19日 金曜日、赤口

JVNVU#472363 IPv6 実装における Forward Information Base のアップデートに関する問題
http://jvn.jp/cert/JVNVU472363/index.html

JVNDB-2010-001060 GNU gzip における複数の脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001060.html

JVNDB-2010-001059 Rockwell Automation Allen-Bradley MicroLogix PLC に複数の脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001059.html

JVNDB-2010-001058 Microsoft Internet Explorer において任意のコードが実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001058.html

JVNDB-2008-001046 MySQL で使用される yaSSL におけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001046.html

JVNDB-2008-001045 MySQL で使用される yaSSL における複数のバッファオーバーフローの脆弱性
http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001045.html

MS10-015 may cause Windows XP to blue screen (but only if you have malware on it)
http://isc.sans.org/diary.html?storyid=8266

IPAフォントの派生フォント「Takaoフォント」リリース
http://sourceforge.jp/magazine/10/02/18/117208

Asterisk Scripting Support Lets Remote Users Inject Data into Dialplans
http://securitytracker.com/alerts/2010/Feb/1023637.html

IBM Cognos Express Default Management Account Lets Remote User Access the System
http://securitytracker.com/alerts/2010/Feb/1023636.html

New-CMS Multiple Local File Include and HTML-Injection Vulnerabilities
http://www.securityfocus.com/bid/38307

PortWise SSL VPN 'reloadFrame' Parameter Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/38308

+ MySQL Community Server 5.1.44 has been released
http://dev.mysql.com/doc/refman/5.1/en/news-5-1-44.html

+ SYM10-002: Security Advisories Relating to Symantec Products - Symantec Event Manipulation Potential Scan Bypass
http://www.symantec.com/business/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100217_00
http://securitytracker.com/alerts/2010/Feb/1023621.html
http://secunia.com/advisories/38653/
http://www.vupen.com/english/advisories/2010/0410

+ SYM10-004: Security Advisories Relating to Symantec Products - Symantec Client Proxy Buffer Overflow in Older Product Versions
http://www.symantec.com/business/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100217_02
http://securitytracker.com/alerts/2010/Feb/1023624.html
http://secunia.com/advisories/38651/
http://www.vupen.com/english/advisories/2010/0412

++ Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances
http://www.cisco.com/warp/public/707/cisco-sa-20100217-asa.shtml

[ANNOUNCE] dataPro version 1.6.1 released
http://www.vive.net/products/datapro.htm

Samba3-HOWTOの日本語訳を公開しました。
http://www.samba.gr.jp/project/translation/Samba3-HOWTO/

Call for Papers: 12th German Perl Workshop 2010
http://use.perl.org/article.pl?sid=10/02/18/1726218&from=rss

EMS SQL Manager for PostgreSQL version 4.7 released
http://www.postgresql.org/about/news.1182

iTuple and haxTuple: open source ERP, now on the iPhone and with bug derby prizes
http://www.postgresql.org/about/news.1181

340485: Volumes controlled by Veritas Cluster Services or Storage Foundation for Windows High Availability will cause system hang during large file copy in certain instances.
http://seer.entsupport.symantec.com/docs/340485.htm

Mandriva : pidgin
http://www.criticalwatch.com/support/security-advisories.aspx?AID=31801

Secunia : Mozilla Firefox Memory Corruption Vulnerability
http://www.criticalwatch.com/support/security-advisories.aspx?AID=31813

Cisco : Multiple Vulnerabilities in Cisco Security Agent
http://www.criticalwatch.com/support/security-advisories.aspx?AID=31807

Cisco : Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances
http://www.criticalwatch.com/support/security-advisories.aspx?AID=31808

Cisco : Cisco Firewall Services Module Skinny Client Control Protocol Inspection Denial of Service Vulnerabi
http://www.criticalwatch.com/support/security-advisories.aspx?AID=31809

Debian : New kdelibs packages fix arbitrary code execution
http://www.criticalwatch.com/support/security-advisories.aspx?AID=31804

Independent Researcher : Rising Online Virus Scanner ActiveX Control DoS (Stack overflow)
http://www.criticalwatch.com/support/security-advisories.aspx?AID=31810

Justin C. Klein Keane : Drupal Help Injection Module XSS Vulnerability
http://www.criticalwatch.com/support/security-advisories.aspx?AID=31811

Mandriva : netpbm
http://www.criticalwatch.com/support/security-advisories.aspx?AID=31799

Mandriva : gnome-screensaver
http://www.criticalwatch.com/support/security-advisories.aspx?AID=31800

ProCheckUp : Cross-Site Scriting on Portwise SSL VPN v4.6
http://www.criticalwatch.com/support/security-advisories.aspx?AID=31812

Red Hat : Critical: firefox security update
http://www.criticalwatch.com/support/security-advisories.aspx?AID=31805

Red Hat : Critical: seamonkey security update
http://www.criticalwatch.com/support/security-advisories.aspx?AID=31806

Ubuntu Security Notice : Firefox 3.0 and Xulrunner 1.9 vulnerabilities
http://www.criticalwatch.com/support/security-advisories.aspx?AID=31802

Ubuntu Security Notice : Firefox 3.5 and Xulrunner 1.9.1 vulnerabilities
http://www.criticalwatch.com/support/security-advisories.aspx?AID=31803

[SECURITY] [DSA 1999-1] New xulrunner packages fix several vulnerabilities
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-02/msg00164.html

[ MDVSA-2010:034-1 ] kernel
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-02/msg00162.html

ZDI-10-018: IBM Cognos Server Backdoor Account Remote Code Execution Vulnerability
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-02/msg00160.html

[ MDVSA-2010:041 ] pidgin
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-02/msg00168.html

Secunia Research: Mozilla Firefox Memory Corruption Vulnerability
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-02/msg00158.html

[USN-895-1] Firefox 3.0 and Xulrunner 1.9 vulnerabilities
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-02/msg00166.html

[ MDVSA-2010:040 ] gnome-screensaver
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-02/msg00161.html

[ MDVSA-2010:039 ] netpbm
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-02/msg00165.html

Cross-Site Scriting on Portwise SSL VPN v4.6
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-02/msg00156.html

Cisco Security Advisory: Cisco Firewall Services Module Skinny Client Control Protocol Inspection De
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-02/msg00159.html

Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Applian
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-02/msg00157.html

Circumventing Critical Security in Windows XP
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-02/msg00163.html

Pixel Portal Sql Injection Vulnerability
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-02/msg00155.html

RHSA-2010:0115-1: Moderate: pidgin security update
http://rhn.redhat.com/errata/RHSA-2010-0115.html

Mozilla Thunderbird Use-After-Free Error in HTML Parser Lets Remote Users Execute Arbitrary Code
http://securitytracker.com/alerts/2010/Feb/1023633.html

Mozilla Thunderbird Browser Engine Bugs Let Remote Users Execute Arbitrary Code
http://securitytracker.com/alerts/2010/Feb/1023632.html

Symantec Client Security Buffer Overflow in SYMLTCOM.dll ActiveX Control Lets Remote Users Execute Arbitrary Code in Certain Limited Cases
http://securitytracker.com/alerts/2010/Feb/1023631.html

Norton System Works Buffer Overflow in SYMLTCOM.dll ActiveX Control Lets Remote Users Execute Arbitrary Code in Certain Limited Cases
http://securitytracker.com/alerts/2010/Feb/1023630.html

Norton Anti-Virus Buffer Overflow in SYMLTCOM.dll ActiveX Control Lets Remote Users Execute Arbitrary Code in Certain Limited Cases
http://securitytracker.com/alerts/2010/Feb/1023629.html

Norton Internet Security Buffer Overflow in SYMLTCOM.dll ActiveX Control Lets Remote Users Execute Arbitrary Code in Certain Limited Cases
http://securitytracker.com/alerts/2010/Feb/1023628.html

Symantec Client Security Buffer Overflow in Client Proxy ActiveX Control Lets Remote Users Execute Arbitrary Code
http://securitytracker.com/alerts/2010/Feb/1023625.html

