Blue Coat Director

ソフト名：Blue Coat Director (SGME) 5.5.2.3 (OpenBSD OpenSSH 3.6.1p1, Apache 1.3.41/2.0.63/2.0.64/2.2.x)

回避策：あり

脆弱性：セキュリティ制限の回避, XSS, 機密情報の奪取, DoS攻撃, システムアクセス, ユーザー名リストの曝露, メモリの浪費, 不正HTMLの実行, スクリプトコード実行, NULLポインタの逆参照, クラッシュ, イベントのハング, 入力検証エラー, CPUリソースの浪費

ソース：

http://www.bluecoat.com/products/director/features.html

https://kb.bluecoat.com/index?page=content&id=SA61

https://kb.bluecoat.com/index?page=content&id=SA62

https://kb.bluecoat.com/index?page=content&id=SA63

http://secunia.com/advisories/8720/

http://secunia.com/advisories/30621/

http://secunia.com/advisories/31384/

http://secunia.com/advisories/36549/

http://secunia.com/advisories/36675/

http://secunia.com/advisories/38852/

http://secunia.com/advisories/46041/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0190

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2666

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2364

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2939

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1891

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2412

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3094

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3095

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3555

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3560

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3720

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0425

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0434

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1452

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1623

CVE：CVE-2003-0190, CVE-2005-2666, CVE-2008-2364, CVE-2008-2939, CVE-2009-1891, CVE-2009-2412, CVE-2009-3094, CVE-2009-3095, CVE-2009-3555, CVE-2009-3560, CVE-2009-3720, CVE-2010-0425, CVE-2010-0434, CVE-2010-1452, CVE-2010-1623

危険性：Medium Risk

OpenBSD OpenSSH

ソフト名：OpenBSD OpenSSH 5.8p2未満

回避策：アップデートにて対応

脆弱性：機密情報の奪取, 秘密鍵の曝露

ソース：http://www.openssh.com/

http://www.openssh.com/txt/portable-keysign-rand-helper.adv

http://secunia.com/advisories/44347/

危険性：Medium Risk

HP Insight Control, Sun Solaris

ソフト名：HP Insight Control (Linux (IC-Linux) 6.3未満), Sun Solaris 10 (OpenBSD OpenSSL 0.9.8f〜0.9.8q/1.0.0〜1.0.0c, OpenBSD OpenSSH 5.6/5.7)

回避策：アップデート,HPSBMA02658 SSRT100413にて対応

脆弱性：セキュリティ制限の回避, 機密情報の奪取, DoS攻撃, システムアクセス, バッファオーバーフロー, 暗号化脆弱性, 無効なメモリアクセス, スタックメモリの曝露, ハッシュ衝突攻撃

ソース：http://h18000.www1.hp.com/products/servers/management/insightcontrol_linux2/index.html

http://www.oracle.com/us/products/servers-storage/solaris/index.html?origref=http://secunia.com/advisories/product/4813/

http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02794777

http://blogs.sun.com/security/entry/cve_2008_7270_vulnerability_in

http://secunia.com/advisories/42243/

http://secunia.com/advisories/42473/

http://secunia.com/advisories/43227/

http://secunia.com/advisories/43181/

http://secunia.com/advisories/44269/

http://secunia.com/advisories/44286/

http://dvw-j.blogspot.com/2010/12/openssl.html

http://dvw-j.blogspot.com/2011/02/openbsd-openssl.html

http://dvw-j.blogspot.com/2011/02/openbsd-openssh.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-7270

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3864

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4180

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0014

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0539

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1535

CVE：CVE-2008-7270, CVE-2010-3864, CVE-2010-4180, CVE-2011-0014, CVE-2011-0539, CVE-2011-1535

危険性：Medium Risk

OpenBSD OpenSSH

ソフト名：OpenBSD OpenSSH 5.6/5.7
回避策：アップデートにて対応
脆弱性：ブルートフォース攻撃, 機密情報の奪取, ハッシュ衝突攻撃, スタックメモリの曝露
ソース：http://www.openssh.com/
http://www.openssh.com/txt/legacy-cert.adv
http://www.openssh.com/txt/release-5.8
http://secunia.com/advisories/43181/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0539
CVE：CVE-2011-0539
危険性：Low Risk