$BFC$K=EMW$J%;%-%e%j%F%#7g4Y!&%&%$%k%9>pJs(B: 2005.02

$B!!?t$"$k%;%-%e%j%F%#7g4Y>pJs$NCf$G$b!"0lHL%f!<%6$K$h$kN6Bg$G$N%3%s%T%e!<%?1?MQ$K:]$7$FFC$K=EBg$@$H9M$($i$l$k$b$N$K$D$$$F!"$3$3$K5-=R$7$F$$$^$9!#(B $B$^$?!"%&%$%k%94XO">pJs$K$D$$$F$b$3$3$K5-=R$7$F$$$^$9!#(B

• $B%^%+%U%#!<(B VirusScan $B$N%&%$%k%9Dj5A%U%!%$%k(B 4434 $B$,EP>l$7$F$$$^$9!#(B $B%&%$%k%9Dj5A%U%!%$%k$N99?7$r$*4j$$$7$^$9!#(B

• $B%&%$%k%9%P%9%?!<(B 200x $B$J$I$N!"%H%l%s%I%^%$%/%m(B$B$N%"%s%A%&%$%k%9%=%U%HA4HL$K$^$D$o$k!"=EBg$J7g4Y$,H/8+$5$l$F$$$^$9!#(B

  • $B8!:w%(%s%8%s$N(BARJ$B%U%!%$%k8!:w=hM}$K$*$1$k@H ($B%H%l%s%I%^%$%/%m(B)
  • $B8!:w%(%s%8%s(B VSAPI 7.510 $B8x3+$N$*CN$i$;(B ($B%H%l%s%I%^%$%/%m(B)

  $B$3$N7g4Y$O!"%&%$%k%98!:w%(%s%8%s(B VSAPI 7.500 $B0JA0$KB8:_$7!"(B VSAPI 7.510 $B$G=$@5$5$l$F$$$^$9!#(B $B%H%l%s%I%^%$%/%m$N%"%s%A%&%$%k%9%=%U%H$rMxMQ$7$F$$$k>l9g$O!"3F%"%s%A%&%$%k%9%=%U%H$KBP1~$9$k8!:w%(%s%8%s(B VSAPI 7.510 $B$r%@%&%s%m!<%I$7!"%$%s%9%H!<%k$7$F$/$@$5$$!#(B

  • $B8!:w%(%s%8%s!&%"%C%W%G!<%H(B ($B%H%l%s%I%^%$%/%m(B)

  $B%$%s%9%H!<%k8e!"%&%$%k%98!:w%(%s%8%s$N%P!<%8%g%s$,(B 7.510 $B$K$J$C$F$$$k$3$H$r3NG'$7$F$/$@$5$$!#(B

  

• $B%^%+%U%#!<(B VirusScan $B$N%&%$%k%9Dj5A%U%!%$%k(B 4432 $B$,EP>l$7$F$$$^$9!#(B $B%&%$%k%9Dj5A%U%!%$%k$N99?7$r$*4j$$$7$^$9!#(B

  $B$J$*!"L@F|(B 2/25 $B$+$i!"%&%$%k%9Dj5A%U%!%$%k$OKhF|99?7$5$l$^$9!#(B

  • Daily DAT$B%j%j!<%9$K4X$9$k(BFAQ ($B%^%+%U%#!<(B)

  $BM}9)3XIt$N%$%s%9%H!<%k$B$K=>$C$F$$$k>l9g$O!VKhF|99?7!W$KBP1~$5$l$F$$$k$O$:$G$9$,!"(B24 $B;~4V2TF/$7$D$E$1$k(B PC $B$K$D$$$F$OFC$K!"(BVirusScan $B$N<+F0%"%C%W%G!<%H@_Dj$r$43NG'$/$@$5$$!#(B

  • VirusScan Enterprise 8.0i: $B%$%s%9%H!<%kJ}K!(B $B$N(B 22. $B0J9_(B
  • VirusScan Enterprise 7.1: $B%$%s%9%H!<%k(B $B$N(B 20. $B0J9_(B
  • VirusScan 4.5.1 SP1: $B%9%1%8%e!<%k4XO"@_Dj(B

• $B%^%+%U%#!<(B VirusScan $B$N%&%$%k%9Dj5A%U%!%$%k(B 4431 $B$,EP>l$7$F$$$^$9!#(B W32/Mydoom.bc@MM, W32/Mydoom.bd@MM $B$NBP1~$,2~A1$5$l!"$5$i$K(B W32/Mydoom.be@MM $B$KBP1~$7$F$$$^$9!#(B $B%&%$%k%9Dj5A%U%!%$%k$N99?7$r$*4j$$$7$^$9!#(B

