$B%;%-%e%j%F%#%[!<%k(B memo - 2002.06

$B!!(B2002.06.27 $B$N(B Pine Internet Security Advisory PINE-CERT-20020601: Remote buffer overflow in resolver code of libc $B$K$^$?DI5-$7$?!#(B bind 9 $B$rMxMQ$7$?2sHrJ}K!!#(B JPCERT/CC $BCm0U4-5/!#(B

$B!!(BCISCO IOS$B!"(BPIX Firewall$B!"(BCatOS $B$,F0:n$9$k(B Catalyst 6000$B!"(BCisco 11000 Content Service Switch $B$KCisco Security Advisory: Multiple SSH Vulnerabilities $B$rE,MQ$7$?>l9g$K!"967bSSH CRC32 attack $B$r9T$&$H!"(BSSH $B%b%8%e!<%k$,(B CPU $B$r?)$$$^$/$C$F(B DoS $B>uBV$K$J$C$F$7$^$C$?$j!"$"$k$$$O(B reboot $B$7$F$7$^$C$?$j$9$k!#(B

$B!!(Bpatch $B$,$"$C$?$j$J$+$C$?$j$9$k$h$&$J$N$G!"$4MxMQ$N(B IOS $BEy$N%P!<%8%g%s$r$*3N$+$a$N>e$4BP1~$r!#(B

$B!!%U%!%$%k$N$D$/$jJ}$K$$$m$$$m$HLdBj$,$"$k$h$&$G!#(B

• Acrobat reader 4.05 temporary files

• Acrobat reader 5.05 temp file insecurity

$B!!(B2002.06.27 $B$N(B Pine Internet Security Advisory PINE-CERT-20020601: Remote buffer overflow in resolver code of libc $B$KDI5-$7$?!#(BNetBSD Advisory$B!"(Bbind 4.9.9/8.2.6/8.3.3 $BEP>l!#(B

$B!!(B2002.06.27 $B$N(B CERT Advisory CA-2002-18 OpenSSH Vulnerabilities in Challenge Response Handling $B$KDI5-$7$?!#(BNetBSD, Kondara, RedHat $B$+$i$N(B Advisory$B!#(B

$B!!(BFreeBSD, OpenBSD, NetBSD $B$K4^$^$l$k(B DNS resolver $B%3!<%I$K(B buffer overflow $B$9$k

• FreeBSD-SA-02:28 buffer overflow in resolver

• [netbsd,07786] Re: libc... (NetBSD)

• buffer overflow in the DNS resolver (OpenBSD)

$B!!(Blibc $B$rF~$l$+$($?$"$H$G!"(Bstatic link $B$5$l$F$$$k%3%^%s%I$O:n$j$J$*$9I,MW$,$"$k!#(B

$B!!(BNetBSD$B$N(Blibc$B$K%j%b!<%H$+$i$N%P%C%U%!%*!<%P!<%i%s$N4m81@-(B ($BB>(BUNIX$B$b(B) (slashdot.jp) $B$N(B $B$3$N5-;v(B $B$K$h$k$H!"(Bglibc $B$K$bF1$8LdBj$,$"$k$i$7$$!#(B

2002.06.28 $BDI5-(B:

• NetBSD Security Advisory 2002-006: buffer overrun in libc DNS resolver

• bind 4.9.9/8.2.6/8.3.3 $B$,=P$F$$$^$9(B (info from [installer 7354])$B!#(Bweb page $B$O$^$@99?7$5$l$F$$$J$$$h$&$G$9$,!"(Bftp://ftp.isc.org/isc/bind/ $B$K$OB8:_$7$^$9!#(BBIND for NT/2000 8.3.3 $B$b$A$c$s$H$"$j$^$9!#(B $B$^$?!"(B498-499.diff $B$J$I$H$$$C$?(B patch $B$b8x3+$5$l$F$$$^$9!#(B

  Vulnerability Note VU#803539: Multiple vendors' Domain Name System (DNS) stub resolvers vulnerable to buffer overflow $B$G$O(B The DNS resolver libraries (libbind) included with BIND 4 and 8 are vulnerable. ISC has reported that named does not call vulnerable functions in libbind $B$H$5$l$F$$$^$9!#(B

2002.06.28 $BDI5-(B part 2:

• Vulnerability Note VU#803539: Multiple vendors' Domain Name System (DNS) stub resolvers vulnerable to buffer overflow $B$K$OBP1~J}K!$H$7$F!"(Bpatch $BE,MQ!"(Bupgrade $B$NB>$K!V(BDNS answers $B$r:F9=@.$9$k$h$&$J(B Local Caching DNS Server $B$r;H$&!W$,<($5$l$F$$$k!#(BDNS answers $B$r:F9=@.$9$k$h$&$J%W%m%@%/%H$H$7$F$O(B bind 9 $B$,<($5$l$F$$$k!#(B

  $B;2>H(B: NetBSD ML $B$G$N5DO@!#(B

• DNS resolver $B$N@H (JPCERT/CC)

$B!!$^$@$^$@>u67$O3HBg$7$=$&$G$9!#(B

2002.07.01 $BDI5-(B:

$B!!(Bsendmail $BOC$O0c$&OC$G$"$k$3$H$,L@3N$K$J$C$?$N$G5-=R$r%3%a%s%H%"%&%H$7$?!#(B

• patch $B$,E,MQ$5$l$?(B FreeBSD 4.6-RELEASE-p1$B!"(B4.5-RELEASE-p7 $B$,(B ftp://snapshots.jp.FreeBSD.org/pub/FreeBSD/releases/i386/ $B$G8x3+$5$l$F$$$^$9!#(B ISO $B%$%a!<%8$b$"$j$^$9!#(B

• CERT Advisory CA-2002-19 Buffer Overflow in Multiple DNS Resolver Libraries

  $BCm0U$7$^$7$g$&(B: BIND 9 contains a copy of the BIND 8.3.x resolver library (lib/bind). This will be updated with the next BIND 9 releases (9.2.2/9.3.0) in the meantime please use the original in BIND 8.3.3 $B$NItJ,!#(B libbind $B$K$D$$$F$O(B bind 8.3.3 $BIUB0$N$b$N$r;H$$$^$7$g$&!#(B

  GNU adns $B$J$s$F%=%U%H$,$"$k$s$@!#$U$%$s!#(B

2002.07.02 $BDI5-(B:

• Mac OS X $B$O%7%m$@$=$&$G$9(B: Mac OS X not vulnerable to resolver vulnerability

• Vulnerability Note VU#803539 $B$,99?7$5$l$F$$$^$9!#$3$l$K$h$k$H(B:

  • GNU glibc $B$O%7%m(B

  • Microsoft $B$b%7%m(B

  • Sun Microsystems Inc. $B$O%/%m(B

2002.07.12 $BDI5-(B:

$B!!(BCA-2002-19 $B$,99?7$5$l$F$$$^$9!#(B

• IBM AIX $B$O%/%m!#(B

• GNU glibc $B$b

  • $B%[%9%HL>2r7h(B (/etc/nsswitch.conf $B$N(B host: $B%(%s%H%j(B) $B$K$*$$$F$O!"(Bglibc 2.1.2 $B0JA0$GLdBj$,H/@8!#(B $B$$$^$I$-$NB?$/$N(B Linux $B$KEc:\$5$l$F$$$k(B glibc 2.1.3 $B$G$OLdBj$K$O$J$i$J$$!#(B

  • $B%M%C%H%o!<%/L>2r7h(B (/etc/nsswitch.conf $B$N(B networks: $B%(%s%H%j(B) $B$K$*$$$F$O!"(Bglibc 2.2.5 $B0JA0$GLdBj$,H/@8!#(B $B$$$^$I$-$NB?$/$N(B Linux $B$KEc:\$5$l$F$$$k(B glibc 2.1.3 $B$G$bLdBj$K$J$k$,!"(Bnetworks: $B$G(B DNS $B$rMxMQ$7$F$$$kNc$O$^$:$J$$$H;W$o$l$k!#(B

  glibc 2.1.3 $B0J9_$K(B upgrade $B$7$?>e$G(B patch $B$rE,MQ$7!"(Bstatic link $B$5$l$F$$$k%W%m%0%i%`$r:F%3%s%Q%$%k$9$k$3$H$,?d>)$5$l$F$$$k!#(B

  info from: [memo:4540]$B!"(B[memo:4542]$B!#(B

• djb $B;a$K$h$k(B DNS client (resolver) $B%i%$%V%i%j$,(B public domain $B@k8@$5$l$?(B: Re: Remote buffer overflow in resolver code of libc$B!#(B

2002.07.23 $BDI5-(B:

• IRIX $B$O%7%m(B: IRIX DNS resolver vulnerability

2002.08.01 $BDI5-(B:

• [RHSA-2002:139-10] glibc$B%Q%C%1!<%8$N%"%C%W%G!<%H(B (RedHat Linux)

• glibc: resolver$B$N@H (TurboLinux)

2002.08.29 $BDI5-(B:

$B!!(BDNS resolver$B$N@H$B!#(B resolver $BF~$l$+$($,I,MW!#(B

2002.10.02 $BDI5-(B:

$B!!(BGNU glibc Information for VU#738331$B!#(B

2002-09-04 Roland McGrath <roland@redhat.com>

* resolv/nss_dns/dns-network.c (MAXPACKET): Increase minimum value from 1024 to 65536, to avoid buffer overrun.

$B$H$$$&$N$,2C$o$C$F$k$s$G$9$M!#(B

2002.12.26 $BDI5-(B:

$B!!(BJP1/Agent for Process Management$B$K4X$9$k%;%-%e%j%F%#LdBj$X$NBP1~(B$B!#(B

$B!!(B2002.06.19 $B$N(B CERT Advisory CA-2002-17 Apache Web Server Chunk Handling Vulnerability $B$KDI5-$7$?!#(BOracle$B!"(BIBM $B$N(B patch $B=P$^$7$?!#(B

$B!!(B2002.06.13 $B$N(B MS02-029: $B%j%b!<%H%"%/%;%9%5!<%S%9$NEEOCD"$NL$%A%'%C%/$N%P%C%U%!$K$h$j%3!<%I$, $B$KDI5-$7$?!#(BMS02-029 patch $B$rE,MQ$9$k$H!"(BVPN $BMxMQ;~$K(B administrator $B8"8B$,I,MW$K$J$k$H$$$&I{:nMQ$,$"$k$=$&$@!#(B

$B!!(BWindows Media Player 6.4/7.1, Media Player for Windows XP $B$N!VN_@QE*$J=$@5%W%m%0%i%`!W!#4{CN$N!"0J2<$N(B 3 $B$D$NLdBj$,=$@5$5$l$k(B:

• Windows Media Player $B$K$h$k%-%c%C%7%e$N%Q%9$N8x3+(B (CAN-2002-0372)

  Media Player $B$,(B $BFCDj$N7A<0$N%;%-%e%"%a%G%#%"%U%!%$%k$r07$&;~$K!"%5!<%P$KBP$7$F!"(BIE cache $BCf$N%U%!%$%k$N0LCV$rK=O*$7$F$7$^$&!#$3$l$K$h$j(B IE cache $B$N>l=j$,$o$+$k$N$G!"0-0U$"$k(B web $B%5!<%P4IM}

• Windows $B%a%G%#%"%G%P%$%9%^%M!<%8%c%5!<%S%9$K$h$k8"8B$N>:3J(B (CAN-2002-0373)

  Windows Media Device Manager Service $B$,(B local storage device $B$r07$&:]$K(B local SYSTEM $B8"8B$G9T$C$F$7$^$&$?$a!"$3$l$r0-MQ$9$k$H0lHL%f!<%6$,(B local SYSTEM $B8"8B$r

