2011年10月26日水曜日
26日 水曜日、友引
+ Linux kernel 3.0.8 released
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.0.8
+ Important: freetype security update
http://rhn.redhat.com/errata/RHSA-2011-1402.html
+ Sudo 1.7.8p1, 1.8.3p1 released
http://www.sudo.ws/sudo/stable.html#1.7.8p1
http://www.sudo.ws/sudo/stable.html#1.8.3p1
- Linux Kernel 'net/can/raw.c' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/47835
- Linux Kernel 'bcm_release()' NULL Pointer Dereference Denial of Service Vulnerability
http://www.securityfocus.com/bid/47503
? Linux Kernel 'perf' Utility Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/49140
? Linux Kernel KSM Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/48101
Google Chrome 15.0.874.102 released
http://googlechromereleases.blogspot.com/2011/10/chrome-stable-release.html
SafeSyncモバイルクライアント バージョン1.3（iOS/Android）にログインできない現象について
http://www.trendmicro.co.jp/support/news.asp?id=1671
zFtp Server <= 2011-04-13 | "STAT,CWD" Remote Denial of Service Vulnerability
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00155.html
[ GLSA 201110-22 ] PostgreSQL: Multiple vulnerabilities
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00156.html
[SECURITY] [DSA 2328-1] freetype security update
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00154.html
[security bulletin] HPSBUX02700 SSRT100506 rev.2 - HP-UX running VEA, Remote Denial of Servi
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00153.html
[ MDVSA-2011:161 ] postgresql
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00152.html
[ GLSA 201110-21 ] Asterisk: Multiple vulnerabilities
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00151.html
[SECURITY] [DSA 2327-1] libfcgi-perl security-update
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00150.html
「DMで偽サイトに誘導」――Twitter悪用のフィッシングに注意
英ソフォスが報告、目的はパスワードの奪取
http://itpro.nikkeibp.co.jp/article/NEWS/20111026/371422/?ST=security
テラス、SSHリモート操作を動画記録する監査証跡SaaSを開始
http://itpro.nikkeibp.co.jp/article/NEWS/20111025/371350/?ST=security
JVNDB-2011-002516 Apple Mac OS X のオープンディレクトリにおけるパスワードデータを閲覧される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002516.html
JVNDB-2011-002515 Apple Mac OS X の QuickTime における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002515.html
JVNDB-2011-002514 Apple Mac OS X の libsecurity における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002514.html
JVNDB-2011-002513 Apple Mac OS X のオープンディレクトリにおけるパスワード要求を回避される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002513.html
JVNDB-2011-002512 Apple Mac OS X の SMB ファイルサーバコンポーネントにおける閲覧制限を回避される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002512.html
JVNDB-2011-002511 Apple Mac OS X の User Documentation コンポーネントにおける任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002511.html
JVNDB-2011-002510 Apple Mac OS X の QuickTime におけるバッファオーバーフローの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002510.html
JVNDB-2011-002509 Apple Mac OS X の QuickTime におけるバッファオーバーフローの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002509.html
JVNDB-2011-002508 Apple Mac OS X の QuickTime における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002508.html
JVNDB-2011-002507 Apple Mac OS X の QuickTime における重要な情報を取得される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002507.html
JVNDB-2011-002506 Django の CSRF 保護メカニズムにおける認証されずに偽造されたリクエストを誘発される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002506.html
JVNDB-2011-002505 Django におけるキャッシュポイズニング攻撃を誘発される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002505.html
JVNDB-2011-002504 Django の URLField 実装内にある verify_exists 機能における任意の GET リクエストを誘発される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002504.html
JVNDB-2011-002503 Django の URLField 実装内にある verify_exists 機能におけるサービス運用妨害 (リソース消費) の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002503.html
JVNDB-2011-002502 Django の django.contrib.sessions におけるセッションを変更される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002502.html
JVNDB-2011-002501 Cisco TelePresence Video Communication Servers の管理インターフェイスにおけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002501.html
JVNDB-2011-002500 HP Data Protector における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002500.html
JVNDB-2011-002499 HP Data Protector における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002499.html
JVNDB-2011-002498 HP Data Protector における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002498.html
JVNDB-2011-002497 HP Data Protector における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002497.html
JVNDB-2011-002496 HP Data Protector における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002496.html
JVNDB-2011-002495 HP Data Protector における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002495.html
JVNDB-2011-002494 Apple Mac OS X の Application Firewall のデバッグログ機能における権限を取得される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002494.html
JVNDB-2011-002493 Apple iOS および Apple TV のカーネルにおけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002493.html
JVNDB-2011-002492 Apple iOS および Mac OS X の CFNetwork における重要な情報を取得される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002492.html
JVNDB-2011-002491 Mac OS X 上で稼動する Apple Safari のプライベートブラウズ機能におけるユーザを追跡可能な脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002491.html
JVNDB-2011-002490 Mac OS X 上で動作する Apple Safari の SSL 実装における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002490.html
JVNDB-2011-002489 Mac OS X 上で動作する Apple Safari における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002489.html
JVNDB-2011-002488 Apple Safari におけるディレクトリトラバーサルの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002488.html
JVNDB-2011-002487 Apple Mac OS X の Apple Type Services (ATS) における整数符号エラーの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002487.html
JVNDB-2011-002486 Apple Mac OS の Open Directory におけるパスワード変更の制限を回避される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002486.html
Critical Control 17:Penetration Tests and Red Team Exercises
http://isc.sans.edu/diary.html?storyid=11887
Recurring reporting made easy?
http://isc.sans.edu/diary.html?storyid=11884
VMware ESXi and ESX updates to third party libraries and ESX Service Console
http://securityreason.com/securityalert/8480
HP MFP Digital Sending Software Running on Window Local Information Disclosure
http://securityreason.com/securityalert/8479
astersik open source 1.8.7 Remote crash vulnerability
http://securityreason.com/securityalert/8478
OCS Inventory NG 2.0.1 Persistent XSS
http://securityreason.com/securityalert/8477
ibm db2 9.7 Exploiting the linker
http://securityreason.com/securityalert/8476
Linux Kernel ext4 Extent Splitting Bug in ext4_ext_convert_to_initialized() Lets Local Users Deny Service
http://www.securitytracker.com/id/1026240
Xen Buffer Overflow in SCSI Emulation Lets a Local Guest User Cause the Guest to Crash
http://www.securitytracker.com/id/1026238
Cisco Network Registrar Default Credentials Vulnerability
http://www.securiteam.com/securitynews/6L03H1F2UE.html
Cisco IOS XR Software IP Packet Vulnerability
http://www.securiteam.com/securitynews/6P03L1F2UU.html
Cisco Media Experience Engine 5600 Default Credentials Vulnerability
http://www.securiteam.com/securitynews/6N03J1F2UM.html
Cisco IOS XR Software SSHv1 Denial of Service Vulnerability
http://www.securiteam.com/securitynews/6K03G1F2UK.html
Cisco Unified IP Phones 7900 Series Multiple Vulnerabilities
http://www.securiteam.com/securitynews/6M03I1F2UW.html
Cisco XR 12000 Series Shared Port Adapters Interface Processor Vulnerability
http://www.securiteam.com/securitynews/6Q03M1F2UO.html
Cisco RVS4000 and WRVS4400N Web Management Interface Vulnerabilities
http://www.securiteam.com/securitynews/6O03K1F2UC.html
PrestaShop Presta2PhpList Module "list" SQL Injection Vulnerability
http://secunia.com/advisories/46531/
Red Hat update for freetype
http://secunia.com/advisories/46596/
McAfee Web Gateway Unspecified Cross-Site Scripting Vulnerability
http://secunia.com/advisories/46570/
Gentoo update for postgresql
http://secunia.com/advisories/46568/
Alcatel-Lucent OmniTouch 8400 Instant Communication Suite Multiple Vulnerabilities
http://secunia.com/advisories/46562/
Alcatel-Lucent Business integrated Communication Solution Multiple Vulnerabilities
http://secunia.com/advisories/46565/
Ubuntu update for puppet
http://secunia.com/advisories/46578/
Zope Unspecified Vulnerability
http://secunia.com/advisories/46586/
Novell Netware HTTP Server ByteRange Filter Denial of Service Vulnerability
http://secunia.com/advisories/46572/
zFTPServer "CWD" Denial of Service Vulnerability
http://secunia.com/advisories/46559/
Puppet "certdnsnames" Puppet Master Impersonation Vulnerability
http://secunia.com/advisories/46550/
Wing FTP Server Unspecified Information Disclosure Vulnerability
http://secunia.com/advisories/46413/
Wing FTP Server Unspecified Information Disclosure Vulnerability
http://secunia.com/advisories/46558/
SUSE update for etherape
http://secunia.com/advisories/46567/
SUSE update for fail2ban
http://secunia.com/advisories/46555/
Alsbtain Bulletin "act" Local File Inclusion Vulnerability
http://secunia.com/advisories/46566/
Gentoo update for asterisk
http://secunia.com/advisories/46548/
Ubuntu update for pam
http://secunia.com/advisories/46580/
Debian update for libfcgi-perl
http://secunia.com/advisories/46579/
Debian update for pam
http://secunia.com/advisories/46549/
Debian update for freetype
http://secunia.com/advisories/46544/
SUSE update for cyrus-imapd
http://secunia.com/advisories/46347/
SUSE update for opera
http://secunia.com/advisories/46552/
PacketFence "p" and "destination_url" Cross-Site Scripting Vulnerabilities
http://secunia.com/advisories/46553/
Red Hat update for xen
http://secunia.com/advisories/46554/
SUSE update for clamav
http://secunia.com/advisories/46563/
Novell NetWare Apache Requests Processing Remote Denial of Service
