openSUSE, SUSE Linux Enterprise Server

ソフト名：openSUSE 11.1～11.3, SUSE Linux Enterprise Server 9～11
回避策：SUSE-SR:2010:023にて対応
脆弱性：セキュリティ制限の回避, スプーフィング攻撃, ブルートフォース攻撃, 機密情報の奪取, 権限の昇格, DoS攻撃, 不正アクセス
ソース：http://www.opensuse.org/en/
http://www.novell.com/products/server/
http://www.novell.com/promo/home/sle11.html
http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html
http://secunia.com/advisories/26480/
http://secunia.com/advisories/37977/
http://secunia.com/advisories/40165/
http://secunia.com/advisories/41158/
http://secunia.com/advisories/41706/
http://secunia.com/advisories/41724/
http://secunia.com/advisories/42175/
http://secunia.com/advisories/42396/
http://dvw-j.blogspot.com/2010/12/kerberos.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0542
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1323
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1324
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1748
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2941
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3073
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3074
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3312
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3702
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3710
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3860
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3870
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4005
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4008
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4020
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4021
CVE：CVE-2010-0542, CVE-2010-1323, CVE-2010-1324, CVE-2010-1748, CVE-2010-2941, CVE-2010-3073, CVE-2010-3074, CVE-2010-3312, CVE-2010-3702, CVE-2010-3710, CVE-2010-3860, CVE-2010-3870, CVE-2010-4005, CVE-2010-4008, CVE-2010-4020, CVE-2010-4021
危険性：Medium Risk

openSUSE, SUSE Linux Enterprise Server (SLES)

ソフト名：openSUSE 11.1～11.3, SUSE Linux Enterprise Server (SLES) 10/11
回避策：SUSE-SR:2010:022にて対応
脆弱性：バッファオーバーフロー, リモートコード実行, デーモンのクラッシュ, DoS攻撃, セキュリティ制限の回避, メモリ破壊
ソース：http://www.opensuse.org/en/
http://www.novell.com/products/server/
http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00006.html
http://secunia.com/advisories/40908/
http://secunia.com/advisories/41038/
http://secunia.com/advisories/41596/
http://secunia.com/advisories/42243/
http://secunia.com/advisories/42397/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1172
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2948
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2949
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3702
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3704
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3864
CVE：CVE-2010-1172, CVE-2010-2948, CVE-2010-2949, CVE-2010-3702, CVE-2010-3704, CVE-2010-3864
危険性：Medium Risk