SecurityFocus Newsletter #194 2003-4-21->2003-4-25

To: bugtraq-jp@securityfocus.com
Subject: SecurityFocus Newsletter #194 2003-4-21->2003-4-25
From: Yasuhiro Nishimura <y.nisimr@lac.co.jp>
Date: Wed, 7 May 2003 18:17:20 +0900
Delivered-To: mailing list bugtraq-jp@securityfocus.com
Delivered-To: moderator for bugtraq-jp@securityfocus.com
List-Help: <mailto:bugtraq-jp-help@securityfocus.com>
List-Id: <bugtraq-jp.list-id.securityfocus.com>
List-Post: <mailto:bugtraq-jp@securityfocus.com>
List-Subscribe: <mailto:bugtraq-jp-subscribe@securityfocus.com>
List-Unsubscribe: <mailto:bugtraq-jp-unsubscribe@securityfocus.com>
Mailing-List: contact bugtraq-jp-help@securityfocus.com; run by ezmlm
References: <Pine.LNX.4.43.0304281417550.3774-100000@mail.securityfocus.com>
$B@>B<(B@$B%i%C%/$G$9!#(B

SecurityFocus Newsletter $BBh(B 194 $B9f$NOBLu$r$*FO$1$7$^$9!#(B
$BLu$N$J$$9`L\$K$D$$$F$O!VF|K\8lLu$J$7!W$H$7$F6hJL$7$F$"$j$^$9!#(B

---------------------------------------------------------------------------
BugTraq-JP $B$K4X$9$k(B FAQ($BF|K\8l(B):
http://www.securityfocus.com/popups/forums/bugtraq-jp/faq.shtml
$B!&(BSecurityFocus Newsletter $B$NOBLu$O(B BugTraq-JP $B$G0lH$/$@$5$$(B
---------------------------------------------------------------------------
---------------------------------------------------------------------------
SecurityFocus Newsletter $B$K4X$9$k(BFAQ($B1Q8l(B):
http://www.securityfocus.com/popups/forums/securityfocusnews/intro.shtml
BugTraq $B$K4X$9$k(B FAQ($B1Q8l(B):
http://www.securityfocus.com/popups/forums/bugtraq/faq.shtml
---------------------------------------------------------------------------
$B0zMQ$K4X$9$kHw9M(B:
$B!&$3$NOBLu$O(B SecurityFocus $B$N5v2D$r3t<02qe$G9T$o$l$F$$$^$9!#(B
$B!&(BSecurityFocus Newsletter $B$NOBLu$r(B Netnews, Mailinglist, World Wide Web,
  $B=q@R(B, $B$=$NB>$N5-O?G^BN$G0zMQ$5$l$k>l9g$K$O%a!<%k$NA4J80zMQ$r$*4j$$$7$^$9!#(B
$B!&F|K\8lHG%K%e!<%9%l%?!<(B 1 $B9f$+$i(B 3 $B9f$^$G$K$O$3$NHw9M$,IU$$$F$$$^$;$s$,!"(B
  $B=`MQ$9$k$b$N$H$7$^$9!#(B
$B!&$^$?!"(BSecurityFocus $BDs6!$N(B BugTraq-JP $B%"!<%+%$%V(B [*1] $B$X$N$$$+$J$k7A<0$N(B
  $B%O%$%Q!<%j%s%/$b>e5-$K=`$8$F$/$@$5$$!#(B
1) http://online.securityfocus.com/archive/79
---------------------------------------------------------------------------
$B$3$NOBLu$K4X$9$kHw9M(B:
$B!&$3$NOBLu$NE,MQ@.2L$K$D$$$F3t<02ql9g!"(BBugTraq-JP $B$X(B Errata $B$H$7$F=$@5(B
  $BHG$r$4Ej9FD:$/$+!"4F=$l9g$K$O=$@5HG$r$G$-$k$@$1?WB.$KH/9T$7$^$9!#(B
---------------------------------------------------------------------------
This translation is encoded and posted in ISO-2022-JP.

$B86HG(B:
Date: Mon, 28 Apr 2003 14:18:48 -0600 (MDT)
Message-ID: <Pine.LNX.4.43.0304281417550.3774-100000@mail.securityfocus.com>

SecurityFocus Newsletter #194
-----------------------------

This issue is sponsored by: FastTrain

I. FRONT AND CENTER($BF|K\8lLu$J$7(B)
     1. Auditing Web Site Authentication
     2. Anti-Virus Defence In Depth
     3. Al-Jazeera, the First Amendment, and Security Professionals
     4. Secure by Default
     5. SecurityFocus DPP Program
II. BUGTRAQ SUMMARY
     1. Xinetd Rejected Connection Memory Leakage Denial Of Service...
     2. Central Command Vexira Antivirus Buffer Overflow Vulnerability
     3. Microsoft Internet Explorer CLASSID Variant Denial Of Service...
     4. Microsoft Windows SMB NTLM Authentication Interception...
     5. Microsoft Windows Service Control Manager Race Condition...
     6. Working Resources BadBlue Ext.DLL Command Execution Vulnerability
     7. MPCSoftWeb Guest Book HTML Injection Vulnerability
     8. MPCSoftWeb Database Disclosure Vulnerability
     9. 360 Degree Web PlatinumKey Access Control Bypass Information...
     10. 360 Degree Web PlatinumKey Access Control Bypass Application...
     11. Mod_NTLM Authorization Heap Overflow Vulnerability
     12. Mod_NTLM Authorization Format String Vulnerability
     13. PT News Unauthorized Administrative Access Vulnerability
     14. AN HTTPD Count.pl Directory Traversal Vulnerability
     15. Xeneo Web Server Denial Of Service Vulnerability
     16. HP TruCluster Server Cluster Alias/NFS Denial of Service...
     17. YaBB SE Language Remote File Include Vulnerability
     18. Microsoft Shlwapi.dll Malformed HTML Form Tag DOS...
     19. OpenBB Index.PHP Remote SQL Injection Vulnerability
     20. OpenBB Board.PHP Remote SQL Injection Vulnerability
     21. OpenBB Member.PHP Remote SQL Injection Vulnerability
     22. MIME-Support Package Insecure Temporary File Creation...
     23. XMB Forum Members.PHP SQL Injection Vulnerability
     24. SAP Database Development Tools INSTDBMSRV INSTROOT Environment...
     25. SAP Database Development Tools INSTLSERVER INSTROOT...
III. SECURITYFOCUS NEWS ARTICLES
     1. DirecTV Mole to Plead Guilty
     2. Verizon loses RIAA piracy case
     3. Judge rejects constitutional challenge over Internet...
     4. Trojan defence clears man on child porn charges
IV. SECURITYFOCUS TOP 6 TOOLS
     1. Crash Core Analysis Suite v3.3
     2. In Memory Core Dump v3.1.4
     3. cosign v1.0.0
     4. FloodGuard Alert v2_2p3
     5. heartbeat v0.1
     6. fwsnort v0.1