http://www.vupen.com/english/ADV-2011-2222.php
Zope Security Update Fixes Unspecified Remote Vulnerability
http://www.vupen.com/english/ADV-2011-2221.php
BlueZone Desktop Multiple Malformed files Local Denial of Service Vulnerabilities
http://www.exploit-db.com/exploits/18030
Cyrus IMAP Server 'split_wildmats()' Remote Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/49534
FreeType Font Document Multiple Memory Corruption Vulnerabilities
http://www.securityfocus.com/bid/50155
Linux Kernel SSID Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/48538
Linux Kernel 'net/can/raw.c' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/47835
Apache 'mod_authnz_external' Module SQL Injection Vulnerability
http://www.securityfocus.com/bid/48653
Linux Kernel 'agp_allocate_memory/agp_create_user_memory' Local Privilege Escalation Vulnerabilities
http://www.securityfocus.com/bid/47535
Linux Kernel 'next_pidmap()' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/47497
Linux Kernel 'bcm_release()' NULL Pointer Dereference Denial of Service Vulnerability
http://www.securityfocus.com/bid/47503
GNU libc glob(3) 'GLOB_LIMIT' Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/43819
Linux Kernel I/O-Warrior USB Device Heap Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/46069
Linux Kernel 'fs/partitions/ldm.c' Buffer Overflow and Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/46512
Linux Kernel 'agp_ioctl()' Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/47534
Linux Kernel EFI Partition Denial of Service Vulnerability
http://www.securityfocus.com/bid/47343
Linux Kernel Unix Socket Backlog Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/46637
Linux Kernel Comedi Driver Local Information Disclosure Vulnerability
http://www.securityfocus.com/bid/49411
Linux Kernel CIFS Mount Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/49626
Linux Kernel 'perf' Utility Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/49140
Linux Kernel 'taskstats' Access Restriction Local Security Bypass Vulnerability
http://www.securityfocus.com/bid/50314
Linux Kernel 'fs/befs/linuxvfs.c' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/49256
Linux Kernel '/proc/PID/io' Local Information Disclosure Vulnerability
http://www.securityfocus.com/bid/49408
Linux kernel l2cap Remote Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/48472
Red Hat Linux Kernel VLAN Packets Handling Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/48907
Linux Kernel 'inet_diag_bc_audit()' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/48333
Linux Kernel OOPS 'qdisc_dev()' Dereference Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/48641
Linux Kernel eCryptfs Multiple Vulnerabilities
http://www.securityfocus.com/bid/49108
Linux Kernel IPv6 Fragment Identification Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/48802
Linux Kernel Generic Receive Offload (GRO) CVE-2011-2723 Denial of Service Vulnerability
http://www.securityfocus.com/bid/48929
Linux Kernel TCP Sequence Number Generation Security Weakness
http://www.securityfocus.com/bid/49289
Linux Kernel 'CIFSFindNext()' Function Denial of Service Vulnerability
http://www.securityfocus.com/bid/49295
Linux Kernel KSM Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/48101
Linux Kernel EXT4 Extent Format File Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/48697
PostgreSQL Index Function Session State Modification Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/37333
Linux Kernel Validate 'map_count' Variable Local Security Bypass Vulnerability
http://www.securityfocus.com/bid/46492
PostgreSQL 'bitsubstr' Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/37973
Linux Kernel 'inotify_init1()' Double Free Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/47296
Linux Kernel 'oops' on Reset NULL Pointer Dereference Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/46793
Linux Kernel EFI Partition Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/47796
Linux Kernel 'drivers/media/radio/si4713-i2c.c' Remote Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/48804
Linux Kernel 'mremap()' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/47321
Linux Kernel 'x25_parse_facilities()' Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/44642
Linux Kernel NFS File Locking Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/49141
Linux Kernel SCTP INIT/INIT-ACK Chunk Length Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/47308
Perl Safe Module 'reval()' and 'rdo()' CVE-2010-1447 Restriction-Bypass Vulnerabilities
http://www.securityfocus.com/bid/40305
PostgreSQL 'intarray' Module 'gettoken()' Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/46084
PostgreSQL Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/40215
PostgreSQL PL/Perl and PL/Tcl Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/43747
PostgreSQL 'RESET ALL' Unauthorized Access Vulnerability
http://www.securityfocus.com/bid/40304
PostgreSQL Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/36314
PostgreSQL Conversion Encoding Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/34090
PostgreSQL JOIN Hashtable Size Integer Overflow Denial Of Service Vulnerability
http://www.securityfocus.com/bid/38619
PHP Versions Prior to 5.3.7 Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/49241
PostgreSQL NULL Character CA SSL Certificate Validation Security Bypass Vulnerability
http://www.securityfocus.com/bid/37334
QEMU 'scsi_disk_emulate_command()' Function Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/49545
Linux Kernel Netfilter 'ipt_CLUSTERIP.c' Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/46921
Linux Kernel Acorn Econet Protocol Implementation Local Information Disclosure Vulnerability
http://www.securityfocus.com/bid/47990
Red Hat Linux Kernel Ethernet Bridge Interface Denial of Service Vulnerability
http://www.securityfocus.com/bid/50313
Linux Kernel 'clock_gettime()' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/50311
Red Hat Linux Kernel CVE-2011-3347 VLAN Packets Handling Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/50312
Xen DMA Requests IOMMU Denial of Service Vulnerability
http://www.securityfocus.com/bid/49146
Linux Kernel Auerswald USB Device Driver Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/48687
Python CGIHTTPServer Module Information Disclosure Vulnerability
http://www.securityfocus.com/bid/46541
Linux Kernel 'taskstats.c' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/48383
Pango HarfBuzz Engine Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/49723
Linux Kernel CIFS Local Security Bypass Vulnerability
http://www.securityfocus.com/bid/47381
Linux Kernel 'drivers/char/tpm/tpm.c' Information Disclosure Vulnerability
http://www.securityfocus.com/bid/46866
Opera Web Browser Tree Traversing Use-After-Free Memory Corruption Vulnerability
http://www.securityfocus.com/bid/50320
Apache HTTP Server CVE-2011-3192 Denial Of Service Vulnerability
http://www.securityfocus.com/bid/49303
Perl Fast CGI Module CGI Variables Authentication Security Bypass Vulnerability
http://www.securityfocus.com/bid/49549
RETIRED: SAP Management Console OSExecute Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/50348
phpLDAPadmin 'functions.php' Remote PHP Code Injection Vulnerability
http://www.securityfocus.com/bid/50331
Joomla YJ Contact us Component 'view' Parameter Local File Include Vulnerability
http://www.securityfocus.com/bid/50362
Microsoft Outlook Web Access Session Replay Security Bypass Vulnerability
http://www.securityfocus.com/bid/50361
Google Chrome Prior to 15.0.874.102 Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/50360
OpenStack Nova 'EC2_SECRET_KEY' Man In The Middle Security Bypass Vulnerability
http://www.securityfocus.com/bid/50359
Zope 2.12.20/2.13.6 and Prior Unspecified Security Vulnerability
http://www.securityfocus.com/bid/50357
Puppet 'certdnsnames' Certificate Validation Security Bypass Vulnerability
http://www.securityfocus.com/bid/50356
Wing FTP Server Versions Prior to 4.0.1 Information Disclosure Vulnerability
http://www.securityfocus.com/bid/50355
PacketFence Multiple Cross Site Scripting Vulnerabilities
http://www.securityfocus.com/bid/50353
BlueZone Desktop File Processing Multiple Remote Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/50352
BlueZone Desktop '.ztf' File Processing Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/50351
Alsbtain Bulletin Multiple Local File Include Vulnerabilities
http://www.securityfocus.com/bid/50350
2011年10月25日火曜日
25日 火曜日、先勝
+ Linux kernel 3.0.8 released
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.0.8
CESA-2011:1401 (xen)
http://lwn.net/Alerts/464281/
ウイルスバスター 月額版 サーバメンテナンスのお知らせ（2011年11月1日）
http://www.trendmicro.co.jp/support/news.asp?id=1670
JVNVU#659251 MIT Kerberos 5 KDC に複数の脆弱性
http://jvn.jp/cert/JVNVU659251/index.html
JVN#80971236 WEB FORUM におけるクロスサイトスクリプティングの脆弱性
http://jvn.jp/jp/JVN80971236/index.html
JVN#89764731 WEB FORUM におけるクロスサイトスクリプティングの脆弱性
http://jvn.jp/jp/JVN89764731/index.html
JVN#36684331 WEB FORUM におけるクロスサイトスクリプティングの脆弱性
http://jvn.jp/jp/JVN36684331/index.html
JVNDB-2011-002485 HP Data Protector における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002485.html
JVNDB-2011-000082 WEB FORUM におけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000082.html
JVNDB-2011-000081 WEB FORUM におけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000081.html
JVNDB-2011-000080 WEB FORUM におけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-000080.html
JVNDB-2011-002484 Apple Mac OS X の QuickTime Player におけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002484.html
JVNDB-2011-002483 Apple Mac OS X の MediaKit における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002483.html
JVNDB-2011-002482 Apple Mac OS X の kernel におけるアクセス制限を回避される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002482.html