Symantec AntiVirus Buffer Overflow in Client Proxy ActiveX Control Lets Remote Users Execute Arbitrary Code
http://securitytracker.com/alerts/2010/Feb/1023624.html

Symantec Endpoint Protection Event Management Flaw Lets Remote Users Bypass On-Demand Scanning
http://securitytracker.com/alerts/2010/Feb/1023623.html

Symantec Client Security Event Management Flaw Lets Remote Users Bypass On-Demand Scanning
http://securitytracker.com/alerts/2010/Feb/1023622.html

Symantec AntiVirus Event Management Flaw Lets Remote Users Bypass On-Demand Scanning
http://securitytracker.com/alerts/2010/Feb/1023621.html

Mozilla Firefox Content-Type Header Processing Error Permits Cross-Domain Scripting Attacks
http://securitytracker.com/alerts/2010/Feb/1023615.html

Drupal Content Distribution Module Multiple Vulnerabilities
http://secunia.com/advisories/38652/

Joomla! Core Design Scriptegrator Plugin "files[]" File Inclusion Vulnerability
http://secunia.com/advisories/38637/

DotNetNuke Role Expiration Privilege Escalation Security Issue
http://secunia.com/advisories/38634/

New-CMS Script Insertion and Cross-Site Request Forgery Vulnerabilities
http://secunia.com/advisories/38631/

OmniDocs SQL Injection Vulnerability
http://secunia.com/advisories/38527/

Mozilla Firefox Unspecified Code Execution Vulnerability
http://secunia.com/advisories/38608/

IBM Lotus Notes Unspecified Buffer Overflow Vulnerability
http://secunia.com/advisories/38622/

Novell Products Kerberos KDC Integer Underflow Vulnerabilities
http://secunia.com/advisories/38612/

Google Gadget ActiveX Control ATL Templates Vulnerability
http://secunia.com/advisories/38496/

Cisco Security Agent Multiple Vulnerabilities
http://secunia.com/advisories/38619/

Symantec Products "SYMLTCOM.dll" ActiveX Control Buffer Overflow
http://secunia.com/advisories/38654/

Pidgin Multiple Denial of Service Weaknesses
http://secunia.com/advisories/38563/

Enomaly ECP Community Edition "vmfeed" Module Multiple Security Issues
http://secunia.com/advisories/38589/

Symantec Products Scanning Bypass Weakness
http://secunia.com/advisories/38653/

Cisco PIX 500 Series Multiple Vulnerabilities
http://secunia.com/advisories/38636/

Cisco Firewall Services Module Denial of Service Vulnerability
http://secunia.com/advisories/38621/

Cisco ASA 5500 Series Multiple Vulnerabilities
http://secunia.com/advisories/38618/

Ubuntu update for firefox and xulrunner
http://secunia.com/advisories/38663/

Ubuntu update for firefox and xulrunner
http://secunia.com/advisories/38649/

Symantec Products Client Proxy ActiveX Control Buffer Overflow
http://secunia.com/advisories/38651/

Red Hat update for seamonkey
http://secunia.com/advisories/38661/

Nikira Fraud Management System "message" Cross-Site Scripting Vulnerability
http://secunia.com/advisories/38564/

KDE KRunner Lock Module Race Condition Weakness
http://secunia.com/advisories/38600/

Drupal iTweak Upload Module Script Insertion Vulnerability
http://secunia.com/advisories/38633/

Red Hat update for firefox
http://secunia.com/advisories/38655/

Debian update for kdelibs
http://secunia.com/advisories/38624/

Mozilla Thunderbird Multiple Vulnerabilities
http://secunia.com/advisories/38657/

Mozilla SeaMonkey Multiple Vulnerabilities
http://secunia.com/advisories/38656/

Mozilla Firefox Multiple Vulnerabilities
http://secunia.com/advisories/37242/

Erotik Auktionshaus "id" SQL Injection Vulnerability
http://secunia.com/advisories/38614/

Multiple File Attachments Mail Form Arbitrary File Upload Security Issue
http://secunia.com/advisories/38630/

Linux Kernel USB Information Disclosure and Denial of Service
http://secunia.com/advisories/38601/

Cisco ASA 5500 Authentication Bypass and Denial of Service Issues
http://www.vupen.com/english/advisories/2010/0415

Novell Products Kerberos AES / RC4 Integer Underflow Vulnerabilities
http://www.vupen.com/english/advisories/2010/0414

Pidgin Security Update Fixes Multiple Denial of Service Vulnerabilities
http://www.vupen.com/english/advisories/2010/0413

Symantec Products Client Proxy Remote Buffer Overflow Vulnerability
http://www.vupen.com/english/advisories/2010/0412

Symantec Products "SYMLTCOM.dll" Buffer Overflow Vulnerability
http://www.vupen.com/english/advisories/2010/0411

Symantec Products Event Manipulation Scan Bypass Weakness
http://www.vupen.com/english/advisories/2010/0410

KDE KRunner Lock Module Race Condition Security Bypass Vulnerability
http://www.vupen.com/english/advisories/2010/0409

Mozilla Products Code Execution and Security Bypass Vulnerabilities
http://www.vupen.com/english/advisories/2010/0405

Easy~Ftp Server v1.7.0.2 (HTTP) Remote BOF Exploit
http://www.exploit-db.com/exploits/11500

gitWeb v1.5.2 Remote Command Execution
http://www.exploit-db.com/exploits/11497

SYM10-005: Security Advisories Relating to Symantec Products - Symantec IM Manager Local-Access Cross-site Scripting
http://www.symantec.com/business/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100218_00

SYM10-003: Security Advisories Relating to Symantec Products - Input validation errors in SYMLTCOM.dll can lead to a buffer overflow.
http://www.symantec.com/business/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100217_01

Expat UTF-8 Character XML Parsing Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/36097

FFmpeg Version 0.5 Multiple Remote Vulnerabilities
http://www.securityfocus.com/bid/36465

Linux Kernel 'hfc_usb.c' Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/37036

Linux Kernel 'drivers/scsi/gdth.c' Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/37068

Linux Kernel AppleTalk Driver IP Over DDP Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/36379

Linux Kernel 'unix_stream_connect()' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/36723

Linux Kernel 'ebtables' Security Bypass Vulnerability
http://www.securityfocus.com/bid/37762

Linux e1000 Driver 'Jumbo Frame' Handling Remote Security Bypass Vulnerability
http://www.securityfocus.com/bid/37519

Linux Kernel r128 Driver CCE Initialization NULL Pointer Dereference Denial of Service Vulnerability
http://www.securityfocus.com/bid/36824

Linux Kernel 'megaraid_sas' Driver Insecure File Permission Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/37019

Mozilla Firefox CVE-2010-0159 Multiple Remote Memory Corruption Vulnerabilities
http://www.securityfocus.com/bid/38286

Mozilla Firefox and SeaMonkey Web Workers Array Data Type Remote Memory Corruption Vulnerability
http://www.securityfocus.com/bid/38285

Mozilla Firefox/Thunderbird/SeaMonkey HTML Parser Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/38287

Mozilla Firefox and SeaMonkey 'showModalDialog' method Cross Domain Scripting Vulnerability
http://www.securityfocus.com/bid/38289

Mozilla Firefox and SeaMonkey SVG Document Cross Domain Scripting Vulnerability
http://www.securityfocus.com/bid/38288

Multiple Adobe Products Unspecified Cross Domain Scripting Vulnerability
http://www.securityfocus.com/bid/38198

Adobe Acrobat and Reader CVE-2010-0188 Unspecified Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/38195

Pidgin Multiple Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/38294

Mozilla Firefox Unspecified Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/38298

Adobe BlazeDS Information Disclosure Vulnerability
http://www.securityfocus.com/bid/38197

Joomla! Core Design Scriptegrator Component Local File Include Vulnerability
http://www.securityfocus.com/bid/38296

Microsoft Windows #GP Trap Handler Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/37864

Microsoft Windows Double Free Memory Corruption Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/38044

IBM Cognos Express Hardcoded Credentials Security Bypass Vulnerability
http://www.securityfocus.com/bid/38084

Python Multiple Buffer Overflow Vulnerabilities
http://www.securityfocus.com/bid/30491