I. FRONT AND CENTER($BF|K\8lLu$J$7(B)
---------------------------------

II. BUGTRAQ SUMMARY
-------------------
1. Xinetd Rejected Connection Memory Leakage Denial Of Service Vulnerability
BugTraq ID: 7382
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Apr 18 2003 12:00AM
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/7382
$B$^$H$a(B:

xinetd $B$O(B inetd $B$N%;%-%e%"$JCV$-49$(HG$r0U?^$H$7$F3+H/$5$l$?%=%U%H%&%'%"(B
$B$G$"$j!"(BLinux $B$*$h$S(B UNIX $BM3Mh$N(B OS $B$GMxMQ2DG=$J$h$&$K@_7W$5$l$F$$$k!#(B

$B$3$N%=%U%H%&%'%"$K$O%5!<%S%9ITG=>uBV$K4Y$kLdBj$,B8:_$9$k$HJs9p$5$l$F$$$k!#(B
$B$3$NLdBj$O$3$N%=%U%H%&%'%"$X$N@\B3$,5qH]$5$l$k:]!"%a%b%j%j!<%/$,H/@8$9$k(B
$B$3$H$K5/0x$9$k!#Js9p$K$h$k$H!"$3$NLdBj$O(B service.c $BFb$N(B svc_request() $B4X(B
$B?t$GH/@8$7!"$3$N4X?tFb$G3NJ]$5$l$?%a%b%j$N$&$A$$$/$D$+$O!"@\B3$,5qH]$5$l(B
$B$k:]$KE,@Z$K2rJ|$5$l$J$$!#(B

$B967buBV$K4Y$k!#(B

$B$3$NLdBj$O(B 2.3.11 $B$h$jA0$N(B Xinted $B$KB8:_$9$k$HJs9p$5$l$F$$$k!#(B

2. Central Command Vexira Antivirus Buffer Overflow Vulnerability
BugTraq ID: 7383
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: Apr 18 2003 12:00AM
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/7383
$B$^$H$a(B:

Vexira Antivirus $B$O(B Central Command $B$K$h$C$FHNGd$5$l$F$$$k(B Linux $BM3Mh$N(B 
OS $BMQ$N%&%$%k%9BP:v%=%U%H%&%'%"$G$"$k!#(B

$BJs9p$K$h$k$H!"$3$N%=%U%H%&%'%"$K$O%P%C%U%!%*!<%P%U%m!<$,H/@8$9$kLdBj$,B8(B
$B:_$7!"7k2L$H$7$F8"8B$r>:3J$5$l$k2DG=@-$,$"$k!#(B

$B%m!<%+%k$N967b/$J(B
$B$/$H$b(B 280 $BJ8;z0J>e$N2aEY$KD9$$0z?t$rM?$($k$3$H$K$h$j!"$3$NLdBj$rMxMQ$7(B
$B$?967b$,2DG=$G$"$k!#$3$N%P%$%J%j%W%m%0%i%`$,F~NO$5$l$?0z?t$r=hM}$7$h$&$H(B
$B$9$k:]!"%P%C%U%!%*!<%P%U%m!<$,H/@8$7!"$3$N%=%U%H%&%'%"$O%/%i%C%7%e$9$k!#(B

$BL$8!>Z$G$O$"$k$,!"$3$NLdBj$rMxMQ$7$?967b$K$h$j967b3. Microsoft Internet Explorer CLASSID Variant Denial Of Service Vulnerability
BugTraq ID: 7384
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Apr 18 2003 12:00AM
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/7384
$B$^$H$a(B:

Microsoft Internet Explorer $B$O!"0-0U$"$k(B Web $B%5%$%H$N4IM}pJs$rDs6!$9$k%f%K!<%/$J<1JL%3!<%I(B
$B$G$"$k!#$3$N%=%U%H%&%'%"$NFCDj$N%P!<%8%g%s$G$O!"(BOBJECT $B%?%0$N0lIt$H$7$F(B 
CLASSID $B$NCM$r4^$a$k$3$H$,2DG=$G$"$k!#(B

Web $B%Z!<%8$,FCJL$J(B CLASSID $B$NCM$r4^$s$G$*$j!"%f!<%6$,$3$N(B Web $B%Z!<%8$r1\(B
$BMw$7$h$&$H;n$_$?>l9g!"$3$N%=%U%H%&%'%"$O%/%i%C%7%e$9$k$HJs9p$5$l$F$$$k!#(B
$BLdBj$NH/@88;$G$"$k(B CLASSID $B$O(B CLSID:0CF32AA1-7571-11D0-93C4-00AA00A3DDEA 
$B$G$"$k$H$N$3$H$G$"$k$,!"B>$N(B CLASSID $B$NCM$b$3$NLdBj$KMxMQ$5$l$k2DG=@-$,(B
$B$"$k!#(B

$B$3$NLdBj$O(B Windows 2000 $B$H(B XP $B$GF0:n$7$F$$$k(B Internet Explorer $B$NFCDj$N(B
$B%P!<%8%g%s$GH/@8$9$k$HJs9p$5$l$F$$$k!#$3$NLdBj$,$3$N%=%U%H%&%'%"$r2TF0$5(B
$B$;$F$$$k(B OS $B$NFC@-$H4XO"@-$,$"$k$+$I$&$+$OL$>\$G$"$k!#(B

$B$3$NLdBj$O!"(BInternet Explorer 6.0 SP1 $B$K1F6A$,$"$k$HJs9p$5$l$F$$$k!#(B

4. Microsoft Windows SMB NTLM Authentication Interception Weakness
BugTraq ID: 7385
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Apr 19 2003 12:00AM
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/7385
$B$^$H$a(B:

Microsoft Windows $B$O%M%C%H%o!<%/>e$N(B Microsoft $BZ(B
$B$K(B SMB $B%W%m%H%3%k$rMxMQ$9$k!#(B

$BJs9p$K$h$k$H!"(BMicrosoft Windows $B$K$O!"967b5. Microsoft Windows Service Control Manager Race Condition Vulnerability
BugTraq ID: 7386
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: Apr 20 2003 12:00AM
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/7386
$B$^$H$a(B:

$BJs9p$K$h$k$H!"(BMicrosoft Service Control Manager (SCM) $B$K$O!"6%9g>uBV$K4Y(B
$B$kLdBj(B (race condition error) $B$,B8:_$9$k!#(BSCM $B$O%$%s%9%H!<%k$5$l$?%5!<%S(B
$B%9$N>pJs$N5-O?$H4IM}$r9T$&!#(B

$B%3%s%T%e!<%?$,%7%c%C%H%@%&%s$5$l$k:]!"(BSCM $B$O%7%c%C%H%@%&%s$NA0$K%G!<%?$N(B
$B@0M}$rI,MW$H$9$k%5!<%S%9$rDs6!$7$F$$$k%=%U%H%&%'%"$KBP$7%3%s%H%m!<%k%3!<(B
$B%I(B SERVICE_CONTROL_SHUTDOWN $B$rAw?.$9$k!#(BSCM $B$O%3%s%T%e!<%?$N%7%c%C%H%@%&(B
$B%s$r7QB3$9$kA0$K!"FCDj$N@)8B;~4V!"%5!<%S%9$rDs6!$7$F$$$k%=%U%H%&%'%"$,Dd(B
$B;_$9$k$N$rBT$D!#$b$7!"FCDj$N@)8B;~4VFb$K%5!<%S%9$,@5>o$KDd;_$5$l$J$+$C$?(B
$B>l9g!"6%9g>uBV$K4Y$k2DG=@-$,$"$k!#(B