JVNDB-2011-002481 Apple Mac OS X の kernel におけるアクセス制限を回避される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002481.html
JVNDB-2011-002480 Apple Mac OS X の IOGraphics におけるパスワード要求を回避される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002480.html
JVNDB-2011-002479 Apple Mac OS X の File Systems コンポーネントにおける WebDAV セッションをハイジャックされる脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002479.html
JVNDB-2011-002478 Apple Mac OS X の CoreStorage における重要な情報を取得される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002478.html
JVNDB-2011-002477 Apple Mac OS X の CoreProcesses コンポーネントにおけるアクセス制限を回避される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002477.html
JVNDB-2011-002476 Apple Mac OS X の CFNetwork におけるユーザを追跡可能な脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002476.html
JVNDB-2011-002475 Apple Mac OS X の Apple Type Services (ATS) におけるバッファオーバーフローの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002475.html
JVNDB-2011-002474 pple Mac OS X の Apple Type Services (ATS) における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002474.html
JVNDB-2011-002473 Apple Mac OS X の CoreMedia における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002473.html
JVNDB-2011-002472 D-Link DCS-2121 カメラの /etc/rc.d/rc.local におけるシェルアクセスを取得される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002472.html
JVNDB-2011-002471 D-Link DCS-2121 カメラの recorder_test.cgi における任意のコマンドを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002471.html
JVNDB-2011-002470 Apple iOS の設定コンポーネントにおける重要な情報を取得される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002470.html
JVNDB-2011-002469 Apple iOS の設定コンポーネントにおける詳細不明な影響を受ける脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002469.html
JVNDB-2011-002468 Apple iOS のホームスクリーンコンポーネントにおける重要な状態情報を取得される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002468.html
JVNDB-2011-002467 Apple iOS の UIKit アラートコンポーネントにおけるサービス運用妨害 (デバイスハング) の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002467.html
JVNDB-2011-002466 Apple iOS の WiFi コンポーネントにおける重要な情報を取得される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002466.html
JVNDB-2011-002465 Apple iOS および Apple TV の Data Security コンポーネントにおける重要な情報を取得される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002465.html
JVNDB-2011-002464 Apple iOS および Safari で使用される WebKit におけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002464.html
JVNDB-2011-002463 Apple iOS のキーボードコンポーネントにおける重要な情報を取得される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002463.html
JVNDB-2011-002462 Apple iOS の CalDAV における重要な情報を取得される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002462.html
JVNDB-2011-002461 Apple iOS のカレンダーにおけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002461.html
JVNDB-2011-002460 Apple iOS の CFNetwork における重要な情報を取得される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002460.html
JVNDB-2011-002459 Apple iOS の CoreGraphics の FreeType における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002459.html
JVNDB-2011-002458 Apple iOS の Data Access コンポーネントにおけるアクセス制限を回避される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002458.html
JVNDB-2011-002457 Apple iOS の OfficeImport におけるバッファオーバーフローの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002457.html
JVNDB-2011-002456 Apple iOS の OfficeImport におけるメモリ二重解放の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002456.html
JVNDB-2011-002455 OneOrZero AIMS に複数の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002455.html
JVNDB-2011-002454 複数の Apple 製品で使用される WebKit におけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002454.html
JVNDB-2011-002453 複数の Apple 製品で使用される WebKit におけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002453.html
JVNDB-2011-002452 Apple iTunes で使用される CoreFoundation におけるサービス運用妨害 (DoS) の脆弱性 7.6 2011/10/12 2011/10/24
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002452.html
SA46583 Linux-PAM "pam_env" Module Two Vulnerabilities
http://secunia.com/advisories/46583/
+ Postfix stable release 2.8.6, 2.7.7, 2.6.13, 2.5.16
http://www.postfix.org/announcements/postfix-2.8.6.html
http://mirror.postfix.jp/postfix-release/official/postfix-2.8.6.HISTORY
http://mirror.postfix.jp/postfix-release/official/postfix-2.7.7.HISTORY
http://mirror.postfix.jp/postfix-release/official/postfix-2.6.13.HISTORY
http://mirror.postfix.jp/postfix-release/official/postfix-2.5.16.HISTORY
+ Linux kernel 3.1 released
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1
- Moderate: xen security and bug fix update
http://rhn.redhat.com/errata/RHSA-2011-1401.html
- libpng 'pngerror.c' Off-By-One Error Denial Of Service Vulnerability
http://www.securityfocus.com/bid/48474
- Linux-PAM 'pam_env' Module Multiple Local Privilege Escalation Vulnerabilities
http://www.securityfocus.com/bid/50343
[ANNOUNCEMENT] Apache Commons-DbUtils 1.4 released!
http://commons.apache.org/dbutils/download_dbutils.cgi
[ANNOUNCE] Benetl, a free ETL tool for postgreSQL, out in version 3.8
http://www.benetl.net/
UPDATE: HPSBUX02700 SSRT100506 rev.2 - HP-UX running VEA, Remote Denial of Service (DoS), Execution of Arbitrary Code
https://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?javax.portlet.tpst=ba847bafb2a2d782fcbb0710b053ce01&javax.portlet.prp_ba847bafb2a2d782fcbb0710b053ce01=wsrp-navigationalState%3DdocId%25253Demr_na-c02962262%25257CdocLocale%25253Dja_JP&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken
Gentoo Linux : [GLSA 201110-20] Clam AntiVirus - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36941
Mandriva : [MDVSA-2011:159] krb5 - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36942
Mandriva : [MDVSA-2011:160] krb5 - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36943
Gentoo Linux : [GLSA 201110-17] Avahi - Denial-Of-Service Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36938
Gentoo Linux : [GLSA 201110-18] rgmanager - Privilege Escalation Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36939
Gentoo Linux : [GLSA 201110-19] X.Org - X Server - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36940
Mandriva : [MDVSA-2011:157] freetype2 - Code Execution and Denial-Of-Service Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36945
Mandriva : [MDVSA-2011:158] phpmyadmin - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36946
Red Hat : [RHSA-2011:1386-01] Kernel - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36959
Red Hat : [RHSA-2011:1391-01] httpd - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36960
Red Hat : [RHSA-2011:1392-01] httpd - Security Bypass Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36961
Stefan Schurtz : [SSCHADV2011-033] Metasploit - Cross-site Scripting Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36950
Ubuntu Security Notice : [USN-1236-1] Linux Kernel - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36931
Ubuntu Security Notice : [USN-1235-1] Open-iSCSI - File Overwrite Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36932
Ubuntu Security Notice : [Ubuntu: 1232-3] X.Org - X server - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36933
Gentoo Linux : [GLSA 201110-14] D-Bus - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36935
Gentoo Linux : [GLSA 201110-15] GnuPG - Code Execution Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36936
Gentoo Linux : [GLSA 201110-16] Cyrus IMAP Server - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36937
Hewlett-Packard : [HPSBMU02716 SSRT100651] HP Data Protector Notebook Extension - Code Execution Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36947
Hewlett-Packard : [HPSBPI02711 SSRT100647] HP - MFP Digital Sending Software - Information Disclosure Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36948
HTB Team : [HTB23050] Tine - Cross-site Scripting Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36952
Independant Researcher : Oracle Database - Buffer Overflow Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36954
Independant Researcher : Oracle Database Server - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36955
Independant Researcher : Oracle Database Server - SQL Injection Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36956
Red Hat : [RHSA-2011:1385-01] kdelibs and kdelibs3 - Spoofing Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36958
Stefan Schurtz : [SSCHADV2011-031] Yet Another CMS - SQL Injection and Cross-site Scripting Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36957
Ubuntu Security Notice : [USN-1192-3] Firefox - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36934
Debian : [DSA 2324-1] Wireshark - Code Execution Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36944
[SECURITY] [DSA 2326-1] pam security update
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00145.html
TC-SA-2011-01: Multiple vulnerabilities in OmniTouch Instant Communication Suite
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00149.html
[SECURITY] [DSA 2325-1] kfreebsd-8 security update
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00144.html
[ GLSA 201110-20 ] Clam AntiVirus: Multiple vulnerabilities
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00143.html
phpLDAPadmin <= 1.2.1.1 (query_engine) Remote PHP Code Injection Exploit
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00148.html
jara 1.6 sql injection vulnerability
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00147.html
[ MDVSA-2011:160 ] krb5
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00142.html
[ MDVSA-2011:159 ] krb5
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00141.html
[ GLSA 201110-18 ] rgmanager: Privilege escalation
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00140.html
[ GLSA 201110-17 ] Avahi: Denial of Service
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00139.html
[CVE-2011-2569] Cisco Nexus OS (NX-OS) - Command "injection" / sanitization issues.
