories/46596/

McAfee Web Gateway Unspecified Cross-Site Scripting Vulnerability
http://secunia.com/advisories/46570/

Gentoo update for postgresql
http://secunia.com/advisories/46568/

Alcatel-Lucent OmniTouch 8400 Instant Communication Suite Multiple Vulnerabilities
http://secunia.com/advisories/46562/

Alcatel-Lucent Business integrated Communication Solution Multiple Vulnerabilities
http://secunia.com/advisories/46565/

Ubuntu update for puppet
http://secunia.com/advisories/46578/

Zope Unspecified Vulnerability
http://secunia.com/advisories/46586/

Novell Netware HTTP Server ByteRange Filter Denial of Service Vulnerability
http://secunia.com/advisories/46572/

zFTPServer "CWD" Denial of Service Vulnerability
http://secunia.com/advisories/46559/

Puppet "certdnsnames" Puppet Master Impersonation Vulnerability
http://secunia.com/advisories/46550/

Wing FTP Server Unspecified Information Disclosure Vulnerability
http://secunia.com/advisories/46413/

Wing FTP Server Unspecified Information Disclosure Vulnerability
http://secunia.com/advisories/46558/

SUSE update for etherape
http://secunia.com/advisories/46567/

SUSE update for fail2ban
http://secunia.com/advisories/46555/

Alsbtain Bulletin "act" Local File Inclusion Vulnerability
http://secunia.com/advisories/46566/

Gentoo update for asterisk
http://secunia.com/advisories/46548/

Ubuntu update for pam
http://secunia.com/advisories/46580/

Debian update for libfcgi-perl
http://secunia.com/advisories/46579/

Debian update for pam
http://secunia.com/advisories/46549/

Debian update for freetype
http://secunia.com/advisories/46544/

SUSE update for cyrus-imapd
http://secunia.com/advisories/46347/

SUSE update for opera
http://secunia.com/advisories/46552/

PacketFence "p" and "destination_url" Cross-Site Scripting Vulnerabilities
http://secunia.com/advisories/46553/

Red Hat update for xen
http://secunia.com/advisories/46554/

SUSE update for clamav
http://secunia.com/advisories/46563/

Novell NetWare Apache Requests Processing Remote Denial of Service
http://www.vupen.com/english/ADV-2011-2222.php

Zope Security Update Fixes Unspecified Remote Vulnerability
http://www.vupen.com/english/ADV-2011-2221.php

BlueZone Desktop Multiple Malformed files Local Denial of Service Vulnerabilities
http://www.exploit-db.com/exploits/18030

Cyrus IMAP Server 'split_wildmats()' Remote Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/49534

FreeType Font Document Multiple Memory Corruption Vulnerabilities
http://www.securityfocus.com/bid/50155

Linux Kernel SSID Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/48538

Linux Kernel 'net/can/raw.c' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/47835

Apache 'mod_authnz_external' Module SQL Injection Vulnerability
http://www.securityfocus.com/bid/48653

Linux Kernel 'agp_allocate_memory/agp_create_user_memory' Local Privilege Escalation Vulnerabilities
http://www.securityfocus.com/bid/47535

Linux Kernel 'next_pidmap()' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/47497

Linux Kernel 'bcm_release()' NULL Pointer Dereference Denial of Service Vulnerability
http://www.securityfocus.com/bid/47503

GNU libc glob(3) 'GLOB_LIMIT' Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/43819

Linux Kernel I/O-Warrior USB Device Heap Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/46069

Linux Kernel 'fs/partitions/ldm.c' Buffer Overflow and Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/46512

Linux Kernel 'agp_ioctl()' Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/47534

Linux Kernel EFI Partition Denial of Service Vulnerability
http://www.securityfocus.com/bid/47343

Linux Kernel Unix Socket Backlog Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/46637

Linux Kernel Comedi Driver Local Information Disclosure Vulnerability
http://www.securityfocus.com/bid/49411

Linux Kernel CIFS Mount Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/49626

Linux Kernel 'perf' Utility Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/49140

Linux Kernel 'taskstats' Access Restriction Local Security Bypass Vulnerability
http://www.securityfocus.com/bid/50314

Linux Kernel 'fs/befs/linuxvfs.c' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/49256

Linux Kernel '/proc/PID/io' Local Information Disclosure Vulnerability
http://www.securityfocus.com/bid/49408

Linux kernel l2cap Remote Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/48472

Red Hat Linux Kernel VLAN Packets Handling Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/48907

Linux Kernel 'inet_diag_bc_audit()' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/48333

Linux Kernel OOPS 'qdisc_dev()' Dereference Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/48641

Linux Kernel eCryptfs Multiple Vulnerabilities
http://www.securityfocus.com/bid/49108

Linux Kernel IPv6 Fragment Identification Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/48802

Linux Kernel Generic Receive Offload (GRO) CVE-2011-2723 Denial of Service Vulnerability
http://www.securityfocus.com/bid/48929

Linux Kernel TCP Sequence Number Generation Security Weakness
http://www.securityfocus.com/bid/49289

Linux Kernel 'CIFSFindNext()' Function Denial of Service Vulnerability
http://www.securityfocus.com/bid/49295

Linux Kernel KSM Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/48101

Linux Kernel EXT4 Extent Format File Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/48697

PostgreSQL Index Function Session State Modification Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/37333

Linux Kernel Validate 'map_count' Variable Local Security Bypass Vulnerability
http://www.securityfocus.com/bid/46492

PostgreSQL 'bitsubstr' Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/37973

Linux Kernel 'inotify_init1()' Double Free Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/47296

Linux Kernel 'oops' on Reset NULL Pointer Dereference Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/46793

Linux Kernel EFI Partition Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/47796

Linux Kernel 'drivers/media/radio/si4713-i2c.c' Remote Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/48804

Linux Kernel 'mremap()' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/47321

Linux Kernel 'x25_parse_facilities()' Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/44642

Linux Kernel NFS File Locking Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/49141

Linux Kernel SCTP INIT/INIT-ACK Chunk Length Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/47308

Perl Safe Module 'reval()' and 'rdo()' CVE-2010-1447 Restriction-Bypass Vulnerabilities
http://www.securityfocus.com/bid/40305

PostgreSQL 'intarray' Module 'gettoken()' Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/46084

PostgreSQL Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/40215

PostgreSQL PL/Perl and PL/Tcl Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/43747

PostgreSQL 'RESET ALL' Unauthorized Access Vulnerability
http://www.securityfocus.com/bid/40304

PostgreSQL Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/36314

PostgreSQL Conversion Encoding Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/34090

PostgreSQL JOIN Hashtable Size Integer Overflow Denial Of Service Vulnerability
http://www.securityfocus.com/bid/38619

PHP Versions Prior to 5.3.7 Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/49241

PostgreSQL NULL Character CA SSL Certificate Validation Security Bypass Vulnerability
http://www.securityfocus.com/bid/37334

QEMU 'scsi_disk_emulate_command()' Function Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/49545

Linux Kernel Netfilter 'ipt_CLUSTERIP.c' Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/46921

Linux Kernel Acorn Econet Protocol Implementation Local Information Disclosure Vulnerability
http://www.securityfocus.com/bid/47990

Red Hat Linux Kernel Ethernet Bridge Interface Denial of Service Vulnerability
http://www.securityfocus.com/bid/50313

Linux Kernel 'clock_gettime()' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/50311

Red Hat Linux Kernel CVE-2011-3347 VLAN Packets Handling Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/50312

Xen DMA Requests IOMMU Denial of Service Vulnerability
http://www.securityfocus.com/bid/49146

Linux Kernel Auerswald USB Device Driver Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/48687

Python CGIHTTPServer Module Information Disclosure Vulnerability
http://www.securityfocus.com/bid/46541

Linux Kernel 'taskstats.c' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/48383

Pango HarfBuzz Engine Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/49723

Linux Kernel CIFS Local Security Bypass Vulnerability
http://www.securityfocus.com/bid/47381

Linux Kernel 'drivers/char/tpm/tpm.c' Information Disclosure Vulnerability
http://www.securityfocus.com/bid/46866

Opera Web Browser Tree Traversing Use-After-Free Memory Corruption Vulnerability
http://www.securityfocus.com/bid/50320

Apache HTTP Server CVE-2011-3192 Denial Of Service Vulnerability
http://www.securityfocus.com/bid/49303

Perl Fast CGI Module CGI Variables Authentication Security Bypass Vulnerability
http://www.securityfocus.com/bid/49549

RETIRED: SAP Management Console OSExecute Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/50348

phpLDAPadmin 'functions.php' Remote PHP Code Injection Vulnerability
http://www.securityfocus.com/bid/50331

Joomla YJ Contact us Component 'view' Parameter Local File Include Vulnerability
http://www.securityfocus.com/bid/50362

Microsoft Outlook Web Access Session Replay Security Bypass Vulnerability
http://www.securityfocus.com/bid/50361

Google Chrome Prior to 15.0.874.102 Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/50360

OpenStack Nova 'EC2_SECRET_KEY' Man In The Middle Security Bypass Vulnerability
http://www.securityfocus.com/bid/50359

Zope 2.12.20/2.13.6 and Prior Unspecified Security Vulnerability
http://www.securityfocus.com/bid/50357

Puppet 'certdnsnames' Certificate Validation Security Bypass Vulnerability
http://www.securityfocus.com/bid/50356

Wing FTP Server Versions Prior to 4.0.1 Information Disclosure Vulnerability
http://www.securityfocus.com/bid/50355

PacketFence Multiple Cross Site Scripting Vulnerabilities
http://www.securityfocus.com/bid/50353

BlueZone Desktop File Processing Multiple Remote Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/50352

BlueZone Desktop '.ztf' File Processing Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/50351

Alsbtain Bulletin Multiple Local File Include Vulnerabilities
http://www.securityfocus.com/bid/50350

25日火曜日、先勝

2011-10-25T10:05:00.000+09:00

+ Linux kernel 3.0.8 released
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.0.8

CESA-2011:1401 (xen)
http://lwn.net/Alerts/464281/

ウイルスバスター月額版サーバメンテナンスのお知らせ（2011年11月1日）
http://www.trendmicro.co.jp/support/news.asp?id=1670

JVNVU#659251 MIT Kerberos 5 KDC に複数の脆弱性
http://jvn.jp/cert/JVNVU659251/index.html

JVN#80971236 WEB FORUM におけるクロスサイトスクリプティングの脆弱性
http://jvn.jp/jp/JVN80971236/index.html

JVN#89764731 WEB FORUM におけるクロスサイトスクリプティングの脆弱性
http://jvn.jp/jp/JVN89764731/index.html

JVN#36684331 WEB FORUM におけるクロスサイトスクリプティングの脆弱性
http://jvn.jp/jp/JVN36684331/index.html

JVNDB-2011-002485 HP Data Protector における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002485.html

JVNDB-2011-000082 WEB FORUM におけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000082.html

JVNDB-2011-000081 WEB FORUM におけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000081.html

JVNDB-2011-000080 WEB FORUM におけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000080.html

JVNDB-2011-002484 Apple Mac OS X の QuickTime Player におけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002484.html

JVNDB-2011-002483 Apple Mac OS X の MediaKit における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002483.html

JVNDB-2011-002482 Apple Mac OS X の kernel におけるアクセス制限を回避される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002482.html

JVNDB-2011-002481 Apple Mac OS X の kernel におけるアクセス制限を回避される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002481.html

JVNDB-2011-002480 Apple Mac OS X の IOGraphics におけるパスワード要求を回避される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002480.html

JVNDB-2011-002479 Apple Mac OS X の File Systems コンポーネントにおける WebDAV セッションをハイジャックされる脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002479.html

JVNDB-2011-002478 Apple Mac OS X の CoreStorage における重要な情報を取得される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002478.html

JVNDB-2011-002477 Apple Mac OS X の CoreProcesses コンポーネントにおけるアクセス制限を回避される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002477.html

JVNDB-2011-002476 Apple Mac OS X の CFNetwork におけるユーザを追跡可能な脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002476.html

JVNDB-2011-002475 Apple Mac OS X の Apple Type Services (ATS) におけるバッファオーバーフローの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002475.html

JVNDB-2011-002474 pple Mac OS X の Apple Type Services (ATS) における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002474.html

JVNDB-2011-002473 Apple Mac OS X の CoreMedia における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002473.html

JVNDB-2011-002472 D-Link DCS-2121 カメラの /etc/rc.d/rc.local におけるシェルアクセスを取得される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002472.html

JVNDB-2011-002471 D-Link DCS-2121 カメラの recorder_test.cgi における任意のコマンドを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002471.html

JVNDB-2011-002470 Apple iOS の設定コンポーネントにおける重要な情報を取得される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002470.html

JVNDB-2011-002469 Apple iOS の設定コンポーネントにおける詳細不明な影響を受ける脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002469.html

JVNDB-2011-002468 Apple iOS のホームスクリーンコンポーネントにおける重要な状態情報を取得される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002468.html

JVNDB-2011-002467 Apple iOS の UIKit アラートコンポーネントにおけるサービス運用妨害 (デバイスハング) の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002467.html

JVNDB-2011-002466 Apple iOS の WiFi コンポーネントにおける重要な情報を取得される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002466.html

JVNDB-2011-002465 Apple iOS および Apple TV の Data Security コンポーネントにおける重要な情報を取得される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002465.html

JVNDB-2011-002464 Apple iOS および Safari で使用される WebKit におけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002464.html

JVNDB-2011-002463 Apple iOS のキーボードコンポーネントにおける重要な情報を取得される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002463.html

JVNDB-2011-002462 Apple iOS の CalDAV における重要な情報を取得される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002462.html

JVNDB-2011-002461 Apple iOS のカレンダーにおけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002461.html

JVNDB-2011-002460 Apple iOS の CFNetwork における重要な情報を取得される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002460.html

JVNDB-2011-002459 Apple iOS の CoreGraphics の FreeType における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002459.html

JVNDB-2011-002458 Apple iOS の Data Access コンポーネントにおけるアクセス制限を回避される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002458.html

JVNDB-2011-002457 Apple iOS の OfficeImport におけるバッファオーバーフローの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002457.html

JVNDB-2011-002456 Apple iOS の OfficeImport におけるメモリ二重解放の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002456.html

JVNDB-2011-002455 OneOrZero AIMS に複数の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002455.html

JVNDB-2011-002454 複数の Apple 製品で使用される WebKit におけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002454.html

JVNDB-2011-002453 複数の Apple 製品で使用される WebKit におけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002453.html

JVNDB-2011-002452 Apple iTunes で使用される CoreFoundation におけるサービス運用妨害 (DoS) の脆弱性 7.6 2011/10/12 2011/10/24
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002452.html

SA46583 Linux-PAM "pam_env" Module Two Vulnerabilities
http://secunia.com/advisories/46583/

+ Postfix stable release 2.8.6, 2.7.7, 2.6.13, 2.5.16
http://www.postfix.org/announcements/postfix-2.8.6.html
http://mirror.postfix.jp/postfix-release/official/postfix-2.8.6.HISTORY
http://mirror.postfix.jp/postfix-release/official/postfix-2.7.7.HISTORY
http://mirror.postfix.jp/postfix-release/official/postfix-2.6.13.HISTORY
http://mirror.postfix.jp/postfix-release/official/postfix-2.5.16.HISTORY

+ Linux kernel 3.1 released
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1

- Moderate: xen security and bug fix update
http://rhn.redhat.com/errata/RHSA-2011-1401.html

- libpng 'pngerror.c' Off-By-One Error Denial Of Service Vulnerability
http://www.securityfocus.com/bid/48474

- Linux-PAM 'pam_env' Module Multiple Local Privilege Escalation Vulnerabilities
http://www.securityfocus.com/bid/50343

[ANNOUNCEMENT] Apache Commons-DbUtils 1.4 released!
http://commons.apache.org/dbutils/download_dbutils.cgi

[ANNOUNCE] Benetl, a free ETL tool for postgreSQL, out in version 3.8
http://www.benetl.net/

UPDATE: HPSBUX02700 SSRT100506 rev.2 - HP-UX running VEA, Remote Denial of Service (DoS), Execution of Arbitrary Code
https://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?javax.portlet.tpst=ba847bafb2a2d782fcbb0710b053ce01&javax.portlet.prp_ba847bafb2a2d782fcbb0710b053ce01=wsrp-navigationalState%3DdocId%25253Demr_na-c02962262%25257CdocLocale%25253Dja_JP&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken

Gentoo Linux : [GLSA 201110-20] Clam AntiVirus - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36941

Mandriva : [MDVSA-2011:159] krb5 - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36942

Mandriva : [MDVSA-2011:160] krb5 - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36943

Gentoo Linux : [GLSA 201110-17] Avahi - Denial-Of-Service Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36938

Gentoo Linux : [GLSA 201110-18] rgmanager - Privilege Escalation Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36939

Gentoo Linux : [GLSA 201110-19] X.Org - X Server - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36940

Mandriva : [MDVSA-2011:157] freetype2 - Code Execution and Denial-Of-Service Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36945

Mandriva : [MDVSA-2011:158] phpmyadmin - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36946

Red Hat : [RHSA-2011:1386-01] Kernel - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36959

Red Hat : [RHSA-2011:1391-01] httpd - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36960

Red Hat : [RHSA-2011:1392-01] httpd - Security Bypass Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36961

Stefan Schurtz : [SSCHADV2011-033] Metasploit - Cross-site Scripting Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36950

Ubuntu Security Notice : [USN-1236-1] Linux Kernel - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36931

Ubuntu Security Notice : [USN-1235-1] Open-iSCSI - File Overwrite Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36932

Ubuntu Security Notice : [Ubuntu: 1232-3] X.Org - X server - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36933

Gentoo Linux : [GLSA 201110-14] D-Bus - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36935

Gentoo Linux : [GLSA 201110-15] GnuPG - Code Execution Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36936

Gentoo Linux : [GLSA 201110-16] Cyrus IMAP Server - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36937

Hewlett-Packard : [HPSBMU02716 SSRT100651] HP Data Protector Notebook Extension - Code Execution Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36947

Hewlett-Packard : [HPSBPI02711 SSRT100647] HP - MFP Digital Sending Software - Information Disclosure Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36948

HTB Team : [HTB23050] Tine - Cross-site Scripting Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36952

Independant Researcher : Oracle Database - Buffer Overflow Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36954

Independant Researcher : Oracle Database Server - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36955

Independant Researcher : Oracle Database Server - SQL Injection Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36956

Red Hat : [RHSA-2011:1385-01] kdelibs and kdelibs3 - Spoofing Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36958

Stefan Schurtz : [SSCHADV2011-031] Yet Another CMS - SQL Injection and Cross-site Scripting Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36957

Ubuntu Security Notice : [USN-1192-3] Firefox - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36934

Debian : [DSA 2324-1] Wireshark - Code Execution Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36944

[SECURITY] [DSA 2326-1] pam security update
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00145.html

TC-SA-2011-01: Multiple vulnerabilities in OmniTouch Instant Communication Suite
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00149.html

[SECURITY] [DSA 2325-1] kfreebsd-8 security update
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00144.html

[ GLSA 201110-20 ] Clam AntiVirus: Multiple vulnerabilities
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00143.html

phpLDAPadmin <= 1.2.1.1 (query_engine) Remote PHP Code Injection Exploit
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00148.html

jara 1.6 sql injection vulnerability
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00147.html

[ MDVSA-2011:160 ] krb5
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00142.html

[ MDVSA-2011:159 ] krb5
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00141.html

[ GLSA 201110-18 ] rgmanager: Privilege escalation
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00140.html

[ GLSA 201110-17 ] Avahi: Denial of Service
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00139.html

[CVE-2011-2569] Cisco Nexus OS (NX-OS) - Command "injection" / sanitization issues.
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00146.html

[ GLSA 201110-16 ] Cyrus IMAP Server: Multiple vulnerabilities
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00138.html

[ GLSA 201110-15 ] GnuPG: User-assisted execution of arbitrary code
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00137.html

[ GLSA 201110-14 ] D-Bus: Multiple vulnerabilities
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00136.html

またもやYouTubeで乗っ取り、今度はマイクロソフトが被害
動画を全て消去、コメント欄には「アダルト動画まだ？」
http://itpro.nikkeibp.co.jp/article/NEWS/20111025/371321/?ST=security

Critical Control 16: Secure Network Engineering
http://isc.sans.edu/diary.html?storyid=11878

Vulnerability Note VU#659251 Multiple MIT KRB5 KDC daemon vulnerabilities
http://www.kb.cert.org/vuls/id/659251

FreeType Type 1 Font Processing Flaw Lets Remote Users Deny Service
http://www.securitytracker.com/id/1026237

FreeType Multiple Vulnerabilities
http://secunia.com/advisories/46575/

phpLDAPadmin Cross-Site Scripting and Code Injection Vulnerabilities
http://secunia.com/advisories/46551/

Gentoo update for dbus
http://secunia.com/advisories/46547/

Gentoo update for gnupg
http://secunia.com/advisories/46541/

Gentoo update for avahi
http://secunia.com/advisories/46503/

Gentoo update for rgmanager
http://secunia.com/advisories/46498/

SUSE update for krb5
http://secunia.com/advisories/46546/

Gentoo update for cyrus-imapd
http://secunia.com/advisories/46530/

Oracle AutoVue ActiveX Control Insecure Method Vulnerabilities
http://secunia.com/advisories/46473/

Cyclope Internet Filtering Proxy Request Processing Denial of Service Vulnerability
http://secunia.com/advisories/46556/

Toshiba E-Studio Multifunction Printers Management Interface Security Bypass Vulnerability
http://secunia.com/advisories/46408/

Linux Kernel ext4 Extent Splitting Denial of Service Vulnerability
http://secunia.com/advisories/46489/

TYPO3 PMK SlimBox Extension Cross-Site Scripting and File Disclosure Vulnerabilities
http://secunia.com/advisories/46437/

TYPO3 PMK Shadowbox Extension Cross-Site Scripting and File Disclosure Vulnerabilities
http://secunia.com/advisories/46499/

Debian update for kfreebsd-8
http://secunia.com/advisories/46564/

Jara "id" SQL Injection Vulnerability
http://secunia.com/advisories/46493/

OpenEMR Multiple SQL Injection Vulnerabilities
http://secunia.com/advisories/46560/

WordPress Chennai Theme "s" Cross-Site Scripting Vulnerability
http://secunia.com/advisories/46561/

Joomla! Freestyle FAQs and Testimonials Components Unspecified SQL Injection Vulnerability
http://secunia.com/advisories/46573/

Gentoo update for xorg-server
http://secunia.com/advisories/46496/

LOCAL: Cytel Studio 9.0 (CY3 File) Stack Buffer Overflow
http://www.exploit-db.com/exploits/18027

DoS/PoC: BlueZone Malformed .zft file Local Denial of Service
http://www.exploit-db.com/exploits/18029

DoS/PoC: zFTP Server "cwd/stat" Remote Denial-of-Service
http://www.exploit-db.com/exploits/18028

