$B%;%-%e%j%F%#%[!<%k(B memo - 2004.04
Last modified: Tue Apr 4 12:39:01 2006
+0900 (JST)
$B!!(BUNIX $BHG(B LHa 1.14i $B$K(B 2 $B$D$N7g4Y!#(B
$B!!H/8+[Full-Disclosure] LHa buffer overflows and directory traversal problems$B!#(B
$B=$@5(B patch $B$H%5%s%W%k(B exploit $B$,E:IU$5$l$F$$$k!#(B
PoC $B%3!<%I$bEP>l(B:
[Full-Disclosure] Lha local stack overflow Proof Of Concept Code$B!#(B
$B!!$^$?!"$3$N7g4Y$O(B LHa $B$@$1$G$J$/!"(BWinZip$B!"(BWinRar$B!"(BMcAfee plugin for CommuniGate Pro $B$K$b$"$k$h$&$@!'(B [Full-Disclosure] LHa repercussions: WinZip, WinRar, CommuniGate Pro McAfee plugin, blog$B!#(B
fix / patch:
$B!!(BMicrosoft $B$+$i(B MS04-011 $B$NI{:nMQ>pJs$,=P$^$7$?!#(B
840997 - Adobe Illustrator $B$G:n@.$5$l$?3HD%%a%?%U%!%$%k7A<0$N%0%i%U%#%C%/(B $B%U%!%$%k(B (EMF $B2hA|%U%!%$%k(B) $B$,I=<($5$l$J$$(B
Microsoft Windows Graphics Device Interface (GDI) $B$r;HMQ$7$F3HD%%a%?%U%!%$%k7A<0$N%0%i%U%#%C%/(B $B%U%!%$%k(B (EMF $B2hA|%U%!%$%k(B) $B$r3+$/%W%m%0%i%`$G!"(BAdobe Illustrator $B$G:n@.$5$l$?(B EMF $B2hA|%U%!%$%k$,@5$7$/I=<($5$l$^$;$s!#(B
GDI $B$r;H$C$F(B EMF $B%U%!%$%k$r07$&$h$&$J%"%W%j%1!<%7%g%s$K9-$/1F6A$9$k$N$+$J!#$3$l$b4XO"$+(B:
$BKAF,$K$O(B
$B!V(B $B$3$NLdBj$O!"r7o$N$$$:$l$+$K3:Ev$9$k>l9g$KH/@8$7$^$9!#(B
* Microsoft Windows Server 2003 $B$r
841384 - Windows NT 4.0 $B$K(B MS04-011 $B$N%;%-%e%j%F%#=$@5%W%m%0%i%`$r%$%s%9%H!<%k$7$?8e(B "STOP 0x00000079" $B%(%i!<(B $B$,H/@8$9$k(B
Windows NT 4.0 $B$N%^%k%A%W%m%;%C%55!$G(B
MS04-011 $B$rE,MQ$9$k$H!"8m$C$F%7%s%0%k%W%m%;%C%5MQ%+!<%M%k$,%$%s%9%H!<%k$5$l$F%"%l$K$J$C$F$7$^$&$h$&$@!#(B
$BBP1~J}K!$,5-:\$5$l$F$$$k$,!"(BWindows 2000 / XP CD $B$d(B Windows XP Setup disk $B$r;}$C$F$$$J$$?M$O$I$&$9$l$P$$$$$s$G$7$g$&$M!#(B
$B!D!D(B246507 - Windows NT $B$O!"(B Ntoskrnl.exe $B$K$D$$$F$N%(%i!<%a%C%;!<%8$r5/F0$7$^$;$s(B $B$r;2>H$7$F(B ERD $B$r;H$($P$$$$$N$+$J!#(B
841382 - MS04-011 $B$N%$%s%9%H!<%k8e$K%3%s%T%e!<%?$,1~Ez$rDd;_!"%m%0%*%sIT2D!"(BCPU $B;HMQN((B 100% $B$N8=>]$,H/@8$9$k(B
Windows 2000 $B$K(B MS04-011 $B$rE,MQ$9$k$H!"%m%0%*%s$G$-$J$$$H$+(B
CPU 100% $B$H$+$K$J$kOC!#(B
Ipsecw2k.sys,
Imcide.sys,
Dlttape.sys
$B$N$$$:$l$+$,%$%s%9%H!<%k$5$l$F$$$k>l9g$KLdBj$K$J$k$3$H$,$"$k$h$&$@!#(B
Dlttape.sys $B$,F~$C$F$$$k%7%9%F%`$O>/$J$/$J$$$H;W$&$,!"$@$$$8$g$&$V$J$s$@$m$&$+!#(B
$B$3$N(B KB $B$G$O(B
$B!V(BNortel Networks $B$N(B VPN $B%/%i%$%"%s%H$,%$%s%9%H!<%k$5$l$F$$$F!"(BIPSec $B%]%j%7!<(B $B%(!<%8%'%s%H(B $B%5!<%S%9$,(B "$Bl9g!W(B
$B$H$$$&!VNc!W$,7G:\$5$l$F$$$k$1$l$I!"(Bwindows update$B$7$?$H$-$K>e$2$k%9%l(B 13 (2ch.net) $B$d(B
Windows Update$B<:GT$7$?$i(Bage$B$k%9%l(B 5 (2ch.net)
$B$KIT6q9g>pJs$r=q$$$F$$$k?M$,$=$&$$$&$b$N$r;H$C$F$$$k$H$O;W$($J$$$7$J$"!#(B
$B4XO"5-;v(B: $B@H
(ITmedia)$B!#(B
$B!!(BMicrosoft $B$O2?$b8@$C$F$J$$$h$&$G$9$,!"$3$&$$$&$b$N$b$"$k$h$&$G(B:
$B!!(Bwindows update$B$7$?$H$-$K>e$2$k%9%l(B 13 (2ch.net) $B$d(B
Windows Update$B<:GT$7$?$i(Bage$B$k%9%l(B 5 (2ch.net)
$B$G$O!V%5%&%s%I$,LD$i$J$/$J$C$?!W$H$$$&;vNc$bJ#?tJs9p$5$l$F$$$k$h$&$G$9$,!"(B
$BK\(B KB (835732) $B$K$O$=$&$$$C$?>pJs$O(B ($B$^$@(B?) $B$J$$$G$9$M!#(B
2004.05.03 $BDI5-(B:
$B!!4XO">pJs(B:
2004.05.06 $BDI5-(B:
$B!!(BPRIMERGY TX200FT > TX200FT$B$N$*CN$i$;(B > $BN10U;v9`(B ($BIY;NDL(B)
IA$B%5!<%P(BPRIMERGY TX200FT$B$K(B
MS04-011$B!'(BMicrosoft Windows $B$N%;%-%e%j%F%#=$@5%W%m%0%i%`(B (835732)
$B$rE,MQ$9$k:]$K$O!";vA0$K%@%&%s%m!<%I8!:w$+$i2<5-$N6[5^=$@5%W%m%0%i%`$r%@%&%s%m!<%I$7E,MQ$7$F$/$@$5$$!#(B
$B!!(BMS04-011 $B$r$=$N$^$^F~$l$k$H%^%:$$LOMM!#(B
2004.05.14 $BDI5-(B:
$B!!(BOracle $B$K4X$9$k>pJs$,=P$^$7$?(B:
$B!!0lJ}!"LdBj$,2r>C$9$k4D6-$b$"$k$h$&$G(B:
$B!!%H%l%s%I%^%$%/%m$N(B ServerProtect for NetAPP $B$G$O!"%"%s%$%s%9%H!<%k$G$-$J$/$J$kIT6q9g$,(B:
2004.05.24 $BDI5-(B:
$B!!K?=j$G0N$$$R$H$KJ9$$$F$_$?$H$3$m!"(BMS04-011 $B$NI{:nMQ$N7o$K$D$$$F$O!"%5%]!<%H$KO"Mm$9$l$PL5NA$G(B
patch $B$rF@$i$l$k$h$&$G$9!#K\Ev$K$h$+$C$?(B ($B%]%j%"%s%J(B)$B!#(B
$B!!$3$s$JOC$b$"$k$=$&$G$9(B:
841632 - IIS 5.0 $B$rZL@=q$G%(%i!<$,H/@8$9$k(B
(Microsoft)$B!#(BIIS $B$K$b$A$c$s$H(B patch $B$r$"$F$^$7$g$&!#(B
2004.05.26 $BDI5-(B:
$B!!$5$i$J$k>c32>pJs(B:
$B!!(Brsync 2.6.0 ($B$=$l0JA0$b(B?) $B$K7g4Y!#(B
chroot $B$7$J$$>uBV$G(B read/write $B2DG=$J(B rsync daemon $B$rF0:n$5$;$F$$$k>l9g!"(B
remote $B$N967be=q$-$G$-$F$7$^$&!D!D$H$$$&$3$H$+$J$"!#(B
NEWS for rsync 2.6.1 (26 Apr 2004) (samba.org)
$B$K$h$k$H(B Paths sent to an rsync daemon are more thoroughly sanitized when
chroot is not used
$B$@$=$&$J$N$G!"(Bpath $B$N(B sanitize $B$N;EJ}$KLdBj$,$"$C$?LOMM!#(B
$B!!(Brsync 2.6.1 $B$G=$@5$5$l$F$$$k$=$&$@!#(B
CVE: CVE-2004-0426$B!#(B
fix / patch:
- LD-WBBR/B $B$N%;%-%e%j%F%#LdBj$K$D$$$F(B
$B!!(Bfix $B$,=P$?$h$&$G$9(B:
$BJ@ (ELECOM)$B!#(B
LD-BBR/B$BMQ!!%U%!!<%`%&%'%"(B (ELECOM) $B$K$h$k$H(B:
Ver2.13
- Telnet$B%]!<%H$rL58z$K$7$^$7$?!#(B
- $BEv
- WAN$BB&$+$i$N%U%!!<%`%"%C%W$r6X;_$7$^$7$?!#(B
- $B%U%!!<%`%"%C%W$N:]$K%Q%9%o!<%I$,I,MW$K$J$j$^$7$?!#(B
- $B%U%!!<%`%&%'%"%U%!%$%k$K%9%/%i%s%V%k$r$+$1$^$7$?!#(B
$B!!$^$"D>$C$?$N$O$J$K$h$j$J$N$G$7$g$&$,!"!VEv
- Microsoft Windows $B$N%;%-%e%j%F%#=$@5%W%m%0%i%`(B (835732) (MS04-011)
$B!!4XO">pJs(B:
$B!!$^$@$"$F$F$$$J$$?M!"$$$=$$$G(B patch $B$r$"$F$^$7$g$&!#(B
$B!U(B
$B:[H=0wK!0F!"0lIt=$@5$G0Q0w2q2D7h!!8a8e$K=01!DL2a(B
(asahi.com)$B!#(B
$B!U(B
$B3KG3NA%5%$%/%k@/:v!"8+D>$7$X!!!VD94|CyB"$GBP1~$r!W(B
(asahi.com)$B!#!V3KG3NA%5%$%/%k!W$J$I$H$$$&$b$N$,@.N)$7$J$$$3$H$r!";v$3$3$K;j$C$F$h$&$d$/G'$a$k5$$K$J$C$?$N$+$J!#(B
$B!U(B
829786 - Windows Update Web $B%5%$%H$+$i(B Windows XP $B$N99?7$r%$%s%9%H!<%k$9$k$H!"%(%i!<(B $B%a%C%;!<%8$,I=<($5$l$k(B (Microsoft)$B!#(B
$B$3$NLdBj$O!"(BMicrosoft Windows XP Service Pack 1 $B$r%$%s%9%H!<%k$7$?8e!"%3%s%T%e!<%?$r:F5/F0$;$:$K!"(BWindows Update Web $B%5%$%H$+$iB>$N99?7$r%$%s%9%H!<%k$7$?>l9g$KH/@8$9$k$3$H$,$"$j$^$9!#(B
$B!!:F5/F02s?t$r8:$i$7$?$$$=$N5$;}$A$OM}2r$G$-$k$N$G$9$,!"(BService Pack $B%$%s%9%H!<%kD>8e$K$O:F5/F0$7$^$7$g$&!#(B
$B!U(B
Microsoft$B!$%9%Q%$%&%(%"BP:v$N@oN,$rN)0F(B
($BF|7P(B IT Pro)$B!#(B
$B!U(B
4/26
$B$O5~ET$G(B Microsoft SSTT (ITPro#2)
$B$r
$B!!$=$&$$$($P!"(BITPro#1 $B$O(B
web $B$K:\$C$?$h$&$G(B: MS$B$NL5=~%;%-%e%j%F%#%H%l!<%K%s%0!"%M%C%H$G
($BF|7P(B IT Pro)$B!#(BAdachi $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
$BEEGH%?%0$K$h$kMDCU1`;yDIHx;#1F%7%9%F%`$,
(slashdot.jp)$B!#(B
$B!U(B
$B2A3J8mI=5-$N?7(BeMac$B$K(B1$B2/Bf6/$NCmJ8$,;&E~(B
(slashdot.jp)$B!#(B1$B2/Bf$G$9$+!D!D!#(B1$B2/Bf$B!V(BCatWorks$B!WE9$K$*$1$k2A3JI=<($N8m$j$K$D$$$F(B (Yahoo!$B%7%g%C%T%s%0(B) $B$+$i0zMQ(B:
$B!V(BCatWorks$B!WE9$,F~NO$7$?>&IJ%3!<%I$r(BYahoo!$B%7%g%C%T%s%0$G>pJsDs6!852q&IJ%G!<%?$H>H9g$7!"7G<($r9T$$$^$7$?$,!"$=$N:]$K!">pJsDs6!852q&IJ%G!<%?$K8m$j$,$"$C$?$3$H$,:#2s$N;v8N$N860x$HH=L@$$$?$7$^$7$?!#(B
$B!!!V>pJsDs6!852q$B%d%U!
(Internet Watch) $B$K$h$k$H!"!V%=%U%H%P%s%/!&%a%G%#%"!&%"%s%I!&%^!<%1%F%#%s%0!J(BSBMM$B!K!W$N$h$&$G$9!#(B
$B!U(B
Network Associates$B$,$r!V(BMcAfee,inc$B!W$KJQ99!AF|K\K!?M$bO"F0(B
(Internet Watch)$B!#$*$)$)(B?!
