[CERT-daily] Tageszusammenfassung - Freitag 5-07-2013

[Daily end-of-shift report]

=======================
= End-of-Shift report =
=======================

Timeframe:   Donnerstag 04-07-2013 18:00 − Freitag 05-07-2013 18:00
Handler:     Stephan Richter
Co-Handler:  n/a




*** Bugtraq: Paypal Bug Bounty #102 QR Dev Labs - Auth Bypass Vulnerability ***
---------------------------------------------
An independent vulnerability laboratory researcher discovered an auth bypass web session vulnerability in the PayPal QR Labs Service Web Application.
---------------------------------------------
http://www.securityfocus.com/archive/1/527069




*** phpMyAdmin 4.0.2 Cross Site Scripting ***
---------------------------------------------
Topic: phpMyAdmin 4.0.2 Cross Site Scripting Risk: Low Text:PMASA-2013-6 Announcement-ID: PMASA-2013-6 Date: 2013-06-05 Summary XSS due to unescaped HTML output in Create View p...
---------------------------------------------
http://cxsecurity.com/issue/WLB-2013070047




*** phpMyAdmin 4.0.4 change the configuration vulnerability ***
---------------------------------------------
Topic: phpMyAdmin 4.0.4 change the configuration vulnerability Risk: Medium Text:PMASA-2013-7 Announcement-ID: PMASA-2013-7 Date: 2013-06-30 Updated: 2013-07-01 Summary Global variable scope inje...
---------------------------------------------
http://cxsecurity.com/issue/WLB-2013070048




*** EU-Parlament beschließt härtere Strafen für Cyber-Angriffe ***
---------------------------------------------
Mit großer Mehrheit hat das Parlament den Richtlinienentwurf der EU-Kommission über Angriffe auf Informationssysteme verabschiedet.
---------------------------------------------
http://www.heise.de/security/meldung/EU-Parlament-beschliesst-haertere-Strafen-fuer-Cyber-Angriffe-1911714.html




*** Advance Notification Service for July 2013 Security Bulletin Release ***
---------------------------------------------
Today we're providing advance notification for the release of seven bulletins, six Critical and one Important, for July 2013. The Critical bulletins address vulnerabilities in Microsoft Windows, .NET Framework, Silverlight, Internet Explorer and GDI+. Also scheduled for inclusion among these Critical bulletins is an update to address CVE-2013-3660, which is a publicly known issue in the Kernel-Mode Drivers component of Windows. The Important-rated bulletin will address an issue in...
---------------------------------------------
http://blogs.technet.com/b/msrc/archive/2013/07/04/advance-notification-service-for-july-2103-security-bulletin-release.aspx