McAfee Web Gateway Web Acces Cross Site Scripting Vulnerability
http://www.vupen.com/english/ADV-2011-2220.php

Alcatel-Lucent Instant Communication Suite Cross Site Scripting Issues
http://www.vupen.com/english/ADV-2011-2219.php

Oracle AutoVue AutoVueX ActiveX Multiple Code Execution Vulnerabilities
http://www.vupen.com/english/ADV-2011-2218.php

FreeType Type 1 Fonts Processing Multiple Code Execution Vulnerabilities
http://www.vupen.com/english/ADV-2011-2217.php

PHP Versions Prior to 5.3.7 Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/49241

JBoss Enterprise Application Platform Multiple Vulnerabilities
http://www.securityfocus.com/bid/39710

FreeType 'src/psaux/t1decode.c' Memory Corruption Vulnerability
http://www.securityfocus.com/bid/48619

libpng PNG File Denial Of Service Vulnerability
http://www.securityfocus.com/bid/48618

libpng 'pngerror.c' Off-By-One Error Denial Of Service Vulnerability
http://www.securityfocus.com/bid/48474

libpng Buffer Overflow and Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/48660

Linux Kernel epoll Subsystem 'eventpoll.c' Multiple Local Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/46630

LibTIFF Multiple Buffer Overflow Vulnerabilities
http://www.securityfocus.com/bid/47338

Asterisk Manager Interface Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/46897

Asterisk SIP Authentication Request User Enumeration Weakness
http://www.securityfocus.com/bid/48485

Asterisk Multiple Remote Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/48431

Asterisk Uninitalized Variable SIP Channel Driver Denial of Service Vulnerability
http://www.securityfocus.com/bid/50177

Asterisk UPDTL Packets Buffer Overflow Vulnerabilities
http://www.securityfocus.com/bid/46474

Asterisk Manager Interface Arbitrary Command Execution Security Bypass Vulnerability
http://www.securityfocus.com/bid/47537

Asterisk TCP/TLS Server NULL Pointer Dereference Denial Of Service Vulnerability
http://www.securityfocus.com/bid/46898

QEMU 'scsi_disk_emulate_command()' Function Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/49545

Oracle Database 'CTXSYS.DRVDISP' Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/50199

ClamAV Prior to 0.96.5 Multiple Vulnerabilities
http://www.securityfocus.com/bid/45152

Symantec Veritas Enterprise Administrator Service Multiple Buffer Overflow Vulnerabilities
http://www.securityfocus.com/bid/49014

Symantec Backup Exec for Windows Servers Unauthorized Access Vulnerability
http://www.securityfocus.com/bid/47824

ClamAV Hash Manager Off-By-One Denial of Service Vulnerability
http://www.securityfocus.com/bid/48891

bzip2 'BZ2_decompress' Function Integer Overflow Vulnerability
http://www.securityfocus.com/bid/43331

ClamAV 'vba_read_project_strings()' Double Free Memory Corruption Vulnerability
http://www.securityfocus.com/bid/46470

ClamAV 'find_stream_bounds()' PDF File Processing Denial Of Service Vulnerability
http://www.securityfocus.com/bid/43555

Linux-HA OCF Resource Agents 'LD_LIBRARY_PATH' Multiple Local Privilege Escalation Vulnerabilities
http://www.securityfocus.com/bid/44359

Avahi 'avahi-core/socket.c' Zero Size Packet Denial Of Service Vulnerability
http://www.securityfocus.com/bid/41075

Avahi 'avahi-core/socket.c' NULL UDP Packet Denial Of Service Vulnerability
http://www.securityfocus.com/bid/46446

FreeType Font Document Multiple Memory Corruption Vulnerabilities
http://www.securityfocus.com/bid/50155

Cyrus IMAP Server SIEVE Script Local Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/36296

Cyrus IMAP Server 'index_get_ids()' NULL Pointer Dereference Denial Of Service Vulnerability
http://www.securityfocus.com/bid/49659

Opera Web Browser SVG Layout Memory Corruption Vulnerability
http://www.securityfocus.com/bid/50044

MIT Kerberos Multiple Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/50273

MIT Kerberos krb5-appl FTP Daemon EGID Remote Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/48571

GnuPG 'GPGSM Tool' Certificate Importing Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/41945

Apple QuickTime CVE-2011-0247 H.264 Movie Files Multiple Buffer Overflow Vulnerabilities
http://www.securityfocus.com/bid/49030

Wireshark Lua Script File Arbitrary Code Execution Vulnerability
http://www.securityfocus.com/bid/49528

D-Bus Nested Variants Denial of Service Vulnerability
http://www.securityfocus.com/bid/45377

D-Bus Configuration Insecure Temporary File Creation Vulnerability
http://www.securityfocus.com/bid/48460

D-Bus Message Byte Order Denial of Service Vulnerability
http://www.securityfocus.com/bid/48216

Multiple Cytel Products Remote Buffer Overflow Vulnerabilities
http://www.securityfocus.com/bid/49924

FreeBSD UNIX Domain Socket Local Privilege Escalation Vulnerabiity
http://www.securityfocus.com/bid/49862

Microsoft Windows Kernel 'Win32k.sys' (CVE-2011-1985) Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/49968

SAP Management Console OSExecute Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/50348

Cisco Nexus OS 'section' and 'less' Local Command Injection Vulnerabilities
http://www.securityfocus.com/bid/50347

Alcatel-Lucent OmniTouch 8400 Instant Communications Suite Multiple Input Validation Vulnerabilities
http://www.securityfocus.com/bid/50346

zFTP Server 'cwd/stat' Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/50345

InverseFlow Multiple Cross Site Scripting Vulnerabilities
http://www.securityfocus.com/bid/50344

Linux-PAM 'pam_env' Module Multiple Local Privilege Escalation Vulnerabilities
http://www.securityfocus.com/bid/50343

McAfee Web Gateway Web Access Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/50341

e107 'cmd' Parameter Remote Command Execution Vulnerability
http://www.securityfocus.com/bid/50339

Joomla! Freestyle FAQs and Freestyle Testimonials Components Unspecified SQL Injection Vulnerability
http://www.securityfocus.com/bid/50338

OpenEMR Multiple SQL Injection Vulnerabilities
http://www.securityfocus.com/bid/50336

WordPress ThemeCity 's' Parameter Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/50334

Oracle AutoVue 'AutoVueX.ocx' ActiveX Control 'Export3DBom()' Insecure Method Vulnerability
http://www.securityfocus.com/bid/50333

Oracle AutoVue 'AutoVueX.ocx' ActiveX Control 'ExportEdaBom()' Insecure Method Vulnerability
http://www.securityfocus.com/bid/50332

phpLDAPadmin 0.9.4b 'common.php' Local File Include Vulnerability
http://www.securityfocus.com/bid/50328

24日月曜日、赤口

2011-10-24T10:52:00.000+09:00

+ MySQL Community Server 5.5.17 has been released
http://dev.mysql.com/tech-resources/interviews/thomas-ulin-mysql-55.html
http://dev.mysql.com/doc/refman/5.5/en/news-5-5-17.html

+ Linux kernel 3.0.5, 3.0.6, 3.0.7 released
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.0.5
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.0.6
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.0.7

+ Sudo 1.7.8, 1.8.3 released
http://www.sudo.ws/sudo/news.html
http://www.sudo.ws/sudo/stable.html#1.7.8
http://www.sudo.ws/sudo/stable.html#1.8.3

+ Linux Kernel 'ext4_ext_insert_extent()' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/50322

++ [CPUOct2011] Oracle Critical Patch Update Advisory - October 2011
http://www.oracle.com/technetwork/jp/topics/ojkb155517-518195-ja.html

[ANNOUNCE] Apache OpenWebBeans 1.1.2 release
http://www.apache.org/dyn/closer.cgi/openwebbeans/1.1.2/

Apache Subversion 1.7.1 Released
http://subversion.apache.org/download/#recommended-release

HPSBMP02713 SSRT100651 rev.2 - Replaced by Document ID c03058866 - HPSBMU02716 SSRT100651
https://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?javax.portlet.tpst=ba847bafb2a2d782fcbb0710b053ce01&javax.portlet.prp_ba847bafb2a2d782fcbb0710b053ce01=wsrp-navigationalState%3DdocId%25253Demr_na-c03054543%25257CdocLocale%25253Dja_JP&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken

HPSBMU02716 SSRT100651 rev.1 - HP Data Protector Notebook Extension, Remote Execution of Arbitrary Code
https://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?javax.portlet.tpst=ba847bafb2a2d782fcbb0710b053ce01&javax.portlet.prp_ba847bafb2a2d782fcbb0710b053ce01=wsrp-navigationalState%3DdocId%25253Demr_na-c03058866%25257CdocLocale%25253Dja_JP&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken

HPSBOV02497 SSRT090245 rev.4 - HP TCP/IP Services for OpenVMS Running NTP, Remote Execution of Arbitrary Code, Denial of Service (DoS)
https://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?javax.portlet.tpst=ba847bafb2a2d782fcbb0710b053ce01&javax.portlet.prp_ba847bafb2a2d782fcbb0710b053ce01=wsrp-navigationalState%3DdocId%25253Demr_na-c01961959%25257CdocLocale%25253Dja_JP&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken

HPSBPI02711 SSRT100647 rev.1 - HP MFP Digital Sending Software Running on Windows, Local Information Disclosure
https://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?javax.portlet.tpst=ba847bafb2a2d782fcbb0710b053ce01&javax.portlet.prp_ba847bafb2a2d782fcbb0710b053ce01=wsrp-navigationalState%3DdocId%25253Demr_na-c03052686%25257CdocLocale%25253Dja_JP&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken

FreeBSD 9.0-RC1 released
http://www.freebsd.org/news/newsflash.html#event20111023:01

チャットサポートの一時的な停止につきまして（2011年11月5日）
http://www.trendmicro.co.jp/support/news.asp?id=1668

ペンタセキュリティ、WAFに仮想アプライアンス版を追加
http://itpro.nikkeibp.co.jp/article/NEWS/20111021/371202/?ST=security

TeamSHATTER Security Advisory: SQL Injection Vulnerability in Oracle DROP INDEX for spatial datatype
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00135.html

TeamSHATTER Security Advisory: Database Vault Account Management Vulnerabilites
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00134.html

TeamSHATTER Security Advisory: Buffer Overflow in Oracle Database (CTXSYS.DRVDISP.TABLEFUNC_ASOWN fu
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00133.html

[ MDVSA-2011:158 ] phpmyadmin
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00132.html

VUPEN Security Research - Microsoft Internet Explorer "X-UA-COMPATIBLE" Use-after
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00130.html

[ MDVSA-2011:157 ] freetype2
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00129.html

inCommand Technologies, Inc. Cross-site Scripting Vulnerability
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00131.html

Metasploit 4.1.0 Web UI stored XSS vulnerability
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00128.html

tcpdump and IPv6
http://isc.sans.edu/diary.html?storyid=11872

Oracle Java SE Critical Patch Update
http://isc.sans.edu/diary.html?storyid=11869

Red Hat update for kernel
http://secunia.com/advisories/46543/

Elgg pg/search SQL Injection Vulnerability
http://secunia.com/advisories/46514/

Google Chrome NSS Insecure Library Loading Vulnerability
http://secunia.com/advisories/46471/

GNOME Empathy Nickname Script Insertion Vulnerability
http://secunia.com/advisories/46510/

Network Security Services Insecure Library Loading Vulnerability
http://secunia.com/advisories/46557/

Red Hat update for httpd
http://secunia.com/advisories/46456/

Red Hat update for httpd
http://secunia.com/advisories/46542/

WHMCompleteSolution "templatefile" Local File Inclusion Vulnerability
http://secunia.com/advisories/46312/

Ubuntu update for linux
http://secunia.com/advisories/46539/

Ubuntu update for open-iscsi
http://secunia.com/advisories/46535/

Pre Studio Business Cards Designer "id" SQL Injection Vulnerability
http://secunia.com/advisories/46545/

Joomla! Multiple NoNumber Extensions Local File Inclusion and PHP Code Execution
http://secunia.com/advisories/46459/

SUSE update for ldns
http://secunia.com/advisories/46470/

Debian update for wireshark
http://secunia.com/advisories/46482/

Schneider Electric Products UnitelWay Device Driver Privilege Escalation Vulnerability
http://secunia.com/advisories/46534/

Check Point Products ByteRange Filter Denial of Service Vulnerability
http://secunia.com/advisories/46474/

Ubuntu update for acpid
http://secunia.com/advisories/46540/

Medium severity flaw in QNX Neutrino RTOS
http://securityreason.com/securityalert/8475

MS11-064 TCP/IP Stack Denial of Service
http://securityreason.com/securityalert/8474

MS11-077 .fon Kernel-Mode Buffer Overrun PoC
http://securityreason.com/securityalert/8473

Mozilla Firefox Array.reduceRight() Integer Overflow Exploit
http://securityreason.com/securityalert/8472

HP Onboard Administrator (OA), Remote Unauthorized Access
http://securityreason.com/securityalert/8471

Citect Buffer Overflow in UnitelWay Driver Lets Local Users Gain Elevated Privileges
http://www.securitytracker.com/id/1026234

REMOTE: Oracle AutoVue 20.0.1 AutoVueX ActiveX Control SaveViewStateToFile Vulnerability
http://www.exploit-db.com/exploits/18016

REMOTE: HP Power Manager 'formExportDataLogs' Buffer Overflow
http://www.exploit-db.com/exploits/18015

DoS/PoC: Google Chrome Denial Of Service (DoS)
http://www.exploit-db.com/exploits/18025

DoS/PoC: MS11-077 Win32k Null Pointer De-reference Vulnerability POC
http://www.exploit-db.com/exploits/18024

DoS/PoC: Google Chrome PoC, killing thread
http://www.exploit-db.com/exploits/18019

DoS/PoC: Cyclope Internet Filtering Proxy 4.0 - CEPMServer.exe DoS (Poc)
http://www.exploit-db.com/exploits/18017

Schneider Electric Products UnitelWay Device Driver Local Buffer Overflow
http://www.vupen.com/english/ADV-2011-2216.php

OCS Inventory NG Data Processing Cross Site Scripting Vulnerability
http://www.vupen.com/english/ADV-2011-2215.php

IBM WebSphere Application Server for z/OS WS-Security Vulnerability
http://www.vupen.com/english/ADV-2011-2214.php

Oracle Database Server Database Vault 'DV_ACCTMGR' Privileges Remote Security Bypass Vulnerability
http://www.securityfocus.com/bid/50219

Oracle Database 'CTXSYS.DRVDISP' Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/50199

Oracle Database CVE-2011-3512 SQL Injection Vulnerability
http://www.securityfocus.com/bid/50203

TYPO3 pdf_generator2 Extension Remote Commend Execution and Remote File Disclosure Vulnerabilities
http://www.securityfocus.com/bid/50304

Apache HTTP Server CVE-2011-3192 Denial Of Service Vulnerability
http://www.securityfocus.com/bid/49303

Apache HTTP Server 'mod_proxy' Reverse Proxy Information Disclosure Vulnerability
http://www.securityfocus.com/bid/49957

Red Hat Linux Kernel CVE-2011-3347 VLAN Packets Handling Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/50312

phpMyAdmin Setup Interface Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/50175

phpMyAdmin Tracking Feature Multiple Cross Site Scripting Vulnerabilities
http://www.securityfocus.com/bid/49306

Progea Movicon Multiple Heap Based Buffer Overflow and Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/49605

Cisco TelePresence Video Communication Server 'User-Agent' HTTP Header HTML Injection Vulnerability
http://www.securityfocus.com/bid/50084

Apple iOS Free Type Font Document Multiple Memory Corruption Vulnerabilities
http://www.securityfocus.com/bid/50155

X.Org X11 Local Privilege Escalation Vulnerability and Memory Leak Vulnerability
http://www.securityfocus.com/bid/50002

HP Power Manager 'formExportDataLogs' Buffer Overflow Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/37867

Oracle Java SE CVE-2011-3558 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50242

Oracle Java SE CVE-2011-3548 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50211

Oracle Java SE CVE-2011-3551 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50224

Elgg 'limit' Parameter SQL Injection Vulnerability
http://www.securityfocus.com/bid/50327

SportsPHool 'mainnav' Parameter Remote File Include Vulnerability
http://www.securityfocus.com/bid/50325

Mozilla NSS 'NSS_NoDB_Init()' Insecure Library Loading Arbitrary Code Execution Vulnerability
http://www.securityfocus.com/bid/50324

Empathy 'nickname' Field Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/50323

Linux Kernel 'ext4_ext_insert_extent()' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/50322

Oracle AutoVue 'AutoVueX.ocx' ActiveX Control 'SaveViewStateToFile()' Insecure Method Vulnerability
http://www.securityfocus.com/bid/50321

Opera Web Browser Tree Traversing Use-After-Free Memory Corruption Vulnerability
http://www.securityfocus.com/bid/50320

21日金曜日、先負

2011-10-21T10:47:00.000+09:00

2011/10/20 Samba 3.6.1がリリースされました

http://wiki.samba.gr.jp/mediawiki/index.php?title=%E3%83%A1%E3%82%A4%E3%83%B3%E3%83%9A%E3%83%BC%E3%82%B8

ウイルスバスター2012 プログラムアップデートのお知らせ

http://www.trendmicro.co.jp/support/news.asp?id=1667

UPDATE: Oracle Critical Patch Update Advisory - October 2011

http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html

ソフトウェア等の脆弱性関連情報に関する届出状況

[2011年第3四半期（7月～9月）]

http://www.ipa.go.jp/security/vuln/report/vuln2011q3.html

JVNVU#819894: libpng における sCAL チャンクの処理に脆弱性

http://jvn.jp/cert/JVNVU819894/index.html

JVNVU#707943: Windows プログラムの DLL 読み込みに脆弱性

http://jvn.jp/cert/JVNVU707943/index.html

JVN#44724673: Java Web Start において許可されていないシステムクラスが実行される脆弱性

http://jvn.jp/jp/JVN44724673/index.html

JVNTA11-286A: Apple Mac OS Xにおける複数の脆弱性に対するアップデート

http://jvn.jp/cert/JVNTA11-286A/index.html

JVNTA11-284A: Microsoft 製品における複数の脆弱性に対するアップデート

http://jvn.jp/cert/JVNTA11-284A/index.html

JVNDB-2011-002451 Microsoft Internet Explorer 8 における任意のコードを実行される脆弱性

http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002451.html

JVNDB-2011-002450 Microsoft Internet Explorer 9 における任意のコードを実行される脆弱性

http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002450.html

JVNDB-2011-002449 Microsoft Internet Explorer 6 における任意のコードを実行される脆弱性

http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002449.html

JVNDB-2011-002448 Microsoft Internet Explorer 6 から 8 における任意のコードを実行される脆弱性

http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002448.html

JVNDB-2011-002447 Microsoft Internet Explorer 6 から 9 における任意のコードを実行される脆弱性

http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002447.html

JVNDB-2011-002446 Microsoft Internet Explorer 6 から 9 における任意のコードを実行される脆弱性

http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002446.html

JVNDB-2011-002445 Microsoft Windows XP および Windows Server 2003 の afd.sys における権限昇格の脆弱性

http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002445.html

JVNDB-2011-002444 Microsoft Windows XP および Windows Server 2003 における権限昇格の脆弱性

http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002444.html

JVNDB-2011-002443 Microsoft Forefront UAG の MicrosoftClient.jar における任意のコードを実行される脆弱性

http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002443.html

JVNDB-2011-002442 Microsoft Forefront UAG 2010 におけるクロスサイトスクリプティングの脆弱性

http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002442.html

JVNDB-2011-002441 Microsoft Forefront UAG 2010 におけるクロスサイトスクリプティングの脆弱性

http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002441.html

JVNDB-2011-002440 Microsoft Forefront UAG 2010 における CRLF インジェクションの脆弱性

http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002440.html

JVNDB-2011-002439 Microsoft .NET Framework および Silverlight における任意のコードを実行される脆弱性

http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002439.html

JVNDB-2011-002438 Microsoft Windows のカーネルモードドライバ内にある win32k.sys における権限昇格の脆弱性

http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002438.html

JVNDB-2011-002437 Microsoft Windows の win32k.sys のバッファオーバーフローの脆弱性

http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002437.html

JVNDB-2011-002436 Microsoft Windows の win32k.sys におけるサービス運用妨害 (システムハング) の脆弱性

http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002436.html

JVNDB-2011-002435 Microsoft Windows の win32k.sys における権限昇格またはサービス運用妨害 (DoS) の脆弱性

http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002435.html

JVNDB-2011-002434 Microsoft Windows Vista および Windows 7 の Windows Media Center における権限昇格の脆弱性

http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002434.html

JVNDB-2011-002433 Microsoft Windows の Microsoft Active Accessibility コンポーネントにおける権限昇格の脆弱性

http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002433.html

JVNDB-2011-002432 複数の Microsoft 製品における任意のファイルを読まれる脆弱性

http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002432.html

JVNDB-2011-002431 Microsoft Windows SharePoint Services および SharePoint Foundation におけるクロスサイトスクリプティングの脆弱性

http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002431.html

JVNDB-2011-002430 複数の Microsoft SharePoint 製品の EditForm.aspx におけるクロスサイトスクリプティングの脆弱性

http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002430.html

JVNDB-2011-002429 複数の Microsoft SharePoint 製品におけるクロスサイトスクリプティングの脆弱性

http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002429.html

JVNDB-2011-002428 Microsoft Internet Explorer における任意のコードを実行される脆弱性

http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002428.html

JVNDB-2011-002427 Microsoft Internet Explorer における任意のコードを実行される脆弱性

http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002427.html

JVNDB-2011-002426 Microsoft Host Integration Server におけるサービス運用妨害 (SNA サーバサービスの休止) の脆弱性

http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002426.html

JVNDB-2011-002425 Microsoft Host Integration Server におけるサービス運用妨害 (SNA サーバサービスの休止) の脆弱性

