Daily Vuln Watch Japan

http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00024.html

http://secunia.com/advisories/45641/

http://secunia.com/advisories/46050/

http://dvw-j.blogspot.com/2011/08/apache-tomcat_16.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2729

CVE：CVE-2011-2729

危険性：Low Risk

Scull

ソフト名：Red Hat Enterprise Linux Supplementary (Desktop Supplementary (v. 5 client)/Supplementary (v. 5 server)/Desktop Supplementary (v. 6)/Server Supplementary (v. 6)/Workstation Supplementary (v. 6)), Novell openSUSE 11.3/11.4 (Adobe Flash Player 10.x)

回避策：RHSA-2011:1333-01にて対応, openSUSE-SU-2011:1060-1にて対応

脆弱性：セキュリティ制限の回避, XSS, システムアクセス, 不正HTMLの実行, スクリプトコード実行, バッファオーバーフロー, 論理エラー, メモリ破壊

ソース：

http://www.redhat.com/

https://rhn.redhat.com/errata/RHSA-2011-1333.html

https://hermes.opensuse.org/messages/11868434

http://secunia.com/advisories/46113/

http://secunia.com/advisories/46142/

http://secunia.com/advisories/46155/

http://dvw-j.blogspot.com/2011/09/google-chrome_23.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2426

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2427

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2428

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2429

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2430

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2444

CVE：CVE-2011-2426, CVE-2011-2427, CVE-2011-2428, CVE-2011-2429, CVE-2011-2430, CVE-2011-2444

危険性：High Risk

Scull

ソフト名：Novell openSUSE 11.3/11.4 (Opera Software Opera 11.x)

回避策：openSUSE-SU-2011:1025-1にて対応

脆弱性：セキュリティ制限の回避, 不特定のエラー

ソース：

http://lists.opensuse.org/opensuse-updates/2011-09/msg00016.html

http://secunia.com/advisories/45791/

http://secunia.com/advisories/45859/

http://dvw-j.blogspot.com/2011/09/opera-software-opera.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3388

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3389

CVE：CVE-2011-3388, CVE-2011-3389

危険性：Medium Risk

Scull

ソフト名：Novell openSUSE 11.3/11.4 (OTRS 2.4.11未満/3.0.10未満)

回避策：openSUSE-SU-2011:1017-1にて対応

脆弱性：機密情報の奪取, ファイルの曝露

ソース：

http://lists.opensuse.org/opensuse-updates/2011-09/msg00011.html

http://secunia.com/advisories/45701/

http://secunia.com/advisories/45894/

http://dvw-j.blogspot.com/2011/08/otrs.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2746

CVE：CVE-2011-2746

危険性：Medium Risk

Scull

ソフト名：Novell openSUSE 11.3/11.4, Novell SUSE Linux Enterprise Server (SLES) 11, Red Hat Fedora 14 (Squid 3.0.STABLE25未満の3.0.x/3.1.14未満の3.1.x)

回避策：openSUSE-SU-2011:1018-1, SUSE-SU-2011:1019-1にて対応, FEDORA-2011-11854にて対応

脆弱性：システムアクセス, DoS攻撃, バウンダリエラー, バッファオーバーフロー, リモートコード実行

ソース：

http://fedoraproject.org/

http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00012.html

http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00013.html

http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065534.html

http://secunia.com/advisories/45805/

http://secunia.com/advisories/45906/

http://secunia.com/advisories/45920/

http://dvw-j.blogspot.com/2011/08/squid.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3205

CVE：CVE-2011-3205

危険性：High Risk

Scull

ソフト名：Novell openSUSE 11.3/11.4 (Adiscon rsyslog 4.6.0〜4.6.7/5.2.0〜5.8.4)

回避策：openSUSE-SU-2011:1020-1にて対応

脆弱性：DoS攻撃, システムアクセス, オフバイツーエラー, バッファオーバーフロー

ソース：

http://lists.opensuse.org/opensuse-updates/2011-09/msg00013.html

http://secunia.com/advisories/45848/

http://secunia.com/advisories/45922/

http://dvw-j.blogspot.com/2011/09/adiscon-rsyslog-red-hat-enterprise.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3200

CVE：CVE-2011-3200

危険性：Medium Risk

Scull

ソフト名：Red Hat Fedora 14, Novell openSUSE 11.3/11.4, Novell SUSE Linux Enterprise Server (SLES) 10/11 (Internet Software Consortium ISC DHCP 3.1.0〜3.1-ESV-R1/4.1.0〜4.1.2rc1/4.1-ESV〜4.1-ESV-R3b1/4.2.0〜4.2.2rc1)