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00146.html
[ GLSA 201110-16 ] Cyrus IMAP Server: Multiple vulnerabilities
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00138.html
[ GLSA 201110-15 ] GnuPG: User-assisted execution of arbitrary code
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00137.html
[ GLSA 201110-14 ] D-Bus: Multiple vulnerabilities
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00136.html
またもやYouTubeで乗っ取り、今度はマイクロソフトが被害
動画を全て消去、コメント欄には「アダルト動画まだ？」
http://itpro.nikkeibp.co.jp/article/NEWS/20111025/371321/?ST=security
Critical Control 16: Secure Network Engineering
http://isc.sans.edu/diary.html?storyid=11878
Vulnerability Note VU#659251 Multiple MIT KRB5 KDC daemon vulnerabilities
http://www.kb.cert.org/vuls/id/659251
FreeType Type 1 Font Processing Flaw Lets Remote Users Deny Service
http://www.securitytracker.com/id/1026237
FreeType Multiple Vulnerabilities
http://secunia.com/advisories/46575/
phpLDAPadmin Cross-Site Scripting and Code Injection Vulnerabilities
http://secunia.com/advisories/46551/
Gentoo update for dbus
http://secunia.com/advisories/46547/
Gentoo update for gnupg
http://secunia.com/advisories/46541/
Gentoo update for avahi
http://secunia.com/advisories/46503/
Gentoo update for rgmanager
http://secunia.com/advisories/46498/
SUSE update for krb5
http://secunia.com/advisories/46546/
Gentoo update for cyrus-imapd
http://secunia.com/advisories/46530/
Oracle AutoVue ActiveX Control Insecure Method Vulnerabilities
http://secunia.com/advisories/46473/
Cyclope Internet Filtering Proxy Request Processing Denial of Service Vulnerability
http://secunia.com/advisories/46556/
Toshiba E-Studio Multifunction Printers Management Interface Security Bypass Vulnerability
http://secunia.com/advisories/46408/
Linux Kernel ext4 Extent Splitting Denial of Service Vulnerability
http://secunia.com/advisories/46489/
TYPO3 PMK SlimBox Extension Cross-Site Scripting and File Disclosure Vulnerabilities
http://secunia.com/advisories/46437/
TYPO3 PMK Shadowbox Extension Cross-Site Scripting and File Disclosure Vulnerabilities
http://secunia.com/advisories/46499/
Debian update for kfreebsd-8
http://secunia.com/advisories/46564/
Jara "id" SQL Injection Vulnerability
http://secunia.com/advisories/46493/
OpenEMR Multiple SQL Injection Vulnerabilities
http://secunia.com/advisories/46560/
WordPress Chennai Theme "s" Cross-Site Scripting Vulnerability
http://secunia.com/advisories/46561/
Joomla! Freestyle FAQs and Testimonials Components Unspecified SQL Injection Vulnerability
http://secunia.com/advisories/46573/
Gentoo update for xorg-server
http://secunia.com/advisories/46496/
LOCAL: Cytel Studio 9.0 (CY3 File) Stack Buffer Overflow
http://www.exploit-db.com/exploits/18027
DoS/PoC: BlueZone Malformed .zft file Local Denial of Service
http://www.exploit-db.com/exploits/18029
DoS/PoC: zFTP Server "cwd/stat" Remote Denial-of-Service
http://www.exploit-db.com/exploits/18028
McAfee Web Gateway Web Acces Cross Site Scripting Vulnerability
http://www.vupen.com/english/ADV-2011-2220.php
Alcatel-Lucent Instant Communication Suite Cross Site Scripting Issues
http://www.vupen.com/english/ADV-2011-2219.php
Oracle AutoVue AutoVueX ActiveX Multiple Code Execution Vulnerabilities
http://www.vupen.com/english/ADV-2011-2218.php
FreeType Type 1 Fonts Processing Multiple Code Execution Vulnerabilities
http://www.vupen.com/english/ADV-2011-2217.php
PHP Versions Prior to 5.3.7 Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/49241
JBoss Enterprise Application Platform Multiple Vulnerabilities
http://www.securityfocus.com/bid/39710
FreeType 'src/psaux/t1decode.c' Memory Corruption Vulnerability
http://www.securityfocus.com/bid/48619
libpng PNG File Denial Of Service Vulnerability
http://www.securityfocus.com/bid/48618
libpng 'pngerror.c' Off-By-One Error Denial Of Service Vulnerability
http://www.securityfocus.com/bid/48474
libpng Buffer Overflow and Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/48660
Linux Kernel epoll Subsystem 'eventpoll.c' Multiple Local Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/46630
LibTIFF Multiple Buffer Overflow Vulnerabilities
http://www.securityfocus.com/bid/47338
Asterisk Manager Interface Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/46897
Asterisk SIP Authentication Request User Enumeration Weakness
http://www.securityfocus.com/bid/48485
Asterisk Multiple Remote Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/48431
Asterisk Uninitalized Variable SIP Channel Driver Denial of Service Vulnerability
http://www.securityfocus.com/bid/50177
Asterisk UPDTL Packets Buffer Overflow Vulnerabilities
http://www.securityfocus.com/bid/46474
Asterisk Manager Interface Arbitrary Command Execution Security Bypass Vulnerability
http://www.securityfocus.com/bid/47537
Asterisk TCP/TLS Server NULL Pointer Dereference Denial Of Service Vulnerability
http://www.securityfocus.com/bid/46898
QEMU 'scsi_disk_emulate_command()' Function Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/49545
Oracle Database 'CTXSYS.DRVDISP' Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/50199
ClamAV Prior to 0.96.5 Multiple Vulnerabilities
http://www.securityfocus.com/bid/45152
Symantec Veritas Enterprise Administrator Service Multiple Buffer Overflow Vulnerabilities
http://www.securityfocus.com/bid/49014
Symantec Backup Exec for Windows Servers Unauthorized Access Vulnerability
http://www.securityfocus.com/bid/47824
ClamAV Hash Manager Off-By-One Denial of Service Vulnerability
http://www.securityfocus.com/bid/48891
bzip2 'BZ2_decompress' Function Integer Overflow Vulnerability
http://www.securityfocus.com/bid/43331
ClamAV 'vba_read_project_strings()' Double Free Memory Corruption Vulnerability
http://www.securityfocus.com/bid/46470
ClamAV 'find_stream_bounds()' PDF File Processing Denial Of Service Vulnerability
http://www.securityfocus.com/bid/43555
Linux-HA OCF Resource Agents 'LD_LIBRARY_PATH' Multiple Local Privilege Escalation Vulnerabilities
http://www.securityfocus.com/bid/44359
Avahi 'avahi-core/socket.c' Zero Size Packet Denial Of Service Vulnerability
http://www.securityfocus.com/bid/41075
Avahi 'avahi-core/socket.c' NULL UDP Packet Denial Of Service Vulnerability
http://www.securityfocus.com/bid/46446
FreeType Font Document Multiple Memory Corruption Vulnerabilities
http://www.securityfocus.com/bid/50155
Cyrus IMAP Server SIEVE Script Local Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/36296
Cyrus IMAP Server 'index_get_ids()' NULL Pointer Dereference Denial Of Service Vulnerability
http://www.securityfocus.com/bid/49659
Opera Web Browser SVG Layout Memory Corruption Vulnerability
http://www.securityfocus.com/bid/50044
MIT Kerberos Multiple Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/50273
MIT Kerberos krb5-appl FTP Daemon EGID Remote Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/48571
GnuPG 'GPGSM Tool' Certificate Importing Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/41945
Apple QuickTime CVE-2011-0247 H.264 Movie Files Multiple Buffer Overflow Vulnerabilities
http://www.securityfocus.com/bid/49030
Wireshark Lua Script File Arbitrary Code Execution Vulnerability
http://www.securityfocus.com/bid/49528
D-Bus Nested Variants Denial of Service Vulnerability
http://www.securityfocus.com/bid/45377
D-Bus Configuration Insecure Temporary File Creation Vulnerability
http://www.securityfocus.com/bid/48460
D-Bus Message Byte Order Denial of Service Vulnerability
http://www.securityfocus.com/bid/48216
Multiple Cytel Products Remote Buffer Overflow Vulnerabilities
http://www.securityfocus.com/bid/49924
FreeBSD UNIX Domain Socket Local Privilege Escalation Vulnerabiity
http://www.securityfocus.com/bid/49862
Microsoft Windows Kernel 'Win32k.sys' (CVE-2011-1985) Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/49968
SAP Management Console OSExecute Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/50348
Cisco Nexus OS 'section' and 'less' Local Command Injection Vulnerabilities
http://www.securityfocus.com/bid/50347
Alcatel-Lucent OmniTouch 8400 Instant Communications Suite Multiple Input Validation Vulnerabilities
http://www.securityfocus.com/bid/50346
zFTP Server 'cwd/stat' Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/50345
InverseFlow Multiple Cross Site Scripting Vulnerabilities
http://www.securityfocus.com/bid/50344
Linux-PAM 'pam_env' Module Multiple Local Privilege Escalation Vulnerabilities
http://www.securityfocus.com/bid/50343