http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002425.html

JVNDB-2011-002424 Apple iTunes で使用される CoreMedia におけるバッファオーバーフローの脆弱性

http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002424.html

JVNDB-2011-002423 Apple iTunes で使用される WebKit における任意のコードを実行される脆弱性

http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002423.html

JVNDB-2011-002422 Apple iTunes で使用される WebKit における任意のコードを実行される脆弱性

http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002422.html

JVNDB-2011-002421 Apple iTunes で使用される WebKit における任意のコードを実行される脆弱性

http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002421.html

JVNDB-2011-002420 Apple iTunes で使用される WebKit における任意のコードを実行される脆弱性

http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002420.html

JVNDB-2011-002419 Apple iTunes で使用される WebKit における任意のコードを実行される脆弱性

http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002419.html

JVNDB-2011-002418 Apple iTunes で使用される WebKit における任意のコードを実行される脆弱性

http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002418.html

JVNDB-2011-002417 Apple iTunes で使用される WebKit における任意のコードを実行される脆弱性

http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002417.html

JVNDB-2011-002416 Apple iTunes で使用される WebKit における任意のコードを実行される脆弱性

http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002416.html

JVNDB-2011-002415 Apple iTunes で使用される WebKit における任意のコードを実行される脆弱性

http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002415.html

JVNDB-2011-002414 Apple iTunes で使用される WebKit における任意のコードを実行される脆弱性

http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002414.html

JVNDB-2011-002413 Apple iTunes で使用される WebKit における任意のコードを実行される脆弱性

http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002413.html

JVNDB-2011-002412 複数の Microsoft SharePoint 製品におけるクロスサイトスクリプティングの脆弱性

http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002412.html

JVNDB-2011-002411 Microsoft Office 2003 および 2007 における権限昇格の脆弱性

http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002411.html

JVNDB-2011-002410 Microsoft Office 2007 および 2010 における任意のコードを実行される脆弱性

http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002410.html

JVNDB-2011-002409 Windows Server 2003 および 2008 の WINS における権限昇格の脆弱性

http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002409.html

JVNDB-2011-002408 Microsoft Excel 2003 における任意のコードを実行される脆弱性

http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002408.html

JVNDB-2011-002407 複数の Microsoft Excel 製品における任意のコードを実行される脆弱性

http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002407.html

JVNDB-2011-002406 複数の Microsoft Excel 製品における任意のコードを実行される脆弱性

http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002406.html

JVNDB-2011-002405 複数の Microsoft Excel 製品における任意のコードを実行される脆弱性

http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002405.html

JVNDB-2011-002404 複数の Microsoft Excel 製品における任意のコードを実行される脆弱性

http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002404.html

JVNDB-2011-002403 Microsoft Windows における権限昇格の脆弱性

http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002403.html

JVNDB-2011-002402 Adobe Reader および Acrobat における任意のコードを実行される脆弱性

http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002402.html

JVNDB-2011-002401 Adobe Reader および Acrobat の CoolType.dll におけるスタックベースのバッファオーバーフローの脆弱性

http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002401.html

JVNDB-2011-002400 Adobe Reader および Acrobat における任意のコードを実行される脆弱性

http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002400.html

JVNDB-2011-002399 Adobe Reader および Acrobat における任意のコードを実行される脆弱性

http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002399.html

Independant Researcher : Django - Multiple Issues

http://www.criticalwatch.com/support/security-advisories.aspx?AID=36928

Red Hat : [RHSA-2011:1379-01] krb5 - Denial-Of-Service Issue

http://www.criticalwatch.com/support/security-advisories.aspx?AID=36924

Red Hat : [RHSA-2011:1380-01] java-1.6.0-openjdk - Multiple Issues

http://www.criticalwatch.com/support/security-advisories.aspx?AID=36925

Red Hat : [RHSA-2011:1384-01] java-1.6.0-sun - Multiple Issues

http://www.criticalwatch.com/support/security-advisories.aspx?AID=36926

Red Hat : QEMU - Buffer Overflow Issue

http://www.criticalwatch.com/support/security-advisories.aspx?AID=36927

Cisco : [cisco-sa-20111019-sns] Cisco Show and Share - Multiple Issues

http://www.criticalwatch.com/support/security-advisories.aspx?AID=36929

New Flash Click Jacking Exploit

http://isc.sans.edu/diary.html?storyid=11857

JBoss Worm

http://isc.sans.edu/diary.html?storyid=11860

Check Point UTM-1 Edge / Safe@Office WebUI Multiple Vulnerabilities

http://secunia.com/advisories/46486/

DoS/Poc: Opera ＜= 11.51 Use After Free Crash PoC

http://www.exploit-db.com/exploits/18014

HP Power Manager 'formExportDataLogs' Buffer Overflow Remote Code Execution Vulnerability

http://www.securityfocus.com/bid/37867

Oracle Java SE CVE-2011-3558 Remote Java Runtime Environment Vulnerability

http://www.securityfocus.com/bid/50242

Oracle Java SE CVE-2011-3548 Remote Java Runtime Environment Vulnerability

http://www.securityfocus.com/bid/50211

Oracle Java SE CVE-2011-3551 Remote Java Runtime Environment Vulnerability

http://www.securityfocus.com/bid/50224

+ Samba 3.6.1 Available for Download
http://www.samba.org/samba/history/samba-3.6.1.html
http://www.samba.org/samba/history/

+ Important: kernel security, bug fix, and enhancement update
http://rhn.redhat.com/errata/RHSA-2011-1386.html

+ Moderate: httpd security and bug fix update
http://rhn.redhat.com/errata/RHSA-2011-1392.html

+ Linux Kernel 'taskstats' Access Restriction Local Security Bypass Vulnerability
http://www.securityfocus.com/bid/50314
http://www.redhat.com/security/data/cve/CVE-2011-2494.html

+ Linux Kernel 'clock_gettime()' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/50311

- Linux Kernel EXT4 Extent Format File Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/48697

RHSA-2011:1391 Moderate: httpd security and bug fix update
http://rhn.redhat.com/errata/RHSA-2011-1391.html

CESA-2011:1380 (java-1.6.0-openjdk)
http://lwn.net/Alerts/463927/

CESA-2011:1385 (kdelibs)
http://lwn.net/Alerts/463929/

[SECURITY] [DSA 2324-1] wireshark security update
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00127.html

GotRoot Security Challenge
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00126.html

[security bulletin] HPSBPI02711 SSRT100647 rev.1 - HP MFP Digital Sending Software Running on Wi
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00120.html

OCS Inventory NG 2.0.1 Persistent XSS (CVE-2011-4024)
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00125.html

Oracle DataDirect Multiple Native Wire Protocol ODBC Drivers HOST Attribute Stack Based Buffer Overf
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00124.html

Yet Another CMS 1.0 SQL Injection & XSS vulnerabilities
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00119.html

Cisco Security Advisory: CiscoWorks Common Services Arbitrary Command Execution Vulnerability
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00118.html

Cisco Security Advisory: Cisco Show and Share Security Vulnerabilities
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00117.html

[security bulletin] HPSBMU02716 SSRT100651 rev.1 - HP Data Protector Notebook Extension, Remote
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00123.html

Multiple vulnerabilities in Tine 2.0
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00122.html

ZDI-11-295 : Apple QuickTime FlashPix JPEG Tables Selector Remote Code Execution Vulnerabili
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00116.html

DNS Poisoning via Port Exhaustion
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00121.html

[ GLSA 201110-13 ] Tor: Multiple vulnerabilities
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00115.html

MITKRB5-SA-2011-006 KDC denial of service vulnerabilities [CVE-2011-1527 CVE-
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00114.html

Critical Control 13: Limitation and Control of Network Ports, Protocols, and Services
http://isc.sans.edu/diary.html?storyid=11845

Evil Printers Sending Mail
http://isc.sans.edu/diary.html?storyid=11848

IBM WebSphere Application Server for z/OS JAX-WS Applications Unspecified Vulnerability
http://secunia.com/advisories/46469/

KaiBB Cross-Site Scripting and SQL Injection Vulnerabilities
http://secunia.com/advisories/45311/

wizmall "BID" and "UID" SQL Injection Vulnerabilities
http://secunia.com/advisories/46440/

wizmall Two File Disclosure Vulnerabilities
http://secunia.com/advisories/46484/

Splunk Cross-Site Scripting and Denial of Service Vulnerabilities
http://secunia.com/advisories/46462/

Fedora update for java-1.6.0-openjdk
http://secunia.com/advisories/46538/

Honeywell EBI Temaline Remote Installer ActiveX Control "DownloadURL()" Insecure Method
http://secunia.com/advisories/46497/

Fedora update for tomcat6
http://secunia.com/advisories/46537/

HP MFP Digital Sending Software Workflow Metadata Information Disclosure Weakness
http://secunia.com/advisories/46532/

CiscoWorks Common Services Home Page Component Command Injection Vulnerability
http://secunia.com/advisories/46533/

Cisco Show and Share Security Bypass Security Issue and File Upload Vulnerability
http://secunia.com/advisories/46465/

Red Hat update for krb5
http://secunia.com/advisories/46480/

Red Hat update for java-1.6.0-sun
http://secunia.com/advisories/46490/

Simple PHP Forum Script "id" SQL Injection Vulnerability
http://secunia.com/advisories/46485/

Microsoft Internet Explorer DOM Modification Race Code Execution Vulnerability
http://www.securiteam.com/windowsntfocus/6O03H002UW.html

Microsoft Internet Explorer layout-grid-char style Code Execution Vulnerability
http://www.securiteam.com/windowsntfocus/6P03I002UQ.html

Lotus Notes XLS viewer malformed BIFF record heap overflow Vulnerability
http://www.securiteam.com/windowsntfocus/6T03M002UC.html

7T Interactive Graphical SCADA System Memory Corruption Vulnerability
http://www.securiteam.com/securitynews/6S03L002US.html

Oracle Java ICC Profile Multi-Language 'curv' Tag Parsing Code Execution Vulnerability
http://www.securiteam.com/securitynews/6R03K002US.html

Oracle Java ICC Profile 'bfd ' Tag Parsing Code Execution Vulnerability
http://www.securiteam.com/securitynews/6Q03J002UU.html

Avaya Identity Engines Ignition Server Remote Code Execution Vulnerability
http://www.vupen.com/english/ADV-2011-2213.php

MIT Kerberos Packets Processing Remote Denial of Service Vulnerabilities
http://www.vupen.com/english/ADV-2011-2212.php

HP MFP Digital Sending Software Local Information Disclosure
http://www.vupen.com/english/ADV-2011-2211.php

Novell ZENworks Configuration Management Multiple Vulnerabilities
http://www.vupen.com/english/ADV-2011-2210.php

Novell ZENworks Handheld Management Code Execution and Dir Traversal
http://www.vupen.com/english/ADV-2011-2209.php

Cisco Show and Share Unauthorized Access and Code Execution
http://www.vupen.com/english/ADV-2011-2208.php

Cisco CiscoWorks Common Services Command Execution Vulnerability
http://www.vupen.com/english/ADV-2011-2207.php

Oracle Java Multiple Remote Code Execution and Security Bypass
http://www.vupen.com/english/ADV-2011-2206.php

Oracle and Sun Products Multiple Code Execution and Security Bypass
http://www.vupen.com/english/ADV-2011-2205.php

DoS/PoC: UnrealIRCd 3.2.8.1 Local Configuration Stack Overflow
http://www.exploit-db.com/exploits/18011

DoS/PoC: Opera ＜= 11.52 Stack Overflow
http://www.exploit-db.com/exploits/18008

DoS/PoC: Oracle DataDirect Multiple Native Wire Protocol ODBC Drivers HOST Attribute Stack Based Buffer Overflow
http://www.exploit-db.com/exploits/18007

DoS/PoC: Opera ＜= 11.52 PoC Denial of Service
http://www.exploit-db.com/exploits/18006

SUSE Linux 'scsi_discovery tool' Insecure Temporary File Creation Vulnerability
http://www.securityfocus.com/bid/36887

Linux Kernel '/proc/PID/io' Local Information Disclosure Vulnerability
http://www.securityfocus.com/bid/49408

Linux Kernel TCP Sequence Number Generation Security Weakness
http://www.securityfocus.com/bid/49289

Linux Kernel SCTP INIT/INIT-ACK Chunk Length Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/47308

Linux Kernel Auerswald USB Device Driver Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/48687

Wireshark Lua Script File Arbitrary Code Execution Vulnerability
http://www.securityfocus.com/bid/49528

acpid Multiple Local Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/45915

Linux Kernel 'CIFSFindNext()' Function Denial of Service Vulnerability
http://www.securityfocus.com/bid/49295

Xen DMA Requests IOMMU Denial of Service Vulnerability
http://www.securityfocus.com/bid/49146

Linux Kernel Generic Receive Offload (GRO) CVE-2011-2723 Denial of Service Vulnerability
http://www.securityfocus.com/bid/48929

Linux Kernel eCryptfs Multiple Vulnerabilities
http://www.securityfocus.com/bid/49108

Linux Kernel 'taskstats.c' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/48383

Linux Kernel CIFS Local Security Bypass Vulnerability
http://www.securityfocus.com/bid/47381

Linux Kernel 'mremap()' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/47321

Linux Kernel IPv6 Fragment Identification Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/48802

Linux Kernel 'drivers/char/tpm/tpm.c' Information Disclosure Vulnerability
http://www.securityfocus.com/bid/46866

Linux Kernel EXT4 Extent Format File Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/48697

Apache HTTP Server CVE-2011-3348 Denial Of Service Vulnerability
http://www.securityfocus.com/bid/49616

Apache HTTP Server 'mod_proxy' Reverse Proxy Information Disclosure Vulnerability
http://www.securityfocus.com/bid/49957

Oracle Java SE CVE-2011-3544 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50218

Oracle Java SE CVE-2011-3521 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50215

SSL/TLS Protocol Initialization Vector Implementation Information Disclosure Vulnerability
http://www.securityfocus.com/bid/49778

Oracle Java SE CVE-2011-3552 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50248

Oracle Java SE CVE-2011-3557 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50234

Oracle Java SE CVE-2011-3547 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50243

Oracle Java SE CVE-2011-3560 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50236

Oracle Java SE CVE-2011-3554 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50216

Oracle Java SE CVE-2011-3556 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50231

OCS Inventory NG Unspecified HTML Injection Vulnerability
http://www.securityfocus.com/bid/50011

Oracle Java SE CVE-2011-3551 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50224

KDE KSSL Common Name SSL Certificate Spoofing Vulnerability
http://www.securityfocus.com/bid/49925

Apache Tomcat 'sendfile' Request Attributes Information Disclosure Vulnerability
http://www.securityfocus.com/bid/48667

Apache Tomcat AJP Protocol Security Bypass Vulnerability
http://www.securityfocus.com/bid/49353

Apache Tomcat NIO Connector Denial of Service Vulnerability
http://www.securityfocus.com/bid/46164

Apache Tomcat SecurityManager Security Bypass Vulnerability
http://www.securityfocus.com/bid/46177

Apache Tomcat 'MemoryUserDatabase' Information Disclosure Vulnerability
http://www.securityfocus.com/bid/48456

Apache Tomcat HTML Manager Interface HTML Injection Vulnerability
http://www.securityfocus.com/bid/46174

ldns 'rr.c' Remote Heap Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/49748

Oracle Java SE CVE-2011-3548 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50211

Oracle Java SE CVE-2011-3558 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50242

Mozilla Firefox/SeaMonkey CVE-2011-2993 Security Bypass Vulnerability
http://www.securityfocus.com/bid/49248

Mozilla Firefox and Thunderbird CVE-2011-2991 JavaScript Memory-Corruption Vulnerabiility
http://www.securityfocus.com/bid/49243

Cyclope Internet Filtering Proxy 'user' HTML Injection Vulnerability
http://www.securityfocus.com/bid/50317

MetaSploit Framework 'project[name]' Field HTML Injection Vulnerability
http://www.securityfocus.com/bid/50315

Linux Kernel 'taskstats' Access Restriction Local Security Bypass Vulnerability
http://www.securityfocus.com/bid/50314

Red Hat Linux Kernel Ethernet Bridge Interface Denial of Service Vulnerability
http://www.securityfocus.com/bid/50313

Red Hat Linux Kernel CVE-2011-3347 VLAN Packets Handling Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/50312

Linux Kernel 'clock_gettime()' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/50311

IBM WebSphere Application Server JAX-WS Unspecified Vulnerability
http://www.securityfocus.com/bid/50310

PreProjects Pre Studio Business Cards Designer 'page.php' SQL Injection Vulnerability
http://www.securityfocus.com/bid/50309

Skype Technologies Skype Client for Windows File Transfer Remote Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/50308

Tine Multiple Cross Site Scripting Vulnerabilities
http://www.securityfocus.com/bid/50307

TYPO3 pmkshadowbox and pmkslimbox Cross Site Scripting and Arbitrary File Download Vulnerabilities
http://www.securityfocus.com/bid/50306

Oracle DataDirect Multiple Native Wire Protocol ODBC Driver Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/50305

TYPO3 pdf_generator2 Extension Remote Commend Execution and Remote File Disclosure Vulnerabilities
http://www.securityfocus.com/bid/50304

Novell ZENworks Handheld Management Multiple Unspecified Remote Code Execution Vulnerabilities
http://www.securityfocus.com/bid/50303

wizmall Multiple SQL Injection Vulnerabilities
http://www.securityfocus.com/bid/50302

osCommerce Remote File Upload and File Disclosure Vulnerabilities
http://www.securityfocus.com/bid/50301

wizmall Multiple Remote File Disclosure Vulnerabilities
http://www.securityfocus.com/bid/50300

KaiBB SQL Injection and Cross Site Scripting Vulnerabilities
http://www.securityfocus.com/bid/50299

Splunk Web component Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/50298

Splunk 'segment' Parameter Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/50296

Innovate Portal 'cat' Parameter Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/50295

CMS Mini 'name' Parameter Directory Traversal Vulnerability
http://www.securityfocus.com/bid/50294

Uiga Personal Portal SQL Injection and Cross Site Scripting Vulnerabilities
http://www.securityfocus.com/bid/50293

Simple Free PHP Forum Script 'index.php' SQL Injection Vulnerability
http://www.securityfocus.com/bid/50292

fims File Management System 'password' Parameter SQL Injection Vulnerability
http://www.securityfocus.com/bid/50291

fims File Management System 'f' Parameter Arbitrary File Download Vulnerability
http://www.securityfocus.com/bid/50290

OpenEMR 'add_edit_issue.php' SQL Injection Vulnerability
http://www.securityfocus.com/bid/50289

20日木曜日、友引

2011-10-20T10:08:00.000+09:00

ウイルスバスター2011 プログラムアップデートのお知らせ
http://www.trendmicro.co.jp/support/news.asp?id=1665

1. 2011年第3四半期脆弱性対策情報データベース JVN iPediaの登録状況（総括）
http://www.ipa.go.jp/security/vuln/report/JVNiPedia2011q3.html

WEB FORUM におけるクロスサイトスクリプティングの脆弱性
http://jvn.jp/jp/JVN80971236/

JVN#89764731: WEB FORUM におけるクロスサイトスクリプティングの脆弱性
http://jvn.jp/jp/JVN89764731/

WEB FORUM におけるクロスサイトスクリプティングの脆弱性
http://www.jpcert.or.jp/

Critical Control 13: Limitation and Control of Network Ports, Protocols, and Services
http://isc.sans.edu/diary.html?storyid=11845

Evil Printers Sending Mail
http://isc.sans.edu/index.html

HP MFP Digital Sending Software Lets Local Users Obtain Potentially Sensitive Information
http://www.securitytracker.com/id/1026228

++ Microsoft Windows Local DNS Cache Poisoning Vulnerabilities
http://www.securityfocus.com/bid/50281

+ Moderate: kdelibs and kdelibs3 security update
http://rhn.redhat.com/errata/RHSA-2011-1385.html

DHCP 4.2.3 released
https://www.isc.org/software/dhcp/423

HPSBNS02701 SSRT100598 rev.1 - HP NonStop Servers running Samba, Remote Denial of Service (DoS), Unauthorized Disclosure of Information, Unauthorized Modification, Unauthorized Access to Files, Cross Site Scripting (XSS)
https://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?javax.portlet.tpst=ba847bafb2a2d782fcbb0710b053ce01&javax.portlet.prp_ba847bafb2a2d782fcbb0710b053ce01=wsrp-navigationalState%3DdocId%25253Demr_na-c03008543%25257CdocLocale%25253Dja_JP&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken

NTP 4.2.6p5-RC1 released
http://support.ntp.org/bin/view/Main/SoftwareDownloads
http://archive.ntp.org/ntp4/ChangeLog-stable-rc

ウイルスバスターモバイル for Androidでオンラインユーザ登録が行えない現象について
http://www.trendmicro.co.jp/support/news.asp?id=1666

Trend Micro ServerProtect for NetApp 5.8 Patch 1 公開のお知らせ
http://www.trendmicro.co.jp/support/news.asp?id=1664

UPDATE: Oracle Critical Patch Update Advisory - October 2011
http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html

HS11-023: Multiple vulnerabilities were found in JP1/Cm2/Network Node Manager i.
http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS11-023/index.html

UPDATE: HS11-019: Hitachi Web ServerにおけるRangeヘッダによるDoS脆弱性
http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/HS11-019/index.html

Independant Researcher : Dolphin - PHP Code Injection Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36922

Independant Researcher : Site () School - SQL Injection & Cross-site Scripting Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36923

Mandriva : [MDVSA-2011:156] tomcat5 - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36914

Positive Technologies : [PT-2011-14] BoonEx Dolphin - SQL Injection Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36921

Red Hat : [RHSA-2011:1377-01] postgresql - Authentication Bypass Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36917

Red Hat : [RHSA-2011:1378-01] postgresql84 - Authentication Bypass Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36918

SuSE : [SUSE-SA:2011:041] Linux - kernel - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36919

Ubuntu Security Notice : [USN-1231-1] PHP - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36920

Gentoo Linux : [GLSA 201110-13] Tor - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36913

Independant Researcher : [JVNDB-2011-000085]- DAEMON Tools IOCTL - Denial-Of-Service Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36903

Independant Researcher : Java - DNS Poisoning Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36912

Independant Researcher : X.Org - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36915

Mandriva : [MDVSA-2011:155] SystemTap - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36905

Mandriva : [MDVSA-2011:154] SystemTap - Denial-Of-Service Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36907

Mandriva : [MDVSA-2011:153] libxfont - Buffer Overflow Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36908

Mandriva : [MDVSA-2011:152] ncompress - Integer Underflow Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36909

Mandriva : [MDVSA-2011:151] libpng - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36910

ZDI : [ZDI-11-295] Apple - QuickTime - Code Execution Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36916

Asterisk : [AST-2011-012] Asterisk - Denial-Of-Service Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36904

Independant Researcher : [foofus-20111016] Toshiba - EStudio Multifunction Printer - Authentication Bypass Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36901

Independant Researcher : WordPress - Simple:Press Forum - Code Execution and Full Path Disclosure Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36906

Mandriva : [MDVSA-2011:149] Cyrus IMAP Server - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36885

Mandriva : [MDVSA-2011:150] squid - Denial-Of-Service Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36891

Sense of Security : [SOS-11-012] WordPress - BackWPUp plugin - Code Execution Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36890

Slackware Linux : [SSA:2011-284-01] Slackware - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36882

Gentoo Linux : [GLSA 201110-12] Unbound - Multiple Denial-Of-Service Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36892

Red Hat : [RHSA-2011:1371-01] Pidgin - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36883

Red Hat : [RHSA-2011:1369-01] httpd - Excessive Memory Usage Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36884

Ubuntu Security Notice : [USN-1230-1] Quassel - Information Disclosure Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36881

ZDI : [ZDI-11-290] Microsoft - Internet Explorer - Code Execution Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36886

ZDI : [ZDI-11-289] Microsoft - Internet Explorer - Code Execution Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36887