Sniffer$B@=IJ%7%j!<%:$r(BSilver Lake Partners$B$H(BTexas Pacific Group$B$K(B2$B2/(B7,500$BK|%I%k$GGd5Q$7!"$r!V(BMcAfee,inc$B!W$KJQ99$9$k(B
$B!!$1$C$-$g$/(B sniffer $B$C$F2?$N$?$a$KGc$C$?$s$@$m$&!D!D!#(B
$B!U(B
$B!V5Y2KA0$K$O!$%;%-%e%j%F%#BP:v$Nu67$H6[5^;~$NO"MmBN@)$r:F3NG'!W!=!=(BJPCERT
($BF|7P(B IT Pro)$B!#(B
ISS
$B$N(B AlertCon $B$O(B 3 $B$K$J$C$F$$$^$9!#(B
$B!U(B
$B%$%i%/4XO"(B
- No.625 $B%$%i%/$O@o>l(B
($B%S%k!&%H%C%F%s$+$i$N%l%?!<(B, 4/19)
$BB`Hr4+9p$rL5;k$7$?Ey!9!"(B3$B?M$KBP$7$F$O;d$NM=A[$r1[$($kHpknCf=}$,4s$;$i$l$F$$$k$H$$$&!#@oAhCO0h$J$N$@$+$i$b$A$m$s4m81$J$N$G$"$k!#$7$+$7!"$@$H$9$l$P$D$$?t%v7nA0$K!"8xL@E^$N?@:jBeI=$,%$%i%/FnElIt$N%5%^%o$rK,Ld$7!V%5%^%o;TFb$OHf3SE*0BA4$@!W!V%X%k%a%C%H$b$+$V$kI,MW$O$J$$$H!J8=CO$N<#0B0];}$K$"$?$C$F$$$k%*%i%s%@73$N!K;JNa41$+$i8@$o$l$?!#KICF%A%g%C%-$d%X%k%a%C%H$rCe$1$F$b4m81$H$$$&%$%a!<%8$,$"$C$?$,!"7h$7$F$=$&$$$&$3$H$O$J$+$C$?!W$H$9$k5-
- $B?M ($B8xL@E^(B, 4/17)$B!#(B
$B%5%s%1%$$HFIGd$+$i0zMQ!"$G$9$+!#(B
- $BITL@$NK.?M#2?M2rJ|(B
$BA40wJ]8n$5$l!"NI$+$C$?(B
$B?@:jBeI=$,CLOC(B ($B8xL@E^(B, 4/18)$B!#$o$6$o$68@5Z$9$k(B = $B8xL@E^$OEO9R6X;_%4!<%4!<$J$o$1$G$9$M(B?
$B!!(BLinux kernel 2.4.22$B!A(B2.4.25$B!"(B2.6.1$B!A(B2.6.3 $B$K7g4Y!#(B
setsockopt() $B$N%5%V%k!<%A%s(B
ip_setsockopt() $B$K!"(BMCAST_MSFILTER $B%=%1%C%H%*%W%7%g%s$r@_Dj$7$?>l9g$K(B
integer overflow $B$9$k7g4Y$,$"$k!#(B
$B$3$l$rMxMQ$9$k$H!"(Blocal user $B$,(B DoS $B967b$ruBV$rH/@8$5$;$k$H$$$&%3!<%I(B: [Full-Disclosure] Linux kernel setsockopt MCAST_MSFILTER integer overflow proof of concept code$B!#(B
$B!!(BLinux kernel 2.4.26 / 2.6.4 $B$G=$@5$5$l$F$$$k!#(B
$B!!(BCVE: CVE-2004-0424
fix / patch:
$B!!(BCisco IOS 12.x $B$N(B SNMP $B$,%d%P$$LOMM!#(B
$B$<$s$<$sFI$a$F$$$J$$$N$G$9$,!"$H$j$$$=$.!#(B
$B!U(B
$B#9!#1$N#2G/A0!"N95R5!%F%mA[Dj$7$F1i=,!!JF;fJsF;(B
(asahi.com)$B!#(B
$B#U#S#A%H%%%G!<;f$K$h$k$H!"#N#O#R#A#D$O2=3XJ<4o$r@Q$s$GJFK\EZ$K8~$+$C$F$$$k$HA[Dj$7$?%8%'%C%H5!$rBg@>MN>e$G7b$AMn$H$91i=,$b9T$C$F$$$?!#(B
$B!!$^$5$K!V(B$B%(%0%<%/%F%#%V(B $B%G%7%8%g%s(B$B!W$N@$3&$@$J$"!#$"$N1G2h$G$O7bDF$;$:$K:Q$s$@$o$1$G$9$,!"1i=,$O$=$&$G$O$J$+$C$?!"$H!#(B
$B!U(B
$B!V$K$o$+4IM}
(@IT)$B!#CfB<7/$N$?$?$+$$$OB3$/!#(B
$B!U(B
$B0&CN8)7Y$,=iF0A\::%_%9$r
($BCfF|?7J9(B)$B!#(B
$B!U(B
$B8D?M>pJsJ]8n!'(B
$BBP:v$H$k4k6H$O(B4$B3dK~$?$:!!AmL3>J(B
($BKhF|(B MSN)
$B!U(B
$B8D?M>pJsJ]8n!!Ep$s$@=>6H0w$KH3B'E,MQ$XK!@0Hw8!F$(B ($BKhF|(B MSN)
$B!U(B
$B%"%C%+!'(B
$B>pJs%;%-%e%j%F%#!<650i$J$I
($BKhF|(B MSN)
$B!U(B
$B%"%a%j%+%s9R6u$,>h5R%G!<%?Ds6!$r9pGr!"JF1?M"J]0B6I$N13$,L@$i$+$K(B
(WIRED NEWS)$B!#$o$d!#(B
$B!U(B
$BCf>.4k6H8~$1$N%7%s%W%k$J%&%$%k%9BP:v%=%U%H!=!=%=%U%)%9$,H/I=(B
(ITmedia)$B!#
$B!U(B
DNSreport ($B$@$a$@$aF|5-(B)$B!#(B
$B$3$l!"$J$+$J$+$$$$$G$9$M!#(B
$B!U(B
$B%M%C%H%(!<%8%'%s%H!$%a!<%k!&%5!<%P!<4V$NDL?.$r0E9f2=$9$k%=%U%H$rH/I=(B
($BF|7P(B IT Pro)$B!#(B
$B>\:Y(B: CriptBox$B!#(B
$BBN83HG$b$"$j$^$9!#(B
$B!U(B
FSTools - FileSystem Investigator
(securiteam.com)$B!#(B
$B!U(B
dumnet
1.0d $B$,=P$?$=$&$G$9!#(B
$B!U(B
$B;{ED$5$s$N(B Netsky.Q $B4XO"J8=q(B
(info from [Snort-users-jp:00898])
$B!U(B
ACCS$B8D?M>pJsN.=P$K4X$9$k4F;k7W2h$N$*CN$i$;(B
(A.D.200X)$B!#(B
$B!U(B
$BA4%*!<%W%s%=!<%9%i%$%;%s%9$NF|K\8l;29MLu$r8x3+(B
(ITmedia)$B!#(B
$B!U(B
Gmail$B$O%W%i%$%P%7!
(Internet Watch)$B!"(B$B!V(BGmail$B!W$N%W%i%$%P%7!
(ITmedia)$B!#%?%@$h$j9b$$$b$N$O$J$$!"$H$$$&E[$J$N$G$7$g$&$M$(!#(B
$B!U(B
$BL5:9JLBgNL;&?M9T0Y$r9T$C$?CDBN$N5,@)$K4X$9$kK!N'$N;\9T>u67$K4X$9$kJs9p$K$D$$$F(B ($B7Y;!D#(B)$B!#%*%&%`$M$?!#(B
$B$"!":#$G$O(B$B=!65CDBN%"!<%l%U(B$B$G$7$?$M!#$7$+$7!"2?EYFI$s$G$b$9$4$$(B$B2N;l(B$B$@$J$"!D!D!#(B
$B!U(B
$B!V%=%U%H%&%'%"$NK!E*J]8n!WI|4)%j%/%(%9%H(B$B[port139ml:05244] 4/17 $BL\3P$^$7JY6/2q!X%*!<%W%s%=!<%9%=%U%H%&%'%"$NCx:n8"LdBj!Y(B$B!"(B
[port139ml:05246] Re: $BL\3P$^$7JY6/2q!!;29MJ88%$K$D$$$F(B$B!#(B
$B!U(B
$B!V%3%s%T%e!<%?(B1$BBf$"$?$jJ?6Q(B28$B8D$N%9%Q%$%&%(%"$,$R$=$s$G$$$k!W!$JF(BEarthLink$BD4::(B
($BF|7P(B IT Pro)$B!#(B
Spyware Blocker $B$N@kEA$J$N$G$7$g$&$,!"$=$N!VLs(B100$BK|Bf$N%Q%=%3%s!W$O$I$N$h$&$KD4C#$7$?$s$@$m$&!#(B
Spyware Blocker $B$rC1FH$GF~
$B!U(B
$B%S%8%M%9!&%Q!<%=%s$N$?$a$N%3%s%W%i%$%"%s%9F~Lg(B
$BBh(B2$B2s!AK!N'$KH?$9$k!H>o<1!I(B
($BF|7P(B BP)$B!#(B
$B!U(B
FreeBSD VuXML
(vuxml.org)$B!#(BVuXML is the Vulnerability and eXposure Markup Language
$B$@$=$&$G$9!#(BOpenBSD VuXML
$B$b$"$j$^$9!#(B
$B!!(BIBM $B$N(B ThinkPad $B$J$I$K%$%s%9%H!<%k$5$l$F$$$k(B Access Support $B$K!V%;%-%e%j%F%#>e$NLdBj!W$,$"$j!"!V:#$9$0>e5-%;%-%e%j%F%#=$@5%W%m%0%i%`$r%$%s%9%H!<%k!W$9$k$3$H$,?d>)$5$l$F$$$k!#(BAccess Support $B$,%W%j%$%s%9%H!<%k$5$l$F$$$k5!
- ThinkPad G40, R40, R40e, R50, R50p,
T40, T40p, T41, T41p, X31, X40
- ThinkCentre A50 (8320), A50p (8195), M50 (8187), S50 (8183)
- NetVista M42 (8305), M42 Slim (6290)
$B!!$?$@$7!"(B2004.02 $B0J9_$N(B ThinkPad X40 $B$K$O(B Access Support $B$O%W%j%$%s%9%H!<%k$5$l$F$$$J$$$H$$$&!#$^$?!"%W%j%$%s%9%H!<%k$5$l$F$$$J$$5!l9g$O!"F1MM$K%;%-%e%j%F%#=$@5%W%m%0%i%`$r%$%s%9%H!<%k$9$kI,MW$,$"$k!#(B
$B!!>>K\$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!!(BCVS 1.11.14 / 1.12.6 $B0JA0$K7g4Y!#(BCVS $B$K$*$1$k%Q%9$N07$$$K7g4Y$,$"$C$?$h$&$@!#(B
$B0-0U$"$k%/%i%$%"%s%H$O(B CVS $B%5!<%P>e$N$"$i$f$k(B RCS $B%"!<%+%$%V%U%!%$%k$r%j%/%(%9%H$G$-$F$7$^$C$F$$$?!#(B
$B$d$i$l%5!<%P$+$i8+$k$H!"0-0U$"$k%/%i%$%"%s%H$K$h$C$F8x3+$7$F$$$k$D$b$j$N$J$$(B RCS $B%"!<%+%$%V%U%!%$%k$r
$B0-0U$"$k%5!<%P$O%/%i%$%"%s%H$KBP$7$F$"$i$f$k%Q%9$r;XDj$G$-$F$$$?!#(B
$B$d$i$l%/%i%$%"%s%H$+$i8+$k$H!"%/%i%$%"%s%H$K=q$-9~$_8"8B$N$"$k%U%!%$%k$r0-0U$"$k%5!<%P$K$h$j>e=q$-$5$l$k4m81$,$"$C$?!#(B
$B!!(B1.11.15 / 1.12.7 $B$G=$@5$5$l$F$$$k!#(B2004-04-14: CVS Feature Version 1.12.7 Released! (security update)$B!#(B
CVE: CVE-2004-0180
CVE-2004-0405
fix / patch:
$B!!(BLinux $B%+!<%M%k$KJ#?t$N7g4Y$,H/8+$5$l$?!#$$$:$l$b(B local user $B$G$J$$$HMxMQ$G$-$J$$$,!"(Broot $B8"8B$r
CVE-2004-0109:
Linux 2.4.x / 2.6.x $B$K7g4Y!#(BISO9660 $B%U%!%$%k%7%9%F%`=hM}$K$*$$$F(B
buffer overflow $B$9$k7g4Y$,$"$k!#(B
$B$3$l$rMxMQ$9$k$H!"(BCD $B>e$ND9Bg$J%7%s%\%j%C%/%j%s%/$r;H$C$F!"(Blocal user $B$,(B root $B8"8B$rC%
$B4XO"(B: iDEFENSE Security Advisory 04.14.04: Buffer Overflow in ISO9660 File System Component of Linux Kernel
(iDEFENSE)
CVE-2004-0133:
Linux 2.4.x $B$K7g4Y!#(BXFS $B%U%!%$%k%7%9%F%`$K$*$$$F>pJsO31H$9$k7g4Y$,$"$k!#(B
$B$3$l$rMxMQ$9$k$H!"(Braw $B%G%P%$%9$K%"%/%;%92DG=$J(B local user $B$O(B
ext3 $B%U%!%$%k%7%9%F%`>e$N%;%s%7%F%#%V>pJs$r
CVE-2004-0003:
Linux 2.4.22 $B$h$jA0$K7g4Y!#(BR128 DRI $B%I%i%$%P$K7g4Y$,$"$j!"(Blocal user $B$K$h$k8"8B>:3J$,2DG=!#(B
CVE-2004-0010:
Linux 2.4.x $B$K7g4Y!#(Bncp_lookup() $B$K(B buffer overflow $B$9$k7g4Y$,$"$j!"(B
local user $B$K$h$k8"8B>:3J$,2DG=!#(B
CVE-2004-0178:
Linux 2.4.x $B$K7g4Y!#(BSound Blaster $BMQ$N(B OSS $B%3!<%I$K7g4Y$,$"$j!"(Blocal user $B$K$h$k(B DoS $B967b$,2DG=!#(B
fix / patch:
$B!!(BJet 4.0 $B$K(B buffer overflow $B$9$k7g4Y$,$"$j!"(Bremote $B$+$iG$0U$N%3!<%I$N
- Msjet40.dll $B%U%!%$%k$r8!:w$9$k!#B8:_$7$J$1$l$P!"$3$N7g4Y$O$J$$!#(B
- Msjet40.dll $B%U%!%$%k$,B8:_$9$k>l9g!"%P!<%8%g%s$r3NG'$9$k!#(B4.0.8618.0 $B$h$j8E$$$J$i!"7g4Y$,B8:_$9$k!#(B
$B!!(BMBSA $B$G$b%A%'%C%/$G$-$k$N$G3hMQ$5$l$?$$!#(B
$B!!7g4Y$N$"$k(B Jet 4.0 $B$,%$%s%9%H!<%k$5$l$F$$$k>l9g$O!"=$@5%W%m%0%i%`$rE,MQ$7$h$&!#(B
$B!!(BCVE: CVE-2004-0197$B!#(B
2004.05.12 $BDI5-(B:
$B!!(BWindows XP gold (SP $B$J$7(B) $BMQ$N=$@5%W%m%0%i%`$N%m!<%+%i%$%:$,IT40A4$@$C$?$=$&$G!"?7$7$$99?7%W%m%0%i%`$,EP>l$7$F$$$k!#(B
Windows XP SP1 $BMQ=$@5%W%m%0%i%`$K$O!"$3$NLdBj$O$J$$!#(B
$B!!(BInternet Explorer showHelp() Restriction Bypass Vulnerability
$B$N(B fix$B!#(BCVE: CVE-2004-0380 $B$N5-=R$,$9$C$-$j$7$F$$$F$$$$46$8(B:
The MHTML protocol handler in Microsoft Outlook
Express 5.5 SP2
through Outlook Express 6 SP1 allows remote attackers to bypass domain
restrictions and execute arbitrary code, as demonstrated on Internet
Explorer using script in a compiled help (CHM) file that references
the InfoTech Storage (ITS) protocol handlers such as (1) ms-its, (2)
ms-itss, (3) its, or (4) mk:@MSITStore, aka the "MHTML URL Processing
Vulnerability."
