2010年10月26日火曜日

26日 火曜日、先負

[ANNOUNCE] Commons Daemon 1.0.4 Released
http://commons.apache.org/daemon/

JVNVU#537223 glibc に権限昇格の脆弱性
http://jvn.jp/cert/JVNVU537223/index.html

JVNVU#362983 Linux カーネルにおける RDS プロトコルの実装に脆弱性
http://jvn.jp/cert/JVNVU362983/index.html

JVNDB-2010-002188 Microsoft Word および Microsoft Office における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002188.html

JVNDB-2010-002187 Microsoft Word および Microsoft Office における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002187.html

JVNDB-2010-002186 Microsoft Word および Microsoft Office における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002186.html

JVNDB-2010-002185 Microsoft Word および Microsoft Office における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002185.html

JVNDB-2010-002184 Microsoft Word および Microsoft Office における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002184.html

JVNDB-2010-002183 複数の Microsoft 製品の OpenType Font フォーマットドライバにおける権限を取得される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002183.html

JVNDB-2010-002182 複数の Microsoft 製品の OpenType Font フォーマットドライバにおける権限を取得される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002182.html

JVNDB-2010-002181 複数の Microsoft 製品のカーネルモードドライバにおける権限昇格の脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002181.html

JVNDB-2010-002180 複数の Microsoft 製品のカーネルモードドライバにおける権限昇格の脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002180.html

JVNDB-2010-001999 Windows プログラムの DLL 読み込みに脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001999.html

JVNDB-2010-001454 Linux 上で稼働する IBM DB2 におけるバッファオーバーフローの脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001454.html

Adobe Acrobat Reader Acrord32.dll Use After Free Vulnerability
http://www.securiteam.com/windowsntfocus/6Y03H1F00Q.html

SAP Management Console Multiple DoS Vulnerabilities
http://www.securiteam.com/securitynews/6X03G1F00E.html

HP ProCurve 2610 Switch In-band Agent Denial of Service vulnerability
http://www.securiteam.com/securitynews/6X03G1F00E.html

HP ProCurve Threat Management Services unauthorized Data Injection and Denial of Service vulnerabilities
http://www.securiteam.com/securitynews/6Z03I1F00C.html

HP ProCurve 2610 Switches running DHCP Denial of Service Vulnerability
http://www.securiteam.com/securitynews/6B03K1F00A.html

GNU C Library LD_PRELOAD Environment Variable May Let Local Users Gain Elevated Privileges
http://securitytracker.com/alerts/2010/Oct/1024636.html




+ RHSA-2010:0792-1: Important: kernel security update
http://rhn.redhat.com/errata/RHSA-2010-0792.html

+ RHSA-2010:0793-1: Important: glibc security update
http://rhn.redhat.com/errata/RHSA-2010-0793.html

- Microsoft Windows 'lpksetup.exe' 'oci.dll' DLL Loading Arbitrary Code Execution Vulnerability
http://www.securityfocus.com/bid/44414

UPDATE: APSB10-21: Security updates available for Adobe Reader and Acrobat
http://www.adobe.com/support/security/bulletins/apsb10-21.html

CESA-2010:0781 (seamonkey)
http://lwn.net/Alerts/411533/

CESA-2010:0779 (kernel)
http://lwn.net/Alerts/411534/

CESA-2010:0780 (thunderbird)
http://lwn.net/Alerts/411535/

CESA-2010:0781 (seamonkey)
http://lwn.net/Alerts/411536/

CESA-2010:0782 (firefox)
http://lwn.net/Alerts/411537/

CESA-2010:0785 (quagga)
http://lwn.net/Alerts/411539/

CESA-2010:0788 (pidgin)
http://lwn.net/Alerts/411540/

phpMyAdmin 3.3.8 is released
http://sourceforge.net/news/?group_id=23067&id=293153

Squid 3.1.9 released
http://www.squid-cache.org/Versions/
http://www.squid-cache.org/Versions/v3/3.1/

NTP 4.2.6p3-RC7 released
http://archive.ntp.org/ntp4/ChangeLog-stable-rc

NTP 4.2.7p71 released
http://archive.ntp.org/ntp4/ChangeLog-dev

ASTERIAフォーラム2010秋（10/7開催）講演資料ダウンロード受付
http://asteria.jp/news/20101025-175517.html

Tpro EXPO 2010 出展レポート公開のお知らせ
http://asteria.jp/news/20101025-160920.html

Mandriva : [MDVSA-2010:212] glibc - Privilege Escalation Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=34013

Ubuntu Security Notice : [USN-1008-3] libvirt update - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=34017

Ubuntu Security Notice : [USN-1009-1] GNU C Library vulnerabilities
http://www.criticalwatch.com/support/security-advisories.aspx?AID=34018

Debian : [DSA 2122-1] New glibc packages fix local privilege escalation
http://www.criticalwatch.com/support/security-advisories.aspx?AID=34022

Hewlett-Packard : [HPSBMA02593 SSRT100237 rev.1] - HP Virtual Connect Enterprise Manager (VCEM) for Windows, Remote Ar
http://www.criticalwatch.com/support/security-advisories.aspx?AID=34023

Mandriva : [MDVSA-2010:211] mozilla-thunderbird - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=34014

Mandriva : [MDVSA-2010:210] firefox - Multiple Issues
http://www.criticalwatch.com/support/security-advisories.aspx?AID=34015

Mandriva : [MDVSA-2010:209] libsmi - Buffer Overflow Issue
http://www.criticalwatch.com/support/security-advisories.aspx?AID=34016

Slackware Linux : [SSA:2010-295-01] glibc - Multiple Updates
http://www.criticalwatch.com/support/security-advisories.aspx?AID=34019

Slackware Linux : [SSA:2010-295-03] mozilla-thunderbird - Multiple Updates
http://www.criticalwatch.com/support/security-advisories.aspx?AID=34020

Slackware Linux : [SSA:2010-295-02] mozilla-firefox - Multiple Updates
http://www.criticalwatch.com/support/security-advisories.aspx?AID=34021

JVNDB-2010-002179 64-bit プラットフォーム上で稼働している Microsoft .NET Framework の JIT コンパイラにおける任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002179.html

JVNDB-2010-002178 複数の Microsoft 製品の Embedded OpenType Font Engine における整数オーバーフローの脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002178.html

JVNDB-2010-002177 複数の Microsoft 製品の Media Player Network Sharing Service における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002177.html

JVNDB-2010-002176 Microsoft Internet Explorer における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002176.html

JVNDB-2010-002175 Microsoft Internet Explorer における重要な情報を取得される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002175.html

JVNDB-2010-002174 Microsoft Internet Explorer における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002174.html

JVNDB-2010-002173 Microsoft Internet Explorer における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002173.html

JVNDB-2010-002172 Microsoft Internet Explorer の HTML コンテンツ作成の実装における削除済みの重要な情報を取得される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002172.html

JVNDB-2010-002171 Microsoft Internet Explorer における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002171.html

JVNDB-2010-002170 Microsoft Internet Explorer における重要な情報を取得される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002170.html

JVNDB-2010-001999 Windows プログラムの DLL 読み込みに脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001999.html

JVNDB-2010-001596 複数の Microsoft 製品における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001596.html

JVNDB-2010-001501 MIT Kerberos 5 の GSS-API ライブラリにおけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001501.html

[USN-959-2] PAM vulnerability
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-10/msg00207.html

How Visual Studio Makes Your Applications Vulnerable to Binary Planting
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-10/msg00206.html

IPv6 security myths
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-10/msg00199.html

Aardvark Topsite XSS vulnerability
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-10/msg00205.html

[ MDVSA-2010:212 ] glibc
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-10/msg00198.html

[USN-1008-3] libvirt update
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-10/msg00197.html

[USN-1009-1] GNU C Library vulnerabilities
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-10/msg00200.html

[ MDVSA-2010:211 ] mozilla-thunderbird
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-10/msg00201.html

Vulnerabilities in W-Agora
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-10/msg00203.html

[ MDVSA-2010:210 ] firefox
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-10/msg00196.html

Cyber Security Awareness Month - Day 25 - Using Home Computers for Work
http://isc.sans.edu/diary.html?storyid=9808

SQL Slammer Clean-up: Switching Viewpoints
http://isc.sans.edu/diary.html?storyid=9811

AutoPlay Media Studio Insecure Library Loading Vulnerability
http://secunia.com/advisories/41991/

GetRight Insecure Library Loading Vulnerability
http://secunia.com/advisories/41992/

ProShow Producer Insecure Library Loading Vulnerability
http://secunia.com/advisories/41990/

Moodle phpCAS Multiple Vulnerabilities
http://secunia.com/advisories/41980/

Wondershare DVD Slideshow Builder Insecure Library Loading Vulnerability
http://secunia.com/advisories/41987/

Wondershare Flash Gallery Factory Insecure Library Loading Vulnerability
http://secunia.com/advisories/41988/

Jamb CMS Cross-Site Request Forgery Vulnerability
http://secunia.com/advisories/41979/

MinaliC Directory Traversal and Denial of Service Vulnerabilities
http://secunia.com/advisories/41982/

OTRS AgentTicketZoom Script Insertion Vulnerability
http://secunia.com/advisories/41978/

Blue Coat ProxyAV Cross-Site Request Forgery Vulnerability
http://secunia.com/advisories/41964/

monotone Empty Command Strings Denial of Service
http://secunia.com/advisories/41960/

IBM Tivoli Access Manager for e-business Cross-Site Scripting Vulnerabilities
http://secunia.com/advisories/41974/

Fedora update for glibc
http://secunia.com/advisories/41971/

Debian update for glibc
http://secunia.com/advisories/41940/

Ubuntu update for glibc
http://secunia.com/advisories/41941/

Fedora update for ocsinventory-agent
http://secunia.com/advisories/41970/

Moodle phpMyAdmin Module Multiple Vulnerabilities
http://secunia.com/advisories/41954/