回避策：FEDORA-2011-10705にて対応, openSUSE-SU-2011:1021-1, SUSE-SU-2011:1023-1にて対応

脆弱性：DoS攻撃, 不特定のエラー, サーバの停止

ソース：

http://fedoraproject.org/

http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065176.html

http://lists.opensuse.org/opensuse-updates/2011-09/msg00014.html

https://hermes.opensuse.org/messages/11695711

http://secunia.com/advisories/45582/

http://secunia.com/advisories/45817/

http://secunia.com/advisories/45918/

http://dvw-j.blogspot.com/2011/08/internet-software-consortium-isc-dhcp.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2748

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2749

CVE：CVE-2011-2748, CVE-2011-2749

危険性：Medium Risk

Scull

ソフト名：Novell openSUSE 11.3/11.4, SUSE Linux Enterprise Server (SLES) 10 (Apache Tomcat 5.x/6.x/7.x)

回避策：openSUSE-SU-2011:0988-1, SUSE-SU-2011:0989-1, SUSE-SU-2011:0990-1にて対応

脆弱性：セキュリティ制限の回避, DoS攻撃, パスワードの奪取, ファイルの曝露, JVMのクラッシュ

ソース：

https://hermes.opensuse.org/messages/11647318

https://hermes.opensuse.org/messages/11647322

https://hermes.opensuse.org/messages/11651531

http://secunia.com/advisories/44981/

http://secunia.com/advisories/45232/

http://secunia.com/advisories/45784/

http://secunia.com/advisories/45828/

http://dvw-j.blogspot.com/2011/06/apache-tomcat.html

http://dvw-j.blogspot.com/2011/07/apache-tomcat.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2204

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2526

CVE：CVE-2011-2204, CVE-2011-2526

危険性：Low Risk

Scull

ソフト名：Novell openSUSE 11.3/11.4, SUSE Linux Enterprise Server (SLES) 10 (freshmeat.net ncpfs 2.x)

回避策：openSUSE-SU-2011:0985-1, SUSE-SU-2011:0987-1, SUSE-SU-2011:0987-2にて対応

脆弱性：機密情報の奪取, DoS攻撃, 権限の昇格

ソース：

https://lwn.net/Articles/457382/

https://hermes.opensuse.org/messages/11647307

https://hermes.opensuse.org/messages/11651521

http://secunia.com/advisories/38327/

http://secunia.com/advisories/45821/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1089

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1679

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1680

CVE：CVE-2011-1089, CVE-2011-1679, CVE-2011-1680

危険性：Low Risk

Scull

ソフト名：Canonical Ltd. Ubuntu Linux 8.04/10.04/10.10, IBM HTTP Server 2.0.42/2.0.47/6.0〜6.0.2.43/6.1〜6.1.0.39/7.0〜7.0.0.17/8.0, Cisco Quad, Novell openSUSE 11.3/11.4, 日立 Web Server 3.x/4.x (Apache 2.2.19)

回避策：USN-1199-1にて対応, あり, 未対応, openSUSE-SU-2011:0993-1にて対応, HS11-019にて対応

脆弱性：DoS攻撃, 不正HTTPのリクエスト, メモリの浪費

ソース：

http://www.ubuntu.com/

http://www-01.ibm.com/software/webservers/httpservers/

http://www-01.ibm.com/software/webservers/httpservers/library/

http://www.cisco.com/en/US/products/ps10668/index.html

http://www.ubuntu.com/usn/usn-1199-1/

http://www.hitachi.com/

http://www.ibm.com/support/docview.wss?uid=swg21512087

http://www.cisco.com/warp/public/707/cisco-sa-20110830-apache.shtml

http://lists.opensuse.org/opensuse-updates/2011-09/msg00002.html

http://www.hitachi.co.jp/Prod/comp/soft1/security/info/./vuls/HS11-019/index.html

http://secunia.com/advisories/45606/

http://secunia.com/advisories/45732/

http://secunia.com/advisories/45824/

http://secunia.com/advisories/45865/

http://secunia.com/advisories/45872/

http://secunia.com/advisories/45892/

http://dvw-j.blogspot.com/2011/08/apache.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3192

CVE：CVE-2011-3192

危険性：Medium Risk

Scull

ソフト名：Novell openSUSE 11.3/11.4, Novell SUSE Linux Enterprise Server (SLES) 10/11 (Mozilla Firefox 3.6.20未満/5.x, Mozilla Thunderbird 3.1.12未満/5.x)

回避策：openSUSE-SU-2011:0935-2, openSUSE-SU-2011:0957-2, SUSE-SU-2011:0967-1, SUSE-SA:2011:037にて対応

脆弱性：セキュリティ制限の回避, 機密情報の奪取, システムアクセス, 不特定のエラー, メモリ破壊, JARファイル操作エラー, 不正Java Scriptコード実行, バッファオーバーフロー,　解放後使用エラー, ポインタ間接参照エラー, リモートコード実行, 不正ライブラリのロード

