[CERT-daily] Tageszusammenfassung - Donnerstag 29-12-2016

[Daily end-of-shift report]

=======================
= End-of-Shift report =
=======================

Timeframe:   Mittwoch 28-12-2016 18:00 − Donnerstag 29-12-2016 18:00
Handler:     Robert Waldner
Co-Handler:  Alexander Riepl


*** 33C3: Türsprechanlagen sind des Hackers fette Beute ***
---------------------------------------------
Immer mehr Hersteller von Sprechanlagen für Firmen- und Privathäuser setzen zur Kommunikationsübertragung auf den Mobilfunk statt leitungsgebundene Technik. Hackern wird es damit möglich, Türen zu öffnen oder Premiumnummern anzuwählen.
---------------------------------------------
https://heise.de/-3582807




*** IBM Security Bulletin: Multiple security vulnerabilities affect IBM WebSphere Application Server for Bluemix (CVE-2016-5573, CVE-2016-5597, CVE-2016-8934) ***
---------------------------------------------
There are multiple vulnerabiltities in the IBM® SDK Java™ Technology Edition that is shipped with IBM WebSphere Application Server. These issues were disclosed as part of the IBM SDK for Java updates in October ..
---------------------------------------------
http://www.ibm.com/support/docview.wss?uid=swg21995995




*** IBM Security Bulletin: GNU C library (glibc) vulnerabilities affect IBM Security Network Active Bypass (CVE-2016-3706, CVE-2016-4429) ***
---------------------------------------------
GNU C library (glibc) vulnerabilities were found that affect IBM Security Network Active Bypass. CVE(s): CVE-2016-3706, CVE-2016-4429 Affected product(s) and affected version(s): IBM Security ..
---------------------------------------------
http://www-01.ibm.com/support/docview.wss?uid=swg21996174




*** IBM Security Bulletin: Vulnerabilies (17 total), in Oracle Outside In Technology (OIT) affect FileNet Content Manager, and IBM Content Foundation ***
---------------------------------------------
http://www.ibm.com/support/docview.wss?uid=swg21988553




*** IBM Security Bulletin: Vulnerability in Apache PDFBox affects FileNet Content Manager and IBM Content Foundation (CVE-2016-2175) ***
---------------------------------------------
Security vulnerabilitiy exists in Apache PDFBox that affects IBM FileNet Content Manager and IBM Content ..
---------------------------------------------
http://www.ibm.com/support/docview.wss?uid=swg21987188




*** 33C3: Bitcoin-Automaten sind noch kein lohnendes Angriffsziel ***
---------------------------------------------
Sicherheitsexperten haben auf dem Hamburger Hackertreffen beklagt, dass bei klassischen Geldautomaten weiterhin große Sicherheitslücken bestehen. Bitcoin-Tauschmaschinen hingegen seien für Kriminelle noch uninteressant.
---------------------------------------------
https://heise.de/-3582875