--- 2000/ed000009.txt	Fri Aug 25 13:01:38 2000
+++ 2001/ed010006.txt	Thu Dec 27 13:56:35 2001
@@ -1,18 +1,19 @@
 -----BEGIN PGP SIGNED MESSAGE-----
 
 ======================================================================
-                                                   JPCERT-ED-2000-0009
+                                                   JPCERT-ED-2001-0006
                                                              JPCERT/CC
 $B5;=Q%a%b(B  - Web $B%Z!<%8$N2~cb$KBP$9$kKI1R(B
 
-$B=i(B  $BHG(B: 2000-02-14 (Ver.01: JPCERT-ED-2000-0001)
-$BH/9TF|(B:	2000-08-25 (Ver.03)
+$B=i(B    $BHG(B: 2000-02-14 (Ver.01: JPCERT-ED-2000-0001)
+$BH/(B $B9T(B $BF|(B: 2001-12-27 (Ver.04)
+$B:G?7>pJs(B: http://www.jpcert.or.jp/ed/2001/ed010006.txt
 ======================================================================
 
 $BJ8>O$N0LCVIU$1(B
 
-  $BK\J8>O$O(BWeb$B%Z!<%8$N2~cb$KBP$7$F6[5^E*=hCV$H$7$F$I$N$h$&$JBP:v$,2DG=(B
-$B$J$N$+$r<($9$b$N$G$9!#H4K\E*$J(B Web $B%5!<%P$NKI8f$K4X$7$F$O!"$3$N%I%-%e(B
+  $BK\J8>O$O(B Web $B%Z!<%8$N2~cb$KBP$7$F6[5^E*=hCV$H$7$F$I$N$h$&$JBP:v$,2D(B
+$BG=$J$N$+$r<($9$b$N$G$9!#H4K\E*$J(B Web $B%5!<%P$NKI8f$K4X$7$F$O!"$3$N%I%-%e(B
 $B%a%s%H$@$1$G$O==J,$G$O$J$$$3$H$r$"$i$+$8$a$4N;>52<$5$$!#(B
 
 
@@ -39,7 +40,7 @@
 II. $BKI1R$NJ}K!(B
 
   Web $B%Z!<%8$N2~cb$KBP$9$kKI1R$NJ}K!$O!"Bh(B I $B>O$G5s$2$?MW0x$r>/$J$/$9(B
-$B$k$3$H$K$D$-$^$9!#0J2<$G$OBP:v$K$D$$$F!"6[5^$NBP:v!"<!$K<h$kBP:v!"$=$7(B
+$B$k$3$H$K?T$-$^$9!#0J2<$G$OBP:v$K$D$$$F!"6[5^$NBP:v!"<!$K<h$kBP:v!"$=$7(B
 $B$FH4K\E*$JBP:v$X$N%"%W%m!<%A!"$H;0$D$KJ,$1$F@bL@$7$^$9!#(B
 
 
@@ -52,127 +53,188 @@
     $B!&30It$+$i$N(B HTTP $B0J30$N%5!<%S%9$KBP$9$k%"%/%;%9$r6X;_$9$k(B
 
   Web $B%5!<%P$N%=%U%H%&%'%"$K$O!"%;%-%e%j%F%#>e$NLdBj$,H/8+$5$l$F$$$k$b(B
-$B$N$,$"$j$^$9(B[1][2]$B!#$^$?!"(BWeb $B%5!<%P$N%=%U%H%&%'%"$O!"J#;($GBg5,LO$J$b(B
-$B$N$G$"$k$?$a!"?7$?$K%;%-%e%j%F%#>e$NLdBj$,H/8+$5$l$k$3$H$,9M$($i$l$^$9!#(B
-$B$3$l$i$NLdBj$rJ|CV$9$k$H!"%;%-%e%j%F%#>e$NLdBj$r0-MQ$5$l!"IT@5?/F~$dIT(B
-$B@5MxMQ$K$D$J$,$k$3$H$,9M$($i$l$^$9!#MxMQ$7$F$$$k(B Web $B%5!<%P$N%=%U%H%&%'(B
-$B%"$N>pJs$r3NG'$7!":G?7$N%P!<%8%g%s$H$9$k$3$H$r6/$/$*4+$a$7$^$9!#(B
+$B$N$,$"$j$^$9(B[1][2][3][4][5][6][7][9][10]$B!#$^$?!"(BWeb $B%5!<%P$N%=%U%H%&%'(B
+$B%"$O!"J#;($GBg5,LO$J$b$N$G$"$k$?$a!"?7$?$K%;%-%e%j%F%#>e$NLdBj$,H/8+$5(B
+$B$l$k$3$H$,9M$($i$l$^$9!#$3$l$i$NLdBj$rJ|CV$9$k$H!"%;%-%e%j%F%#>e$NLdBj(B
+$B$r0-MQ$5$l!"IT@5?/F~$dIT@5MxMQ$K$D$J$,$k2DG=@-$,$"$j$^$9!#MxMQ$7$F$$$k(B
+Web $B%5!<%P$N%=%U%H%&%'%"$N>pJs$r3NG'$7!":G?7$N%P!<%8%g%s$H$9$k$3$H$r6/(B
+$B$/$*4+$a$7$^$9!#(B
 