Python zlib Module Remote Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/28715

Python ImageOP Module Multiple Integer Overflow Vulnerabilities
http://www.securityfocus.com/bid/25696

MIT Kerberos AES and RC4 Decryption Integer Underflow Vulnerabilities
http://www.securityfocus.com/bid/37749

Multiple RealNetworks Products Multiple Remote Vulnerabilities
http://www.securityfocus.com/bid/37880

CubeCart 'productId' SQL Injection Vulnerability
http://www.securityfocus.com/bid/37065

Multiple RealNetworks Products Multiple Remote Vulnerabilities
http://www.securityfocus.com/bid/37880

CubeCart 'productId' SQL Injection Vulnerability
http://www.securityfocus.com/bid/37065

Google Desktop Gadget ActiveX Control ATL Templates Security Vulnerability
http://www.securityfocus.com/bid/38060

Netpbm XPM File Remote Stack Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/38164

Drupal iTweak Upload Module HTML Injection Vulnerability
http://www.securityfocus.com/bid/38292

XlentProjects SphereCMS 'archive.php' SQL Injection Vulnerability
http://www.securityfocus.com/bid/38309

New-CMS Multiple Local File Include and HTML-Injection Vulnerabilities
http://www.securityfocus.com/bid/38307

Newgen Software OmniDocs 'ForceChangePassword.jsp' SQL Injection Vulnerability
http://www.securityfocus.com/bid/38304

OSClass Multiple Input Validation Vulnerabilities
http://www.securityfocus.com/bid/38302

IBM Lotus Notes Unspecified Remote Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/38300

DotNetNuke Role Expiration Security Bypass Vulnerability
http://www.securityfocus.com/bid/38299

DigiDNA FileApp Remote Denial Of Service Vulnerability
http://www.securityfocus.com/bid/38297

Joomla! 'com_otzivi' Component 'controller' Parameter Local File Include Vulnerability
http://www.securityfocus.com/bid/38295

Symantec IM Manager Console HTML Injection Vulnerability
http://www.securityfocus.com/bid/38241

18日 木曜日、大安

InterScan for Domino 3.0 Windows版 Patch5 公開のお知らせ
http://www.trendmicro.co.jp/support/news.asp?id=1366

JVNDB-2009-002502 Linux kernel の poll_mode_io ファイルにおけるドライバの I/O モードを変更される脆弱性
http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002502.html

JVNDB-2009-002501 Linux kernel におけるドライバの動作およびログレベルを変更される脆弱性
http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002501.html

JVNDB-2010-001057 Linux kernel における SCSI ホストの属性に任意の変更を加えられる脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001057.html

JVNDB-2006-000995 Linux kernel の do_coredump 関数における任意のファイルを改ざんされる脆弱性
http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000995.html

JVNDB-2010-001056 Linux kernel の net/ipv4/route.c 用の特定のレッドハットパッチにおけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001056.html

JVNDB-2010-001055 Linux kernel の fasync_helper 関数における権限昇格の脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001055.html

JVNDB-2009-002500 Linux kernel の hfs サブシステムにおけるスタックベースのバッファオーバーフローの脆弱性
http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002500.html

JVNDB-2009-002499 Linux kernel の drivers/firewire/ohci.c におけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002499.html

JVNDB-2009-002498 Linux kernel の fuse_direct_io 関数におけるサービス運用妨害 (DoS)の脆弱性
http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002498.html

JVNDB-2009-002497 Linux kernel の gdth_read_event 関数における権限昇格の脆弱性
http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002497.html

JVNDB-2009-002446 NTP におけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002446.html

JVNDB-2009-002319 SSL および TLS プロトコルに脆弱性
http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002319.html

JVNDB-2009-002138 Apple Mac OS の SMB サブシステムにおけるファイル共有の制限を回避される脆弱性
http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002138.html

JVNDB-2009-000036 Apache Tomcat における情報漏えいの脆弱性
http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000036.html

Mozilla Firefox showModalDialog Validation Flaw Permits Cross-Site Scripting Attacks
http://securitytracker.com/alerts/2010/Feb/1023614.html

Mozilla Firefox Use-After-Free Error in HTML Parser Lets Remote Users Execute Arbitrary Code
http://securitytracker.com/alerts/2010/Feb/1023613.html

Cisco ASA TCP, SIP, SCCP, DTLS, and IKE Processing Flaws Let Remote Users Deny Service
http://securitytracker.com/alerts/2010/Feb/1023612.html

Mozilla Firefox Web Workers Array Buffer Overflow Lets Remote Users Execute Arbitrary Code
http://securitytracker.com/alerts/2010/Feb/1023611.html

Mozilla Firefox Browser Engine Bugs Let Remote Users Execute Arbitrary Code
http://securitytracker.com/alerts/2010/Feb/1023610.html

Mozilla Firefox and SeaMonkey 'showModalDialog' method Cross Domain Scripting Vulnerability
http://www.securityfocus.com/bid/38289

Mozilla Firefox and SeaMonkey SVG Document Cross Domain Scripting Vulnerability
http://www.securityfocus.com/bid/38288

Mozilla Firefox and SeaMonkey Web Workers Array Data Type Remote Memory Corruption Vulnerability
http://www.securityfocus.com/bid/38285

Drupal iTweak Upload Module HTML Injection Vulnerability
http://www.securityfocus.com/bid/38292

Samba MS-RPC Remote Shell Command Execution Vulnerability
http://www.securityfocus.com/bid/23972

　

+ Linux Kernel USB Information Disclosure and Denial of Service
http://secunia.com/advisories/38601/

- A Security Vulnerability in the ntp Daemon (xntpd(1M)) May Lead to a Denial of the Solaris Network Time Protocol(NTP) Service
http://sunsolve.sun.com/search/document.do?assetkey=1-66-275590-1

- Cisco Security Advisory: Cisco Firewall Services Module Skinny Client Control Protocol Inspection Denial of Service Vulnerability
http://www.cisco.com/warp/public/707/cisco-sa-20100217-fwsm.shtml
http://securitytracker.com/alerts/2010/Feb/1023609.html
http://www.securityfocus.com/bid/38274

[ANNOUNCE] PostgreSQL Code Factory 10.2 released
http://www.sqlmaestro.com/products/postgresql/codefactory/download/

[ANN] Apache Tomcat Native 1.1.20 released
http://tomcat.apache.org/native-doc/miscellaneous/changelog.html

MySQL Workbench 5.2.16 Beta 6 Available
http://wb.mysql.com/?p=406

Firefox 3.5.8 and 3.0.18 security updates now available
http://developer.mozilla.org/devnews/index.php/2010/02/17/firefox-3-5-8-and-3-0-18-security-updates-now-available/

PostgreSQL-PLPerl-Call-1.004 released
http://search.cpan.org/~timb/PostgreSQL-PLPerl-Call-1.004/

Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances
http://www.cisco.com/warp/public/707/cisco-sa-20100217-asa.shtml

Cisco Applied Mitigation Bulletin: Identifying and Mitigating Exploitation of the Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances
http://www.cisco.com/warp/public/707/cisco-amb-20100217-asa.shtml

Cisco Security Advisory: Multiple Vulnerabilities in Cisco Security Agent
http://www.cisco.com/warp/public/707/cisco-sa-20100217-csa.shtml

Cisco Applied Mitigation Bulletin: Identifying and Mitigating Exploitation of the Multiple Vulnerabilities in Cisco Security Agent
http://www.cisco.com/warp/public/707/cisco-amb-20100217-csa.shtml

IBM Lotus Domino LDAP buffer overflow vulnerability advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21420749

RHSA-2010:0112-1: Critical: firefox security update
http://rhn.redhat.com/errata/RHSA-2010-0112.html

RHSA-2010:0113-1: Critical: seamonkey security update
http://rhn.redhat.com/errata/RHSA-2010-0113.html

ADOBE READERとACROBATに危険な脆弱性、対策は新版へのアップデート
緊急度は「クリティカル」、すべてのプラットフォームが影響
http://itpro.nikkeibp.co.jp/article/NEWS/20100218/344721/?ST=security