HP Data Protector Media Operations 'SignInName' Parameter Overflow Lets Remote Users Deny Service
http://securitytracker.com/alerts/2010/Oct/1024634.html

IBM Tivoli Access Manager Input Validation Flaw Permits Cross-Site Scripting Attacks
http://securitytracker.com/alerts/2010/Oct/1024633.html

Blue Coat ProxyAV Permits Cross-Site Request Forgery Attacks
http://securitytracker.com/alerts/2010/Oct/1024632.html

Linux Kernel tcf_act_police_dump() Function Lets Local Users Obtain Portions of Kernel Memory
http://securitytracker.com/alerts/2010/Oct/1024603.html

Vulnerability Note VU#537223: GNU C library dynamic linker expands $ORIGIN in setuid library search path
http://www.kb.cert.org/vuls/id/537223

Vulnerability Note VU#362983: Linux kernel RDS protocol vulnerability
http://www.kb.cert.org/vuls/id/362983

Winamp 5.5.8.2985 (in_mod plugin) Stack Overflow (Friendly Version)
http://www.exploit-db.com/exploits/15312/

IBM WebSphere Application Server Components Multiple Vulnerabilities
http://www.vupen.com/english/advisories/2010/2775

IBM Tivoli Access Manager for e-business Cross Site Scripting Issues
http://www.vupen.com/english/advisories/2010/2774

SAP BusinessObjects Information Disclosure and Privilege Escalation
http://www.vupen.com/english/advisories/2010/2773

Fedora Security Update Fixes Glibc ORIGIN Expansion Vulnerability
http://www.vupen.com/english/advisories/2010/2772

Fedora Security Update Fixes Ocsinventory-Agent Vulnerability
http://www.vupen.com/english/advisories/2010/2771

Slackware Security Update Fixes Firefox Code Execution Vulnerabilities
http://www.vupen.com/english/advisories/2010/2770

Slackware Security Update Fixes Thunderbird Multiple Vulnerabilities
http://www.vupen.com/english/advisories/2010/2769

Slackware Security Update Fixes Glibc ORIGIN Expansion Vulnerability
http://www.vupen.com/english/advisories/2010/2768

Mandriva Security Update Fixes Glibc Privilege Escalation Vulnerability
http://www.vupen.com/english/advisories/2010/2767

Mandriva Security Update Fixes Thunderbird Multiple Vulnerabilities
http://www.vupen.com/english/advisories/2010/2766

Mandriva Security Update Fixes Firefox Code Execution Vulnerabilities
http://www.vupen.com/english/advisories/2010/2765

Mandriva Security Update Fixes LibSMI Buffer Overflow Vulnerability
http://www.vupen.com/english/advisories/2010/2764

Ubuntu Security Update Fixes libvirt Security Bypass Vulnerabilities
http://www.vupen.com/english/advisories/2010/2763

Debian Security Update Fixes Glibc Privilege Escalation Vulnerabilities
http://www.vupen.com/english/advisories/2010/2762

GNU glibc Dynamic Linker 'LD_AUDIT' Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/44347

Linux Kernel Reliable Datagram Sockets (RDS) Protocol Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/44219

RETIRED: Zoki Catalog 'search_text' parameter SQL Injection Vulnerability
http://www.securityfocus.com/bid/44398

PAM MOTD Module Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/41465

PostgreSQL PL/Perl and PL/Tcl Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/43747

Oracle MySQL 'HANDLER' interface Denial Of Service Vulnerability
http://www.securityfocus.com/bid/42633

Oracle MySQL 'LOAD DATA INFILE' Denial Of Service Vulnerability
http://www.securityfocus.com/bid/42625

Oracle MySQL Prior to 5.1.49 'WITH ROLLUP' Denial Of Service Vulnerability
http://www.securityfocus.com/bid/42596

Oracle MySQL 'EXPLAIN' Denial Of Service Vulnerability
http://www.securityfocus.com/bid/42599

Oracle MySQL Malformed Packet Handling Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/40100

Oracle MySQL Prior to 5.1.49 'JOIN' Statement Denial Of Service Vulnerability
http://www.securityfocus.com/bid/42646

Oracle MySQL 'COM_FIELD_LIST' Command Packet Security Bypass Vulnerability
http://www.securityfocus.com/bid/40109

Oracle MySQL DROP TABLE MyISAM Symbolic Link Local Security Bypass Vulnerability
http://www.securityfocus.com/bid/40257

Oracle MySQL 'COM_FIELD_LIST' Command Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/40106

Usagi Project mipv6-daemon Unicast Kernel Message Spoofing Vulnerability
http://www.securityfocus.com/bid/41524

Usagi Project mipv6-daemon ND Options Remote Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/41522

libHX 'HX_split()' Remote Heap-Based Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/42592

MIT Kerberos KDC 'kdc_authdata.c' NULL Pointer Denial Of Service Vulnerability
http://www.securityfocus.com/bid/43756

Oracle Java SE and Java for Business CVE-2010-3551 Remote Networking Vulnerability
http://www.securityfocus.com/bid/44009

Oracle Java SE and Java for Business CVE-2010-3541 Remote Networking Vulnerability
http://www.securityfocus.com/bid/44032

Oracle Java SE and Java for Business CVE-2010-3573 Same Origin Bypass Vulnerability
http://www.securityfocus.com/bid/44028

Oracle Java SE and Java for Business CVE-2010-3560 Remote Networking Vulnerability
http://www.securityfocus.com/bid/44024

Oracle Java SE and Java for Business CVE-2010-3557 Remote Swing Vulnerability
http://www.securityfocus.com/bid/44014

Oracle Java SE and Java for Business CVE-2010-3574 Remote Networking Vulnerability
http://www.securityfocus.com/bid/44011

Oracle Java SE and Java for Business CVE-2010-3548 Remote JNDI Vulnerability
http://www.securityfocus.com/bid/44017

Oracle Java SE and Java for Business CVE-2010-3549 HTTP Response Splitting Vulnerability
http://www.securityfocus.com/bid/44027

MIT Kerberos GSS-API Checksum NULL Pointer Dereference Denial Of Service Vulnerability
http://www.securityfocus.com/bid/40235

Multiple Vendor TLS Protocol Session Renegotiation Security Vulnerability
http://www.securityfocus.com/bid/36935

Oracle Java SE and Java for Business CVE-2010-3561 Remote CORBA Vulnerability
http://www.securityfocus.com/bid/44013

Oracle Java SE and Java for Business CVE-2010-3550 Remote Java Web Start Vulnerability
http://www.securityfocus.com/bid/44040

Oracle Java SE and Java for Business CVE-2010-3553 Remote Swing Vulnerability
http://www.securityfocus.com/bid/44035

Oracle Java SE and Java for Business CVE-2010-3559 HeadspaceSoundbank.nGetName Vulnerability
http://www.securityfocus.com/bid/44026

Oracle Java SE and Java for Business CVE-2010-3555 Remote ActiveX Plug-in Vulnerability
http://www.securityfocus.com/bid/44038

Oracle Java SE and Java for Business CVE-2010-3558 Remote Java Web Start Vulnerability
http://www.securityfocus.com/bid/44021

Oracle Java SE and Java for Business CVE-2010-3570 Remote Deployment Toolkit Vulnerability
http://www.securityfocus.com/bid/44020

Oracle Java SE and Java for Business CVE-2010-3572 Remote Sound Vulnerability
http://www.securityfocus.com/bid/44030

Oracle Java SE and Java for Business CVE-2010-3552 Remote New Java Plug-in Vulnerability
http://www.securityfocus.com/bid/44023

Oracle Java SE and Java for Business 'defaultReadObject' Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/44016

Oracle Java SE and Java for Business CVE-2010-3568 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/44012

Oracle Java SE and Java for Business CVE-2010-3567 Remote 2D Vulnerability
http://www.securityfocus.com/bid/43992

Winamp 5.581 and Prior Multiple Buffer Overflow Vulnerabilities
http://www.securityfocus.com/bid/44094

Oracle Java SE and Java for Business CVE-2010-3554 Remote CORBA Vulnerability
http://www.securityfocus.com/bid/43994

Oracle Java SE and Java for Business CVE-2010-3556 Remote 2D Vulnerability
http://www.securityfocus.com/bid/43971

Oracle Java SE and Java for Business CVE-2010-3565 JPEGImageWriter.writeImage Vulnerability
http://www.securityfocus.com/bid/43985

Oracle Java SE and Java for Business CVE-2010-3566 ICC Profile Vulnerability
http://www.securityfocus.com/bid/43988

Oracle Java SE and Java for Business CVE-2010-3563 BasicServiceImpl Vulnerability
http://www.securityfocus.com/bid/43999

Oracle Java SE and Java for Business CVE-2010-3571 ICC Profile Vulnerability
http://www.securityfocus.com/bid/43965

Oracle Java SE and Java for Business CVE-2010-3562 Remote 2D Vulnerability
http://www.securityfocus.com/bid/43979

Squid Proxy String Processing NULL Pointer Dereference Denial Of Service Vulnerability
http://www.securityfocus.com/bid/42982

dbus-glib 'access' Flag Local Denial Of Service Vulnerability
http://www.securityfocus.com/bid/42347

Samba SID Parsing Remote Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/43212

Adobe Acrobat and Reader CVE-2010-3658 Remote Memory Corruption Vulnerability
http://www.securityfocus.com/bid/43738

Adobe Acrobat and Reader CVE-2010-3657 Denial of Service Vulnerability
http://www.securityfocus.com/bid/43744

Adobe Acrobat and Reader CVE-2010-3631 Array Indexing Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/43733

Adobe Acrobat and Reader CVE-2010-3629 Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/43732

Adobe Acrobat and Reader Thumbnails Use-After-Free Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/43746

Adobe Acrobat and Reader CVE-2010-3656 Denial of Service Vulnerability
http://www.securityfocus.com/bid/43741