$B!!(BOutlook Express 5.5 SP2 / 6 / 6 SP1 $BMQ$N=$@5%W%m%0%i%`$,$"$k$N$GE,MQ$7$h$&!#(B
Windows 98/98SE/Me $B$K$bE,MQ$G$-$k!#(B
$BBP1~$9$k(B Internet Explorer $B$O(B:
| Outlook Express |
Internet Explorer |
| 5.5 SP2 |
5.01 SP4 (Windows 2000 SP4)
5.01 SP3 (Windows 2000 SP3)
5.5 SP2 (Windows Me)
|
| 6 |
6 (Windows XP 32bit gold) |
| 6 SP1 |
6 SP1 (Windows 98 / 98 SE / Me / NT 4.0 / 2000 / XP |
| 6 (Windows Server 2003) |
6 (Windows Server 2003)
6 (Windows XP 64bit) |
$B!!$U$D$&$N?M$O(B Internet Explorer 6 SP1 $B$r;H$C$F$$$k$O$:$G$9$h$M!#(B
$B!U(B
CPU$B$,MQ0U$7$F(BOS$B$,;H$&IT@5%3!<%I$N
($BF|7P(B IT Pro)$B!#(B
$B!U(B
$B!V?M
(asahi.com)$B!#0"A3!D!D!#(B
$B$b$7$+$7$F!"(B$B=01!?35D$rL1
(asahi.com) $B$JOC$N%+%b%U%i!<%8%e$@$C$?$j$7$^$9$+(B?
$B!U(B
$BJF9qL3D941!VL5;v2rJ|$H$F$b$&$l$7$$!W(B
(TBS NEWSi)
$B%Q%&%(%kD941$OF|K\$N0lIt$G?M
$B!U(B
$B%;%-%e%j%F%#$,@8J*3X$+$iK\Ev$K3X$V$Y$-$3$H(B
(ITmedia)$B!#(BCISCO $B$N!V<+8JKI1R7?%M%C%H%o!<%/!W$K$D$$$F$O!"(B$B$3$N$"$?$j(B$B$K(B flash $B$,$"$k$h$&$G$9!#!D!D(BNAC $B$N(B flash$B!"F|K\8l$,HyL/$K$*$+$7$$$H$3$m$,$"$k$h$&$J5$$,!#(B
$B!U(B
$B%I%i%$%V$9$k$H$-4m81$J6J!=!=Bh(B1$B0L$O0U30$K$b!D!D!)(B
(ITmedia)$B!#%o%k%-%e!<%l$G;v8N$C$F%t%!%k%O%i9T$-$G$9$+!#$J$s$+!V$G$-$9$.!W$C$F5$$b$7$^$9$,!"3N$+$K!"1?E>;~$N(B BGM $B$K$9$k$K$O$A$g$C$H%"%l$J2;$G$O$"$k$H;W$&!#(B
$B!U(B
NEC$B!"L$CN$N%M%C%H%o!<%/?/F~$KM-8z$J0[>o9TF0J,@O%(%s%8%s$r3+H/(B (Enterprise Watch)$B!#$I$NDxEYM-8z$J$s$@$m$&$J$"!#(B
$B!U(B
$BJF(BPGP$B!"%a!<%k0E9f2=%=%U%H$K(BSymantec$B$N%"%s%A%&%$%k%9$rE}9g(B
(Enterprise Watch)$B!#(B
$B!U(B
$B%$%i%/K.?M?M
($B5~ET?7J9(B)$B!#(Basahi.com $B$H$+$@$H@N$N5-;v$,>C$($F$7$^$C$F$$$k$h$&$@$,!"$3$3$O$A$c$s$H;D$C$F$$$k!#GX7J>u67$K$D$$$F$O!"KhF|(B MSN $B$N(B$B9q:](B > $BCf6aEl!&%m%7%"(B > $B%$%i%/I|6=(B
$B$N(B$B%P%C%/%J%s%P!<(B$B$G$=$l$J$j$K$?$I$l$k!#(B
$B!U(B
$B%H%l%s%I%^%$%/%m@=IJ$,;HMQ$9$k%"%/%F%#%V%"%C%W%G!<%H%5!<%P0lMw(B
($B%H%l%s%I%^%$%/%m(B)$B!#(B
$B!!(BWindows 98 / 98 SE / Me / NT 4.0 / 2000 / XP / Server 2003 $B$N(B
RPC / DCOM $B4XO"$G(B 4 $B$D$N?7$?$J7g4Y!#(B
RPC $B%i%s%?%$%`%i%$%V%i%j$N@H
CVE: CVE-2003-0813
$BBP>](B: Windows 2000 / XP / Server 2003
RPCSS $B%5!<%S%9$K(B
2 $B$D$N(B DCOM $B%"%/%F%#%Y!<%7%g%s%j%/%(%9%H$,F1;~$KE~C#$7!"$+$D%3%M%/%7%g%s$,$9$P$d$/JD$8$i$l$?>l9g$K!"6%9g>uBV$,H/@8$9$k7g4Y$,B8:_$9$k!#(B
$B$3$l$r0-MQ$9$k$H!"(Bremote $B$+$iG$0U$N%3!<%I$N
$B4XO"(B: Microsoft DCOM RPC Race Condition
(eEye)
CVE: CVE-2003-0813
$B$K$h$k$H!"$3$l$O(B
[Full-Disclosure] Bad news on RPC DCOM vulnerability
$B$N!V4{B8$N(B hotfix $B$rA4$FE,MQ$7$?>l9g$G$b$^$@7g4Y$,;D$C$F$$$k!WOC$J$N$@$=$&$G$9!#(B
RPCSS $B%5!<%S%9$N@H
CVE: CVE-2004-0116
$BBP>](B: Windows 2000 / XP / Server 2003
DCOM $B%"%/%F%#%Y!<%7%g%s%j%/%(%9%H$N=hM}$K$*$$$F!"%j%/%(%9%H%Q%1%C%HCf$ND9$5%U%#!<%k%I$NCM$,%A%'%C%/$5$l$:$K$=$N$^$^;H$o$l$F$7$^$&$?$a!"0[>o$KBg$-$JCM$r;XDj$9$k$3$H$K$h$C$F%a%b%j%j!<%/$rH/@8$5$;$k$3$H$,2DG=!#$=$N$h$&$J%Q%1%C%H$rAw$j$D$E$1$k$3$H$K$h$j%a%b%j$r8O3i$5$;!"(BDoS $B>uBV$rH/@8$5$;$k$3$H$,$G$-$F$7$^$&!#(B
$B4XO"(B: Microsoft DCOM RPC Memory Leak
(eEye)
COM $B%$%s%?!<%M%C%H%5!<%S%9(B (CIS) $B$*$h$S(B RPC over HTTP $B$N@H
CVE: CVE-2003-0807
$BBP>](B: Windows NT 4.0 / 2000 / Server 2003
COM $B%$%s%?!<%M%C%H%5!<%S%9!"$^$?$O(B RPC over HTTP $B$,@_Dj$5$l$F$$$k>l9g$K!"(Bremote $B$+$i(B DoS $B$r
$B%*%V%8%'%/%H(B ID $B$N@H
CVE: CVE-2004-0124
$BBP>](B: Windows 98 / 98 SE / Me / NT 4.0 / 2000 / XP / Server 2003
$B$h$/$o$+$i$J$$$N$G$9$,!"$3$l$C$F$b$7$+$7$F!"(B
Fingerprinting through Windows RPC
(securityfriday.com)
$B$NOC$@$C$?$j$7$^$9(B?
$B!!=$@5%W%m%0%i%`$,$"$k$N$GE,MQ$9$l$P$h$$!#(B
$B$3$N=$@5%W%m%0%i%`$O(B MS03-026 / MS03-039 $B$rCV$-$+$($i$l$k$=$&$@!#(B
$B!!(BSubversion $B$GMxMQ$5$l$F$$$k(B
neon
HTTP / WebDAV $B%/%i%$%"%s%H%i%$%V%i%j$N(B 0.24.4 $B0J2<$K(B format $B%P%0$,$"$j!"(B
$B0-0U$"$k(B WebDAV $B%5!<%P$X$N%"%/%;%9$K$h$jG$0U$N%3!<%I$,CVE-2004-0179$B!#(B
fix / patch:
$B!!(BOpenOffice.org $B$GMxMQ$5$l$F$$$k(B
neon
HTTP / WebDAV $B%/%i%$%"%s%H%i%$%V%i%j$N(B 0.24.4 $B0J2<$K(B format $B%P%0$,$"$j!"(B
$B0-0U$"$k(B WebDAV $B%5!<%P$X$N%"%/%;%9$K$h$jG$0U$N%3!<%I$,CVE-2004-0179$B!#(B
fix / patch:
$B!!$3$N5-;v$K%j%s%/$,5-:\$5$l$F$$$k$b$N(B:
- GNU GPL
-
Autoclave$B!#(B1FD Linux $B>e$G(B GNU shred $B$r;H$C$F(B HDD $B$r>C5n$9$k!"$h$&$@!#(B
IDE HDD $B$N$_BP1~$C$]$$!#(B
Autoclave $B$O(B CD boot $B$K$OBP1~$7$F$$$J$$$h$&$@$,!"(BCD boot
$B$5$;$?$$$J$i!"$?$H$($P(B
KNOPPIX
$B>e$G(B GNU shred $B$r;H$($P$h$$$o$1$G!#(B
text boot $B$5$;$l$P$=$l$[$I=E$/$b$J$$$G$7$g$&!#(B
Eraser$B!#(B
MS-DOS, Windows 9x / Me / 2000 / XP $BBP1~!#(B
IDE, SCSI, RAID $BBP1~!#(BHDD $BA4BN>C5n$@$1$G$J$/!"(BExplorer $B%i%$%/$J(B GUI
$B$+$i%U%!%$%k$d%G%#%l%/%H%j$r>C5n$7$?$j!"(Bcookie $B$d(B paging file $B$r>C5n$7$?$j$b$G$-$k$h$&$@!#>\:Y$O(B Features
$B;2>H!#(B
boot drive $B$b4^$a$?!"A4$F$N(B HDD $B$N>C5n$K$D$$$F$O(B
FAQ
$B$N!V(BHow do I Erase all hard drives on my PC?$B!W(B
$B$r;2>H!#(B
- $B5!G=8BDj$N(B Free $BHG$,$"$k(B
-
- $B>&MQ(B
-
$B!!$3$N5-;v$K$O$J$$$b$N(B:
- GNU GPL
-
2004.05.17 $BDI5-(B:
$B!!(BEraser
5.7 $B$K4^$^$l$F$$$k!VA4(B HDD $B>C5n%G%#%9%/!W$r;n$7$F$_$?$H$3$m!"$=$NCf?H$O(B
DBAN
$B$G$7$?!#
$B!!(BActive@ Kill Disk $B$N>l9g$O!"(BFreeDOS
+ exe $B$J(B disk $B$,$D$/$i$l$^$7$?!#$3$A$i$O$&$^$/5/F0$G$-!">C5n=hM}$b$G$-$?$h$&$G$9!#(Bfree $BHG$G$O!V(B0 $B=q$-(B 1 $B2s!W$7$+$G$-$^$;$s$,!"(Bcasual hack $BBP:v$G$"$l$P$3$l$G$b==J,$G$7$g$&!#5!L)>pJs$,=q$+$l$F$$$k$h$&$J(B disk $B$J$i!"$b$C$H5$9g$$$rF~$l$kI,MW$,$"$k$G$7$g$&$,!#(B
$B!!!D!D$J$s$@$+!"(BFreeSBIE
$B$J(B CD $B$D$/$C$?J}$,Aa$$$h$&$J5$$,$7$F$-$^$7$?!#(B
$B!D!D(B$B$D$/$j$^$7$?(B$B!#(B
$B4JC1$G$7$?!#(B
$B!U(B
DoS$B967b$h$jc(B
(ITmedia)$B!#$=$&$+!
$BF1;a$O$^$?!"%5!<%S%9$K;Y>c$r$-$?$9$[$IBgNL$N%j%/%(%9%H$,$"$C$?$3$H$O!"$3$l$^$G$K$bA}$7$FB?$/$N%f!<%6!<$,%;%-%e%j%F%#$K4X?4$r;}$D$h$&$K$J$C$?>Z5r$@$H$7$F!":#2s$N=PMh;v$rA08~$-$K$H$i$($F$$$k!#(B
$B!!$G$9$M!#K\MhH/@8$9$Y$-Ii2Y$H$O$^$@$^$@3V$?$j$,$"$k$O$:$@$7(B (!!)$B!#(B
$B!U(B
$B%$%i%/>p@*(B
$B?7$?$K(B 2 $BL>$NK.?M$,94B+$+(B:
$B:G=i$N(B 3 $BL>$OL5;v2rJ|(B:
$B$=$NB>$N94B+;v7o(B:
$BGX7J$H$J$k>u67(B:
- [aml 38928] $B6a67(B (4/14 22:22)
$B$H$K$+$/!"8=:_!"%U%!%k!<%8%c6aJU$G$O%2%7%e%?%]$^$,$$$NMpK=$JA\:w$,9T$o$l!"0l?M$NHH:a@7
- $B%U%!%k!<%8%c$+$i$NJs9p(B ($B1W2,8-$N%Z!<%8(B, 4/14)
$B1?E>@JB&$NAk$KFs$D$N7A$N$h$$@53N$JCF:/$N;D$C$?0lBf$N5_5^e$K$*$j!"6;$rA@$&$h$&71N}$r
USA $B$O5_5^$B%U%!%k!<%8%c$NL\7b ($B1W2,8-$N%Z!<%8(B, 4/15)$B!#(B
$B:#$9$0FI$a(B!
$B%3%s%5%k%?%s%H7s?GNE=j$N=jD9BeM}%^%-$,;d$r%Y%C%I$N$H$3$m$KO"$l$F$$$C$?!#$=$3$K$O!"F,$K=F$K$h$k2x2f$rIi$C$?(B10$B:P$/$i$$$N;R$I$b$,2#$K$J$C$F$$$?!#NY$N%Y%C%I$G$O!"$b$C$H>.$5$J;R$I$b$,!"F1$8$h$&$J2x2f$G<#NE$r
USA $B$O=w$H;R6!$rA@7b$9$k!#(B
$B?4Dl!"F,$KMh$F$$$?!#;d$?$A$O!"2?$N0eNE=hCV$b$J$/!"EE5$$b$J$$$H$3$m$G;R6!$r;:$b$&$H$7$F$$$k=w@-$N$H$3$m$K9T$3$&$H$7$F$$$?$N$@!#Iu:?$5$l$?39$NCf$G!"$O$C$-$j5_5^
$BF|K\@/I\$O!"$3$&$$$&$3$H$r$9$k?MC#$r!"9R6u<+1RBb$r;H$C$F6uM"$7$F$$$k$o$1$G$9$M!#(B
- [aml 38943] $B>pJsA`:n$KqY$5$l$F$O$J$i$J$$(B
- [fem-general 4532] $B%$%i%/$G?M
$B!V@/I\$,4m81$r7Y9p$7$F$$$?$K$b4X$o$i$:=P$+$1$F$$$C$?K\?M$?$A$N@UG$!W$H$$$&O@M}$O!">/$J$/$H$b%a%G%#%"$K$H$C$F$O<+;&$KEy$7$$$H;W$&$N$G$9$,!D!D!#$=$l$C$F!"4m81$NCf$K$"$k??