  Windows 2000 $B>e$N(B Windows Media Player 7.1 $B$N$_$NLdBj!#$^$?!"%?!<%_%J%k%;%C%7%g%s$N>l9g$K$bLdBj$,2sHr$5$l$k!#(B

• $B%a%G%#%":F@8%9%/%j%W%H$N8F$S=P$7(B (CAN-2002-0615)

  $B%9%/%j%W%H$r%^%$%3%s%T%e!<%?%>!<%s8"8B$G

$B!!(Bpatch $B$,$"$k$N$GE,MQ$9$l$P$h$$!#(B

2002.07.26 $BDI5-(B:

$B!!(Bpatch $B$,:F%j%j!<%9$5$l$F$$$k!#(B $BN_@QE*=$@5%W%m%0%i%`$J$O$:$@$C$?$N$K!"(BMS01-056 $B$G=$@5$7$?%U%!%$%k$,7g$1$F$$$?LOMM!#@N(B MS01-056 $B$rE,MQ$7$?$3$H$,$"$C$??M$K$O4X78$J$$$,!"(B $B:G6a(B Windows $B$r?75,%$%s%9%H!<%k$7$?>l9g$J$I!"2a5n$K(B MS01-056 $B$rE,MQ$7$F$$$J$$?M$O!":F%Q%C%1!<%8$5$l$??7(B MS02-032 $B=$@5%W%m%0%i%`$r:FE,MQ$7$h$&!#(B

$B!!(BExcel 2000/XP$B!"(BWord XP $BMQ$N!VN_@QE*$J=$@5%W%m%0%i%`!W!#4{CN$NLdBj$NB>$K(B 4 $B$D$NLdBj$,=$@5$5$l$F$$$k!#!V(BHTML $B%9%/%j%W%HExcel XP xml stylesheet problems (Georgi Guninski security advisory #55, 2002) $B$NOC(B (CAN-2002-0618)$B!#(B $B!V!V(BWord $B$N:9$79~$_0u:~5!G=!W$N@HA variant of "Word Mail Merge" vulnerability $B$NOC(B (CAN-2002-0619)$B!#(B

$B!!(Bpatch $B$,=P$F$$$k$N$GE,MQ$9$l$P$h$$!#(B

$B!!(BRe: Upcoming OpenSSH vulnerability $B$NOC$G$9$,!"$"$i$?$a$F!#(B

$B!!(BOpenSSH 2.3.1p1 $B!A(B 3.3 $B$^$G$K(B 2 $B$D$N

• $B%A%c%l%s%8%l%9%]%s%9G'>ZMxMQ;~$K(B integer $B$,%*!<%P!<%U%m!<$7$F$7$^$&$?$a!"$3$l$rMxMQ$7$F(B remote $B$+$iG$0U$N%3!<%I$r(B sshd $BZ$,M-8z$J>l9g$K3:Ev!#(B $B$3$NLdBj$rMxMQ$7$?(B exploit $B$O4{$KB8:_$9$k$H$$$&!#(B

  $B>\:Y(B: Internet Security Systems $B%;%-%e%j%F%#(B $B%"%I%P%$%6%j(B $B!V(BOpenSSH $B$G$N%j%b!<%H(B $B%A%c%l%s%8$N@H

• $B%A%c%l%s%8%l%9%]%s%9G'>ZMxMQ;~$K%P%C%U%!%*!<%P!<%U%m!<$7$F$7$^$&$?$a!"$3$l$rMxMQ$7$F(B remote $B$+$iG$0U$N%3!<%I$r(B sshd $BZ$rMxMQ$9$k(B PAM $B%b%8%e!<%k(B (PAMAuthenticationViaKbdInt) $B$r;HMQ$7$F$$$k>l9g$K3:Ev!#(B $B$3$NLdBj$,(B exploit $B2DG=$+H]$+$O8=;~E@$G$OITL@!#(B

$B!!BP1~$9$k$K$O!"(BOpenSSH 3.4 $B0J>e$K0\9T$9$k$+!"$"$k$$$O(B Revised OpenSSH Security Advisory (adv.iss) $B$K<($5$l$F$$$k(B patch $B$rE,MQ$9$k!#(BOpenSSH 3.3 $B0J9_$G%G%U%)%k%HM-8z$H$J$C$F$$$k(B privilege separation $B5!G=$rMxMQ$9$k$H!">-MhH/@8$9$k$+$b$7$l$J$$LdBj$KBP$7$F$b:G>.8B$NHo32$G:Q$`2DG=@-$,9b$$$N$G!"(Bpatch $BE,MQ$G$O$J$/(B OpenSSH 3.4 $B0J9_$G$N0\9T$,K>$^$7$$!#$?$@$7!"(Bprivilege separation $B5!G=$,MxMQ$G$-$J$$(B OS $B$b$"$k$h$&$@!#(B

$B!!0\9T$"$k$$$O(B patch $B$rE,MQ$9$k$^$G$N2sHr:v$,$$$/$D$+B8:_$9$k!#(B

• SSH protocol version 2 $B$rL58z$K$9$k!#(B

  sshd_config $B$G(B Protocol 1 $B$H$9$k!#(B

• $B%A%c%l%s%8%l%9%]%s%9G'>Z$rL58z$K$9$k!#(BOpenSSH 2.9 $B$h$j8e$N%P!<%8%g%s$GMxMQ$G$-$k!#(B

  sshd_config $B$G(B ChallengeResponseAuthentication no $B$H$9$k!#(B

• PAM $B$K$*$1$kBPOCE*%-!<%\!<%IG'>Z$rL58z$K$9$k!#(BOpenSSH 2.9 $B$h$j8e$N%P!<%8%g%s$GMxMQ$G$-$k!#(B

  sshd_config $B$G(B PAMAuthenticationViaKbdInt no $B$H$9$k!#(B

• OpenSSH 2.3.1p1 $B!A(B 2.9 $B$K$*$$$F$O!"(B KbdInteractiveAuthentication no $B$H(B ChallengeResponseAuthentication no $B$NN>J}$r;XDj$9$l$P2sHr$G$-$k!#(B ($B5-=R=$@5(B: $B8M@n$5$s46

$B!!(Bpatch, fix package $BEy(B:

• Revised OpenSSH Security Advisory (adv.iss)

  official patch$B!#(B

• June 24, 2002: All versions of OpenSSH's sshd between 2.9.9 and 3.3 contain an input validation error that can result in an integer overflow and privilege escalation. (OpenSSH)

• ports/security/openssh-portable (FreeBSD)

  FreeBSD 3.4p1 $BBP1~$K$J$C$F$$$^$9!#(B

• OpenSSH $B%;%-%e%j%F%#(B $B4IM} (Miracle Linux)

• [debian-users:33484] [Translate] [SECURITY] [DSA-134-3] Unknown OpenSSH remotevulnerability (Debian GNU/Linux)

  DSA-134-3 $B$NCJ3,$G$O(B OpenSSH 3.3p1 $B$,<($5$l$F$$$k$N$G!"$=$N$&$A(B 3.4p1 $B$KBP1~$7$??7(B Advisory $B$,EP>l$9$k$+$b$7$l$^$;$s!#(B

  $B$H$+=q$$$F$$$k4V$K(B ($B$^$?$@$h(B (^^;;))$B!"(BDSA-134-4 $B$,=P$^$7$?(B: [SECURITY] [DSA-134-4] OpenSSH Remote Challenge Vulnerability$B!#(B OpenSSH 3.4p1 $BBP1~HG$,EP>l$7$F$$$^$9!#(B DSA-134-4 $BF|K\8lHG(B$B!#(B

• $B!|(B2002,06,26$B!|(B OpenSSH $B$K%;%-%e%j%F%#%[!<%k(B (VineLinux 2.5)

  $B$3$l$b(B 3.3p1 $B$J$N$G!"$=$N$&$A(B 3.4p1 $B%Y!<%9$N$b$N$,EP>l$9$k$G$7$g$&!#(B

$B!!4XO">pJs(B:

• OpenSSH $B%5!<%P%W%m%0%i%`$N@H (JPCERT/CC)

• installer ML $B$N(B [installer 7352] $B$K$*$$$F!"(BFreeBSD 4.6-RELEASE / STABLE $B$K$*$$$F$O!"(BOpenSSH 3.4p1 $B$N(B configure $B$N(B 6544 $B9TL\(B (#include <sys/mman.h>) $B$NA0$K(B #include <sys/types.h> $B$rA^F~$7$J$$$H(B #define HAVE_MMAP_ANON_SHARED 1 $B$,Dj5A$5$l$J$+$C$?!"$H;XE&$5$l$F$$$k!#(B

  $BF1MM$N%l%]!<%H(B: Re: new sshd 3.4p1 (freebsd-security ML)

2002.06.28 $BDI5-(B:

• NetBSD Security Advisory 2002-005: OpenSSH protocol version 2 challenge-response authentication vulnerability

• openssh (2002-06-28) (Kondara MNU/Linux)

• [RHSA-2002:127-18] Updated OpenSSH packages fix various security issues

  RedHat $B$O(B OpenSSH 3.1p1 $B%Y!<%9$N$^$^$G$9$M!#(B

$B!!(BVulnerability Note VU#369347: OpenSSH vulnerabilities in challenge response handling $B$b;2>H!#(B

2002.07.01 $BDI5-(B:

• Security Update July 2002 (Apple)

  $B%=%U%H%&%'%"%"%C%W%G!<%H$G(B Security Update July 2002 $B$r%$%s%9%H!<%k$9$k$H(B OpenSSH 3.4p1 $B$K$J$j$^$9!#(B $B$?$@$7!"(B$B%j%s%/$H$+HwK:O?$H$+F|5-$H$+(B 2002.06.29 $B$K$b$"$k$h$&$K!"%G%U%)%k%H$G$O(B privilege separation $B$,M-8z$G$O$J$$$h$&$G$9!#$^$?(B [macosx-jp:11168] $B$K$h$k$H!"%f!<%6(B/$B%0%k!<%W(B sshd $B$H%G%#%l%/%H%j(B /var/empty $B$r:n@.$7$?>e$G(B UsePrivilegeSeparation yes $B$9$k$H(B privilege separation $B$OMxMQ2DG=$J$h$&$G$9!#(B

• FreeBSD $B$G$N(B OpenSSH 3.4p1 ports $B$K$*$1$k(B HAVE_MMAP_ANON_SHARED $BLdBj$O!"(Bports/security/openssh-portable $B$N(B 3.4p1_1 $B$G=$@5$5$l$F$$$^$9!#(B

• OpenBSD 3.1 sshd remote root exploit $B$@$=$&$G$9!#(B

• Sun statement on the OpenSSH Remote Challenge Vulnerability

  Solaris 9 $B$K$O(B OpenSSH $B$,$D$$$F$$$k$s$G$9$M!#(B

• [netbsd,07828] BSD BOF: security update

  7/3 $B$N(B N+I BSD BOF $B$G(B itojun $B$5$s$,(B resolver $B$H(B OpenSSH $B$NOC$r$5$l$k$=$&$G$9!#(B $B$3$s$J$N=q$$$F$_$^$7$?(B: [netbsd,07832]

• $B!|(B2002,06,26$B!|(B OpenSSH $B$K%;%-%e%j%F%#%[!<%k(B (2002/06/28$B2~D{(B) (VineLinux 2.5)

• $B%;%-%e%j%F%#!&%[!<%kBP:v$N@0M}K!!A(BOpenSSH$B$rBj:`$K9M$($k!A(B ($BF|7P(B IT Pro)

  privilege separation $B$rM-8z$K$9$k$H(B PAMAuthenticationViaKbdInt $B$,;H$($J$/$J$k$N$G!"M-8z$K$7$?>l9g!"!VBP:v8e$N1F6A!W$O!V$J$7!W$G$O$J$$$H;W$&$N$@$,!#(B

• $B=U;3;a$K$h$k(B README.privsep $BK.LuHG(B

• LAC $B$K$h$k(B CERT Advisory CA-2002-18 OpenSSH Vulnerabilities in Challenge Response Handling $BK.LuHG(B

2002.07.05 $BDI5-(B:

• openssh: $B0-0U$N$"$k%f!<%6!<$K$h$k(Broot$B8"8BC% (TurboLinux)

$B!!(Bsendmail 8.12.5 $B=P$F$$$^$9!#(B

SECURITY: The DNS map can cause a buffer overflow if the user specifies a dns map using TXT records in the configuration file and a rogue DNS server is queried. None of the sendmail supplied configuration files use this option hence they are not vulnerable. Problem noted independently by Joost Pol of PINE Internet and Anton Rang of Sun Microsystems.