Defining Clouds - " A Cloud by any Other Name Would be a Lot Less Confusing"
http://isc.sans.org/diary.html?storyid=8251

Multiple Security Updates for ESX 3.x and ESXi 3.x
http://isc.sans.org/diary.html?storyid=8254

Cisco ASA5500 Security Updates - cisco-sa-20100217-asa
http://isc.sans.org/diary.html?storyid=8257

Cisco Security Agent Security Updates: cisco-sa-20100217-csa
http://isc.sans.org/diary.html?storyid=8260

Joomla RWCards Component "controller" File Inclusion Vulnerability
http://secunia.com/advisories/38638/

Multiple File Attachments Mail Form Arbitrary File Upload Security Issue
http://secunia.com/advisories/38630/

Limny Cross-Site Request Forgery Vulnerability
http://secunia.com/advisories/38616/

Erotik Auktionshaus "id" SQL Injection Vulnerability
http://secunia.com/advisories/38614/

Red Hat update for kernel
http://secunia.com/advisories/38610/

Red Hat update for NetworkManager
http://secunia.com/advisories/38606/

Red Hat update for mysql
http://secunia.com/advisories/38604/

FTP On The Go HTTP Request Processing Denial of Service
http://secunia.com/advisories/38603/

Red Hat update for mysql
http://secunia.com/advisories/38602/

Linux Kernel USB Information Disclosure and Denial of Service
http://secunia.com/advisories/38601/

Trendnet TV-IP201 Directory Traversal Vulnerability
http://secunia.com/advisories/38599/

Kerberos KDC Authorization Denial of Service Vulnerability
http://secunia.com/advisories/38598/

Ubuntu update for ruby1.9
http://secunia.com/advisories/38586/

Ubuntu update for squid
http://secunia.com/advisories/38572/

VMware ESX Server update for net-snmp
http://secunia.com/advisories/38562/

Facebook Photo Uploader ActiveX Unspecified Vulnerability
http://secunia.com/advisories/38495/

Cisco Firewall Services Module SCCP Protocol Flaw Lets Remote Users Deny Service
http://securitytracker.com/alerts/2010/Feb/1023609.html

Cisco ASA NTLMv1 Authentication Error Lets Remote Users Bypass Authentication
http://securitytracker.com/alerts/2010/Feb/1023608.html

Cisco Security Agent TCP Processing Flaw Lets Remote Users Deny Service
http://securitytracker.com/alerts/2010/Feb/1023607.html

Cisco Security Agent Management Center Input Validation Flaws Let Remote Authenticated Users Download Files and Inject SQL Commands
http://securitytracker.com/alerts/2010/Feb/1023606.html

iTunes 9.0.1 .pls file handling buffer overflow
http://www.exploit-db.com/exploits/11491

MIT Kerberos KDC AS and TGS Requests Denial of Service Vulnerability
http://www.vupen.com/english/advisories/2010/0401

VMware ESX Net-snmp GETBULK Denial of Service Vulnerability
http://www.vupen.com/english/advisories/2010/0400

Adobe Acrobat and Reader PDF Handling Code Execution Vulnerability
http://www.vupen.com/english/advisories/2010/0399

SAP J2EE Engine Message-Driven Bean Directory Traversal Issue
http://www.vupen.com/english/advisories/2010/0398

SAP NetWeaver WebDynpro Runtime Cross Site Scripting Vulnerability
http://www.vupen.com/english/advisories/2010/0397

SAP JAVA CORE Authentication Mechanism Phishing Vulnerability
http://www.vupen.com/english/advisories/2010/0396

Juniper Installer Service Remote Stack Buffer Overflow Vulnerability
http://www.vupen.com/english/advisories/2010/0395

Firewall Builder Iptables Script Insecure Temporary File Vulnerability
http://www.vupen.com/english/advisories/2010/0389

gnome-screensaver Monitor Removal Lock Bypass Vulnerability
http://www.securityfocus.com/bid/38149

Apple iTunes '.pls' File Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/36478

Apache Error Log Escape Sequence Injection Vulnerability
http://www.securityfocus.com/bid/9930

Multiple BSD Distributions 'gdtoa/misc.c' Memory Corruption Vulnerability
http://www.securityfocus.com/bid/35510

Rising Online Virus Scanner ActiveX Control 'Scan()' Method Stack Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/38282

Multiple Vendor TLS Protocol Session Renegotiation Security Vulnerability
http://www.securityfocus.com/bid/36935

Calendarix Multiple SQL Injection and Cross-Site Scripting Vulnerabilities
http://www.securityfocus.com/bid/13825

Apache mod_proxy_ftp Module NULL Pointer Dereference Denial Of Service Vulnerability
http://www.securityfocus.com/bid/36260

Apache mod_proxy_ftp Remote Command Injection Vulnerability
http://www.securityfocus.com/bid/36254

KDE Screensaver Unlock Dialog Race Condition Lock Bypass Vulnerability
http://www.securityfocus.com/bid/38214

Linux e1000 Driver 'Jumbo Frame' Handling Remote Security Bypass Vulnerability
http://www.securityfocus.com/bid/37519

Linux e1000e Driver 'Jumbo Frame' Handling Remote Security Bypass Vulnerability
http://www.securityfocus.com/bid/37523

Linux Kernel RTL8169 NIC 'RxMaxSize' Frame Size Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/37521

Cisco ASA 5500 NTLM Protocol Authentication Bypass Vulnerability
http://www.securityfocus.com/bid/38276

NTP mode 7 MODE_PRIVATE Packet Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/37255

Joomla! 'com_rwcards' Component 'controller' Parameter Local File Include Vulnerability
http://www.securityfocus.com/bid/38267

odlican.net CMS 'upload.php' Arbitrary File Upload Vulnerability
http://www.securityfocus.com/bid/38128

Pardus Sun-Java Insecure Permissions Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/38268

Joomla! 'com_acprojects' Component SQL Injection Vulnerability
http://www.securityfocus.com/bid/37897

Mozilla Firefox and SeaMonkey 'showModalDialog' method Cross Domain Scripting Vulnerability
http://www.securityfocus.com/bid/38289

Mozilla Firefox and SeaMonkey SVG Document Cross Domain Scripting Vulnerability
http://www.securityfocus.com/bid/38288

Mozilla Firefox/Thunderbird/SeaMonkey HTML Parser Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/38287

Mozilla Firefox CVE-2010-0159 Multiple Remote Memory Corruption Vulnerabilities
http://www.securityfocus.com/bid/38286

Mozilla Firefox and SeaMonkey Web Workers Array Data Type Remote Memory Corruption Vulnerability
http://www.securityfocus.com/bid/38285

Drupal Advanced Help Injection and Export Module HTML Injection Vulnerability
http://www.securityfocus.com/bid/38284

Cisco ASA 5500 Series SIP Traffic (CVE-2010-0569) Denial of Service Vulnerability
http://www.securityfocus.com/bid/38281

Cisco ASA 5500 WebVPN DTLS Packet Denial of Service Vulnerability
http://www.securityfocus.com/bid/38280

Cisco ASA 5500 IKE Message Denial of Service Vulnerability
http://www.securityfocus.com/bid/38279

Cisco ASA 5500 Crafted TCP Segment Denial of Service Vulnerability
http://www.securityfocus.com/bid/38278

Cisco ASA 5500 Series SIP Traffic (CVE-2010-0150) Denial of Service Vulnerability
http://www.securityfocus.com/bid/38277

Cisco ASA Appliance TCP Connection Exhaustion Denial of Service Vulnerability
http://www.securityfocus.com/bid/38275

Cisco Firewall Services Module SCCP Inspection Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/38274

Cisco Security Agent Unspecified Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/38273

Cisco Management Center for Cisco Security Agents SQL Injection Vulnerability
http://www.securityfocus.com/bid/38272

Cisco Security Agent Management Center Directory Traversal Vulnerability
http://www.securityfocus.com/bid/38271

Joomla! 'com_acteammember' Component SQL Injection Vulnerability
http://www.securityfocus.com/bid/38270