Adobe Acrobat and Reader CVE-2010-3632 Remote Memory Corruption Vulnerability
http://www.securityfocus.com/bid/43735

Adobe Acrobat and Reader CVE-2010-3625 Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/43730

Adobe Acrobat and Reader CVE-2010-3628 Remote Memory Corruption Vulnerability
http://www.securityfocus.com/bid/43734

Adobe Acrobat and Reader CVE-2010-3626 Font Parsing Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/43727

Adobe Acrobat and Reader NULL Pointer Dereference Denial of Service Vulnerability
http://www.securityfocus.com/bid/43737

Adobe Acrobat and Reader for Mac CVE-2010-3624 Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/43736

Adobe Acrobat and Reader 'ACE.dll' ICC Streams Remote Memory Corruption Vulnerability
http://www.securityfocus.com/bid/43729

Adobe Acrobat and Reader CVE-2010-3620 Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/43725

Adobe Acrobat and Reader CVE-2010-2890 Remote Memory Corruption Vulnerability
http://www.securityfocus.com/bid/43722

Adobe Acrobat and Reader for Linux CVE-2010-2887 Multiple Privilege Escalation Vulnerabilities
http://www.securityfocus.com/bid/43740

Adobe Reader 'CoolType.dll' TTF Font Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/43057

Adobe Acrobat and Reader ICC Parsing Remote Memory Corruption Vulnerability
http://www.securityfocus.com/bid/43726

Adobe Acrobat and Reader CVE-2010-3619 Remote Memory Corruption Vulnerability
http://www.securityfocus.com/bid/43724

Adobe Acrobat and Reader CVE-2010-3623 Remote Memory Corruption Vulnerability
http://www.securityfocus.com/bid/43731

Adobe Acrobat and Reader CVE-2010-2889 Font Parsing Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/43723

Adobe Flash Player CVE-2010-2884 Unspecified Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/43205

FreeType 'seac' Calls Multiple Remote Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/42621

FreeType Rendering Engine Position Value Heap Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/43700

FreeType BDF Font File Parsing Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/42624

OpenOffice Impress File Multiple Buffer Overflow Vulnerabilities
http://www.securityfocus.com/bid/42202

RETIRED: Amlib NetOPAC 'webquery.dll' Stack Remote Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/42293

Adobe Shockwave Player Director rcsL Chunk Remote Memory Corruption Vulnerability
http://www.securityfocus.com/bid/42682

Microsoft IIS Request Header Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/43138

phpCAS Service Ticket Validation Session Hijacking Vulnerability
http://www.securityfocus.com/bid/42162

phpCAS Proxy Mode Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/43585

MIM:InfiniX Multiple SQL Injection Vulnerabilities
http://www.securityfocus.com/bid/34750

phpMyAdmin Configuration File PHP Code Injection Vulnerability
http://www.securityfocus.com/bid/42591

phpMyAdmin Multiple Cross Site Scripting Vulnerabilities
http://www.securityfocus.com/bid/42584

GNU glibc Dynamic Linker '$ORIGIN' Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/44154

libvirt Multiple Local Security Bypass Vulnerabilities
http://www.securityfocus.com/bid/41981

Microsoft Windows 'lpksetup.exe' 'oci.dll' DLL Loading Arbitrary Code Execution Vulnerability
http://www.securityfocus.com/bid/44414

Festival Server 'LD_LIBRARY_PATH' Insecure Library Loading Arbitrary Code Execution Vulnerability
http://www.securityfocus.com/bid/44395

AutoPlay Media Studio 'dwmapi.dll' DLL Loading Arbitrary Code Execution Vulnerability
http://www.securityfocus.com/bid/44394

MinaliC Directory Traversal and Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/44393

Headlight Software GetRight 'SvcTagLib.dll' DLL Loading Arbitrary Code Execution Vulnerability
http://www.securityfocus.com/bid/44391

Wondershare DVD Slideshow Builder 'dwmapi.dll' DLL Loading Arbitrary Code Execution Vulnerability
http://www.securityfocus.com/bid/44389

Wondershare Flash Gallery Factory 'dwmapi.dll' DLL Loading Arbitrary Code Execution Vulnerability
http://www.securityfocus.com/bid/44387

Photodex ProShow Producer Multiple DLL Loading Arbitrary Code Execution Vulnerability
http://www.securityfocus.com/bid/44386

OTRS 'AgentTicketZoom' HTML Injection Vulnerability
http://www.securityfocus.com/bid/44384
0 件のコメント:
ラベル:

2010年10月25日月曜日

25日 月曜日、友引

jetty@codehaus 7.2.0.v20101020 released
http://svn.codehaus.org/jetty/jetty/branches/jetty-8/VERSION.txt

プレス発表
欧州ENISAのクラウドコンピューティングのセキュリティに関するガイドラインの翻訳を公開
http://www.ipa.go.jp/about/press/20101025_2.html

JVNVU#402231 Adobe Shockwave Player に脆弱性
http://jvn.jp/cert/JVNVU402231/index.html

HP ProCurve 1800 Switches running SNMP Disclosure of Information Vulnerability
http://www.securiteam.com/securitynews/6I03I1500W.html

Alcatel-Lucent CTI CCA Server unauthenticated administrative access vulnerability
http://www.securiteam.com/windowsntfocus/6G03G1500Y.html

Alcatel-Lucent OmniVista 4760 Arbitrary Code Execution Vulnerability
http://www.securiteam.com/windowsntfocus/6H03H1500K.html

HP OpenView Network Node Manager Execution of Arbitrary Code Vulnerability
http://www.securiteam.com/securitynews/6J03J1500I.html

glpng PNG Processing Two Integer Overflow Vulnerabilities
http://www.securiteam.com/securitynews/6K03K1500G.html

HP Data Protector Media Operations 6.11 HTTP Server Remote Integer Overflow DoS
http://www.exploit-db.com/exploits/15307/

AnyDVD 6.7.1.0 Denial Of Service
http://www.exploit-db.com/exploits/15306/

RarmaRadio v2.52 (.m3u) Denial of service vulnerability
http://www.exploit-db.com/exploits/15305/

DBHcms 'editmenu' Parameter SQL Injection Vulnerability
http://www.securityfocus.com/bid/44378




+ Linux kernel 2.6.36 ChangeLog
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36

+ Linux kernel 2.6.36 ChangeLog
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36

+ CVE-2010-1166 Denial of service vulnerability in Xorg and Xsun servers and Sun Ray
http://blogs.sun.com/security/entry/cve_2010_1166_denial_of

+ Internet Explorer "window.onerror" Information Disclosure Vulnerability
http://secunia.com/advisories/41944/
http://securitytracker.com/alerts/2010/Oct/1024630.html
http://www.vupen.com/english/advisories/2010/2758

+ Linux Kernel Heap Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/44354

+ GNU glibc Dynamic Linker 'LD_AUDIT' Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/44347

- Microsoft Windows Task Scheduler Privilege Escalation Vulnerability
http://www.vupen.com/english/advisories/2010/2761

[ANN] Apache Tomcat 7.0.4 beta released
http://tomcat.apache.org/tomcat-7.0-doc/changelog.html

[ANNOUNCE] Another PostgreSQL Diff Tool 2.3 released
http://apgdiff.startnet.biz/

[ANNOUNCE] Commons IO 2.0 released
http://commons.apache.org/io/upgradeto2_0.html

[ANNOUNCE] Apache Tuscany SCA Java 2.0-M5.1 released
http://tuscany.apache.org/sca-java-2x-releases.html

UPDATE: APSB10-21: Security updates available for Adobe Reader and Acrobat
http://www.adobe.com/support/security/bulletins/apsb10-21.html

CESA-2010:0788 (pidgin)
http://lwn.net/Alerts/411268/

DHCP 4.1.2rc1 released
https://www.isc.org/software/dhcp/412rc1
http://ftp.isc.org/isc/dhcp/dhcp-4.1.2rc1-RELNOTES

Linux Kernel release: 2.6.35.8-rc1
http://www.linux.org/news/2010/10/22/0003.html

Linux Kernel release: 2.6.32.25-rc1
http://www.linux.org/news/2010/10/22/0002.html

Linux Kernel release: 2.6.27.55-rc1
http://www.linux.org/news/2010/10/22/0001.html

"PostgreSQL 9.0 High Performance" book now available
http://www.postgresql.org/about/news.1249

Memcached-libmemcached-0.4401
http://search.cpan.org/~timb/Memcached-libmemcached-0.4401/

Ubuntu Security Notice : [USN-1008-1] libvirt file disclosure vulnerabilities
http://www.criticalwatch.com/support/security-advisories.aspx?AID=34004

Ubuntu Security Notice : [USN-1008-2] virtinst file disclosure vulnerabilities
http://www.criticalwatch.com/support/security-advisories.aspx?AID=34005

Hewlett-Packard : HP Systems Insight Manager CSFR, XSS, Privilege-escalation
http://www.criticalwatch.com/support/security-advisories.aspx?AID=34007

Hewlett-Packard : HP AssetCenter and HP AssetManager Cross-site scripting
http://www.criticalwatch.com/support/security-advisories.aspx?AID=34009

Hewlett-Packard : HP Systems Insight Manager (SIM) Code Excution, DoS, Modification
http://www.criticalwatch.com/support/security-advisories.aspx?AID=34012

Google、Street View車両でパスワード情報なども取得したことを認める
http://itpro.nikkeibp.co.jp/article/NEWS/20101025/353333/?ST=security

JVN#50610528 Sleipnir および Grani における DLL 読み込みに関する脆弱性
http://jvn.jp/jp/JVN50610528/index.html

[ MDVSA-2010:209 ] libsmi
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-10/msg00194.html

[SECURITY] [DSA 2122-1] New glibc packages fix local privilege escalation
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-10/msg00195.html

[security bulletin] HPSBMA02593 SSRT100237 rev.1 - HP Virtual Connect Enterprise Manager (VCEM)
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-10/msg00193.html

[USN-1008-2] Virtinst update
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-10/msg00191.html

