Red Hat Fedora

ソフト名：Red Hat Fedora 14 (Django Software Foundation Django 1.2.7未満の1.2.x/1.3)

回避策：FEDORA-2011-12481にて対応

脆弱性：スプーフィング, データ操作, 機密情報の奪取, DoS攻撃, キャッシュ汚染攻撃, セッション情報の操作, サーバプロセスの浪費, メモリの浪費, リダイレクト脆弱性, HTTPヘッダ処理エラー

ソース：

http://fedoraproject.org/

http://lists.fedoraproject.org/pipermail/package-announce/2011-September/066389.html

http://secunia.com/advisories/45939/

http://secunia.com/advisories/46220/

http://dvw-j.blogspot.com/2011/09/django.html

危険性：Medium Risk

Debian apt, Canonical Ltd. Ubuntu Linux

ソフト名：Debian apt 0.x, Canonical Ltd. Ubuntu Linux 8.04/10.04/10.10

回避策：未対応, USN-1215-1にて対応

脆弱性：セキュリティ制限の回避, スプーフィング, マンインミドル攻撃，

ソース：

http://packages.debian.org/search?searchon=sourcenames&keywords=apt

http://www.ubuntu.com/

http://archives.neohapsis.com/archives/fulldisclosure/2011-09/0256.html

http://www.ubuntu.com/usn/usn-1215-1/

http://secunia.com/advisories/46046/

http://secunia.com/advisories/46149/

危険性：Medium Risk

Google Chrome

ソフト名：Google Chrome 13.x

回避策：14.0.835.163へのアップデートにて対応

脆弱性：セキュリティ制限の回避, スプーフィング, 機密情報の奪取, システムアクセス, 不特定のエラー, 区域外メモリの使用, 解放後使用エラー, オフバイワンエラー, 二重解放エラー

ソース：

http://www.google.co.jp/chrome/intl/ja/landing_ff.html

http://googlechromereleases.blogspot.com/2011/09/stable-channel-update_16.html

http://www.alternativ-testing.fr/blog/index.php?post/2011/Google-Chrome-Webkit-URL-Bar-Spoofing-SSL/TLS-Spoofing

http://secunia.com/advisories/46049/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2834

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2835

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2836

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2837

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2838

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2839

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2840

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2841

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2842

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2843

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2844

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2846

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2847

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2848

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2849

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2850

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2851

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2852

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2853

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2854

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2855

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2856

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2857

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2858

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2859

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2860

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2861

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2862

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2864

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2874

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2875

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3234

CVE：CVE-2011-2834, CVE-2011-2835, CVE-2011-2836, CVE-2011-2837, CVE-2011-2838, CVE-2011-2839, CVE-2011-2840, CVE-2011-2841, CVE-2011-2842, CVE-2011-2843, CVE-2011-2844, CVE-2011-2846, CVE-2011-2847, CVE-2011-2848, CVE-2011-2849, CVE-2011-2850, CVE-2011-2851, CVE-2011-2852, CVE-2011-2853, CVE-2011-2854, CVE-2011-2855, CVE-2011-2856, CVE-2011-2857, CVE-2011-2858, CVE-2011-2859, CVE-2011-2860, CVE-2011-2861, CVE-2011-2862, CVE-2011-2864, CVE-2011-2874, CVE-2011-2875, CVE-2011-3234

危険性：High Risk

Oracle Solaris

ソフト名：Oracle Solaris 11 Express (w3m 0.5.3)

回避策：bug fix 7008664にて対応

脆弱性：スプーフィング

ソース：

http://www.oracle.com/us/products/servers-storage/solaris/solaris-11-express-185123.html

http://blogs.oracle.com/sunsecurity/entry/cve_2010_2074_improper_input

http://secunia.com/advisories/40134/

http://secunia.com/advisories/46077/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2074