$B6%9g>uBV$K4Y$k$3$H$K$h$j!"L5:n0Y$K%-%c%C%7%e$5$l$F$$$?%G!<%?$,!"%5!<%S%9(B
$BDd;_$N@)8B;~4V$,2a$.$?:]$K$^$@3+$+$l$F$$$k%U%!%$%k$K=q$-9~$^$l$k!#:G0-$N(B
$B>l9g!"L5:n0Y$KA*$P$l$?4IM}MQ%5!<%S%9$K4X$9$k=EMW$J%G!<%?$,8"8B$NDc$$%5!<(B
$B%S%9$N=PNO%U%!%$%k$K=q$-9~$^$l$k!#$3$l$K$h$j!"$3$l$i$N=PNO%U%!%$%k$X$N%"(B
$B%/%;%98"$r;}$D%m!<%+%k%f!<%6$K=EMW$J%G!<%?$,O31L$9$k2DG=@-$,$"$k!#$3$NLd(B
$BBj$r0-MQ$9$k$K$O!"0-0U$"$k%m!<%+%k%f!<%6$O:F5/F08e$K3:Ev$9$k=PNO%U%!%$%k(B
$B$r1\Mw$9$kI,MW$,$"$k!#(B

6. Working Resources BadBlue Ext.DLL Command Execution Vulnerability
BugTraq ID: 7387
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Apr 20 2003 12:00AM
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/7387
$B$^$H$a(B:

BadBlue $B$O!"(BWorking Resources $B$K$h$jG[I[$5$l$F$$$k!"(BP2P $B%U%!%$%k6&M-%=%U(B
$B%H%&%'%"$G$"$k!#$3$N%=%U%H%&%'%"$O!"(BMicrosoft Windows $B$GMxMQ2DG=$G$"$k!#(B

$B$3$N%=%U%H%&%'%"$O!"%j%b!<%H$N967b7. MPCSoftWeb Guest Book HTML Injection Vulnerability
BugTraq ID: 7389
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Apr 21 2003 12:00AM
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/7389
$B$^$H$a(B:

MPCSoftWeb Guest Book $B$O!"(BMicrosoft Windows $B$GF0:n$9$k(B Web $B%$%s%?%U%'!<(B
$B%9$rHw$($k%=%U%H%&%'%"$G$"$k!#(B

$B$3$N%=%U%H%&%'%"$O!"%j%b!<%H$N967bZMQ>pJs$N:q$N967b$,2DG=$G$"$k!#(B

8. MPCSoftWeb Database Disclosure Vulnerability
BugTraq ID: 7390
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Apr 21 2003 12:00AM
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/7390
$B$^$H$a(B:

MPCSoftWeb Guest Book $B$O!"(BMicrosoft Windows $B$GF0:n$9$k(B Web $B%$%s%?%U%'!<(B
$B%9$rHw$($?%=%U%H%&%'%"$G$"$j!"%P%C%/%(%s%I%G!<%?%Y!<%9$H$7$F(B Microsoft
Access $B%G!<%?%Y!<%9$rMQ$$$k!#(B

$B$3$N%=%U%H%&%'%"$O!"%G!<%?%Y!<%9%U%!%$%k$N0BA4BP:v$,IT==J,$G$"$k!#$3$NLd(B
$BBj$O!"%j%b!<%H$N%f!<%6$K$h$k%G!<%?%Y!<%9%U%!%$%k$N%j%/%(%9%H$rKI$0$?$a$N(B
$B%"%/%;%9%3%s%H%m!<%k$,IT==J,$G$"$k$3$H$K5/0x$9$k!#%j%b!<%H$N967bZMQ>pJs$H$$$C$?=EMW$J>pJs$rF~9. 360 Degree Web PlatinumKey Access Control Bypass Information Disclosure Vulnerability
BugTraq ID: 7391
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: Apr 21 2003 12:00AM
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/7391
$B$^$H$a(B:

PlatinumKey $B$O!"(B360 Degree Web $B$,HNGd$7$F$$$k!"%9%^!<%H%+!<%I$r0BA4$KMx(B
$BMQ$9$kl9g!"%G%9%/%H%C%W$X$N%"%/%;%9@)8B$,IT==J,$G$"$k!#$3$NLdBj$K$h$j!"967b(B
$BpJs$K%"%/%;%92DG=$G$"$k$H?d;!$5$l$k!#(B

$B$3$NLdBj$O!"FCDj$N%-!<%7!<%1%s%9$N=hM}$KB8:_$9$k!#(BControl-Escape $B%-!<%7!<(B
$B%1%s%9$,F~NO$5$l$?:]!"(BWindows $B%?%9%/%P!<$,I=<($5$l$k!#967bu67(B
$B$r0-MQ$7$F!":G6a;H$C$?%"%W%j%1!<%7%g%s$*$h$S:G6a;H$C$?J8=q$K4X$9$k>pJs$r(B
$BF~e$GH/@8$9$k$HJs9p$5$l$F$$$k!#$^$?!"F1MM$N@_Dj$GF1%=%U%H%&%'%"$r(B
$B;HMQ$7$F$$$kB>$N%i%C%W%H%C%W7?%3%s%T%e!<%?$K$b1F6A$,$"$k2DG=@-$,$"$k!#(B

10. 360 Degree Web PlatinumKey Access Control Bypass Application Execution Vulnerability
BugTraq ID: 7392
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: Apr 21 2003 12:00AM
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/7392
$B$^$H$a(B:

PlatinumKey $B$O!"(B360 Degree Web $B$,HNGd$7$F$$$k!"%9%^!<%H%+!<%I$r0BA4$KMx(B
$BMQ$9$kl9g!"%G%9%/%H%C%W$X$N%"%/%;%9@)8B$,IT==J,$G$"$k!#$3$NLdBj$K$h$j!"967b(B
$Bu67(B
$B$r0-MQ$7$F!":G6a;H$C$?%"%W%j%1!<%7%g%s$N%"%$%3%s$K%"%/%;%92DG=$G$"$k!#$h(B
$B$/;H$o$l$k%"%W%j%1!<%7%g%s$N%a%K%e!<$KI=<($5$l$?%"%W%j%1!<%7%g%s$N$$$:$l(B
$B$+$r%/%j%C%/$9$k$3$H$K$h$j!"967b\$G$"$k!#$7$+$7!"%;%C%7%g%s$r%m%C%/$7$F$$$k%f!<%6$N8"8B$G!"$=$N%"(B
$B%W%j%1!<%7%g%s$,e$GH/@8$9$k$HJs9p$5$l$F$$$k!#$^$?!"F1MM$N@_Dj$GF1%=%U%H%&%'%"$r(B
$B;HMQ$7$F$$$kB>$N%i%C%W%H%C%W7?%3%s%T%e!<%?$K$b1F6A$,$"$k2DG=@-$,$"$k!#(B