   Web $B%5!<%P$K$*$$$F!"(BHTTP $B0J30$N%5!<%S%9$N<eE@$,0-MQ$5$l$k$*$=$l$,$"(B
 $B$j$^$9!#(BWeb $B%5!<%P$NL\E*$,30It$X$N(B HTTP $B$K$h$k%5!<%S%9$@$1$N>l9g!"$=$l(B
 $B0J30$N%M%C%H%o!<%/%5!<%S%9$KBP$9$k%"%/%;%9$r$9$Y$F6X;_$9$k$3$H$r$*4+$a(B
-$B$7$^$9!#6qBNE*$K$O!"%k!<%?$K$h$k%Q%1%C%H%U%#%k%?%j%s%0$K$h$j!"(BHTTP $B0J(B
-$B30$NDL?.$r<WCG$9$k$3$H$,9M$($i$l$^$9!#(B
+$B$7$^$9!#6qBNE*$K$O!"%k!<%?$d%[%9%H<+?H$G%Q%1%C%H%U%#%k%?%j%s%0$r9T$J$&(B
+$B$3$H$K$h$j!"(BHTTP $B0J30$NDL?.$r<WCG$9$k$3$H$,9M$($i$l$^$9!#(B
 
 
 (2) $B<!$K<h$kBP:v(B
 
-  $B6[5^$NBP:v$N<!$K<h$kBP:v$H$7$F!"0J2<$N8^$D$r?d>)$7$^$9!#(BWeb $B%5!<%P$N(B
-HTTP $B$K$h$k%5!<%S%9$r8BDj$7!"$=$N%;%-%e%j%F%#$r9b$a$^$9!#$^$?!"(BWeb $B%5!<(B
-$B%P$N%[%9%H$H$7$F$N%;%-%e%j%F%#$r9b$a$^$9!#(B
+  $B6[5^$NBP:v$N<!$K9T$J$&BP:v$H$7$F!"0J2<$N8^$D$r?d>)$7$^$9!#(BWeb $B%5!<%P(B
+$B$N(BHTTP $B$K$h$k%5!<%S%9$r8BDj$7!"$=$N%;%-%e%j%F%#$r9b$a$^$9!#$^$?!"(BWeb
+$B%5!<%P$N%[%9%H$H$7$F$N%;%-%e%j%F%#$r9b$a$^$9(B[8]$B!#(B
 
-    $B!&(BWeb $B%5!<%P$N%=%U%H%&%'%"$N@_Dj$r:F3NG'$7!"I,MW:G>.8B$N@_Dj$H$9$k(B
-    $B!&(BCGI $B%W%m%0%i%`$r3NG'$7!"ITI,MW$J(B CGI $B%W%m%0%i%`$r:o=|$9$k(B
+    $B!&(BWeb $B%5!<%P%=%U%H%&%'%"$N@_Dj$r:F3NG'$7!"I,MW:G>.8B$N@_Dj$H$9$k(B
+    $B!&(BCGI $B%W%m%0%i%`$r3NG'$7!"ITMW$J(B CGI $B%W%m%0%i%`$r:o=|$9$k(B
 