[USN-1008-1] libvirt vulnerabilities
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-10/msg00192.html

Cyber Security Awarenes Month - Day 24 - Using work computers at home
http://isc.sans.edu/diary.html?storyid=9805

Cyber Security Awarenes Month - Day 23 - The Importance of compliance
http://isc.sans.edu/diary.html?storyid=9802

Cyber Security Awareness Month - Day 22 - Security of removable media
http://isc.sans.edu/diary.html?storyid=9796

Intypedia project
http://isc.sans.edu/diary.html?storyid=9799

Squirrelcart PHP Shopping Cart "prod_rn" SQL Injection Vulnerability
http://secunia.com/advisories/41939/

SAP BusinessObjects Multiple Vulnerabilities
http://secunia.com/advisories/41894/

OpenFabrics Enterprise Distribution (OFED) "openibd" Insecure Temporary File Security Issue
http://secunia.com/advisories/41937/

Odin Secure FTP Export Server Response Buffer Overflow Vulnerability
http://secunia.com/advisories/41863/

Sleipnir Insecure Library and Executable Loading Vulnerabilities
http://secunia.com/advisories/41946/

YokkaSoft Products Insecure Executable Loading Vulnerability
http://secunia.com/advisories/41947/

Grani Insecure Library and Executable Loading Vulnerabilities
http://secunia.com/advisories/41949/

HP Virtual Connect Enterprise Manager Unspecified File Download Vulnerability
http://secunia.com/advisories/41926/

pecio cms "term" Cross-Site Scripting Vulnerability
http://secunia.com/advisories/41934/

Ubuntu update for libvirt
http://secunia.com/advisories/41943/

iWiccle Multiple Cross-Site Scripting Vulnerabilities
http://secunia.com/advisories/41936/

Internet Explorer "window.onerror" Information Disclosure Vulnerability
http://secunia.com/advisories/41944/

Sawmill Cross-Site Request Forgery Vulnerability
http://secunia.com/advisories/41948/

Sawmill Multiple Vulnerabilities
http://secunia.com/advisories/41931/

Adobe Shockwave Player Director File "rcsL" Chunk Parsing Vulnerability
http://secunia.com/advisories/41932/

Ubuntu update for libvirt and virtinst
http://secunia.com/advisories/41942/

Red Hat update for pidgin
http://secunia.com/advisories/41899/

Vulnerability Note VU#402231: Adobe Shockwave Player Director file "rcsL" chunk parsing vulnerability
http://www.kb.cert.org/vuls/id/402231

HP Virtual Connect Enterprise Manager Discloses Files to Remote Users
http://securitytracker.com/alerts/2010/Oct/1024631.html

Microsoft Internet Explorer 'window.onerror' Callback Lets Remote Users Obtain Information From Other Domains
http://securitytracker.com/alerts/2010/Oct/1024630.html

Sawmill Enterprise Multiple Bugs Let Remote Users Read/Write Files, Execute Commands, Reset Passwords, and Conduct Cross-Site Scripting and Request Forgery Attacks
http://securitytracker.com/alerts/2010/Oct/1024629.html

NetBSD Larn Game Privilege Handling Error Lets Local Users Gain Elevated Privileges
http://securitytracker.com/alerts/2010/Oct/1024627.html

Microsoft Windows Task Scheduler Privilege Escalation Vulnerability
http://www.vupen.com/english/advisories/2010/2761

HP Operations Orchestration Cross Site Scripting Vulnerability
http://www.vupen.com/english/advisories/2010/2760

HP Virtual Connect Enterprise Manager Remote File Download Vulnerability
http://www.vupen.com/english/advisories/2010/2759

Microsoft Internet Explorer "window.onerror" Cross-Domain Disclosure
http://www.vupen.com/english/advisories/2010/2758

NetBSD Security Update Fixes "netsmb" Denial of Service Vulnerability
http://www.vupen.com/english/advisories/2010/2757

NetBSD Security Update Fixes Larn Privilege Escalation Vulnerabilities
http://www.vupen.com/english/advisories/2010/2756

Redhat Security Update Fixes Pidgin Denial of Service Vulnerabilities
http://www.vupen.com/english/advisories/2010/2755

Mandriva Security Update Fixes Pidgin Denial of Service Vulnerabilities
http://www.vupen.com/english/advisories/2010/2754

Pidgin Libpurple "purple_base64_decode()" Denial of Service Issues
http://www.vupen.com/english/advisories/2010/2753

GNU C library dynamic linker LD_AUDIT arbitrary DSO load Vulnerability
http://www.exploit-db.com/exploits/15304/

Mozilla Firefox and SeaMonkey Gopher Parser Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/44253

Mozilla Firefox SeaMonkey and Thunderbird 'LookupGetterOrSetter' Memory Corruption Vulnerability
http://www.securityfocus.com/bid/44249

Mozilla Firefox SeaMonkey Thunderbird Modal Calls Cross Domain Information Disclosure Vulnerability
http://www.securityfocus.com/bid/44252

Mozilla Firefox SeaMonkey and Thunderbird 'document.write' Memory Corruption Vulnerability
http://www.securityfocus.com/bid/44247

Mozilla Firefox and Thunderbird CVE-2010-3175 Multiple Memory-Corruption Vulnerabilities
http://www.securityfocus.com/bid/44245

Mozilla Firefox SeaMonkey and Thunderbird 'nsBarProp' Use-After-Free Memory Corruption Vulnerability
http://www.securityfocus.com/bid/44248

Mozilla Firefox SeaMonkey and Thunderbird 'LD_LIBRARY_PATH' Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/44251

Multiple Browser Wild Card Certificate Spoofing Vulnerability
http://www.securityfocus.com/bid/42817

Mozilla Firefox SeaMonkey and Thunderbird CVE-2010-3174 Memory-Corruption Vulnerability
http://www.securityfocus.com/bid/44246

Mozilla Firefox SeaMonkey and Thunderbird CVE-2010-3176 Multiple Memory-Corruption Vulnerabilities
http://www.securityfocus.com/bid/44243

Mozilla Firefox SeaMonkey and Thunderbird DLL Loading Arbitrary Code Execution Vulnerability
http://www.securityfocus.com/bid/44250

GNU glibc Dynamic Linker '$ORIGIN' Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/44154

RoarAudio 'LD_LIBRARY_PATH' Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/44339

OCS Inventory NG Agent 'Backend.pm' Perl Module Handling Code Execution Vulnerability
http://www.securityfocus.com/bid/35593

libsmi 'smiGetNode()' Long OID Remote Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/44276

InterSystems Cache 'UtilConfigHome.csp' Remote Stack Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/37177

Microsoft Internet Explorer Uninitialized Memory Word Document Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/43706

Discuz! '2fly_gift.php' SQL Injection Vulnerability
http://www.securityfocus.com/bid/36044

RETIRED: 2FLY Gift Delivery System 'gameid' Parameter SQL Injection Vulnerability
http://www.securityfocus.com/bid/44312

libvirt Multiple Local Security Bypass Vulnerabilities
http://www.securityfocus.com/bid/41981

w-Agora 'search.php' Local File Include and Cross Site Scripting Vulnerabilities
http://www.securityfocus.com/bid/44370

Linux Kernel Heap Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/44354

VIT Software Spider Player '.m3u' File Remote Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/44352

GNU glibc Dynamic Linker 'LD_AUDIT' Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/44347

IBM WebSphere MQ Subject Distinguished Name (DN) X.509 Certificate Spoofing Vulnerability
http://www.securityfocus.com/bid/44342

Oracle Mojarra Encrypted View State Oracle Padding Security Vulnerability
http://www.securityfocus.com/bid/44337

OpenFabrics Enterprise Distribution 'openibd' Insecure Temporary File Creation Vulnerability
http://www.securityfocus.com/bid/44332

HP Operations Orchestration CVE-2010-3985 Unspecified Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/44331

Sleipnir Binary Loading Arbitrary Code Execution Vulnerability
http://www.securityfocus.com/bid/44328

YokkaSoft Multiple Products Executable Loading Arbitrary Code Execution Vulnerability
http://www.securityfocus.com/bid/44327
0 件のコメント:
ラベル:

2010年10月22日金曜日

22日 金曜日、大安

ウイルスバスター 月額版 サーバメンテナンスのお知らせ（2010年11月1日）
http://www.trendmicro.co.jp/support/news.asp?id=1484

プレス発表
「Sleipnir」および「Grani」におけるセキュリティ上の弱点（脆弱性）の注意喚起
http://www.ipa.go.jp/about/press/20101022.html

JVNVU#707943 Windows プログラムの DLL 読み込みに脆弱性
http://jvn.jp/cert/JVNVU707943/index.html

JVN#07497935 複数の Yokka 提供製品における実行ファイル読み込みに関する脆弱性
http://jvn.jp/jp/JVN07497935/index.html

JVN#89272705 Sleipnir および Grani における実行ファイル読み込みに関する脆弱性
http://jvn.jp/jp/JVN89272705/index.html

JVN#50610528 Sleipnir および Grani における DLL 読み込みに関する脆弱性
http://jvn.jp/jp/JVN50610528/index.html

JVNDB-2009-002263 Xpdf および Poppler の ImageStream::ImageStream 関数における整数オーバーフローの脆弱性
http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002263.html

JVNDB-2010-002169 複数の Microsoft 製品の toStaticHTML 関数 および SafeHTML 関数におけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002169.html

JVNDB-2010-002168 Microsoft Internet Explorer の toStaticHTML 関数におけるクロスサイトスクリプティングの脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002168.html

JVNDB-2010-002167 Windows 上で稼働する Microsoft Internet Explorer における重要なフォーム情報を取得される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002167.html

JVNDB-2010-000049 複数の Yokka 提供製品における実行ファイル読み込みに関する脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000049.html

JVNDB-2010-000048 Sleipnir および Grani における実行ファイル読み込みに関する脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000048.html