$B$@$=$&$G$9!#(B

2003.02.26 $BDI5-(B:

$B!!(BCVE: CAN-2002-0906$B!#(B

$B!!(B2002.06.24 $B$N(B $B%;%-%e%j%F%#>e$N@H $B$KDI5-$7$?!#(BWinbiff $B$NBP:vHGEP>l!#(B

$B!!(B2002.06.25 $B$N(B Re: Upcoming OpenSSH vulnerability $B$KDI5-$7$?!#(BDebian $B>pJs99?7!"(BOpenSSH 3.4 $BEP>lM=9p!#(B

$B!!(B$B:bCDK!?MF|K\>pJs=hM}3+H/6(2q%W%i%$%P%7!<%^!<%/;vL36I(B$B!#(B $B%W%i%$%P%7!<%^!<%/;HMQ5vBz;v6H$B!#(B

• [memo:4133] $B!V;v6H$NFbMF5Z$S5,LO$r9MN8$7$?E,@Z$J8D?M>pJs$N<}=8!W%O%!!)(B

  $B$D$E$-(B: [memo:4139]$B!#$3$l$O>iCL$G$O$J$/!"8=

• [memo:4109] Re: mytrip.net$B$N$J$j$9$^$7LdBj(B

  $B%^%$%H%j%C%W!&%M%C%H$OH>G/0J>eM-8z4|4V$,@Z$l$F$$$k$K$b$+$+$o$i$:;H$$$D$E$1$i$l$F$$$?$H$$$&OC!#$A$J$_$K!":#$O99?7[memo:4312]$B!#(B

• $B%W%i%$%P%7!<%^!<%/%;%_%J!<(B2002($BEl5~(B) $BBh#22s(B PDF $BHG@bL@2q;qNA(B

  $B!V8D?M>pJsJ]8n$N0BA4BP:v$N9M$(J}!W!D!D$U$`$U$`!D!D$U$%$s!"9gM}E*$J0BA4BP:v$M(B (p.3)$B!#%*!<%P!<%X%C%I$,>/$J$/;v6H7QB32DG=!"$H!D!D!#$J$s$@$+!"$I$&$H$G$b

  $B!V%W%i%$%P%7!<%^!<%/@)EY$H%3%s%W%i%$%"%s%9!&%W%m%0%i%`$NN10UE@!W!D!D$U$`$U$`!D!D!#C8e(B 2 $BG/0JFb$@$H%W%i%$%P%7!<%^!<%/$NIUM?BP>]$K$J$i$J$$$s$G$9$M(B (p.11)$B!#$"$/$^$G6H3&J]8nM%@h$@$+$i!"0lC6C$G$O$J$/(B 7 $B$+7n$b99?7F|$@$1$J$s$@(B (p.16)$B!#HqMQE*$K$b$?$$$7$?$3$H$J$$$G$9$M(B (p.17)$B!#$=$NDxEY$J$N$K!"99?7

$B!!(B1 $BG/$r7P$F$h$&$d$/8x3+!"$@$=$&$G$9!#(B

$B!!(B2002.02.20 $B$N(B [memo:2996] $B!V(BVAIO$B!W$N=P2Y;~@_Dj$G?.Mj:Q$_%5%$%H$KFCDj%5%$%H$,EPO?$5$l$F$$$kLdBj(B $BD{@5(B $B$KDI5-$7$?!#9bLZ$5$s$K$h$k%U%)%m!<5-;v$rDI5-!#?7%b%8%e!<%k3+H/$K$h$j!"LdBj$N%5%$%H$O?.Mj:Q$_%5%$%H%>!<%s$+$i30$;$k$h$&$K$J$C$?LOMM!#(B

$B!!(B2002.06.14 $B$N(B Web$B3+H/ $B$KDI5-$7$?!#9V1i;qNA$N8x3+$H(B INTERNET Watch $B5-;v$X$N%U%)%m!

$B!!(B[memo:3933] $B$*$h$S(B [memo:4255] $B$K$h$k$H!"(B$BAmL3>J!'EE;R?=@A!&FO=P%7%9%F%`(B $B$N%;%-%e%j%F%#E*$J$G$9!#(B

$B!!(BISS Security Alert Summary AS02-25 $B$G$9!#(B

• NGSSoftware $B$+$i%I%-%e%a%s%H(B 2 $B$D(B:

  • Violating Database Security Mechanisms

  • More Advanced SQL Injection

• NGSSoftware Insight Security Research Advisory #NISR19062002: OpenDataSource Buffer Overflow

  SQL Server 2000 $B$K$B:G?7$N(B JET Servic Pack $B$NE,MQ$G2sHr$G$-$k$=$&$@!#(B

$B!!(B2002.06.19 $B$N(B CERT Advisory CA-2002-17 Apache Web Server Chunk Handling Vulnerability $B$KDI5-$7$?!#(BApache 1.3.x $BMQ$N(B official $B$J8DJL(B patch $BEP>l!"B>!#(B

$B!!Ho323[$C$F!"9b$/$7$h$&$H;W$C$?$i$$$/$i$G$b9b$/$J$k$7$J$"!#$*$^$1$K!"?t;z$@$1FH$jJb$-$9$k$7!#%_%H%K%C%/;a$N$H$-$J$s$F!"!D!D!#(B

$B!!LdBj$,H/@8$9$k$N$O(B Warez $B$b$N!"$i$7$$!#$3$l$,K\Ev$J$i!"JQ$@$H8@$C$F$$$??M$O$_$J(B Warez $B;H$$$J$o$1$G!"$J$+$J$+%"%l%2!#(B

$B!!$1$C$-$g$/:#$@$K%$%s%9%H!<%k$G$-$F$J$$$7!D!D(B > XP$B!#F~

2002.09.19 $BDI5-(B:

$B!!(BFAQ $B$,99?7$5$l!"!V(BQ.$B$$$h$$$h(BWindowsXP$B$N(BSP1$B$,EP>l$7$^$7$?$,!"$3$N(BSP1$B$K$O%;%-%e%j%F%#%+%?%m%0$,L58z$K$J$i$J$$(BNT5INF.CA_$B$,F~$C$F$$$k$h$&$G$9!#(B $B$b$7$+$7$F$3$N%U%!%$%k$r;H$($P#57n(B30$BF|LdBj$O2sHr$G$-$k$N$G$O!)(B$B!W(B $B$,DI2C$5$l$F$$$k!#$&!<$`!D!D!#(B

$B!!F?L>4uK>$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B

$B!!(B[memo:4304] $B$NOC$N(B fix $B$,F~$C$F$$$k$H;W$$$^$9!#(B

2002.07.10 $BDI5-(B:

• mod_ssl: $B0-0U$N$"$k%f!<%6!<$K$h$k(Bhttpd$B%5!<%P!<$N8"8BC% (TurboLinux)

• DSA-135-1 libapache-mod-ssl -- buffer overflow / DoS (Debian)

• OpenBSD 3.1: 008: SECURITY FIX: June 26, 2002

• Cisco Security Advisory: Buffer Overflow in UNIX VPN Client

• Cisco Security Advisory: Cisco ONS15454 IP TOS Bit Vulnerability

SGI IRIX

• 20010601-01-I pmpost vulnerability

  SGI has not provided patches for these vulnerabilities $B$@$=$&$G!#(B

• 20020607-02-I nveventd vulnerability

  SGI will not be releasing patches for this problem, as the product is being moved into Legacy support mode $B$@$=$&$G!#(B

• 20020606-02-I xfsmd vulnerability

  SGI will not be providing a fix or patches for this issue, as the product is being retired $B$@$=$&$G!#(B

TurboLinux

• pam_ldap $B%m!<%+%k%f!<%6!<$K$h$k(Broot$B8"8BC%

Kondara MNU/Linux

• nss_ldap (2002-06-21)

• authconfig (2002-06-21)

Sun Cobalt RaQ 4

• PHP$B@_Dj2hLL%"%C%W%G!<%H(B 2.0.1-14185$B!"3F

  $B$$$^$^$GD>$C$F$J$+$C$?$H$O!#$5$9$,$G$9$M!#(B

$B!!(BSUS $B$K$D$$$F$O(B SQL Server $B%f!<%6!<%0%k!<%W(B (PASSJ) $B$N(B $B%;%-%e%j%F%#J,2J2q(B ML $B$KM-MQ$J>pJs$,$"$k$h$&$G$9!#(B

$B!!:G?7(B 3.3 $B$r4^$`(B OpenSSH $B$K\:YITL@(B: $B8xI=$OMh=5(B) $B$KLdBj$,$"$j!"(Bremote $B$+$i(B exploit $B2DG=$JLOMM!#$?$@$7!"(BOpenSSH 3.3 $B$G(B UsePrivilegeSeparation yes $B$7$F$$$k>l9g!"

• DSA-134-1 ssh -- remote exploit (Debian GNU/Linux)

  woody $BMQ$N(B OpenSSH 3.3$B!#(B ($B8m?"(B fixed: $B?@C+$5$s46

2002.06.26 $BDI5-(B:

• [SECURITY] [DSA-134-2] Unknown OpenSSH remote vulnerability

  $B2~D{$5$l$F$$$^$9!#(Bpotato $BMQ%Q%C%1!<%8EP>l!#(B $B$G!"(BOpenSSH 3.3 $B$K$O$3$s$JLdBj$,$"$k$s$@$=$&$G(B:

  • compression does not work on all operating systems since the code relies on specific mmap features,
  • the PAM support has not been completed and may break a few PAM modules,
  • keyboard interactive authentication does not work with privilege seperation. Most noticable for Debian users this breaks PAM modules which need a PAM conversation function (like the OPIE module).

  $B$G!"(Bprivilege separation $B$rM-8z$K$9$k$H!"(Broot $B$r

  The new privilege separation support from Niels Provos changes ssh to use a separate non-privileged process to handle most of the work. This means any vulnerability in this part of OpenSSH can never lead to a root compromise but only to access to a separate account restricted to a chroot.