     $B!&ITMW$J%M%C%H%o!<%/%5!<%S%9$rDd;_$9$k(B
     $B!&%m%05!G=$r@_Dj$7!"4F;k$G$-$k$h$&$K$9$k(B
-    $B!&(BWeb $B%5!<%P$GMxMQ$9$k%=%U%H%&%'%"(B(OS$B!"%M%C%H%o!<%/%"%W%j%1!<%7%g(B
-      $B%s(B)$B$r3NG'$7!":G?7$N%P!<%8%g%s$H$9$k(B
+    $B!&(BWeb $B%5!<%P%[%9%H$GMxMQ$9$k%=%U%H%&%'%"(B(OS$B!"%M%C%H%o!<%/%"%W%j%1!<(B
+      $B%7%g%s(B)$B$r3NG'$7!":G?7$N%P!<%8%g%s$H$9$k(B
 
   Web $B%5!<%P$N%=%U%H%&%'%"$O!"5!G=$,K-IY$G3HD%@-$,9b$/$J$C$F$$$^$9!#$7(B
 $B$+$7!"%;%-%e%j%F%#$N4QE@$+$i$O!"$G$-$k$@$18B$i$l$?5!G=$@$1$rMxMQ$9$k$3(B
-$B$H$,K>$^$l$^$9!#@_Dj$r:F3NG'$7!"4J7i$G$o$+$j0B$$@_Dj$H$J$k$h$&$K?4$,$1!"(B
-$BI,MW:G>.8B$N@_Dj$H$9$k$3$H$r$*4+$a$7$^$9!#Nc$($P!"@EE*$J%3%s%F%s%D$NG[(B
-$BAw$@$1$K8BDj$9$k$H$$$&1?MQ$,9M$($i$l$^$9!#(B
-
-  $B$b$7!"(BCGI $B$rMxMQ$7$?%5!<%S%9$r9T$J$C$F$$$k>l9g!"(BCGI $B%W%m%0%i%`$r3NG'(B
-$B$7!"ITI,MW$J(B CGI $B%W%m%0%i%`$r:o=|$9$k$3$H$r$*4+$a$7$^$9!#I,MW$J$1$l$P!"(B
-CGI $B$N5!G=<+?H$rDd;_$9$k$3$H$b9M$($i$l$^$9!#$^$?!"(BCGI $B%W%m%0%i%`$+$iMx(B
-$BMQ$5$l$k%=%U%H%&%'%"$K4X$7$F$b5;=QE*$J0BA4@-$NI>2A$r$9$k$3$H$,K>$^$l$^(B
-$B$9!#(B
+$B$H$,K>$^$l$^$9!#@_Dj$r:F3NG'$7!"4J7i$G$o$+$j$d$9$$@_Dj$H$J$k$h$&$K?4$,(B
+$B$1!"I,MW:G>.8B$N@_Dj$H$9$k$3$H$r$*4+$a$7$^$9!#Nc$($P!"@EE*$J%3%s%F%s%D(B
+$B$NG[Aw$@$1$K8BDj$9$k$H$$$&1?MQ$,9M$($i$l$^$9!#(B
+
+  CGI $B$rMxMQ$7$?%5!<%S%9$r9T$J$C$F$$$k>l9g$K$O!"(BCGI $B%W%m%0%i%`$r3NG'$7!"(B
+$BITMW$J(B CGI $B%W%m%0%i%`$r:o=|$9$k$3$H$r$*4+$a$7$^$9!#I,MW$J$1$l$P!"(BCGI
+$B$N5!G=<+?H$rDd;_$9$k$3$H$b9M$($i$l$^$9!#$^$?!"(BCGI $B%W%m%0%i%`$+$iMxMQ$5(B
+$B$l$k%=%U%H%&%'%"$K4X$7$F$b5;=QE*$J0BA4@-$NI>2A$r$9$k$3$H$,K>$^$l$^$9!#(B
 
   Web $B%5!<%P$N%[%9%H$H$7$F$N%;%-%e%j%F%#$r9b$a$k$3$H$b=EMW$G$9!#ITMW$J(B
 $B%M%C%H%o!<%/%5!<%S%9$rDd;_$7!"DL?.$N%m%0$r<h$k$h$&$K@_Dj$7!"4F;k$r9T$J(B
-$B$($k$h$&$K$7$^$9!#$^$?!"(BOS $B$d%M%C%H%o!<%/%"%W%j%1!<%7%g%s$J$I$N%=%U%H(B
-$B%&%'%"$r:G?7$N%P!<%8%g%s$H$7$^$9!#(B
+$B$&$h$&$K$7$^$9!#$^$?!"(BOS $B$d%M%C%H%o!<%/%"%W%j%1!<%7%g%s$J$I$N%=%U%H%&%'(B
+$B%"$r:G?7$N%P!<%8%g%s$H$7$^$9(B[11][12][13]$B!#(B
 