CVE：CVE-2010-2074

危険性：Medium Risk

Red Hat Network Satellite Server

ソフト名：Red Hat Network Satellite Server 5.x

回避策：RHSA-2011:1299-1にて対応

脆弱性：XSS, スプーフィング, リダイレクト脆弱性, 不正HTMLの実行, スクリプトコード実行

ソース：

https://rhn.redhat.com/errata/RHSA-2011-1299.html

http://secunia.com/advisories/45010/

http://secunia.com/advisories/46056/

http://dvw-j.blogspot.com/2011/06/red-hat-network-satellite-server-novell.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1594

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2919

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2920

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2927

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3344

CVE：CVE-2011-1594, CVE-2011-2919, CVE-2011-2920, CVE-2011-2927, CVE-2011-3344

危険性：Medium Risk

Red Hat Fedora

ソフト名：Red Hat Fedora 14 (Mozilla Bugzilla 3.4.11以下/3.5.1〜3.6.5/3.7.1〜4.0.1/4.1.1〜4.1.2)

回避策：FEDORA-2011-10413にて対応

脆弱性：機密情報の奪取, スプーフィング, XSS, 不正HTMLの挿入, スクリプト挿入攻撃, メールヘッダインジェクション

ソース：

http://fedoraproject.org/

http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063967.html

http://secunia.com/advisories/45501/

http://secunia.com/advisories/45720/

http://dvw-j.blogspot.com/2011/08/mozilla-bugzilla.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2379

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2380

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2381

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2977

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2978

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2979

CVE：CVE-2011-2379, CVE-2011-2380, CVE-2011-2381, CVE-2011-2977, CVE-2011-2978, CVE-2011-2979

危険性：Medium Risk

Crafty Syntax Live Help

ソフト名：Crafty Syntax Live Help 3.1.2

回避策：未対応

脆弱性：XSS, スプーフィング, リダイレクト脆弱性, 不正HTMLの実行, スクリプトコード実行

ソース：

http://www.craftysyntax.com/

http://secunia.com/advisories/45287/

危険性：Medium Risk

Sitecore CMS

ソフト名：Sitecore CMS 6.4.1 rev. 110720未満

回避策：アップデートにて対応

脆弱性：スプーフィング, リダイレクト脆弱性, 未特定のエラー

ソース：

http://www.sitecore.net/?sc_referrer=http%3a%2f%2fsecunia.com%2fadvisories%2fproduct%2f25514%2f

http://sdn.sitecore.net/Products/Sitecore%20V5/Sitecore%20CMS%206/ReleaseNotes/ChangeLog/Release%20History%20SC64.aspx

http://www.tomneaves.com/Sitecore_CMS_Open_URL_Redirect.txt

http://secunia.com/advisories/45374/

危険性：Medium Risk

Novell openSUSE, SUSE Linux Enterprise Server

ソフト名：Novell openSUSE 11.3/11.4, SUSE Linux Enterprise Server (SLES) 10 (OpenBSD OpenSSL 0.x/1.x)

回避策：openSUSE-SU-2011:0845-1, SUSE-SU-2011:0847-1にて対応

脆弱性：セキュリティ制限の回避, スプーフィング, DoS攻撃, サーバのクラッシュ, 無効なメモリアクセス, 未知の脆弱性, データ操作, TLSプロトコルエラー, マンインミドル攻撃, テキスト挿入, 不正HTTPのリクエスト

ソース：

http://www.opensuse.org/en/

http://www.suse.com/products/server/

http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00013.html

http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00014.html

https://hermes.opensuse.org/messages/10082069

http://secunia.com/advisories/33338/

http://secunia.com/advisories/34411/

http://secunia.com/advisories/37291/

http://secunia.com/advisories/42473/

http://secunia.com/advisories/45409/

http://dvw-j.blogspot.com/2010/12/openssl.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5077

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0590

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0789

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3555

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4180

CVE：CVE-2008-5077, CVE-2009-0590, CVE-2009-0789, CVE-2009-3555, CVE-2010-4180

危険性：Medium Risk

HP SiteScope

ソフト名：HP SiteScope 9.x/10.x/11.x

回避策：HPSBMU02692 SSRT100581にて対応

脆弱性：XSS, スプーフィング, セッション固定攻撃, 不正HTMLの実行, スクリプトコード実行, セッションの乗っ取り

ソース：

http://www8.hp.com/us/en/software/software-product.html?compURI=tcm:245-937086

http://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c02940969

http://secunia.com/advisories/45440/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2400