  $BF|K\8lK]LuHG(B: [debian-users:33475]$B!#(B $B$+$M$3$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B

• $B$H$+=q$$$F$k4V$K(B DSA-134-3 $B$,=P$F$k$>(B (^^;;)

  • [SECURITY] [DSA-134-3] Unknown OpenSSH remote vulnerability

  potato $B$N(B ($B%G%U%)%k%H(B) $B@_DjJQ994XO"$NCm0UE@$,DI2C$5$l$?!"$N$+$J!#(B

• openssh.com $B$K$3$s$J5-=R$,(B:

  $B8=:_(B OpenSSH $B$K$O$^$@8xI=$5$l$F$$$J$$@HUsePrivilegeSeparation ($BFC8"J,N%(B) $B%*%W%7%g%s$r;HMQ$9$k$h$&6/$/$*$9$9$a$7$^$9!#(B $BFC8"J,N%(B $B5!G=$O$3$NLdBj$r%V%m%C%/$7$^$9!#Mh=5$N7nMKF|$K$O$3$N@H

  $BQiL\$7$FBT$F!#(B

2002.06.27 $BDI5-(B:

$B!!$D$E$-$O(B CERT Advisory CA-2002-18 OpenSSH Vulnerabilities in Challenge Response Handling $B$G!#(B

$B!!(B2002.06.19 $B$N(B CERT Advisory CA-2002-17 Apache Web Server Chunk Handling Vulnerability $B$KDI5-$7$?!#(BTurboLinux, Kondara, Debian $B$+$i(B fix package $BEP>l!#(B IBM, Oracle $B$N>pJs!#(B eEye $BEy$N

$B!!(B[memo:3953] Windows$BHG(BPostPet$B$K!"E:IU%U%!%$%k$,6/@)5/F0$5$l$k%;%-%e%j%F%#%[!<%k(B $B$HF1MM$K!"(BBecky!2 2.00.08 $B0JA0!"(BBecky! 1.26.08 $B0JA0$K$*$$$F$b!"E:IU%U%!%$%k$,E83+$5$l$k0LCV$,40A48GDj!"$"$k$$$OMF0W$K?dB,$G$-$k$?$a$K!"F1MM$N967b$rl9g$O967b$r2sHr$G$-$k!#(B 1.26.09 $B0J9_!"(B2.00.09 $B0J9_$G$O=$@5$5$l$F$$$k$N$G(B upgrade $B$9$l$P$h$$!#(B

$B!!(BBecky! $B$K$D$$$F$O!"(B$B%a!<%kK\J8$HE:IU%U%!%$%k$rJ,N%2DG=$K$7$?!V(BBecky! Internet Mail$B!W$N:G?7HG(B ($BAk$NEN(B) $B$H$$$&OC$b=P$F$$$k!#(B

$B!!(BMAIL Direct$B!"(BHyperEdit$B!"(BKenm3 for Windows$B!"(BNet/PAD$B!"(BWinbiff V2.30$B0J9_(B $B$J$I$KEc:\$5$l$F$$$k(B ActiveX $B%3%s%H%m!<%k!"(BEditX $B$N(B 1.22 $B0JA0$K\:Y$OITL@$@$,!"!V(B$B0-0U$N$"$k(BWeb$B%5%$%H$K%"%/%;%9$9$k$H!"(BInternet Explorer$B$N%G%U%)%k%H$N@_Dj$G$O!"%f!<%6!<$,5$$,IU$+$J$$$&$A$K(BPC$B$N%U%!%$%k$,=q$-49$($i$l$F$7$^$&2DG=@-$,$"(B$B!W$C$?$N$@$=$&$@!#(BActiveX $B%3%s%H%m!<%k$J$N$G!"(Bscript $B7PM3$G%"%l%2$K$J$k!"$H$$$&O)@~$@$m$&$+!#(B

$B!!(BEditX 1.23 $B$G=$@5$5$l$F$$$k$N$GF~$l$+$($k!#>e5-(B EditX $BMxMQ%"%W%j$N(B web page $B$K$O(B EditX $B$K4X$9$k7Y9p$OB8:_$7$J$$$h$&$@!#(BWinBiff 2.3.4.8 $B$K$O(B EditX 1.2.1.0 $B$,4^$^$l$F$$$k$h$&$@!#(B

$B!!F?L>4uK>$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B

2002.06.26 $BDI5-(B:

$B!!(BWinbiff $B$NBP:vHGEP>l(B: Winbiff$B%f!<%6!<$N3'MM$X=EMW$J$*CN$i$;(B$B!#(BWinbiff V2.30 $B0J9_$N(B EditX $B$"$jHG$rMxMQ$7$F$$$k>l9g$KLdBj$K$J$k!"$H$5$l$F$$$k!#!V=$@5$7$?(B EditX $B$r:-Jq$7$?(B Winbiff $B%$%s%9%H!<%i!l$7$?$N$G!"$3$l$rMxMQ$7$F:F%$%s%9%H!<%k$9$l$P$h$$!#(B Winbiff V2.41 beta $B$K$D$$$F$b!"(Bbeta6 $B$G=$@5HG(B EditX $B$,F1:-$5$l$F$$$k!#(BIKEGAMI $B$5$s!"K'2l$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B

$B!!(BSnortSnarf$B!"(BRazorBack $B$N%$%s%9%H!<%k$H%k!<%k%;%C%H$N%A%e!<%K%s%0!#(B

$B!!=P$^$7$?!#$_$s$J$G;n$7$^$7$g$&!#$C$F2K$,!D!D!#(B

$B!!(BISS Security Alert Summary AS02-24 $B$G$9!#(B

$B!!3N$+$KJXMx$=$&$G$9!#(B

$B!!(BWindows 2000 $B>e$N(B Apache Tomcat 4.0.3 $B$K(B 2 $B$D$NLdBj!#(B $BJ*M}%Q%9L>$,O*8+$7$F$7$^$&B>!"(BDoS $B967b$re$N(B 4.1.3 beta $B$G$O=$@5$5$l$F$$$k$H$$$&!#(B

• KPMG-2002024: Apache Tomcat Path Disclosure

• KPMG-2002025: Apache Tomcat Denial of Service

$B!!$$$h$$$h2TF/$+$=$l$H$b1d4|$+!#$I$&$9$k$I$&$J$k=;4p%M%C%H!#(B

• $B%7%s%]%8%&%`!V=;L14pK\BfD"%M%C%H%o!<%/%7%9%F%`$r9M$($k!W3+:E(B $B2TF0$^$GICFI$_!"!V=;4p%M%C%H!W$KUT$`4m81$H$O(B (INTERNET Watch)

• $B<+<#BN$+$i$b!V1d4|!WO@Aj ($BKhF|(B)

• $BCOJ}5D2q=i$N=;4p%M%C%H2TF/1d4|0U8+=q!!9bCN!&==OBB<5D2q(B ($BKhF|(B)

• $BEl5~ETF|Ln;T5D2q$b=;4p%M%C%H1d4|$J$I$N0U8+=q:NBr(B ($BKhF|(B)

$B!!(B2002.06.19 $B$N(B CERT Advisory CA-2002-17 Apache Web Server Chunk Handling Vulnerability $B$KDI5-$7$?!#(B Vine Linux 2.1$B!"(BMiracle Linux $BMQ(B fix package$B!"(Bapache-ssl $B$N(B 1.3.26 $BBP1~HGEP>l!#(B

$B!!(B2002.06.19 $B$N(B CERT Advisory CA-2002-17 Apache Web Server Chunk Handling Vulnerability $B$KDI5-$7$?!#(Bexploit $B$5$C$=$/EP>l!#(BApache 1.x $B$KBP$7$F!"(B32bit UNIX $B$G$b!"30It$+$iG$0U$N%3!<%I$rZ$5$l$?!#$($i$$$3$C$A$c!#(B fix patch/package $B$bB3!9$HEP>lCf!#(B

$B!!(B2002.05.10 $B$N(B MSN $B%A%c%C%H%3%s%H%m!<%k$NL$%A%'%C%/$N%P%C%U%!$K$h$j%3!<%I$, $B$KDI5-$7$?!#(Bbulletin $B$,99?7$5$l!"(BMSN $B%A%c%C%H(B $B%3%s%H%m!<%k$d(B MSN Messenger$B!"(BExchange Instant Messenger $B$N%"%C%W%G!<%HHG$,EP>l$7$F$$$k!#(B

$B!!(BZope 2.4.0$B!A(B2.5.1 $B$K%f!<%6$,(B catalog index $B$NG$0U$N%a%=%C%I$r(B call $B$G$-$F$7$^$&!#(B

$B!!(BHotfix 2002-06-14 $B$G=$@5$5$l$k$N$GE,MQ$9$l$P$h$$!#(B

$B!!(BApache 1.2.2 $B0J9_$N(B 1.2.x$B!"(B1.3.24 $B0JA0$N(B 1.3.x$B!"(B2.0.36 $B0JA0$N(B 2.0.x $B$K

• 1.2.x, 1.3.x $B$N>l9g$O%P%C%U%!%*!<%P!<%U%m!<$,H/@8$9$k!#$3$N7k2L!"(B32bit UNIX $B$G$O(B segmentation violation $B$K$h$j;R%W%m%;%9$,=*N;$5$;$i$l$k$H9M$($i$l$k$,!"(BWindows $BHG$d(B 64bit UNIX $BHG$G$O!"30It$+$iG$0U$N%3!<%I$r

• 2.0.x $B$G$O;R%W%m%;%9$,=*N;$7$F$7$^$&!#(B

$B!!(Bapache 1.3.26$B!"(B2.0.39 $B$G=$@5$5$l$F$$$k$N$GF~$l$+$($k!#(B1.2.x $BMQ$N(B fix $B$O$J$$$N$G!"(B1.3.26 $B$+(B 2.0.39 $B$X0\9T$9$k!#(B

• [SECURITY] [DSA-131-1] Apache chunk handling vulnerability (Debian GNU/Linux)

$B!!$"$o$;$F(B mod_ssl $B$d(B PHP $B$b99?7$9$kI,MW$,$"$k(B ($B$+$b$7$l$J$$(B) $B$N$GCm0U$9$k(B [memo:4211]$B!#(B1.3.26 $BMQ$N(B mod_ssl $B$O!D!D(Bmod_ssl 2.8.9-1.3.26 $B$,EP>l$7$?$=$&$G$9(B [memo:4225]$B!#$J$s$+:.$s$G$k$C$]$$$N$G!";CDjE*$K(B http://www.st.ryukoku.ac.jp/~kjm/mod_ssl-2.8.9-1.3.26.tar.gz $B$K$bCV$$$F$*$-$^$9!#(B

$B!!4XO"(B:

• Vulnerability Note VU#944335: Apache web servers fail to handle chunks with a negative size (CERT/CC)

• SECURITY ADVISORY: June 17, 2002 (Apache Foundation)

• Apache$B$K%;%-%e%j%F%#!&%[!<%k!$:G?7%P!<%8%g%s$b1F6A$r ($BF|7P(B IT Pro)

• Apache Server $B$K$*$1$k%j%b!<%H$+$i$N%;%-%e%j%F%#?/32$N@H (ISSKK)

  CERT/CC $B$O!"(BISS advisory $B$K<($5$l$F$$$k(B patch $B$G$OBP1~$G$-$J$$!"$H$7$F$$$k!#(B1.3.26 $B$+(B 2.0.39 $B$X0\9T$7$^$7$g$&!#(B

• $BAa$9$.$?!)!X(BApache$B!Y%;%-%e%j%F%#!<7Y9p(B (CNET)

  $B!V;d$O!"%l%C%I%O%C%H$N$3$H$r?.Mj$KB-$k%5!<%I%Q!<%F%#!<$H$O8+$J$7$F$$$J$$!W(B$B!#$&!<$`!#(B David Litchfield $B;a$N(B bugtraq $B$X$N(B post $B$O(B$B$3$A$i(B$B!#(B

• $B!X%"%Q%C%A!Y%5!<%P!<%=%U%H$N%;%-%e%j%F%#!<7Y9p$OM&$_B-!)(B (WIRED NEWS)

  $B0JA0!"(BISS$B$B!#$&!<$`!D!D!#(B

2002.06.20 $BDI5-(B:

$B!!(BOpenBSD/i386 $BMQ$N(B exploit $BEP>l(B: Remote Apache 1.3.x Exploit$B!#(B $B%3!<%I$N%3%a%s%H$K$O!"(BSolaris 6-8 (sparc/x86)$B!"(BFreeBSD 4.3-4.5 (x86)$B!"(BLinux (GNU) 2.4 (x86) $B$G$b(B exploit $B$K@.8y$7$?!"$H$$$&!#!V(B32 bit UNIX $B$G$O(B exploit $B$G$-$J$$!W$H$$$&$N$OBg4V0c$$$@$C$?LOMM(B ($B%/%i!<%/$NBh0lK!B'(B$B$+(B?!)$B!#(BCERT Advisory CA-2002-17 Apache Web Server Chunk Handling Vulnerability $B$b2~D{$5$l!"(B

For Apache versions 1.3 through 1.3.24 inclusive, this vulnerability may allow the execution of arbitrary code by remote attackers. Several sources have reported that this vulnerability can be used by intruders to execute arbitrary code on Windows platforms. Additionally, the Apache Software Foundation has reported that a similar attack may allow the execution of arbitrary code on 64-bit UNIX systems.

