Red Hat Fedora, Novell openSUSE, Novell SUSE Linux Enterprise Server

ソフト名：Red Hat Fedora 14, Novell openSUSE 11.3/11.4, Novell SUSE Linux Enterprise Server (SLES) 10/11 (Internet Software Consortium ISC DHCP 3.1.0〜3.1-ESV-R1/4.1.0〜4.1.2rc1/4.1-ESV〜4.1-ESV-R3b1/4.2.0〜4.2.2rc1)

回避策：FEDORA-2011-10705にて対応, openSUSE-SU-2011:1021-1, SUSE-SU-2011:1023-1にて対応

脆弱性：DoS攻撃, 不特定のエラー, サーバの停止

ソース：

http://fedoraproject.org/

http://www.opensuse.org/en/

http://www.suse.com/products/server/

http://www.novell.com/promo/home/sle11.html

http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065176.html

http://lists.opensuse.org/opensuse-updates/2011-09/msg00014.html

https://hermes.opensuse.org/messages/11695711

http://secunia.com/advisories/45582/

http://secunia.com/advisories/45817/

http://secunia.com/advisories/45918/

http://dvw-j.blogspot.com/2011/08/internet-software-consortium-isc-dhcp.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2748

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2749

CVE：CVE-2011-2748, CVE-2011-2749

危険性：Medium Risk

Canonical Ltd. Ubuntu Linux, Red Hat Desktop, Red Hat Enterprise Linux

ソフト名：Canonical Ltd. Ubuntu Linux 8.04/10.04/10.10, Red Hat Desktop 4.x, Red Hat Enterprise Linux AS 4/ES 4/WS 4/5 (Server)/Desktop 5/Desktop Workstation 5/Desktop 6/HPC Node 6/Server 6/Workstation 6 (Internet Software Consortium ISC DHCP 3.1.0〜3.1-ESV-R1/4.1.0〜4.1.2rc1/4.1-ESV〜4.1-ESV-R3b1/4.2.0〜4.2.2rc1)

回避策：USN-1190-1にて対応, RHSA-2011:1160-1にて対応

脆弱性：DoS攻撃, 不特定のエラー, サーバの停止

ソース：

http://www.ubuntu.com/

http://www.redhat.com/rhel/

http://www.redhat.com/rhel/desktop/

http://www.redhat.com/rhel/server/

http://www.ubuntu.com/usn/usn-1190-1/

http://rhn.redhat.com/errata/RHSA-2011-1160.html

http://secunia.com/advisories/45582/

http://secunia.com/advisories/45629/

http://secunia.com/advisories/45639/

http://dvw-j.blogspot.com/2011/08/internet-software-consortium-isc-dhcp.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2748

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2749

CVE：CVE-2011-2748, CVE-2011-2749

危険性：Medium Risk

Internet Software Consortium ISC DHCP, Debian GNU/Linux

ソフト名：Internet Software Consortium ISC DHCP 3.1.0〜3.1-ESV-R1/4.1.0〜4.1.2rc1/4.1-ESV〜4.1-ESV-R3b1/4.2.0〜4.2.2rc1, Debian GNU/Linux 5.0/6.0

回避策：3.1-ESV-R3/4.1-ESV-R3/4.2.2へのアップデートにて対応, DSA-2292-1にて対応

脆弱性：DoS攻撃, 不特定のエラー, サーバの停止

ソース：

http://www.isc.org/software/dhcp

http://www.debian.org/

https://www.isc.org/software/dhcp/advisories/cve-2011-2748

http://lists.debian.org/debian-security-announce/2011/msg00166.html

http://secunia.com/advisories/45582/

http://secunia.com/advisories/45595/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2748

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2749

CVE：CVE-2011-2748, CVE-2011-2749

危険性：Medium Risk

Debian GNU/Linux

ソフト名：Debian GNU/Linux 5.0/6.0 (ISC BIND 9.7.1/9.7.2-P3)