• $B%^%+%U%#!<(B VirusScan $B$N%&%$%k%9Dj5A%U%!%$%k(B 4430 $B$,EP>l$7$F$$$^$9!#(B W32/Bropia.worm.p, W32/Mydoom.bc@MM, W32/Mydoom.bd@MM $B$KBP1~$7$F$$$^$9!#(B $B%&%$%k%9Dj5A%U%!%$%k$N99?7$r$*4j$$$7$^$9!#(B

• $B%^%+%U%#!<(B VirusScan $B$N%&%$%k%9Dj5A%U%!%$%k(B 4429 $B$,EP>l$7$F$$$^$9!#(B W32/Mydoom.bb@MM $B$KBP1~$7$F$$$^$9!#(B $B%&%$%k%9Dj5A%U%!%$%k$N99?7$r$*4j$$$7$^$9!#(B

• 2005.02.09 $B$K$*EA$($7$?(B Microsoft $B$N%;%-%e%j%F%#=$@5%W%m%0%i%`$G$9$,!"(B Windows Update $B$H(B Office Update $B$r

  MSN Messenger 6.1 / 6.2 $B$*$h$S(B/$B$^$?$O(B Windows Messenger 5.0 $B$rMxMQ$7$F$$$k>l9g$O!"$3$l$i$K4X$9$k(B MS05-009 $B=$@5%W%m%0%i%`$O(B Windows Update $B$G$OE,MQ$5$l$J$$$?$a!"(B MS05-009 web $B%Z!<%8(B $B$+$i8DJL$KF~MSN Messenger 7.0 $B$*;n$7HG(B$B$r%$%s%9%H!<%k$9$k$3$H$G$bBP1~2DG=$G$9!#(B $B$^$?!V(BWindows Messenger 5.0 $BMQ$N=$@5%W%m%0%i%`!W$H$O(B Windows Messenger 5.1 $B$N$3$H$G$9!#(B

• $B>e5-$K4XO"$7$^$9$,(B$B!"(B Windows NT 4.0 $B$N%5%]!<%H4|4V$O=*N;$7$F$*$j!":#2s8x3+$5$l$?7g4Y$K$D$$$F$b!"$=$N$[$H$s$I$K$O(B Windows NT 4.0 $BMQ$N=$@5%W%m%0%i%`$OMQ0U$5$l$F$$$^$;$s!#(B Windows NT 4.0 $BMxMQ

• mailman 2.1.5 $B0JA0$K=EBg$J7g4Y$,H/8+$5$l$F$$$^$9(B$B!#(B

  • [Full-Disclosure] Administrivia: List Compromised due to Mailman Vulnerability

  private.py $B$K$*$1$k=|@w=hM}$,IT==J,$J$?$a!"30It$+$i(B ML $B$N;22CpJs(B ($B%f!<%6%j%9%H!"%f!<%6%Q%9%o!<%I$J$I(B) $B$r

  $B$H$j$"$($:BP1~$9$k$K$O!"(Bprivate.py $B$N(B true_path() $B$r(B $B;XE&J8=q(B $B$K$"$k$h$&$K=q$-$+$($F$/$@$5$$!#$^$?!"$$$/$D$+$N(B Linux $B%G%#%9%H%j%S%e!<%7%g%s$J$I$G$O=$@5%Q%C%1!<%8$,MQ0U$5$l$F$$$^$9!#(B

  • Red Hat Linux ES 3: RHSA-2005:136-08
  • Fedora Core: mailman-2.1.5-8.fc2, mailman-2.1.5-30.fc3
  • Gentoo Linux: GLSA 200502-11 / mailman
  • Debian GNU/Linux: DSA-674-1 mailman -- cross-site scripting, directory traversal
  • FreeBSD: ports/mail/mailman/$B!#(B2.1.5_2 $B$G=$@5$5$l$F$$$k!#(B

• $B%^%+%U%#!<(B VirusScan $B$N%&%$%k%9Dj5A%U%!%$%k(B 4427 $B$,EP>l$7$F$$$^$9!#(B $B%&%$%k%9Dj5A%U%!%$%k$N99?7$r$*4j$$$7$^$9!#(B

• $B%^%+%U%#!<(B VirusScan $B$N%&%$%k%9Dj5A%U%!%$%k$O!"(B $B:r:#$N%&%$%k%9>u67$KBP1~$9$k$?$a!"(B2/25 $B$+$iKhF|99?7$5$l$k$3$H$K$J$j$^$7$?!#(B

  • Daily DAT$B%j%j!<%9$K4X$9$k(BFAQ($BK!?M8~$1(B) ($B%^%+%U%#!<(B)