$B$,(B

For Apache versions 1.2.2 through 1.3.24 inclusive, this vulnerability may allow the execution of arbitrary code by remote attackers. Exploits are publicly available that claim to allow the execution of arbitrary code.

$B$K$J$C$F$$$k!#$($i$$$3$C$A$c!#(B

$B!!(Bfix patch/package $B$bB3!9$HEP>lCf(B:

• $B!|(B2002,06,19$B!|(B Apache $B$K%;%-%e%j%F%#%[!<%k(B (Vine 2.5)

  Vine 2.1.x $BMQ$O$^$@$J$$$_$?$$!#(B

• [RHSA-2002:103-13] Updated Apache packages fix chunked encoding issue (RedHat)

• [SECURITY] [DSA-131-2] Apache chunk handling vulnerability, update (Debian GNU/Linux)

  Debian $BMQ!"99?7$5$l$F$^$9!#(B

• DSA-132-1 apache-ssl -- remote DoS / exploit (Debian GNU/Linux)

• OpenBSD 3.1 Security Advisories #005: SECURITY FIX: June 19, 2002

• FreeBSD Security Notice FreeBSD-SN-02:04

$B!!7Y9p(B:

• Apache Web $B%5!<%P$K$*$1$k(B chunk$B%G!<%?=hM}$N@H (IPA)

• Apache Web $B%5!<%P%W%m%0%i%`$N@H (JPCERT/CC)

• LAC $B$K$h$k(B CERT Advisory CA-2002-17 Apache Web Server Chunk Handling Vulnerability $BK.LuHG(B

  $B:G?7HG$NK.Lu$G$O$J$$$3$H$KCm0U!#FC$K!"(BJune 19, 2002: Added statement about exploit code for 32-bit platforms $B$d(B June 19, 2002: Try to be as clear as possible on the impact (all systems) $B$,7g$1$F$$$kE@!#(B

2002.06.21 $BDI5-(B:

• $B!|(B2002,06,21$B!|(B Apache $B$K%;%-%e%j%F%#%[!<%k(B (Vine Linux 2.1.x)

• apache$B%;%-%e%j%F%#(B 2002/06/20 (Miracle Linux)

• Apache Chunked encoding vulnerability CAN-2002-0392 (Apache-SSL)

  apache_1.3.26+ssl_1.48 $B$GBP1~$5$l$F$$$^$9!#(B

$B!!$h$7$`$i$5$s!"(BFujii $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B

2002.06.24 $BDI5-(B:

$B!!(Bpatch/package $B>pJs(B:

• apache: httpd$B%5!<%P!<$N%5!<%S%9Dd;_(B (TurboLinux)

• apache (2002-06-21) (Kondara MNU/Linux)

• DSA-133-1 apache-perl -- remote DoS / exploit (Debian GNU/Linux)

• Apache Web Server $B$GH/8+$5$l$?%;%-%e%j%F%#!<@H ($BF|K\(B IBM)

  info from [memo:4288]$B!#(B $B$^$@(B fix $B$O$G$-$F$$$^$;$s!#(B

• OHS:$B%A%c%s%/%O%s%I%j%s%0$N%;%-%e%j%F%#@H (oracle)

  $B!V(B$B$?$@:#4{B8$N3F%W%i%C%H%U%)!<%`$N3F%j%j!<%9$KBP$7$F=$@5$r:n@.Cf$G$9(B$B!W(B $B$@$=$&$G!#(B

$B!!(Bfix package/patch $B$N$&$A!"(BRedHat$B!"(BDebian$B!"(BVine 2.1.x$B!"(BOpenBSD $B$O(B 1.3.26 $B$G$O$J$$$G$9!#(B $B0lJ}!"(BVine 2.5$B!"(BTurbo$B!"(BMiracle$B!"(BKondara$B!"(BFreeBSD ports $B$O(B 1.3.26 $B$K$J$C$F$$$^$9!#(B

$B!!(BExploit:

• apache-nosejob.c (packetstorm)

  OpenBSD $B$NB>!"(BFreeBSD $B$d(B NetBSD $B$,?)$($k(B exloit$B!#(B

• hsj $B$5$s$A(B $B$K$b(B FreeBSD $BMQ$N(B exloit $B$,=P$F$$$^$9!#(B

$B!!2r@b(B:

• Apache$B$N?<9o$J%;%-%e%j%F%#!&%[!<%k$r2r@b$9$k(B ($BF|7P(B IT Pro)

  $B$h$/$^$H$^$C$F$$$k2r@b$G$9!#(B

$B!!

• Apache Chunked Scanner from eEye Digital Security (eEye)

  karisuma $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B $B$,!"(Bx86 $B$G$J$$$H@5$7$/H=Dj$G$-$J$$(B?

• Apache vulnerability checking

  x86 $B>e$N(B Apache 1.3.x $B$7$+@5$7$/H=Dj$G$-$J$$(B?

$B!!(BApache $BJ]8n%D!<%k(B:

• Blowchunks - Protecting Existing Apache Servers Until Upgrades Arrive

  chunked encoding request $B$r(B reject $B$9$k%b%8%e!<%k!#(B IIS $B$GF1$8$3$H$r$7$?$$>l9g$O(B URLScan-SRP $B$,MxMQ$G$-$k$h$&$G$9!#(B

$B!!$=$NB>(B:

• [memo:4299] OCN$B%[%9%F%#%s%0%5!<%S%9$K$*$1$k(Brapidsite(Apache$B7O(B)$B$N%Q%C%A(B

  $B%[%9%F%#%s%020$5$s$NBP1~$N0lNc!#(B

2002.06.25 $BDI5-(B:

$B!!(Bpatch/package $B>pJs(B:

• http://www.apache.org/dist/httpd/patches/ $B0J2<$K(B official $B$J8DJL(B patch $B$,EP>l$7$F$$$^$9!#(B 1.3.x/2.x $B$NB>$K!"(B1.2.x $BMQ$^$GMQ0U$5$l$F$$$^$9!#(B (info from [Apache-Users 1491])

• [RHSA-2002:118-06] Stronghold: Chunked encoding vulnerability in Apache

$B!!$=$NB>(B:

• [memo:4303] Re: $B!ZD{@5>pJs![(BOCN$B%[%9%F%#%s%0%5!<%S%9$K$*$1$k(Brapidsite(Apache$B7O(B)$B$N%Q%C%A(B

  $BD{@5$5$l$F$$$^$9!#(B

2002.06.27 $BDI5-(B:

$B!!(BOracle$B!"(BIBM $B$N(B patch $B=P$^$7$?(B:

• Oracle HTTP Server : $B%A%c%s%/%O%s%I%j%s%0$N%;%-%e%j%F%#$N@H$B@bL@$H$h$/$"$k$B!"(Bpatch

• IBM HTTP Server $BMQ%;%-%e%j%F%#!<@H

2002.07.01 $BDI5-(B:

• worm $B%M%?(B:

  • Scalper Worm($B2>>N(B)$B$N=P8=(B (IPA)

    $B3F

  • $B@H (ZDNet)

• Security Update July 2002 (Apple)

  $B%=%U%H%&%'%"%"%C%W%G!<%H$G(B Security Update July 2002 $B$r%$%s%9%H!<%k$9$k$H(B Apache v1.3.26 + mod_ssl v2.8.9 $B$,F~$j$^$9!#4{$K(B mod_ssl$B$N%P%/%U%#%C%/%9HG(B2.8.10-1.3.26$B$,%j%j!<%9(B $B$H$$$&OC$,$"$k$s$G$9$1$I$M!#(B

• [memo:4344] $B!V%M%C%H%o!<%/(BVAIO$B!W$N!V(BLinkGarage$B!W$G@H

  $B%M%C%H%o!<%/%P%$%*$G(B LinkGarage $B$rMxMQ$7$F$$$k$H!"$=$3$G$O(B Apache for Win32 $B$,F0$$$F$$$?LOMM!#(B

• [RHSA-2002:103-18] Updated Apache packages fix chunked encoding issue (RedHat)

  update $B$5$l$F$$$^$9!#(B Updated packages have been added for Red Hat Linux for S/390. Slight changes to problem description to take into account possibility of exploits also on 32-bit platforms $B$@$=$&$G$9!#(B

• [RHSA-2002:117-11] Updated secureweb packages fix chunked encoding issue (RedHat)

  secure server $BMQ!#(B [RHSA-2002:118-06] Stronghold: Chunked encoding vulnerability in Apache $B$H$$$&$N$b=P$F$$$^$9!#(B

• Interstage Application Server$B@=IJFb(BInterstage HTTP Server$B$K$*$1$k%;%-%e%j%F%#@H ($BIY;NDL(B)

2002.07.10 $BDI5-(B:

• $B!V@H (ZDNet)

  $B=P8=$rCY$i$;$k$3$H$O2DG=$@$C$?$+$b$7$l$J$$$,!"KI$0$3$H$OL5M}$G$7$g$&!#(B $B!V(B$BF1.EgCm(B: Gobbles Security) $B$O(BBugTraq$B$X$NEj9F$G!"(B4$B$B!W$H8@$C$?$H$3$m$G!"$?$H$($P(B hsj $B$5$s(B$B$O(B 2002.06.23 $BIU$1$GFH<+$K3+H/$5$l$?(B exploit $B$r8x3+$5$l$F$$$k$o$1$G!"F,$N$$$$?M$K$H$C$F$O!VLs(B2$B%+7n!W$J$s$F%l%Y%k$G$O$J$$$H9M$($i$l$^$9$7!#(B

  $B%o!<%`$NH/@8$O;_$a$i$l$J$$(B (slashdot.jp) $B$b;2>H!#(B

2002.07.11 $BDI5-(B:

$B!!(BNEC $B$N(B .Gate $B%5!<%S%9(B $B$N(B fix $BOC$r:\$;$o$9$l$F$$$?$h$&$J$N$GDI5-!#(B

$B!!(BTechStyle Newsletter:2002-06-18 $B$G$b!V(BSamba 2.2.4$B$K%P%C%U%!%*!<%P!<%U%m!<$r0z$-5/$3$5$l$k%P%0!W$H$7$FJs$8$i$l$F$$$?LdBj$G$9$,!"(B[memo:4210] $B$rFI$`8B$j!"FCr7o$G$7$+H/@8$7$J$$$h$&$G$9!#(B [sugj-tech:4724] Security Advisory for Samba 2.2.4< $B0J2<$N%9%l%C%I$b;2>H!#(B

$B!!%"%W%j%1!<%7%g%sKh$K!"(Bsystem call $B$N%"%/%;%9%]%j%7!<$r@_Dj$G$-$k5!9=!"$+$J!#(B OpenBSD $B$H(B NetBSD $B$GF0:n$7!"(BNetBSD-current $B$K$OAH$_$3$^$l$F$$$k$=$&$G$9!#(B GNU/Linux $B$X$N0\?":n6H$,3+;O$5$l$F$$$k$=$&$G$9!#(B

$B!!(B2002.05.24 $B$N(B [memo:3953] Windows$BHG(BPostPet$B$K!"E:IU%U%!%$%k$,6/@)5/F0$5$l$k%;%-%e%j%F%#%[!<%k(B $B$KDI5-$7$?!#(BPostPet$B$N%;%-%e%j%F%#$K4X$9$k=EMW$J$*CN$i$;(B $B$,99?7$5$l$F$$$k!#?7$?$K(B PostPet DX 1.2 $B0JA0$d!V$*;n$7HG!W$K4X$7$F$bBP1~J}K!$,5-:\$5$l$F$$$k!#(B