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2401

CVE：CVE-2011-2400, CVE-2011-2401

危険性：Medium Risk

Free PHP message board

ソフト名：Free PHP message board 1.3

回避策：未対応

脆弱性：スプーフィング, リダイレクト脆弱性

ソース：

http://www.phpjunkyard.com/php-message-board.php

http://www.htbridge.ch/advisory/redirection_vulnerability_in_mboard.html

http://secunia.com/advisories/45372/

危険性：Low Risk

Apple iOS

ソフト名：Apple iOS 4.x for iPhone 3GS and later/iPhone 4 (CDMA)/for iPad/for iPod touch

回避策：4.2.10へのアップデートにて対応

脆弱性：スプーフィング, マンインミドル攻撃

ソース：

http://www.apple.com/ios/

http://www.apple.com/ipad/ios4/

http://www.apple.com/ipodtouch/

http://support.apple.com/kb/HT4824

http://support.apple.com/kb/HT4825

http://secunia.com/advisories/45369/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0228

CVE：CVE-2011-0228

危険性：Medium Risk

Apple Safari

ソフト名：Apple Safari 5.x

回避策：5.0.6/5.1へのアップデートにて対応

脆弱性：セキュリティ制限の回避, XSS, スプーフィング, データ操作, 機密情報の奪取, システムアクセス, 不正HTMLの実行, スクリプトコード実行, リモートコード実行, 整数オーバーフローエラー, バッファオーバーフロー, オフバイワンエラー, 解放後使用エラー, クロスオリジンエラー, メモリ破壊, ファイル操作

ソース：http://www.apple.com/safari/

http://support.apple.com/kb/HT4808

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=930

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=931

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=932

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=933

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=934

http://www.zerodayinitiative.com/advisories/ZDI-11-228/

http://archives.neohapsis.com/archives/bugtraq/2011-07/0034.html

http://archives.neohapsis.com/archives/fulldisclosure/2011-07/0301.html

http://secunia.com/advisories/42312/

http://secunia.com/advisories/43832/

http://secunia.com/advisories/45054/

http://secunia.com/advisories/45325/

http://dvw-j.blogspot.com/2011/03/apple-iphone-os.html

http://dvw-j.blogspot.com/2011/06/apple-mac-os-x.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1383

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1420

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1823

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0164

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0195

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0200

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0201

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0202

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0204

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0206

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0214

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0215

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0216

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0217

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0218

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0219

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0221

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0222

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0223

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0225

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0232

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0233

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0234

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0235

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0237

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0238

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0240

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0241

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0242

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0244

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0253

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0254

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0255

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0981

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0983

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1107

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1109

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1114

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1115

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1117

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1121

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1188

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1190

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1203

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1204

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1288

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1293

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1295

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1296

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1449

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1451

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1453

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1457

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1462

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1774

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1797

CVE：CVE-2010-1383, CVE-2010-1420, CVE-2010-1823, CVE-2011-0164, CVE-2011-0195, CVE-2011-0200, CVE-2011-0201, CVE-2011-0202, CVE-2011-0204, CVE-2011-0206, CVE-2011-0214, CVE-2011-0215, CVE-2011-0216, CVE-2011-0217, CVE-2011-0218, CVE-2011-0219, CVE-2011-0221, CVE-2011-0222, CVE-2011-0223, CVE-2011-0225, CVE-2011-0232, CVE-2011-0233, CVE-2011-0234, CVE-2011-0235, CVE-2011-0237, CVE-2011-0238, CVE-2011-0240, CVE-2011-0241, CVE-2011-0242, CVE-2011-0244, CVE-2011-0253, CVE-2011-0254, CVE-2011-0255, CVE-2011-0981, CVE-2011-0983, CVE-2011-1107, CVE-2011-1109, CVE-2011-1114, CVE-2011-1115, CVE-2011-1117, CVE-2011-1121, CVE-2011-1188, CVE-2011-1190, CVE-2011-1203, CVE-2011-1204, CVE-2011-1288, CVE-2011-1293, CVE-2011-1295, CVE-2011-1296, CVE-2011-1449, CVE-2011-1451, CVE-2011-1453, CVE-2011-1457, CVE-2011-1462, CVE-2011-1774, CVE-2011-1797