Joomla! 'com_acstartseite' Component SQL Injection Vulnerability
http://www.securityfocus.com/bid/38269

17日 水曜日、仏滅

MySQL 5.5.3 (Not yet released)
http://dev.mysql.com/doc/refman/5.5/en/news-5-5-3.html

PostgreSQL-PLPerl-Call-1.003 released
http://search.cpan.org/~timb/PostgreSQL-PLPerl-Call-1.003/

ウイルスバスター コーポレートエディション 8.0 SP1 Patch 5 公開のお知らせ
http://www.trendmicro.co.jp/support/news.asp?id=1367

JPCERT/CC WEEKLY REPORT 2010-02-17
http://www.jpcert.or.jp/wr/2010/wr100601.html

JVNDB-2010-001054 Realnetworks RealPlayer におけるバッファオーバーフローの脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001054.html

JVNDB-2010-001053 Realnetworks RealPlayer における ASM RuleBook の処理に関する脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001053.html

JVNDB-2010-001052 Realnetworks RealPlayer における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001052.html

JVNDB-2010-001051 Realnetworks RealPlayer の smlrender.dll における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001051.html

JVNDB-2010-001050 Realnetworks RealPlayer におけるヒープベースのバッファオーバーフローの脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001050.html

JVNDB-2010-001049 Realnetworks RealPlayer における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001049.html

JVNDB-2010-001048 RealNetworks RealPlayer の DLL ファイルにおける任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001048.html

JVNDB-2010-001047 RealNetworks RealPlayer の DLL ファイルにおける任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001047.html

JVNDB-2010-001046 Realnetworks RealPlayer における HTTP のチャンク転送コーディングの処理に関する脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001046.html

JVNDB-2010-001045 Realnetworks RealPlayer における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001045.html

JVNDB-2010-001044 Realnetworks RealPlayer における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001044.html

JVNDB-2009-002151 Linux kernel の z90crypt ドライバにおける権限昇格の脆弱性
http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002151.html

JVNDB-2009-002057 Linux kernel の udp_sendmsg 関数における権限昇格の脆弱性
http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002057.html

JVNDB-2009-002056 Linux kernel における proto_ops 構造体の初期化処理に関する権限昇格の脆弱性
http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002056.html

JVNDB-2009-001841 Linux kernel の agp サブシステムにおける情報漏えいの脆弱性
http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001841.html

JVNDB-2009-001838 Linux kernel の CIFS サブシステムにおける Unicode 文字列の処理に関するバッファオーバーフローの脆弱性
http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001838.html

JVNDB-2009-001837 Linux kernel の CIFS における長大な nativeFileSystem フィールドの処理に関するバッファオーバーフローの脆弱性
http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001837.html

JVNDB-2009-001297 Pango の pango_glyph_string_set_size 関数 における整数オーバーフローの脆弱性
http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001297.html

JVNDB-2009-001283 Ghostscript の ICC Format ライブラリにおける整数オーバーフローの脆弱性
http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001283.html

JVNDB-2009-001137 ICC Format ライブラリにおける任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001137.html

JVNDB-2009-001136 ICC Format ライブラリにおける整数オーバーフローの脆弱性
http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001136.html

JVNDB-2008-001149 Ghostscript の zseticcspace() 関数におけるバッファオーバーフローの脆弱性
http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001149.html

JVNDB-2005-000504 lm_sensors の pwmconfig (スクリプト)における不適切な一時ファイル作成によるシンボリックリンク攻撃を受ける脆弱性
http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000504.html

GNOME NetworkManager nm-connection-editor D-Bus Interface Discloses Configuration Data to Local Users
http://securitytracker.com/alerts/2010/Feb/1023603.html

GNOME NetworkManager Missing Certificate Validation Check Lets Remote Users Spoof Valid Networks
http://securitytracker.com/alerts/2010/Feb/1023602.html

httpdx 'MKD' Command Directory Traversal Vulnerability
http://www.securityfocus.com/bid/38242

ZeusCMS 'page' Parameter Local File Include Vulnerability
http://www.securityfocus.com/bid/38237

Huawei HG510 Multiple Cross-Site Request Forgery Vulnerabilities
http://www.securityfocus.com/bid/38261

+ ISC BIND 9.7.0 is now available
http://ftp.isc.org/isc/bind9/9.7.0/9.7.0

+ RHSA-2010:0108-1: Moderate: NetworkManager security update
http://rhn.redhat.com/errata/RHSA-2010-0108.html

+ RHSA-2010:0109-1: Moderate: mysql security update
http://rhn.redhat.com/errata/RHSA-2010-0109.html

+ RHSA-2010:0110-1: Moderate: mysql security update
http://rhn.redhat.com/errata/RHSA-2010-0110.html

+ ISVA-100216.1: Windows URL Handling Vulnerability
http://www.criticalwatch.com/support/security-advisories.aspx?AID=31781

- MySQL MyISAM Table Symbolic Link Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/37075

[ANNOUNCEMENT] Apache Commons DBCP 1.3 and 1.4 Released
http://www.apache.org/dist/commons/dbcp/RELEASE-NOTES.txt

[ANN] Release of Apache MyFaces Trinidad's Maven plugins (1.2.12)
https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310661&styleName=Html&version=12314452

[ANN] Release of Apache MyFaces Trinidad's Maven plugins (2.0.1)
https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310661&styleName=Html&version=12314512

[Announce] Release of Apache MyFaces Trinidad 2.0.0-alpha-2
https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310661&styleName=Html&version=12314513

[Announce] Release of Apache MyFaces Trinidad 1.0.12
https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310661&styleName=Html&version=12314137

[ANNOUNCE] Apache FontBox 1.0.0 released
http://pdfbox.apache.org/download.html

[ANNOUNCE] Apache PDFBox 1.0.0 released
http://pdfbox.apache.org/download.html

SUN ALERT WEEKLY SUMMARY REPORT - Week of 07-Feb-2010 to 13-Feb-2010
http://sunsolve.sun.com/search/document.do?assetkey=1-66-277331-1

APSB10-07: Security updates available for Adobe Reader and Acrobat
http://www.adobe.com/support/security/bulletins/apsb10-07.html

SSH Announces the Most Convenient Mobile Authentication Solution
https://newsclient.omxgroup.com/cdsPublic/viewDisclosure.action?disclosureId=385317&messageId=462228

RHBA-2010:0106-1: caching-nameserver bug fix update
http://rhn.redhat.com/errata/RHBA-2010-0106.html

Ariko-Security : Pogodny CMS Vulnerabilities
http://www.criticalwatch.com/support/security-advisories.aspx?AID=31779

Independent Researcher : Information disclosure vulnerability in Drupal's Realname User Reference Widget
http://www.criticalwatch.com/support/security-advisories.aspx?AID=31782

Insomnia Security : Windows URL Handling Vulnerability
http://www.criticalwatch.com/support/security-advisories.aspx?AID=31781

Mandriva : fetchmail
http://www.criticalwatch.com/support/security-advisories.aspx?AID=31775

Ubuntu Security Notice : Ruby vulnerabilities
http://www.criticalwatch.com/support/security-advisories.aspx?AID=31776

Ubuntu Security Notice : Squid vulnerabilities
http://www.criticalwatch.com/support/security-advisories.aspx?AID=31780

Virtual Security Research : Chrome Password Manager Cross Origin Weakness (CVE-2010-0556)
http://www.criticalwatch.com/support/security-advisories.aspx?AID=31783

Justin C. Klein Keane : Drupal Twitter Module Credential Exposure
http://www.criticalwatch.com/support/security-advisories.aspx?AID=31778

[ MDVSA-2010:038 ] maildrop
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-02/msg00145.html

MITKRB5-SA-2010-001 [CVE-2010-0283] krb5-1.7 KDC denial of service
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-02/msg00149.html

VMSA-2010-0003 ESX Service Console update for net-snmp
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-02/msg00147.html

[USN-901-1] Squid vulnerabilities
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-02/msg00142.html

Chrome Password Manager Cross Origin Weakness (CVE-2010-0556)
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-02/msg00141.html