JVNDB-2010-000047 Sleipnir および Grani における DLL 読み込みに関する脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000047.html

NetBSD netsmb Filesystem Buffer Limit Error Lets Local Users Consume Excessive Memory
http://securitytracker.com/alerts/2010/Oct/1024628.html

Apple FaceTime for Mac Lets Local Users Modify iTunes/MobileMe Passwords
http://securitytracker.com/alerts/2010/Oct/1024626.html

libvirt Multiple Local Security Bypass Vulnerabilities
http://www.securityfocus.com/bid/41981




+ Dovecot 2.0.6 released
http://www.dovecot.org/list/dovecot-news/2010-October/000179.html

+ MySQL 5.1.52 released
http://dev.mysql.com/doc/refman/5.1/en/news-5-1-52.html

+- Xpdf 3.02pl5 was released
http://www.foolabs.com/xpdf/README
http://www.foolabs.com/xpdf/CHANGES

APSA10-04: Security Advisory for Adobe Shockwave Player
http://www.adobe.com/support/security/advisories/apsa10-04.html

CESA-2010:0787 (glibc)
http://lwn.net/Alerts/411095/

CESA-2010:0780 (thunderbird)
http://lwn.net/Alerts/411090/

CESA-2010:0782 (firefox)
http://lwn.net/Alerts/411092/

CESA-2010:0785 (quagga)
http://lwn.net/Alerts/411094/

HPSBMA02593 SSRT100237 rev.1 - HP Virtual Connect Enterprise Manager (VCEM) for Windows, Remote Arbitrary File Download
http://www13.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02550412

サイベースが、データウェアハウスを低価格で始められる「Sybase IQ SBEキャンペーン」を実施
http://www.sybase.jp/detail?id=1085384

サイベースが、データウェアハウス用DBの最新版「Sybase IQ 15.2」を発表
http://www.sybase.jp/detail?id=1085383

Mandriva : [MDVSA-2010:208] pidgin Denial-of-Service
http://www.criticalwatch.com/support/security-advisories.aspx?AID=33989

Apple : APPLE-SA-2010-10-20-1 Java for Mac OS X 10.6 Update 3
http://www.criticalwatch.com/support/security-advisories.aspx?AID=33995

Apple : [APPLE-SA-2010-10-20-2] Java for Mac OS X 10.5 Update 8
http://www.criticalwatch.com/support/security-advisories.aspx?AID=33996

Core Security Technologies : [CORE-2010-0819] LibSMI smiGetNode Buffer Overflow When Long OID Is Given In Numerical Form
http://www.criticalwatch.com/support/security-advisories.aspx?AID=34000

Mandriva : [MDVSA-2010:207] glibc
http://www.criticalwatch.com/support/security-advisories.aspx?AID=33990

Red Hat : [RHSA-2010:0787-01] Important: glibc security update
http://www.criticalwatch.com/support/security-advisories.aspx?AID=33997

Red Hat : [RHSA-2010:0785-01] Moderate: quagga security update
http://www.criticalwatch.com/support/security-advisories.aspx?AID=33998

Red Hat : [RHSA-2010:0786-01] Critical: java-1.4.2-ibm security update
http://www.criticalwatch.com/support/security-advisories.aspx?AID=33999

RedHat : [RHSA-2010:0786-01] java-1.4.2-ibm security update
http://www.criticalwatch.com/support/security-advisories.aspx?AID=33994

Ubuntu Security Notice : [USN-998-1] Thunderbird vulnerabilities
http://www.criticalwatch.com/support/security-advisories.aspx?AID=33991

Ubuntu Security Notice : [USN-997-1] Firefox and Xulrunner vulnerabilities
http://www.criticalwatch.com/support/security-advisories.aspx?AID=33992

Ubuntu Security Notice : [USN-1007-1] NSS Certificate Authority vulnerabilities
http://www.criticalwatch.com/support/security-advisories.aspx?AID=33993

[SecurityArchitect-009]: Microsoft Windows Mobile Double Free Vulnerability
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-10/msg00178.html

[ MDVSA-2010:208 ] pidgin
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-10/msg00179.html

Micro CMS Persistent XSS Vulnerability.
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-10/msg00183.html

Pecio CMS XSS Vulnerability
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-10/msg00185.html

Wiccle Web Builder CMS and iWiccle CMS Community Builder Multiple XSS Vulnerabilities
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-10/msg00176.html

SEC Consult SA-20101021-0 :: Multiple critical vulnerabilities in Sawmill log analysis softw
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-10/msg00186.html

[security bulletin] HPSBMA02596 SSRT100271 rev.1 - HP AssetCenter and HP AssetManager for AIX, H
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-10/msg00189.html

[security bulletin] HPSBMA02592 SSRT100300 rev.1 - HP Systems Insight Manager (SIM) for HP-U
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-10/msg00175.html

[security bulletin] HPSBMA02591 SSRT100299 rev.1 - HP Systems Insight Manager (SIM) for HP-U
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-10/msg00187.html

Java Multiple Issues
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-10/msg00188.html

[ MDVSA-2010:207 ] glibc
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-10/msg00181.html

[USN-998-1] Thunderbird vulnerabilities
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-10/msg00180.html

[USN-997-1] Firefox and Xulrunner vulnerabilities
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-10/msg00177.html

[USN-1007-1] NSS vulnerabilities
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-10/msg00174.html

「組込みシステムに情報セキュリティを」セミナー開催のお知らせ
～情報セキュリティ面でも安全な製品開発に向けて～
http://www.ipa.go.jp/security/vuln/seminar/lab_semi_embsys_2010_2nd.html

「ブラウザーの警告画面に見せかける」――悪質サイトの新手口
パッチに見せかけて「偽ソフト」を配布、エフセキュアが報告
http://itpro.nikkeibp.co.jp/article/NEWS/20101022/353307/?ST=security

RHSA-2010:0788-1: Moderate: pidgin security update
http://rhn.redhat.com/errata/RHSA-2010-0788.html

NetBSD Denial of Service and Privilege Escalation Vulnerabilities
http://secunia.com/advisories/41892/

RealPage Module Upload ActiveX Control Multiple Vulnerabilities
http://secunia.com/advisories/41392/

Ruby on Rails Nested Attribute Handling Vulnerability
http://secunia.com/advisories/41930/

Fedora update for java-1.6.0-openjdk
http://secunia.com/advisories/41925/

TeraPad Insecure Library Loading Vulnerability
http://secunia.com/advisories/41928/

libsmi "smiGetNode()" Buffer Overflow Vulnerability
http://secunia.com/advisories/41841/

Apsaly Insecure Executable Loading Vulnerability
http://secunia.com/advisories/41927/

Mono ASP.NET Cryptographic Padding Oracle Information Disclosure
http://secunia.com/advisories/41919/

libguestfs Qemu Disk Format Specifier Weakness
http://secunia.com/advisories/41797/

Drupal Ubuntu Drupal Theme - Brown Information Disclosure Vulnerability
http://secunia.com/advisories/41916/

Pidgin Multiple NULL Pointer Dereference Weaknesses
http://secunia.com/advisories/41893/

Red Hat update for quagga
http://secunia.com/advisories/41904/

Ubuntu update for thunderbird
http://secunia.com/advisories/41721/

Red Hat update for glibc
http://secunia.com/advisories/41895/

Ubuntu update for firefox and xulrunner
http://secunia.com/advisories/41759/

Red Hat update for java-1.4.2-ibm
http://secunia.com/advisories/41898/

Apple Mac OS X update for Java
http://secunia.com/advisories/41905/

Ubuntu update for nss
http://secunia.com/advisories/41839/

Fedora update for tuxguitar
http://secunia.com/advisories/41924/

Ruby on Rails Nested Attributes Processing Error Lets Remote Users Modify Arbitrary Records
http://securitytracker.com/alerts/2010/Oct/1024624.html

Pidgin purple_base64_decode() Validation Flaw Lets Remote Users Deny Service
http://securitytracker.com/alerts/2010/Oct/1024623.html

HP System Insight Manager Flaws Let Remote Authenticated Users Gain Elevated Privileges and Remote Users Conduct Cross-Site Scripting and Cross-Site Request Forgery Attacks
http://securitytracker.com/alerts/2010/Oct/1024622.html

GNU C Library $ORIGIN Expansion in Setuid Programs May Let Local Users Gain Elevated Privileges
http://securitytracker.com/alerts/2010/Oct/1024619.html

Adobe Shockwave Player rcsL Chunk Memory Corruption Vulnerability
http://www.vupen.com/english/advisories/2010/2752

Mono ASP.NET Implementation Padding Oracle Information Disclosure
http://www.vupen.com/english/advisories/2010/2751

Linux Kernel RDS Protocol "rds_page_copy_user()" Privilege Escalation
http://www.vupen.com/english/advisories/2010/2750

Apache httpd Security Update Fixes Denial of Service Vulnerabilities
http://www.vupen.com/english/advisories/2010/2749

Apple Mac OS X Security Update Fixes Java Code Execution Vulnerabilities
http://www.vupen.com/english/advisories/2010/2748

TIBCO ActiveMatrix Products JMX Connections Remote Code Execution
http://www.vupen.com/english/advisories/2010/2747

Redhat Security Update Fixes Glibc ORIGIN Expansion Vulnerability
http://www.vupen.com/english/advisories/2010/2746

Redhat Security Update Fixes Java Code Execution Vulnerabilities
http://www.vupen.com/english/advisories/2010/2745

Redhat Security Update Fixes Quagga Buffer Overflow and DoS Issues
http://www.vupen.com/english/advisories/2010/2744

Fedora Security Update Fixes Java Code Execution Vulnerabilities
http://www.vupen.com/english/advisories/2010/2743

Fedora Security Update Fixes TuxGuitar Library Loading Vulnerability
http://www.vupen.com/english/advisories/2010/2742

Ubuntu Security Update Fixes Thunderbird Code Execution Vulnerabilities
http://www.vupen.com/english/advisories/2010/2741

