Daily Vuln Watch Japan

Scull

ソフト名：SUSE Linux Enterprise Server 9, Novell Open Enterprise Server 1.x/2.x (ethereal)

回避策：SUSE-SU-2011:0611-1にて対応

脆弱性：DoS攻撃, 解放後使用エラー, クラッシュ

ソース：http://www.novell.com/products/server/

http://www.novell.com/products/openenterpriseserver/

https://hermes.opensuse.org/messages/8701428

http://secunia.com/advisories/44172/

http://secunia.com/advisories/44822/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1590

CVE：CVE-2011-1590

危険性：Medium Risk

Scull

ソフト名：Novell Open Enterprise Server 1.x/2.x, Canonical Ltd. Ubuntu Linux 6.06/8.04/10.04/10.10, Debian GNU/Linux 5.0/6.0 (Postfix 2.5.13未満/2.6.10未満/2.7.4未満/2.8.3未満)

回避策：SUSE-SA:2011:023にて対応, USN-1131-1にて対応, あり

脆弱性：DoS攻撃, システムアクセス, データ操作, 不正アクセス, リモートコード実行, テキストインジェクション

ソース：http://www.novell.com/products/openenterpriseserver/

http://www.ubuntu.com/

http://www.debian.org/

http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00002.html

https://lists.ubuntu.com/archives/ubuntu-security-announce/2011-May/001329.html

http://secunia.com/advisories/43646/

http://secunia.com/advisories/44500/

http://secunia.com/advisories/44517/

http://secunia.com/advisories/44519/

http://dvw-j.blogspot.com/2011/03/postfix.html

http://dvw-j.blogspot.com/2011/05/postfix.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2939

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0411

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1720

CVE：CVE-2009-2939, CVE-2011-0411, CVE-2011-1720

危険性：Medium Risk

Scull

ソフト名：Novell Open Enterprise Server 1.x/2.x (GnuTLS 2.x)

回避策：SUSE-SU-2011:0415-1にて対応

脆弱性：データ操作, TLSプロトコルエラー, テキストインジェクション, マンインミドル攻撃

ソース：http://www.novell.com/products/openenterpriseserver/

https://hermes.opensuse.org/messages/8356821

http://secunia.com/advisories/37292/

http://secunia.com/advisories/44511/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3555

CVE：CVE-2009-3555

危険性：Medium Risk

Scull

ソフト名：Novell Open Enterprise Server 1.x/2.x (OpenBSD OpenSSL 0.98q未満/1.0.0c未満)

回避策：SUSE-SU-2011:0430-1にて対応

脆弱性：セキュリティ制限の回避

ソース：http://www.novell.com/products/openenterpriseserver/

https://hermes.opensuse.org/messages/8356815

http://secunia.com/advisories/42473/

http://secunia.com/advisories/44521/

http://dvw-j.blogspot.com/2010/12/openssl.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4180

CVE：CVE-2010-4180

危険性：Medium Risk

Scull

ソフト名：Novell openSUSE 11.2/11.3/11.4, Novell SUSE Linux Enterprise Server 9/10/11, Novell Open Enterprise Server 1.x/2.x (Internet Software Consortium ISC DHCP 3/4.1.x/4.2.x)

回避策：SUSE-SU-2011:0305-1, SUSE-SU-2011:0322-1, SUSE-SU-2011:0323-1, openSUSE-SU-2011:0320-1, openSUSE-SU-2011:0321-1にて対応

脆弱性：システムアクセス, 応答処理の脆弱性

ソース：http://www.opensuse.org/en/

http://www.novell.com/products/server/

http://www.novell.com/promo/home/sle11.html

http://www.novell.com/products/openenterpriseserver/

https://hermes.opensuse.org/messages/7849431

https://hermes.opensuse.org/messages/7881491

https://hermes.opensuse.org/messages/7882506

https://hermes.opensuse.org/messages/7877910

https://hermes.opensuse.org/messages/7877925

http://secunia.com/advisories/44037/

http://secunia.com/advisories/44011/

http://dvw-j.blogspot.com/2011/04/internet-software-consortium-isc-dhcp.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0997

CVE：CVE-2011-0997

危険性：Medium Risk

Scull

ソフト名：dhcpcd 5.2.12未満, Novell SUSE Linux Enterprise Server 9/10/11, Novell Open Enterprise Server 1.x/2.x

回避策：アップデートにて対応, SUSE-SU-2011:0301-1, SUSE-SU-2011:0301-2, SUSE-SU-2011:0324-1, SUSE-SU-2011:0305-2, SUSE-SU-2011:0305-3にて対応

脆弱性：システムアクセス, シェルコマンドの挿入, シェルコマンド実行

ソース：http://roy.marples.name/projects/dhcpcd

http://www.novell.com/products/server/

http://www.novell.com/promo/home/sle11.html

http://www.novell.com/products/openenterpriseserver/

http://roy.marples.name/archives/dhcpcd-discuss/2011/0326.html

https://bugzilla.novell.com/show_bug.cgi?id=675052

https://hermes.opensuse.org/messages/7847052

https://hermes.opensuse.org/messages/7882533

https://hermes.opensuse.org/messages/7882505

https://hermes.opensuse.org/messages/7877930

https://hermes.opensuse.org/messages/7882488

http://secunia.com/advisories/44025/

http://secunia.com/advisories/44070/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0996

CVE：CVE-2011-0996

危険性：Medium Risk

Scull

ソフト名：Novell Open Enterprise Server 1.x/2.x, Novell openSUSE 11.2/11.3, Novell SUSE Linux Enterprise Server (SLES) 11, Red Hat Enterprise Linux Server 6/Workstation 6 (Quagga 0.99.17未満/0.99.18未満)

回避策：SUSE-SU-2011:0269-1, SUSE-SU-2011:0262-1, openSUSE-SU-2011:0274-1にて対応, RHSA-2011:0406-01にて対応

脆弱性：DoS攻撃, システムアクセス, デーモンのクラッシュ, NULLポインタ参照エラー, バウンダリエラー, バッファオーバーフロー, リモートコード実行

ソース：http://www.novell.com/products/openenterpriseserver/

http://www.opensuse.org/en/

http://www.redhat.com/rhel/server/

http://www.redhat.com/rhel/desktop/

https://hermes.opensuse.org/messages/7789143

https://hermes.opensuse.org/messages/7786951

https://hermes.opensuse.org/messages/7795766

https://rhn.redhat.com/errata/RHSA-2011-0406.html

http://secunia.com/advisories/41038/

http://secunia.com/advisories/43770/