Information disclosure vulnerability in Drupals Realname User Reference Widget contributed module (v
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-02/msg00140.html

[USN-900-1] Ruby vulnerabilities
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-02/msg00139.html

[ MDVSA-2010:037 ] fetchmail
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-02/msg00138.html

Trusteer Rapport Security Circumvention
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-02/msg00154.html

Pogodny CMS SQL vulnerabilities
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-02/msg00150.html

VUPEN Security Research - OpenOffice Word Document Processing Heap Overflow Vulnerabilities
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-02/msg00148.html

Insomnia : ISVA-100216.1 - Windows URL Handling Vulnerability
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-02/msg00152.html

Enomaly ECP: Multiple vulnerabilities in VMcasting protocol & implementation.
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-02/msg00144.html

Multiple Stored XSS in XOOPS 2.4.4 Admin Section
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-02/msg00143.html

Joomla (Jw_allVideos) Remote File Download Vulnerability
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-02/msg00137.html

[SECURITY] [DSA-1997-1] New mysql-dfsg-5.0 packages fix several vulnerabilities
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-02/msg00136.html

Huawei HG510 CSRF, Auth Bypass, DoS
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-02/msg00151.html

[SECURITY] [DSA-1996-1] New Linux 2.6.26 packages fix several vulnerabilities
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-02/msg00134.html

IE address bar characters into a small feature
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-02/msg00153.html

[ MDVSA-2010:036 ] webmin
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-02/msg00133.html

Teredo "stray packet" analysis
http://isc.sans.org/diary.html?storyid=8245

Adobe Reader and Acrobat Unspecified Flaw Lets Remote Users Execute Arbitrary Code
http://securitytracker.com/alerts/2010/Feb/1023601.html

Kerberos KDC Input Validation Flaw in process_as_req() Lets Remote Users Deny Service
http://securitytracker.com/alerts/2010/Feb/1023593.html

SAP NetWeaver WebDynpro Runtime Cross-Site Scripting Vulnerability
http://secunia.com/advisories/38629/

httpdx FTP Server Directory Traversal Vulnerability
http://secunia.com/advisories/38620/

Free Google Page Ranks "url" Cross-Site Scripting Vulnerability
http://secunia.com/advisories/38613/

Auktionshaus "id" SQL Injection Vulnerability
http://secunia.com/advisories/38611/

Portrait Campaign Manager Cross-Site Scripting Vulnerabilities
http://secunia.com/advisories/38605/

BGS CMS "search" Cross-Site Scripting Vulnerability
http://secunia.com/advisories/38597/

ASPCode CMS Multiple Vulnerabilities
http://secunia.com/advisories/38596/

Netzbrett Information Disclosure Security Issue
http://secunia.com/advisories/38595/

SUSE Update for Multiple Packages
http://secunia.com/advisories/38593/

Fedora update for openoffice.org
http://secunia.com/advisories/38590/

Fedora update for fwbuilder and libfwbuilder
http://secunia.com/advisories/38585/

SUSE update for kernel
http://secunia.com/advisories/38584/

Fedora update for gnome-screensaver
http://secunia.com/advisories/38583/

superengine CMS Custom Pack "id" SQL Injection Vulnerability
http://secunia.com/advisories/38582/

KDPics Cross-Site Scripting and Request Forgery Vulnerabilities
http://secunia.com/advisories/38580/

Copperleaf Photolog for WordPress "postid" SQL Injection Vulnerability
http://secunia.com/advisories/38579/

Fedora update for maildrop
http://secunia.com/advisories/38578/

Fedora update for gambas
http://secunia.com/advisories/38577/

Fedora update for mod_security
http://secunia.com/advisories/38576/

Fedora update for kernel
http://secunia.com/advisories/38575/

Pogodny CMS "id" SQL Injection Vulnerability
http://secunia.com/advisories/38571/

gnome-screensaver Monitor Topology Change Security Bypass Weakness
http://secunia.com/advisories/38565/

SAP JAVA CORE Unspecified Phishing Vulnerability
http://secunia.com/advisories/38526/

OtsTurntables Free v1.00.047 (.olf) Universal Buffer Overflow Exploit
http://www.exploit-db.com/exploits/11475

maildrop Group Permission Dropping Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/37984

Ots Labs OtsTurntables OFL File Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/33257

Microsoft Windows SMB Client Race Condition Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/38100

Microsoft Windows SMB Client Pool Corruption Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/38093

Microsoft DirectX DirectShow AVI File Parsing Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/38112

Adobe Acrobat and Reader CVE-2010-0188 Unspecified Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/38195

Microsoft Internet Explorer URI Validation Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/37884

Multiple Adobe Products Unspecified Cross Domain Scripting Vulnerability
http://www.securityfocus.com/bid/38198

OpenOffice Prior to 3.2 Multiple Remote Code Execution Vulnerabilities
http://www.securityfocus.com/bid/38218

Linux e1000e Driver 'Jumbo Frame' Handling Remote Security Bypass Vulnerability
http://www.securityfocus.com/bid/37523

WordPress 'wp-admin/admin.php' Module Configuration Security Bypass Vulnerability
http://www.securityfocus.com/bid/38233

Linux e1000 Driver 'Jumbo Frame' Handling Remote Security Bypass Vulnerability
http://www.securityfocus.com/bid/37519

Linux Kernel RTL8169 NIC 'RxMaxSize' Frame Size Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/37521

NetworkManager Security Bypass and Information Disclosure Vulnerabilities
http://www.securityfocus.com/bid/37580

MySQL OpenSSL Server Certificate yaSSL Security Bypass Vulnerability
http://www.securityfocus.com/bid/37076

MySQL MyISAM Table Symbolic Link Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/37075

MySQL Multiple Remote Denial Of Service Vulnerabilities
http://www.securityfocus.com/bid/37297

CMS Made Simple Local File Include and Cross Site Scripting Vulnerabilities
http://www.securityfocus.com/bid/38234

MySQL 'sql_parse.cc' Multiple Format String Vulnerabilities
http://www.securityfocus.com/bid/35609

MySQL MyISAM Table Privileges Secuity Bypass Vulnerability
http://www.securityfocus.com/bid/29106

MySQL Command Line Client HTML Special Characters HTML Injection Vulnerability
http://www.securityfocus.com/bid/31486

JoomlaWorks AllVideos Joomla! Component Directory Traversal Vulnerability
http://www.securityfocus.com/bid/38238

Intel BIOS System Management Mode Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/38251

Webmin and Usermin Unspecified Cross-Site Scripting Vulnerability
http://www.securityfocus.com/bid/37259

Squid Header-Only Packets Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/37522

Squid Web Proxy Cache Authentication Header Parsing Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/36091

Ruby BigDecimal Library Denial Of Service Vulnerability
http://www.securityfocus.com/bid/35278

Ruby WEBrick Terminal Escape Sequence in Logs Command Injection Vulnerability
http://www.securityfocus.com/bid/37710

Ruby 'rb_str_justify()' Heap Based Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/37278

Net-SNMP GETBULK Divide By Zero Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/35492

gnome-screensaver Monitor Topology Security Bypass Vulnerability
http://www.securityfocus.com/bid/38248

gnome-screensaver Monitor Removal Lock Bypass Vulnerability
http://www.securityfocus.com/bid/38149

Linux Kernel 64bit Personality Handling Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/38027

Linux Kernel 'drivers/connector/connector.c' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/38058

Linux Kernel 'do_pages_move()' Local Information Disclosure Vulnerability
http://www.securityfocus.com/bid/38144

GNU Libtool 'libltdl' Library Search Path Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/37128

ModSecurity Security Bypass And Denial Of Service Vulnerabilities
http://www.securityfocus.com/bid/38156

Juniper Networks Juniper Installer Service Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/38232

NetCitadel Firewall Builder Script Generation Insecure Temporary File Creation Vulnerability
http://www.securityfocus.com/bid/36468

Open-FTPD Multiple Buffer Overflow Vulnerabilities
http://www.securityfocus.com/bid/30993

Google Chrome prior to 4.0.249.89 Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/38177

GnuTLS NULL Character CA SSL Certificate Validation Security Bypass Vulnerability
http://www.securityfocus.com/bid/35952