McAfee Web Gateway Web Access Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/50341
e107 'cmd' Parameter Remote Command Execution Vulnerability
http://www.securityfocus.com/bid/50339
Joomla! Freestyle FAQs and Freestyle Testimonials Components Unspecified SQL Injection Vulnerability
http://www.securityfocus.com/bid/50338
OpenEMR Multiple SQL Injection Vulnerabilities
http://www.securityfocus.com/bid/50336
WordPress ThemeCity 's' Parameter Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/50334
Oracle AutoVue 'AutoVueX.ocx' ActiveX Control 'Export3DBom()' Insecure Method Vulnerability
http://www.securityfocus.com/bid/50333
Oracle AutoVue 'AutoVueX.ocx' ActiveX Control 'ExportEdaBom()' Insecure Method Vulnerability
http://www.securityfocus.com/bid/50332
phpLDAPadmin 0.9.4b 'common.php' Local File Include Vulnerability
http://www.securityfocus.com/bid/50328
2011年10月24日月曜日
24日 月曜日、赤口
+ Postfix stable release 2.8.6, 2.7.7, 2.6.13, 2.5.16
http://www.postfix.org/announcements/postfix-2.8.6.html
http://mirror.postfix.jp/postfix-release/official/postfix-2.8.6.HISTORY
http://mirror.postfix.jp/postfix-release/official/postfix-2.7.7.HISTORY
http://mirror.postfix.jp/postfix-release/official/postfix-2.6.13.HISTORY
http://mirror.postfix.jp/postfix-release/official/postfix-2.5.16.HISTORY
UPDATE: Security updates available for Adobe Reader and Acrobat
http://www.adobe.com/support/security/bulletins/apsb11-24.html
CESA-2011:1386 (kernel)
http://lwn.net/Alerts/464073/
CESA-2011:1392 (httpd)
http://lwn.net/Alerts/464072/
Thunderbird Beta Channel: latest update available
http://www.mozilla.org/thunderbird/all-beta.html
http://www.mozilla.org/thunderbird/8.0beta/releasenotes/
phpMyAdmin 3.4.7 is released
http://sourceforge.net/news/?group_id=23067&id=304138
SA46491: Gentoo update for clamav
http://secunia.com/advisories/46491/
Microsoft Windows Kernel 'Win32k.sys' (CVE-2011-1985) Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/49968
+ MySQL Community Server 5.5.17 has been released
http://dev.mysql.com/tech-resources/interviews/thomas-ulin-mysql-55.html
http://dev.mysql.com/doc/refman/5.5/en/news-5-5-17.html
+ Linux kernel 3.0.5, 3.0.6, 3.0.7 released
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.0.5
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.0.6
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.0.7
+ Sudo 1.7.8, 1.8.3 released
http://www.sudo.ws/sudo/news.html
http://www.sudo.ws/sudo/stable.html#1.7.8
http://www.sudo.ws/sudo/stable.html#1.8.3
+ Linux Kernel 'ext4_ext_insert_extent()' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/50322
++ [CPUOct2011] Oracle Critical Patch Update Advisory - October 2011
http://www.oracle.com/technetwork/jp/topics/ojkb155517-518195-ja.html
[ANNOUNCE] Apache OpenWebBeans 1.1.2 release
http://www.apache.org/dyn/closer.cgi/openwebbeans/1.1.2/
Apache Subversion 1.7.1 Released
http://subversion.apache.org/download/#recommended-release
HPSBMP02713 SSRT100651 rev.2 - Replaced by Document ID c03058866 - HPSBMU02716 SSRT100651
https://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?javax.portlet.tpst=ba847bafb2a2d782fcbb0710b053ce01&javax.portlet.prp_ba847bafb2a2d782fcbb0710b053ce01=wsrp-navigationalState%3DdocId%25253Demr_na-c03054543%25257CdocLocale%25253Dja_JP&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken
HPSBMU02716 SSRT100651 rev.1 - HP Data Protector Notebook Extension, Remote Execution of Arbitrary Code
https://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?javax.portlet.tpst=ba847bafb2a2d782fcbb0710b053ce01&javax.portlet.prp_ba847bafb2a2d782fcbb0710b053ce01=wsrp-navigationalState%3DdocId%25253Demr_na-c03058866%25257CdocLocale%25253Dja_JP&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken
HPSBOV02497 SSRT090245 rev.4 - HP TCP/IP Services for OpenVMS Running NTP, Remote Execution of Arbitrary Code, Denial of Service (DoS)
https://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?javax.portlet.tpst=ba847bafb2a2d782fcbb0710b053ce01&javax.portlet.prp_ba847bafb2a2d782fcbb0710b053ce01=wsrp-navigationalState%3DdocId%25253Demr_na-c01961959%25257CdocLocale%25253Dja_JP&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken
HPSBPI02711 SSRT100647 rev.1 - HP MFP Digital Sending Software Running on Windows, Local Information Disclosure
https://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?javax.portlet.tpst=ba847bafb2a2d782fcbb0710b053ce01&javax.portlet.prp_ba847bafb2a2d782fcbb0710b053ce01=wsrp-navigationalState%3DdocId%25253Demr_na-c03052686%25257CdocLocale%25253Dja_JP&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken
FreeBSD 9.0-RC1 released
http://www.freebsd.org/news/newsflash.html#event20111023:01
チャットサポートの一時的な停止につきまして（2011年11月5日）
http://www.trendmicro.co.jp/support/news.asp?id=1668
ペンタセキュリティ、WAFに仮想アプライアンス版を追加
http://itpro.nikkeibp.co.jp/article/NEWS/20111021/371202/?ST=security
TeamSHATTER Security Advisory: SQL Injection Vulnerability in Oracle DROP INDEX for spatial datatype
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00135.html
TeamSHATTER Security Advisory: Database Vault Account Management Vulnerabilites
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00134.html
TeamSHATTER Security Advisory: Buffer Overflow in Oracle Database (CTXSYS.DRVDISP.TABLEFUNC_ASOWN fu
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00133.html
[ MDVSA-2011:158 ] phpmyadmin
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00132.html
VUPEN Security Research - Microsoft Internet Explorer "X-UA-COMPATIBLE" Use-after
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00130.html
[ MDVSA-2011:157 ] freetype2
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00129.html
inCommand Technologies, Inc. Cross-site Scripting Vulnerability
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00131.html
Metasploit 4.1.0 Web UI stored XSS vulnerability
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00128.html
tcpdump and IPv6
http://isc.sans.edu/diary.html?storyid=11872
Oracle Java SE Critical Patch Update
http://isc.sans.edu/diary.html?storyid=11869
Red Hat update for kernel
http://secunia.com/advisories/46543/
Elgg pg/search SQL Injection Vulnerability
http://secunia.com/advisories/46514/
Google Chrome NSS Insecure Library Loading Vulnerability
http://secunia.com/advisories/46471/
GNOME Empathy Nickname Script Insertion Vulnerability
http://secunia.com/advisories/46510/
Network Security Services Insecure Library Loading Vulnerability
http://secunia.com/advisories/46557/
Red Hat update for httpd
http://secunia.com/advisories/46456/
Red Hat update for httpd
http://secunia.com/advisories/46542/
WHMCompleteSolution "templatefile" Local File Inclusion Vulnerability
http://secunia.com/advisories/46312/
Ubuntu update for linux
http://secunia.com/advisories/46539/
Ubuntu update for open-iscsi
http://secunia.com/advisories/46535/
Pre Studio Business Cards Designer "id" SQL Injection Vulnerability
http://secunia.com/advisories/46545/
Joomla! Multiple NoNumber Extensions Local File Inclusion and PHP Code Execution
http://secunia.com/advisories/46459/
SUSE update for ldns
http://secunia.com/advisories/46470/
Debian update for wireshark
http://secunia.com/advisories/46482/
Schneider Electric Products UnitelWay Device Driver Privilege Escalation Vulnerability
http://secunia.com/advisories/46534/
Check Point Products ByteRange Filter Denial of Service Vulnerability
http://secunia.com/advisories/46474/
Ubuntu update for acpid
http://secunia.com/advisories/46540/
Medium severity flaw in QNX Neutrino RTOS
http://securityreason.com/securityalert/8475
MS11-064 TCP/IP Stack Denial of Service
http://securityreason.com/securityalert/8474
MS11-077 .fon Kernel-Mode Buffer Overrun PoC
http://securityreason.com/securityalert/8473
Mozilla Firefox Array.reduceRight() Integer Overflow Exploit
http://securityreason.com/securityalert/8472
HP Onboard Administrator (OA), Remote Unauthorized Access
http://securityreason.com/securityalert/8471
Citect Buffer Overflow in UnitelWay Driver Lets Local Users Gain Elevated Privileges
http://www.securitytracker.com/id/1026234
REMOTE: Oracle AutoVue 20.0.1 AutoVueX ActiveX Control SaveViewStateToFile Vulnerability
http://www.exploit-db.com/exploits/18016
REMOTE: HP Power Manager 'formExportDataLogs' Buffer Overflow
http://www.exploit-db.com/exploits/18015
DoS/PoC: Google Chrome Denial Of Service (DoS)
http://www.exploit-db.com/exploits/18025
DoS/PoC: MS11-077 Win32k Null Pointer De-reference Vulnerability POC
http://www.exploit-db.com/exploits/18024
DoS/PoC: Google Chrome PoC, killing thread