ソース：

http://lists.opensuse.org/opensuse-updates/2011-08/msg00042.html

http://lists.opensuse.org/opensuse-updates/2011-08/msg00043.html

http://www.suse.com/support/security/advisories/2011_37_firefox.html

https://hermes.opensuse.org/messages/11623434

http://secunia.com/advisories/45581/

http://secunia.com/advisories/45666/

http://secunia.com/advisories/45785/

http://secunia.com/advisories/45802/

http://secunia.com/advisories/45825/

http://secunia.com/advisories/45831/

http://dvw-j.blogspot.com/2011/08/mozilla-firefox-mozilla-thunderbird.html

http://dvw-j.blogspot.com/2011/08/mozilla-firefox-mozilla-thunderbird-red.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0084

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2378

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2980

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2981

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2982

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2983

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2984

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2985

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2986

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2987

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2988

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2989

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2990

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2991

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2992

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2993

CVE：CVE-2011-0084, CVE-2011-2378, CVE-2011-2980, CVE-2011-2985, CVE-2011-2981, CVE-2011-2982, CVE-2011-2983, CVE-2011-2984, CVE-2011-2985, CVE-2011-2986, CVE-2011-2987, CVE-2011-2988, CVE-2011-2989, CVE-2011-2990, CVE-2011-2991, CVE-2011-2992, CVE-2011-2993

危険性：High Risk

Scull

ソフト名：Novell openSUSE 11.3/11.4 (Mozilla SeaMonkey 2.3)

回避策：openSUSE-SU-2011:0957-1にて対応

脆弱性：セキュリティ制限の回避, 機密情報の奪取, システムアクセス, 不特定のエラー, メモリ破壊, JARファイル操作エラー, 不正Java Scriptコード実行, バッファオーバーフロー,　解放後使用エラー

ソース：

http://lists.opensuse.org/opensuse-updates/2011-08/msg00039.html

http://secunia.com/advisories/45667/

http://secunia.com/advisories/45808/

http://dvw-j.blogspot.com/2011/08/mozilla-firefox-mozilla-thunderbird.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0084

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2985

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2986

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2987

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2988

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2989

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2990

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2991

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2992

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2993

CVE：CVE-2011-0084, CVE-2011-2985, CVE-2011-2986, CVE-2011-2987, CVE-2011-2988, CVE-2011-2989, CVE-2011-2990, CVE-2011-2991, CVE-2011-2992, CVE-2011-2993

危険性：High Risk

Scull

ソフト名：Novell openSUSE 11.3/11.4, Novell SUSE Linux Enterprise Server (SLES) 11 (The Linux Foundation Foomatic 3.0.2未満/4.0.6)

回避策：openSUSE-SU-2011:0950-1, SUSE-SU-2011:0951-1にて対応

脆弱性：権限の昇格, システムアクセス, ローカルコード実行, ローカルコマンド挿入, ローカルコマンド実行

ソース：

http://lists.opensuse.org/opensuse-updates/2011-08/msg00036.html

https://hermes.opensuse.org/messages/11591627

http://secunia.com/advisories/12557/

http://secunia.com/advisories/45196/

http://secunia.com/advisories/45756/

http://secunia.com/advisories/45790/

http://dvw-j.blogspot.com/2011/07/linux-foundation-foomatic.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0801

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2697

CVE：CVE-2004-0801, CVE-2011-2697

危険性：Medium Risk

Scull

ソフト名：Canonical Ltd. Ubuntu Linux 10.04/10.10, Novell openSUSE 11.3 (Mozilla Thunderbird 3.1.12未満)

回避策：USN-1185-1にて対応, openSUSE-SU-2011:0958-1にて対応

脆弱性：セキュリティ制限の回避, 機密情報の奪取, システムアクセス, 不特定のエラー, メモリ破壊, 解放後使用エラー, 不正Java Scriptコード実行, ポインタ間接参照エラー, リモートコード実行, 不正ライブラリのロード

ソース：

http://www.ubuntu.com/

http://www.ubuntu.com/usn/usn-1185-1/

http://lists.opensuse.org/opensuse-updates/2011-08/msg00040.html

http://secunia.com/advisories/45666/

http://secunia.com/advisories/45776/

http://secunia.com/advisories/45844/

http://dvw-j.blogspot.com/2011/08/mozilla-firefox-mozilla-thunderbird-red.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0084

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2378

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2981

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2982

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2983

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2984

CVE：CVE-2011-0084, CVE-2011-2378, CVE-2011-2981, CVE-2011-2982, CVE-2011-2983, CVE-2011-2984

危険性：High Risk

Scull

ソフト名：Novell openSUSE 11.3/11.4, Novell SUSE Linux Enterprise Server (SLES) 9/10/11 (Sourcefire Clam AntiVirus 0.97.2)