Adobe Flash Player and AIR (CVE-2010-0187) Unspecified Denial of Service Vulnerability
http://www.securityfocus.com/bid/38200

Multiple Horde Products Cross-Site Scripting Vulnerabilities and File Overwrite Vulnerability
http://www.securityfocus.com/bid/36382

PowerDNS Recurser Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/37650

Horde Application Framework Administration Interface 'PHP_SELF' Cross-Site Scripting Vulnerability
http://www.securityfocus.com/bid/37351

FUSE 'fusermount' Race Condition Vulnerability
http://www.securityfocus.com/bid/37983

Pango 'pango_glyph_string_set_size()' Integer Overflow Vulnerability
http://www.securityfocus.com/bid/34870

PowerDNS Recursor Remote Cache Poisoning Vulnerability
http://www.securityfocus.com/bid/37653

Xpdf 'FoFiType1::parse' Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/37350

Moodle Multiple Vulnerabilities
http://www.securityfocus.com/bid/37244

Fetchmail SSL Certificate Printing Remote Heap Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/38088

VMware Products Directory Traversal Vulnerability
http://www.securityfocus.com/bid/36842

Samba MS-RPC Remote Shell Command Execution Vulnerability
http://www.securityfocus.com/bid/23972

BGSvetionik BGS CMS 'search' Parameter Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/38264

Easy FTP Server Multiple Remote Buffer Overflow Vulnerabilities
http://www.securityfocus.com/bid/38262

Huawei HG510 Multiple Cross-Site Request Forgery Vulnerabilities
http://www.securityfocus.com/bid/38261

MIT Kerberos KDC 'handle_tgt_authdata()' Denial Of Service Vulnerability
http://www.securityfocus.com/bid/38260

Headlight Software FTP On The Go Remote Denial Of Service Vulnerability
http://www.securityfocus.com/bid/38256

Drupal Realname User Reference Widget Module Information Disclosure Vulnerability
http://www.securityfocus.com/bid/38255

gnome-screensaver Monitor Addition Lock Bypass Vulnerability
http://www.securityfocus.com/bid/38254

Pogodny CMS 'id' Parameter SQL Injection Vulnerability
http://www.securityfocus.com/bid/38253

Portrait Software Portrait Campaign Manager Multiple Cross Site Scripting Vulnerabilities
http://www.securityfocus.com/bid/38252

Mambo 'com_acnews' Component 'id' Parameter SQL Injection Vulnerability
http://www.securityfocus.com/bid/38247

16日 火曜日、先負

MySql Connector/Net 6.3.0 alpha has been released
http://dev.mysql.com/downloads/connector/net/6.3.html

InterScan Web Security Suite 3.1 Solaris版 プログラムモジュール入れ替えのお知らせ
http://www.trendmicro.co.jp/support/news.asp?id=1368

BOM: コンピューター名/IPアドレスを変更する場合
http://www.say-tech.co.jp/support/bom-for-windows/ip/index.shtml

「Web Application Firewall 読本」を公開
http://www.ipa.go.jp/security/vuln/press/201002_waf.html

JVNDB-2010-001043 BIND 9 の DNSSEC 検証コードに脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001043.html

JVNDB-2010-001042 Apple Mac OS X の Image RAW における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001042.html

JVNDB-2010-001041 Apple Mac OS X の CoreAudio における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001041.html

JVNDB-2010-001040 Adobe Shockwave Player における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001040.html

JVNDB-2010-001039 Adobe Shockwave Player における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001039.html

JVNDB-2009-002423 Linux kernel の tcf_fill_node 関数におけるカーネルメモリから重要な情報を取得される脆弱性
http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002423.html

JVNDB-2009-002317 Linux kernel における競合状態の脆弱性
http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002317.html

JVNDB-2009-002286 Linux kernel の netlink サブシステムにおける重要な情報を取得される脆弱性
http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002286.html

JVNDB-2009-002079 Linux kernel の execve 関数におけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002079.html

JVNDB-2009-002078 Linux kernel の do_sigaltstack 関数における情報漏えいの脆弱性
http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002078.html

JVNDB-2009-001974 Linux kernel の personality サブシステムにおける NULL ポインタ参照の脆弱性
http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001974.html

JVNDB-2009-001972 Linux kernel の RTL8169 NIC ドライバにおけるバッファオーバーフローの脆弱性
http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001972.html

Teredo request for packets
http://isc.sans.org/diary.html?storyid=8242

- Linux Kernel 64bit Personality Handling Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/38027

- Internet Explorer (6/7) Remote Code Execution -Remote User Add Exploit
http://www.exploit-db.com/exploits/11457

SuSE : security-announce SUSE Security Announcement: postfix (SUSE-SA:2010:011)
http://www.criticalwatch.com/support/security-advisories.aspx?AID=31766

Debian : New mysql-dfsg-5.0 packages fix several vulnerabilities
http://www.criticalwatch.com/support/security-advisories.aspx?AID=31769

Independent Researcher : Mozilla Firefox 3.6 (Multitudinous looping )Denial of Service Exploit
http://www.criticalwatch.com/support/security-advisories.aspx?AID=31761

Independent Researcher : Internet Explorer 8 (Multitudinous looping )Denial of Service Exploit
http://www.criticalwatch.com/support/security-advisories.aspx?AID=31762

Debian : New Linux 2.6.26 packages fix several vulnerabilities
http://www.criticalwatch.com/support/security-advisories.aspx?AID=31768

Debian : New openoffice.org packages fix several vulnerabilities
http://www.criticalwatch.com/support/security-advisories.aspx?AID=31767

Hewlett-Packard : HP SBMA02486 SSRT090049 rev.2HP OpenView Network Node Manager (OV NNM) Java Runtime Environment (JRE
http://www.criticalwatch.com/support/security-advisories.aspx?AID=31774

JVNDB-2010-001038 BEA Product Suite の WebLogic Server コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001038.html

JVNDB-2010-001037 BEA Product Suite の WebLogic Server コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001037.html

JVNDB-2010-001036 BEA Product Suite の WebLogic Server コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001036.html

JVNDB-2010-001035 BEA Product Suite の WebLogic Server コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001035.html

JVNDB-2010-001034 Oracle Application Server の J2EE コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001034.html

JVNDB-2010-001033 Oracle Application Server の J2EE コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001033.html

JVNDB-2010-001032 Oracle Application Server の Access Manager Identity Server コンポーネントにおける脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001032.html

New ISC Tool: Whitelist Hash Database
http://isc.sans.org/diary.html?storyid=8236

Various Olympics Related Dangerous Google Searches
http://isc.sans.org/diary.html?storyid=8239

Juniper Networks Installer Service Buffer Overflow Vulnerability
http://secunia.com/advisories/38628/

Joomla EasyBook Component Script Insertion Vulnerability
http://secunia.com/advisories/38626/

Joomla Webee Comments Component "articleId" SQL Injection Vulnerability
http://secunia.com/advisories/38625/

Joomla JQuarks Component "id" SQL Injection Vulnerability
http://secunia.com/advisories/38623/

Fedora update for gnash
http://secunia.com/advisories/38617/

ImgBrowz0r "imgbrowz0r::init()" Directory Traversal Vulnerability
http://secunia.com/advisories/38609/

Red Hat update for openoffice.org
http://secunia.com/advisories/38607/

WordPress Trashed Posts Security Bypass Vulnerability
http://secunia.com/advisories/38592/

JTL-Shop "s" SQL Injection Vulnerability
http://secunia.com/advisories/38588/

Joomla AllVideos Plugin "file" Information Disclosure Vulnerability
http://secunia.com/advisories/38587/

Katalog Stron Hurricane SQL Injection and File Inclusion Vulnerabilities
http://secunia.com/advisories/38581/

Debian update for mysql-dfsg-5.0
http://secunia.com/advisories/38573/

Dillo Cookie URL Path Handling Security Issue
http://secunia.com/advisories/38569/

Infragistics NetAdvantage WebHtmlEditor Component "InitialDirectory" Directory Traversal
http://secunia.com/advisories/38553/