$B!!>rJ8$O!"$?$H$($P(B $BEE;R%a!<%k$K$h$k0lJ}E*$J>&6H9-9p$NAw$j$D$1!J$$$o$f$kLBOG%a!<%k!K$K4X$9$k?7$?$JI=<(5AL3$K$D$$$F(B $B$+$i!#(B

$B!!=P$F$^$9!#(B

• Microsoft .NET Framework $B$N%;%-%e%j%F%#(B

• Windows 2000 $B2>A[%W%i%$%Y!<%H(B $B%M%C%H%o!<%/(B (VPN) : $B%j%b!<%H%"%/%;%9(B VPN $B$NF3F~(B

$B!!(B2002.06.06 $B$N(B Buffer overflow in MSIE gopher code $B$KDI5-$7$?!#(BProxy Server 2.0$B!"(BISA Server 2000 $BMQ(B patch $BEP>l!#$7$+$7!"(BIE $BMQ$O$^$@!#(B $B$NOC!#(B

TurboLinux

• 2002-06-17 pam_ldap: $B%m!<%+%k%f!<%6!<$K$h$k(Broot$B8"8BC%

• 2002-06-10 bind: bind$B%5!<%P!<$N%5!<%S%9Dd;_(B

VineLinux

• $B!|(B2002,06,12$B!|(B imap $B$K%;%-%e%j%F%#%[!<%k(B

• $B!|(B2002,06,13$B!|(B tcpdump $B$K%P%C%U%!%*!<%P!<%U%m!<$N%;%-%e%j%F%#%[!<%k(B

Miracle Linux

• LPRng $B%;%-%e%j%F%#(B 2002/06/13

$B!!$"$k$$$O!"%9!<%Q!

$B!!(B2002.06.03 $B$N(B SRT Security Advisory (SRT2002-04-31-1159): Mnews $B$KDI5-$7$?!#(Bports/security/libparanoia $B$r%j%s%/$7$F$*Cc$rBy$7$F$_$k%F%9%H!#(B

$B!!$$$m$$$m$H%4%?%/$rJB$Y$F$$$k$h$&$@$,!"%7%c%l$K$J$i$s$@$m$&!#:G?7$N(B virus $B$KKA$5$l$F$$$?$J$i$H$b$+$/!"(BNimda $B$H$O!#!V4Z9q$NB&$KH4$17j$,$"$C$?$?$a!W(B? $B%@%V%k%A%'%C%/$H$$$&35G0$O$J$$$N$+(B?!

$B!V(BMicrosoft$B$ODL>o(B ($BCfN,(B) $B%^%9%?!<%W%m%0%i%`$KE}9g$9$k$9$Y$F$N%U%!%$%k$r%9%-%c%s$7$F$$$k$H$$$&!#$@$,:#2s$N>l9g!"%9%-%c%s$5$l$?$N$O:G=i$+$iE}9g$9$kM=Dj$@$C$?%U%!%$%k$N$_!#!W(B

$B86B'$r6J$2$k$H$3$&$J$k$H$$$&8+K\!"$+!#9b!9?t;~4V$N%A%'%C%/$rBU$C$?$?$a$K@8$8$?B;32$O$$$/$i$@$m$&!#(B

$B!!(BMicrosoft official: PRB: Inert Virus Found in Korean Language Version of Visual Studio .NET (Q323302)

$B!!F|K\$N(B MSDN $B;vL36I$+$i$b!"(BMSDN subscriber $B$KBP$7$F%a!<%k$GO"Mm$,9T$C$F$$$kLOMM!#4X$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B

$B!!(BSensitive IM Security - MSN Message Sniffing $B$G!V@bL@!W$5$l$F$$$k(B msn666 $B%9%K%C%U%!$O%P%C%/%I%"$@!"$H$$$&;XE&!#(B

$B!!(BOracle Developer R6i Patch9 $B0JA0!"(BOracle9iAS Enterprise Edition $B$N(B Reports Services $B$,(B Developer R6i Patch9 $B0JA0$N>l9g$KR6i Patch10 $B$G=$@5(B$B$5$l$?$H$$$&!#(B

$B!!4XO"(B: Oracle Reports Server Buffer Overflow (#NISR12062002B) (NGSSoftware)$B!#(B

$B!!(B2002.06.06 $B$N(B Buffer overflow in MSIE gopher code $B$KDI5-$7$?!#(BFlawed workaround in MS02-027 -- gopher can run on _any_ port, not just 70 $B$NOC!#(B

$B!!!X%;%-%e%j%F%#!<$H$$$&H/A[$r>o$K;}$F!Y!#$*$C$7$c$kDL$j$J$N$G$9$,!"4JC1$K$G$-$l$P6lO+$O$J$$$o$1$G!D!D!#MW$O%]%j%7!<$@$+$i!"$d$C$Q$jAH?%%H%C%W$N0U<1$,LdBj$K$J$k$h$&$J5$$,!#(BMicrosoft $B$,6lO+$7$F$$$k$h$&$K!"%]%j%7!<$rDj$a$?$H$7$F$b!"$=$NJ}8~$KBI$,8~$/$^$G$O;~4V$,$+$+$j$^$9$7!#(B

$B!!8D?M>pJsJ]8nK!0FJ}LL!"8=pJs$NN.=P$,8e$rCG$?$J$$8=>u$G!"!V:#2sBP>]$H$7$J$1$l$P$J$i$J$$$N$O!"2?==K|7o$b$N8D?M>pJs$rJ]M-$9$kLr=j$dBg4k6H$G$"$k$Y$-$@!W$H$$$&$N$O@bF@NO$"$k$N$+$J!#(B $B$A$J$_$K(B memo ML $B$N(B subscriber $B$b(B 5000 $B?M1[$($A$c$C$F$k$s$G!"!D!D!#(B

2002.06.25 $BDI5-(B:

$B!!9V1i;qNA$,(B$B9bLZ$5$s$N(B web $B%Z!<%8(B$B$G8x3+$5$l$F$$$^$9!#$^$?!"(B[memo:4175] $B$K(B INTERNET Watch $B5-;v$X$N%U%)%m!<$,$"$j$^$9!#(B

$B!!(BActive! mail 1.422, 2.0 $B$K

$B!!(BActive! mail 2.0.1.1 $B$G=$@5$5$l$F$$$k$=$&$@!#(B

$B!!$^$??7$7$$(B API $B$D$/$C$?$C$F$3$H(B? Microsoft $BE*$K$O!V$H$/$$$o$6!W$J$s$@$m$1$I!"(B3rd party $B$O$=$l$G$O$d$C$H$l$s$@$m$&!#:G=i$+$i%^%H%b$J(B API $B$rMQ0U$7%J%$%H!#(B

$B!!(Bloader $B$H(B data $B$KJ,N%$5$l$F$$$k!"$C$F%3%H$G$7$g$&$+!#(B

$B!!(BSQL Server 2000 $B$K4^$^$l$k!"$"$k$$$OJLES

• SQLXML ISAPI $B%U%#%k%?(B (ISAPI $B%(%/%9%F%s%7%g%s(B) $B$K(B buffer overflow $B$9$kLdBj$,$"$k!#(B $B$3$l$r0-MQ$9$k$H!"967be$G(B local SYSTEM $B8"8B$GG$0U$N%3!<%I$r

• XML $B%?%0$rMxMQ$7$F(B query $B$K%9%/%j%W%H$rA^F~$9$k$3$H$,2DG=$H$J$j!"%/%m%9%5%$%H%9%/%j%W%F%#%s%0@H!<%s8"8B(B ($B%$%s%H%i%M%C%H%>!<%s$G$"$m$&$3$H$,A[Dj$5$l$F$$$k$,!">u67$K0MB8$9$k(B) $B$G%9%/%j%W%H$r

$B!!>\:Y(B: wp-02-0007: Microsoft SQLXML ISAPI Overflow and Cross Site Scripting (westpoint)

$B!!(Bpatch $B$,$"$k$N$GE,MQ$9$l$P$h$$!#$?$@$7!"MxMQ$7$F$$$k(B SQLXML $B$KBP1~$7$?(B patch $B$rE,MQ$9$k$3$H!#(B

$B!!(BWindows NT 4.0, 2000, XP $B$K

$B!!(Bpatch $B$,$"$k$N$GE,MQ$9$l$P$h$$!#(B

2002.06.14 $BDI5-(B:

$B!!>\:Y(B: Microsoft RASAPI32.DLL (NGSSoftware)$B!#(B

2002.06.27 $BDI5-(B:

$B!!(BMS02-029 patch $B$rE,MQ$9$k$H!"(BVPN $BMxMQ;~$K(B administrator $B8"8B$,I,MW$K$J$k>l9g$,$"$k$H$$$&I{:nMQ$,$"$k$=$&$@(B: VPN Connections May Require Administrator Permissions After You Apply MS02-029 (Q318138) (Q324908)$B!#(BMS02-029 $B$K$b$3$N7o$K4X$9$kCm5-$,DI2C$5$l$F$$$k!#(B

2002.07.10 $BDI5-(B:

$B!!(B2002.07.04 $BIU$1$G!"(BVPN $BMxMQ;~$G$bLdBj$,H/@8$7$J$$=$@5%W%m%0%i%`$,EP>l$7$F$$$k!#(B

$B!!(BIIS 4.0, 5.0 $B$KMS02-018 $B$G=$@5$5$l$?!V(BActive Server Page $B$K$h$k%A%c%s%/$5$l$?%(%s%3!<%I%j%/%(%9%H$G$N(B heap overflow$B!WLdBj$NN`;wIJ$,(B .HTR $B$r=hM}$9$k(B ISAPI $B%(%/%9%F%s%7%g%s$K$bB8:_$7$?!#$3$l$r0-MQ$9$k$H!"967b

$B!!2sHrJ}K!$H$7$F$O!"(B.HTR $B$rL58z$K$9$k!#$"$k$$$O(B URLScan $B$K$h$C$F%A%c%s%/$5$l$?%(%s%3!<%I%j%/%(%9%H$rGS=|$9$k!#BP1~$9$k$K$O(B patch $B$rE,MQ$9$k!#(B

$B!!:#2s$N(B patch $B$O!VN_@QE*(B patch$B!W(B$B$G$O$J$$(B$B$N$G!":G?7$NN_@QE*(B patch (MS02-018) $B$rE,MQ$7$?>e$G(B MS02-028 patch $B$rE,MQ$9$k$3$H!#(B

$B!!>\:Y(B: ADVISORY: Windows 2000 and NT4 IIS .HTR Remote Buffer Overflow [AD20020612] (eEye)$B!#(BeEye $B$N(B SecureIIS $B$K$h$C$F$b$3$NLdBj$r2sHr$G$-$k!#(B

$B!!(B2002.06.06 $B$N(B Buffer overflow in MSIE gopher code $B$KDI5-$7$?!#(B MS02-027 $BEP>l!#(BIE 5.01 / 5.5 / 6 $B$NB>$K!"(BProxy Server 2.0$B!"(BISA Server 2000 $B$K$b

$B!!(BUNIX $BHG(B Mozilla 1.0 $B0JA0$K$*$$$F!"%9%?%$%k%7!<%H$K(B body { font-size: 1666666px; } $B$H$+=q$$$F$*$/$H%"%l%2$J>u67$K$J$k!"$H$$$&OC!#(B $BMW$O%V%i%&%6%/%i%C%7%c!<$M$?$J$N$@$1$I!"(BX $B$rF;O"$l$K$7$F$/$l$k!"$H!#(B $BJT=8Cf$N%U%!%$%k$rJ]B8$7$F$+$i%F%9%H$7$^$7$g$&!#(B