http://www.exploit-db.com/exploits/18019
DoS/PoC: Cyclope Internet Filtering Proxy 4.0 - CEPMServer.exe DoS (Poc)
http://www.exploit-db.com/exploits/18017
Schneider Electric Products UnitelWay Device Driver Local Buffer Overflow
http://www.vupen.com/english/ADV-2011-2216.php
OCS Inventory NG Data Processing Cross Site Scripting Vulnerability
http://www.vupen.com/english/ADV-2011-2215.php
IBM WebSphere Application Server for z/OS WS-Security Vulnerability
http://www.vupen.com/english/ADV-2011-2214.php
Oracle Database Server Database Vault 'DV_ACCTMGR' Privileges Remote Security Bypass Vulnerability
http://www.securityfocus.com/bid/50219
Oracle Database 'CTXSYS.DRVDISP' Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/50199
Oracle Database CVE-2011-3512 SQL Injection Vulnerability
http://www.securityfocus.com/bid/50203
TYPO3 pdf_generator2 Extension Remote Commend Execution and Remote File Disclosure Vulnerabilities
http://www.securityfocus.com/bid/50304
Apache HTTP Server CVE-2011-3192 Denial Of Service Vulnerability
http://www.securityfocus.com/bid/49303
Apache HTTP Server 'mod_proxy' Reverse Proxy Information Disclosure Vulnerability
http://www.securityfocus.com/bid/49957
Red Hat Linux Kernel CVE-2011-3347 VLAN Packets Handling Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/50312
phpMyAdmin Setup Interface Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/50175
phpMyAdmin Tracking Feature Multiple Cross Site Scripting Vulnerabilities
http://www.securityfocus.com/bid/49306
Progea Movicon Multiple Heap Based Buffer Overflow and Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/49605
Cisco TelePresence Video Communication Server 'User-Agent' HTTP Header HTML Injection Vulnerability
http://www.securityfocus.com/bid/50084
Apple iOS Free Type Font Document Multiple Memory Corruption Vulnerabilities
http://www.securityfocus.com/bid/50155
X.Org X11 Local Privilege Escalation Vulnerability and Memory Leak Vulnerability
http://www.securityfocus.com/bid/50002
HP Power Manager 'formExportDataLogs' Buffer Overflow Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/37867
Oracle Java SE CVE-2011-3558 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50242
Oracle Java SE CVE-2011-3548 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50211
Oracle Java SE CVE-2011-3551 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50224
Elgg 'limit' Parameter SQL Injection Vulnerability
http://www.securityfocus.com/bid/50327
SportsPHool 'mainnav' Parameter Remote File Include Vulnerability
http://www.securityfocus.com/bid/50325
Mozilla NSS 'NSS_NoDB_Init()' Insecure Library Loading Arbitrary Code Execution Vulnerability
http://www.securityfocus.com/bid/50324
Empathy 'nickname' Field Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/50323
Linux Kernel 'ext4_ext_insert_extent()' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/50322
Oracle AutoVue 'AutoVueX.ocx' ActiveX Control 'SaveViewStateToFile()' Insecure Method Vulnerability
http://www.securityfocus.com/bid/50321
Opera Web Browser Tree Traversing Use-After-Free Memory Corruption Vulnerability
http://www.securityfocus.com/bid/50320
2011年10月21日金曜日
21日 金曜日、先負
2011/10/20 Samba 3.6.1がリリースされました
http://wiki.samba.gr.jp/mediawiki/index.php?title=%E3%83%A1%E3%82%A4%E3%83%B3%E3%83%9A%E3%83%BC%E3%82%B8
ウイルスバスター2012 プログラムアップデートのお知らせ
http://www.trendmicro.co.jp/support/news.asp?id=1667
UPDATE: Oracle Critical Patch Update Advisory - October 2011
http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html
ソフトウェア等の脆弱性関連情報に関する届出状況
[2011年第3四半期（7月～9月）]
http://www.ipa.go.jp/security/vuln/report/vuln2011q3.html
JVNVU#819894: libpng における sCAL チャンクの処理に脆弱性
http://jvn.jp/cert/JVNVU819894/index.html
JVNVU#707943: Windows プログラムの DLL 読み込みに脆弱性
http://jvn.jp/cert/JVNVU707943/index.html
JVN#44724673: Java Web Start において許可されていないシステムクラスが実行される脆弱性
http://jvn.jp/jp/JVN44724673/index.html
JVNTA11-286A: Apple Mac OS Xにおける複数の脆弱性に対するアップデート
http://jvn.jp/cert/JVNTA11-286A/index.html
JVNTA11-284A: Microsoft 製品における複数の脆弱性に対するアップデート
http://jvn.jp/cert/JVNTA11-284A/index.html
JVNDB-2011-002451 Microsoft Internet Explorer 8 における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002451.html
JVNDB-2011-002450 Microsoft Internet Explorer 9 における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002450.html
JVNDB-2011-002449 Microsoft Internet Explorer 6 における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002449.html
JVNDB-2011-002448 Microsoft Internet Explorer 6 から 8 における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002448.html
JVNDB-2011-002447 Microsoft Internet Explorer 6 から 9 における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002447.html
JVNDB-2011-002446 Microsoft Internet Explorer 6 から 9 における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002446.html
JVNDB-2011-002445 Microsoft Windows XP および Windows Server 2003 の afd.sys における権限昇格の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002445.html
JVNDB-2011-002444 Microsoft Windows XP および Windows Server 2003 における権限昇格の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002444.html
JVNDB-2011-002443 Microsoft Forefront UAG の MicrosoftClient.jar における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002443.html
JVNDB-2011-002442 Microsoft Forefront UAG 2010 におけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002442.html
JVNDB-2011-002441 Microsoft Forefront UAG 2010 におけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002441.html
JVNDB-2011-002440 Microsoft Forefront UAG 2010 における CRLF インジェクションの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002440.html
JVNDB-2011-002439 Microsoft .NET Framework および Silverlight における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002439.html
JVNDB-2011-002438 Microsoft Windows のカーネルモードドライバ内にある win32k.sys における権限昇格の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002438.html
JVNDB-2011-002437 Microsoft Windows の win32k.sys のバッファオーバーフローの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002437.html
JVNDB-2011-002436 Microsoft Windows の win32k.sys におけるサービス運用妨害 (システムハング) の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002436.html
JVNDB-2011-002435 Microsoft Windows の win32k.sys における権限昇格またはサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002435.html
JVNDB-2011-002434 Microsoft Windows Vista および Windows 7 の Windows Media Center における権限昇格の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002434.html
JVNDB-2011-002433 Microsoft Windows の Microsoft Active Accessibility コンポーネントにおける権限昇格の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002433.html
JVNDB-2011-002432 複数の Microsoft 製品における任意のファイルを読まれる脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002432.html
JVNDB-2011-002431 Microsoft Windows SharePoint Services および SharePoint Foundation におけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002431.html
JVNDB-2011-002430 複数の Microsoft SharePoint 製品の EditForm.aspx におけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002430.html
JVNDB-2011-002429 複数の Microsoft SharePoint 製品におけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002429.html
JVNDB-2011-002428 Microsoft Internet Explorer における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002428.html
JVNDB-2011-002427 Microsoft Internet Explorer における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002427.html
JVNDB-2011-002426 Microsoft Host Integration Server におけるサービス運用妨害 (SNA サーバサービスの休止) の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002426.html
JVNDB-2011-002425 Microsoft Host Integration Server におけるサービス運用妨害 (SNA サーバサービスの休止) の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002425.html
JVNDB-2011-002424 Apple iTunes で使用される CoreMedia におけるバッファオーバーフローの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002424.html
JVNDB-2011-002423 Apple iTunes で使用される WebKit における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002423.html
JVNDB-2011-002422 Apple iTunes で使用される WebKit における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002422.html
JVNDB-2011-002421 Apple iTunes で使用される WebKit における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002421.html
JVNDB-2011-002420 Apple iTunes で使用される WebKit における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002420.html
JVNDB-2011-002419 Apple iTunes で使用される WebKit における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002419.html
JVNDB-2011-002418 Apple iTunes で使用される WebKit における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002418.html
JVNDB-2011-002417 Apple iTunes で使用される WebKit における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002417.html