11. Mod_NTLM Authorization Heap Overflow Vulnerability
BugTraq ID: 7388
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Apr 21 2003 12:00AM
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/7388
$B$^$H$a(B:

mod_ntlm $B$O!"(BNTLM $BG'>Z$re$G2TF0$7$F$$$k(B Apache 2.0.x $B$*$h$S(B 1.3.x $B$GMxMQ2DG=$G$"$k!#(B

$BJs9p$K$h$k$H!"$3$N%b%8%e!<%k$O%R!<%W%*!<%P!<%U%m!<$,H/@8$9$kLdBj$rJz$($F(B
$B$$$k5?$$$,$"$k!#(B

$B$3$NLdBj$O%R!<%W%a%b%jFb$N(B 2048 $B%P%$%H$N%P%C%U%!$K3JG<$5$l$k!"%f!<%6$,6!(B
$B5k$9$k%G!<%?$KBP$9$k6-3&%A%'%C%/$,IT==J,$G$"$k$3$H$K5/0x$9$k!#(B

$B6qBNE*$K$O!"$3$N%b%8%e!<%k$N(B 'log()' $B4X?tFb$K$*$$$F!"%;%-%e%"$G$J$$J}K!(B
$B$G(B 'vsprintf()' $B4X?t$,8F$S=P$5$l$k!#(B'vsprintf()' $B4X?t$N8F$S=P$7$K$h$j!"(B
$B==J,$J6-3&%A%'%C%/$,9T$o$l$:$K!"%f!<%6$K$h$C$FM?$($i$l$kG'>ZMQ%G!<%?$,%3(B
$B%T!<$5$l$k!#$=$N$?$a!"2aBg$J%G!<%?$,$3$N(B 2048 $B%P%$%H$N%P%C%U%!$K%3%T!<$5(B
$B$l!"7k2L$H$7$F!"=EMW$J%a%b%j4IM}MQ>pJs$NGK2u$K;j$k2DG=@-$,$"$k!#(B

$B967bZ$G$"$k$,!"$3$l$h$jA0(B
$B$N%P!<%8%g%s$b1F6A$r12. Mod_NTLM Authorization Format String Vulnerability
BugTraq ID: 7393
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Apr 21 2003 12:00AM
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/7393
$B$^$H$a(B:

mod_ntlm $B$O!"(BNTLM $BG'>Z$re$G2TF0$7$F$$$k(B Apache 2.0.x $B$*$h$S(B 1.3.x $B$GMxMQ2DG=$G$"$k!#(B

$B$3$N%b%8%e!<%k$K$O!"=q<0;XDj;R$r4^$`J8;zNs$NZMQ>pJs$N=hM};~$KH/@8$9$k!#(B

$B$3$NLdBj$O!"(Blog() $B4X?t$K$h$k(B ap_log_rerror() $B4X?t$N8F$S=P$7$N:]$K!"=q<0(B
$B;XDj0z?t$,4^$^$l$J$$$3$H$+$iH/@8$9$k!#7k2L$H$7$F!"%j%b!<%H$N967bZMQ%G!<%?Fb$K967buBV$K4Y$k$N$_$H$J$k2DG=@-$,$"$k!#(B

$B$3$NLdBj$O!"(Bmod_ntlm 0.4 $B0JA0(B $B$*$h$S(B mod_ntlm2 0.1 $B$KB8:_$9$k$HJs9p$5$l(B
$B$F$$$k!#(B

13. PT News Unauthorized Administrative Access Vulnerability
BugTraq ID: 7394
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Apr 21 2003 12:00AM
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/7394
$B$^$H$a(B:

PT News $B$O!"(BWeb $B%V%i%&%6$G;HMQ$G$-$k%K%e!<%95!G=$rDs6!$9$k%=%U%H%&%'%"$G(B
$B$"$k!#$3$N%=%U%H%&%'%"$O!"(BPHP $B$K$h$C$F3+H/$5$l$F$*$j!"(BMicrosoft Windows$B!"(B
Linux/Unix $BM3Mh$N(B OS $B$GMxMQ2DG=$G$"$k!#(B

$B$3$N%=%U%H%&%'%"$O!"%j%b!<%H$N%f!<%6$,K\Mh%"%/%;%98"$r;}$C$F$$$J$$$K$b$+(B
$B$+$o$i$:4IM}5!G=$K%"%/%;%9$9$k$3$H$rKI$0BP:v$,IT==J,$G$"$k!#$3$NLdBj$O!"(B
$B$3$N%=%U%H%&%'%"$NMM!9$J4IM}5!G=$rM-$9$k(B 'news.inc' $B%U%!%$%k$r%$%s%/%k!<(B
$B%I$9$k(B 'index.php' $B%9%/%j%W%H$K5/0x$9$k!#%j%b!<%H$N%f!<%6$O!"(B'index.php' 
$B%9%/%j%W%H$r2p$7$F(B 'news.inc' $B$N4IM}5!G=$K%"%/%;%9$9$k2DG=@-$,$"$k!#(B

$B$3$NLdBj$rMxMQ$7$?967b$K$h$j!"%j%b!<%H$N967b14. AN HTTPD Count.pl Directory Traversal Vulnerability
BugTraq ID: 7397
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Apr 22 2003 12:00AM
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/7397
$B$^$H$a(B:

AN HTTPD $B$O(B Microsoft Windows $B4D6-$G2TF0$9$k$h$&$K@_7W$5$l$?!"(BWeb $B%5!<%P(B
$B$G$"$k!#(B

$B$3$N%=%U%H%&%'%"$O!"(BWeb $B>e$G%"%/%;%9%+%&%s%?$H$7$F;HMQ$5$l$k(B count.pl $B$H(B
$B$$$&L>$N(B $B%5%s%W%k%9%/%j%W%H$rF1:-$7$F$$$k!#$3$N%9%/%j%W%H$O!"%+%&%s%?$N(B
$B?tCM$r3JG<$9$k$?$a$N0z?t$H$7$F!"%Q%9$*$h$S%U%!%$%kL>$r$H$k!#(B

$B$3$N%9%/%j%W%H$O!"%G%#%l%/%H%j$N;2>H$K4X$9$kJ8;zNs(B (../) $B$,4^$^$l$?!"%f!<(B
$B%6$K$h$C$FM?$($i$l$k%Q%9$KBP$9$kF~NOCM$NBEEv@-3NG'$,IT==J,$G$"$k!#LdBj$r(B
$BJz$($k%9%/%j%W%H$O!"(BHTTP $B%j%/%(%9%H$KI8E*$H$9$k%U%!%$%kL>$*$h$S%Q%9$r4^(B
$B$a$k$3$H$K$h$j!"(B'CGI' $B$rF0:n$5$;$k%f!<%6$,=q$-9~$_8"8B$r;}$D!"%7%9%F%`>e(B
$B$N0U?^$7$?%U%!%$%k$r>e=q$-$9$k$?$a$K0-MQ$5$l$k2DG=@-$,$"$k!#(B