回避策：DSA 2208-1, DSA 2208-2にて対応

脆弱性：DoS攻撃, サーバの停止, デッドロックエラー

ソース：http://www.debian.org/

http://lists.debian.org/debian-security-announce/2011/msg00076.html

http://lists.debian.org/debian-security-announce/2011/msg00077.html

http://secunia.com/advisories/43443/

http://dvw-j.blogspot.com/2011/02/isc-bind.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0414

CVE：CVE-2011-0414

危険性：Medium Risk

Canonical Ltd. Ubuntu Linux, Novell openSUSE

ソフト名：Canonical Ltd. Ubuntu Linux 10.10, Novell openSUSE 11.3
回避策：USN-1070-1, openSUSE-SU-2011:0135-1にて対応
脆弱性：DoS攻撃, デッドロックエラー, サーバの停止
ソース：http://www.ubuntu.com/
http://www.opensuse.org/en/
http://www.ubuntu.com/usn/usn-1070-1
https://hermes.opensuse.org/messages/7458687
http://secunia.com/advisories/43439/
http://secunia.com/advisories/43443/
http://secunia.com/advisories/43479/
http://dvw-j.blogspot.com/2011/02/isc-bind.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0414
CVE：CVE-2011-0414
危険性：Medium Risk

ISC BIND

ソフト名：ISC BIND 9.7.1～9.7.2-P3
回避策：アップデートにて対応
脆弱性：DoS攻撃, デッドロックエラー, サーバの停止
ソース：http://www.isc.org/software/bind
https://www.isc.org/software/bind/advisories/cve-2011-0414
http://secunia.com/advisories/43443/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0414
CVE：CVE-2011-0414
危険性：Medium Risk

Freeciv

ソフト名：Freeciv 2.2.1
回避策：未対応
脆弱性：DoS攻撃, サーバの停止, CPUリソースの浪費
ソース：http://freeciv.wikia.com/index.php/Freeciv
http://aluigi.org/adv/freecivet-adv.txt
http://www.securityfocus.com/bid/41352
http://secunia.com/advisories/40476
危険性：Low Risk

Mumble

ソフト名：Mumble 1.2.2
回避策：未対応
脆弱性：DoS攻撃, サーバの停止
ソース：http://aluigi.org/adv/mumbleed-adv.txt
http://sourceforge.net/projects/mumble/
危険性：Low Risk

Microsoft Internet Explorer, Microsoft Office InfoPath, Microsoft SharePoint Server

ソフト名：Microsoft Internet Explorer 6 SP1～8, Microsoft Office InfoPath 2003 SP3, Microsoft SharePoint Server 2007 SP1 32-bit～SP2 x64
回避策：MS10-035, MS10-039にて対応
脆弱性：機密情報の奪取, リモートコード実行, DoS攻撃, サーバの停止, リスタートの強制
ソース：http://www.microsoft.com/technet/security/bulletin/ms10-035.mspx
http://www.microsoft.com/technet/security/bulletin/ms10-039.mspx
http://www.securityfocus.com/bid/40409
http://www.securityfocus.com/bid/40410
http://www.securityfocus.com/bid/40414
http://www.securityfocus.com/bid/40416
http://www.securityfocus.com/bid/40417
http://www.securityfocus.com/bid/40559
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1257
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1259
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1260
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1261
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1262
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1264
http://secunia.com/advisories/40062
http://www.vupen.com/english/advisories/2010/1392
http://www.vupen.com/english/advisories/2010/1396
CVE：CVE-2010-1257, CVE-2010-1259, CVE-2010-1260, CVE-2010-1261, CVE-2010-1262, CVE-2010-1264
危険性：High Risk

SEGA Rebellion Aliens vs. Predator

ソフト名：SEGA Rebellion Aliens vs. Predator 2.22
回避策：未対応
脆弱性：DoS攻撃, 区域外メモリの使用, サーバのクラッシュ, サーバの停止
ソース：http://aluigi.org/adv/avp3dos-adv.txt
http://www.sega.com/games/aliens-vs-predator/
http://www.securityfocus.com/bid/40041
http://secunia.com/advisories/39769
危険性：Low Risk