KENNETH – 페이지 3912 – 지락문화예술공작단

MS15-092 – Important: Vulnerabilities in .NET Framework Could Allow Elevation of Privilege (3086251) – Version: 1.2

2015-09-25 KENNETH 0

Severity Rating: ImportantRevision Note: V1.2 (September 25, 2015): Added a footnote to the Affected Software table to inform customers that Windows Server Technical Preview 2 is affected. Customers running this operating system are encouraged to apply the update, which is available via Windows Update.Summary: This security update resolves vulnerabilities in Microsoft .NET Framework. The vulnerabilities could allow elevation of privilege if a user runs a specially crafted .NET application. However, in all cases, an attacker would have no way to force users to run the application; an attacker would have to convince users to do so. Source: ms-security

WordPress 4.3.1 Security and Maintenance Release

2015-09-16 KENNETH 0

WordPress 4.3.1 is now available. This is a security release for all previous versions and we strongly encourage you to update your sites immediately. This release addresses three issues, including two cross-site scripting vulnerabilities and a potential privilege escalation. WordPress versions 4.3 and earlier are vulnerable to a cross-site scripting vulnerability when processing shortcode tags (CVE-2015-5714). Reported by Shahar Tal and Netanel Rubin of Check Point. A separate cross-site scripting vulnerability was found in the user list table. Reported by Ben Bidner of the WordPress security team. Finally, in certain cases, users without proper permissions could publish private posts and make them sticky (CVE-2015-5715). Reported by Shahar Tal and Netanel Rubin of Check Point. Our thanks to those who have practiced responsible disclosure of security issues. WordPress 4.3.1 also fixes twenty-six bugs. For more information, see the release notes or consult the list of changes. Download WordPress 4.3.1 or venture over to Dashboard [ more… ]

September 2015 Security Update Release Summary

2015-09-09 KENNETH 0

Today we released security updates to provide protections against malicious attackers. As a best practice, we encourage customers to apply security updates as soon as they are released. More information about this month’s security updates and advisories can be found in the Security TechNet Library. MSRC Team Source: ms-msrc

September 2015 Security Update Release Summary

2015-09-08 KENNETH 0

September 2015 Security Update Release Summary Today we released security updates to provide protections against malicious attackers. As a best practice, we encourage customers to apply security updates as soon as they are released. More information about this month’s security updates and advisories can be found in the Security TechNet Library. MSRC Team Source: September 2015 Security Update Release Summary

SSL Library Error: -8181 Certificate has expired

2015-09-08 KENNETH 0

아파치(apache)가 구동되지 않는 문제!!! 에러내용 [error] SSL Library Error: -8181 Certificate has expired [error] Unable to verify certificate ‘Server-Cert’. Add “NSSEnforceValidCerts off” to nss.conf so the server can start until the problem can be resolved. [error] Certificate not verified: ‘Server-Cert’ 2. 환경 OS : RHEL-5, CentOS-5 패키지 : 기본 rpm 기반의 apache 와 mod_nss 다른 버전은 테스트 안해봄 https://bugzilla.redhat.com/show_bug.cgi?format=multiple&id=711085 이런 내용이 있다고들 한다. mod_nss 패키지를 설치하면서 생성되는 인증서의 만료기간이 작업일자를 기준으로 4년후이기 때문에.. 이것을 설치해놓고 4년동안 문제가 없다가, 만료되면 에러와 함께 아파치가 구동되지 않는 문제가 발생한다. certutil -d /etc/httpd/alias -L -n Server-Cert 명령어를 이용해서 확인해 보도록 하자 3. 해결법 설정변경 파일 : /etc/httpd/conf.d/nss.conf 설정변경 : NSSEnforceValidCerts off (없을시 추가해줌) 재생성 cd /etc/httpd/alias rm -f cert8.db key3.db secmod.db /usr/sbin/gencert /etc/httpd/alias mod_nss 재설치 mod_nss 를 재설치 하면 위에서 설명한 ”재생성” 작업이 수반된다. yum remove mod_nss yum install mod_nss 가장 괜찮은 [ more… ]