ZDI : [ZDI-11-288] Microsoft - Internet Explorer - Code Execution Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36888

ZDI : [ZDI-11-287] Microsoft - Internet Explorer - Code Execution Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36889

Gentoo Linux : [GLSA 201110-08] feh - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36893

Gentoo Linux : [GLSA 201110-09] Conky - Privilege Escalation Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36894

Gentoo Linux : [GLSA 201110-10] GNU Wget - File Overwrite Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36895

Gentoo Linux : [GLSA 201110-11] Adobe - Flash Player - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36896

Facebookのパスワードが1万件以上流出の恐れ、真偽は未確認
パスワードの使い回しは禁物、サービスごとに変更を
http://itpro.nikkeibp.co.jp/article/NEWS/20111020/371101/?ST=security

JPCERT/CC WEEKLY REPORT
http://www.jpcert.or.jp/wr/2011/wr114001.html

The old new Stuxnet...DuQu?
http://isc.sans.edu/diary.html?storyid=11836

Oracle Critical Patch Update
http://isc.sans.edu/diary.html?storyid=11839

Cisco Show and Share Lets Remote Users Access Some Administrative Pages and Remote Authenticated Users Execute Arbitrary Code
http://www.securitytracker.com/id/1026227

CiscoWorks Common Services Home Page Input Validation Flaw Lets Remote Users Execute Arbitrary Commands
http://www.securitytracker.com/id/1026226

Oracle OpenSSO Bugs Let Remote Users Deny Service and Partially Access Data
http://www.securitytracker.com/id/1026225

Oracle Communications Unified Communications Suite Lets Local Users Gain Elevated Privileges
http://www.securitytracker.com/id/1026224

Oracle Waveset User Administration Bug Lets Remote Users Partially Access and Modify Data and Partially Deny Service
http://www.securitytracker.com/id/1026223

Sun GlassFish Enterprise Server Web Container Bug Lets Remote Users Deny Service
http://www.securitytracker.com/id/1026222

Microsoft Publisher 'Pubconv.dll' Memory Corruption Error Lets Remote Users Execute Arbitrary Code
http://www.securitytracker.com/id/1026220

Oracle Java Runtime Environment (JRE) Lets Remote Users Decrypt SSL/TLS Traffic
http://www.securitytracker.com/id/1026216

Oracle Java Runtime Environment (JRE) Multiple Flaws Let Remote Users Execute Arbitrary Code and Deny Service
http://www.securitytracker.com/id/1026215

Kerberos KDC Null Pointer Dereference Bugs Let Remote Users Deny Service
http://www.securitytracker.com/id/1026213

Check Point Safe@Office Input Validation Flaws Permits Cross-Site Scripting and Cross-Site Request Forgery Attacks
http://www.securitytracker.com/id/1026212

Solaris Lets Remote Users Gain Full Control and Local Users Access and Modify Data and Deny Service
http://www.securitytracker.com/id/1026211

Sun Ray Authentication Component Flaw Lets Remote Users Partially Access and Modify Data and Cause Partial Denail of Service Conditions
http://www.securitytracker.com/id/1026210

Oracle Linux Lets Remote Authenticated Users Partially Access and Modifiy Data
http://www.securitytracker.com/id/1026209

Oracle Health Sciences Industry Applications Bugs Let Remote Users Partially Modify Data
http://www.securitytracker.com/id/1026207

Ubuntu update for krb5
http://secunia.com/advisories/46488/

Oracle Integrated Lights Out Manager Information Disclosure Vulnerability
http://secunia.com/advisories/46509/

Moodle Multiple Vulnerabilities
http://secunia.com/advisories/46427/

Oracle OpenSSO Two Vulnerabilities
http://secunia.com/advisories/46527/

Oracle OpenSSO Data Manipulation Vulnerability
http://secunia.com/advisories/46528/

Novell ZENworks Configuration Management AdminStudio ActiveX Controls Vulnerabilities
http://secunia.com/advisories/46466/

Kerberos KDC Multiple Denial of Service Vulnerabilities
http://secunia.com/advisories/46494/

Oracle Communications Unified Two Vulnerabilities
http://secunia.com/advisories/46526/

Yet Another CMS Two SQL Injection Vulnerabilities
http://secunia.com/advisories/46483/

Ubuntu update for xorg-server
http://secunia.com/advisories/46495/

Red Hat update for java-1.6.0-openjdk
http://secunia.com/advisories/46481/

Dolphin "eval()" PHP Code Execution Vulnerability
http://secunia.com/advisories/46457/

Dolphin "iIDcat" SQL Injection Vulnerability
http://secunia.com/advisories/46500/

Oracle Waveset User Administration Vulnerability
http://secunia.com/advisories/46525/

Oracle Solaris Multiple Vulnerabilities
http://secunia.com/advisories/46522/

Oracle Sun Java System Application Server Denial of Service Vulnerability
http://secunia.com/advisories/46524/

Oracle Glassfish Products Denial of Service Vulnerability
http://secunia.com/advisories/46523/

Oracle WebLogic Server Information Disclosure and Privilege Escalation Vulnerabilities
http://secunia.com/advisories/46520/

Oracle WebLogic Portal Unspecified Vulnerability
http://secunia.com/advisories/46519/

Oracle Outside In Technology Denial of Service Weakness
http://secunia.com/advisories/46518/

Oracle Business Intelligence BI Platform Security Unspecified Vulnerability
http://secunia.com/advisories/46517/

Oracle Application Server Multiple Vulnerabilities
http://secunia.com/advisories/46516/

Oracle JRockit Multiple Vulnerabilities
http://secunia.com/advisories/46521/

Oracle Java SE Multiple Vulnerabilities
http://secunia.com/advisories/46512/

Sun Ray Server Software Authentication Unspecified Vulnerability
http://secunia.com/advisories/46511/

Gentoo update for tor
http://secunia.com/advisories/46472/

SUSE update for gimp
http://secunia.com/advisories/46479/

Fedora update for awstats
http://secunia.com/advisories/46478/

Fedora update for ldns
http://secunia.com/advisories/46476/

Fedora update for quagga
http://secunia.com/advisories/46475/

Oracle PeopleSoft Enterprise Human Resource Management System Multiple Vulnerabilities
http://secunia.com/advisories/46505/

Oracle PeopleSoft PeopleTools Two Vulnerabilities
http://secunia.com/advisories/46515/

Oracle Agile PLM for Process Information Disclosure Vulnerability
http://secunia.com/advisories/46507/

Oracle Siebel CRM Three Vulnerabilities
http://secunia.com/advisories/46506/

Oracle E-Business Suite Multiple Vulnerabilities
http://secunia.com/advisories/46504/

Oracle Remote Data Capture RDC Help Data Manipulation Vulnerability
http://secunia.com/advisories/46508/

Oracle Thesaurus Management System TMS Help Data Manipulation Vulnerability
http://secunia.com/advisories/46513/

Oracle Database Multiple Vulnerabilities
http://secunia.com/advisories/46502/

X.Org xserver File Locking Weakness and Security Issue
http://secunia.com/advisories/46460/

Avaya Identity Engines Ignition Server GIOP Processing Security Bypass Vulnerability
http://secunia.com/advisories/46501/

Avaya Identity Engines Ignition Server GIOP Processing Security Bypass Vulnerability
http://secunia.com/advisories/46492/

Mozilla Firefox/SeaMonkey CVE-2011-2990 Information Disclosure and Security Bypass Vulnerabilities
http://www.securityfocus.com/bid/49246

Mozilla Firefox, SeaMonkey, and Thunderbird CVE-2011-2987 Heap Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/49226

Mozilla Firefox, SeaMonkey, and Thunderbird CVE-2011-2988 Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/49242

Mozilla Firefox/Thunderbird/SeaMonkey CVE-2011-0084 Remote Memory Corruption Vulnerability
http://www.securityfocus.com/bid/49213

Mozilla Firefox and Thunderbird CVE-2011-2989 WebGL Memory-Corruption Vulnerabiility
http://www.securityfocus.com/bid/49239

Mozilla Firefox/Thunderbird/SeaMonkey CVE-2011-2985 Multiple Memory Corruption Vulnerabilities
http://www.securityfocus.com/bid/49224

Oracle Java SE CVE-2011-3555 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50237

Oracle Java SE CVE-2011-3549 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50223

Oracle Java SE CVE-2011-3545 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50220

Oracle Java SE CVE-2011-3550 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50226

Oracle Java SE CVE-2011-3552 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50248

Oracle Java SE CVE-2011-3557 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50234

Oracle Java SE CVE-2011-3556 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50231

KDE KSSL Common Name SSL Certificate Spoofing Vulnerability
http://www.securityfocus.com/bid/49925

Oracle Java SE CVE-2011-3546 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50239

Oracle Java SE CVE-2011-3561 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50250

Oracle Java SE CVE-2011-3547 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50243

Oracle Java SE CVE-2011-3516 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50229

Oracle Java SE CVE-2011-3553 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50246

Oracle Java SE CVE-2011-3558 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50242

Oracle Java SE CVE-2011-3551 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50224

Oracle Java SE CVE-2011-3548 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50211

Oracle Java SE CVE-2011-3554 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50216

Oracle Java SE CVE-2011-3560 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50236

Oracle Java SE CVE-2011-3544 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50218

Oracle Java SE CVE-2011-3521 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50215

SSL/TLS Protocol Initialization Vector Implementation Information Disclosure Vulnerability
http://www.securityfocus.com/bid/49778

MIT Kerberos Multiple Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/50273

Oracle Java SE and Java for Business CVE-2010-4448 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/46398

FreeBSD UNIX Domain Socket Local Privilege Escalation Vulnerabiity
http://www.securityfocus.com/bid/49862

Tor Multiple Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/45953

Tor Unspecified Buffer Overflow, Denial of Service and Information Disclosure Vulnerabilities
http://www.securityfocus.com/bid/45832

Tor Directory Authority 'src/or/policies.c' Denial of Service Vulnerability
http://www.securityfocus.com/bid/46618

Apache Tomcat 'MemoryUserDatabase' Information Disclosure Vulnerability
http://www.securityfocus.com/bid/48456

Apache Tomcat AJP Protocol Security Bypass Vulnerability
http://www.securityfocus.com/bid/49353

AWStats 'awredir.pl' Multiple Cross-Site Scripting Vulnerabilities
http://www.securityfocus.com/bid/49749

ldns 'rr.c' Remote Heap Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/49748

Quagga Multiple Remote Security Vulnerabilities
http://www.securityfocus.com/bid/49784

OpenOffice Microsoft Word File Format Importer Multiple Unspecified Security Vulnerabilities
http://www.securityfocus.com/bid/49969

Opera Web Browser Information Disclosure and Unspecified Vulnerabilities
http://www.securityfocus.com/bid/49388

apt SSL Certificate Validation Security Bypass Vulnerability
http://www.securityfocus.com/bid/50288

Plone CMFEditions Component (CVE-2011-4030) Remote Security Bypass Vulnerability
http://www.securityfocus.com/bid/50287

Boonex Dolphin 'xml/get_list.php' SQL Injection Vulnerability
http://www.securityfocus.com/bid/50286

Cisco Show and Share CVE-2011-2585 Arbitrary File Upload Vulnerability
http://www.securityfocus.com/bid/50285

CiscoWorks Common Services Remote Command Injection Vulnerability
http://www.securityfocus.com/bid/50284

Moodle Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/50283

Cisco Show and Share Anonymous Access Security Bypass Vulnerability
http://www.securityfocus.com/bid/50282

Microsoft Windows Local DNS Cache Poisoning Vulnerabilities
http://www.securityfocus.com/bid/50281

WHMCompleteSolution 'cart.php' Local File Disclosure Vulnerability
http://www.securityfocus.com/bid/50280

D-Link DCS-2121 Password Field Remote Command Execution Vulnerability
http://www.securityfocus.com/bid/50277

1024 CMS 1.1.0 Beta 'force_download.php' Local File Include Vulnerability
http://www.securityfocus.com/bid/50275

Novell ZENworks Configuration Management AdminStudio Remote Code Execution Vulnerabilities
http://www.securityfocus.com/bid/50274

Yet Another CMS Multiple SQL Injection and Multiple Cross Site Scripting Vulnerabilities
http://www.securityfocus.com/bid/50272

Oracle Sun Products Suite CVE-2011-2292 Local Solaris Vulnerability
http://www.securityfocus.com/bid/50268

Oracle PeopleSoft CVE-2011-3529 Remote PeopleSoft Enterprise HRMS Vulnerability
http://www.securityfocus.com/bid/50267

Oracle Sun Products Suite CVE-2011-2286 Remote Vulnerability
http://www.securityfocus.com/bid/50265

Oracle Sun Products Suite CVE-2011-3507 Remote Oracle Communications Unified Vulnerability
http://www.securityfocus.com/bid/50264

Oracle PeopleSoft Products CVE-2011-2315 Remote PeopleSoft Enterprise PeopleTools Vulnerability
http://www.securityfocus.com/bid/50263

Oracle Sun Products Suite CVE-2011-3536 Local Vulnerability
http://www.securityfocus.com/bid/50262

Oracle Sun Product Suite CVE-2011-3537 Local Vulnerability
http://www.securityfocus.com/bid/50259

Oracle Sun Products Suite CVE-2011-3506 Remote Oracle OpenSSO Vulnerability
http://www.securityfocus.com/bid/50252

Oracle PeopleSoft Products CVE-2011-3533 Remote PeopleSoft Enterprise HRMS Vulnerability
http://www.securityfocus.com/bid/50249

Oracle Sun Solaris CVE-2011-3542 Local Vulnerability
http://www.securityfocus.com/bid/50244

Oracle PeopleSoft Products CVE-2011-3527 Remote PeopleSoft Enterprise HRMS Vulnerability
http://www.securityfocus.com/bid/50241

Oracle E-Business Suite CVE-2011-3519 Remote Oracle Applications Framework Vulnerability
http://www.securityfocus.com/bid/50233

Oracle Supply Chain Products Suite CVE-2011-3532 Remote Oracle Agile Product Supplier Collaboration
http://www.securityfocus.com/bid/50227

Oracle E-Business Suite CVE-2011-2303 Remote Oracle Application Object Library Vulnerability
http://www.securityfocus.com/bid/50225

Oracle E-Business Suite CVE-2011-2302 Remote Oracle Application Object Library Vulnerability
http://www.securityfocus.com/bid/50221

Oracle Database Server CVE-2011-3511 Remote Database Vault Vulnerability
http://www.securityfocus.com/bid/50219

Oracle Fusion Middleware CVE-2011-3523 Remote Oracle Web Services Manager Vulnerability
http://www.securityfocus.com/bid/50209

Oracle Fusion Middleware CVE-2011-2319 Remote Oracle WebLogic Server Vulnerability
http://www.securityfocus.com/bid/50206

Oracle Fusion Middleware CVE-2011-2255 Remote Oracle WebLogic Portal Vulnerability
http://www.securityfocus.com/bid/50205

Opera 11.52 released
http://www.opera.com/docs/changelogs/windows/1152/

CESA-2011:1377 (postgresql)
http://lwn.net/Alerts/463689/

CESA-2011:1378 (postgresql84)
http://lwn.net/Alerts/463690/

phpMyAdmin 3.4.7-rc1 is released
http://sourceforge.net/news/?group_id=23067&id=304070

19日水曜日、先勝

2011-10-19T11:00:00.001+09:00

RHSA-2011:1379-1: Moderate: krb5 security update
http://rhn.redhat.com/errata/RHSA-2011-1379.html

+ J2SE JDK/JRE 1.6.0_29 released
http://www.oracle.com/technetwork/java/javase/6u29-relnotes-507960.html

+ Oracle Critical Patch Update Advisory - October 2011
http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html

+ Oracle Java SE Critical Patch Update Advisory - October 2011
http://www.oracle.com/technetwork/topics/security/javacpuoct2011-443431.html

+ Critical: java-1.6.0-openjdk security update
http://rhn.redhat.com/errata/RHSA-2011-1380.html

- SA46468: HP Data Protector Multiple Unspecified Vulnerabilities
http://secunia.com/advisories/46468/

- PHP Prior to 5.3.7 Multiple NULL Pointer Dereference Denial Of Service Vulnerabilities
http://www.securityfocus.com/bid/49249

- PHP CVE-2011-2202 Security Bypass Vulnerability
http://www.securityfocus.com/bid/48259

- PHP 'socket_connect()' Function Stack Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/47950

BIND 9.9.0a3 released
https://www.isc.org/software/bind/990a3

UPDATE: Cisco IOS Software Data-Link Switching Vulnerability
http://www.cisco.com/warp/public/707/cisco-sa-20110928-dlsw.shtml

UPDATE: Cisco IOS Software IP Service Level Agreement Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20110928-ipsla

ウイルスバスター for Mac プログラムアップデートのお知らせ
http://www.trendmicro.co.jp/support/news.asp?id=1634

[ MDVSA-2011:156 ] tomcat5
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00113.html

Dolphin ＜= 7.0.7 (member_menu_queries.php) Remote PHP Code Injection
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00112.html

Site@School 2.4.10 SQL Injection & XSS vulnerabilities
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00111.html

[PT-2011-14] SQL injection vulnerability in BoonEx Dolphin
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00110.html

「セサミストリート」でアダルト動画！？YouTubeで乗っ取り発覚
不適切な動画が20分間掲載、プロフィルも改ざん
http://itpro.nikkeibp.co.jp/article/NEWS/20111019/371021/?ST=security

Critical Control 12 : Malware Defense
http://isc.sans.edu/diary.html?storyid=11830

ClamAV Recursion Level Handling Vulnerability
http://secunia.com/advisories/46455/

TYPO3 phpMyAdmin Extension Cross-Site Scripting Vulnerability
http://secunia.com/advisories/46463/

Joomla! Information Disclosure Vulnerabilities
http://secunia.com/advisories/46421/

SUSE update for cups
http://secunia.com/advisories/46409/

SUSE update for cups
http://secunia.com/advisories/46448/

SUSE update for libopenssl
http://secunia.com/advisories/46452/

SUSE update for libopenssl
http://secunia.com/advisories/46453/

GNUBoard URL SQL Injection Vulnerability
http://secunia.com/advisories/46443/

SUSE update for php5
http://secunia.com/advisories/46425/

SUSE update for kdelibs4
http://secunia.com/advisories/46439/

SUSE update for wireshark
http://secunia.com/advisories/46449/

SUSE update for libreoffice
http://secunia.com/advisories/46450/

SUSE update for popt
http://secunia.com/advisories/46451/

SUSE update for tomcat6
http://secunia.com/advisories/46454/

Microsoft Office Publisher Document Insertion Buffer Overflow Vulnerability
http://secunia.com/advisories/46438/

Ubuntu update for php5
http://secunia.com/advisories/46374/

Piwik Multiple Unspecified Vulnerabilities
http://secunia.com/advisories/46461/

Asterisk SIP Channel Driver Uninitialised Variables Denial of Service Vulnerability
http://secunia.com/advisories/46420/

WordPress WP Photo Album Plus Plugin "wppa-album" SQL Injection Vulnerability
http://secunia.com/advisories/46467/

HP Data Protector Multiple Unspecified Vulnerabilities
http://secunia.com/advisories/46468/

Oracle Fusion Middleware Bugs Let Remote Users Partially Access and Modify Data and Remote and Local Users Partially Deny Service
http://www.securitytracker.com/id/1026206

Piwik Data Processing Multiple Unspecified Remote Vulnerabilities
http://www.vupen.com/english/ADV-2011-2204.php

Microsoft Publisher "Pubconv.dll" Document Insertion Memory Corruption
http://www.vupen.com/english/ADV-2011-2203.php

HP Data Protector Notebook Extension Multiple Remote Code Execution
http://www.vupen.com/english/ADV-2011-2202.php

phpMyAdmin "phpmyadmin.css.php" Remote Path Disclosure Vulnerability
http://www.vupen.com/english/ADV-2011-2201.php

phpMyAdmin Setup Interface Data Processing Cross Site Scripting
http://www.vupen.com/english/ADV-2011-2200.php

Check Point UTM-1 Edge and Safe@Office WebUI Multiple Vulnerabilities
http://www.vupen.com/english/ADV-2011-2199.php

Microsys Promotic Directory Traversal and Buffer Overflow Vulnerabilities
http://www.vupen.com/english/ADV-2011-2198.php

OPC Systems .NET Remote Procedural Call Denial of Service Vulnerability
http://www.vupen.com/english/ADV-2011-2197.php

Honeywell TEMA Remote Installer ActiveX Code Execution Vulnerability
http://www.vupen.com/english/ADV-2011-2196.php

atvise webMI HTTP Requests Processing Multiple Remote Vulnerabilities
http://www.vupen.com/english/ADV-2011-2195.php

IRAI AUTOMGEN Project File Processing Buffer Overflow Vulnerability
http://www.vupen.com/english/ADV-2011-2194.php

Asterisk SIP Channel Driver Unitialized Variable Denial of Service Vulnerability
http://www.vupen.com/english/ADV-2011-2193.php

Joomla! Data Processing Multiple Information Disclosure Vulnerabilities
http://www.vupen.com/english/ADV-2011-2192.php

Drupal Cumulus Module Data Processing Cross Site Scripting Vulnerability
http://www.vupen.com/english/ADV-2011-2191.php

Drupal Certificate Login Module Remote SQL Injection Vulnerability
http://www.vupen.com/english/ADV-2011-2190.php

OneOrZero AIMS Authentication Bypass and SQL Injection Vulnerabilities
http://www.vupen.com/english/ADV-2011-2189.php

D-Link DIR-685 Xtreme N Storage Router WPA/WPA2 Encryption Issue
http://www.vupen.com/english/ADV-2011-2188.php

GoAhead Webserver Multiple Parameter Cross Site Scripting Vulnerabilities
http://www.vupen.com/english/ADV-2011-2187.php

REMOTE: Apple Safari Webkit libxslt Arbitrary File Creation
http://www.exploit-db.com/exploits/17993

Oracle Sun Products Suite CVE-2011-2292 Local Solaris Vulnerability
http://www.securityfocus.com/bid/50268

Oracle PeopleSoft CVE-2011-3529 Remote PeopleSoft Enterprise HRMS Vulnerability
http://www.securityfocus.com/bid/50267

Oracle Sun Products Suite CVE-2011-2286 Remote Vulnerability
http://www.securityfocus.com/bid/50265

Oracle Sun Products Suite CVE-2011-3507 Remote Oracle Communications Unified Vulnerability
http://www.securityfocus.com/bid/50264

Oracle PeopleSoft Products CVE-2011-2315 Remote PeopleSoft Enterprise PeopleTools Vulnerability
http://www.securityfocus.com/bid/50263

Oracle Sun Products Suite CVE-2011-3536 Local Vulnerability
http://www.securityfocus.com/bid/50262

Oracle Sun Product Suite CVE-2011-3537 Local Vulnerability
http://www.securityfocus.com/bid/50259