JVNDB-2011-002416 Apple iTunes で使用される WebKit における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002416.html
JVNDB-2011-002415 Apple iTunes で使用される WebKit における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002415.html
JVNDB-2011-002414 Apple iTunes で使用される WebKit における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002414.html
JVNDB-2011-002413 Apple iTunes で使用される WebKit における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002413.html
JVNDB-2011-002412 複数の Microsoft SharePoint 製品におけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002412.html
JVNDB-2011-002411 Microsoft Office 2003 および 2007 における権限昇格の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002411.html
JVNDB-2011-002410 Microsoft Office 2007 および 2010 における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002410.html
JVNDB-2011-002409 Windows Server 2003 および 2008 の WINS における権限昇格の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002409.html
JVNDB-2011-002408 Microsoft Excel 2003 における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002408.html
JVNDB-2011-002407 複数の Microsoft Excel 製品における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002407.html
JVNDB-2011-002406 複数の Microsoft Excel 製品における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002406.html
JVNDB-2011-002405 複数の Microsoft Excel 製品における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002405.html
JVNDB-2011-002404 複数の Microsoft Excel 製品における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002404.html
JVNDB-2011-002403 Microsoft Windows における権限昇格の脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002403.html
JVNDB-2011-002402 Adobe Reader および Acrobat における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002402.html
JVNDB-2011-002401 Adobe Reader および Acrobat の CoolType.dll におけるスタックベースのバッファオーバーフローの脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002401.html
JVNDB-2011-002400 Adobe Reader および Acrobat における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002400.html
JVNDB-2011-002399 Adobe Reader および Acrobat における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002399.html
Independant Researcher : Django - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36928
Red Hat : [RHSA-2011:1379-01] krb5 - Denial-Of-Service Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36924
Red Hat : [RHSA-2011:1380-01] java-1.6.0-openjdk - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36925
Red Hat : [RHSA-2011:1384-01] java-1.6.0-sun - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36926
Red Hat : QEMU - Buffer Overflow Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36927
Cisco : [cisco-sa-20111019-sns] Cisco Show and Share - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=36929
New Flash Click Jacking Exploit
http://isc.sans.edu/diary.html?storyid=11857
JBoss Worm
http://isc.sans.edu/diary.html?storyid=11860
Check Point UTM-1 Edge / Safe@Office WebUI Multiple Vulnerabilities
http://secunia.com/advisories/46486/
DoS/Poc: Opera ＜= 11.51 Use After Free Crash PoC
http://www.exploit-db.com/exploits/18014
HP Power Manager 'formExportDataLogs' Buffer Overflow Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/37867
Oracle Java SE CVE-2011-3558 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50242
Oracle Java SE CVE-2011-3548 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50211
Oracle Java SE CVE-2011-3551 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50224
http://www.samba.org/samba/history/samba-3.6.1.html
http://www.samba.org/samba/history/
+ Important: kernel security, bug fix, and enhancement update
http://rhn.redhat.com/errata/RHSA-2011-1386.html
+ Moderate: httpd security and bug fix update
http://rhn.redhat.com/errata/RHSA-2011-1392.html
+ Linux Kernel 'taskstats' Access Restriction Local Security Bypass Vulnerability
http://www.securityfocus.com/bid/50314
http://www.redhat.com/security/data/cve/CVE-2011-2494.html
+ Linux Kernel 'clock_gettime()' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/50311
- Linux Kernel EXT4 Extent Format File Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/48697
RHSA-2011:1391 Moderate: httpd security and bug fix update
http://rhn.redhat.com/errata/RHSA-2011-1391.html
CESA-2011:1380 (java-1.6.0-openjdk)
http://lwn.net/Alerts/463927/
CESA-2011:1385 (kdelibs)
http://lwn.net/Alerts/463929/
[SECURITY] [DSA 2324-1] wireshark security update
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00127.html
GotRoot Security Challenge
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00126.html
[security bulletin] HPSBPI02711 SSRT100647 rev.1 - HP MFP Digital Sending Software Running on Wi
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00120.html
OCS Inventory NG 2.0.1 Persistent XSS (CVE-2011-4024)
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00125.html
Oracle DataDirect Multiple Native Wire Protocol ODBC Drivers HOST Attribute Stack Based Buffer Overf
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00124.html
Yet Another CMS 1.0 SQL Injection & XSS vulnerabilities
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00119.html
Cisco Security Advisory: CiscoWorks Common Services Arbitrary Command Execution Vulnerability
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00118.html
Cisco Security Advisory: Cisco Show and Share Security Vulnerabilities
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00117.html
[security bulletin] HPSBMU02716 SSRT100651 rev.1 - HP Data Protector Notebook Extension, Remote
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00123.html
Multiple vulnerabilities in Tine 2.0
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00122.html
ZDI-11-295 : Apple QuickTime FlashPix JPEG Tables Selector Remote Code Execution Vulnerabili
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00116.html
DNS Poisoning via Port Exhaustion
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00121.html
[ GLSA 201110-13 ] Tor: Multiple vulnerabilities
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00115.html
MITKRB5-SA-2011-006 KDC denial of service vulnerabilities [CVE-2011-1527 CVE-
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2011-10/msg00114.html
Critical Control 13: Limitation and Control of Network Ports, Protocols, and Services
http://isc.sans.edu/diary.html?storyid=11845
Evil Printers Sending Mail
http://isc.sans.edu/diary.html?storyid=11848
IBM WebSphere Application Server for z/OS JAX-WS Applications Unspecified Vulnerability
http://secunia.com/advisories/46469/
KaiBB Cross-Site Scripting and SQL Injection Vulnerabilities
http://secunia.com/advisories/45311/
wizmall "BID" and "UID" SQL Injection Vulnerabilities
http://secunia.com/advisories/46440/
wizmall Two File Disclosure Vulnerabilities
http://secunia.com/advisories/46484/
Splunk Cross-Site Scripting and Denial of Service Vulnerabilities
http://secunia.com/advisories/46462/
Fedora update for java-1.6.0-openjdk
http://secunia.com/advisories/46538/
Honeywell EBI Temaline Remote Installer ActiveX Control "DownloadURL()" Insecure Method
http://secunia.com/advisories/46497/
Fedora update for tomcat6
http://secunia.com/advisories/46537/
HP MFP Digital Sending Software Workflow Metadata Information Disclosure Weakness
http://secunia.com/advisories/46532/
CiscoWorks Common Services Home Page Component Command Injection Vulnerability
http://secunia.com/advisories/46533/
Cisco Show and Share Security Bypass Security Issue and File Upload Vulnerability
http://secunia.com/advisories/46465/
Red Hat update for krb5
http://secunia.com/advisories/46480/
Red Hat update for java-1.6.0-sun
http://secunia.com/advisories/46490/
Simple PHP Forum Script "id" SQL Injection Vulnerability
http://secunia.com/advisories/46485/
Microsoft Internet Explorer DOM Modification Race Code Execution Vulnerability
http://www.securiteam.com/windowsntfocus/6O03H002UW.html
Microsoft Internet Explorer layout-grid-char style Code Execution Vulnerability
http://www.securiteam.com/windowsntfocus/6P03I002UQ.html
Lotus Notes XLS viewer malformed BIFF record heap overflow Vulnerability
http://www.securiteam.com/windowsntfocus/6T03M002UC.html
7T Interactive Graphical SCADA System Memory Corruption Vulnerability
http://www.securiteam.com/securitynews/6S03L002US.html
Oracle Java ICC Profile Multi-Language 'curv' Tag Parsing Code Execution Vulnerability
http://www.securiteam.com/securitynews/6R03K002US.html
Oracle Java ICC Profile 'bfd ' Tag Parsing Code Execution Vulnerability
http://www.securiteam.com/securitynews/6Q03J002UU.html
Avaya Identity Engines Ignition Server Remote Code Execution Vulnerability