$B!U(B
Dumnet$B$HM7$\$&(B
($B$_$C$-!<$N%M%C%H%o!<%/8&5f=j(B)$B!#(B
$B%@%&%s%m!<%I$O(B http://tf.rootkit.jp/archive/dumnet/
$B$+$i!#(BREADME $B$rFI$`8B$j$G$O!"8=:_$O(B Linux $B$7$+%5%]!<%H$5$l$F$$$J$$$h$&$G$9!#(B
$B%@%_!<%M%C%H$H8@$o$l$k$H(B
dummynet(4)
$B$H4V0c$($k$N$G%@%`%M%C%H$NJ}$,$$$$$+$J$"!#(B
$B!!$5$C$=$/Dumnet$B$HM7$\$&(B
$B$N$H$*$j$K(B dumnet $B$r%$%s%9%H!<%k$7$F$_$^$7$?!#(B
$B$3$l$O$h$5$=$&$G$9!#(B
$B!U(B
Microsoft JVM$B$N%5%]!<%H!"(B2007$BG/Kv$^$G1dD9(B
(ITmedia)$B!#7k6I!"(BWindows $B$G$O!"$$$D$^$G$?$C$F$b(B
MS Java VM $B$,;H$o$l$D$E$1$F$7$^$&$N$G$7$g$&$+$M$(!#(BMS Java VM $B$G$7$+F0$+$J$$%b%N$b$$$m$$$m$"$k$h$&$@$7$J$"!#(B
$B!U(B
JPCERT/CC $B3hF035MW(B [ 2004$BG/(B1$B7n(B1$BF|!A(B 2004$BG/(B3$B7n(B31$BF|(B ]
(JPCERT/CC)$B!#$b$&$A$g$C$HB?$/$F$b$h$5$=$&$J$b$N$8$c$,$N$&!D!D(B > $BJs9p!#(B
$B!U(B
$BBgNL$N%9%Q%`$K$"$($0%a!<%j%s%0%j%9%H(B
(ITmedia)$B!#$&!<$s!D!D(B
$B4IM}
$B!!(Bsubscriber $B?t$,?tK|$H$+$K$J$k$H!"!VKDBg$J;~4V!W$K$J$k$+$b$J$"!#(B
$B$=$N>l9g$O!"$b$O$d<+F02=$9$k$7$+$J$$$G$7$g$&!#(B
fml $B$J$i$=$N$?$a$N5!G=$,$A$c$s$H$"$k$7!#(B
$B%9%Q%`%U%#%k%?!<$OF|>oE*$K!"ITFCDjB??t$N08@h$KF1;~$KAw?.$5$l$?%a%C%;!<%8$r
$B!!$=$N%9%Q%`%U%#%k%?!<$,Ie$C$F$$$k$@$1$J$N$G$O!D!D!#@$$NCf$K$OIe$C$?%9%Q%`%U%#%k%?!<$,%4%m%4%mE>$,$C$F$$$k$h$&$@$1$I!"$H$C$H$H
$B!U(B
$BBg3X%7%9%F%`$X$NIT@5?/F~$GIb>e$9$k6<0R(B
(ITmedia)$B!#$3$N
$B!!(BWindows 98 / 98 SE / Me / NT 4.0 / 2000 / XP / Server 2003 $B$KJ#?t$N7g4Y!#(B
$B$3$N(B advisory $B$G$O(B 14 $B8D$N7g4Y$,2r@b$5$l$F$$$k!#(B
LSASS $B$N@H
CVE: CVE-2003-0533
$BBP>](B: Windows 2000 / XP / Server 2003
Local Security Authority Subsystem Service (LSASS) (LSASRV.DLL) $B$K(B
,0A4FF"V(B ,06G"VFZ6^(B $B$9$k7g4Y$,$"$k!#$3$l$rMxMQ$9$k$H!"(B
Windows 2000 / XP $B$G$OF?L>%f!<%6$,(B remote $B$+$i967b$r9T$&$3$H$,$G$-!"(Blocal SYSTEM $B8"8B$rC%
$B4XO"(B: Windows Local Security Authority Service Remote Buffer Overflow
(eEye)
LDAP $B$N@H
CVE: CVE-2003-0663
$BBP>](B: Windows 2000
$BFCZ%5!<%S%9$,Dd;_$9$k!#(B
PCT $B$N@H
CVE: CVE-2003-0719
$BBP>](B: Windows NT 4.0 / 2000 / XP / Server 2003
SSL $BJ}$,M-8z!W$J>l9g$K!"(Bremote $B$+$iG$0U$N%3!<%I$rl9g$O!"(BPCT 1.0 $B$O%G%U%)%k%H$G$OL58z$K$J$C$F$$$k(B ($B$N$G%G%U%)%k%H$G$O$3$NLdBj$N1F6A$r
$B4XO"(B: Microsoft SSL $B%i%$%V%i%j$K$*$1$k%j%b!<%H%;%-%e%j%F%#?/32$N@H
(ISSKK)
Winlogon $B$N@H
CVE: CVE-2003-0806
$BBP>](B: Windows NT 4.0 / 2000 / XP
Winlogon $B$K(B buffer overflow $B$9$k7g4Y$,$"$j!"(Bremote $B$+$i(B
local SYSTEM $B8"8B$rC%
$B%a%?%U%!%$%k$N@H
CVE: CVE-2003-0906
$BBP>](B: Windows NT 4.0 / 2000 / XP
Windows GDI Client DLL (GDI32.dll) $B$K
$B4XO"(B: Windows Metafile Heap Overflow (eEye)
$B%X%k%W$H%5%]!<%H$N@H
CVE: CVE-2003-0907
$BBP>](B: Windows XP / Server 2003
$B!V%X%k%W$H%5%]!<%H!W$K$*$1$k(B HCP: URL $B=hM}$K7g4Y!#(B
HCP: URL $B$N%5%K%?%$%8%s%0$,ITB-$7$F$$$k$?$a$K!"FC!<%s8"8B$G
$B4XO"(B: [Full-Disclosure] Microsoft Help and Support Center argument injection
vulnerability
[Full-Disclosure] iDEFENSE Security Advisory 04.13.04 - Microsoft Help and Support Center Argument
Injection Vulnerability
$B%f!<%F%#%j%F%#%^%M!<%8%c$N@H
CVE: CVE-2003-0908
$BBP>](B: Windows 2000
$B%m%0%*%s$7$?%f!<%6$,(B local SYSTEM $B8"8B$rC%
$B4XO"(B: [SHATTER Team Security Alert] Microsoft Windows Utility Manager Vulnerability
Windows Management $B$N@H
CVE: CVE-2003-0909
$BBP>](B: Windows XP
$B%m%0%*%s2DG=%f!<%6$,(B local SYSTEM $B8"8B$rC%
Local Descriptor Table $B$N@H
CVE: CVE-2003-0910
$BBP>](B: Windows NT 4.0 / 2000
$B%m%0%*%s$7$?%f!<%6$,%+!<%M%k%b!<%I$G%3!<%I$r
$B4XO"(B: Windows Expand-Down Data Segment Local Privilege Escalation
(eEye)
H.323 $B$N@H
CVE: CVE-2004-0117
$BBP>](B: Windows 98 / 98 SE / Me / 2000 / XP / Server 2003
H.323 $B%W%m%H%3%k
$B2>A[(B DOS $B%^%7%s$N@H
CVE: CVE-2004-0118
$BBP>](B: Windows NT 4.0 / 2000
$B%m%0%*%s$7$?%f!<%6$,%+!<%M%k%b!<%I$G%3!<%I$r
$B4XO"(B: Windows VDM TIB Local Privilege Escalation
(eEye)
$B%M%4%7%(!<%H(B SSP $B$N@H
CVE: CVE-2004-0119
$BBP>](B: Windows 2000 / XP / Server 2003
Negotiate Security Software Provider (SSP) $B%$%s%?!<%U%'%$%9$K(B
buffer overflow $B$9$k7g4Y!#(B
$B$3$l$rMxMQ$9$k$H!"(Bremote $B$+$iG$0U$N%3!<%I$r
$B4XO"(B: NSFOCUS SA2004-01 : DoS Vulnerability in Microsoft Windows SPNEGO Protocol Decoding
SSL $B$N@H
CVE: CVE-2004-0120
$BBP>](B: Windows 2000 / XP / Server 2003
SSL $B%i%$%V%i%j$K(B DoS $B967b$r
$B4XO"(B: [Full-Disclosure] MS04-011 SSL Remote DoS PoC
ASN.1 "Double Free" $B$N@H
CVE: CVE-2004-0123
$BBP>](B: Windows 98 / 98 SE / Me / NT 4.0 / 2000 / XP / Server 2003
ASN.1 $B%i%$%V%i%j$K!"(B2 $B=E$K(B free() $B$7$F$7$^$&7g4Y!#(B
$B$3$l$rMxMQ$9$k$H!"(Bremote $B$+$iG$0U$N%3!<%I$r
$B!!=$@5%W%m%0%i%`$,$"$k$N$GE,MQ$9$l$P$h$$!#$?$@$7!"(BWindows 98 / 98 SE / Me $BMQ$N=$@5%W%m%0%i%`$O!V6<0REYH=Dj$,6[5^$G$O$J$$!W$H$$$&M}M3$G!"8x3+$5$l$F$$$J$$$N$GCm0U$5$l$?$$!#(B
$B$^$?!"(BNetMeeting $B$N!V%9%?%s%I%"%m%sHG!WMQ$N=$@5%W%m%0%i%`$O(B
$B8DJL$N=$@5%W%m%0%i%`(B
$B$H$7$FMQ0U$5$l$F$*$j!"$3$l$O(B Windows 98 / 98 SE / Me $B$K$bBP1~$7$F$$$k!#(B
Windows 2000 / XP / Server 2003 $B$KE:IU$5$l$F$$$k(B NetMeeting $B$K$D$$$F$O!"(BMS01-011 $B=$@5%W%m%0%i%`$G=$@5$5$l$k$,!"!V%9%?%s%I%"%m%sHG!W$O$=$&$G$O$J$$$N$GCm0U$5$l$?$$!#!V%9%?%s%I%"%m%sHG!W$N99?7>u67$O(B MBSA $B$G$b%A%'%C%/$G$-$J$$$=$&$J$N$G!"$J$*$N$3$HCm0U$,I,MW$@!#(B
$B!!$J$*!"(B$B$h$/4s$;$i$l$k
$B$K$"$k$h$&$K!"$3$N=$@5%W%m%0%i%`$rE,MQ$9$k$H!"e$NJQ99$,9T$o$l$k$=$&$@!#(B
$B$3$N=$@5%W%m%0%i%`$K$h$j!"!F(B.folder$B!G$N%U%!%$%k3HD%;R$G=*$o$k%U%!%$%k$,!"%G%#%l%/%H%j$K4XO"IU$1$i$l$J$/$J$j$^$9!#!F(B.folder$B!G$N%U%!%$%k3HD%;R$G=*$o$k%U%!%$%k$,!"$3$l$i$N@H$N%W%m%0%i%`$G%G%#%l%/%H%j$H$7$FI=<($5$l$J$/$J$k$h$&$K5!G=>e$NJQ99$,DI2C$5$l$^$9!#(B
$B!!$U$D$&$N%U%!%$%k$H$7$FI=<($5$l$k$h$&$K$J$k!"$H$$$&$3$H$+$J!#(B
2004.04.22 $BDI5-(B:
$B!!(BPCT $B$N@HCVE-2003-0719,
Microsoft SSL $B%i%$%V%i%j$K$*$1$k%j%b!<%H%;%-%e%j%F%#?/32$N@H)
$B$rFM$/(B exploit $B$,EP>l$7$?$h$&$G$9!#(B
$BF|K\8lHG(B Windows 2000 SP4 $B>e$G$N8!>ZJs9p$,$"$j$^$9(B [Snort-users-jp:00933]$B!#$^$?!"$3$N(B exploit $B$,H/@8$5$;$k%Q%1%C%H$r8!CN$9$k(B
snort $B%7%0%M%A%c$,8x3+$5$l$F$$$^$9(B [Snort-users-jp:00931]$B!#(B
2004.04.24 $BDI5-(B:
$B!!(BMicrosoft Windows $B$N%;%-%e%j%F%#=$@5%W%m%0%i%`(B (835732) (MS04-011)
$B$N!V(BPCT $B$N@Hl$7$F$$$^$9!#(B
$B!!$3$l$KBP1~$7$F!"(BPCT/SSL $B$N0-MQ$r;n$_$k%3!<%I$K4X$9$k>pJs(B (Microsoft)
$B$H$$$&%Z!<%8$,8x3+$5$l$F$$$^$9!#$^$@(B MS04-011 $B$NE,MQ$,$G$-$F$$$J$$>l9g$O!"(BIIS $B$K$D$$$F$O(B
187498 - [IIS]PCT 1.0$B!"(BSSL 2.0$B!"(BSSL 3.0 $B$r(B IIS $B>e$GL58z$K$9$kJ}K!(B (Microsoft)
$B$K$h$C$F(B PCT 1.0 $B$rL58z$K$9$k$3$H$G!"!V(BPCT $B$N@H
$B!!$J$*!"(BMS04-011 patch (835732) $B$O(B
windows update$B$7$?$H$-$K>e$2$k%9%l(B 13 (2ch.net) $B$d(B
Windows Update$B<:GT$7$?$i(Bage$B$k%9%l(B 5 (2ch.net)
$B$GIT6q9g$K4X$9$kOCBj$,=P$F$$$k$h$&$J$N$G$4Cm0U$/$@$5$$!#(B
$B
$B!!(B$B%$%s%?!<%M%C%HDjE@4QB,(B (cyberpolice.go.jp) $B$G$O!"(B443/tcp $B$N(B port scan $B%G!<%?$OL@<($5$l$F$$$J$$$7!"(BPCT 1.0 attack $B$N?t$b$o$+$i$J$$$J$"!#(B
2004.04.26 $BDI5-(B:
$B!!!V(BPCT $B$N@H
$B!!(Bexloit $BB3!9(B:
2004.04.27 $BDI5-(B:
$B!!4XO">pJs(B:
$B!!$^$@$"$F$F$$$J$$?M!"$$$=$$$G(B patch $B$r$"$F$^$7$g$&!#(B
2004.04.30 $BDI5-(B:
$B!!(B835732 - [MS04-011] Microsoft Windows $B$N%;%-%e%j%F%#=$@5%W%m%0%i%`(B$B!#(B
$BI{:nMQ>pJs%-%?!
2004.05.02 $BDI5-(B:
$B!!(BSasser $B%o!<%`$K$D$$$F$N$*CN$i$;(B$B!#(BLSASS $B7j(B attack worm $B%-%?!