'CGI' $B$rF0:n$5$;$k%f!<%6$O!"E57?E*$K%G%U%)%k%H$G!"(BSystem $B%l%Y%k$N8"8B$r(B
$B=j;}$7$F$$$k!#7k2L$H$7$F!"967b15. Xeneo Web Server Denial Of Service Vulnerability
BugTraq ID: 7398
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Apr 22 2003 12:00AM
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/7398
$B$^$H$a(B:

Xeneo Web Server $B$O!"(BMicrosoft Windows $B4D6-$GF0:n$9$k(B Web $B%5!<%P$G$"$j!"(B
ASP$B!"(BPHP$B!"(BColdFusion$B!"(BPerl$B!"(BCGI$B!"$*$h$S(B ISAPI $B$r%5%]!<%H$9$k!#(B

$BJs9p$K$h$k$H!"$3$N%=%U%H%&%'%"$O%5!<%S%9ITG=>uBV$K4Y$kLdBj$rJz$($F$$$k5?(B
$B$$$,$"$k!#(B

$B$3$NLdBj$O!"(B4096 $B%P%$%H$rD6$($k%G!<%?$r4^$`0-0U$"$k(B HTTP GET $B%j%/%(%9%H(B
$B$K$h$j0z$-5/$3$5$l$k$HJs9p$5$l$F$$$k!#6qBNE*$K$O!"967buBV$K4Y(B
$B$k2DG=@-$,$"$k!#(B

$B$"$/$^$G$bL$8!>Z$G$O$"$k$,!"$3$NLdBj$NK\16. HP TruCluster Server Cluster Alias/NFS Denial of Service Vulnerability
BugTraq ID: 7400
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Apr 22 2003 12:00AM
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/7400
$B$^$H$a(B:

HP $B$O(B Tru64 Unix/TruCluster $B$K$*$1$k(B Cluster Alias $B$*$h$S(B NFS $B%5!<%S%9$K(B
$BB8:_$9$k%5!<%S%9ITG=>uBV$K4Y$kLdBj$rJs9p$7$?!#$3$NLdBj$O!"(BTruCluster $B%7(B
$B%9%F%`$K4^$^$l$k(B Cluster Alias $B$*$h$S(B NFS $B%5!<%S%9$K$h$k0-0U$"$k%M%C%H%o!<(B
$B%/%H%i%U%#%C%/$N=hM}J}K!$KB8:_$9$k$H?d;!$5$l$k!#(B

$B$3$NLdBj$rMxMQ$7$?967b$,@.8y$7$?>l9g!"%j%b!<%H$N967b\:Y>pJs$O!"8=;~E@$G$OL$>\$G$"$k!#K\(B BID 
$B$O>\:Y>pJs$,8x3+$5$l17. YaBB SE Language Remote File Include Vulnerability
BugTraq ID: 7399
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Apr 22 2003 12:00AM
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/7399
$B$^$H$a(B:

YaBB SE $B$O%U%j!<$KMxMQ2DG=$J%*!<%W%s%=!<%9$N(B Yet Another Bulletin Board
(YaBB) $B$N0\?"HG$G$"$k!#$3$N%=%U%H%&%'%"$O(B UNIX$B!"(BLinux$B!"(BMicrosoft Windows 
$B$r4^$`MM!9$J4D6-$GMxMQ2DG=$G$"$k!#(B

$B$3$N%=%U%H%&%'%"$O!"0-0U$"$k7G<(HD%f!<%6$K$h$k8@8l%U%!%$%k$N%$%s%/%k!<%I(B
$B%Q%9$N2~JQ$r5v$7$F$7$^$&!#EPO?:Q$_%f!<%6$O!"(B"Change Profile" $B%*%W%7%g%s(B
$B$r2p$7$F!"8@8l%U%!%$%k$N%$%s%/%k!<%I%Q%9$r2~JQ$9$k2DG=@-$,$"$k!#0-0U$"$k(B
$B%f!<%6$O!"30It$N%3%s%T%e!<%?>e$N0-0U$"$k(B PHP $B%9%/%j%W%H$r;2>H$9$k%$%s%/(B
$B%k!<%I%Q%9$r@_Dj2DG=$G$"$k!#7k2L$H$7$F!"$3$NLdBj$K$h$j(B Web $B%5!<%P$N18. Microsoft Shlwapi.dll Malformed HTML Form Tag Denial of Service Vulnerability
BugTraq ID: 7402
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Apr 22 2003 12:00AM
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/7402
$B$^$H$a(B:

shlwapi.dll $B$O!"$$$/$D$+$N%7%'%k4X?t$r%(%/%9%]!<%H$9$k%@%$%J%_%C%/%j%s%/(B
$B%i%$%V%i%j$G$"$k!#(BInternet Explorer $B$d(B Front Page $B$H$$$C$?$$$/$D$+$N%"%W(B
$B%j%1!<%7%g%s$O!"(BHTML $B%3%s%F%s%D$r2r.J8;z$r6hJL$7$J$$Hf3S=hM}$,860x$G$"$k$H(B
$B?d;!$5$l$k!#0-0U$"$k%?%0$K5/0x$7$F!"(B2 $B$D$NJ8;zNs$NJRJ}$,(B NULL $B%]%$%s%?$H(B
$B$J$k!#7k2L$H$7$F!"Hf3S$r;n$_$?:]$KNc30$,H/@8$9$k!#(B

$B%U%)%k%@%*%W%7%g%s$K$*$$$F(B "$B%U%)%k%@$G(B Web $B%3%s%F%s%D$r;H$&(B" $B$,A*Br$5$l(B
$B$F$$$k>l9g!"%m!<%+%k%U%!%$%k%7%9%F%`>e$K@_CV$5$l$?0-0U$"$k%?%0$r4^$s$@(B 
HTML $B%Z!<%8$K$h$j!"(Bexplorer.exe $B$,5!G=ITG=$K$J$k2DG=@-$,$"$k$HJs9p$5$l$F(B
$B$$$k!#(B

19. OpenBB Index.PHP Remote SQL Injection Vulnerability
BugTraq ID: 7401
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Apr 22 2003 12:00AM
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/7401
$B$^$H$a(B:

OpenBB $B$O!"%U%j!<$KMxMQ2DG=$J!"%*!<%W%s%=!<%9$N7G<(HD5!G=$rDs6!$9$k%=%U(B
$B%H%&%'%"%Q%C%1!<%8$G$"$k!#$3$N%=%U%H%&%'%"$O!"(BUnix$B!"(BLinux$B!"$*$h$S(B 
Microsoft Windows $B$GMxMQ2DG=$G$"$k!#(B