危険性：High Risk

Red Hat Desktop, Red Hat Enterprise Linux

ソフト名：Red Hat Desktop 4.x, Red Hat Enterprise Linux AS 4/ES 4/WS 4/5 (Server)/Desktop 5/Desktop Workstation 5/Desktop 6/HPC Node 6/Server 6/Workstation 6 (cURL 7.10.6～7.21.6)

回避策：RHSA-2011:0918-1にて対応

脆弱性：スプーフィング, 認証資格情報の奪取, 不正アクセス

ソース：http://www.redhat.com/rhel/

http://www.redhat.com/rhel/desktop/

http://www.redhat.com/rhel/server/

http://rhn.redhat.com/errata/RHSA-2011-0918.html

http://secunia.com/advisories/45067/

http://secunia.com/advisories/45144/

http://dvw-j.blogspot.com/2011/06/curl.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2192

CVE：CVE-2011-2192

危険性：Low Risk

Red Hat Fedora

ソフト名：Red Hat Fedora 14 (cURL 7.10.6～7.21.6)

回避策：FEDORA-2011-8640にて対応

脆弱性：スプーフィング, 認証資格情報の奪取, 不正アクセス

ソース：http://fedoraproject.org/

http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062287.html

http://secunia.com/advisories/45067/

http://secunia.com/advisories/45181/

http://dvw-j.blogspot.com/2011/06/curl.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2192

CVE：CVE-2011-2192

危険性：Low Risk

Red Hat Fedora

ソフト名：Red Hat Fedora 14 (WeeChat 0.3.4)

回避策：FEDORA-2011-7839にて対応

脆弱性：スプーフィング, マンインミドル攻撃

ソース：http://fedoraproject.org/

http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062293.html

http://secunia.com/advisories/43543/

http://secunia.com/advisories/45180/

http://dvw-j.blogspot.com/2011/03/weechat.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1428

CVE：CVE-2011-1428

危険性：Medium Risk

Debian GNU/Linux

ソフト名：Debian GNU/Linux 5.0/6.0 (cURL 7.10.6～7.21.6)

回避策：DSA-2271-1にて対応

脆弱性：スプーフィング, 認証資格情報の奪取, 不正アクセス

ソース：http://www.debian.org/

http://lists.debian.org/debian-security-announce/2011/msg00143.html

http://secunia.com/advisories/45067/

http://secunia.com/advisories/45088/

http://dvw-j.blogspot.com/2011/06/curl.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2192

CVE：CVE-2011-2192

危険性：Low Risk

Canonical Ltd. Ubuntu Linux

ソフト名：Canonical Ltd. Ubuntu Linux 8.04/10.04/10.10 (cURL 7.x)

回避策：USN-1158-1にて対応

脆弱性：乗っ取り, スプーフィング, DoS攻撃, システムアクセス, マンインミドル攻撃, バッファオーバーフロー, 不正アクセス

ソース：http://www.ubuntu.com/

http://www.ubuntu.com/usn/usn-1158-1/

http://secunia.com/advisories/36238/

http://secunia.com/advisories/38427/

http://secunia.com/advisories/45067/

http://secunia.com/advisories/45047/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2417

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0734

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2192

CVE：CVE-2009-2417, CVE-2010-0734, CVE-2011-2192

危険性：Medium Risk

cURL

ソフト名：cURL 7.10.6〜7.21.6

回避策：7.21.7へのアップデートにて対応

脆弱性：スプーフィング, 認証資格情報の奪取, 不正アクセス

ソース：http://curl.haxx.se/

http://curl.haxx.se/docs/adv_20110623.html

http://secunia.com/advisories/45067/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2192