2004.05.07 $BDI5-(B:
$B!!!X!V(BLSASS $B$N@Hl$7$?2sHr:v$O(B:
%systemroot%\debug\dcpromo.log $B$H$$$&L>A0$N%U%!%$%k$rFI$_
echo dcpromo > %systemroot%\debug\dcpromo.log & attrib +r %systemroot%\debug\dcpromo.log
$B!!$J$<$3$l$G$$$$$N$+!#$3$N7g4Y$K4X$9$k(B eEye $B$N5;=QJ8=q(B
Windows Local Security Authority Service Remote Buffer Overflow
(eEye)
$B$K$O$3$&$"$k(B:
The buffer overflow bug is in a logging function which
generates a string for the log file using vsprintf(). The
name of the log file is "DCPROMO.LOG", and it is located in
the Windows "debug" directory.
$B!!(Bdcpromo.log $B$X$N=q$-9~$_=hM}$K$*$$$F(B vsprintf() $B$,(B
buffer overflow $B$9$k$N$@$m$&!#$=$3$G!"$=$b$=$b(B
dcpromo.log $B$r(B write open $B$G$-$J$$$h$&$K$7$F$7$^$($P!D!D$H$$$&$3$H$G$$$$$N$+$J!#(B
$B!!(BCISCO $B$NL5@~(B LAN $BG'>Z%W%m%H%3%k(B LEAP $B$KBP$7$F<-=q967b$r9T$&$3$H$,2DG=$@$H$$$&OC$,$"$k$=$&$G!#$=$N$?$a$N%D!<%k$,8x3+$5$l$F$$$k!#(B
$B!!$3$NLdBj$O!"?7$7$$%W%m%H%3%k(B EAP-FAST $B$G$O=$@5$5$l$F$$$k$=$&$@!#(B
$B$H$$$&$+!"(Basleap $B:n
$B!!$G!"(Bhttp://asleap.sourceforge.net/
$B$K%"%/%;%9$9$k$H!"$3$s$J5-=R$,$"$j$^$9$M(B:
I wrote
asleap while researching weaknesses in the Cisco proprietary LEAP protocol
after I discovered that LEAP
uses a modified MS-CHAPv2 exchange to authenticate users.
MS-CHAPv2 is very bad.
$B!!4XO"(B:
- MP3$B$N(BID3$B%?%0$K@x$`(BMac OS X$B%&%$%k%9$,8+$D$+$k(B
$B!!(BMac OS X $B=i$N%H%m%$$NLZGO(B???$B!!!]!!(BMP3Concept $B$=$N8e(B ($B%j%s%/$H$+HwK:O?$H$+F|5-$H$+(B)$B!#(B
Mac OS X$B%&%$%k%9BP:v%D!<%k$rL5=~Ds6!(B
(ITmedia) $B$J$s$F5-;v$b=P$F$$$k$h$&$G$9$,!"(BLife with MacOS X (SHIRO's pages)
$B$N!V(B4/13 MP3Concept $BBP:v!W$NJ}$,$h$$$H;d$b;W$$$^$9!#(B1 $B2s%$%s%9%H!<%k$9$l$P$h$$$o$1$G$9$7!#$"$j$,$?$$$3$H$G$9!#(B
$B!!4XO"(B:
$B!!>/$J$/$H$b(B Apple $B$+$i$N(B official fix $B$,=P$k$^$G$O!"!VA{$.!W$O$<$s$<$s<}$^$C$F$J$$$H;W$&$N$G$9$1$I$M$(!D!D!#(B
- Symantec Norton Internet Security$B$KG$0U$N%3!<%I$,
$B!!(B4/8 $BIU$G(B AntiSpam 2004 $BMQ(B fix $B$,EP>l$7$F$$$^$7$?(B:
2004$BG/(B4$B7n(B8$BF|(B($BLZ(B)$B$h$j(BSymantec Norton AntiSpam 2004 for Windows $B=$@5%Q%C%A$N(B LiveUpdate $B$K$h$kG[I[$r3+;O$7$^$7$?(B ($B%7%^%s%F%C%/(B)$B!#(B
$B!U(B
$BL5@~(BLAN$B$N%;%-%e%j%F%#$K4X$9$k%,%$%I%i%$%s!J2~D{HG!K(B
(JEITA)$B!#$3$l$@$1$G$O!"2?$,JQ$o$C$?$N$+$,$h$/$o$+$i$J$$$N$G!"4XO"JsF;$b;2>H$5$l$?$$(B:
$B!U(B
ASKACCS $B4XO"(B
$B!U(B
$BD;%$%s%U%k%(%s%64XO"(B
$B!U(B
$BK.?M94B+!"%$%i%/>p@*!"<+1RBb(B
$B!U(B
$B%U%!%k!<%8%c>p@*(B
$B!U(B
ISS Weekly SOC Report (ISSKK)$B!#(B
$B7|G0$5$l$?!"(BNetsky.Q $B$K$h$k(B DoS $B967b$G$9$,!"(BSOC $B$G$O3NG'$5$l$^$;$s$G$7$?(B(*1)
$B!!(BISS $B$5$s$,4QB,$7$F$$$k>l=j$O$-$A$s$H%a%s%F%J%s%9$5$l$F$$$k!"$H$$$&$3$H$J$N$G$7$g$&!#(B
$B!U(B
Windows XP SP2$B$N>\:Y$J5;=Q;qNA$KBTK>$NF|K\8lHG$,EP>l(B
($BF|7P(B IT Pro)$B!#(B
$B!U(B
$B%5%$%P!pJs%;%-%e%j%F%#!&%,%P%J%s%9$N%U%l!<%`%o!<%/$r4+9p(B
($BF|7P(B IT Pro)$B!#(B
$B!U(B
$B?7$7$$CN:bAJ>Y@)EY$,%9%?!<%H(B
($BF|7P(B BP)$B!#(B
$B!U(B
NT 4.0$B$G!V(BWindows Update$B!W$K@\B3$G$-$J$$%H%i%V%k(B
($BF|7P(B IT Pro)$B!#$H$C$H$HJ}$H$b(B)$B!#(B
$B$=$b$=$b(B IE 5.x $B$O$b$O$d(B NT 4.0 $B>e$G0];}$5$l$F$J$$$G$7$g!#(B
$B!U(B
$BJFJ<#2?M$H%O%j%P!<%H%s;R2q
($BFIGd(B)$B!#(B
$B!U(B
$B0-FA>&K!(B? $B%^%K%"%C%/%9(B: $B%H%T%C%/%9(B$B!#(B
$B%&%'%G%#%s%0$,AJ>Y$rA4$F
$B!U(B
$B:GNI$N%&%$%k%9BP:v%D!<%k$H$O(B
(ITmedia)$B!#MSDN $B%"%+%G%_%C%/(B $B%"%i%$%"%s%9(B
$B$_$?$$$J%i%$%;%s%9$,$"$k$H=u$+$k$N$@$,!#(B
$B$$$d!"CMCJ$r0B$/$7$m$H$$$&OC$G$O$J$/!"%i%$%;%s%97ABV$H$7$F!#(B
$B!U(B
$BBh#82s(B
$B%3%s%T%e!<%?HH:a$K4X$9$kGrIM%7%s%]%8%&%`(B
$B!V!!%f%S%-%?%9;~Be$N8D?M>pJsJ]8n!!!W(B (sccs-jp.org)$B!#(B
2004.05.20$B!A(B22$B!#;d$N>l9g!"$:$$$V$sA0$+$i!":#G/$O;22C$9$k$3$H$K$J$C$F$$$^$9(B (^^;;)$B!#(B
$B!U(B
NTT$B%I%3%b4X@>$G8m$C$?HV9f$K$+$+$k>c32$,H/@8!"860x$O8r495!$N%O!<%I8N>c(B
($BF|7P(B IT Pro)$B!#9k2w$J;v8N$@$J$"!#!V860x$O2;@<7O8r495!$N%O!<%I%&%(%"$N8N>c!W$H8@$&$1$l$I!"(B
NTT$B%I%3%b4X@>$O(B9$B;~(B39$BJ,!"8r495!$r4F;k$9$k%*%Z%l!<%7%g%s!&%;%s%?!<$G8r495!$N8N>cH/@8$N%"%i!<%`$rc32$,5/$-$?!#$=$3$G!":G=i$K8N>c$7$?1?MQ7O$N%O!<%I%&%(%"$r8r49$7!"(B10$B;~(B53$BJ,$K40A4I|5l$9$k$3$H$,$G$-$?$H$$$&!#(B
$BK\HV!&BT5!$NN>J}$H$b2u$l$F$$$?$N(B?
$B%*%U%#%7%c%k>pJs(B: $B$*OM$S$H$*CN$i$;!!(B4$B7n(B12$BF|(B (NTT $B%I%3%b4X@>(B)$B!#NoH~$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
$B%*!<%W%s%=!<%9!&%3%_%e%K%F%#$X$NIT@5?/F~$,Aj
($BF|7P(B IT Pro)$B!#(Bchkrootkit
$B$G(B rootkit $B$r8!=P$G$-$?$=$&$G$9!#(B
$BF|K\(B MySQL $B%f!<%62q(B web $B%Z!<%8(B
$B$O8=:_!V(BUnder Construction$B!W$K$J$C$F$$$^$9!#(B
$B!U(B
SECURE SYSTEM Training Tour 2004$B!"!V(BDeveloper$B!W$NJg=8$,;O$^$C$F$$$^$9!#(B
$B$O$;$,$o$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
Whidbey$B$N(BC$B%i%s%?%$%`4X?t$K%P%C%U%!!&%*!<%P!<%i%sBP:v$,;\$5$l$k(B
($BF|7P(B IT Pro)
$B$N7o$G!"$O$;$,$o$5$s$+$i>pJs$rD:$-$^$7$?(B ($B$"$j$,$H$&$4$6$$$^$9(B):
http://itpro.nikkeibp.co.jp/free/NT/NEWS/20040409/1/ $B$K$h$k$H(B
| $B%P%C%U%!D9$rD6$($?%"%/%;%9$,$"$k$H!$Nc30$,H/@8$9$k!#(B
$B$@$=$&$G$9!#$G$9$N$G!"(BNULL $B$,IU2C$5$l$k$+H]$+$O$"$^$jLdBj$G$O$J$$$H;W$$$^$9!#(B
$B!!Nc30$,H/@8$9$k$N$GNc30=hM}$7$F$M!"$H!#$J$k$[$I$G$9!#(B
$B$9$k$H!"(B$B855-;v(B$B$N!V=q$-49$($k$H!A!W$O!"$"$^$j$h$/$J$$Nc$J$N$+$b$7$l$J$$$J$"!#(B
$B!U(B
TCP MD5 Signature Option $B!&!&!&(B (@Sam's Room)$B!#(B
$B!U(B
Whidbey$B$N(BC$B%i%s%?%$%`4X?t$K%P%C%U%!!&%*!<%P!<%i%sBP:v$,;\$5$l$k(B
($BF|7P(B IT Pro)$B!#0BA4HG$N4X?t$,JLESMQ0U$5$l$k$N$@$=$&$G!#(B
$B<+F0$GCV$-$+$($F$/$l$k$o$1$G$O$J$$!#(B
$B$G!"(Bstrcpy_s(strDst, 5, strSrc) $B$N7k2L!"(BstrDst $B$NFbMF$O$I$&$J$k$s$@$m$&!#(B
$B$$$d!"<+F0(B NULL $B%?!<%_%M!<%H$"$j$J$N$+!"$J$7$J$N$+$,CN$j$?$$$@$1$G$9$,!#(B
$B!U(B
$B$"$J$?$NIp4o8K$K(Brootkit hunter$B$O$"$k$+!)(B
(japan.linux.com)$B!#(B
$B$=$3$G!"H`$O%9%/%j%W%H$r<+J,$G=q$/$3$H$K$7$?!#(Bchkrootkit$B$,5$$KF~$i$J$$$+$i$G$O$J$/!J
$B!!(B1.05 $B$r
$B!U(B
$B%U%!%k!<%8%c4XO"(B
$B!!(B$B%"%k!&%8%c%8!<%i$,JsF;$7$?2rJ|$N#3>r7o(B ($BFIGd(B) $B$K$O(B
$B!VF|K\$N30L3I{Bg?C$,%U%!%k!<%8%c$rK,Ld$7!"JF73$,9T$C$?5T;&$H=8CDJhCO$r;k;!$9$k!W(B
$B$H$$$&$b$N$b$"$k$o$1$@$,!"$=$&$$$&>u67$,%9%`!<%:$J!V?M$B2rJ|$O%U%!%k!<%8%c$+$iE1B`$r3+;O$7$?JF73$,E1B`$r40N;$7$?8e$K$J$k$H$$$&4QB,$b!!(B
$B!N#J#N#N!O(B ($B0$=$Me(B, 4/11)
$B$H$$$&OC$b$"$C$?$h$&$G$9$M!#(B
$B!U(B
$B!V>pJs8r:x!"2?$r?.$8$?$i$$$$$N$+!W!!:.Mp$N@/I\!&M?E^(B
(asahi.com)$B!#!VE1B`$O$7$J$$!W$H0R@*$@$1$O$$$$$,!"8=
$B!!(B$B%$%i%/K.?M?Me$NM}M3!W!!#U#A#EJsF;(B
($BKhF|(B MSN)$B!"(B[aml 38833] $B6[5^@$B!#L5;v2rJ|$5$l$l$P$$$$$N$G$9$,!D!D!#(B
$B!!(B$B%$%9%i%`=!65 (asahi.com)$B!#(B
4/10 $B$N!V6[5^M};v2q!W$G:n@.$5$l$?$N$@$=$&$G$9!#(B
[aml 38768] $B:rLk$+$i2rJ|$^$G$NN.$l(B
$B$K$O(B 4/10 22:00 $B$K!X%$%9%i%`;XF3$B%$%9%i%`=!65 (asahi.com, 4/12)
$B!!$3$N(B ITmedia $B5-;v$rFI$s$G$b(B
Mac OS X$B$K$b%H%m%$$NLZGO$N4m81@-!"(BMP3$B$r56Au$9$k!V(BMP3Concept$B!W(B
(MYCOM PC WEB) $B$rFI$s$G$b(B
ntego Announces Protection against the First Mac OS X Trojan Horse: MP3Concept
(intego.com) $B$rFI$s$G$b!"2?$,5/$3$C$F$$$k$N$+$h$/$o$+$i$J$+$C$?!#(B
$B$7$+$7(B More details on Trojan Horse for Mac OS X (MacNN) $B$H!"$7$m$d$^$5$s$N(B
[harden-mac:0632] Re: First Mac OS X Trojan Horse
$B$rFI$`$H!"$I$&$d$i!"(BMac OS X $B$N!V%l%,%7!<(B Mac OS $BIwL#!W$JItJ,$H!V(BNeXT $B0JMh$N(B UNIX $BE*ItJ,!W$H$N7d4V$r$&$^$/K%$C$?967b$G$"$k$h$&$@!#(B
($B$4$a$s!"$$$^$@$K$-$A$s$HM}2r$G$-$F$$$J$$(B)
$B!!BP93:v$@$,!"$?$H$($P$7$m$d$^$5$s$N(B
[harden-mac:0632] Re: First Mac OS X Trojan Horse
$B$O!"(Bfile $B$N(B magic $BItJ,$r$-$A$s$H2r
$B!!$7$+$7!"(Bintego $B$N?MC#$O!"(BApple $B$K$3$N7g4Y$NB8:_$rDLCN$7$F$$$?$s$@$m$&$+!#(B
$B$I$&$b!"$=$&$K$O8+$($J$$$N$@$,!D!D!#(B
2004.04.14 $BDI5-(B:
$B!!(BMac OS X $B=i$N%H%m%$$NLZGO(B???$B!!!]!!(BMP3Concept $B$=$N8e(B ($B%j%s%/$H$+HwK:O?$H$+F|5-$H$+(B)$B!#(B
Mac OS X$B%&%$%k%9BP:v%D!<%k$rL5=~Ds6!(B
(ITmedia) $B$J$s$F5-;v$b=P$F$$$k$h$&$G$9$,!"(BLife with MacOS X (SHIRO's pages)
$B$N!V(B4/13 MP3Concept $BBP:v!W$NJ}$,$h$$$H;d$b;W$$$^$9!#(B1 $B2s%$%s%9%H!<%k$9$l$P$h$$$o$1$G$9$7!#$"$j$,$?$$$3$H$G$9!#(B
$B!!4XO"(B:
$B!!>/$J$/$H$b(B Apple $B$+$i$N(B official fix $B$,=P$k$^$G$O!"!VA{$.!W$O$<$s$<$s<}$^$C$F$J$$$H;W$&$N$G$9$1$I$M$(!D!D!#(B
2004.04.19 $BDI5-(B:
$B!!4XO"5-;v(B: Mac OS X $B$N%H%m!<%8%c%s5;=Q!'(B $BC#?M$N
(TidBITS)$B!#(B
- $B!V>pJs%7%9%F%`Ey$N@HpJs$N
$B!!4XO"5-;v(B:
$B$-$c$!!"CQ$:$+$7$$$o!D(B
(Lucrezia Borgia $B$N(B Room Cantarella)
$B!!6vA3$J$N$K!V8N0U$@$m(B!$B!W$H$D$C$D$+$l$k$H$+!"0-0U$O$J$$$N$K!V0-0U$"$j$"$j$@$m(B!$B!W$H$D$C$D$+$l$k$H$+!"$$$&2DG=@-$O3N$+$K$"$j$^$9$M!#(B
$B$7$+$7!"$3$N%U%m!<$r;H$&>l9g$K$O!"3+H/!&1?1DB&$K$O(B IPA $B$K$h$C$F%U%#%k%?$5$l$?>pJs$,FO$/$h$&$K$J$j$^$9$+$i!"H/8+@\Js9p$9$k>l9g$h$j$ONd@E$K
$B!!$3$l$^$G$O!"$A$g$C$H$7$?8@MU;H$$$,%b%H$GOC$,$3$8$l$A$c$C$?$j$9$k$3$H$,>/$J$/$J$+$C$?$N$G$O!"$H;W$C$F$$$^$9!#$=$&$$$&%H%i%V%k$O>/$J$/$J$C$F$/$l$k$+$J$"!"$H!#$J$C$F$/$l$k$H$$$$$J$"!#(B
- Internet Explorer showHelp() Restriction Bypass Vulnerability
$B!!4XO">pJs(B:
$B!!(BSOggy $B$5$s$+$i(B ($B$"$j$,$H$&$4$6$$$^$9(B):
$B;d$b(Bsquid$B$N%"%/%;%9%3%s%H%m!<%k$KDI5-$r$7$h$&$H!">\:Y$rD4$Y$K4XO"%Z!<%8$H$7$F>R2p$5$l$F$$$k(B<http://www.kb.cert.org/vuls/id/323070>$B$r8+$K9T$C$?$N$G$9$,!"%Z!<%8Cf$K
-----$B0zMQ$3$3$+$i(B-----
An attacker could exploit this vulnerability using a crafted HTML
document containing script or an ActiveX object or possibly an IFRAME
element. Due to the way IE determines the MIME type of a file
referenced by a URL, an HTML document may not necessarily have the
expected file name extension (.html or .htm). Likewise, a CHM file
may not have the expected .chm extension.