$B$3$N%=%U%H%&%'%"$,Jz$($kLdBj$K$h$j!"%j%b!<%H$N967bl9g$N1F6AHO0O(B
$B$O!"$=$N%3%s%T%e!<%?>e$N%G!<%?%Y!<%9$NpJs$N(B
$BO31L!"$"$k$$$O7G<(HD$^$?$O%G!<%?%Y!<%9<+BN$X$N%j%b!<%H$+$i$N%;%-%e%j%F%#(B
$B$N6<0R$r>7$/2DG=@-$,$"$k!#(B

$B$3$NLdBj$O!"(BOpenBB 1.1.0 $B$KB8:_$9$k$HJs9p$5$l$F$$$k!#$?$@$7!"%Y%s%@$,8x(B
$BI=$7$F$$$k8=:_MxMQ2DG=$J%P!<%8%g%s$O(B 1.0.5 $B$G$"$k!#$3$NLdBj$O!"Js9p$5$l(B
$B$?%P!<%8%g%s$*$h$S$3$l$h$jA0$N%P!<%8%g%s$K1F6A$rM?$($k2DG=@-$,$"$k!#(B

20. OpenBB Board.PHP Remote SQL Injection Vulnerability
BugTraq ID: 7404
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Apr 22 2003 12:00AM
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/7404
$B$^$H$a(B:

OpenBB $B$O!"%U%j!<$KMxMQ2DG=$J!"%*!<%W%s%=!<%9$N7G<(HD5!G=$rDs6!$9$k%=%U(B
$B%H%&%'%"%Q%C%1!<%8$G$"$k!#$3$N%=%U%H%&%'%"$O!"(BUnix$B!"(BLinux$B!"$*$h$S(B 
Microsoft Windows $B$GMxMQ2DG=$G$"$k!#(B

$B$3$N%=%U%H%&%'%"$,Jz$($kLdBj$K$h$j!"%j%b!<%H$N967bl9g$N1F6AHO0O(B
$B$O!"$=$N%3%s%T%e!<%?>e$N%G!<%?%Y!<%9$NpJs$N(B
$BO31L!"$"$k$$$O7G<(HD$^$?$O%G!<%?%Y!<%9<+BN$X$N%j%b!<%H$+$i$N%;%-%e%j%F%#(B
$B$N6<0R$r>7$/2DG=@-$,$"$k!#(B

$B$3$NLdBj$O!"(BOpenBB 1.1.0 $B$KB8:_$9$k$HJs9p$5$l$F$$$k!#$?$@$7!"%Y%s%@$,8x(B
$BI=$7$F$$$k8=:_MxMQ2DG=$J%P!<%8%g%s$O(B 1.0.5 $B$G$"$k!#$3$NLdBj$O!"Js9p$5$l(B
$B$?%P!<%8%g%s$*$h$S$3$l$h$jA0$N%P!<%8%g%s$K1F6A$rM?$($k2DG=@-$,$"$k!#(B

21. OpenBB Member.PHP Remote SQL Injection Vulnerability
BugTraq ID: 7405
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Apr 22 2003 12:00AM
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/7405
$B$^$H$a(B:

OpenBB $B$O%U%j!<$KMxMQ2DG=$J!"%*!<%W%s%=!<%9$N7G<(HD5!G=$rDs6!$9$k%=%U%H(B
$B%&%'%"$G$"$k!#$3$N%=%U%H%&%'%"$O!"(BUnix$B!"(BLinux$B!"$*$h$S(B Microsoft Windows 
$B$GMxMQ2DG=$G$"$k!#(B

$B$3$N%=%U%H%&%'%"$,Jz$($kLdBj$K$h$j!"%j%b!<%H%f!<%6$O%G!<%?%Y!<%9$X$N(B SQL 
$B%/%(%j$N2~JQ$,2DG=$K$J$k$H?d;!$5$l$k!#(B

$BJs9p$K$h$k$H!"$3$N%=%U%H%&%'%"$O(B 'member.php' $B%9%/%j%W%H$r2p$7$FEO$5$l$k(B
$BF~NOCM$N3NG'$,IT==J,$G$"$k!#$3$NLdBj$K$h$j!"%j%b!<%H$N967bl9g$N1F6AHO0O(B
$B$O!"$=$N%3%s%T%e!<%?>e$N%G!<%?%Y!<%9$NpJs$N(B
$BO31L!"$"$k$$$O7G<(HD$^$?$O%G!<%?%Y!<%9<+BN$X$N%j%b!<%H$+$i$N%;%-%e%j%F%#(B
$B$N6<0R$r>7$/2DG=@-$,$"$k!#(B

$B$3$NLdBj$O!"(BOpenBB 1.1.0 $B$KB8:_$9$k$HJs9p$5$l$F$$$k!#$?$@$7!"%Y%s%@$,8x(B
$BI=$7$F$$$k8=:_MxMQ2DG=$J%P!<%8%g%s$O(B 1.0.5 $B$G$"$k!#$3$NLdBj$O!"Js9p$5$l(B
$B$?%P!<%8%g%s$*$h$S$3$l$h$jA0$N%P!<%8%g%s$K1F6A$rM?$($k2DG=@-$,$"$k!#(B

22. MIME-Support Package Insecure Temporary File Creation Vulnerability
BugTraq ID: 7403
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: Apr 22 2003 12:00AM
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/7403
$B$^$H$a(B:

mime-support $B$O!"(BLinux $B$GMxMQ2DG=$J$5$^$6$^$J(B MIME $BMQ$N%"%W%j%1!<%7%g%s(B
$B$d%D!<%k$,F1:-$5$l$F$$$k%Q%C%1!<%8$G$"$k!#(B

$B$3$N%Q%C%1!<%8$KF1:-$5$l$F$$$k%"%W%j%1!<%7%g%s(B run-mailcap $B$KLdBj$,B8:_(B
$B$9$k$3$H$,H/8+$5$l$F$$$k!#$3$NLdBj$O!"0l;~%U%!%$%k$r:n@.$9$k:]$NBEEv@-3N(B
$BG'$,IT==J,$G$"$k$3$H$K5/0x$9$k!#(B

/tmp $B%G%#%l%/%H%j$K=EMW$J%7%9%F%`%U%!%$%k$r;X$7<($9%7%s%\%j%C%/%j%s%/$r(B
$B:n@.$7!"$=$N%U%!%$%k$r>e=q$-$9$k$3$H$G!"FC8"$r;}$C$F$$$J$$%f!<%6$,0U?^$7(B
$B$?%U%!%$%k$rGK2u2DG=$K$J$k!#7k2L$H$7$F!"FC8"$r$b$C$F$$$J$$%f!<%6$OI8E*%7(B
$B%9%F%`$r;HMQITG=$K;j$i$7$a$k!"$b$7$/$O8"8B>:3J$,2DG=$K$J$k$H?d;!$5$l$k!#(B

$B$3$NLdBj$O!"(Bmime-support 3.21 $B0JA0$KF1:-$5$l$F$$$k(B run-mailcap $B$K1F6A$,(B
$B$"$k!#(B

23. XMB Forum Members.PHP SQL Injection Vulnerability
BugTraq ID: 7406
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Apr 22 2003 12:00AM
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/7406
$B$^$H$a(B:

XMB Forum $B$O!"(BPHP $B$K$h$C$F3+H/$5$l$F$$$k(B Web $B%$%s%?%U%'!<%9$rHw$($?%G%#(B
$B%9%+%C%7%g%sMQ$NEE;R7G<(HD%=%U%H%&%'%"$G$"$k!#(B

$B$3$N%=%U%H%&%'%"$N(B 'members.php' $B%Z!<%8$K$O!"(BSQL $B9=J8$,CmF~$5$l$kLdBj(B 
(SQL injection vulnerability) $B$K$h$k1F6A$,$"$k$HJs9p$5$l$F$$$k!#$3$N%=%U(B
$B%H%&%'%"$r2TF0$5$;$F$$$k(B Web $B%5!<%P$,(B php.ini $B@_Dj%U%!%$%kFb$G(B 
'register_globals' $B$rM-8z$K$7$F$$$k>l9g!"$3$NLdBj$rMxMQ$7$F967b$5$l$k2D(B
$BG=@-$,$"$k!#(B

$BJs9p$K$h$k$H!"$3$NLdBj$O30It$h$jM?$($i$l$?(B SQL $B%/%(%j$r9=@.$9$k%G!<%?$K(B
$BBP$7==J,$JL5322=$r9T$J$C$F$$$J$$$3$H$K5/0x$9$k!#$3$N%G!<%?$O!"EPO?=hM}$N(B
$B4V$K(B URI $B%Q%i%a!<%?(B '$email1' $B$*$h$S(B '$email2' $B$r2p$7$FM?$($i$l$k2DG=@-(B
$B$,$"$k!#%j%b!<%H$N967bu672<$K$*$$$F!"$3$N%=%U%H%&%'%"$r2TF0$5$;$F$$$k%3%s%T%e!<%?>e$N%G!<(B
$B%?%Y!<%9$KB8:_$9$kLdBj$rMxMQ$9$k967b$r4k$F$k$3$H$b2DG=$G$"$k!#(B

$B$3$NLdBj$O!"(BXMB Forum 1.8 $B$K1F6A$,$"$k$HJs9p$5$l$F$$$k$,!"$3$l$h$jA0$N%P!<(B
$B%8%g%s$bF1MM$NLdBj$rJz$($F$$$k2DG=@-$,$"$kE@$ON10U$9$Y$-$G$"$k!#(B

24. SAP Database Development Tools INSTDBMSRV INSTROOT Environment Variable Vulnerability
BugTraq ID: 7407
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: Apr 22 2003 12:00AM
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/7407
$B$^$H$a(B:

SAP DB $B$O!"(BUnix$B!"(BLinux$B!"(BMicrosoft Windows $B8~$1$N%U%j!<$KF~:3J$,2DG=$G$"$k$H?d;!$5$l$k!#(B

$B$3$NLdBj$O!"?.Mj$G$-$J$$H/?.85$+$i$NF~NO$r=hM}$9$k:]$KB8:_$9$k!#F~NO=hM}(B
$B$N:]!"(Binstdbmsrv $B$O(B pgm/dbmsrv $B$N25. SAP Database Development Tools INSTLSERVER INSTROOT Environment Variable Vulnerability
BugTraq ID: 7408
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: Apr 22 2003 12:00AM
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/7408
$B$^$H$a(B:

SAP DB $B$O!"(BUnix$B!"(BLinux$B!"(BMicrosoft Windows $B8~$1$N%U%j!<$KF~:3J$,2DG=$G$"$k$H?d;!$5$l(B
$B$k!#(B

$B$3$NLdBj$O!"?.Mj$G$-$J$$H/?.85$+$i$NF~NO$r=hM}$9$k:]$KB8:_$9$k!#F~NO=hM}(B
$B$N:]!"(Binstlserver $B$O(B pgm/lserver $B$N26. Web Protector Trivial Encryption Weakness
BugTraq ID: 7409
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Apr 22 2003 12:00AM
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/7409
$B$^$H$a(B:

Web Protector $B$O!"(BWeb $B%Z!<%8$NITEv$JJ#@=$^$?$O%$%s%?!<%M%C%H$r2p$7$?>pJs(B
$B$NEpFq$+$i(B Web $B%Z!<%8$r$N%Z!<(B
$B%8$N%3%s%F%s%D$rI|9f$9$k$3$H$KMxMQ$5$l$k2DG=@-$,$"$k!#(B

$B$3$NLdBj$O!"(BHTML $B%=!<%9Fb$K=q$+$l$?=EMW$J>pJs$NO31L!"$^$?$O(B HTML $B%=!<%9(B
$B<+BN$NO31L$KMxMQ$5$l$k2DG=@-$,$"$k!#(BWeb $B%Z!<%8$N1#JC2=$H8@$C$?@-e!"=E(B
$BMW$J>pJs$K$O1#JC2=$5$l$?%I%-%e%a%s%H$N%=!<%9$K7h$7$F4^$^$l$k$Y$-$G$O$J$$!#(B

$B4IM}1. DirecTV Mole to Plead Guilty
$BCxp$K@:DL$7$9$.$?Bg3X@8$K4X$9$k;v7o$O!";JK!h$j=P$7$F$$$k!#(B

http://www.securityfocus.com/news/4173

2. Verizon loses RIAA piracy case
$BCxhttp://www.securityfocus.com/news/4210

3. Judge rejects constitutional challenge over Internet music downloading
$BCxpJs$r!"%O%C%+!<$N(B Web $B%5%$%H$KO3(B
$B1L$7$F$$$k$H$7$F9pAJ$5$l$?(B 19 $B:M$N%7%+%4Bg3X$N3X@8$O!"$3$l$^$G$"$^$jE,MQ(B
$B$5$l$?$3$H$N$J$$(B 1996 $BG/$KDj$a$i$l$?7P:QD5JsK!(B (1996 Economic Espionage
Act) $B$K0cH?$7$?$H$7$F!"M-:aH=7h$rhttp://www.securityfocus.com/news/4188

4. Trojan defence clears man on child porn charges
$BCxZ8@$K$h$jL5:a$NH=7h$rhttp://www.securityfocus.com/news/4179

IV. SECURITYFOCUS TOP 6 TOOLS
-----------------------------
1. Crash Core Analysis Suite v3.3
$B:nhttp://oss.missioncriticallinux.com/projects/crash/
$B%W%i%C%H%U%)!<%`(B: Linux$B!"(BPOSIX
$B$^$H$a(B:

Crash Core Analysis Suite $B$O!"FbB"7?$N%D!<%k$G!"(BSVR4 $B$N(B crash $B%3%^%s%I$K(B
$BBg$^$+$KM3Mh$7$F$$$^$9$,(B gdb $B$H$O40A4$KM;9g$7$F$*$j!"$3$l$K$h$j%/%i%C%7%e(B
$B$K4X$9$k%+!<%M%k8GM-$N@-!"(BMission Critical
Linux $B$,Ds6!$7$F$$$k(B Kernel Core Dump $B%Q%C%A$+$i:n@.$5$l$?%+!<%M%k%3%"%@(B
$B%s%W!"$*$h$S(B SGI $B$,Ds6!$7$F$$$k(B Linux Kernel Crash Dumps (LKCD) $B%Q%C%A$+(B
$B$i:n@.$5$l$?%+!<%M%k%3%"%@%s%W$rD4::$9$k$?$a$KMxMQ2DG=$G$9!#(B