 
 (3) $BH4K\E*$JBP:v$X$N%"%W%m!<%A(B
 
   $BK\@a$G$O!"6[5^E*=hCV8e$NH4K\E*$JBP:v$K;j$k%"%W%m!<%A$K4X$7$F@bL@$7$^(B
 $B$9!#H4K\E*$JBP:v$r9M$($k>l9g$K$O!"5;=QE*$JBP:v$H$$$&$h$j$b1?MQ$N;EAH$_!"(B
-$B6HL3$H$7$F$N@_7W$H$$$&ItJ,$,=EMW$K$J$C$F$-$^$9!#0J2<$N;0$D$NE@$K4X$7$F(B
-$B9M;!$9$k$3$H$r?d>)$7$^$9!#(B
+$B6HL3$H$7$F$N@_7W$H$$$&ItJ,$,=EMW$K$J$C$F$-$^$9(B[14]$B!#0J2<$N;0$D$NE@$K4X(B
+$B$7$F9M;!$9$k$3$H$r?d>)$7$^$9!#(B
 
     $B!&(BWeb $B%5!<%S%9$N0LCVIU$1$N3NG'$H%M%C%H%o!<%/9=@.(B/$B@_7W$X$NH?1G(B
-    $B!&(BWeb $B%5!<%S%91?MQ$N:n6HJ,C4$NL@3N2=!"99?7$N<j=g$NJ8=q2=!"<~CNE0Dl(B
+    $B!&(BWeb $B%5!<%S%91?MQ$N:n6HJ,C4$NL@3N2=!"99?7<j=g$NJ8=q2=!"<~CNE0Dl(B
     $B!&4F;k!"6[5^BP1~$NBN@)$E$/$j(B
 