$B!!(Bbugzilla 2.14.1 $B0JA0!"(B2.15$B!"(B2.16rc1 $B$K$5$^$6$^$J

$B!!(BReferer: $B$d(B User-Agent: $B$J$I$,1x@w$5$l$F$$$k$3$H$b$"$k$+$i!"$A$c$s$H=|@w$7$^$7$g$&!"$H$$$&OC!"$+$J!#(B

$B!!(BFreeBSD $B$N%Q%9%o!<%IG'>Z$G$O!"(B/etc/passwd $B$d(B /etc/master.passwd $B$,D>@\MxMQ$5$l$k$o$1$G$O$J$/!"(B/etc/passwd $B$d(B /etc/master.passwd $B$+$i@8@.$5$l$?%G!<%?%Y!<%9(B (/etc/pwd.db, /etc/spwd.db) $B$,MxMQ$5$l$k!#(B $B$3$N$?$a!"?75,$K%f!<%6$r:n@.$7%G!<%?%Y!<%9$r99?7$7$?8e$K(B /etc/passwd $B$d(B /etc/master.passwd $B$+$i3:Ev%f!<%6$r:o=|$7$F$*$/$H!"0l8+B8:_$7$J$$$,MxMQ2DG=$J%f!<%6$r:n@.$9$k$3$H$,$G$-$k!#(B $B$3$N$h$&$J%f!<%6$rH/8+$9$k$K$O$I$&$9$l$P$$$$$@$m$&$+!"$H$$$&OC!#(B

$B!!$3$l$KBP$7$F!"(B

• $B%G!<%?%Y!<%9$+$i(B /etc/master.passwd $B$rI|85$9$k%D!<%k$r;H$&(B
  [FreeBSD-users-jp 69126]

• perl $B%9%/%j%W%H$G$,$s$P$k(B
  [FreeBSD-users-jp 69130]

$B$,<($5$l$F$$$k(B ($B$d$C$F$k;v$O$I$A$i$bF1$8(B)$B!#(B

$B!!%9%l%C%I<+BN$O$5$i$K(B toor $B$d(B WHEEL_SU $B$NOC$KH/E8$7$F$$$k!#(B

$B!!(BMacromedia Flash $B$,%5%]!<%H$9$k(B ActionScript $B$N(B getURL() $B$rMxMQ$7$F(B getURL($B!H(Bjavascript:alert(document.cookie)$B!I(B); $B$J$I$H@_Dj$7$F$*$-$D$D!"(B form $B$J$I$NF~NO$H$7$F$3$l$r(B embed $B$7$F$"$2$k$H(B cookie $B$,http://eyeonsecurity.net/advisories/flash-demo/ $B$K$"$k$=$&$@!#(B

$B!!$^$@(B Flash $B$X$N(B patch $B$O40@.$7$F$$$J$$LOMM!#(B

$B!!(BActionScript $B$J$s$F8@$o$l$k$H!"$I$&$b%"%/%7%g%s2>LL$rA[5/$7$F$7$^$C$F$$$1$J$$(B (^^;;)$B!#(B

$B!!(BWindows NT4.0/2000 $BHG$N(B Oracle9i Database Release 9.0.1.x $B$KCHq$5$l!W!"(BDoS $B>uBV$K$J$C$F$7$^$&!#(B UNIX $BHG$J$I$NHs(B Windows $BHG$K$O$3$N

$B!!(B9.0.1.3.1 Patch3 $B$GBP1~(B$B$7$F$$$k!#(B

TurboLinux

• kernel $B%M%C%H%o!<%/9=@.$NO31L(B

Miracle Linux

• bind $B%;%-%e%j%F%#(B 2002/06/10

Kondara MNU/Linux

• bzip2 (2002-06-10)

RedHat

• [RHSA-2002:088-06] Updated ethereal packages are available

• [RHSA-2002:099-04] Updated mailman packages available

• [RHSA-2002:089-07] Relaxed LPRng job submission policy

SGI IRIX

• IRIX talkd vulnerability

• Xinet K-Talk Appletalk(tm) xkas vulnerability on IRIX

$B!!Tea Room for Conference No.881$B!"$G$9$+$M$(!#(B

$B!!$$$h$$$h(B Windows $B$H$D$J$2$kOC!#(BWindows 2000 $B0J9_$N(B IPSec $B5!G=$H(B PGPnet (PGP 6.5.1 $B0J9_$K4^$^$l$F$$$k(B) $B$r

$B!!(BPGP 6.5.8ckt $BF|K\8lHG$O(B http://www.hizlab.net/pgp/ $B$+$iF~Mac$B>e$G$N(BIPSec$B$K$h$k%;%-%e%"$JDL?.$N$B!W$K>pJs$,$"$k!#(B

$B!!(B2002.06.07 $B$N(B ASP.NET $B%o!<%+!<%W%m%;%9$KL$%A%'%C%/$N%P%C%U%!$,4^$^$l$k(B (Q322289) (MS02-026) $B$KDI5-$7$?!#(Badvisory $B$,2~D{$5$l!"(BVisual Studio .NET $B$r=*N;$7$F$+$i(B patch $B$rE,MQ$;$h!"$H$5$l$F$$$k!#(B

$B!!(BSecurityFocus.com Newsletter $BBh(B 147 $B9fF|K\8lHG(B ($B%F%-%9%H(B)$B!#(B

$B!!(BISS Security Alert Summary AS02-23 $B$G$9!#(B

$B!!(BMS02-020 $B$r4^$`(B patch $BA4ItF~$j$N(B Microsoft SQL Server 2000$B!"(BMSDE 2000 $B$K

• [memo:4068] $B!V%G%#%l%/%H%j4]8+$(!W7?O31L$+$i<+8JKI1R$9$kJ}K!(B (Re: $B:G6a$N8D?M>pJsN.=P$K$D$$$F(B)

  $B6=L#?<$$5DO@$,$D$E$$$F$$$k$N$G!"(B$B$3$A$i(B$B$+$i%9%l%C%I$rDI$C$F$_$k$N$,$h$m$7$$$+$H!#(B

• [memo:4078] Re: Content-Type: text/plain $B$J%Z!<%8$G(BIE$B$K@8$:$k%/%m%9%5%$%H%9%/%j%W%F%#%s%0$NLdBj(B

  <plaintext> $B$K$h$k0l;~E*$J2sHr:v!#(B

• [memo:4094] Re: $B%&%$%k%9%A%'%C%/%l%]!<%H(B

  $B650i$O=EMW!#(B

• [memo:4109] Re: mytrip.net$B$N$J$j$9$^$7LdBj(B

  $B!V(B$B;XDj5!4X$,99?7$N2DH]$K$D$$$F7hDj$9$k$^$G$N4V$O(B ($BCfN,(B) $BM-8z4|4V$NK~N;8e$b$J$*$=$N8zNO$rM-(B$B!W$9$k$C$F!"$J$s$J$s$@!D!D(B > $B%W%i%$%P%7!<%^!<%/!#(B $B2?$N$?$a$N4|8B$J$N$d$i!#(B

  $B$G!"(B$B%W%i%$%P%7!<%^!<%/IUM?G'Dj$N99?7$K$D$$$F(B $B$r8+$k$H!"(B

  2. $B99?7?=@A $B%W%i%$%P%7!<%^!<%/IUM?G'Dj$NM-8z4|4V$NK~N;A0!"#3%v7n0JFb#1%v7nA0$^$G$G$9!#(B

  $B$J$N$G!"99?7e$+$+$C$F$$$k$o$1$G!#(B $B$3$s$J>u67$GBg>fIW$J$N$+(B?!

Kondara MNU/Linux

• tcpdump (2002-06-07)

TurboLinux

• xchat

• tcpdump

• openssh

VineLinux

2.1 $BMQ(B:

• $B!|(B2002,06,06$B!|(B fetchmail $B$K%;%-%e%j%F%#%[!<%k(B

• $B!|(B2002,06,06$B!|(B bzip2 $B$K%;%-%e%j%F%#%[!<%k(B

2.5 $BMQ(B:

• $B!|(B2002,06,06$B!|(B fetchmail $B$K%;%-%e%j%F%#%[!<%k(B

• $B!|(B2002,06,06$B!|(B bzip2 $B$K%;%-%e%j%F%#%[!<%k(B

• $B!|(B2002,06,06$B!|(B imap $B$K%;%-%e%j%F%#%[!<%k(B

SCO

• SRT Security Advisory (SRT2002-06-04-1711): SCO crontab

SGI

• MediaMail vulnerability

$BIY;NDL(B PortalWorks

• PortalWorks$B%5!<%P>e$NFbIt>pJs$,O31L$9$kLdBj$K$D$$$F(B-(2002.06.07)

MIME::Tools

• MIME::Tools Perl module and virus scanners

  patch $B$,<($5$l$F$$$k!#(B

squid

• [DER #11] - Remotey exploitable fmt string bug in squid

  squid $B$KIUB0$7$F$$$k(B NT domain $BG'>Z%b%8%e!<%k(B (auth_modules/MSNT/) $B$K(B format $B%P%0$,$"$k$H$$$&OC!#%G%U%)%k%H$G$O4^$^$l$J$$!"$H;W$&!#(B

slurp

• SRT Security Advisory (SRT2002-06-04-1011): Slurp news retriever remote format string vulnerability

SHOUTcast

• SHOUTcast 1.8.9 bufferoverflow

  1.8.12 $B$G=$@5$5$l$F$$$k!#(B

BlackICE

• KPMG-2002019: BlackICE Agent not Firewalling After Standby

  standby $B$+$iI|5"$9$k$H!"(BBlackICE Agent 3.1 eal $B$O:F3h@-2=$7$J$$$H$$$&OC!#(B BlackICE Agent V3.1 EBH $B$K$O$3$NLdBj$O$J$$$H$$$&!#(B

$B!!(BCERT Advisory CA-2002-16 Multiple Vulnerabilities in Yahoo! Messenger $B$NOC!#(B $B:G?7$NF|K\8lHG(B Yahoo! Messenger $B$K$O$3$NLdBj$O$J$$$=$&$@!#(B

$B!!(BMicrosoft .NET Framework 1.0 $B$K4^$^$l$k(B ASP.NET $B$Kl9g!"$3$l$r(B remote $B$+$i967b$9$k$3$H$G!"F0:nCf$N(B web $B%Y!<%9%"%W%j%1!<%7%g%sA4$F$r:F5/F0$5$;$k$3$H$,$G$-$k$H$$$&!#(B $B$J$*(B StateServer $B%b!<%I$O%G%U%)%k%H$G$O$J$$!#$^$?(B StateServer $B%b!<%I$G$"$C$F$b(B cookie $B$rMxMQ$7$F$$$J$$>l9g$K$OLdBj$,$J$$!#(B

$B!!(Bpatch $B$,$"$k$N$GE,MQ$9$l$P$h$$!#(B

$B!!$7$+$7!"$5$C$=$/!"$G$9$+!#$$$d$O$d!#(B

2002.06.11 $BDI5-(B:

$B!!(Badvisory $B$,2~D{$5$l!"(BVisual Studio .NET $B$r=*N;$7$F$+$i(B patch $B$rE,MQ$;$h!"$H$5$l$F$$$k!#>\:Y$O(B INFO: Installation Issues with Silent Install of Security Bulletin MS02-026 (Q324292) $B;2>H!"$@$=$&$@!#(B

$B!!(Bmod_encoding-20011026a, mod_encoding-20011211a $B$Kl9g!"$9$Y$F$N%U%!%$%k$O(B Apache $B]$H$J$k!#(B

$B!!(Bmod_encoding-20011211a-hotfix $B$G=$@5$5$l$F$$$k$N$GF~$l$+$($k!#(B $B$^$?(B mod_encoding-20011211a $B$X$N(B patch $B$,<($5$l$F$$$k!#(B