http://www.vupen.com/english/ADV-2011-2213.php
MIT Kerberos Packets Processing Remote Denial of Service Vulnerabilities
http://www.vupen.com/english/ADV-2011-2212.php
HP MFP Digital Sending Software Local Information Disclosure
http://www.vupen.com/english/ADV-2011-2211.php
Novell ZENworks Configuration Management Multiple Vulnerabilities
http://www.vupen.com/english/ADV-2011-2210.php
Novell ZENworks Handheld Management Code Execution and Dir Traversal
http://www.vupen.com/english/ADV-2011-2209.php
Cisco Show and Share Unauthorized Access and Code Execution
http://www.vupen.com/english/ADV-2011-2208.php
Cisco CiscoWorks Common Services Command Execution Vulnerability
http://www.vupen.com/english/ADV-2011-2207.php
Oracle Java Multiple Remote Code Execution and Security Bypass
http://www.vupen.com/english/ADV-2011-2206.php
Oracle and Sun Products Multiple Code Execution and Security Bypass
http://www.vupen.com/english/ADV-2011-2205.php
DoS/PoC: UnrealIRCd 3.2.8.1 Local Configuration Stack Overflow
http://www.exploit-db.com/exploits/18011
DoS/PoC: Opera ＜= 11.52 Stack Overflow
http://www.exploit-db.com/exploits/18008
DoS/PoC: Oracle DataDirect Multiple Native Wire Protocol ODBC Drivers HOST Attribute Stack Based Buffer Overflow
http://www.exploit-db.com/exploits/18007
DoS/PoC: Opera ＜= 11.52 PoC Denial of Service
http://www.exploit-db.com/exploits/18006
SUSE Linux 'scsi_discovery tool' Insecure Temporary File Creation Vulnerability
http://www.securityfocus.com/bid/36887
Linux Kernel '/proc/PID/io' Local Information Disclosure Vulnerability
http://www.securityfocus.com/bid/49408
Linux Kernel TCP Sequence Number Generation Security Weakness
http://www.securityfocus.com/bid/49289
Linux Kernel SCTP INIT/INIT-ACK Chunk Length Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/47308
Linux Kernel Auerswald USB Device Driver Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/48687
Wireshark Lua Script File Arbitrary Code Execution Vulnerability
http://www.securityfocus.com/bid/49528
acpid Multiple Local Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/45915
Linux Kernel 'CIFSFindNext()' Function Denial of Service Vulnerability
http://www.securityfocus.com/bid/49295
Xen DMA Requests IOMMU Denial of Service Vulnerability
http://www.securityfocus.com/bid/49146
Linux Kernel Generic Receive Offload (GRO) CVE-2011-2723 Denial of Service Vulnerability
http://www.securityfocus.com/bid/48929
Linux Kernel eCryptfs Multiple Vulnerabilities
http://www.securityfocus.com/bid/49108
Linux Kernel 'taskstats.c' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/48383
Linux Kernel CIFS Local Security Bypass Vulnerability
http://www.securityfocus.com/bid/47381
Linux Kernel 'mremap()' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/47321
Linux Kernel IPv6 Fragment Identification Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/48802
Linux Kernel 'drivers/char/tpm/tpm.c' Information Disclosure Vulnerability
http://www.securityfocus.com/bid/46866
Linux Kernel EXT4 Extent Format File Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/48697
Apache HTTP Server CVE-2011-3348 Denial Of Service Vulnerability
http://www.securityfocus.com/bid/49616
Apache HTTP Server 'mod_proxy' Reverse Proxy Information Disclosure Vulnerability
http://www.securityfocus.com/bid/49957
Oracle Java SE CVE-2011-3544 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50218
Oracle Java SE CVE-2011-3521 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50215
SSL/TLS Protocol Initialization Vector Implementation Information Disclosure Vulnerability
http://www.securityfocus.com/bid/49778
Oracle Java SE CVE-2011-3552 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50248
Oracle Java SE CVE-2011-3557 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50234
Oracle Java SE CVE-2011-3547 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50243
Oracle Java SE CVE-2011-3560 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50236
Oracle Java SE CVE-2011-3554 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50216
Oracle Java SE CVE-2011-3556 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50231
OCS Inventory NG Unspecified HTML Injection Vulnerability
http://www.securityfocus.com/bid/50011
Oracle Java SE CVE-2011-3551 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50224
KDE KSSL Common Name SSL Certificate Spoofing Vulnerability
http://www.securityfocus.com/bid/49925
Apache Tomcat 'sendfile' Request Attributes Information Disclosure Vulnerability
http://www.securityfocus.com/bid/48667
Apache Tomcat AJP Protocol Security Bypass Vulnerability
http://www.securityfocus.com/bid/49353
Apache Tomcat NIO Connector Denial of Service Vulnerability
http://www.securityfocus.com/bid/46164
Apache Tomcat SecurityManager Security Bypass Vulnerability
http://www.securityfocus.com/bid/46177
Apache Tomcat 'MemoryUserDatabase' Information Disclosure Vulnerability
http://www.securityfocus.com/bid/48456
Apache Tomcat HTML Manager Interface HTML Injection Vulnerability
http://www.securityfocus.com/bid/46174
ldns 'rr.c' Remote Heap Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/49748
Oracle Java SE CVE-2011-3548 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50211
Oracle Java SE CVE-2011-3558 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/50242
Mozilla Firefox/SeaMonkey CVE-2011-2993 Security Bypass Vulnerability
http://www.securityfocus.com/bid/49248
Mozilla Firefox and Thunderbird CVE-2011-2991 JavaScript Memory-Corruption Vulnerabiility
http://www.securityfocus.com/bid/49243
Cyclope Internet Filtering Proxy 'user' HTML Injection Vulnerability
http://www.securityfocus.com/bid/50317
MetaSploit Framework 'project[name]' Field HTML Injection Vulnerability
http://www.securityfocus.com/bid/50315
Linux Kernel 'taskstats' Access Restriction Local Security Bypass Vulnerability
http://www.securityfocus.com/bid/50314
Red Hat Linux Kernel Ethernet Bridge Interface Denial of Service Vulnerability
http://www.securityfocus.com/bid/50313
Red Hat Linux Kernel CVE-2011-3347 VLAN Packets Handling Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/50312
Linux Kernel 'clock_gettime()' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/50311
IBM WebSphere Application Server JAX-WS Unspecified Vulnerability
http://www.securityfocus.com/bid/50310
PreProjects Pre Studio Business Cards Designer 'page.php' SQL Injection Vulnerability
http://www.securityfocus.com/bid/50309
Skype Technologies Skype Client for Windows File Transfer Remote Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/50308
Tine Multiple Cross Site Scripting Vulnerabilities
http://www.securityfocus.com/bid/50307
TYPO3 pmkshadowbox and pmkslimbox Cross Site Scripting and Arbitrary File Download Vulnerabilities
http://www.securityfocus.com/bid/50306
Oracle DataDirect Multiple Native Wire Protocol ODBC Driver Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/50305
TYPO3 pdf_generator2 Extension Remote Commend Execution and Remote File Disclosure Vulnerabilities
http://www.securityfocus.com/bid/50304
Novell ZENworks Handheld Management Multiple Unspecified Remote Code Execution Vulnerabilities
http://www.securityfocus.com/bid/50303
wizmall Multiple SQL Injection Vulnerabilities
http://www.securityfocus.com/bid/50302
osCommerce Remote File Upload and File Disclosure Vulnerabilities
http://www.securityfocus.com/bid/50301
wizmall Multiple Remote File Disclosure Vulnerabilities
http://www.securityfocus.com/bid/50300
KaiBB SQL Injection and Cross Site Scripting Vulnerabilities
http://www.securityfocus.com/bid/50299
Splunk Web component Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/50298
Splunk 'segment' Parameter Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/50296
Innovate Portal 'cat' Parameter Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/50295
CMS Mini 'name' Parameter Directory Traversal Vulnerability
http://www.securityfocus.com/bid/50294
Uiga Personal Portal SQL Injection and Cross Site Scripting Vulnerabilities
http://www.securityfocus.com/bid/50293
Simple Free PHP Forum Script 'index.php' SQL Injection Vulnerability
http://www.securityfocus.com/bid/50292
fims File Management System 'password' Parameter SQL Injection Vulnerability
http://www.securityfocus.com/bid/50291
fims File Management System 'f' Parameter Arbitrary File Download Vulnerability
http://www.securityfocus.com/bid/50290
OpenEMR 'add_edit_issue.php' SQL Injection Vulnerability
http://www.securityfocus.com/bid/50289
登録:
投稿 (Atom)