-  Web $B%5!<%S%9$rAH?%$H$7$F$NBP30%5!<%S%9$H$7$F!"$I$N$h$&$K0LCVIU$1$k$+(B
-$B$r:F8!F$$7!"2?$,I,MW>r7o$+!"$I$NDxEY$N%5!<%S%9%l%Y%k$r@_Dj$9$k$+$J$I$r(B
-$BDj5A$9$k$3$H$,=EMW$K$J$j$^$9!#$3$l$i$,7h$^$C$?>e$G!"%;%-%e%j%F%#$K4X$7(B
-$B$F!"2?$r$I$NDxEY<i$k$+$,7h$^$j$^$9!#$^$?!"BP30%5!<%S%9$N(B Web $B%5!<%S%9(B
-$B$r9T$J$&$3$H$,!"%M%C%H%o!<%/$N9=@.$H@_7W$KH?1G$5$l!"%M%C%H%o!<%/A4BN$H(B
-$B$7$F$bsrsw$J$/1?MQ$5$l$k$3$H$,K>$^$l$^$9!#(B
-
-  Web $B%5!<%S%9$N1?MQ$O!"0lHL$K%3%s%F%s%D$N:n@.<T!"(BWeb $B%5!<%S%9$N%W%m%0(B
-$B%i%_%s%0$r9T$J$&?M!"%[%9%H$N4IM}<T!"%M%C%H%o!<%/$N4IM}<T$J$IJ#?t$N?M$K(B
-$B$h$C$F<B;\$5$l$^$9!#$3$l$i$NJ#?t$N?M$NCf$G$N:n6HJ,C4$rL@3N2=$7!"99?7$N(B
-$B<j=g$rJ8=q2=$7!"%Z!<%8$N99?7$,$I$N$h$&$K$7$F5/$3$k$+$r<~CNE0Dl$9$k$3$H(B
-$B$,=EMW$K$J$j$^$9!#(B
-
-  Web $B%5!<%S%9!"$*$h$S%[%9%H$NDL?.$K4X$7$F4F;k$7!"IT@5$J%"%/%;%9(B($B$"$k(B
-$B$$$O$=$N;n$_(B)$B$,$"$C$?>l9g$K$OAa4|$KH/8+$7$FBP1~$9$k$3$H$,K>$^$l$^$9!#(B
-$B4F;k$NBN@):n$j$r9T$J$$!"6[5^BP1~$N;EAH$_$N3NN)$r$9$k$3$H$,K>$^$l$^$9!#(B
-$B2DG=$G$"$l$P!"6[5^BP1~$N71N}$r$9$k$3$H$,K>$^$l$^$9!#(B
-
-
-III. $BHw9M(B: $B!V%U%!%$%"!<%&%*!<%k!W$K$D$$$F(B
-
-  $BAH?%$H%$%s%?!<%M%C%H$N@\B3$K$*$$$F$O!"!V%U%!%$%"!<%&%*!<%k!W$H8F$P$l(B
-$B$k4D6-$r9=C[$7!"$3$l$K$h$C$FDL?.$r@)8f!"4F;k$r9T$J$&$3$H$,$"$j$^$9!#(B
-$B!V%U%!%$%"!<%&%*!<%k!W$NLr3d$K$O!"30It$N%M%C%H%o!<%/$+$iAH?%$NFbIt$N%M%C(B
-$B%H%o!<%/$r<i$k$3$H!"FbIt$N%M%C%H%o!<%/$KBP$7$F%$%s%?!<%M%C%H$X$N%5!<%S(B
-$B%9$rDs6!$9$k$3$H$J$I$,$"$j$^$9!#(B
-
-  $B0lHL$K!"!V%U%!%$%"!<%&%*!<%k!W$NF3F~$K$h$C$F%M%C%H%o!<%/$N%;%-%e%j%F%#(B
-$B$O9b$^$j$^$9$,!"(BWeb $B%5!<%P$r!V%U%!%$%"!<%&%*!<%k!W$K$h$kJ]8n$NBP>]$H$9(B
-$B$k$+$I$&$+$O!"%5%$%H$N%;%-%e%j%F%#%]%j%7!<$K$h$C$F0[$J$kH=CG$,$"$jF@$^(B
-$B$9!#(B
-
-  Web $B%5!<%P$r!V%U%!%$%"!<%&%*!<%k!W$K$h$kJ]8n$NBP>]30$H$7!"(BWeb $B%5!<%P(B
-$B$OC1FH$H$7$F%;%-%e%j%F%#$r9b$a$k$H$$$&1?MQ$b0l$D$NJ}<0$G$9!#J]8n$NBP>](B