Ubuntu Security Update Fixes Firefox and Xulrunner Vulnerabilities
http://www.vupen.com/english/advisories/2010/2740

Ubuntu Security Update Fixes NSS Security Bypass Vulnerabilities
http://www.vupen.com/english/advisories/2010/2739

Mandriva Security Update Fixes Glibc ORIGIN Expansion Vulnerability
http://www.vupen.com/english/advisories/2010/2738

Sawmill Enterprise : v8.1.7.3 Multiple Vulnerabilities
http://www.exploit-db.com/exploits/15298/

Adobe Shockwave player rcsL chunk memory corruption 0day
http://www.exploit-db.com/exploits/15296/

Altova DatabaseSpy 2011 Project File Handling Buffer Overflow Vulnerability
http://www.exploit-db.com/exploits/15301/

Windows Mobile 6.1 and 6.5 Double Free Denial of Service
http://www.exploit-db.com/exploits/15297/

FreeType Compact Font Format (CFF) Multiple Stack Based Buffer Overflow Vulnerabilities
http://www.securityfocus.com/bid/42241

ISC BIND 9 Remote Dynamic Update Message Denial of Service Vulnerability
http://www.securityfocus.com/bid/35848

Adobe Shockwave Player rcsL Chunk EAX Register Memory Corruption Vulnerability
http://www.securityfocus.com/bid/44291

Multiple Vendor TLS Protocol Session Renegotiation Security Vulnerability
http://www.securityfocus.com/bid/36935

Libpurple MSN Protocol Custom Emoticons Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/40138

Pidgin 'libpurple' Multiple Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/44283

Sun Java Runtime Environment Unpack200 JAR Unpacking Utility Integer Overflow Vulnerability
http://www.securityfocus.com/bid/35944

libguestfs Disk Format Specifier Information Disclosure Vulnerability
http://www.securityfocus.com/bid/44166

Oracle Java SE and Java for Business CVE-2010-3573 Same Origin Bypass Vulnerability
http://www.securityfocus.com/bid/44028

Oracle Java SE and Java for Business CVE-2010-3553 Remote Swing Vulnerability
http://www.securityfocus.com/bid/44035

Oracle Java SE and Java for Business CVE-2010-3541 Remote Networking Vulnerability
http://www.securityfocus.com/bid/44032

Oracle Java SE and Java for Business CVE-2010-3549 HTTP Response Splitting Vulnerability
http://www.securityfocus.com/bid/44027

Oracle Java SE and Java for Business 'defaultReadObject' Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/44016

Oracle Java SE and Java for Business CVE-2010-3548 Remote JNDI Vulnerability
http://www.securityfocus.com/bid/44017

Oracle Java SE and Java for Business CVE-2010-3557 Remote Swing Vulnerability
http://www.securityfocus.com/bid/44014

Oracle Java SE and Java for Business CVE-2010-3574 Remote Networking Vulnerability
http://www.securityfocus.com/bid/44011

Oracle Java SE and Java for Business CVE-2010-3561 Remote CORBA Vulnerability
http://www.securityfocus.com/bid/44013

Oracle Java SE and Java for Business CVE-2010-3554 Remote CORBA Vulnerability
http://www.securityfocus.com/bid/43994

Oracle Java SE and Java for Business CVE-2010-3551 Remote Networking Vulnerability
http://www.securityfocus.com/bid/44009

Oracle Java SE and Java for Business CVE-2010-3568 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/44012

Oracle Java SE and Java for Business CVE-2010-3562 Remote 2D Vulnerability
http://www.securityfocus.com/bid/43979

Oracle Java SE and Java for Business CVE-2010-3565 JPEGImageWriter.writeImage Vulnerability
http://www.securityfocus.com/bid/43985

Oracle Java SE and Java for Business CVE-2010-3567 Remote 2D Vulnerability
http://www.securityfocus.com/bid/43992

Oracle Communications Messaging Server CVE-2010-3564 Webmail Remote Vulnerability
http://www.securityfocus.com/bid/43963

GNU glibc Dynamic Linker '$ORIGIN' Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/44154

TuxGuitar 'LD_LIBRARY_PATH' Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/44197

Fat Player '.wav' File Remote Stack Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/42068

pecio cms 'target' Parameter Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/44304

Micro CMS 'name' Parameter HTML Injection Vulnerability
http://www.securityfocus.com/bid/44300

Multiple Wiccle CMS Applications Multiple Cross Site Scripting Vulnerabilities
http://www.securityfocus.com/bid/44295

NetBSD Larn 'Games' Group Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/44293

Sawmill Multiple Security Vulnerabilities
http://www.securityfocus.com/bid/44292

NetBSD 'SMBIOC_OPENSESSION' IOCTL Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/44288

Microsoft Windows Mobile Overly Long vCard Name Field Denial of Service Vulnerability
http://www.securityfocus.com/bid/44287

TeraPad 'atoklib.dll' DLL Loading Arbitrary Code Execution Vulnerability
http://www.securityfocus.com/bid/44286

Mono ASP.NET Implementation Padding Oracle Information Disclosure Vulnerability
http://www.securityfocus.com/bid/44285

Apsaly Executable Loading Arbitrary Code Execution Vulnerability
http://www.securityfocus.com/bid/44284
0 件のコメント:
ラベル:

2010年10月21日木曜日

21日 木曜日、仏滅

+ MySQL 5.1.52 released
http://dev.mysql.com/doc/refman/5.1/en/news-5-1-52.html

HPSBMA02588 SSRT100001 rev.1 - HP Operations Orchestration, Remote Cross Site Scripting (XSS)
http://www11.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02541822

プレス発表
「TeraPad」におけるセキュリティ上の弱点（脆弱性）の注意喚起
http://www.ipa.go.jp/about/press/20101021_2.html

ソフトウェア等の脆弱性関連情報に関する届出状況
[2010年第3四半期（7月～9月）]
http://www.ipa.go.jp/security/vuln/report/vuln2010q3.html

JVN#48097065 TeraPad における DLL 読み込みに関する脆弱性
http://jvn.jp/jp/JVN48097065/index.html

JVNTA10-287A Oracle 製品における複数の脆弱性に対するアップデート
http://jvn.jp/cert/JVNTA10-287A/index.html

JVNVU#490671 Java for MacOS における複数の脆弱性に対するアップデート
http://jvn.jp/cert/JVNVU490671/index.html

JVNVU#707943 Windows プログラムの DLL 読み込みに脆弱性
http://jvn.jp/cert/JVNVU707943/index.html

JVN#71138390 Apsaly における実行ファイル読み込みに関する脆弱性
http://jvn.jp/jp/JVN71138390/index.html

JVNDB-2009-002319 SSL および TLS プロトコルに脆弱性
http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002319.html

JVNDB-2010-002166 Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat におけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002166.html

JVNDB-2010-002165 Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002165.html

JVNDB-2010-002164 Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat におけるサービス運用妨害 (DoS) の脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002164.html

JVNDB-2010-002163 Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002163.html

JVNDB-2010-002162 Apple Mac OS X 上で稼働する Adobe Reader および Acrobat における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002162.html

JVNDB-2010-002161 Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002161.html

JVNDB-2010-002160 Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002160.html

JVNDB-2010-002159 Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002159.html

JVNDB-2010-002158 Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002158.html

JVNDB-2010-002157 Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002157.html

JVNDB-2010-002156 Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat における任意のコードを実行される脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002156.html

JVNDB-2010-000046 Apsaly における実行ファイル読み込みに関する脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000046.html

JVNDB-2010-000045 TeraPad における DLL 読み込みに関する脆弱性
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000045.html

Cyber Security Awareness Month - Day 21 - Impossible Requests from the Boss
http://isc.sans.edu/diary.html?storyid=9793

HP Systems Insight Manager Flaws Let Remote Users Modify Data, Deny Service, or Execute Arbitrary Code on the Target System
http://securitytracker.com/alerts/2010/Oct/1024621.html

Google Chrome Multiple Flaws Let Remote Users Execute Arbitrary Code
http://securitytracker.com/alerts/2010/Oct/1024618.html






+ Linux kernel 2.6.36 released
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36
http://www.linux.org/news/2010/10/20/0001.html

+ RHSA-2010:0787-1: Important: glibc security update
http://rhn.redhat.com/errata/RHSA-2010-0787.html

+ Linux Kernel ALSA 'sound/core/control.c' Local Integer Overflow Vulnerability
http://www.securityfocus.com/bid/43787

+ Linux kernel 2.6.36 ChangeLog
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36

- Linux Kernel 'SIOCGIWSSID' IOCTL Local Information Disclosure Vulnerability
http://www.securityfocus.com/bid/42885

? Linux Kernel 'tty_fasync()' Race Condition Null Pointer Dereference Vulnerability
http://www.securityfocus.com/bid/40867

About the security content of Java for Mac OS X 10.5 Update 8
http://support.apple.com/kb/HT4418

About the security content of Java for Mac OS X 10.6 Update 3
http://support.apple.com/kb/HT4417

MFSA 2010-72 安全でないデフィー・ヘルマン鍵共有
http://www.mozilla-japan.org/security/announce/2010/mfsa2010-72.html

MFSA 2010-71 安全でないライブラリの読み込みに関する問題
http://www.mozilla-japan.org/security/announce/2010/mfsa2010-71.html

MFSA 2010-70 SSL ワイルドカード証明書が IP アドレスに一致してしまう
http://www.mozilla-japan.org/security/announce/2010/mfsa2010-70.html

MFSA 2010-69 モーダルな呼び出しを通じたクロスサイト情報漏えい
http://www.mozilla-japan.org/security/announce/2010/mfsa2010-69.html

MFSA 2010-68 Gopher パーサによる href 属性のパースから生じる XSS
http://www.mozilla-japan.org/security/announce/2010/mfsa2010-68.html

MFSA 2010-67 LookupGetterOrSetter におけるダングリングポインタ脆弱性
http://www.mozilla-japan.org/security/announce/2010/mfsa2010-67.html