2. In Memory Core Dump v3.1.4
$B:nhttp://oss.missioncriticallinux.com/projects/mcore/
$B%W%i%C%H%U%)!<%`(B: Linux$B!"(BPOSIX
$B$^$H$a(B:

In Memory Core Dump $B$O!"%7%9%F%`%a%b%j$rMQ$$$F%/%i%C%7%e>pJs$rJ]B8$7$^$9!#(B
$B0J8e$N%7%9%F%`:F5/F0;~$K!"$3$N%/%i%C%7%e>pJs$r2s<}$9$k$3$H$,2DG=$G$9!#(B

3. cosign v1.0.0
$B:nhttp://weblogin.org/
$B%W%i%C%H%U%)!<%`(B: UNIX$B!"(BWindows 2000$B!"(BWindows NT
$B$^$H$a(B:

cosign $B$O!"(BWeb $B$rMxMQ$7$?%7%s%0%k%5%$%s%*%s%7%9%F%`$G$"$j!"%f!<%6$,%;%C(B
$B%7%g%s$4$H$K0lEYG'>Z$9$k$3$H$G!"$=$NAH?%$KB0$9A4$F$NJ]8n$5$l$?(B Web $B;q8;(B
$B$K%"%/%;%92DG=$K$7$^$9!#$3$N%7%9%F%`$r;HMQ$9$k>l9g!"%Q%9%o!<%I$OCf?4$H$J(B
$B$kC10l$N(B URL $B$K$N$_Aw?.$5$l$^$9!#3F%;%C%7%g%s$O%"%$%I%k$K$h$k%?%$%`%"%&(B
$B%HCM$*$h$S%O!<%I%?%$%`%"%&%HCM$r;}$C$F$*$j!"$^$?%f!<%6$OC10l$N(B URL $B$rK,(B
$B$l$k$3$H$K$h$j!"A4$F$NJ]8n$5$l$?%5!<%S%9$+$i%m%0%"%&%H2DG=$G$9!#8x3+800E(B
$B9f$N;HMQ$K$h$j!"J]8n$5$l$?(B Web $B%5!<%P$X$N%;%-%e%j%F%#>e$N6<0R$,B>$N4X78(B
$B$9$k%5!<%P72$N%;%-%e%j%F%#$K$OA4$/1F6A$rM?$($J$$$3$H$r3N4. FloodGuard Alert v2_2p3
$B:nhttp://www.reactivenetwork.com/downloads/
$B%W%i%C%H%U%)!<%`(B: Linux$B!"(BPOSIX
$B$^$H$a(B:

FloodGuard Alert $B$O!"(BDDoS $B$*$h$S(B $B%o!<%`$K$h$k967b$r4^$a!"$"$i$f$kJ}K!$N(B
$B%M%C%H%o!<%/BS0h$KBgNL$N%G!<%?$rAw$j$D$1$k967b$r8!CN$9$k$h$&$K@_7W$5$l$F(B
$B$$$^$9!#$3$N%=%U%H%&%'%"$O!":G=i$KJ]8n$9$kNN0h$X$NFb8~$-$NDL?.$KCmL\$7!"(B
$B0[>o$JDL?.$rE}7WE*$KH/8+$9$k$?$a$K;HMQ$5$l$^$9!#$^$?!"$3$N%=%U%H%&%'%"$O(B
$B@5Ev$JDL?.$r5v2D$9$k0lJ}$G!"967b$rDd;_$9$k$?$a$K9V$8$i$l$k=i4|$N4KOB:v(B 
(ACL $B$*$h$S%U%#%k%?%j%s%0(B) $B$rDs5/$7$^$9!#$3$N%=%U%H%&%'%"$O!"(BJava $B$G3+H/(B
$B$5$l$?Am9gE*$J(B GUI $B$rpJsDLCN$r;Y1g$7$^(B
$B$9!#(B

5. heartbeat v0.1
$B:nhttp://www.nolongervalid.com/heartbeat/
$B%W%i%C%H%U%)!<%`(B: Python
$B$^$H$a(B:

Heartbeat $B$O!"(BPyGTK $B$G3+H/$5$l$?%5!<%P$*$h$S%5!<%S%94F;k%W%m%0%i%`$G$9!#(B
$B$3$N%=%U%H%&%'%"$O(B XML $B$rMxMQ$7$?@_Dj$,FCD'$G$"$j!"%5%]!<%H$9$k%5!<%P$*(B
$B$h$S%5!<%S%9$rA*$S$^$;$s!#(B

6. fwsnort v0.1
$B:nhttp://www.cipherdyne.com/fwsnort/
$B%W%i%C%H%U%)!<%`(B: Linux
$B$^$H$a(B:

fwsnort $B$O!"(Bsnort $B$N%k!<%k$rF1Ey$NFbMF$N(B iptables $B$N%k!<%k%;%C%H$KJQ49$7(B
$B$^$9!#(Biptables $B$N(B string match $B%b%8%e!<%k$rMxMQ$9$k$3$H$K$h$j!"$3$N%D!<(B
$B%k$OB??t$N(B snort $B%k!<%k$K4^$^$l$k%"%W%j%1!<%7%g%sAX$N%7%0%M%A%c$r8!CN2D(B
$BG=$G$9!#$3$N%D!<%k$O!"(B--hex-string $B%*%W%7%g%s$r(B iptables $B$N%*%W%7%g%s$K(B
$BDI2C$7!"(B16 $B?J?tJ8;zNs$r4^$`(B snort $B$N%k!<%k$,=$@5$J$7$G(B iptables $B$N%k!<%k(B
$B%;%C%H$KD>@\F~NO2DG=$K$7$^$9!#$^$?!"$3$N%D!<%k$O!"%*%W%7%g%s$G$O$"$j$^$9(B
$B$,!"4{B8$N(B iptables $B$N%]%j%7!<$G5v2D$5$l$F$$$kDL?.$,L@5-$5$l$?%k!<%k$N$_(B 
snort $B%k!<%k$NJQ49$r9T$&$h$&8BDj$9$k$?$a$K!"(BPerl $B%b%8%e!<%k(B 
IPTables::Parse $B$rMxMQ$7$^$9!#(B

--
$BLu(B: $B@>B<9/MN(B(NISHIMURA Yasuhiro)$B!"A}EDCR0l(B(MASUDA Tomokazu)$B!"(B
$B>.>>%_%5(B(KOMATSU Misa)
$B4F=$(B: $B@>B<9/MN(B(NISHIMURA Yasuhiro)
LAC Co., Ltd.
http://www.lac.co.jp/security/
smime.p7s