-$B$rJ,$1$F4IM}$9$k$3$H$O!"A4BN$N%;%-%e%j%F%#$r9b$a$k$3$H$K$D$J$,$j$^$9!#(B
-
-  Web $B%5!<%P$r!V%U%!%$%"!<%&%*!<%k!W$K$h$kJ]8n$NBP>]$H$9$kJ}<0$b$"$j$^(B
-$B$9!#$?$@$7!"$3$N>l9g!"!V%U%!%$%"!<%&%*!<%k!W$K$h$C$F2?$,<i$i$l$F$$$k$+(B
-$B$K$D$$$F==J,Cm0U$9$kI,MW$,$"$j$^$9!#Bh(B I $B>O$G5s$2$?MW0x$N$&$A!"<BAuJ}(B
-$B<0$K$b$h$j$^$9$,!"!V%U%!%$%"!<%&%*!<%k!W$G$O<i$l$J$$$b$N$b$"$j$^$9!#(B
-$B!V%U%!%$%"!<%&%*!<%k!W$,$"$k$+$i$H$$$C$F!"(BWeb $B%5!<%P$N4m81@-$N$9$Y$F$,(B
-$B<i$i$l$k$o$1$G$O7h$7$F$"$j$^$;$s!#(B
-
-  $B=EBg$J1?MQ$N4*0c$$$H$7$F!"J]8n$9$k$3$H$rL\E*$H$7$F!"!V%U%!%$%"!<%&%*!<(B
-$B%k!W$K$h$C$F<i$i$l$F$$$kAH?%$NFbIt$N%M%C%H%o!<%/$K!"30It$N%5!<%S%9$rL\(B
-$BE*$H$7$?(B Web $B%5!<%P$rG[CV$9$k$3$H$,$"$j$^$9!#$3$N>l9g$K$O!"$+$($C$F%j(B
-$B%9%/$r9b$a$F$7$^$$!"K|$,0l(B Web $B%5!<%P$,IT@5?/F~$5$l$?>l9g$K!"AH?%$NFb(B
-$BIt$N%M%C%H%o!<%/$b4m81$K;/$5$l$k$3$H$K$J$j$^$9!#$3$N$h$&$J1?MQ$O7h$7$F(B
-$B4+$a$i$l$^$;$s!#(B
+  Web $B%5!<%S%9$rAH?%$NBP30%5!<%S%9$H$7$F!"$I$N$h$&$K0LCVIU$1$k$+$r:F8!(B
+$BF$$7!"2?$,I,MW>r7o$+!"$I$NDxEY$N%5!<%S%9%l%Y%k$r@_Dj$9$k$+$J$I$rDj5A$9(B
+$B$k$3$H$,=EMW$K$J$j$^$9(B[15]$B!#$3$l$i$rL@3N$K$7$?>e$G!"%;%-%e%j%F%#$K4X$7(B
+$B$F!"2?$r$I$NDxEY<i$k$+$,7h$^$j$^$9!#$^$?!"BP30%5!<%S%9$H$7$F$N(B Web $B%5!<(B
+$B%S%9$r9T$J$&$3$H$,%M%C%H%o!<%/$N9=@.$H@_7W$KH?1G$5$l!"%M%C%H%o!<%/A4BN(B
+$B$H$7$Fsrsw$J$/1?MQ$5$l$k$3$H$,K>$^$l$^$9!#(B
+
+  Web $B%5!<%S%9$N1?MQ$O!"0lHL$K%3%s%F%s%D:n@.<T!"(BWeb $B%5!<%S%9$N%W%m%0%i(B
+$B%_%s%0$r9T$J$&?M!"%[%9%H4IM}<T!"%M%C%H%o!<%/4IM}<T$J$IJ#?t$N?M4V$K$h$C(B
+$B$F<B;\$5$l$^$9!#$3$l$iJ#?t$N?M$NCf$G$N:n6HJ,C4$rL@3N2=$7!"99?7<j=g$rJ8(B
+$B=q2=$7!"$I$N$h$&$K$7$F%Z!<%899?7$r9T$J$&$+$r<~CNE0Dl$9$k$3$H$,=EMW$K$J(B
+$B$j$^$9!#(B
+
+  Web $B%5!<%S%9$*$h$S%[%9%H$NDL?.$r4F;k$7!"IT@5$J%"%/%;%9(B($B$"$k$$$O$=$N(B