MFSA 2010-66 nsBarProp における解放後使用の問題
http://www.mozilla-japan.org/security/announce/2010/mfsa2010-66.html

MFSA 2010-65 document.write を用いたバッファオーバーフローとメモリ破壊
http://www.mozilla-japan.org/security/announce/2010/mfsa2010-65.html

MFSA 2010-64 様々なメモリ安全性の問題 (rv:1.9.2.11/ 1.9.1.14)
http://www.mozilla-japan.org/security/announce/2010/mfsa2010-64.html

Sunset Plan Announcement For Thunderbird 3.0.x
https://developer.mozilla.org/devnews/index.php/2010/10/19/sunset-plan-announcement-for-thunderbird-3-0-x/

Thunderbird 3.1.5 and 3.0.9 Updates Are Now Available
https://developer.mozilla.org/devnews/index.php/2010/10/19/thunderbird-3-1-5-and-3-0-9-updates-are-now-available/

Linux Kernel release: 2.6.36
http://www.linux.org/news/2010/10/20/0001.html

RHSA-2010:0785-1: Moderate: quagga security update
http://rhn.redhat.com/errata/RHSA-2010-0785.html

Apache Project : Apache HTTP Server 2.2.17 and 2.0.64 Released
http://www.criticalwatch.com/support/security-advisories.aspx?AID=33979

Debian : [DSA 2121-1] New TYPO3 packages fix several vulnerabilities
http://www.criticalwatch.com/support/security-advisories.aspx?AID=33980

High-Tech Bridge SA : sNews - XSS vulnerability
http://www.criticalwatch.com/support/security-advisories.aspx?AID=33988

Red Hat : [RHSA-2010:0779-01] Moderate: kernel security and bug fix update
http://www.criticalwatch.com/support/security-advisories.aspx?AID=33981

Red Hat : [RHSA-2010:0780-01] Moderate: thunderbird security update
http://www.criticalwatch.com/support/security-advisories.aspx?AID=33982

Red Hat : [RHSA-2010:0781-01] Critical: seamonkey security update
http://www.criticalwatch.com/support/security-advisories.aspx?AID=33983

Red Hat : [RHSA-2010:0782-01] Critical: firefox security update
http://www.criticalwatch.com/support/security-advisories.aspx?AID=33984

Security-Assessment.com : Oracle JRE - java.net.URLConnection class - Same-of-Origin (SOP) Policy Bypass
http://www.criticalwatch.com/support/security-advisories.aspx?AID=33985

Ubuntu Security Notice : [USN-1000-1] Linux kernel vulnerabilities
http://www.criticalwatch.com/support/security-advisories.aspx?AID=33976

Ubuntu Security Notice : [USN-1005-1] poppler vulnerabilities
http://www.criticalwatch.com/support/security-advisories.aspx?AID=33977

Ubuntu Security Notice : [USN-1006-1] WebKit vulnerabilities
http://www.criticalwatch.com/support/security-advisories.aspx?AID=33978

VSR : VSR Advisories: Linux RDS Protocol Local Privilege Escalation
http://www.criticalwatch.com/support/security-advisories.aspx?AID=33987

マカフィー、暗号化USBメモリーにWindows 7対応の新版
http://itpro.nikkeibp.co.jp/article/NEWS/20101021/353240/?ST=security

[CORE-2010-0819] LibSMI smiGetNode Buffer Overflow When Long OID Is Given In Numerical Form
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-10/msg00170.html

XSS vulnerability in sNews
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-10/msg00167.html

XSS vulnerability in sNews
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-10/msg00166.html

SQL Injection in 4site CMS
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-10/msg00165.html

Path disclosure in Tribiq CMS
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-10/msg00164.html

SQL injection in DeluxeBB
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-10/msg00163.html

[SECURITY] [DSA 2121-1] New TYPO3 packages fix several vulnerabilities
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2010-10/msg00162.html

Cyber Security Awareness Month - Day 20 - Securing Mobile Devices
http://isc.sans.edu/diary.html?storyid=9787

Tools updates - Oct 2010
http://isc.sans.edu/diary.html?storyid=9790

TIBCO ActiveMatrix Products JMX Connections Code Execution Vulnerability
http://secunia.com/advisories/41891/

HP AssetCenter / AssetManager Cross-Site Scripting Vulnerability
http://secunia.com/advisories/41901/

HP Systems Insight Manager Multiple Vulnerabilities
http://secunia.com/advisories/41908/

FishEye Multiple Cross-Site Scripting Vulnerabilities
http://secunia.com/advisories/41897/

DeluxeBB "xthedateformat" SQL Injection Vulnerability
http://secunia.com/advisories/41918/

Explzh Insecure Executable Loading Vulnerability
http://secunia.com/advisories/41921/

Red Hat update for thunderbird
http://secunia.com/advisories/41906/

Ubuntu update for kernel
http://secunia.com/advisories/41881/

Red Hat update for seamonkey
http://secunia.com/advisories/41911/

sNews Cross-Site Request Forgery Vulnerability
http://secunia.com/advisories/41817/

Red Hat update for firefox
http://secunia.com/advisories/41912/

Netgear CG3000/CG3100 Cable Gateway Security Bypass and Denial of Service
http://secunia.com/advisories/41804/

Archive Decoder Insecure Executable Loading Vulnerability
http://secunia.com/advisories/41920/

Mozilla Thunderbird Multiple Vulnerabilities
http://secunia.com/advisories/41890/

Mozilla SeaMonkey Multiple Vulnerabilities
http://secunia.com/advisories/41923/

Innominate mGuard Privilege Escalation Vulnerability
http://secunia.com/advisories/41900/

phpCheckZ "id" SQL Injection Vulnerability
http://secunia.com/advisories/41825/

PhreeBooks Multiple Vulnerabilities
http://secunia.com/advisories/40911/

MASS Music Player Insecure Library Loading Vulnerability
http://secunia.com/advisories/41922/

Google Chrome Multiple Vulnerabilities
http://secunia.com/advisories/41888/

Ubuntu update for webkit
http://secunia.com/advisories/41856/

Debian update for typo3-src
http://secunia.com/advisories/41840/

Linux RDS Protocol Local Privilege Escalation
http://securityreason.com/securityalert/7845

Flash Player 9 DLL Hijacking Exploit (schannel.dll)
http://securityreason.com/securityalert/7844

Mac OS X Java Command Injection Flaw in updateSharingD Lets Local Users Gain Elevated Privileges
http://securitytracker.com/alerts/2010/Oct/1024617.html

Mac OS X Java Applet Tag Processing Flaw Lets Remote Users Execute Arbitrary Code
http://securitytracker.com/alerts/2010/Oct/1024616.html

HP AssetManager and HP AssetCenter Input Validation Hole Permits Cross-Site Scripting Attacks
http://securitytracker.com/alerts/2010/Oct/1024615.html

Linux Kernel RDS Protocol Bug Lets Local Users Gain Elevated Privileges
http://securitytracker.com/alerts/2010/Oct/1024613.html

Metasploit Framework 3.5.0 Released
http://www.metasploit.com/redmine/projects/framework/wiki/Release_Notes_35

HP AssetCenter and HP AssetManager Cross Site Scripting Vulnerability
http://www.vupen.com/english/advisories/2010/2737

HP Systems Insight Manager Code Execution and Information Disclosure
http://www.vupen.com/english/advisories/2010/2736

IBM Informix Dynamic Server DBINFO Buffer Overflow Vulnerability
http://www.vupen.com/english/advisories/2010/2735

IBM Informix Dynamic Server "oninit.exe" Buffer Overflow Vulnerability
http://www.vupen.com/english/advisories/2010/2734

IBM Informix Dynamic Server "librpc.dll" Integer Overflow Vulnerability
http://www.vupen.com/english/advisories/2010/2733

IBM Rational Quality Manager and Test Lab Manager Default Account
http://www.vupen.com/english/advisories/2010/2732

Google Chrome Memory Corruption and Security Bypass Vulnerabilities
http://www.vupen.com/english/advisories/2010/2731

Redhat Security Update Fixes Firefox Code Execution Vulnerabilities
http://www.vupen.com/english/advisories/2010/2730

Redhat Security Update Fixes SeaMonkey Code Execution Vulnerabilities
http://www.vupen.com/english/advisories/2010/2729

Redhat Security Update Fixes Thunderbird Code Execution Vulnerabilities
http://www.vupen.com/english/advisories/2010/2728

Redhat Security Update Fixes Kernel Local Information Disclosure Issues
http://www.vupen.com/english/advisories/2010/2727

Mozilla Products Code Execution and Information Disclosure Vulnerabilities
http://www.vupen.com/english/advisories/2010/2726

Fedora Security Update Fixes Glibc ORIGIN Expansion Vulnerability
http://www.vupen.com/english/advisories/2010/2725

Fedora Security Update Fixes TuxGuitar Library Loading Vulnerability
http://www.vupen.com/english/advisories/2010/2724

Ubuntu Security Update Fixes Multiple Kernel Vulnerabilities
http://www.vupen.com/english/advisories/2010/2723

Ubuntu Security Update Fixes WebKit Multiple Vulnerabilities
http://www.vupen.com/english/advisories/2010/2722

Ubuntu Security Update Fixes Poppler Code Execution Vulnerabilities
http://www.vupen.com/english/advisories/2010/2721

Debian Security Update Fixes TYPO3 Multiple Vulnerabilities
http://www.vupen.com/english/advisories/2010/2720

MS10-070 ASP.NET Auto-Decryptor File Download Exploit
http://www.exploit-db.com/exploits/15292/

Oracle JRE - java.net.URLConnection class ? Same-of-Origin (SOP) Policy Bypass
http://www.exploit-db.com/exploits/15288/

LibSMI smiGetNode Buffer Overflow When Long OID Is Given In Numerical Form
http://www.exploit-db.com/exploits/15293/