  $BM}9)3XIt?d>)@_Dj(B$B$G$OKhF|99?7$9$k$h$&$K$J$C$F$$$^$9$,!":#0lEY!"3F<+$N@_Dj$r3NG'$7$F$/$@$5$$!#(B

• $B%7%^%s%F%C%/$N%"%s%A%&%$%k%9@=IJ$K=EBg$J7g4Y$,H/8+$5$l$F$$$^$9!#(B

  • SYM05-003: $B%7%^%s%F%C%/$N(B UPX $B2r@O%(%s%8%s$K%R!<%W(I%$B%*!<%P!<%U%m!<$N@H ($B%7%^%s%F%C%/(B)

  $B%7%^%s%F%C%/$N4k6H8~$1@=IJ$r;H$C$F$$$k?M$O3XFb$K$O$$$J$$$H;W$$$^$9$,!"(B $B%3%s%7%e!<%^8~$1@=IJ$N$&$A(B Norton Antivirus 2004 / Norton Internet Security 2004 $B$,$3$N7g4Y$K3:Ev$9$k$N$GCm0U$,I,MW$G$9!#(B Norton Antivirus 2004 / Norton Internet Security 2004 $B$rMxMQ$7$F$$$k?M$O!"(BLiveUpdate $B$ruBV$K99?7$7$F$/$@$5$$!#$3$l$K$h$C$F!"$3$N7g4Y$,=$@5$5$l$^$9!#(B

  $B$J$*!"(BNorton Antivirus 2003 / Norton Internet Security 2003 $B$d(B Norton Antivirus 2005 / Norton Internet Security 2005 $B$K$O$3$N7g4Y$O$"$j$^$;$s!#(B

• Microsoft $B$+$i(B$B!"%;%-%e%j%F%#=$@5%W%m%0%i%`$,(B $B?7$?$K(B 13 $B

  • 2005 $BG/(B 2 $B7n$N%;%-%e%j%F%#>pJs(B (Microsoft)

  Microsoft Windows $B$N=$@5%W%m%0%i%`$NB>$K!"(BMicrosoft Office $B$N=$@5%W%m%0%i%`$b8x3+$5$l$F$$$^$9!#(B $B

  1. $B$^$:(B Windows $B$N=$@5%W%m%0%i%`$r!"(BWindows Update $B$d(B Microsoft Software Update Services $B$rMxMQ$7$FE,MQ$7$F$/$@$5$$!#E,MQ8e!":F5/F0$rB%$5$l$?>l9g$O:F5/F0$7$F$/$@$5$$!#(B

  2. $BOffice $B%"%C%W%G!<%H(B$B$rMxMQ$7$FE,MQ$7$F$/$@$5$$!#(B

  3. MSN Messenger 6.1 / 6.2 $B$*$h$S(B/$B$^$?$O(B Windows Messenger 5.0 $B$rMxMQ$7$F$$$k>l9g$O!"$3$l$i$K4X$9$k(B MS05-009 $B=$@5%W%m%0%i%`$O(B Windows Update $B$G$OE,MQ$5$l$J$$$?$a!"(B MS05-009 web $B%Z!<%8(B $B$+$i8DJL$KF~MSN Messenger 7.0 $B$*;n$7HG(B$B$r%$%s%9%H!<%k$9$k$3$H$G$bBP1~2DG=$G$9!#(B $B$^$?!V(BWindows Messenger 5.0 $BMQ$N=$@5%W%m%0%i%`!W$H$O(B Windows Messenger 5.1 $B$N$3$H$G$9!#(B

• Mozilla $B$d(B Opera, Safari $B$J$I!V9q:]2=%I%a%$%sL>!W$KBP1~$7$?(B web $B%V%i%&%6(B$B$K$*$$$F!"9q:]2=%I%a%$%sL>$rMxMQ$7$?(B URL $B:>>N$,9T$o$l$k2DG=@-$,;XE&$5$l$F$$$^$9!#%U%#%C%7%s%0:>5=$J$I$K0-MQ$5$l$k62$l$,$"$j$^$9!#(B

  • $B9q:]2=%I%a%$%sL>BP1~%V%i%&%6$K(BURL$B$,!H56Au!I$5$l$kLdBj!"(BIE$B$O1F6A$J$7(B (Internet Watch, 2/8)

  secunia $B$N%G%b%5%$%H(B$B$K@\B3$7$?:]$N%"%I%l%9%P!<$NMM;R$r0J2<$K<($7$^$9(B:

  • $B1Q8lHG(B Windows 2000 SP4 $B>e$N1Q8lHG(B Mozilla:
    
  • $BF|K\8lHG(B Windows XP SP2 $B>e$NF|K\8lHG(B Mozilla:
    

  $BF|K\8lHG(B Windows $B>e$NF|K\8lHG(B Mozilla $B$N>l9g$K$O5$$,$D$1$k$+$b$7$l$^$;$s$,!"1Q8lHG(B Windows $B>e$N1Q8lHG(B Mozilla $B$@$H!"$^$:5$$,$D$+$J$$$H9M$($i$l$^$9!#(B $B$3$l$O(B web $B%V%i%&%6$N7g4Y$H8@$&$h$j$O!"9q:]2=%I%a%$%sL>$NEPO?$K$*$1$k7g4Y$G$9$,!"