Oracle Sun Products Suite CVE-2011-3506 Remote Oracle OpenSSO Vulnerability
http://www.securityfocus.com/bid/50252

Oracle PeopleSoft Products CVE-2011-3533 Remote PeopleSoft Enterprise HRMS Vulnerability
http://www.securityfocus.com/bid/50249

Oracle Sun Solaris CVE-2011-3542 Local Vulnerability
http://www.securityfocus.com/bid/50244

Oracle PeopleSoft Products CVE-2011-3527 Remote PeopleSoft Enterprise HRMS Vulnerability
http://www.securityfocus.com/bid/50241

Oracle E-Business Suite CVE-2011-3519 Remote Oracle Applications Framework Vulnerability
http://www.securityfocus.com/bid/50233

Oracle Supply Chain Products Suite CVE-2011-3532 Remote Oracle Agile Product Supplier Collaboration
http://www.securityfocus.com/bid/50227

Oracle E-Business Suite CVE-2011-2303 Remote Oracle Application Object Library Vulnerability
http://www.securityfocus.com/bid/50225

Oracle E-Business Suite CVE-2011-2302 Remote Oracle Application Object Library Vulnerability
http://www.securityfocus.com/bid/50221

Oracle Database Server CVE-2011-3511 Remote Database Vault Vulnerability
http://www.securityfocus.com/bid/50219

Oracle Fusion Middleware CVE-2011-3523 Remote Oracle Web Services Manager Vulnerability
http://www.securityfocus.com/bid/50209

Oracle Fusion Middleware CVE-2011-2319 Remote Oracle WebLogic Server Vulnerability
http://www.securityfocus.com/bid/50206

Oracle Fusion Middleware CVE-2011-2255 Remote Oracle WebLogic Portal Vulnerability
http://www.securityfocus.com/bid/50205

RETIRED: Oracle October 2011 Critical Patch Update Multiple Vulnerabilities
http://www.securityfocus.com/bid/50119

Apache HTTP Server CVE-2011-3192 Denial Of Service Vulnerability
http://www.securityfocus.com/bid/49303

Symantec IM Manager Code Injection Vulnerability
http://www.securityfocus.com/bid/49742

Apple Mac OS X FlashPix Files CVE-2011-3222 Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/50100

Oracle Solaris CVE-2011-2312 'ZFS' Sub Component Local Vulnerability
http://www.securityfocus.com/bid/50269

X.Org X11 Local Privilege Escalation Vulnerability and Memory Leak Vulnerability
http://www.securityfocus.com/bid/50002

RETIRED: Oracle Java SE Critical Patch Update October 2011 Advance Notification
http://www.securityfocus.com/bid/50118

SSL/TLS Protocol Initialization Vector Implementation Information Disclosure Vulnerability
http://www.securityfocus.com/bid/49778

Oracle Linux CVE-2011-2306 Oracle Validation Security Vulnerability
http://www.securityfocus.com/bid/50194

PHP Versions Prior to 5.3.7 Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/49241

Multiple Cisco Products CVE-2011-2738 Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/49627

Apache Tomcat 'sendfile' Request Attributes Information Disclosure Vulnerability
http://www.securityfocus.com/bid/48667

Apache Tomcat HTTP DIGEST Authentication CVE-2011-1184 Multiple Security Weaknesses
http://www.securityfocus.com/bid/49762

Apache Tomcat 'MemoryUserDatabase' Information Disclosure Vulnerability
http://www.securityfocus.com/bid/48456

Apache Tomcat AJP Protocol Security Bypass Vulnerability
http://www.securityfocus.com/bid/49353

Quagga Multiple Remote Security Vulnerabilities
http://www.securityfocus.com/bid/49784

ClamAV Recursion Level Handling Denial of Service Vulnerability
http://www.securityfocus.com/bid/50183

rpm-python RPM File Handling Remote Memory Corruption Vulnerability
http://www.securityfocus.com/bid/49799

Joomla! 'com_jfuploader' Arbitrary File Upload Vulnerability
http://www.securityfocus.com/bid/44559

phpMyAdmin Setup Interface Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/50175

PHP 'ZipArchive::addGlob' and 'ZipArchive::addPattern' Denial Of Service Vulnerabilities
http://www.securityfocus.com/bid/49252

PHP Prior to 5.3.7 Multiple NULL Pointer Dereference Denial Of Service Vulnerabilities
http://www.securityfocus.com/bid/49249

PHP Versions Prior to 5.3.3/5.2.14 Multiple Vulnerabilities
http://www.securityfocus.com/bid/41991

PHP CVE-2011-2202 Security Bypass Vulnerability
http://www.securityfocus.com/bid/48259

PHP 'socket_connect()' Function Stack Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/47950

WebKit 'libxslt' Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/48840

Avaya Identity Engines Ignition Server Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/50271

Oracle Solaris CVE-2011-3539 Local Solaris Vulnerability
http://www.securityfocus.com/bid/50270

Oracle Solaris CVE-2011-2311 ZFS Component Local Vulnerability
http://www.securityfocus.com/bid/50266

Oracle Sun Products CVE-2011-3522 Local SPARC T3, Netra SPARC T3, Sun Fire, Sun Blade Vulnerability
http://www.securityfocus.com/bid/50261

Oracle Siebel CRM CVE-2011-2316 Siebel Apps - Marketing Remote Vulnerability
http://www.securityfocus.com/bid/50260

Oracle Sun Products CVE-2011-2327 Local Oracle Communications Unified Vulnerability
http://www.securityfocus.com/bid/50258

Oracle Solaris CVE-2011-2304 Remote Vulnerability
http://www.securityfocus.com/bid/50257

Oracle Siebel CRM CVE-2011-3518 Siebel Core - UIF Client Remote Vulnerability
http://www.securityfocus.com/bid/50256

Oracle Sun Solaris CVE-2011-3535 Remote Vulnerability
http://www.securityfocus.com/bid/50255

Oracle Solaris CVE-2011-2313 Local Solaris Vulnerability
http://www.securityfocus.com/bid/50254

Oracle PeopleSoft Products CVE-2011-3528 Remote PeopleSoft Enterprise HRMS Vulnerability
http://www.securityfocus.com/bid/50253

Oracle Sun Solaris CVE-2011-3534 Remote Vulnerability
http://www.securityfocus.com/bid/50251

Oracle Java SE CVE-2011-3561 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50250

Oracle Java SE CVE-2011-3552 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50248

Oracle PeopleSoft CVE-2011-3520 PeopleSoft Enterprise PeopleTools Remote Vulnerability
http://www.securityfocus.com/bid/50247

Oracle Java SE CVE-2011-3553 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50246

Oracle Industry Applications CVE-2011-3538 Remote Sun Ray Vulnerability
http://www.securityfocus.com/bid/50245

Oracle Java SE CVE-2011-3547 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50243

Oracle Java SE CVE-2011-3558 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50242

Oracle Industry Applications CVE-2011-2309 Remote Health Sciences - Oracle Clinical, Remote Data Cap
http://www.securityfocus.com/bid/50240

Oracle Java SE CVE-2011-3546 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50239

Oracle PeopleSoft CVE-2011-3530 PeopleSoft Enterprise HRMS Remote Vulnerability
http://www.securityfocus.com/bid/50238

Oracle Java SE CVE-2011-3555 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50237

Oracle Java SE CVE-2011-3560 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50236

Oracle Sun Solaris CVE-2011-3515 Local Vulnerability
http://www.securityfocus.com/bid/50235

Oracle Java SE CVE-2011-3557 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50234

Oracle E-Business Suite CVE-2011-2308 Oracle Application Object Library Remote Vulnerability
http://www.securityfocus.com/bid/50232

Oracle Java SE CVE-2011-3556 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50231

Oracle Siebel CRM CVE-2011-3526 Remote Siebel Core - UIF Server Vulnerability
http://www.securityfocus.com/bid/50230

Oracle Java SE CVE-2011-3516 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50229

Oracle Waveset CVE-2011-2310 Remote Vulnerability
http://www.securityfocus.com/bid/50228

Oracle Java SE CVE-2011-3550 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50226

Oracle Java SE CVE-2011-3551 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50224

Oracle Java SE CVE-2011-3549 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50223

Oracle Database CVE-2011-2322 Remote Database Vault Vulnerability
http://www.securityfocus.com/bid/50222

Oracle Java SE CVE-2011-3545 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50220

Oracle Java SE CVE-2011-3544 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50218

Oracle E-Business Suite CVE-2011-3513 Oracle Application Object Library Remote Vulnerability
http://www.securityfocus.com/bid/50217

Oracle Java SE CVE-2011-3554 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50216

Oracle Java SE and Java for Business CVE-2011-3521 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50215

Oracle Sun Solaris CVE-2011-3543 Remote Vulnerability
http://www.securityfocus.com/bid/50214

Oracle Fusion Middleware CVE-2011-3510 Remote Oracle Business Intelligence Enterprise Edition Vulner
http://www.securityfocus.com/bid/50213

Oracle Fusion Middleware CVE-2011-2237 Remote Oracle Web Services Manager Vulnerability
http://www.securityfocus.com/bid/50212

Oracle Java SE CVE-2011-3548 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50211

Oracle Fusion Middleware CVE-2011-2318 Oracle WebLogic Server Local Vulnerability
http://www.securityfocus.com/bid/50210

Oracle OpenSSO CVE-2011-3517 Remote Vulnerability
http://www.securityfocus.com/bid/50208

Oracle Fusion Middleware CVE-2011-3541 Oracle Outside In Technology Local Vulnerability
http://www.securityfocus.com/bid/50207

Oracle Database CVE-2011-3512 Remote Core RDBMS Vulnerability
http://www.securityfocus.com/bid/50203

Oracle Fusion Middleware CVE-2011-2314 Oracle Containers for J2EE Remote Vulnerability
http://www.securityfocus.com/bid/50202

Oracle Sun Solaris CVE-2011-3508 Remote Vulnerability
http://www.securityfocus.com/bid/50201

Oracle Database CVE-2011-2301 Oracle Text Local Vulnerability
http://www.securityfocus.com/bid/50199

Oracle Fusion Middleware CVE-2011-2320 Remote WebLogic Server Vulnerability
http://www.securityfocus.com/bid/50198

Oracle Database CVE-2011-3525 Remote Application Express Vulnerability
http://www.securityfocus.com/bid/50197

X.Org X11 File Read Permission Information Disclosure Vulnerability
http://www.securityfocus.com/bid/50196

Site@School 'index.php' Cross Site Scripting and SQL Injection Vulnerabilities
http://www.securityfocus.com/bid/50195

X.Org X11 File Enumeration Information Disclosure Vulnerability
http://www.securityfocus.com/bid/50193

PAM 'update-motd' Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/50192

Joomla NoNumber! Extension Manager Plugin Local File Include and PHP code Injection Vulnerabilities
http://www.securityfocus.com/bid/50191

TYPO3 T3blog Extension Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/50190

Check Point UTM-1 Edge and Safe Multiple Unspecified Security Vulnerabilities
http://www.securityfocus.com/bid/50189

Joomla! Unspecified Information Disclosure Vulnerabilities
http://www.securityfocus.com/bid/50188

Boonex Dolphin 'member_menu_queries.php' PHP Code Injection Vulnerability
http://www.securityfocus.com/bid/50185

Piwik Prior to 1.6 Multiple Unspecified Security Vulnerabilities
http://www.securityfocus.com/bid/50182

HP Data Protector Unspecified Remote Code Execution Vulnerabilities
http://www.securityfocus.com/bid/50181

18日火曜日、赤口

2011-10-18T10:17:00.001+09:00

CESA-2011:1371 (pidgin)
http://lwn.net/Alerts/463346/

PMASA-2011-16: XSS in setup.
http://www.phpmyadmin.net/home_page/security/PMASA-2011-16.php

プレス発表
脅威を増す標的型のサイバー攻撃に関する注意喚起
～セキュリティ対応状況の確認と対策の徹底を～
http://www.ipa.go.jp/about/press/20111018.html

日本オラクル、DBファイアウォール製品を11月出荷
http://itpro.nikkeibp.co.jp/article/NEWS/20111018/370976/?ST=security

Linux Kernel Null Pointer Dereference in AppArmor Lets Local Users Deny Service
http://www.securitytracker.com/id/1026200

phpMyAdmin Input Validation Flaw in Setup Interface Permits Cross-Site Scripting Attacks
http://www.securitytracker.com/id/1026199

Logsurfer Double Free Memory Error in prepare_exec() Lets Local Users Deny Service
http://www.securitytracker.com/id/1026198

GNUBoard Input Validation Flaw in '/bbs/tb.php' Lets Remote Users Inject SQL Commands
http://www.securitytracker.com/id/1026197

Asterisk SIP Channel Driver Uninitialized Variable Access Bug Lets Remote Users Deny Service
http://www.securitytracker.com/id/1026191

+ RHSA-2011:1377-1: Moderate: postgresql security update
http://rhn.redhat.com/errata/RHSA-2011-1377.html

- SA46423: Linux Kernel "apparmor_setprocattr()" Denial of Service Vulnerability
http://secunia.com/advisories/46423/
http://www.securityfocus.com/bid/50172

- RHSA-2011:1378-1: Moderate: postgresql84 security update
http://rhn.redhat.com/errata/RHSA-2011-1378.html

* libpng 'pngerror.c' Off-By-One Error Denial Of Service Vulnerability
http://www.securityfocus.com/bid/48474

[ANNOUNCE] PostgreSQL Data Sync released (new software)
http://www.sqlmaestro.com/products/postgresql/datasync/

Apache James Mime4j 0.7.1 released
http://james.apache.org/newsarchive.html#a111711

Apache James Protocols 1.6-beta1 released
http://james.apache.org/newsarchive.html#a111611

Data Exfiltration and Output Devices - An Overlooked Threat
http://www.cert.org/blogs/insider_threat/2011/10/data_exfiltration_and_output_devices_-_an_overlooked_threat.html

[ MDVSA-2011:155 ] systemtap
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00109.html

[ MDVSA-2011:154 ] systemtap
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00104.html

AST-2011-012: Remote crash vulnerability in SIP channel driver
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00108.html

ZDI-11-290 : Microsoft Internet Explorer SetExpandedClipRect Remote,Code Execution Vulnerabi
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00107.html

[ MDVSA-2011:153 ] libxfont
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00103.html

ZDI-11-289 : Microsoft Internet Explorer swapNode Handling Remote Code,Execution Vulnerabili
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00106.html

ZDI-11-288 : Microsoft Internet Explorer Select Element Insufficient,Type Checking Remote Co
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00105.html

[ MDVSA-2011:152 ] ncompress
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00102.html

[ MDVSA-2011:151 ] libpng
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00096.html

[Announcement] ClubHack Magazine - Call for Articles
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00101.html

WordPress Plugin BackWPUp 2.1.4 - Security Advisory - SOS-11-012
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00100.html

DAEMON Tools IOCTL local denial-of-service vulnerability
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00099.html

foofus.net Security Advisory - Toshiba eStudio Multifunction Printer Authentication Bypass
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00098.html

[ MDVSA-2011:150 ] squid
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00095.html

ZDI-11-287 : Internet Explorer Select Element Cache Remote Code Execution Vulnerability
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00094.html

[ GLSA 201110-12 ] Unbound: Denial of Service
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00093.html

[slackware-security] httpd (SSA:2011-284-01)
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00092.html

[ MDVSA-2011:149 ] cyrus-imapd
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00091.html

半年で900件の「標的型攻撃」、警察庁が発表
ウイルスで盗んだメールを悪用する「標的型メール」も出現
http://itpro.nikkeibp.co.jp/article/NEWS/20111018/370961/?ST=security

JVNDB-2011-002375 GoAhead Webserver にクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002375.html

JVNDB-2011-002374 D-Link DIR-685 Xtreme N Storage Router の暗号化通信に脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002374.html

JVNDB-2011-002373 Quagga の ecommunity_ecom2str 関数におけるにおけるヒープベースのバッファオーバーフローの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002373.html

JVNDB-2011-002372 Quagga の ospf_flood 関数におけるサービス運用妨害 (デーモンクラッシュ) の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002372.html

JVNDB-2011-000088 iOS 上の Safari におけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000088.html

Critical Control 11: Account Monitoring and Control
http://isc.sans.edu/diary.html?storyid=11824

WordPress BackWPup Plugin "BackWPupJobTemp" File Inclusion Vulnerability
http://secunia.com/advisories/46435/

Linux Kernel "apparmor_setprocattr()" Denial of Service Vulnerability
http://secunia.com/advisories/46423/

phpMyAdmin "setup.php" Cross-Site Scripting Vulnerability
http://secunia.com/advisories/46431/

Logsurfer "prepare_exec()" Double-Free Vulnerability
http://secunia.com/advisories/46389/

WordPress WordPress Users Plugin "uid" SQL Injection Vulnerability
http://secunia.com/advisories/46442/

Novell Open Enterprise Server DSfW Group Policy Object Security Bypass Security Issue
http://secunia.com/advisories/46444/

BlueZone Desktop iSeries Printer ZAP File Processing Buffer Overflow
http://secunia.com/advisories/46382/

aSgbookPHP URL Cross-Site Scripting Vulnerability
http://secunia.com/advisories/46464/

Fedora update for puppet
http://secunia.com/advisories/46458/

Gentoo update for unbound
http://secunia.com/advisories/46433/

Novell Open Enterprise Server Configuration Lets Remote Authenticated Users Gain Elevated Privileges
http://www.securitytracker.com/id/1026190

REMOTE: Apple Safari file:// Arbitrary Code Execution
http://www.exploit-db.com/exploits/17986/

RETIRED: Apple Safari Prior to 5.1.1 Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/50089

Microsoft Internet Explorer 'SwapNode()' CVE-2011-2000 Memory Corruption Vulnerability
http://www.securityfocus.com/bid/49965

Apple Safari CVE-2011-3230 'file://' Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/50162

SystemTap DWARF Expression Handling Two Divide-By-Zero Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/47934

WordPress Light Post Plugin 'abspath' Parameter Remote File Include Vulnerability
http://www.securityfocus.com/bid/50080

Microsoft Internet Explorer Select Element CVE-2011-1999 Memory Corruption Vulnerability
http://www.securityfocus.com/bid/49964

X.Org libXfont LZW Decompression 'BufCompressedFill()' Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/49124

GNU gzip LZW Compression Remote Integer Overflow Vulnerability
http://www.securityfocus.com/bid/37886

Microsoft Internet Explorer Virtual Function Table CVE-2011-2001 Memory Corruption Vulnerability
http://www.securityfocus.com/bid/49966

Linux Kernel 'CIFSFindNext()' Function Denial of Service Vulnerability
http://www.securityfocus.com/bid/49295

Linux Kernel 'FUSE_NOTIFY_INVAL_ENTRY' Message Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/49527

Linux Kernel 'fs/befs/linuxvfs.c' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/49256

Microsoft Internet Explorer Option Element CVE-2011-1996 Memory Corruption Vulnerability
http://www.securityfocus.com/bid/49961

Libpurple Yahoo Protocol 'YMSG' NULL Pointer Dereference Denial of Service Vulnerability
http://www.securityfocus.com/bid/46837

Pidgin 'silc_private_message()' Denial of Service Vulnerability
http://www.securityfocus.com/bid/49912

Unbound 'sock_list' Structure Allocation Remote Denial Of Service Vulnerability
http://www.securityfocus.com/bid/38701

Unbound DNS Resolver Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/47986

Cyrus IMAP Server 'split_wildmats()' Remote Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/49534

ldns 'rr.c' Remote Heap Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/49748

Netzip Classic '.zip' File Parsing Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/46059

libpng PNG File Denial Of Service Vulnerability
http://www.securityfocus.com/bid/48618

libpng 'pngerror.c' Off-By-One Error Denial Of Service Vulnerability
http://www.securityfocus.com/bid/48474

Puppet Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/49909

Openswan IKE Packet NULL Pointer Dereference Remote Denial Of Service Vulnerability
http://www.securityfocus.com/bid/49984

libpng Buffer Overflow and Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/48660

Microsoft Windows TCP/IP QOS CVE-2011-1965 Remote Denial Of Service Vulnerability
http://www.securityfocus.com/bid/48990

Apache HTTP Server CVE-2011-3348 Denial Of Service Vulnerability
http://www.securityfocus.com/bid/49616

Apple Safari 'libxml' (CVE-2011-0216) Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/48832

RETIRED: Apple iPhone/iPad/iPod touch Prior to iOS 5 Multiple Vulnerabilities
http://www.securityfocus.com/bid/50086

RETIRED: Apple Mac OS X Prior to 10.7.2 Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/50085

Cyrus IMAPd NTTP Logic Error Authentication Bypass Vulnerability
http://www.securityfocus.com/bid/49949

Adobe Flash Player CVE-2011-2110 Remote Memory Corruption Vulnerability
http://www.securityfocus.com/bid/48268

Adobe Flash Player CVE-2011-0579 Information Disclosure Vulnerability
http://www.securityfocus.com/bid/47847

Adobe Flash Player CVE-2011-0620 Remote Memory Corruption Vulnerability
http://www.securityfocus.com/bid/47807

Adobe Flash Player CVE-2011-0609 'SWF' File Remote Memory Corruption Vulnerability
http://www.securityfocus.com/bid/46860

FlexNet License Server Manager Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/49191

Adobe Flash Player CVE-2011-2429 Security Control Bypass Information Disclosure Vulnerability
http://www.securityfocus.com/bid/49718

Adobe Flash Player CVE-2011-2428 Logic Error Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/49716

Adobe Flash Player CVE-2011-2430 Streaming Media Logic Error Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/49717

Adobe Flash Player CVE-2011-2427 AVM Stack Overflow Vulnerability
http://www.securityfocus.com/bid/49715

Adobe Flash Player CVE-2011-2444 Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/49710

Adobe Flash Player CVE-2011-2424 Multiple Memory Corruption Vulnerabilities
http://www.securityfocus.com/bid/49186

Adobe Flash Player CVE-2011-2426 AVM Stack Overflow Vulnerability
http://www.securityfocus.com/bid/49714

Adobe Flash Player CVE-2011-2139 Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/49086

Adobe Flash Player CVE-2011-2425 Remote Memory Corruption Vulnerability
http://www.securityfocus.com/bid/49085

Adobe Flash Player CVE-2011-2417 Remote Memory Corruption Vulnerability
http://www.securityfocus.com/bid/49084

Adobe Flash Player CVE-2011-2140 Remote Memory Corruption Vulnerability
http://www.securityfocus.com/bid/49083

Adobe Flash Player 'flash.display' Class Remote Memory Corruption Vulnerability
http://www.securityfocus.com/bid/49082

Adobe Flash Player CVE-2011-2136 Remote Integer Overflow Vulnerability
http://www.securityfocus.com/bid/49079

Adobe Flash Player CVE-2011-2416 Remote Integer Overflow Vulnerability
http://www.securityfocus.com/bid/49081