+$B;n$_(B)$B$,$"$C$?>l9g$K$OAa4|$KH/8+$7$FBP1~$9$k$3$H$,K>$^$l$^$9!#4F;k$NBN(B
+$B@):n$j$r9T$J$$!"6[5^BP1~$N;EAH$_$r3NN)$9$k$3$H!"$*$h$S!"2DG=$G$"$l$P!"(B
+$B6[5^BP1~$N71N}$r$9$k$3$H$b?d>)$5$l$^$9!#(B
+
+
+III. Web $B%5!<%P$H%U%!%$%"%&%)!<%k(B
+
+  $BAH?%$H%$%s%?!<%M%C%H$N@\B3$K$*$$$F$O!"!V%U%!%$%"%&%)!<%k!W(B[16]$B$H8F$P(B
+$B$l$k4D6-$r9=C[$7!"$3$l$K$h$C$FDL?.$r@)8f!&4F;k$9$k$3$H$,$"$j$^$9!#!V%U%!(B
+$B%$%"%&%)!<%k!W$NLr3d$K$O!"30It$N%M%C%H%o!<%/$+$iAH?%FbIt$N%M%C%H%o!<%/(B
+$B$X$N%"%/%;%9$r@)8B$9$k$3$H!"AH?%FbIt$N%M%C%H%o!<%/$+$i%$%s%?!<%M%C%H>e(B
+$B$N%5!<%S%9$X$N%"%/%;%9$rDs6!$9$k$3$H$J$I$,$"$j$^$9!#(B
+
+  $B0lHL$K!V%U%!%$%"%&%)!<%k!W$NF3F~$K$h$C$F%M%C%H%o!<%/$N%;%-%e%j%F%#$r(B
+$B9b$a$k$3$H$,$G$-$^$9$,!"(BWeb $B%5!<%P$r!V%U%!%$%"%&%)!<%k!W$K$h$kJ]8n$NBP(B
+$B>]$H$9$k$+$I$&$+$O!"%5%$%H$N%;%-%e%j%F%#%]%j%7!<$K$h$C$F0[$J$kH=CG$,$"(B
+$B$jF@$^$9!#(B
+
+  Web $B%5!<%P$r!V%U%!%$%"%&%)!<%k!W$K$h$kJ]8n$NBP>]30$H$7!"(BWeb $B%5!<%P$O(B
+$BC1FH$H$7$F%;%-%e%j%F%#$r9b$a$k$H$$$&1?MQ$b0l$D$NJ}<0$G$9!#J]8n$NBP>]$r(B
+$BJ,$1$F4IM}$9$k$3$H$O!"A4BN$N%;%-%e%j%F%#$r9b$a$k$3$H$K$D$J$,$j$^$9!#(B
+
+  Web $B%5!<%P$r!V%U%!%$%"%&%)!<%k!W$K$h$kJ]8n$NBP>]$H$9$kJ}<0$b$"$j$^$9!#(B
+$B$?$@$7!"$3$N>l9g!"!V%U%!%$%"%&%)!<%k!W$K$h$C$F2?$r<i$k$+$K$D$$$F==J,Cm(B
+$B0U$9$kI,MW$,$"$j$^$9!#Bh(B I $B>O$G5s$2$?MW0x$N$&$A!"<BAuJ}<0$K$b$h$j$^$9(B
+$B$,!"!V%U%!%$%"%&%)!<%k!W$G$O<i$l$J$$$b$N$b$"$j$^$9!#!V%U%!%$%"%&%)!<%k!W(B
+$B$,$"$k$+$i$H$$$C$F!"(BWeb $B%5!<%P$N4m81@-$N$9$Y$F$rGS=|$G$-$k$o$1$G$O$"$j(B
+$B$^$;$s!#(B
+
+  $B1?MQ>e$N=EBg$J4*0c$$$H$7$F!"!V%U%!%$%"%&%)!<%k!W$K$h$C$F<i$i$l$F$$$k(B
+$BAH?%FbIt$N%M%C%H%o!<%/$K!"30It$X$N%5!<%S%9$rL\E*$H$7$?(B Web $B%5!<%P$rG[(B
+$BCV$9$k$3$H$,$"$j$^$9!#$3$N$h$&$J9=@.$G$O!"K|$,0l(B Web $B%5!<%P$,IT@5?/F~(B
+$B$5$l$?>l9g!"AH?%FbIt$N%M%C%H%o!<%/$b4m81$K;/$5$l$k$3$H$K$J$j$^$9!#$3$N(B
+$B$h$&$J1?MQ$O7h$7$F4+$a$i$l$^$;$s!#(B
 