CVE：CVE-2011-2192

危険性：Low Risk

Debian GNU/Linux

ソフト名：Debian GNU/Linux 5.0 (Kernel.org Linux Kernel 2.6.x)

回避策：DSA-2264-1にて対応

脆弱性：セキュリティ制限の回避, スプーフィング, 機密情報の奪取, 権限の昇格, DoS攻撃, システムアクセス, カーネルメモリ破壊, カーネルスタックメモリの曝露, カーネルのクラッシュ, デリファレンスエラー, バッファオーバーフロー, メモリリーク, バウンダリエラー, システムコール, NULLポインタ参照エラー, アロケーションエラー

ソース：http://www.debian.org/

http://www.us.debian.org/security/2011/dsa-2264

http://secunia.com/advisories/40691/

http://secunia.com/advisories/42035/

http://secunia.com/advisories/42061/

http://secunia.com/advisories/43009/

http://secunia.com/advisories/43358/

http://secunia.com/advisories/43537/

http://secunia.com/advisories/43576/

http://secunia.com/advisories/43594/

http://secunia.com/advisories/43693/

http://secunia.com/advisories/43716/

http://secunia.com/advisories/43806/

http://secunia.com/advisories/43841/

http://secunia.com/advisories/43846/

http://secunia.com/advisories/44164/

http://secunia.com/advisories/44220/

http://secunia.com/advisories/44248/

http://secunia.com/advisories/44975/

http://dvw-j.blogspot.com/2011/01/kernelorg-linux-kernel.html

http://dvw-j.blogspot.com/2011/02/kernelorg-linux-kernel.html

http://dvw-j.blogspot.com/2011/03/kernelorg-linux-kernel_02.html

http://dvw-j.blogspot.com/2011/03/kernelorg-linux-kernel_08.html

http://dvw-j.blogspot.com/2011/03/kernelorg-linux-kernel_3101.html

http://dvw-j.blogspot.com/2011/03/kernelorg-linux-kernel_15.html

http://dvw-j.blogspot.com/2011/03/kernelorg-linux-kernel_16.html

http://dvw-j.blogspot.com/2011/03/kernelorg-linux-kernel_22.html

http://dvw-j.blogspot.com/2011/03/kernelorg-linux-kernel_23.html

http://dvw-j.blogspot.com/2011/03/kernelorg-linux-kernel_29.html

http://dvw-j.blogspot.com/2011/04/kernelorg-linux-kernel_22.html

http://dvw-j.blogspot.com/2011/04/kernelorg-linux-kernel_26.html

http://dvw-j.blogspot.com/2011/04/kernelorg-linux-kernel_856.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2524

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3875

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4075

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4655

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0695

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0710

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0711

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0726

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1010

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1012

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1017

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1078

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1079

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1080

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1090

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1093

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1160

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1163

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1170

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1171

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1172

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1173

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1180

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1182

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1477

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1493

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1577

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1593

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1598

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1745

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1746

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1748

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1759

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1767

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1768

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1776

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2022

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2182

CVE：CVE-2010-2524, CVE-2010-3875, CVE-2010-4075, CVE-2010-4655, CVE-2011-0695, CVE-2011-0710, CVE-2011-0711, CVE-2011-0726, CVE-2011-1010, CVE-2011-1012, CVE-2011-1017, CVE-2011-1078, CVE-2011-1079, CVE-2011-1080, CVE-2011-1090, CVE-2011-1093, CVE-2011-1160, CVE-2011-1163, CVE-2011-1170, CVE-2011-1171, CVE-2011-1172, CVE-2011-1173, CVE-2011-1180, CVE-2011-1182, CVE-2011-1477, CVE-2011-1493, CVE-2011-1577, CVE-2011-1593, CVE-2011-1598, CVE-2011-1745, CVE-2011-1746, CVE-2011-1748, CVE-2011-1759, CVE-2011-1767, CVE-2011-1768, CVE-2011-1776, CVE-2011-2022, CVE-2011-2182

危険性：Medium Risk