Adobe Flash Player 'BitmapData.scroll' Remote Integer Overflow Vulnerability
http://www.securityfocus.com/bid/49080

Adobe Flash Player CVE-2011-2415 Remote Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/49077

Adobe Flash Player CVE-2011-2134 Remote Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/49074

Adobe Flash Player CVE-2011-2137 Remote Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/49075

Adobe Flash Player CVE-2011-2414 Remote Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/49076

Adobe Flash Player CVE-2011-2107 Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/48107

Adobe Flash Player CVE-2011-2130 Remote Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/49073

Adobe Flash Player CVE-2011-0628 Remote Integer Overflow Vulnerability
http://www.securityfocus.com/bid/47961

Adobe Flash Player ActionScript Virtual Machine CVE-2011-0618 Remote Integer Overflow Vulnerability
http://www.securityfocus.com/bid/47815

Adobe Flash Player CVE-2011-0625 Remote Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/47813

Adobe Flash Player CVE-2011-0626 Remote Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/47814

Adobe Flash Player CVE-2011-0624 Remote Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/47812

Adobe Flash Player CVE-2011-0623 Remote Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/47811

Adobe Flash Player CVE-2011-0621 Remote Memory Corruption Vulnerability
http://www.securityfocus.com/bid/47808

Adobe Flash Player CVE-2011-0619 Remote Memory Corruption Vulnerability
http://www.securityfocus.com/bid/47806

Adobe Flash Player CVE-2011-0622 Remote Memory Corruption Vulnerability
http://www.securityfocus.com/bid/47809

Adobe Flash Player CVE-2011-0627 Remote Memory Corruption Vulnerability
http://www.securityfocus.com/bid/47810

Adobe Flash Player CVE-2011-0611 'SWF' File Remote Memory Corruption Vulnerability
http://www.securityfocus.com/bid/47314

Adobe Flash Player CVE-2011-0608 Remote Memory Corruption Vulnerability
http://www.securityfocus.com/bid/46283

Adobe Acrobat and Reader CVE-2011-0589 Remote Memory Corruption Vulnerability
http://www.securityfocus.com/bid/46202

Adobe Flash Player CVE-2011-0607 Remote Memory Corruption Vulnerability
http://www.securityfocus.com/bid/46282

Adobe Flash Player CVE-2011-0574 Remote Memory Corruption Vulnerability
http://www.securityfocus.com/bid/46193

Adobe Flash Player CVE-2011-0575 DLL Loading Arbitrary Code Execution Vulnerability
http://www.securityfocus.com/bid/46197

Adobe Flash Player CVE-2011-0558 Remote Integer Overflow Vulnerability
http://www.securityfocus.com/bid/46194

Adobe Flash Player CVE-2011-0578 Remote Memory Corruption Vulnerability
http://www.securityfocus.com/bid/46195

Adobe Flash Player Font Parsing Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/46196

Adobe Flash Player CVE-2011-0573 Remote Memory Corruption Vulnerability
http://www.securityfocus.com/bid/46192

Adobe Flash Player CVE-2011-0572 Remote Memory Corruption Vulnerability
http://www.securityfocus.com/bid/46191

Adobe Flash Player CVE-2011-0571 Remote Memory Corruption Vulnerability
http://www.securityfocus.com/bid/46190

Adobe Flash Player CVE-2011-0561 Remote Memory Corruption Vulnerability
http://www.securityfocus.com/bid/46189

Adobe Flash Player CVE-2011-0560 Remote Memory Corruption Vulnerability
http://www.securityfocus.com/bid/46188

FlexNet License Server Manager 'lmadmin' Component Heap Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/48927

Adobe Flash Player CVE-2011-0559 Remote Memory Corruption Vulnerability
http://www.securityfocus.com/bid/46186

OcoMon Multiple Unspecified SQL Injection Vulnerabilities
http://www.securityfocus.com/bid/47424

Novell GroupWise Internet Agent 'TZID' Variable Parsing Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/46025

Conky 'tmp/.cesf' Insecure Temporary File Creation Vulnerability
http://www.securityfocus.com/bid/46184

Mozilla Firefox/Thunderbird/SeaMonkey 'Array.reduceRight()' Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/48372

feh '--wget-timestamp' Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/41161

feh 'feh_unique_filename()' Predictable Filename Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/46182

Adobe Acrobat and Reader CVE-2011-2438 Multiple Remote Stack Buffer Overflow Vulnerabilities
http://www.securityfocus.com/bid/49580

Apache HTTP Server CVE-2011-3192 Denial Of Service Vulnerability
http://www.securityfocus.com/bid/49303

Microsoft Excel Conditional Expression CVE-2011-1989 Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/49518

Linux Kernel 'drivers/media/dvb/ttpci/av7110_ca' IOCTL Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/45986

Linux Kernel 'drivers/scsi/bfa/bfa_core.c' Denial of Service Vulnerability
http://www.securityfocus.com/bid/45262

Linux Kernel CVE-2010-4073 Information Disclosure Vulnerability
http://www.securityfocus.com/bid/45073

Microsoft Windows Kernel '.fon' Font File Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/49975

Ruby on Rails 'WEBrick::HTTPRequest' Module HTTP Header Injection Vulnerability
http://www.securityfocus.com/bid/46423

Linux Kernel Generic Receive Offload (GRO) Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/47056

Apache HTTP Server 'mod_proxy' Reverse Proxy Information Disclosure Vulnerability
http://www.securityfocus.com/bid/49957

Linux Kernel NFS Access Control List (ACL) Allocation Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/46766

Linux Kernel 'ethtool.c' Information Disclosure Vulnerability
http://www.securityfocus.com/bid/45972

Linux Kernel 'task_show_regs()' Local Information Disclosure Vulnerability
http://www.securityfocus.com/bid/46421

Linux Kernel SCTP Local Race Condition Vulnerability
http://www.securityfocus.com/bid/45661

Linux Kernel Validate 'map_count' Variable Local Security Bypass Vulnerability
http://www.securityfocus.com/bid/46492

Linux Kernel 'install_special_mapping()' Local Security Bypass Vulnerability
http://www.securityfocus.com/bid/45323

Linux Kernel IGB Panic VLAN Packet Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/45208

Linux Kernel Unix Socket Backlog Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/46637

Linux Kernel 'posix-cpu-timers.c' Local Race Condition Vulnerability
http://www.securityfocus.com/bid/45028

Xen 'fixup_page_fault()' Denial of Service Vulnerability
http://www.securityfocus.com/bid/45099

PtokaX Directory Traversal And Security Bypass Vulnerabilities
http://www.securityfocus.com/bid/50179

Dominant Creature BBG RPG 'msg.php' Parameter Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/50178

Asterisk Uninitalized Variable SIP Channel Driver Denial of Service Vulnerability
http://www.securityfocus.com/bid/50177

BackWPup Plugin for WordPress 'wp_export_generate.php' Local and Remote File Include Vulnerabilities
http://www.securityfocus.com/bid/50176

phpMyAdmin Setup Interface Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/50175

WordPress Users Plugin "uid" Parameter SQL Injection Vulnerability
http://www.securityfocus.com/bid/50174

Gnuboard 'board.php' SQL Injection Vulnerability
http://www.securityfocus.com/bid/50173

Linux Kernel 'apparmor_setprocattr()' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/50172

Logsurfer 'prepare_exec()' Double Free Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/50171

Novell Open Enterprise Server DSfW Domain Group Policy Object Security Bypass Vulnerability
http://www.securityfocus.com/bid/50170

Multiple Toshiba e-Studio Devices Security Bypass Vulnerability
http://www.securityfocus.com/bid/50168

asgbookphp 'index.php' Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/50167

BlueZone Desktop '.zap' File Processing Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/50166

RuubikCMS 'f' Parameter Information Disclosure Vulnerability
http://www.securityfocus.com/bid/50165

WordPress WP Photo Album Plus Plugin 'wppa-album' Parameter SQL Injection Vulnerability
http://www.securityfocus.com/bid/50164

Apple Safari 'safari-extension://' URL Handling Directory Traversal Vulnerability
http://www.securityfocus.com/bid/50163

Apple iOS Free Type Font Document Multiple Memory Corruption Vulnerabilities
http://www.securityfocus.com/bid/50155

Quassel Core Insecure File Permissions Vulnerability
http://www.securityfocus.com/bid/50148

Sybase M-Business Anywhere Multiple Unspecified Remote Privilege Escalation Vulnerabilities
http://www.securityfocus.com/bid/50145

WordPress Contact Form Plugin 'wpcf_easyform_formid' Parameter SQL Injection Vulnerability
http://www.securityfocus.com/bid/50142

Xenon 'id' Parameter Multiple SQL Injection Vulnerabilities
http://www.securityfocus.com/bid/50141

EC-CUBE Multiple Unspecified SQL Injection Vulnerabilities
http://www.securityfocus.com/bid/50140

DBD::mysqlPP Unspecified SQL Injection Vulnerability
http://www.securityfocus.com/bid/50139

Joomla! Directory Tree Component SQL Injection Vulnerability
http://www.securityfocus.com/bid/50138

PROMOTIC Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/50133

Joomla! eTree Component 'id' Parameter Multiple SQL Injection Vulnerabilities
http://www.securityfocus.com/bid/50132

Apple Mac OS X Prior to 10.7.2 CVE-2011-3221 Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/50131

17日月曜日、大安

2011-10-17T09:49:00.003+09:00

- TCP and UDP Ports required to access vCenter Server, ESX hosts, and other network components
http://kb.vmware.com/selfservice/microsites/microsite.do?cmd=displayKC&docType=kc&externalId=1012382&sliceId=1&docTypeID=DT_KB_1_1

プレス発表
第7回IPA情報セキュリティ標語・ポスターコンクール　受賞作品決定
～大賞として、標語部門は「セキュリティ　ぼくと世界の　かけ橋だ」、
　ポスター部門は「ネットで世界と人と気持ちもつながっている」を選定～
http://www.ipa.go.jp/about/press/20111017.html

JVN#41657660 iOS 上の Safari におけるクロスサイトスクリプティングの脆弱性
http://jvn.jp/jp/JVN41657660/index.html

+ MS11-064 : Vulnerabilities in TCP/IP Stack Could
http://www.exploit-db.com/exploits/17981/

Fixed in Apache Tomcat 6.0.34 (not yet released)
http://tomcat.apache.org/security-6.html#Fixed_in_Apache_Tomcat_6.0.34_(not_yet_released)

The Apache Software Foundation Statement on Apache OpenOffice.org
https://blogs.apache.org/foundation/entry/the_apache_software_foundation_statement

Hosted Email Security　製品メンテナンス延期のお知らせ
http://www.trendmicro.co.jp/support/news.asp?id=1663

プレス発表
「EC-CUBE」におけるセキュリティ上の弱点（脆弱性）の注意喚起
http://www.ipa.go.jp/about/press/20111014.html

カスペルスキーが法人向けセキュリティソフトの新版を発表
http://itpro.nikkeibp.co.jp/article/NEWS/20111014/370819/?ST=security

JVNDB-2011-002371 Perl モジュール Crypt::DSA における署名を偽装される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002371.html

JVNDB-2011-002370 Quagga の ospfd 内の ospf_packet.c におけるサービス運用妨害 (デーモンクラッシュ) の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002370.html

JVNDB-2011-002369 Quagga の ospf6_lsa.c 内にある ospf6_lsa_is_changed 関数におけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002369.html

JVNDB-2011-002368 Quagga の ospf6d 内にある OSPFv3 実装におけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002368.html

JVNDB-2011-000087 EC-CUBE における SQL インジェクションの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000087.html

JVNDB-2011-000086 DBD::mysqlPP における SQL インジェクションの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000086.html

JVNDB-2010-002869 Novell GroupWise の GroupWise Internet Agent (GWIA) におけるサービス運用妨害 (デーモンクラッシュ) の脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002869.html

JVNDB-2010-002868 Novell GroupWise の GroupWise Internet Agent (GWIA) におけるサービス運用妨害 (デーモンクラッシュ) の脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002868.html

JVNDB-2011-002367 phpPgAdmin におけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002367.html

JVNDB-2011-002366 Novell GroupWise の GroupWise Internet Agent における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002366.html

JVNDB-2011-002365 Novell GroupWise の GroupWise Internet Agent における整数符号エラーの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002365.html

JVNDB-2011-002364 Novell GroupWise の WebAccess におけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002364.html

JVNDB-2011-002363 Novell Identity Manager におけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002363.html

JVNDB-2011-002362 Novell Identity Manager におけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002362.html

JVNDB-2011-002361 Novell GroupWise の GWIA 内にある gwia.exe におけるスタックベースのバッファオーバーフローの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002361.html

JVNDB-2011-002360 Novell GroupWise の GWIA 内にある gwwww1.dll におけるヒープベースのバッファオーバーフローの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002360.html

JVNDB-2011-002359 複数の VMware 製品におけるバッファオーバーフローの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002359.html

[PTResearch] SAP DIAG Decompress plugin for Wireshark
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00090.html

DC4420 - London DEFCON - October meet - Tuesday October 18th 2011
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00089.html

[ GLSA 201110-11 ] Adobe Flash Player: Multiple vulnerabilities
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00088.html

[ GLSA 201110-10 ] Wget: User-assisted file creation or overwrite
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00087.html

[ GLSA 201110-09 ] Conky: Privilege escalation
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00086.html

[ GLSA 201110-08 ] feh: Multiple vulnerabilities
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00085.html

DNS Sinkhole Parser Script Update
http://isc.sans.edu/diary.html?storyid=11818

BXR 0.6.8 SQL injection vulnerability
http://securityreason.com/securityalert/8470

Pre Podcast Portal SQL Injection
http://securityreason.com/securityalert/8469

Prado Portal XSS vulnerability
http://securityreason.com/securityalert/8468

APBoard 2.1.0 SQL Injection
http://securityreason.com/securityalert/8467

xt:Commerce Gambio 2008 - 2010 SQL Injection
http://securityreason.com/securityalert/8466

Sybase M-Business Anywhere Bugs Let Remote Users Gain Elevated Access Rights
http://www.securitytracker.com/id/1026189

Opera Nested SVG Content Processing Code Execution Vulnerability
http://secunia.com/advisories/46375/

Gentoo update for feh
http://secunia.com/advisories/46356/

Ubuntu update for quassel
http://secunia.com/advisories/46445/

Sybase M-Business Anywhere Two Unspecified Privilege Escalation Vulnerabilities
http://secunia.com/advisories/46424/

WordPress Contact Form Plugin "wpcf_easyform_formid" SQL Injection Vulnerability
http://secunia.com/advisories/46434/

EC-CUBE Two Unspecified SQL Injection Vulnerabilities
http://secunia.com/advisories/46446/

PROMOTIC Directory Traversal and ActiveX Control Buffer Overflow Vulnerabilities
http://secunia.com/advisories/46430/

Joomla! eTree Component "id" and "user_id" SQL Injection Vulnerabilities
http://secunia.com/advisories/46441/

Red Hat update for pidgin
http://secunia.com/advisories/46376/

Gentoo update for conky
http://secunia.com/advisories/46353/

Gentoo update for wget
http://secunia.com/advisories/46324/

Gentoo update for adobe-flash
http://secunia.com/advisories/46322/

Fedora update for openswan
http://secunia.com/advisories/46384/

Fedora update for cyrus-imapd
http://secunia.com/advisories/46388/

Sybase M-Business Anywhere Unauthorized Access Vulnerabilities
http://www.vupen.com/english/ADV-2011-2186.php

Opera Browser SVG Data Processing Remote Code Execution
http://www.vupen.com/english/ADV-2011-2185.php

Apple Numbers for iOS Excel Document Code Execution Vulnerabilities
http://www.vupen.com/english/ADV-2011-2184.php

Apple Pages for iOS Word Document Code Execution Vulnerability
http://www.vupen.com/english/ADV-2011-2183.php

Apple Safari Multiple Code Execution and Information Disclosure
http://www.vupen.com/english/ADV-2011-2182.php

Apple OS X Multiple Code Execution and Information Disclosure
http://www.vupen.com/english/ADV-2011-2181.php

Apple TV Multiple Code Execution and Information Disclosure
http://www.vupen.com/english/ADV-2011-2180.php

Apple iOS Multiple Code Execution and Information Disclosure
http://www.vupen.com/english/ADV-2011-2179.php

Apple iTunes Multiple Remote Code Execution Vulnerabilities
http://www.vupen.com/english/ADV-2011-2178.php

BlackBerry Enterprise Server Collaboration Service Unauthorized Access
http://www.vupen.com/english/ADV-2011-2177.php

Google App Engine SDK for Python Code Execution Vulnerabilities
http://www.vupen.com/english/ADV-2011-2176.php

Hitachi JP1/Cm2/Network Node Manager i Multiple Vulnerabilities
http://www.vupen.com/english/ADV-2011-2175.php

VMware ESXi and ESX Multiple Code Execution and Denial of Service
http://www.vupen.com/english/ADV-2011-2174.php

DoS/PoC: BlueZone Desktop .zap file Local Denial of Service Vulnerability
http://www.exploit-db.com/exploits/17982/

DoS/PoC: MS11-064 TCP/IP Stack Denial of Service
http://www.exploit-db.com/exploits/17981/

phpMyAdmin 3.4.6 is released
http://sourceforge.net/news/?group_id=23067&id=304006

14日金曜日、友引

2011-10-14T10:05:00.004+09:00

- Moderate: pidgin security update
http://rhn.redhat.com/errata/RHSA-2011-1371.html

bind10-devel-20111014 now available
https://lists.isc.org/mailman/listinfo/bind10-users

[ANNOUNCE] pgpoolAdmin 3.1.0 released
http://pgfoundry.org/projects/pgpool/

Squid 3.1.16 released
http://www.squid-cache.org/Versions/v3/3.1/

Squid 3.2.0.13 released
http://www.squid-cache.org/Versions/v3/3.2/RELEASENOTES.html

JVNVU#800227 OneOrZero AIMS に複数の脆弱性
http://jvn.jp/cert/JVNVU800227/index.html

JVN#44496332 EC-CUBE における SQL インジェクションの脆弱性
http://jvn.jp/jp/JVN44496332/index.html

JVN#51216285 DBD::mysqlPP における SQL インジェクションの脆弱性
http://jvn.jp/jp/JVN51216285/index.html

JVNTA11-286A Apple Mac OS Xにおける複数の脆弱性に対するアップデート
http://jvn.jp/cert/JVNTA11-286A/index.html

JVNVU#971123 Apple Mac OS Xにおける複数の脆弱性に対するアップデート
http://jvn.jp/cert/JVNVU971123/index.html

JVNTA11-284A Microsoft 製品における複数の脆弱性に対するアップデート
http://jvn.jp/cert/JVNTA11-284A/index.html

HTB Team : [HTB23049] Pretty Link WordPress Plugin - Cross-site Scripting Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36873

HTB Team : [HTB23048] BugFree - Cross-site Scripting Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36874

Independant Researcher : Internet Explorer - Multiple Code Execution Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36879

SEC Consult : [SEC Consult SA-20111012-0] Microsoft Forefront UAG - Remote Access Agent Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36880

Apple : [APPLE-SA-2011-10-12-6 ] iOS - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36876

Apple : [APPLE-SA-2011-10-12-5 ] iOS - Memory Corruption Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36877

Apple : [APPLE-SA-2011-10-12-2] Apple TV - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36878

Emaze Networks : ZOHO - ManageEngine ADSelfService and Administrative Access - Authentication Bypass Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36855

Hewlett-Packard : [HPSBMU02710 SSRT100601] HP - Onboard Administrator (OA) - Security Bypass Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36857

iDEFENSE : Microsoft - Internet Explorer - Memory Corruption Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36875

Mandriva : [MDVSA-2011:148] Samba - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36864

Red Hat : [RHSA-2011:1364-01] kdelibs - Spoofing Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36854

Ubuntu Security Notice : [USN-1227-1] Linux - kernel - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36853

Debian : [DSA-2319-1] Policykit - Privilege Escalation Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36846

Debian : [DSA-2320-1] dokuwiki - Cross-site Scripting Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36847

Debian : [DSA-2321-1] Moin - Cross-site Scripting Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36848

Debian : [DSA-2322-1] Bugzilla - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36849

Gentoo Linux : [GLSA 201110-06] PHP - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36859

Independant Researcher : Google - App Engine SDK - Code Execution Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36863

Mandriva : [MDVSA-2011:145] libxml2 - Double Free Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36850

Mandriva : [MDVSA-2011:146] CUPS - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36851

Mandriva : [MDVSA-2011:147] CUPS - Buffer Overflow Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36852

Microsoft : [MS11-078] .NET Framework and Microsoft Silverlight - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36865

Microsoft : [MS11-081] Internet Explorer - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36866

Microsoft : [MS11-075] Microsoft - Active Accessibility - Code Execution Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36867

Microsoft : [MS11-076] Windows - Media Center - Code Execution Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36868

Microsoft : [MS11-077] Windows - Kernel - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36869

Microsoft : [MS11-079] Microsoft - Frontend Unified Access Gateway - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36870

Microsoft : [MS11-080] Anciallary Function Driver - Privilege Escalation Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36871

Microsoft : [MS11-082] Host Integration Server - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36872

Gentoo Linux : [GLSA 201110-07] vsftpd - Denial-Of-Service Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36858

Gentoo Linux : [GLSA 201110-05] GnuTLS - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36860

Gentoo Linux : [GLSA 201110-04] Dovecot - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36861

Gentoo Linux : [GLSA 201110-03] - Bugzilla - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36862

NGS Secure Research : Apple - OSX and iPhone ImageIO - Heap Overflow Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36856

Critical Control 9 - Controlled Access Based on the Need to Know
http://isc.sans.edu/diary.html?storyid=11812

Oracle Critical Patch Update Pre-Release Announcement - October 2011
http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html

Oracle Java SE Critical Patch Update Pre-Release Announcement - October 2011
http://www.oracle.com/technetwork/topics/security/javacpuoct2011-443431.html

JVN#07414354 DAEMON Tools におけるサービス運用妨害 (DoS) の脆弱性
http://jvn.jp/jp/JVN07414354/index.html

JVNDB-2011-002358 Cherokee の Cherokee-admin におけるクロスサイトリクエストフォージェリの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002358.html

JVNDB-2011-002357 Cherokee の generate_admin_password 関数における admin パスワードを推測される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002357.html

JVNDB-2011-002356 Linux kernel の net/core/net_namespace.c におけるサービス運用妨害 (メモリ破損) の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002356.html

JVNDB-2011-002355 Plone で使用される Zope における任意のコマンドを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002355.html

JVNDB-2011-002354 Plone の CMFEditions コンポーネントにおけるサブオブジェクトにアクセスされる脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002354.html

JVNDB-2011-002353 gitolite の Admin Defined Commands (ADC) 機能におけるディレクトリトラバーサルの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002353.html

JVNDB-2011-002352 EtherApe の add_conversation 関数におけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002352.html

JVNDB-2011-000085 DAEMON Tools におけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000085.html