  $B$3$N7g4Y$r2sHr$9$k$K$O!"3F(B web $B%V%i%&%6$K$*$$$F9q:]2=%I%a%$%sL>$X$NBP1~$rL58z$K$9$l$P$h$$$G$9!#(B

  • Mozilla $B$N>l9g$O!"(Babout:config $B$K%"%/%;%9$7!"(B network.enableIDN $B$r(B false $B$K$9$k$3$H$GL58z$K$G$-$^$9!#(B

  • Mozilla Firefox $B$N>l9g$O!"(Bcompreg.dat $B%U%!%$%k$rJT=8$9$k$3$H$GL58z$K$G$-$^$9!#(BPermanent Fix for the Shmoo Group exploit (Tech.Life.Blogged) $B$r;2>H!#(B

  • IE $B$N>l9g$OI8=`$G$O9q:]2=%I%a%$%sL>$KBP1~$7$F$$$^$;$s$+$i2?$b$7$J$/$F$h$$$N$G$9$,!"(B $BF|K\8l%I%a%$%sL>%W%i%0%$%s(B $B$J$I$K$h$C$F9q:]2=%I%a%$%sL>$KBP1~$7$F$$$k>l9g$O!"$=$l$r%"%s%$%s%9%H!<%k$7$^$9!#(B

  • Opera $B$d(B Safari $B$K$D$$$F$O!":#$N$H$3$mL58z$K$9$kJ}K!$,$"$j$^$;$s!#(B

• Eudora 6J for Windows Jr6 rev2 $B$,=P$F$$$^$9!#(BEudora 6.2.0 $B0JA0$KB8:_$9$k=EBg$J7g4Y$,=$@5$5$l$F$$$^$9!#(B

  • $B%7%9%F%`%/%i%C%7%e$r0z$-5/$3$9@H ($B%i%$%V%I%"(B)
  • [VulnWatch] High Risk Vulnerabilities in Eudora Mail Client (NGSSoftware)

  Eudora 6J for Windows $BMxMQ

• $B%^%+%U%#!<(B VirusScan $B$N%&%$%k%9Dj5A%U%!%$%k(B 4426 $B$,EP>l$7$F$$$^$9!#(B $B%&%$%k%9Dj5A%U%!%$%k$N99?7$r$*4j$$$7$^$9!#(B

• $B%^%+%U%#!<(B VirusScan $B$N%&%$%k%9Dj5A%U%!%$%k(B 4425 $B$,EP>l$7$F$$$^$9!#(B $B%&%$%k%9Dj5A%U%!%$%k$N99?7$r$*4j$$$7$^$9!#(B

• $B%a!<%k$d%[!<%`%Z!<%8$K$h$k!V2M6u@A5a!WEy(B$B$K4X$7$F!"7Y;!D#$,Cm0U4-5/$r$7$F$$$^$9!#(B

  • $B%a!<%k$d%[!<%`%Z!<%8$K$h$k!V2M6u@A5a!WEy$X$NCm0U4-5/(B ($B7Y;!D#(B, 2/1)

  $BN6Bg$G$N%$%s%?!<%M%C%HMxMQ$K$*$$$F$b!"$=$N$h$&$J%a!<%k$d(B web $B%Z!<%8$H=P0)$&$3$H$,$"$k$H;W$$$^$9$,!">e5-Cm0U4-5/$r;29M$K$7$D$D!"Nd@E$KBP1~$7$F$/$@$5$$!#(B

  $B$3$NB>$K$b!":G6a$G$O!V(B$B%U%#%C%7%s%0:>5=(B$B!W$,A}2C798~$K$"$j$^$9!#(B $B%a!<%k$d(B web $B%Z!<%8$K@_CV$5$l$?%j%s%/$r0B0W$K?.MQ$7$J$$$h$&$KCm0U$7$F$/$@$5$$!#(B

• $B%^%+%U%#!<(B VirusScan $B$N%&%$%k%9Dj5A%U%!%$%k(B 4424 $B$,EP>l$7$F$$$^$9!#(B $B%&%$%k%9Dj5A%U%!%$%k$N99?7$r$*4j$$$7$^$9!#(B