Debian update for openoffice.org
http://secunia.com/advisories/38549/

SUSE update for postfix
http://secunia.com/advisories/38535/

Debian update for linux-2.6
http://secunia.com/advisories/38492/

HP DreamScreen Remote Information Disclosure Vulnerability
http://www.vupen.com/english/advisories/2010/0376

HP ProLiant Support Pack MSVC Code Execution Vulnerabilities
http://www.vupen.com/english/advisories/2010/0375

Adobe Reader and Acrobat Cross-domain Scripting Vulnerability
http://www.vupen.com/english/advisories/2010/0374

Adobe Flash Player and AIR Cross-domain Scripting Vulnerability
http://www.vupen.com/english/advisories/2010/0373

Adobe Products XML Data Remote Information Disclosure Vulnerability
http://www.vupen.com/english/advisories/2010/0372

Squid HTCP Packets Processing Denial of Service Vulnerability
http://www.vupen.com/english/advisories/2010/0371

OpenOffice.org Data Processing Multiple Code Execution Vulnerabilities
http://www.vupen.com/english/advisories/2010/0366

RHBA-2010:0104-1: net-snmp bug fix update
http://rhn.redhat.com/errata/RHBA-2010-0104.html

Easy~Ftp Server v1.7.0.2 Post-Authentication BoF
http://www.exploit-db.com/exploits/11468

Internet Explorer (6/7) Remote Code Execution -Remote User Add Exploit
http://www.exploit-db.com/exploits/11457

httpdx - ultralight http/ftp server directory Traversal
http://www.exploit-db.com/exploits/11454

Wireshark 1.2.5 LWRES getaddrbyname BOF - calc.exe
http://www.exploit-db.com/exploits/11453

Ollydbg 2.00 Beta1 Local Buffer Overflow Exploit
http://www.exploit-db.com/exploits/11465

Linux e1000e Driver 'Jumbo Frame' Handling Remote Security Bypass Vulnerability
http://www.securityfocus.com/bid/37523

IETF and W3C XML Digital Signature Specification HMAC Truncation Authentication Bypass Vulnerability
http://www.securityfocus.com/bid/35671

Linux Kernel 'print_fatal_signal()' Local Information Disclosure Vulnerability
http://www.securityfocus.com/bid/37724

Linux Kernel 'ebtables' Security Bypass Vulnerability
http://www.securityfocus.com/bid/37762

Linux e1000 Driver 'Jumbo Frame' Handling Remote Security Bypass Vulnerability
http://www.securityfocus.com/bid/37519

Joomla! 'com_joomportfolio' Component 'secid' Parameter SQL Injection Vulnerability
http://www.securityfocus.com/bid/37403

OpenOffice Prior to 3.2 Multiple Remote Code Execution Vulnerabilities
http://www.securityfocus.com/bid/38218

Linux Kernel 'megaraid_sas' Driver Insecure File Permission Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/37019

Linux Kernel 'drivers/firewire/ohci.c' NULL Pointer Dereference Denial of Service Vulnerability
http://www.securityfocus.com/bid/37339

Linux Kernel 'fuse_direct_io()' Invalid Pointer Dereference Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/37069

Linux Kernel 'unix_stream_connect()' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/36723

Linux Kernel 'nfs4_proc_lock()' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/36936

Linux Kernel 'pipe.c' Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/36901

Linux Kernel AppleTalk Driver IP Over DDP Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/36379

Linux Kernel 'get_random_int' Random Number Generation Weakness
http://www.securityfocus.com/bid/36788

Linux kernel 'O_EXCL' NFSv4 Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/36472

Linux Kernel 2.4 and 2.6 Local Information Disclosure Vulnerability
http://www.securityfocus.com/bid/36827

Linux Kernel Multiple Protocols Local Information Disclosure Vulnerabilities
http://www.securityfocus.com/bid/36176

Linux Kernel 'clear_child_tid()' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/35930

Linux Kernel r128 Driver CCE Initialization NULL Pointer Dereference Denial of Service Vulnerability
http://www.securityfocus.com/bid/36824

Linux Kernel CIFS 'decode_unicode_ssetup()' Remote Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/34612

Linux Kernel 64-bit Kernel Register Memory Leak Local Information Disclosure Vulnerability
http://www.securityfocus.com/bid/36576

Linux Kernel 'do_pages_move()' Local Information Disclosure Vulnerability
http://www.securityfocus.com/bid/38144

Linux Kernel 'drivers/connector/connector.c' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/38058

MySQL 5.0.51a Unspecified Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/37640

MySQL with yaSSL SSL Certificate Handling Remote Stack Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/37943

Linux Kernel CVE-2010-0291 'mmap()' and 'mremap()' Multiple Denial Of Service Vulnerabilities
http://www.securityfocus.com/bid/37906

Linux Kernel KVM '/dev/port' Device Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/38086

MySQL MyISAM Table Symbolic Link Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/37075

Linux Kernel 64bit Personality Handling Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/38027

Linux Kernel KVM Multiple Privilege Escalation and Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/38158

Linux Kernel 'net/mac80211/' Multiple Remote Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/37170

Joomla! 'com_photoblog' Component 'blog' Parameter SQL Injection Vulnerability
http://www.securityfocus.com/bid/38136

Samba Symlink Directory Traversal Vulnerability
http://www.securityfocus.com/bid/38111

QEMU VNC Client Disconnect Use After Free Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/36716

Apple iTunes '.pls' File Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/36478

Calendarix Multiple SQL Injection and Cross-Site Scripting Vulnerabilities
http://www.securityfocus.com/bid/13825

Microsoft PowerPoint 'LinkedSlideAtom' Heap Overflow Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/38101

Microsoft PowerPoint 'OEPlaceholderAtom' Record Corrupt Memory Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/38104

2eNetWorX StatCounteX Administration Pages Authentication Bypass Vulnerability
http://www.securityfocus.com/bid/27814

Joomla! and Mambo AkoGallery Component 'id' Parameter SQL Injection Vulnerability
http://www.securityfocus.com/bid/27557

Sun Java Web Start and Java Plug-in JAR File Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/32892

Sun Java Web Start and Java Plug-in Multiple Privilege Escalation Vulnerabilities
http://www.securityfocus.com/bid/32620

Sun Java Runtime Environment and Java Development Kit Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/32608

GNU Libtool 'libltdl' Library Search Path Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/37128

Microsoft Windows #GP Trap Handler Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/37864

Microsoft Windows Double Free Memory Corruption Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/38044

Adobe Flash Player and AIR Unspecified Cross Domain Scripting Vulnerability
http://www.securityfocus.com/bid/38198

Webmin and Usermin Unspecified Cross-Site Scripting Vulnerability
http://www.securityfocus.com/bid/37259

Wireshark Dissector LWRES Multiple Buffer Overflow Vulnerabilities
http://www.securityfocus.com/bid/37985

VLC Media Player 'smb://' URI Handling Remote Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/35500

OpenOffice VBA Macro Restrictions Remote Security Bypass Vulnerability
http://www.securityfocus.com/bid/38245

Joomla! 'com_hdvideoshare' Component 'secid' Parameter SQL Injection Vulnerability
http://www.securityfocus.com/bid/38244

Joomla! 'com_videos' Component 'id' Parameter SQL Injection Vulnerability
http://www.securityfocus.com/bid/38243

httpdx 'MKD' Command Directory Traversal Vulnerability
http://www.securityfocus.com/bid/38242

Copperleaf Photolog Plugin for WordPress 'cplphoto.php' SQL Injection Vulnerability
http://www.securityfocus.com/bid/38239

JoomlaWorks AllVideos Joomla! Component Directory Traversal Vulnerability
http://www.securityfocus.com/bid/38238

ZeusCMS 'page' Parameter Local File Include Vulnerability
http://www.securityfocus.com/bid/38237

WSN Guest 'index.php' SQL Injection Vulnerability
http://www.securityfocus.com/bid/38236

WordPress 'wp-admin/admin.php' Module Configuration Security Bypass Vulnerability
http://www.securityfocus.com/bid/38233

Juniper Networks Juniper Installer Service Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/38232