回避策：openSUSE-SU-2011:0940-1, SUSE-SU-2011:0948-1にて対応

脆弱性：DoS攻撃, オフバイワンエラー, デーモンのクラッシュ

ソース：

http://www.novell.com/products/openenterpriseserver/

http://lwn.net/Articles/456236/

https://hermes.opensuse.org/messages/11564156

http://secunia.com/advisories/45382/

http://secunia.com/advisories/45773/

http://dvw-j.blogspot.com/2011/07/sourcefire-clam-antivirus.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2721

CVE：CVE-2011-2721

危険性：Medium Risk

Scull

ソフト名：Novell openSUSE 11.3/11.4 (libmodplug 0.8.8.x)

回避策：openSUSE-SU-2011:0943-1にて対応

脆弱性：システムアクセス, バッファオーバーフロー, バウンダリエラー, 整数オーバーフローエラー, オフバイワンエラー, スタックメモリ破壊

ソース：

http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00019.html

http://secunia.com/advisories/44388/

http://secunia.com/advisories/45131/

http://secunia.com/advisories/45742/

http://dvw-j.blogspot.com/2011/05/libmodplug-videolan-vlc-media-player.html

http://dvw-j.blogspot.com/2011/08/libmodplug.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1761

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2911

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2912

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2913

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2914

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2915

CVE：CVE-2011-1761, CVE-2011-2911, CVE-2011-2912, CVE-2011-2913, CVE-2011-2914, CVE-2011-2915

危険性：Medium Risk

Scull

ソフト名：Novell openSUSE 11.3/11.4, Novell SUSE Linux Enterprise Server 9/(SLES) 10/(SLES) 11 (libpng 1.2.x)

回避策：openSUSE-SU-2011:0915-1, SUSE-SU-2011:0916-1, SUSE-SU-2011:0919-1にて対応

脆弱性：DoS攻撃, システムアクセス, 区域外メモリの使用, アプリケーションのクラッシュ, メモリリーク, 不正PNGファイル

ソース：

https://hermes.opensuse.org/messages/11259948

https://hermes.opensuse.org/messages/11255439

https://hermes.opensuse.org/messages/11279547

http://secunia.com/advisories/32418/

http://secunia.com/advisories/45046/

http://secunia.com/advisories/45635/

http://secunia.com/advisories/45646/

http://dvw-j.blogspot.com/2011/06/libpng.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-6218

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5063

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2501

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2690

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2691

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2692

CVE：CVE-2008-6218, CVE-2009-5063, CVE-2011-2501, CVE-2011-2690, CVE-2011-2691, CVE-2011-2692

危険性：Medium Risk

Scull

ソフト名：Novell openSUSE 11.3/11.4, Novell SUSE Linux Enterprise Server 9/10/11

回避策：openSUSE-SU-2011:0892-1, SUSE-SU-2011:0895-1にて対応

脆弱性：システムアクセス, ローカルコマンド挿入, ローカルコマンド実行

ソース：

http://www.novell.com/products/openenterpriseserver/

https://hermes.opensuse.org/messages/11030786

https://hermes.opensuse.org/messages/11040895

http://secunia.com/advisories/45196/

http://secunia.com/advisories/45594/

http://dvw-j.blogspot.com/2011/07/linux-foundation-foomatic.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2697

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2964

CVE：CVE-2011-2697, CVE-2011-2964

危険性：Medium Risk

Scull

ソフト名：Novell openSUSE 11.3/11.4 (Adobe Flash Player 10.3.x)

回避策：openSUSE-SU-2011:0897-1にて対応

脆弱性：機密情報の奪取, システムアクセス, バッファオーバーフロー, リモートコード実行, 不特定のエラー, メモリ破壊, 整数オーバーフローエラー

ソース：

https://hermes.opensuse.org/messages/11040919

http://secunia.com/advisories/45583/

http://secunia.com/advisories/45591/

http://dvw-j.blogspot.com/2011/08/adobe-air-adobe-flash-player-google.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2130

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2134

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2135

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2136

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2137

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2138

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2139

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2140

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2414

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2415

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2417

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2425

CVE：CVE-2011-2130, CVE-2011-2134, CVE-2011-2135, CVE-2011-2136, CVE-2011-2137, CVE-2011-2138, CVE-2011-2139, CVE-2011-2140, CVE-2011-2414, CVE-2011-2415, CVE-2011-2416, CVE-2011-2417, CVE-2011-2425

危険性：High Risk

Scull

ソフト名：Novell openSUSE 11.3/11.4, Novell SUSE Linux Enterprise Server (SLES) 11 (eCryptfs)

回避策：openSUSE-SU-2011:0902-1, SUSE-SU-2011:0898-1にて対応

脆弱性：セキュリティ制限の回避, データ操作, 機密情報の奪取, 権限の昇格, DoS攻撃, マウント脆弱性

ソース：