$B!!F|K\8lHG$,(B penetration technique research site $B$K$"$k$N$G$=$A$i$b;2>H!#(B

$B!!(BMSIE 5.5/6 $B$K%/%m%9%5%$%H%9%/%j%W%F%#%s%0@H

• IE $B$N>\:Y@_Dj!V(BFTP $B%5%$%HMQ$N%U%)%k%@(B $B%S%e!<$r;HMQ$9$k!W(B

• Explorer $B$N%U%)%k%@%*%W%7%g%s!V%U%)%k%@$G(B Web $B%3%s%F%s%D$r;H$&!W(B

$B$NN>J}$,M-8z$N>l9g(B ($B%G%U%)%k%H$GN>J}M-8z(B)$B!"(BIE $B$N(B URL $B$H$7$F(B ftp://"><script>alert("Exploit")%3b</script>%20 $B$rF~NO$9$k$H!"$3$N%9%/%j%W%H$,%^%$%3%s%T%e!<%?%>!<%s8"8B$Ge$G0-$N8B$j$r$D$/$9$3$H$,$G$-$k!#(B

$B!!2sHr:v$H$7$F$O!">e5-$N$I$A$i$+$,L58z$G$"$l$P$h$$!#Mh$N(B Windows $B%U%!%k%@$r;H$&!W$H$9$k(B) $B$r@_Dj$7$F$$$k$N$G2sHr$G$-$F$$$?!#(B

$B!!H/8+G/$bA0$K$3$NLdBj$rH/8+$7(B MS $B$KJs9p$7$?$K$b$+$+$o$i$:!":#$@$K(B fix $B$5$l$F$$$J$$$N$@$=$&$@!#$@$a$8$c$s(B > MS$B!#(B

2002.08.04 $BDI5-(B:

$B!!(BWindows 2000 SP3 $B$G=$@5$5$l$F$$$k$=$&$G$9(B: Q316890: Embedded Java Scripting in FTP Sites May Run After Java Scripting Is Disabled$B!#(B (info from bugtraq)

2002.08.05 $BDI5-(B:

$B!!(BMozilla, Opera $B$G$bF1MM;vNc$,H/8+$5$l$?!#(B

• Mozilla FTP View Cross-Site Scripting Vulnerability

  cookie $BEp$^$l7O$NB>!"(B $B!V(B$B0-0U$N$"$k$B!W!#$J$+$J$+AGE($G$9!#(B

  $B:G?7$N(B Mozilla 1.1 Beta $B$G$O=$@5$5$l$F$$$k$h$&$G$9!#(B

• Opera FTP View Cross-Site Scripting Vulnerability

2002.08.28 $BDI5-(B:

$B!!(BOpera 6.05 $B$G=$@5$5$l$F$$$k$=$&$G$9!#(B penetration technique research site 2002.08.28 01:18 $B;2>H!#(B $B$3$l$^$?O"Mm%J%7$@$=$&$G!#(B

$B!J(B1$B!K8D?M>pJs$NHO0O$J$I!$$"$$$^$$$JE@$,B?$/

(2) $B$K$O$?$H$($P!"K\?MG'>ZpJs$NHO0O$d(B (3) $B$N3+<(HO0O$C$F$=$s$J$KITL@3N$@$m$&$+!#(B $BITL@3N$G$"$k$h$&$J%7%9%F%`$r1?MQ$7$F$$$kJ}$bLdBj$@$H;W$&$s$@$,!#(B

$B!!$C$F!"B>?M;v%b!<%I$G$O:Q$^$5$l$J$$$s$@$1$I!D!D!#(B

$B!!(BUNIX $B>e$G!"$H$j$"$($:%$%s%9%H!<%k$7$FF0$+$9$H$3$m$^$G!#(B

$B!!!V(B$B%W%m%0%i%^$N$?$a$N%;%-%e%j%F%#BP:v%F%/%K%C%/(B$B!W(B $BK.LuHG$bEP>l$7$?$=$&$G$9!#(B STPP $B%;%-%e%j%F%#BP:v%;%_%J!<(B $B2q>l$GGd$j=P$7$?$j$9$k$N$+$J$"!#(B

Sun

• #00219 SEA SNMP (snmpdx, mibiisa)

  Solaris 2.6/7/8 $B$KEntercept Ricochet Security Advisory: Solaris snmpdx Vulnerabilities

• Recommended & Security Patches for Solaris $B$K(B in.talkd $B%Q%C%A=P$F$^$9!#(B

RedHat

• [RHSA-2002:097-08] Updated xchat packages fix /dns vulnerability

• [RHSA-2002:083-22] Ghostscript command execution vulnerability

• RHSA-2002:084-22 Updated nss_ldap packages fix pam_ldap vulnerability

  $BA0$N(B fix $B$K$*$$$F!"(BRH 6.2 $BMQ%Q%C%1!<%8$,%$%s%9%H!<%k$G$-$J$$$b$N$@$C$?$s$@$C$F$5!#(B

IRIX

• IRIX rpc.passwd vulnerability

$B!!(BCourier 0.38.1 $B$K(^^;)):

if (year < 1970) return (0);
if (year > 9999) return (0);

$B!!$^$?!"(Bimap-uw $B$K%G%6%$%s>e$NLdBj$,$"$j!"$3$l$rKI$4$&$H(B FAQ $B$K$"$k(B restrictBox $B$r@_Dj$7$?$H$7$F$bKI$.$-$l$:!"(B imaptools.tgz $B$r;H$&$H(B

imapget imap.host.name /etc/passwd > passwd

$B$N$h$&$K$7$F%U%!%$%k$r(B get $B$7$F$7$^$($k!"$H$$$&!#(B $B:G?7$N(B imap-2001a $B$G$b$3$N>u67$OH/@8$9$k$H$$$&!#(B

2002.07.18 $BDI5-(B:

$B!!(Bimap-uw 2002.RC2 $B$N(B docs/RELNOTES $B$K$O(B

The restrictBox option in env_unix.c sets "restricted box" functionality, which disables access to the root (leading "/"), access to other user's directories (leading "~"), and access to superior directories via "..".

$B$H$$$&5-=R$,$"$k$N$G!"$I$&$d$i=$@5$5$l$?LOMM!#(B

2002.08.01 $BDI5-(B:

• imap: $BG$0U$N%U%!%$%k$NO31L(B (TurboLinux)

$B!!(BIE 5.5, 6.0 $B$K

$B!!2sHr:v$H$7$F;XE&

$B

$B!!

acl POISONED_URL url_regex -i "/usr/local/etc/squid/poisoned-url.list"
http_access deny POISONED_URL

$B$H$+$7$F$$$k$N$G!"(Bpoisoned-url.list $B$K(B ^gopher:// $B$HDI2C$7$F$*$$$?!#(B

$B!!(Bpatch $B$O$^$@$J$$!#4XO"(B:

• Frequently asked questions about the MSIE gopher vulnerability (solutions.fi)

• [memo:4101] Buffer overflow in MSIE gopher code (memo ML)

• IE$B$N(BGopher$B=hM}$K%P%C%U%!%*!<%P!<%U%m!<@H (slashdot.jp)

• IE$B$K!X(BGopher$B!Y$r0-MQ$9$k%;%-%e%j%F%#!<%[!<%k(B (CNET)

2002.06.12 $BDI5-(B:

$B!!(BMS02-027: Gopher $B%W%m%H%3%k(B $B%O%s%I%i$NL$%A%'%C%/$N%P%C%U%!$K$h$j!"967b$B!#(BIE 5.01 / 5.5 / 6 $B$NB>$K!"(BProxy Server 2.0$B!"(BISA Server 2000 $B$K$b

2002.06.14 $BDI5-(B:

$B!!(BFlawed workaround in MS02-027 -- gopher can run on _any_ port, not just 70$B!#(B FAQ $B$N!V$3$N@H

2002.06.17 $BDI5-(B:

$B!!(BProxy Server 2.0$B!"(BISA Server 2000 $BMQ(B patch $BEP>l(B$B!#$7$+$7!"(BIE $BMQ$O$^$@!#(B

2002.08.29 $BDI5-(B:

$B!!(BInternet Explorer $BMQ$NN_@QE*$J=$@5%W%m%0%i%`(B (Q323759) (MS02-047) $B$G=$@5$5$l$?!#(B

$B!!=P$F$^$9!#(BWindows $B7O$H(B Linux $B$O$[$\F1?t$G$9$M!#(B

$B!!(B2002.05 $BJ,=P$F$^$9!#(B

• $B%&%$%k%9H/8+FO=P>u67(B(5$B7nJ,(B)

• $BIT@5%"%/%;%9$NFO=P>u67(B(5$B7nJ,(B)

$B!!(BAMaViS $B$+$i$N=PNO$r(B IPA $B%&%#%k%9FO=PMM<0(B $B$KJQ49$7$F<+F0$GAw$C$F$"$2$k$H4n$P$l$k$s$@$m$&$+!#(B $B$H=q$$$F$$$k4V$K$b(B [FreeBSD-net-jp 3728] $B$K(B Klez.H $B$,!D!D!#(B

$B!!$$$D$G$-$?$N$+$h$/$o$+$i$J$$$1$I!"$=$&$$$&%5%$%H$,$G$-$F$^$9!#(B $B%j%9%/%^%M%8%a%s%H:GA0@~(B $BBh(B 1 $B2s$NKAF,$NOC$O$D$^$j!"(BDoS $B>u67!"$J$o$1$G!#(B

$B!!99?7$$$/$D$+!#(B

• JPCERT/CC $B$K4X$7$F$h$/$"$k

  $B!V(BQ11: JPCERT/CC $B$OJF9q(B CERT/CC $B$NF|K\;YIt$J$N$G$9$+(B?$B!W(B $B$H$+!"A}$($F$^$9!#(B(^^)

• $B%3%s%T%e!<%?%;%-%e%j%F%#%$%s%7%G%s%H$NO"MmJ}K!(B

• $B5;=Q%a%b(B - $B%3%s%T%e!<%?%;%-%e%j%F%#%$%s%7%G%s%H$X$NBP1~(B

$B!!$U$H;W$C$F;n$7$F$_$?$N$G$9$,!"(Bhttps://www.jpcert.or.jp/ $B$H$$$&$N$O$J$$$_$?$$$G$9$M!#(B

$B!!(B$BN9$NAk8}(B $B$K$^$?$b$dLdBj!#$"$kDxEY$N8D?M>pJs(B ($B2q0wEEOCHV9f!&;aL>!&@8G/7nF|!&<+Bp=;=j(B) $B$rGD0.$7$F$$$l$P!"2q0wHV9f$r[memo:3863] $B$HK\

$B!!$3$NLdBj$O$9$G$K=$@5$5$l$F$$$k$=$&$@$,!"B>;3$N@P$H$7$F<+%5%$%H$N8+D>$7$r$7$F$/$l$k$H$3$m$,$I$l$@$1$"$k$3$H$d$i!#$C$F!"B>?M;v%b!<%I$G$$$$$N$+(B? > $B26!#(B

$B!!(B9.2.1 $B$h$jA0$N(B bind 9 $B$K

$B!!(Bbind 9.2.1 $B$G=$@5$5$l$F$$$k$N$G(B bind 9 $BMxMQ

• RHSA-2002:105-09: Updated bind packages fix denial of service attack (RedHat)

$B!!4XO"(B:

• Vulnerability Note VU#739123: ISC BIND 9 fails to process additional data chains in responses correctly thereby causing the server to fail an internal consistency check (CERT/CC)

• Internet Security Systems Security Alert June 4, 2002 Remote Denial of Service Vulnerability in ISC BIND (ISS)

• ISC BIND $B$K$*$1$k%j%b!<%H$+$i$N%5!<%S%9ITG=967b$N@H (ISSKK)