 
 IV. $B;29M;qNA(B
 
-[1] CERT Advisory CA-99-07, "IIS Buffer Overflow", June 18, 1999.
-    http://www.cert.org/advisories/CA-99-07-IIS-Buffer-Overflow.html
+[1] CERT Advisory CA-1998-04
+    Microsoft Windows-based Web Servers access via long file names
 
-[2] ISS Security Advisory, "Buffer Overflow in Netscape Enterprise and
-    FastTrack Web Servers", August 25, 1999.
+    http://www.cert.org/advisories/CA-1998-04.html
 
-    http://ciac.llnl.gov/ciac/bulletins/j-062.shtml
+[2] CERT Advisory CA-1999-07
+    IIS Buffer Overflow
 
-[3] CIAC Bulletin, "Web Security", May 17, 1999.
+    http://www.cert.org/advisories/CA-1999-07.html
 
-    http://ciac.llnl.gov/ciac/bulletins/j-042.shtml
+[3] CERT Advisory CA-2001-10
+    buffer Overflow Vulnerability in Microsoft IIS 5.0
 
+    http://www.cert.org/advisories/CA-2001-10.html
+
+[4] CERT Advisory CA-2001-12
+    Superfluous Decoding Vulnerability in IIS
+
+    http://www.cert.org/advisories/CA-2001-12.html
+
+[5] CERT Advisory CA-2001-13
+    Buffer Overflow In IIS Indexing Service DLL
+
+    http://www.cert.org/advisories/CA-2001-13.html
+
+[6] CERT Advisory CA-2001-14
+    Cisco IOS HTTP Server Authentication Vulnerability
+
+    http://www.cert.org/advisories/CA-2001-14.html
+
+[7] CIAC Bulletin J-062
+    Netscape Enterprise and FastTrack Web Servers Buffer Overflow
+
+    http://www.ciac.gov/ciac/bulletins/j-062.shtml
+
+[8] CIAC Bulletin J-042
+    Web Security
+
+    http://www.ciac.gov/ciac/bulletins/j-042.shtml
+
+[9] JPCERT/CC Alert 2001-06-20
+    Microsoft Index Server ISAPI Extension Buffer Overflow
+
+    http://www.jpcert.or.jp/at/2001/at010010.txt
+
+[10] JPCERT/CC Alert(Microsoft IIS) 2001-05-09
+     IIS 5.0 $B$N%;%-%e%j%F%#>e$N<eE@(B
+
+    http://www.jpcert.or.jp/at/2001/at010008.txt
+
+[11] Windows NT Configuration Guidelines
+
+    http://www.cert.org/tech_tips/win_configuration_guidelines.html
+
+[12] UNIX Configuration Guidelines
+
+    http://www.cert.org/tech_tips/unix_configuration_guidelines.html
+
+[13] UNIX Security Checklist v2.0
+
+    http://www.auscert.org.au/Information/Auscert_info/Papers/usc20.html
+    http://www.cert.org/tech_tips/usc20.html
+
+[14] Improving Computer Security through Network Design
+
+    http://www.auscert.org.au/Information/Auscert_info/Papers/Security_Domains.html
+
+[15] Site Security Policy Development
+
+    http://www.auscert.org.au/Information/Auscert_info/Papers/Site_Security_Policy_Development.txt
+
+[16] Home Network Security
+
+    http://www.cert.org/tech_tips/home_networks.html#II-L
 
 __________
 
@@ -194,7 +256,7 @@
 
 __________
 
-2000 (C) JPCERT/CC
+2000-2001 (C) JPCERT/CC
 
   $B$3$NJ8=q$rE>:\$9$k:]$K$O!"A4J8$rE>:\$7$F$/$@$5$$!#>pJs$O99?7$5$l$F$$(B
 $B$k2DG=@-$,$"$j$^$9$N$G!":G?7>pJs$K$D$$$F$O(B
@@ -212,16 +274,18 @@
 
 $B2~D{MzNr(B
 
+2001-12-27  $B;2>H(B URL $B$HJ8LL$N99?7(B
 2000-08-25  $B;2>H(B URL $B$N99?7(B
 2000-02-28  $BBh(B IV $B>O(B $B;29M;qNA$N(B URL $B$r=$@5!#(B
 2000-02-14  $B=iHG(B
 
 -----BEGIN PGP SIGNATURE-----
 Version: 2.6.3ia
+Charset: noconv
 
-iQCVAwUBOaXvnox1ay4slNTtAQFxSQQA48eaEqyW1A0sGlu6LRb4HHjEW5ygWbyR
-RKEfP9VAMu9gW2C1rd2fmUn2qEP3REAgqAuiDtwnZ9I3/dx1aDo8OPWdMyXR85hm
-t28qmbOwjdztFP3ry2UfZxl0GBGrO50eKZawNvXbhafP1oswGHDkW5Ycu+rz2a+3
-bLR61qrz9PA=
-=wJZ7
+iQCVAwUBPCqI8ox1ay4slNTtAQHQ6gP+Lqj5MxUAPwehv+K7VrQAW3xPtICyyDOD
+byxTS5eHtiFtLO9JWpm4/sq/sr2R+jfQKm5Eozyszq6tE9eeWo2hmQPS8pEMd/uu
+Vy1jVD1zCpcHIQpDlsu9ETBvEKKKOB0TFBIVZgv/aONKr1fGpfOCJVf8deyuhU4e
+MipXmCexFCo=
+=8eFf
 -----END PGP SIGNATURE-----