GNU glibc Dynamic Linker '$ORIGIN' Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/44154

Mozilla Firefox SeaMonkey and Thunderbird 'LD_LIBRARY_PATH' Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/44251

Mozilla Firefox and Thunderbird CVE-2010-3175 Multiple Memory-Corruption Vulnerabilities
http://www.securityfocus.com/bid/44245

Mozilla Firefox SeaMonkey and Thunderbird 'LookupGetterOrSetter' Memory Corruption Vulnerability
http://www.securityfocus.com/bid/44249

Mozilla Firefox SeaMonkey and Thunderbird 'nsBarProp' Use-After-Free Memory Corruption Vulnerability
http://www.securityfocus.com/bid/44248

Mozilla Firefox SeaMonkey Thunderbird Modal Calls Cross Domain Information Disclosure Vulnerability
http://www.securityfocus.com/bid/44252

Mozilla Firefox SeaMonkey and Thunderbird CVE-2010-3176 Multiple Memory-Corruption Vulnerabilities
http://www.securityfocus.com/bid/44243

Mozilla Firefox SeaMonkey and Thunderbird 'document.write' Memory Corruption Vulnerability
http://www.securityfocus.com/bid/44247

Mozilla Firefox and SeaMonkey Gopher Parser Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/44253

Multiple Browser Wild Card Certificate Spoofing Vulnerability
http://www.securityfocus.com/bid/42817

Oracle Java SE and Java for Business CVE-2010-3573 Same Origin Bypass Vulnerability
http://www.securityfocus.com/bid/44028

Multiple Vendor TLS Protocol Session Renegotiation Security Vulnerability
http://www.securityfocus.com/bid/36935

MIT Kerberos GSS-API Checksum NULL Pointer Dereference Denial Of Service Vulnerability
http://www.securityfocus.com/bid/40235

Oracle Java SE and Java for Business CVE-2010-3568 Remote Java Runtime Environment Vulnerability
http://www.securityfocus.com/bid/44012

Oracle Java SE and Java for Business CVE-2010-3562 Remote 2D Vulnerability
http://www.securityfocus.com/bid/43979

Oracle Java SE and Java for Business CVE-2010-3571 ICC Profile Vulnerability
http://www.securityfocus.com/bid/43965

Oracle Java SE and Java for Business CVE-2010-3572 Remote Sound Vulnerability
http://www.securityfocus.com/bid/44030

Oracle Java SE and Java for Business 'defaultReadObject' Remote Code Execution Vulnerability
http://www.securityfocus.com/bid/44016

Oracle Java SE and Java for Business CVE-2010-3565 JPEGImageWriter.writeImage Vulnerability
http://www.securityfocus.com/bid/43985

Oracle Java SE and Java for Business CVE-2010-3553 Remote Swing Vulnerability
http://www.securityfocus.com/bid/44035

Oracle Java SE and Java for Business CVE-2010-3551 Remote Networking Vulnerability
http://www.securityfocus.com/bid/44009

Oracle Java SE and Java for Business CVE-2010-3557 Remote Swing Vulnerability
http://www.securityfocus.com/bid/44014

Oracle Java SE and Java for Business CVE-2010-3541 Remote Networking Vulnerability
http://www.securityfocus.com/bid/44032

Oracle Java SE and Java for Business CVE-2010-3548 Remote JNDI Vulnerability
http://www.securityfocus.com/bid/44017

Oracle Java SE and Java for Business CVE-2010-3549 HTTP Response Splitting Vulnerability
http://www.securityfocus.com/bid/44027

Oracle Java SE and Java for Business CVE-2010-3556 Remote 2D Vulnerability
http://www.securityfocus.com/bid/43971

Quagga Routing Suite Multiple Denial Of Service Vulnerabilities
http://www.securityfocus.com/bid/25634

Quagga bgpd Route-Refresh Message Stack Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/42635

Linux Kernel Reliable Datagram Sockets (RDS) Protocol Local Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/44219

Winamp 5.581 and Prior Multiple Buffer Overflow Vulnerabilities
http://www.securityfocus.com/bid/44094

Adobe Flash Player and AIR (CVE-2010-2214) Unspecified Memory Corruption Vulnerability
http://www.securityfocus.com/bid/42358

Adobe Flash Player and AIR (CVE-2010-2215) Unspecified Clickjacking Vulnerability
http://www.securityfocus.com/bid/42361

Adobe Flash Player and AIR (CVE-2010-2216) Unspecified Memory Corruption Vulnerability
http://www.securityfocus.com/bid/42362

Adobe Flash Player and AIR (CVE-2010-2213) Multiple Unspecified Memory Corruption Vulnerabilities
http://www.securityfocus.com/bid/42364

Adobe Flash Player and AIR ActionScript AVM1 ActionPush Memory Corruption Vulnerability
http://www.securityfocus.com/bid/42363

Microsoft .NET Framework ASP.NET Padding Oracle Information Disclosure Vulnerability
http://www.securityfocus.com/bid/43316

4Site CMS Multiple SQL Injection Vulnerabilities
http://www.securityfocus.com/bid/33594

RETIRED: Mozilla Firefox/Thunderbird/SeaMonkey MFSA 2010-64 -72 Multiple Vulnerabilities
http://www.securityfocus.com/bid/44228

Joomla! 'com_jresearch' Component 'controller' Parameter Local File Include Vulnerability
http://www.securityfocus.com/bid/38917

Linux Kernel CVE-2010-2240 Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/42505

Linux Kernel 'sctp_outq_flush()' Denial of Service Vulnerability
http://www.securityfocus.com/bid/43480

Linux Kernel ALSA 'sound/core/control.c' Local Integer Overflow Vulnerability
http://www.securityfocus.com/bid/43787

Linux Kernel 'PKT_CTRL_CMD_STATUS' Invalid Pointer Dereference Denial of Service Vulnerability
http://www.securityfocus.com/bid/43551

Linux Kernel SCTP HMAC Handling Memory Corruption Vulnerability
http://www.securityfocus.com/bid/43701

Linux Kernel Rose Protocol 'srose_ndigis' Heap Memory Corruption Vulnerability
http://www.securityfocus.com/bid/43368

Linux Kernel 'snd_seq_oss_open()' Multiple Local Memory Corruption Vulnerabilities
http://www.securityfocus.com/bid/43062

Linux Kernel 'do_io_submit()' Integer Overflow Vulnerability
http://www.securityfocus.com/bid/43353

Linux Kernel 'drivers/net/niu.c' Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/43098

Linux Kernel 'SIOCGIWSSID' IOCTL Local Information Disclosure Vulnerability
http://www.securityfocus.com/bid/42885

Linux Kernel 'irda_bind()' Null Pointer Dereference Vulnerability
http://www.securityfocus.com/bid/42900

Linux Kernel JFS xattr Namespace Rules Security Bypass Vulnerability
http://www.securityfocus.com/bid/42589

Linux Kernel 'XFS_IOC_FSGETXATTR' Information Disclosure Vulnerability
http://www.securityfocus.com/bid/43022

Linux Kernel 'keyctl_session_to_parent()' Null Pointer Dereference Denial of Service Vulnerability
http://www.securityfocus.com/bid/42932

Linux Kernel XDR Implementation Local Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/42249

Linux Kernel CIFS DNS Lookup Cache Poisoning Vulnerability
http://www.securityfocus.com/bid/41904

Linux Kernel EXT4 Multiple Local Denial of Service Vulnerabilities
http://www.securityfocus.com/bid/42477

Linux Kernel CIFS 'CIFSSMBWrite()' Remote Denial of Service Vulnerability
http://www.securityfocus.com/bid/42242

Linux Kernel 'net/sched/act_police.c' File Memory Leak Local Information Disclosure Vulnerability
http://www.securityfocus.com/bid/42529

Linux Kernel ethtool 'info.rule_cnt' Local Buffer Overflow Vulnerability
http://www.securityfocus.com/bid/41223

Linux Kernel GFS2 Directory Rename NULL Pointer Dereference Local Denial of Service Vulnerability
http://www.securityfocus.com/bid/42124

Linux Kernel CVE-2010-2066 Donor File Security Bypass Vulnerability
http://www.securityfocus.com/bid/41466

Linux Kernel 'pppol2tp_xmit' Null Pointer Deference Denial of Service Vulnerability
http://www.securityfocus.com/bid/41077

Linux Kernel XSF 'SWAPEXT' IOCTL Local Information Disclosure Vulnerability
http://www.securityfocus.com/bid/40920

Linux Kernel 'tty_fasync()' Race Condition Null Pointer Dereference Vulnerability
http://www.securityfocus.com/bid/40867

Ubuntu Drupal Theme - Brown Directory Traversal Vulnerability
http://www.securityfocus.com/bid/44281

Apple Mac OS X Java (CVE-2010-1827) Memory Corruption Vulnerability
http://www.securityfocus.com/bid/44279

Apple Mac OS X Java 'updateSharingD's' Mach RPC Messages Local Command Injection Vulnerability
http://www.securityfocus.com/bid/44277

HP Systems Insight Manager Unspecified Remote Privilege Escalation Vulnerability
http://www.securityfocus.com/bid/44265

Atlassian FishEye Multiple Cross Site Scripting Vulnerabilities
http://www.securityfocus.com/bid/44264

HP Systems Insight Manager CVE-2010-3289 Unspecified Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/44262

HP AssetCenter and AssetManager Unspecified Cross Site Scripting Vulnerability
http://www.securityfocus.com/bid/44261

PhreeBooks Multiple Remote Vulnerabilities
http://www.securityfocus.com/bid/44260

Explzh Executable Loading Arbitrary Code Execution Vulnerability
http://www.securityfocus.com/bid/44257

Archive Decoder 'explorer.exe' Executable Loading Arbitrary Code Execution Vulnerability
http://www.securityfocus.com/bid/44244
0 件のコメント:
ラベル: ,
登録: 投稿 (Atom)