-----$B0zMQ$3$3$^$G(B-----
$B$3$NJ8>O$H!"http://msdn.microsoft.com/workshop/networking/moniker/overview/appendix_a.asp>$B$N%Z!<%8$rFI$`$H!"(BCHM$B%U%!%$%k$X$N%"%/%;%9$r6X;_$9$k$3$H$O!"$^$C$?$/L58z$G$O$J$$$G$7$g$&$,!"967b
$B!!3N$+$K!D!D!#$^$"!"8z2L$,$J$$$o$1$G$O$J$$$@$m$&$H$$$&$3$H$G!#(B
$B!V(Bms-its, its, mk $B%W%m%H%3%k%O%s%I%i$rL58z$K$9$k!W$H$$$&2sHrJ}K!$OI{:nMQ$,Bg$-$$$G$9$7!"!VB>$N%V%i%&%6$r;H$&!W$O!"FCDj$N%a!<%k%=%U%H$r;H$C$F$$$k?M$K$ODL$8$J$$$@$m$&$7!#(B
$B!U(B
$BLOJoIJN.DLKI;_MQ%$%s%?!<%M%C%H%3%s%F%s%D(B
$B!V%M%C%H%*!<%/%7%g%s$K$*$1$k%K%;%b%N7bB`%^%K%e%"%k!W$K$D$$$F(B
($BFC5vD#9q:]2](B)
$B!U(B
$B$h$DMUF}6HM"F~%P%?!<$K6bB0JR(B$B!"%7%c%H%l!<%
$B!!(B$B$h$DMUF}6H(B$B$N%Z!<%8$K$@$1$O!"2?$b$J$$$h$&$G$9!#!D!D%]%C%W%"%C%W%&%#%s%I%&$GI=<($7$F$$$k$=$&$G$9!#@PED$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#%]%C%W%"%C%W%&%#%s%I%&$rL58z$K$7$F$$$k?M(B ($B$H$$$&$+!"(BJavaScript $B$rL58z$K$7$F$$$k?M(B) $B$G$b8+$l$k$h$&$K$7$F$[$7$$$J$"!#(B
$B$3$l$G$9$J(B$B!#(B
$B!!?@8M?7J9$,>\$7$$$=$&$G$9!#NoH~$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B%8%'%$%F%#%U!<%:$H$$$&2q
$B!U(B
$BJ?@.#1#6G/EY>pJsDL?.%;%-%e%j%F%#?M:`0i@.%;%s%?!<3+@_;v6H$r
($BAmL3>J(B)
$B!U(B
$B%J%NAG:`$NFG@-$r<($9?7$?$J (WIRED NEWS)$B!#(B
$B%P%C%-!<%\!<%k$rG;EY(B0.5ppm$B$G:.F~$7$??eAe$K%*%*%/%A%P%9(B9$BHx$rF~$l$F4Q;!$r9T$J$C$?!#$=$N7k2L!"%P%C%-!<%\!<%k$r5[$$9~$s$G$+$i(B48$B;~4V$?$C$?%*%*%/%A%P%9$NG>$K$+$J$j$NB;=}$,3NG'$5$l$?!#G>$N:YK&Kl$K!"?M4V$N%"%k%D%O%$%^!
$B!!$I$R$c$"!D!D!#%J%N!&%"%?%C%/$G$9$+!#%N%t%!65
$B!U(B
$B%$%i%/$G#3K.?M94B+!"<+1RBbE1B`MW5a!!1R@1%F%l%SJ|Aw(B
(asahi.com)$B!#$I$&$9$kF|K\!#(B
$B!U(B
$BLBOG%a!<%k!!%\!<%@%U%)%s$,Ls(B9300$B2s@~$rMxMQDd;_(B
($BKhF|(B MSN)$B!#(B
$B!U(B
$B2sE>%I%"$b$N(B
$B!U(B
$B0eNE$b$N(B
$B!U(B
$B%M%C%HHH:aKI;_%S%G%*=P1i$N=w;R9b@8!"#H#P2~$6$s(B
($BFIGd(B)$B!#$J$s$@$+$J$"!D!D!#(B
$B!U(B
[aml 38285] $B!ZE>:\![%$%i%/@oAhNt2=%&%i%s>pJs(B No.$B#1#4(B$B!#8+F($7$F$^$7$?!#(B_o_
$B!!%$%.%j%9$N9qKI>JOQ4_@oAh5"4TJ<<@IB6I$N2<$G!"OQ4_@oAh5"4TJ<$N7r9/LdBj$r8!F$$7$F$$$k#D#U#O#B!J(BDepleted Uranium Screening Programme Oversight Board $BNt2=%&%i%s%9%/%j!<%K%s%0%W%m%0%i%`4FFD0Q0w2q!K$N5D;vO?$NCf$G!"%$%i%/@oAh$+$i5"4T$7$?%$%.%j%9J<;N$NCf$GG"Cf$N%&%i%sG;EY$,9b$$J<;N$,$$$k$3$H$,Js9p$5$l$F$$$^$9!#(B
($BCfN,(B)
$B%F%9%H$5$l$?(B ($BCfN,(B) $B#7#0?M$N$&$A!"#13d$b$NJ<;N$NG"$+$i?tI4%J%N%0%i%`!?%j%C%H%k$H$$$&Hs>o$K9b$$!JF|K\$G$bJF9q$G$b0lHL$K$O#1#0%J%N%0%i%`!?%j%C%H%kDxEY$H9M$($i$l$k!K!"DL>o$N?t==G\$N%&%i%s$,8!=P$5$l$F$$$k$N$G$9!#(B
$B!!5"4TJ<$G$9$i$3$l$G$9$+$i!"$=$NEZCO$K$:$C$H=;$_$D$E$1$F$$$k?M!9$O!D!D!#(B
$B!!@n8}30Aj$d@PGKKI1RD#D941$O!"9q2q$GDI5Z$5$l$k$?$S$K!V9q:]5!4X$ONt2=%&%i%s$,7r9/$KHo32$r$b$?$i$9$H$OG'$a$F$$$J$$!W$H7+$jJV$7!"$=$NI.F,$K#W#H#O!J@$3&J]7r5!9=!K$NL>A0$r5s$2$F$-$^$7$?!#(B
$B!!$7$+$7!"$=$N#W#H#O$,Nt2=%&%i%s$N4m81@-$r8xI=$7$h$&$H$7$?FbIt$N%H%C%W%l%Y%k$N2J3X
$B!!(BWHO$B!"$*A0$b$+!#(B
$B!U(B
$B%$%i%/>p@*(B
- $B%6%k%+%&%#Ho9p$N@<$+!"O?2;%F!<%W$GJF967b6/2=$r@k8@(B ($BFIGd(B, 4/7)
- [aml 38585] $B%$%i%/@jNN4F;k%;%s%?!<$+$i$NB3Js(B (4/7)
- [aml 38577] $BCD7k$9$k%9%s%K$H%7!<%"(B (4/7)
- $BJF73$N9T0Y!"%U%;%$%s$HJQ$o$i$:!D%$%i%/=!65;XF3 ($BFIGd(B, 4/8)
- $B%$%i%/CsN1JF73$N0lIt;DN1!"JF9qKID941$,I=L@(B ($BFIGd(B, 4/8)
- $BJF73$,%b%9%/6uGz!"#4#0?M;`K4!D%U%!%k!<%8%c(B ($BFIGd(B, 4/8)$B!"(B$B%b%9%/967b!"L14V?M$N5>@7 ($BFIGd(B, 4/8)$B!#$I$C$A$,K\Ev$J$N$+!#(B
- $B%5%I%k;U;Y;}GI$HO"9g73>WFM$G%7%9%?%K;UJ?@E8F$S$+$1(B ($BFIGd(B, 4/8)
- $BN&<+=I1DCO6a$/$KK$CF!"Gw7bK$$G967b$+!DBb0wB`Hr(B ($BFIGd(B, 4/8)
- $B>.=F7H9T$NJFJ<$bM"Aw!D6uKkD9$,2q8+(B
($BFIGd(B, 4/8)
$B!U(B
$B@m3U=tEg!&5{D`EgL\;X$7$?1&McCDBN!"$7$1$G0z$-JV$9(B
(asahi.com)$B!#5{D`Eg2-GH9b$7!#(B
$B!U(B
$B%9!<%U%j;v7o$G85AaBg@8$i#3Ho9p$K
(asahi.com)$B!#!V<99TM1M=$rIU$1$k$Y$-;v0F$H$O$$$($J$$!W$H8@$o$l$F$7$^$&$[$I0-
$B!U(B
Microsoft$B%M%C%H%o!<%/$N4F;k$G8+$($F$/$k!"(BWindows$B$NN"B&(B
(ITmedia)$B!#<9I.$O!"%;%-%e%j%F%#%U%i%$%G!<$NM-85$5$s!#(B
$B!U(B
$B8x
(Internet Watch)$B!"(B$B8x ($BF|7P(B BP)$B!"(B
$B8x (asahi.com)$B!#(B
$B%$%s%F%k!"F~$i$l$F$k!#(B
$B!U(B
$B!N(BWSJ$B!O(B $B3+H/CJ3,$+$i%=%U%H$N!V7j!W$rGS=|$9$k(BFortify
(ITmedia)$B!#(B
Fortify$B$N%=%U%H$O!"%;%-%e%j%F%#LdBj$N$[$H$s$I$O!"4k6H$,?t@i$"$k$$$O?tI4K|9T$K$b5Z$V%3!<%I$r4^$`@=IJ$r5^$$$G40@.$5$;$h$&$H$9$k:]$K5/$-$k!"4{CN$N%W%m%0%i%_%s%0$N%_%9$,860x$@$H$$$&;v
$B!!$*$d(B? David LeBranc $B;a$O0c$&0U8+$r$*;}$A$N$h$&$G$9$h!#(B
$B%;%-%e%"$J%3!<%I$N=q$-J}(B - $B%;%-%e%"$J@_7W$,:G$b=EMW(B (MYCOM PC WEB) $B$+$i(B:
$B$^$:F1;a$,AJ$($?$N$O!"!V2?$h$j$b=EMW$J$N$O(BSecure$B$J(BDesign$B$@!W$H$$$&$3$H!#F1;a$O!V%;%-%e%j%F%#%P%0$N(B50%$B$O%7%9%F%`%G%6%$%s;~$N%(%i!<$@!W$H8l$j!"=iF|$H(B2$BF|L\$N8aA0Cf$rHq$d$7$F%7%9%F%`%G%6%$%s;~$NCm0UE@!"$=$7$F30It$+$i%7%9%F%`$KM?$($i$l$k6<0R$NI>2AK!$J$I$K$D$$$F8l$C$?!#(B
$B!!%D!<%k$K$D$$$F$b!"2a?.$O6XJ*$N$h$&$G$9$7(B:
$B!V%=!<%98!::%D!<%k$O?M4V$H0c$C$FHh$l$?$j$H$$$&$3$H$O$J$$$,!";THN$N$b$N$G$@$$$?$$(B20%$B$0$i$$$7$+LdBj$r8!=P$G$-$J$$$?$a!"(BMicrosoft$B$G$O<+
$B!!!V(BWriting Secure Code$B!W%;%_%J!