JVNDB-2011-000084 Pligg におけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000084.html

JVNDB-2011-000083 Plume におけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000083.html

JVNDB-2011-002351 Apache HTTP Server の mod_proxy モジュールにおけるイントラネットサーバにリクエストを送信される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002351.html

JVNDB-2011-002350 IBM AIX の QLogic adapters 用 Fibre Channel ドライバにおけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002350.html

JVNDB-2011-002349 Check Point の複数の製品における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002349.html

JVNDB-2011-002348 Exim の src/dkim.c 内の dkim_exim_verify_finish 関数における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002348.html

JVNDB-2011-002347 Ted Felix acpid の acpid.c におけるサービス運用妨害 (デーモンハング) の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002347.html

JVNDB-2011-002346 Linux kernel の net/dns_resolver/dns_key.c におけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002346.html

JVNDB-2011-002345 RealNetworks RealPlayer の ActiveX コントロールにおけるクロスゾーンスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002345.html

JVNDB-2011-002344 Adobe Photoshop Elements におけるバッファオーバーフローの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002344.html

JVNDB-2011-002343 Quassel の CtcpParser::packedReply メソッドにおけるサービス運用妨害 (クラッシュ) の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002343.html

JVNDB-2011-002342 VMware の Spring Framework および Spring Security におけるセキュリティ制限を回避される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002342.html

JVNDB-2011-002341 UPnP 対応の複数のルータにアクセス制限不備の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002341.html

JVNDB-2011-002340 Iceni Argus にバッファオーバーフローの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002340.html

iDefense Security Advisory 10.12.11: Apple Mobile OfficeImport Framework Word Document Parsing Memor
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00084.html

iDefense Security Advisory 10.12.11: Apple MobileSafari Attachment Viewing Cross Site Scripting Vuln
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00083.html

Multiple G-WAN vulnerabilities
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00082.html

SEC Consult SA-20111012-0 :: Client-side remote file upload & command execution in M
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00080.html

VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00079.html

Security-Assessment.com Advisory: Destination Search Admin Console Access Control Bypass
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00081.html

Two Remote Code Execution Vulnerabilities in Internet Explorer
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00078.html

iDefense Security Advisory 10.11.11: Microsoft Internet Explorer Object Handling Memory Corruption V
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00076.html

APPLE-SA-2011-10-12-6 Numbers for iOS v1.5
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00075.html

APPLE-SA-2011-10-12-5 Pages for iOS v1.5
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00074.html

APPLE-SA-2011-10-12-4 Safari 5.1.1
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00077.html

APPLE-SA-2011-10-12-3 OS X Lion v10.7.2 and Security Update 2011-006
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00073.html

APPLE-SA-2011-10-12-2 Apple TV Software Update 4.4
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00071.html

APPLE-SA-2011-10-12-1 iOS 5 Software Update
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00072.html

CORE-2011-0106: Microsoft Publisher 2007 Pubconv.dll Memory Corruption
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00070.html

Multiple vulnerabilities in BugFree
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00067.html

Multiple vulnerabilities in Pretty Link WordPress Plugin
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00068.html

LedgerSMB 1.3.0 released, includes anti-XSRF framework
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00066.html

[ MDVSA-2011:148 ] samba
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00064.html

Google App Enging SDK Code Execution Vulnerability (CVE 2011-1364)
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00065.html

Joomla Camelcitydb2 2.2 SQL Injection
http://securityreason.com/securityalert/8465

E-Xoopport Samsara 3.1 eCal Module Blind SQL Injection
http://securityreason.com/securityalert/8464

Joomla Component Multiple Blind SQL Injection Vulnerabilities
http://securityreason.com/securityalert/8463

WAnewsletter v 2.1.2 SQL Injection Vulnerability
http://securityreason.com/securityalert/8462

Joomla Slideshow SQL Injection
http://securityreason.com/securityalert/8461

Virtue Book Store SQL Injection
http://securityreason.com/securityalert/8460

Nuked-Klan Partenaires NK 1.5 Blind SQL Injection
http://securityreason.com/securityalert/8459

Joomla Restaurant Guide Cross Site Scripting / Local File Inclusion / SQL Injection
http://securityreason.com/securityalert/8458

GeekLog 1.3.8 SQL Injection
http://securityreason.com/securityalert/8457

Amblog 1.0 Joomla Component Multiple SQL Injection Vulnerabilities
http://securityreason.com/securityalert/8456

Atmail WebMail < v6.2.0 Reflected XSS
http://securityreason.com/securityalert/8455

TimeTrack 1.2.4 Joomla Component Multiple SQL Injection Vulnerabilities
http://securityreason.com/securityalert/8454

allinta CMS SQL injection vulnerability
http://securityreason.com/securityalert/8453

Cisco TelePresence Video Communication Server Input Validation Flaw Permits Cross-Site Scripting Attacks
http://www.securitytracker.com/id/1026186

Mac OS X Multiple Flaws Lets Local Users Gain Elevated Privileges and Remote Users Execute Arbitrary Code and Deny Service
http://www.securitytracker.com/id/1026184

VU#800227: OneOrZero AIMS authentication bypass and SQLi vulnerabilities
http://www.kb.cert.org/vuls/id/800227

D-Link DIR-685 Xtreme N Storage Router Encryption Failure Weakness
http://secunia.com/advisories/46380/

WordPress Pretty Link Plugin Multiple Cross-Site Scripting Vulnerabilities
http://secunia.com/advisories/46432/

IBM OS/400 HTTP Server mod_proxy Reverse Proxy Mode Security Bypass Weakness
http://secunia.com/advisories/46414/

DAEMON Tools Unspecified Denial of Service Vulnerability
http://secunia.com/advisories/46416/

Apple TV Multiple Vulnerabilities
http://secunia.com/advisories/46415/

WordPress teachPress Plugin "root" Two Local File Inclusion Vulnerabilities
http://secunia.com/advisories/46436/

Apple iOS Multiple Vulnerabilities
http://secunia.com/advisories/46377/

Simple Machines Forum Multiple Vulnerabilities
http://secunia.com/advisories/46386/

VMware ESX / ESXi Server Multiple Vulnerabilities
http://secunia.com/advisories/46397/

BugFree Multiple Cross-Site Scripting Vulnerabilities
http://secunia.com/advisories/46428/

Apple Safari Multiple Vulnerabilities
http://secunia.com/advisories/46412/

Drupal Certificate Login Module SQL Injection Vulnerability
http://secunia.com/advisories/46393/

Minitube Insecure Temporary Files Security Issue
http://secunia.com/advisories/46429/

Apple Mac OS X Multiple Vulnerabilities
http://secunia.com/advisories/46417/

Apple Pages for iOS OfficeArtMetafileHeader Record Parsing Vulnerability
http://secunia.com/advisories/46418/

Apple Numbers for iOS Two Vulnerabilities
http://secunia.com/advisories/46419/

Fedora update for phpPgAdmin
http://secunia.com/advisories/46426/

REMOTE: PcVue 10.0 SV.UIGrdCtrl.1 'LoadObject()/SaveObject()' Trusted DWORD Vulnerability
http://www.exploit-db.com/exploits/17975/

REMOTE: Mozilla Firefox Array.reduceRight() Integer Overflow
http://www.exploit-db.com/exploits/17976/

REMOTE: JBoss AS Remote Exploit v2
http://www.exploit-db.com/exploits/17977/

DoS/PoC: MS11-077 .fon Kernel-Mode Buffer Overrun PoC
http://www.exploit-db.com/exploits/17978/

Linux Kernel Unix Sockets Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/45037

Linux Kernel Futex Macros Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/44754

Xen 'drivers/xen/blkback/blkback.c' Local Denial Of Service Vulnerability
http://www.securityfocus.com/bid/45029

Linux Kernel 'CHELSIO_GET_QSET_NUM' Information Disclosure Vulnerability
http://www.securityfocus.com/bid/43221

XFS Deleted Inode Local Information Disclosure Vulnerability
http://www.securityfocus.com/bid/42527

Linux Kernel 'net/sched/act_police.c' File Memory Leak Local Information Disclosure Vulnerability
http://www.securityfocus.com/bid/42529

Linux Kernel Xen Hypervisor Implementation Denial of Service Vulnerability
http://www.securityfocus.com/bid/43578

Linux Kernel 'execve()' Memory Expansion 'OOM-killer' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/45004

Linux Kernel 'hci_uart_tty_open()' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/45014

Xen 'vbd_create()' Denial of Service Vulnerability
http://www.securityfocus.com/bid/45795

Linux Kernel 'net/core/filter.c' Local Information Disclosure Vulnerability
http://www.securityfocus.com/bid/44758

Linux Kernel 'net/' Subsystem Socket Filter CVE-2010-4161 Local Information Disclosure Vulnerability
http://www.securityfocus.com/bid/45064

Linux Kernel 'drivers/scsi/gdth.c' IOCTL Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/44648

Linux Kernel 'ipc/sem.c' Information Disclosure Vulnerability
http://www.securityfocus.com/bid/43809

Linux Kernel 'SNDRV_HDSP_IOCTL_GET_CONFIG_INFO' IOCTL Local Information Disclosure Vulnerability
http://www.securityfocus.com/bid/45058

Linux Kernel 'hdsp.c' IOCTL Local Information Disclosure Vulnerability
http://www.securityfocus.com/bid/45063

Linux Kernel TIOCGICOUNT 'serial_core.c' Information Disclosure Vulnerability
http://www.securityfocus.com/bid/43806

Linux Kernel 'hmid_ds structure' Local Information Disclosure Vulnerability
http://www.securityfocus.com/bid/45054

Linux Kernel 'inet_diag.c' Netlink Message Denial of Service Vulnerability
http://www.securityfocus.com/bid/44665

Linux Kernel Multiple 'net/' Subsystems Local Information Disclosure Vulnerabilities
http://www.securityfocus.com/bid/44630

Linux Kernel Reliable Datagram Sockets (RDS) Protocol Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/44219

Linux Kernel Reliable Datagram Sockets (RDS) Protocol Local Integer Overflow Vulnerability
http://www.securityfocus.com/bid/44549

Linux Kernel 'setup_arg_pages()' Denial of Service Vulnerability
http://www.securityfocus.com/bid/44301

Linux Kernel Heap Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/44354

Linux Kernel ALSA 'sound/core/control.c' Local Integer Overflow Vulnerability
http://www.securityfocus.com/bid/43787

Xen 'blkback/blktap/netback' Leaked Kernel Thread Local Denial Of Service Vulnerability
http://www.securityfocus.com/bid/45039

Linux Kernel 'sctp_outq_flush()' Denial of Service Vulnerability
http://www.securityfocus.com/bid/43480

Linux Kernel 'do_io_submit()' Integer Overflow Vulnerability
http://www.securityfocus.com/bid/43353

Linux Kernel 'XFS_IOC_FSGETXATTR' Information Disclosure Vulnerability
http://www.securityfocus.com/bid/43022

Linux Kernel GFS2 Directory Rename NULL Pointer Dereference Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/42124

Linux Kernel EXT4 Multiple Local Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/42477

Linux Kernel 'io_submit_one()' NULL Pointer Dereference Denial of Service Vulnerability
http://www.securityfocus.com/bid/44755

Linux Kernel USB interface Local Information Disclosure Vulnerability
http://www.securityfocus.com/bid/39042

Linux Kernel 'ecryptfs_uid_hash()' Local Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/42237

WebKit Multiple Unspecifeid Remote Code Execution Vulnerabilities
http://www.securityfocus.com/bid/50066

Apple iPhone/iPad/iPod touch Prior to iOS 5 Multiple Vulnerabilities
http://www.securityfocus.com/bid/50086

Linux Kernel 'mpt2sas' Local Privilege Escalation and Information Disclosure Vulnerabilities
http://www.securityfocus.com/bid/47185

'glibc' Library 'locale/programs/locale.c' Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/47370

GNU glibc 'fnmatch()' Function Stack Corruption Vulnerability
http://www.securityfocus.com/bid/46563

MIT Kerberos KDC LDAP File Descriptor Leak Denial Of Service Vulnerability
http://www.securityfocus.com/bid/46265

MIT Kerberos 5 1.3.x Checksum Multiple Remote Security Bypass Vulnerabilities
http://www.securityfocus.com/bid/45118

MIT Kerberos KDC Principal Name LDAP Request NULL Pointer Denial Of Service Vulnerability
http://www.securityfocus.com/bid/46271

WordPress Filedownload Local File Disclosure Vulnerability
http://www.securityfocus.com/bid/49669

PHP Versions Prior to 5.3.7 Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/49241

PcVue ActiveX Control Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/49795

phpPgAdmin Multiple Cross-Site Scripting Vulnerabilities
http://www.securityfocus.com/bid/49914

Microsoft Internet Explorer Option Element CVE-2011-1996 Memory Corruption Vulnerability
http://www.securityfocus.com/bid/49961

Microsoft Forefront Unified Access Gateway 'MicrosoftClient.Jar' Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/49983

Microsoft Internet Explorer Select Element CVE-2011-1999 Memory Corruption Vulnerability
http://www.securityfocus.com/bid/49964

Mozilla Firefox/Thunderbird/SeaMonkey 'Array.reduceRight()' Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/48372

Microsoft Silverlight & .NET Framework Inheritance Restriction Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/49999

Microsoft Windows Active Accessibility DLL Loading Arbitrary Code Execution Vulnerability
http://www.securityfocus.com/bid/49976

Apache Tomcat 'sort' and 'orderBy' Parameters Cross Site Scripting Vulnerabilities
http://www.securityfocus.com/bid/45015

Simple Machines Forum Cross-Site Scripting and Spoofing Vulnerabilities
http://www.securityfocus.com/bid/50103

Apple Mac OS X CVE-2011-0231 Security Vulnerability
http://www.securityfocus.com/bid/50098

Supermicro IPMI Web Interface Multiple Security Bypass Vulnerabilities
http://www.securityfocus.com/bid/50097

WordPress Pretty Link Plugin Multiple Cross Site Scripting Vulnerabilities
http://www.securityfocus.com/bid/50096

iOS 5 のセキュリティアップデート

2011-10-13T14:48:00.000+09:00

About the security content of iOS 5 Software Update

http://support.apple.com/kb/HT4999

上記 URL の iOS のセキュリティアップデートの翻訳

1) CalDAV

　CalDAV が信頼あるサーバによる SSL 証明書をチェックしていないことが原因で、CalDAV カレンダーサーバからユーザの認証情報または他の機密情報を妨害される脆弱性。(CVE-2011-3253)

2) Calendar
　カレンダーが招待状を取り扱う際にスクリプト挿入問題が存在することが原因で、ローカルドメインにスクリプトを挿入される脆弱性。(CVE-2011-3254)

3) CFNetwork
　ユーザの AppleID のパスワードとユーザをロギングしたファイルがシステム上のアプリケーションから読み込み可能なことが原因で、重要な情報を取得される脆弱性。(CVE-2011-3255)

4) CFNetwork
　CFNetwork が HTTP クッキーを取り扱い際の問題が原因で、ドメイン外のサーバにクッキー情報を送信してしまう脆弱性。(CVE-2011-3246)

5) CoreFoundation
　CoreFoundation が文字列のトークン化処理の際にメモリ破壊が発生することが原因で、アプリケーションが異常終了したり任意のコードを実行されたりする脆弱性。(CVE-2011-0259)

6) CoreGraphics
　freetype に複数のメモリ破壊が存在することが原因で、細工されたフォントを処理する際に任意コードを実行される脆弱性。(CVE-2011-3256)

7) CoreMedia
　CoreMedia がクロスサイト・リダイレクトを取り扱う際にクロスオリジン問題が存在することが原因で、他のサイトから動画データを取得される脆弱性。(CVE-2011-0187)

8) Data Access
　同一のサーバに接続する複数の Exchange メールサーバのアカウントを設定されている場合に、セッションが異なるアカウントに対応する正当なクッキー情報を受信することが原因で、異なるアカウントでのデータが正しく同期されない脆弱性。(CVE-2011-3257)

9) Data Security
　DigiNotar によって処理される複数の証明書によって不正な証明書問題が存在することが原因で、ユーザの認証情報または他の機密情報を妨害される脆弱性。

10) Data Security
　MD5 ハッシュアルゴリズムを用いてサインされた証明書が iOS によって受理された場合に、このアルゴリズムに脆弱であることが原因で、重要な情報を取得される脆弱性。(CVE-2011-3427)

11) Data Security
　SSL の SSLv3 及び TLS 1.0 だけがサポートされている場合に、これらが脆弱であることが原因で、SSL 接続を複合化される脆弱性。(CVE-2011-3389)

12) Home screen
　four-finger アプリでアプリケーションを切り替える時に、表示が前のアプリケーションの状態を表示することが原因で、アプリケーションの重要な情報を取得される脆弱性。(CVE-2011-3431)

13) ImageIO
　TIFF が CCITT Group 4 でエンコードされた TIFF 画像を取り扱う際にバッファオーバーフローが発生することが原因で、アプリケーションが異常終了したり任意のコードを実行されたりする脆弱性。(CVE-2011-0192)

14) ImageIO
　ImageIO がCCITT Group 4 でエンコードされた TIFF 画像を取り扱う際にヒープオーバーフローが発生することが原因で、アプリケーションが異常終了したり任意のコードを実行されたりする脆弱性。(CVE-2011-0241)

15) International Components for Unicode
　ICU生成処理においてほとんど大文字の長い文字列とキーを照合する際にバッファオーバーフローが発生することが原因で、アプリケーションが異常終了したり任意のコードを実行されたりする脆弱性。(CVE-2011-0206)

16) Kernal
　カーネルが失敗した TCP 接続からメモリを即座に再要求することに失敗することが原因で、端末がリセットする脆弱性。(CVE-2011-3259)

17) Kernel
　IPV6 ソケットオプションを取り扱う際に NULL ポインタ逆参照が発生することが原因で、システムがリセットする脆弱性。(CVE-2011-1132)

18) Keyboards
　パスワードの最後の文字を入力したキーボードが次に使用されたときに表示することが原因で、パスワードの最後の文字を特定される脆弱性。(CVE-2011-3245)

19) libxml
　libxml が XML データを取り扱う際に１バイトヒープオーバーフローが発生することが原因で、アプリケーションが異常終了したり任意のコードを実行されたりする脆弱性。(CVE-2011-0216)

20) OfficeImport
　OfficeImport がマイクロソフト Word ファイルを取り扱う際にバッファオーバーフローが発生することが原因で、アプリケーションが異常終了したり任意のコードを実行されたりする脆弱性。(CVE-2011-3260)

21) OfficeImport
　OfficeImport が Excel ファイルを取り扱い際に二重メモリ解放が発生することが原因で、アプリケーションが異常終了したり任意のコードを実行されたりする脆弱性。(CVE-2011-3261)

22) OfficeImport
　OfficeImport がマイクロソフト Office ファイルを取り扱う際にメモリ破壊が発生することが原因で、アプリケーションが異常終了したり任意のコードを実行されたりする脆弱性。(CVE-2011-0208)

23) OfficeImport
　OfficeImport が Excel ファイルを取り扱う際にメモリ破壊が発生することが原因で、アプリケーションが異常終了したり任意のコードを実行されたりする脆弱性。(CVE-2011-0184)

24) Safari
　iOS は HTTP Content-Disposition ヘッダーの 'attachment' 値をサポートしていないが、このヘッダー値で供給されたファイル内のスクリプトはサーバ上の他のリソースにフルアクセスできることで、サイトスクリプティング攻撃を許す脆弱性。(CVE-2011-3426)

25) Settings
　ベアレンタル制限機能はパスコートによって設定を保護されているが、そのパスコードがディスク上にプレインテキストで保持されていることが原因で、端末への物理的な攻撃によりパスコードを回収される脆弱性。(CVE-2011-3429)

26) Settings
　設定プロファイル経由で適用された設定が英語以外の言語下では適切に機能しないことが原因で、設定が結果として適切な表示をしない脆弱性。(CVE-2011-3430)

27) UIKit Alerts
　非常に長い tel: URI の受理ダイアログを描画する時に、最大テキスト長を超えていると iOS がハングする脆弱性。(CVE-2011-3432)

28) WebKit
　WebKit に複数のメモリ破壊の問題が存在することが原因で、アプリケーションが異常終了したり任意のコードを実行されたりする脆弱性。(CVE-2011-0218, CVE-2011-0221, CVE-2011-0222, CVE-2011-0225, CVE-2011-0232, CVE-2011-0233, CVE-2011-0234, CVE-2011-0235, CVE-2011-0238, CVE-2011-0254, CVE-2011-0255, CVE-2011-0981, CVE-2011-0983, CVE-2011-1109, CVE-2011-1114, CVE-2011-1115, CVE-2011-1117, CVE-2011-1121, CVE-2011-1188, CVE-2011-1203, CVE-2011-1204, CVE-2011-1288, CVE-2011-1293, CVE-2011-1296, CVE-2011-1449, CVE-2011-1451, CVE-2011-1453, CVE-2011-1457, CVE-2011-1462, CVE-2011-1797, CVE-2011-2338, CVE-2011-2339, CVE-2011-2341, CVE-2011-2351, CVE-2011-2352, CVE-2011-2354, CVE-2011-2356, CVE-2011-2359, CVE-2011-2788, CVE-2011-2790, CVE-2011-2792, CVE-2011-2797, CVE-2011-2799, CVE-2011-2809, CVE-2011-2813, CVE-2011-2814, CVE-2011-2816, CVE-2011-2817, CVE-2011-2818, CVE-2011-2820, CVE-2011-2823, CVE-2011-2827, CVE-2011-2831, CVE-2011-3232, CVE-2011-3234, CVE-2011-3235, CVE-2011-3236, CVE-2011-3237, CVE-2011-3244)

29) WebKit
　ユーザ名を埋め込まれた URL を取り扱う際にクロスオリジン問題が存在することが原因で、クロスサイトスクリプティング攻撃を受ける脆弱性。(CVE-2011-0242)

30) WebKit
　DOM ノードを取り扱う際にクロスオリジン問題が存在することが原因で、クロスサイトスクリプティング攻撃を受ける脆弱性。(CVE-2011-1295)

31) WebKit
　DOM 履歴オブジェクトを取り扱う際に URL スヌーフィング問題が存在することが原因で、アドレスバーに異なる URL を表示される脆弱性。(CVE-2011-1107)

32) WebKit
　WebKit が libxslt を使用する際に設定問題が存在することが原因で、任意のコードを実行される脆弱性。(CVE-2011-1774)

33) WebKit
　WebKit が HTML 5 のドラッグ＆ドロップを取り扱う際にクロスオリジン問題が存在することが原因で、重要な情報を取得される脆弱性。(CVE-2011-0166)

34) WebKit
　Web Workers を取り扱い際にクロスオリジン問題が存在することが原因で、重要な情報を取得される脆弱性。(CVE-2011-1190)