$B!U(B
$B!N(BWSJ$B!O(B $B%i%$%P%k$N@H
(ITmedia)$B!#%H%l%s%I$H$$$&$+!D!D8D?ME*$K$O!"$`$7$mCY$9$.$?$/$i$$$N46$,$"$k$,!#%;%-%e%j%F%#@=IJ$@$+$i$3$=!"$h$j87$7$/$D$C$D$+$l$F$7$+$k$Y$-$J$N$G$O!#(B
eEye$B$O$3$l$i$N@H
$B!!<+J,$G$D$/$k$+$i$3$=CN8+$bF@$i$l$k$N$@$m$&$J$"!#(B
$B!U(B
$B%7%^%s%F%C%/!"%;%-%e%j%F%#Aa4|7Y9p%5!<%S%9$N:G?7HG$rH/I=(B
(Enterprise Watch)$B!#(BDeepSight 6.0 $B$K$O(B XML $B%*%W%7%g%s$,DI2C$5$l$?$N$@$=$&$G!#(B
$B!U(B
$B%=%K!<$,4F;k%+%a%i;v6H$KCmNO!"!V2030$dLk4V$N4F;k%K!<%:$,A}$($k!W(B ($BF|7P(B IT Pro)$B!#(B
$B!U(B
$B%M%C%H%o!<%/Fb$+$i(BWORM$B7?%&%$%k%9$,H/8+$5$l$?>l9g$NBP=hJ}K!(B ($B%H%l%s%I%^%$%/%m(B)$B!#%H%l%s%I%^%$%/%mE*$K$O$3$l$G$$$$$N$+$b$7$l$J$$$,!"$U$D$&$K9M$($l$P!"$3$s$JDxEY$G$O:Q$^$J$$$h$M!#$$$^$I$-$N!V(BWORM$B7?%&%$%k%9!W$O(B backdoor $B$D$-$G$"$k$3$H$bB?$$$o$1$@$7!#(B
$B!U(B
$BF~pJs$r<}=8$9$k%5%$%H!=!=(B9.11$B$N@8!9$7$$5-O?$,L@$i$+$K(B
(WIRED NEWS)$B!#(B
The Memory Hole$B!#(B
$B$3$s$J%5%$%H$,$"$C$?$N$+!#(B
US Army's Report on Killing of Reuters Journalist in Iraq
$B$H$+(B
Complete List of Forms Used by the National Security Agency$B!"(B
Forms Used by the FBI
$B$J$s$F5-;v$b7G:\$5$l$F$$$^$9$M!#(B
$BFbMFE*$K$O(B cryptome.org $B$K6a$$$b$N$,$"$k$N$+$J!#(B
$B!!(BReal Player 8, RealOne, RealOne v2 for Windows, RealPlayer 10 Beta,
ReaPlayer Enterprise $B$K7g4Y!#(B.R3T $B%U%!%$%k$N=hM}$K7g4Y$,$"$j!"(Bstack overflow $B$,H/@8!#$3$N$?$a!"$3$N7g4Y$r0-MQ$9$k$H!"0-0U$"$k(B .R3T $B%U%!%$%k$K$h$C$FG$0U$N%3!<%I$r
$B!!2sHr$9$k$K$O!"!V(BRich Text 3D$B!W%3%s%]!<%M%s%H$r:o=|$9$l$P$h$$!#(B
$BBP1~$9$k$K$O!"%;%-%e%j%F%#%"%C%W%G!<%H$rE,MQ$9$k$+!"(BRealPlayer 10 $B$K%"%C%W%0%l!<%I$9$k!#(B
$B!!4XO"(B: REAL One Player R3T File Format Stack Overflow$B!#(B
$B!!(BClam AntiVirus 0.68 $B0J2<$K$*$1$k(B RAR $B%U%!%$%k$N07$$$K7g4Y!#(B
Beagle.A $B$N0!
$B!!4XO"(B: announcing ClamAV 0.68-1 (comp.security.virus.clamav.announce)$B!#(B
0.68 $B$GD>$7$?$D$b$j(B$B$,D>$C$F$$$J$+$C$?LOMM!#(B
$B$G$b(B ClamAV team $B$O!"(B0.6x $B$h$j$b(B 0.70-rc $B$K$7$?J}$,$$$$!"$C$F=q$$$F$$$^$9$M!#(B
FreeBSD $B$N(B ports/security/clamav
$B$O(B 0.70-rc $B$K$J$C$F$^$9!#(B
$B!!(BCISCO $B$N(B Wireless LAN Solution Engine (WLSE) $B%=%U%H%&%'%"%P!<%8%g%s(B 2.0, 2.0.2, 2.5 $B$*$h$S(B
Hosting Solution Engine (HSE) $B%=%U%H%&%'%"%P!<%8%g%s(B 1.7, 1.7.1, 1.7.2, 1.7.3 $B$K7g4Y!#(B
$B%O!<%I%3!<%I$5$l$?%f!<%6L>(B / $B%Q%9%o!<%I$,$"$j!"$=$N%f!<%6L>(B / $B%Q%9%o!<%I$r;H$&$H!"%G%P%$%9$r40A4$K@)8f$G$-$F$7$^$&!#$*$^$1$K!"%O!<%I%3!<%I$5$l$F$$$k$@$1$"$C$F!"%f!<%6L>(B / $B%Q%9%o!<%I$rJQ99!&>C5n$9$k
$B!!BP1~$9$k$K$O!"(BWLSE-2.x-CSCsa11583-K9.zip patch (WLSE $BMQ(B)$B!"$"$k$$$O(B HSE-1.7.x-CSCsa11584.zip patch (HSE $BMQ(B) $B$rE,MQ$9$k!#(B
$B!!F|K\8lHG=P$^$7$?(B: Cisco Security Advisory: WLSE $B$H(B HSE $B$K$*$1$k%G%U%)%k%H%f!<%6%M!<%`(B (CISCO)$B!#(B
$B!U(B
$B%"%C%+!"N.=P$7$?(B201$BL>0J30$N8\5R>pJsD4::CGG0!#D+F|$,Ds6!5qH](B
(Internet Watch)$B!#$&!<$`!"!V
$B!U(B
$BD;%$%s%U%k%(%s%64XO"(B
$B!U(B
BSE $B4XO"(B
$B!U(B
$B
(asahi.com)$B!#0c7{H=CG%-%?!$BH=7h$O9q$N>!AJ!"0c7{=j8+$O0d48!D41K
($BFIGd(B)$B!#@o=QE*$K$O>!Mx$7$?$,!"@oN,E*$K$OGTKL$J$N$G$O!#(B
$B@o=QE*$K$O>!Mx$7$F$7$^$C$F$$$k$N$G!"0c7{H=CG$,3NDj$7$=$&$@$=$&$@$7!#(B
$B!U(B
[aml 38558] $B$D$$$K8xI=$5$l$?%5%^%o5"4TJFJ<$NNt2=%&%i%sHoGx$N;v$B!#(B
$B!!!V73Ev6I$d73IB1!$NIT@?I8u72!W$N$H$-$HA4$/F1$8$G$9$M$(!#$b$N$N8+;v$K7+$jJV$5$l$F$$$^$9$M!#$5$9$,JF73!#(B
$B!!$7$+$7!"8=:_GI8/$5$l$F$$$k<+1RBb0w$b$^$?!V73Ev6I$d73IB1!$NIT@?pJs1#$7$V$j$r8+$k8B$j$G$O!"!VHoGx!W$,$"$C$F$b0.$j$D$V$5$l$k2DG=@-$ODc$/$O$J$$$G$7$g$&!#(B
$B$5$i$K=EMW$J$N$O!"H`$iBh#4#4#27{J
$B!!@/I\?&0w$d<+1RBb0w$O$b$A$m$s$G$9$,!"8=CO$G3hF0Cf$N(B NGO / NPO $B$duBV$N%A%'%C%/$,I,MW$J$N$G$7$g$&!#%a%G%#%"3F
$B!!4XO"$G!"(B$B#U#M#R#C%I%i%3%S%C%AGn;N:FMhF|7hDj(B (jca.apc.org) $B$@$=$&$G$9!#(B
4/12 $BEl5~!"(B4/14 $BBg:e$GJs9p=82q3+:E!#(Bwww.jca.apc.org$B!"$d$?$i=E$$$C$]$$$J$"!D!D!#(B
$B!U(B
$B%$%i%/>p@*(B
- $B%7!<%"GIBP:v$G8m;;!"%V%C%7%eJFBgE}NN$N;Y;}5^Mn(B (asahi.com, 4/6)
- $B%$%i%/!&%7!<%"GI$H@jNN73$H$N>WFM3HBg!"#1#5?M;`K4(B (asahi.com, 4/6)
- $B%$%i%/!&%i%^%G%#$GJF3$J (asahi.com, 4/7)
- $B!V2f!9$O6~$7$J$$!W$HJFJsF;41!!%i%^%G%#@oF.$G(B (asahi.com, 4/7)$B!#(B
$B@/8"0Q>y$b6a$$$3$N;~4|$G!V6~$7$J$$!W$H$$$&%3%a%s%H$K$O0cOB46$,$"$k$J$"!#(B
- $BJF$NL14V7YHwMW0w$i$,%$%i%/$GIpAu=8CD$r7bB`!DJF;f(B
($BFIGd(B)$B!#%V%i%C%/%&%*!<%?!
$B85FC
- $B%"%a%j%+$K=P$7H4$+$l$FK=F0$r5/$3$7$?%$%i%/$N%7!<%"GI(B
(tanakanews.com)
- [aml 38563] $BBPCfEl@oN,$N9=C[$r$a$6$7$F!J#4!KK\Ev$N@o>l$OF|K\(B$B!#(B
$BJ9$/$b62$m$7$$$,!"$9$G$K%"%a%j%+$O!"yEO8e$K!"#4#0#0#0?M5,LO$NJF9qBg;H4[$r3+@_$9$k=`Hw$r?J$a$F$*$j!"F1;~$KB??t$N%f%@%d?M$,%"%i%V?M$NL>$r;H$C$F%$%i%/$NEZCO$rGc$$5y$C$F$$$k$=$&$@!#(B
$B!!$3$l!"$I$3$+$GN"
$B!U(B
Windows XP SP2$B$N%j%j!<%9$G!"(BMS$B%5%]!<%H$X$NLd$$9g$o$;$,5^A}$+(B
(CNET)$B!#(BXP SP2 $B$K$h$C$FH/@8$9$k!V%5%]!<%H$OCO9v$@!W$H$$$&>u67$O!"M=A[$NHO0OFb$G$7$g$&!#(B
$B!V$7$g$;$s7lEI$i$l$?F;$@!W(B($B%/%7%c%J(B)
$B!U(B
$B%i%$%;%s%9$^$k$4$HAa$o$+$j%;%_%J!<(B $B!AF~LgJT!A(B
(Microsoft, info from [port139ml:05173])$B!#(B
from [port139ml:05174]:
$BJ9$$$F$_$l$P$o$+$j$^$9$,K!E*$K$O%`%A%c%/%A%c!d%^%$%/%m%=%U%H!#(B
$B!V%i%$%;%s%9$H$O%=%U%H%&%'%"$N;HMQ8"$N$3$H$G!"%i%$%;%s%9$,$J$$$H%=%U%H%&%'%"$r;HMQ$7$F$O$$$1$J$$!W$=$&$G$9!JGz>P!K!#(B
$B!!K!E*$JOC$N;2>H@h$H$7$F$O!"$?$H$($P$3$N$"$?$j$G$$$$$N$G$7$g$&$+(B: $B%=%U%H%&%'%"!&%i%$%;%s%9$NK!E*:,5r$K4X$9$k9M;!(B
($B2,B$B%=%U%H%&%'%"$NK!E*J]8n(B
$B!W(B
$B$N(B p.145 $B$,0lHV$N86E5$@$=$&$G$9(B [port139ml:05179]$B!#(B
$B!U(B
$BJF9qBgDdEE$O(BMSBlast$B$H$OL54X78!=!=0Q0w2q$,:G=*Js9p(B
(ITmedia)$B!#Js9p=q$O(B
FERC
$B$+$i!#6KEl%j%5!<%A2q
$B!U(B
NetSky$B%o!<%`$N?70!
(ITmedia)$B!"(B
NetSky$B$N(BDDoS$B967b$KHw$($k%a%8%c!<(BPtoP$B%5%$%H(B
(CNET)$B!#(B
$B!U(B
$B!VJ8>O$NEp:n$rC5CN$9$k!W%=%U%H$N:NMQ!"?7J9$d7Y;!$J$I$K$b3HBg(B (WIRED NEWS)$B!#F|K\8l$JJ8=q$G$3$&$$$&$3$H$r$d$C$F$$$k%5!<%S%9$C$F$"$k$N$+$J$"!#(B
$B!U(B
$B%*!<%W%s%=!<%9@H
(ITmedia)$B!#(B
$B!U(B
$B%V%k!<%9!&%7%e%J%$%"!<;a(B
$B$,9T>&$KMh$F$$$?$h$&$G$9!#(B
$B!!$=$&$$$&0UL#$G$O!"(BMicrosoft $B$N(B
SECURE SYSTEM Training Tour 2004
$B$NBP>]
$B!!$3$l$b%7%e%J%$%"!<;a$G$9$M(B: $B!V%M%C%H$b8=.8B$K!W!=!=%;%-%e%j%F%#@lLg2H$N(BBruce Schneier$B;a(B ($BF|7P(B IT Pro)$B!#(B
$B!U(B
$B2sE>%I%";v8N!'(B
$B7CHf
($BKhF|(B MSN)$B!#$3$&=q$+$l$k$H?9%S%k$,%"%l$@$C$?$h$&$K8+$($k$,!"8D?ME*$K$O!"@=B$l$G!V;`
$B!U(B
Police blame virus for publishing "wanted list" on internet, Sophos reports
(Sophos)$B!#$=$&$$$($P!"%-%s!|%^$K$O$^$@BP1~$7$F$$$J$$$N$G$O!D!D(B > Sophos$B!#(B
$B!U(B
Postal strike delays shipment of Sophos CD to UK customers
(Sophos)$B!#$"$i$i!#(B
$B!!%"%s%A%&%#%k%9%=%U%H$,%&%#%k%9$N;3$KDI$$$D$1$J$$;~Be$G$9$7$M!D!D!#(B
$B!!$7$+$7!"$?$H$($P!V%Q%9%o!<%I$D$-(B zip $B%U%!%$%k!W$r%U%#%k%?$7$F$7$^$C$F$$$$$N$+$I$&$+!"$H$$$C$?$"$?$j$OHyL/$J5$$,!#(B
$B!V%Q%9%o!<%I$D$-(B zip $B%U%!%$%k!W$O(B phishing $B$K$bMxMQ$5$l$F$-$F$$$k$h$&$G$9(B:
[Full-Disclosure] Another phishing attack$B!#(B
$B0lJ}$G!"$$$/$D$+$N%"%s%A%&%#%k%9%=%U%H20$5$s$O!"%5%s%W%kDs=P$K!V%Q%9%o!<%I$D$-(B zip $B%U%!%$%k!W$rMW5a$7$?$j$9$k$s$G$9$h$M!#$J$N$G!";_$a$A$c$&$H%5%s%W%k$,Ds=P$G$-$J$$$H$$$&!D!D!#(B
$B!!$^$?!"$?$H$($P(B Windows XP $B$G$O!"JQ$J3HD%;R$G$b%3%^%s%I%W%m%s%W%H$+$i$J$i$A$c$s$HH(B: [port139:00848] $B0J2<$N%9%l%C%I!#(B
(^.^) $B$,$K$J$jF@$k$H$O!#(B
Windows XP $B62$k$Y$7!#(B
$B!!(BWinamp
2.91$B!A(B5.02 $B$K7g4Y!#(Bplug-in $B%U%!%$%k(B in_mod.dll $B$K$*$1$k(B
Fasttracker 2 ('.xm') $B%U%!%$%k$N=hM}$K7g4Y$,$"$j!"(Bheap overflow $B$,H/@8!#(B
$B$3$N$?$a!"0-0U$"$k(B .xm $B%U%!%$%k$rMxMQ$7$FG$0U$N%3!<%I$r
$B!!(BWinamp 5.03 $B$G=$@5$5$l$F$$$k!#(B
$B$^$?!"(B"Fasttracker 2" plug-in $B$rL58z2=$9$k$3$H$K$h$j2sHr$G$-$k!#(B
Preferences $B$G@_Dj$G$-$k$h$&$@!#(B
$B!!4XO"JsF;(B: $B%a%G%#%":F@8%=%U%H!V(BWinamp$B!W$KG$0U$N%3!<%I$r
(Internet Watch)$B!#(B
$B!U(B
Handler's Diary April 5th 2004
(incidents.org) $B$K$h$k$H!"(B
Solaris $B$N(B sadmind $B7j(B
$B$rA@$C$?967b$,A}$($F$$$kLOMM!#Cm0U$5$l$?$7!#(B
$B!U(B
www/en/security/security.sgml 1.152
(freebsd.org, info from FreeBSD $B$*$\$($,$-(B 2004$BG/(B04$B7n(B04$BF|(B($BF|(B)00$B;~(B43$BJ,(B35$BIC(B)$B!#(B
`Early adopter' branches will be supported 6+ months,
`Normal' branches will be supported 12+ months, and `Extended'
branches will be supported 24+ months.