35) WebKit
　window.open メソッドを取り扱う際にクロスオリジン問題が存在することが原因で、クロスサイトスクリプティング攻撃を受ける脆弱性。(CVE-2011-2805)

36) WebKit
　機能していない DOM ウィンドウを取り扱う際にクロスオリジン問題が存在すること原因で、クロスサイトスクリプティング攻撃を受ける脆弱性。(CVE-2011-3243)

37) WebKit
　document.documentURI 属性を取り扱う際にクロスサイトオリジン問題が存在することが原因で、クロスサイトスクリプティング攻撃を受ける脆弱性。(CVE-2011-2819)

38) WebKit
　以前にロードしたイベントを取り扱う際にクロスオリジン問題が存在することが原因で、フレーム内でユーザが閲覧した URL を追跡される脆弱性。(CVE-2011-2800)

39) WiFi
　パスコードや暗号化されたキーを含む WiFi 認証情報がシステムのアプリケーションから読み込み可能なファイルに記録されることが原因で、認証情報を取得される脆弱性。(CVE-2011-3434)

13日木曜日、先勝

2011-10-13T10:43:00.000+09:00

About the security content of Numbers for iOS v1.5
http://support.apple.com/kb/HT5004

About the security content of Pages for iOS v1.5
http://support.apple.com/kb/HT5003

About the security content of Safari 5.1.1
http://support.apple.com/kb/HT5000

About the security content of OS X Lion v10.7.2 and Security Update 2011-006
http://support.apple.com/kb/HT5002

About the security content of Apple TV Software Update 4.4
http://support.apple.com/kb/HT5001

About the security content of iOS 5 Software Update
http://support.apple.com/kb/HT4999

VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console
http://www.vmware.com/security/advisories/VMSA-2011-0012.html

ソニーPSNなどに9万件超の「なりすまし」、不正侵入は確認されず
正規ユーザーのアカウントでログイン試行、カード情報の漏洩もなし
http://itpro.nikkeibp.co.jp/article/NEWS/20111013/370625/?ST=security

IEに危険な脆弱性、Webアクセスでウイルス感染の恐れ
セキュリティ情報8件が公開、2件は深刻度が「緊急」
http://itpro.nikkeibp.co.jp/article/NEWS/20111013/370624/?ST=security

JVNVU#756679 BlueZ-hcidump におけるヒープオーバーフローの脆弱性
http://jvn.jp/cert/JVNVU756679/index.html

JVNVU#377475 VLC Media Player に脆弱性
http://jvn.jp/cert/JVNVU377475/index.html

JVNVU#585859 Apple Safari における複数の脆弱性に対するアップデート
http://jvn.jp/cert/JVNVU585859/index.html

JVNVU#971123 Apple Mac OS Xにおける複数の脆弱性に対するアップデート
http://jvn.jp/cert/JVNVU971123/index.html

JVNVU#727187 Apple TV における複数の脆弱性に対するアップデート
http://jvn.jp/cert/JVNVU727187/index.html

JVNVU#177979 Apple iOS における複数の脆弱性に対するアップデート
http://jvn.jp/cert/JVNVU177979/index.html

JVN#07414354 DAEMON Tools におけるサービス運用妨害 (DoS) の脆弱性
http://jvn.jp/jp/JVN07414354/index.html

JVN#04013920 Pligg におけるクロスサイトスクリプティングの脆弱性
http://jvn.jp/jp/JVN04013920/index.html

Critical OS X Vulnerability Patched
http://isc.sans.edu/diary.html?storyid=11797

Apple iOS Multiple Flaws Let Remote Users Execute Arbitrary Code, Conduct Cross-Site Scripting Attacks, and Deny Service and Let Local Users Obtain Information
http://www.securitytracker.com/id/1026180

BlackBerry Enterprise Server Collaboration Service Bug Lets Remote Users Impersonate Intra-organization Messages
http://www.securitytracker.com/id/1026179

Mozilla Firefox/Thunderbird/SeaMonkey 'Array.reduceRight()' Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/48372

Microsoft Silverlight & .NET Framework Inheritance Restriction Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/49999

Microsoft Windows Active Accessibility DLL Loading Arbitrary Code Execution Vulnerability
http://www.securityfocus.com/bid/49976

Apache Tomcat 'sort' and 'orderBy' Parameters Cross Site Scripting Vulnerabilities
http://www.securityfocus.com/bid/45015

+ PSN-2011-10-392: Cross-site scripting injection in J-Web administrator logs
https://www.juniper.net/alerts/viewalert.jsp?actionBtn=Search&txtAlertNumber=PSN-2011-10-392&viewMode=view

+ PSN-2011-10-391: Junos kernel crash in Next-Gen MVPN scenario
https://www.juniper.net/alerts/viewalert.jsp?actionBtn=Search&txtAlertNumber=PSN-2011-10-391&viewMode=view

+? Apache APR 'apr_fnmatch()' Denial of Service Vulnerability
http://www.securityfocus.com/bid/47820

++ ActivePerl 5.14.2.1402 released
http://www.activestate.com/activeperl/downloads

- PHP 'grapheme_extract()' NULL Pointer Dereference Denial Of Service Vulnerability
http://www.securityfocus.com/bid/46429

[ANN] Apache log4net 1.2.11 Released
http://logging.apache.org/log4net/release/release-notes.html

2269637: セキュリティで保護されていないライブラリのロードにより、リモートでコードが実行される
http://technet.microsoft.com/ja-jp/security/advisory/2269637

Cisco Security Response: Cisco TelePresence Video Communication Server Cross-Site Scripting Vulnerability
http://www.cisco.com/en/US/products/products_security_response09186a0080b98d0b.html

Sybase IQが、IMJのSaaS型インハウスSEOツール「MTL KEYWORDS」のデータベースとして採用
http://www.sybase.jp/detail?id=1095188&contentOnly=true

New Insider Threat Demonstration Series Launched
http://www.cert.org/insider_threat/demonstrations/ITDS01.mp4

Insider Threat Control Technical Note Released
http://www.cert.org/archive/pdf/11tn024.pdf

FFRが標的型攻撃マルウエアの有無を検査するサービスを開始
http://itpro.nikkeibp.co.jp/article/NEWS/20111012/370599/?ST=security

エフセキュアがセキュリティソフトの新バージョンを発表
http://itpro.nikkeibp.co.jp/article/NEWS/20111012/370555/?ST=security

Critical Control 8 - Controlled Use of Administrative Privileges
http://isc.sans.edu/diary.html?storyid=11794

Apple Safari Bugs Let Remote Users Conduct Cross-Site Scripting Attacks, Execute Arbitrary Code, and Bypass Cookie Restrictions
http://www.securitytracker.com/id/1026178

SilverStripe URL Cross-Site Scripting Vulnerability
http://secunia.com/advisories/46390/

ManageEngine ADSelfService Plus Security Bypass Vulnerability
http://secunia.com/advisories/46381/

SUSE update for libqt4
http://secunia.com/advisories/46371/

Contao URL "getPageIdFromURL()" Cross-Site Scripting Vulnerability
http://secunia.com/advisories/46396/

Hitachi JP1/Cm2/Network Node Manager Unspecified Vulnerabilities
http://secunia.com/advisories/46411/

WordPress Light Post Plugin "abspath" File Inclusion Vulnerability
http://secunia.com/advisories/46422/

SUSE update for Qt
http://secunia.com/advisories/46410/

Google App Engine SDK for Python Cross-Site Request Forgery Vulnerability
http://secunia.com/advisories/46357/

SUSE update for tomcat5
http://secunia.com/advisories/46407/

MyBB MyStatus Plugin "statid" SQL Injection Vulnerability
http://secunia.com/advisories/46360/

BlackBerry Enterprise Server Instant Messaging User Impersonation Vulnerability
http://secunia.com/advisories/46370/

Apple iTunes Multiple Vulnerabilities
http://secunia.com/advisories/46339/

POSH Cross-Site Scripting and File Inclusion Vulnerabilities
http://secunia.com/advisories/46354/

Red Hat update for kdelibs
http://secunia.com/advisories/46383/

DMXready Polling Booth Manager SQL Injection
http://securityreason.com/securityalert/8452

iJoomla Magazine 3.0.1 Remote File Inclusion
http://securityreason.com/securityalert/8451

A-Blog v2.0 (sources/search.php) SQL Injection Exploit
http://securityreason.com/securityalert/8450

ColdGen - coldbookmarks v1.22 Remote 0day SQL Injection vulnerability
http://securityreason.com/securityalert/8449

ColdUserGroup 1.06 Blind SQL Injection
http://securityreason.com/securityalert/8448

PHP Classifieds ADS Blind SQL Injection
http://securityreason.com/securityalert/8447

UCenter Home 2.0 -(0day) Remote SQL Injection Vulnerability
http://securityreason.com/securityalert/8446

ColdGen - coldcalender v2.06 Remote 0day SQL Injection
http://securityreason.com/securityalert/8445

Mechbunny PaysiteReviewCMS Permanent XSS Vulnerabilities
http://securityreason.com/securityalert/8444

Virtue Shopping Mall (detail.php prodid) SQL Injection Vulnerability
http://securityreason.com/securityalert/8443

Zenphoto 1.3 Security problems
http://securityreason.com/securityalert/8442

CubeCart 4.3.3 SQL Injection and XSS
http://securityreason.com/securityalert/8441

Joomla Component Clantools version 1.2.3 Multiple Blind SQL Injection Vulnerability
http://securityreason.com/securityalert/8440

MySource Matrix 3.28.3 (height) Remote Reflected XSS Vulnerability
http://securityreason.com/securityalert/8439

CMS WebManager-Pro Vulnerabilities
http://securityreason.com/securityalert/8438

chillyCMS Multiple Vulnerabilities
http://securityreason.com/securityalert/8437

HINNENDAHL.COM Gaestebuch 1.2 Remote File Inclusion Vulnerability
http://securityreason.com/securityalert/8436

MODx Revolution 2.0.2-pl Reflected Cross-site Scripting
http://securityreason.com/securityalert/8435

Auto CMS XSS vulnerability
http://securityreason.com/securityalert/8434

ApPHP Calendar XSS CSRF
http://securityreason.com/securityalert/8433

REMOTE: Mozilla Firefox Array.reduceRight() Integer Overflow Exploit
http://www.exploit-db.com/exploits/17974/

Microsoft Windows Kernel 'Win32k.sys' (CVE-2011-1985) Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/49968

AzeoTech DAQFactory Denial of Service Vulnerability
http://www.securityfocus.com/bid/48955

Microsoft Windows Kernel 'Win32k.sys' TrueType Font File Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/49973

Microsoft Windows Kernel '.fon' Font File Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/49975

Microsoft Windows Kernel 'Win32k.sys' (CVE-2011-2011) Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/49981

Microsoft Internet Explorer Virtual Function Table CVE-2011-2001 Memory Corruption Vulnerability
http://www.securityfocus.com/bid/49966

Microsoft Windows AFD Driver CVE-2011-2005 Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/49941

Microsoft Internet Explorer Body Element CVE-2011-2000 Memory Corruption Vulnerability
http://www.securityfocus.com/bid/49965

Microsoft Internet Explorer Select Element CVE-2011-1999 Memory Corruption Vulnerability
http://www.securityfocus.com/bid/49964

Microsoft Internet Explorer Option Element CVE-2011-1996 Memory Corruption Vulnerability
http://www.securityfocus.com/bid/49961

Microsoft Internet Explorer 'Jscript9.dll' CVE-2011-1998 Memory Corruption Vulnerability
http://www.securityfocus.com/bid/49963

Microsoft Internet Explorer 'OLEAuto32.dll' CVE-2011-1995 Memory Corruption Vulnerability
http://www.securityfocus.com/bid/49960

Microsoft Internet Explorer Uninitalized Object CVE-2011-1993 Memory Corruption Vulnerability
http://www.securityfocus.com/bid/49947

Apache Tomcat Authentication Header Realm Name Information Disclosure Vulnerability
http://www.securityfocus.com/bid/39635

Microsoft Internet Explorer OnLoad Event CVE-2011-1997 Memory Corruption Vulnerability
http://www.securityfocus.com/bid/49962

Apple QuickTime CVE-2011-0252 STTS Atoms Heap Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/49038

PHP 'OpenSSL' Extension Multiple Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/46977

Multiple Vendors STARTTLS Implementation Plaintext Arbitrary Command Injection Vulnerability
http://www.securityfocus.com/bid/46767

PHP 'Intl' Extension 'NumberFormatter::setSymbol()' Function Denial of Service Vulnerability
http://www.securityfocus.com/bid/46968

WebKit 'libxslt' Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/48840

Google Chrome Prior to 13.0.782.215 Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/49279

Webkit Address Bar URI Spoofing Vulnerability
http://www.securityfocus.com/bid/47020

Google Chrome Prior to 13.0.782.107 Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/48960

Google Chrome Prior to 14.0.835.163 Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/49658

WebKit 'HTML5' Drag and Drop Cross-Origin Information Disclosure Vulnerability
http://www.securityfocus.com/bid/46811

PHP 'Zip' Extension 'zip_fread()' Function Denial of Service Vulnerability
http://www.securityfocus.com/bid/46975

WebKit Embedded URL Cross Domain Scripting Vulnerability
http://www.securityfocus.com/bid/48859

Apache Tomcat 'Transfer-Encoding' Information Disclosure and Denial Of Service Vulnerabilities
http://www.securityfocus.com/bid/41544

Apache Tomcat SecurityManager Security Bypass Vulnerability
http://www.securityfocus.com/bid/46177

Apache Tomcat HTML Manager Interface HTML Injection Vulnerability
http://www.securityfocus.com/bid/46174

FreeType 'src/psaux/t1decode.c' Memory Corruption Vulnerability
http://www.securityfocus.com/bid/48619

Apache Tomcat NIO Connector Denial of Service Vulnerability
http://www.securityfocus.com/bid/46164

WebKit CVE-2011-1797 Memory Corruption Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/48858

Google Chrome Prior to 12.0.742.112 Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/48479

ISC BIND 9 'RRSIG' Record Type Negative Cache Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/45133

Apache APR 'apr_fnmatch()' Denial of Service Vulnerability
http://www.securityfocus.com/bid/47820

Apache HTTP Server CVE-2011-3192 Denial Of Service Vulnerability
http://www.securityfocus.com/bid/49303

Python 'audioop' Module Integer Overflow Vulnerability
http://www.securityfocus.com/bid/40370

ISC BIND 9 Unspecified Packet Processing Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/48566

WebKit CVE-2011-1457 Memory Corruption Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/48856

WebKit CVE-2011-1462 Memory Corruption Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/48857

WebKit CVE-2011-1453 Memory Corruption Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/48855

PHP 'Zip' Extension 'stream_get_contents()' Function Denial of Service Vulnerability
http://www.securityfocus.com/bid/46969

PHP Stream Component Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/46970

Google Chrome Prior to 11.0.696.57 Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/47604

WebKit MathML Tags Use-After-Free Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/48824

Google Chrome Prior to 10.0.648.204 Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/47029

WebKit CVE-2011-1288 Memory Corruption Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/48854

WebKit CVE-2011-0222 Memory Corruption Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/48844

WebKit CVE-2011-0225 Memory Corruption Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/48845

WebKit CVE-2011-0232 Memory Corruption Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/48846

WebKit FrameOwner Element Memory Corruption Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/48847

WebKit Malformed XHTML Tags Use After Free Memory Corruption Vulnerability
http://www.securityfocus.com/bid/48823

WebKit CVE-2011-0235 Memory Corruption Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/48848

WebKit CVE-2011-0238 Memory Corruption Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/48850

WebKit CVE-2011-0255 Memory Corruption Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/48853

WebKit 'NamedNodeMap.cpp' Memory Corruption Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/48852

Google Chrome prior to 9.0.597.94 Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/46262

WebKit Multiple Unspecifeid Remote Code Execution Vulnerabilities
http://www.securityfocus.com/bid/50066

Google Chrome prior to 10.0.648.127 Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/46785

Google Chrome prior to 9.0.597.107 Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/46614

WebKit CVE-2011-0221 Memory Corruption Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/48843

WebKit CVE-2011-0218 Memory Corruption Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/48842

Apple Mac OS X Quicklook Office File Memory Corruption Vulnerability
http://www.securityfocus.com/bid/48440

Apple Mac OS X QuickLook Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/46965

Apple Mac OS X IPV6 Socket Options (CVE-2010-1132) Denial of Service Vulnerability
http://www.securityfocus.com/bid/48422

Apple Mac OS X QuickTime Cross Domain Information Disclosure Vulnerability
http://www.securityfocus.com/bid/46992

Apple Mac OS X ICU (CVE-2011-0206) Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/48429

Mozilla Firefox/Thunderbird/SeaMonkey CVE-2011-3232 YARR Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/49850

libTIFF CCITT Group 4 Encoded TIFF Image Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/46658

Apple Safari ImageIO TIFF Image Handling Heap Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/48833

SSL/TLS Protocol Initialization Vector Implementation Information Disclosure Vulnerability
http://www.securityfocus.com/bid/49778

PHP 'shmop_read()' Remote Integer Overflow Vulnerability
http://www.securityfocus.com/bid/46786

PHP Exif Extension 'exif_read_data()' Function Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/46365

PHP 'phar/phar_object.c' Format String Vulnerability
http://www.securityfocus.com/bid/46854

OTRS Unspecified Remote Command Execution Vulnerability
http://www.securityfocus.com/bid/46947

libzip '_zip_name_locate()' NULL Pointer Dereference Denial Of Service Vulnerability
http://www.securityfocus.com/bid/46354

PHP 'grapheme_extract()' NULL Pointer Dereference Denial Of Service Vulnerability
http://www.securityfocus.com/bid/46429

PHP 'zend_strtod()' Function Floating-Point Value Denial of Service Vulnerability
http://www.securityfocus.com/bid/45668

PHP 'open_basedir' Security-Bypass Vulnerability
http://www.securityfocus.com/bid/44723

GNU Mailman 'Full name' Field Multiple Cross Site Scripting Vulnerabilities
http://www.securityfocus.com/bid/46464

ISC BIND Key Algorithm Rollover Security Vulnerability
http://www.securityfocus.com/bid/45137

ISC BIND 9 DNSSEC Query Response Additional Section Remote Cache Poisoning Vulnerability
http://www.securityfocus.com/bid/37118

ISC BIND 9 DNSSEC Bogus NXDOMAIN Response Remote Cache Poisoning Vulnerability
http://www.securityfocus.com/bid/37865

Apple Mac OS X CoreFoundation (CVE-2011-0259) Memory Corruption Vulnerability
http://www.securityfocus.com/bid/50067

Python 'urllib' and 'urllib2' Modules Information Disclosure and Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/47024

Apple Mac OS X CoreMedia H.264 Encoded Movie Files Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/50068

Python 'audioop' Module Memory Corruption Vulnerability
http://www.securityfocus.com/bid/40863

libpng Buffer Overflow and Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/48660

jabberd XML Parsing Denial of Service Vulnerability
http://www.securityfocus.com/bid/48250

ISC BIND 9 Large RRSIG RRsets Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/48007

libpng PNG File Denial Of Service Vulnerability
http://www.securityfocus.com/bid/48618

Apple Mobile OfficeImport Framework Excel Record Memory Corruption Vulnerability
http://www.securityfocus.com/bid/44799

Apple Mac OS X QuickLook Remote Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/44812

Apple Mobile Safari for iOS 4.2.1 Unspecified Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/46832

Linux Kernel TCP Sequence Number Generation Security Weakness
http://www.securityfocus.com/bid/49289

Linux Kernel Generic Receive Offload (GRO) CVE-2011-2723 Denial of Service Vulnerability
http://www.securityfocus.com/bid/48929

Samba 'etc/mtab' File Appending Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/49939

Adobe Flash Media Server NULL Pointer Dereference Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/49103

Samba 'client/mount.cifs.c' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/38326

OPC Systems.NET RPC Packet Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/50047

Linux Kernel 'drivers/media/radio/si4713-i2c.c' Remote Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/48804

Linux Kernel 'fs/befs/linuxvfs.c' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/49256

Linux Kernel 'inet_diag_bc_audit()' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/48333

Linux kernel l2cap Remote Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/48472

Linux Kernel 'CIFSFindNext()' Function Denial of Service Vulnerability
http://www.securityfocus.com/bid/49295

Linux Kernel EFI Partition Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/47796

Linux Kernel EXT4 Extent Format File Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/48697

Google App Engine SDK Cross Site Request Forgery Vulnerability And Command Execution Weaknesses
http://www.securityfocus.com/bid/50075

TUGZip ZIP File Remote Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/31913

Joomla! JCE Component Multiple Directory Traversal Vulnerabilities
http://www.securityfocus.com/bid/49338

Microsoft Publisher '.pub' File 'pubconv.dll' Memory Corruption Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/50090

Apple Safari Prior to 5.1.1 Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/50089

WebKit Inactive DOM Windows Cross Domain Scripting Vulnerability
http://www.securityfocus.com/bid/50088

Apple Kernel TCP Exhaustion Denial of Service Vulnerability
http://www.securityfocus.com/bid/50087

Apple iPhone/iPad/iPod touch Prior to iOS 5 Multiple Vulnerabilities
http://www.securityfocus.com/bid/50086

Cisco TelePresence Video Communication Server 'User-Agent' HTTP Header HTML Injection Vulnerability
http://www.securityfocus.com/bid/50084

BugFree Multiple Cross Site Scripting Vulnerabilities
http://www.securityfocus.com/bid/50083

WordPress GD Star Rating Plugin 'de' Parameter SQL Injection Vulnerability
http://www.securityfocus.com/bid/50082

Filmis SQL Injection and Cross Site Scripting Vulnerabilities
http://www.securityfocus.com/bid/50081

WordPress Light Post Plugin 'abspath' Parameter Remote File Include Vulnerability
http://www.securityfocus.com/bid/50080

Hitachi JP1/Cm2/Network Node Manager Multiple Unspecified Remote Vulnerabilities
http://www.securityfocus.com/bid/50079

Honeywell EBI TEMA Remote Installer ActiveX Control Arbitrary File Download Vulnerability
http://www.securityfocus.com/bid/50078

POSH Local File Include and Cross Site Scripting Vulnerabilities
http://www.securityfocus.com/bid/50077

MyBB MyStatus 'statid' Parameter SQL Injection Vulnerability
http://www.securityfocus.com/bid/50073

Joomla! Sgicatalog Component 'id' Parameter SQL Injection Vulnerability
http://www.securityfocus.com/bid/50072

:: IT Security Neophyte Investigator's MEMO ::

3日 金曜日、赤口

2日 木曜日、大安

1日 水曜日、仏滅

2日 水曜日、仏滅

31日 月曜日、友引

28日 金曜日、大安

QuickTime 7.7.1 のセキュリティアップデート

27日 木曜日、仏滅

26日 水曜日、友引

25日 火曜日、先勝

24日 月曜日、赤口

21日 金曜日、先負

20日 木曜日、友引

19日 水曜日、先勝

18日 火曜日、赤口

17日 月曜日、大安

14日 金曜日、友引