$B$H$J$C$?$N$@$=$&$G!#(BExtended $B$H$$$&$N$O(B
Selected releases will be supported by the Security Officer for a
minimum of 24 months after the release.
$B$J$N$@$=$&$G!#$G!"(B
| Branch |
Release |
Type |
Estimated EoL |
| RELENG_4 |
n/a |
n/a |
March 31, 2005 |
| RELENG_4_8 |
4.8-RELEASE |
Extended |
March 31, 2005 |
| RELENG_5_2 |
5.2.1-RELEASE |
Early adopter |
December 31, 2004 |
| RELENG_4_9 |
4.9-RELEASE |
Normal |
October 31, 2004 |
$B$J$N$@$=$&$G!#(BRELENG_4_8 $B$GLdBj$J$$?M$O$=$N$^$^;H$&$N$,5H$J$N$+$J!#(B
$B!U(B
$B4k6H!"418xD#8~$1$K4IM}5!G=$r6/2=(B
$B!V(BNOD32$B%"%s%A%&%$%k%9(B $B%(%s%?!<%W%i%$%:%i%$%;%s%9!W(B
2004$BG/(B 4$B7n(B 21$BF|HNGd3+;O(B (canon-sol.jp)$B!#(B
$B!U(B
http://accsjp.or.jp/
$B$OB8:_$9$k$N$G$9$M!#(Bwww.accsjp.or.jp $B$O>C$($?$^$^$N$h$&$G$9!#(B
$B!U(B
$B%G!<%?J]8n!!BgCO?L$KHw$(!"CO2<%G!<%?%;%s%?!<@_CV!!Bg3@6&N)6d9T(B
($BKhF|(B MSN)$B!#(B
$B!U(B
Hotspotter 0.3 $B$,=P$F$$$^$9!#(B
Hotspotter passively monitors the network for probe request frames toidentify the preferred networks of Windows XP clients, and will compare it to a supplied list of common hotspot network names
$B$@$=$&$G$9!#(B
$B!U(B
$BJF$,
(asahi.com)$B!#86H/20$N5U=1(B?
$B!U(B
$B7/$,Be!'(B
$B@F>'E0Dl$KET650Q$,F~3X<0!H4F;k!I(B ($BKhF|(B MSN)$B!#(B
$B!U(B
$B0-%^%K(BBeyond$B;a$H0l=o$K!"%&%'%G%#%s%0LdBj$r9M$($k2q(B$B!#(B
$B2q0w$H4sIU$rJg=8Cf!#(B$BBh#12sAm2q(B$B$OL@F|(B 4/7 18:00$B!A(B $BEl5~ET$N$I$3$+!#(B
$B!!(B$B4IM}?M(BBeyond $B$N$r8x3+$7$^$9(B ($B0-FA>&K!(B? $B%^%K%"%C%/%9(B)$B!#(B
$B$H$j$?$F$FF?L>F?L>8@$o$J$/$F$b!"@$$NCf$K$O4{$KI.L>$H$+7]L>$H$+$$$&C18l$,B8:_$7!"0lHL$KA0!W$N$h$&$K8+$($J$$L>A0$K7Y2|?4$rJz$/$N$O$U$D$&$N463P$@$H;W$$$^$9!#(B
$B8D?ME*$K$O!V$8$c$J$-$c$@$a$@!W$H$O;W$$$^$;$s$,!"I.L>$O%G%U%)%k%H$G$O$J$/%*%W%7%g%s$@$m$&$H;W$$$^$9$7!"I.L>$rA*Br$9$k>l9g$K$O!V$U$D$&$NL>A0!W$N$h$&$K8+$($kI.L>$r;H$C$?J}$,6lO+$,>/$J$$$@$m$&$H;W$$$^$9!#(B
$B$^$"!"!V$U$D$&$NL>A0$N$h$&$K8+$($kI.L>!W$b!VqY$7$N%F%/%K%C%/!W$N$R$H$D$G$9$+$i!"$=$&$$$&0UL#$G$"$($F$U$D$&$8$c$J$$L>A0$K$5$l$F$$$i$C$7$c$C$?$N$+$b$7$l$^$;$s$,!#(B
$B!U(B
Windows$B%U%!%$%k$X$N%"%/%;%9$r2r@O!&5-O?$9$k>pJsO31LKI;_%=%U%HH/Gd(B (Internet Watch)$B!#%&%#%s%I%&%:%U%!%$%k6&M-$KFC2=$7$?%m%.%s%0%D!<%k!"$J$N$+$J!#(B
$B!U(B
$B#I#PEEOC$NK5JJ}?K(B
($BFIGd(B)$B!#Bg$-$J7;DoMQ!#(B
$B!U(B
$B!V?7%Q%?!<%s%U%!%$%k4IM}%7%9%F%`!WF3F~J}K!$N$40FFb(B
($B%H%l%s%I%^%$%/%m(B, 4/5)$B!#(B
$B%H%l%s%I%^%$%/%m(B $B%[!<%`%Z!<%8(B $B$r8+$k$H(B
$B!V%Q%?!<%s%U%!%$%k(B 851 (1.851.00)$B!W(B
$B$J$I$H5-:\$5$l$F$$$^$9$,!":#8e$O8e
$B!!(BCHM $B%U%!%$%k(B
($B05=L(B HTML $B%X%k%W%U%!%$%k(B)
$B$N%O%s%I%i$K(B 2 $B$D$N7g4Y!#(B
$B!!$3$N7g4Y$rMxMQ$7$?967b$,Fw: new IE vurn$B!"(B
[Full-Disclosure] IE exploit going around on irc$B!#(B
$B0-0U$"$k(B web $B%Z!<%8$K%"%/%;%9$7$?$@$1$G967b$,@.8y$7$F$7$^$&$h$&$@!#$^$:$9$.!#(B
$B!!2sHr$9$k$K$O!"(BCHM $B%U%!%$%k$X$N4XO"$E$1$r:o=|$9$k(B (Windows $B%X%k%W$OL58z2=$5$l$k(B) $B$+!"B>$N%W%m%@%/%H$r;H$&!"$H$5$l$F$$$k!#(Bproxy server $B$G(B CHM $B%U%!%$%k$X$N%"%/%;%9$r;_$a$k$N$bM-8z$+$b$7$l$J$$!#(B
$B!!4XO"(B:
Vulnerability Note VU#323070:
Microsoft Internet Explorer does not properly validate source of CHM components referenced by ITS protocol handlers
(CERT/CC)
2004.04.07 $BDI5-(B:
$B!!(BRE: [Full-Disclosure] IE exploit going around on irc$B!#(B
[Full-Disclosure] IE exploit going around on irc
$B$G<($5$l$?967b$O!"(BMS03-032
$B$N!V(B$B%*%V%8%'%/%H%?%0$N@H$B!W$H:#2s$N7g4Y$H$rAH$_$"$o$;$?$b$N$@!"$H$$$&2r@b!#(B
2004.04.09 $BDI5-(B:
$B!!4XO">pJs(B:
$B!!(BSOggy $B$5$s$+$i(B ($B$"$j$,$H$&$4$6$$$^$9(B):
$B;d$b(Bsquid$B$N%"%/%;%9%3%s%H%m!<%k$KDI5-$r$7$h$&$H!">\:Y$rD4$Y$K4XO"%Z!<%8$H$7$F>R2p$5$l$F$$$k(B<http://www.kb.cert.org/vuls/id/323070>$B$r8+$K9T$C$?$N$G$9$,!"%Z!<%8Cf$K
-----$B0zMQ$3$3$+$i(B-----
An attacker could exploit this vulnerability using a crafted HTML
document containing script or an ActiveX object or possibly an IFRAME
element. Due to the way IE determines the MIME type of a file
referenced by a URL, an HTML document may not necessarily have the
expected file name extension (.html or .htm). Likewise, a CHM file
may not have the expected .chm extension.
-----$B0zMQ$3$3$^$G(B-----
$B$3$NJ8>O$H!"http://msdn.microsoft.com/workshop/networking/moniker/overview/appendix_a.asp>$B$N%Z!<%8$rFI$`$H!"(BCHM$B%U%!%$%k$X$N%"%/%;%9$r6X;_$9$k$3$H$O!"$^$C$?$/L58z$G$O$J$$$G$7$g$&$,!"967b
$B!!3N$+$K!D!D!#$^$"!"8z2L$,$J$$$o$1$G$O$J$$$@$m$&$H$$$&$3$H$G!#(B
$B!V(Bms-its, its, mk $B%W%m%H%3%k%O%s%I%i$rL58z$K$9$k!W$H$$$&2sHrJ}K!$OI{:nMQ$,Bg$-$$$G$9$7!"!VB>$N%V%i%&%6$r;H$&!W$O!"FCDj$N%a!<%k%=%U%H$r;H$C$F$$$k?M$K$ODL$8$J$$$@$m$&$7!#(B
2004.04.13 $BDI5-(B:
$B!!$R$-$D$E$-0-MQ$5$l$F$$$k$h$&$G$9!#(B
2004.04.19 $BDI5-(B:
$B!!(BOutlook Express $BMQ$NN_@QE*$J=$@5%W%m%0%i%`(B (837009) (MS04-013)
$B$G=$@5$5$l$^$7$?!#(B
$B!!(B$B7P;:>J!"%=%U%H$N7g4Y=$@5$K!V(B45$BF|%k!<%k!W(B ($BF|7P(B) $B$N1F6A$G!"!V(B45 $BF|!W$H$$$&ItJ,$,(B slashdot.jp $B$G$b(B$BOCBj$K$J$C$F$$$^$9(B$B$,!":#2sH/I=$5$l$?Js9p=q$K$O!V(B45 $BF|!W$H$$$&5-:\$O$I$3$K$b$"$j$^$;$s!#(Bp.92 ($B;qNA(B - 20) $B$h$j(B:
JPCERT/CC $B$O!"@=IJ3+H/e!"@HpJs$K4X$9$kBP:vJ}K!$N:vDj$K4X$9$k%9%1%8%e!<%k!"$*$h$S@HpJs$HBP:vJ}K!$N0lHL8xI=$K4X$9$k%9%1%8%e!<%k$r7hDj$7$^$9!#0J8e!"(BJPCERT/CC $B$O!"(BJPCERT/CC $B$,@=IJ3+H/e8xI=F|;~$rJQ99$9$k$3$H$,$"$j$^$9!#$^$?!"J#?t$N@=IJ3+H/pJs$N>l9g!"J#?t$N@=IJ3+H/
$B!!!V@=IJ3+H/$BF|7PJsF;(B
$B$K$"$k!V(B45 $BF|!W$H$$$&$H;W$$=P$9$N$O!"(B
CERT/CC $B$N8x3+%]%j%7!<(B$B$G$9$M!#(Bp.109 ($B;qNA(B - 37) $B$K$b!"3$30;vNc$N0lMw$,$"$j$^$9!#(B
$B!!$3$NJs9p=q$r%Y!<%9$K$7$F!"(B5 $B7n>e=\$^$G$K!V@/I\$N8xE*%k!<%k0F!W$r$D$/$C$F%Q%V%j%C%/%3%a%s%H$rJg=8$9$k$h$&$G$9!#$=$3$K$O!"$b$7$+$9$k$H!VF|?t!W$,EP>l$9$k$N$+$b$7$l$^$;$s!#QiL\$7$FBT$F!#(B
$B!!7P;:>JHG(B: $B!V>pJs%7%9%F%`Ey$N@HpJs$N$B!#(B
$B!!4XO"JsF;(B:
2004.04.07 $BDI5-(B:
$B!!4XO"JsF;(B:
2004.04.08 $BDI5-(B:
$B!!4XO"5-;v(B:
$B!!8D?ME*$K$O!"
2004.04.09 $BDI5-(B:
$B!!4XO"5-;v(B:
$B$-$c$!!"CQ$:$+$7$$$o!D(B
(Lucrezia Borgia $B$N(B Room Cantarella)
$B!!6vA3$J$N$K!V8N0U$@$m(B!$B!W$H$D$C$D$+$l$k$H$+!"0-0U$O$J$$$N$K!V0-0U$"$j$"$j$@$m(B!$B!W$H$D$C$D$+$l$k$H$+!"$$$&2DG=@-$O3N$+$K$"$j$^$9$M!#(B
$B$7$+$7!"$3$N%U%m!<$r;H$&>l9g$K$O!"3+H/!&1?1DB&$K$O(B IPA $B$K$h$C$F%U%#%k%?$5$l$?>pJs$,FO$/$h$&$K$J$j$^$9$+$i!"H/8+@\Js9p$9$k>l9g$h$j$ONd@E$K
$B!!$3$l$^$G$O!"$A$g$C$H$7$?8@MU;H$$$,%b%H$GOC$,$3$8$l$A$c$C$?$j$9$k$3$H$,>/$J$/$J$+$C$?$N$G$O!"$H;W$C$F$$$^$9!#$=$&$$$&%H%i%V%k$O>/$J$/$J$C$F$/$l$k$+$J$"!"$H!#$J$C$F$/$l$k$H$$$$$J$"!#(B
- URL$B56AuLdBj:F$S!=!=(BIE$B$H(BOutlook$B$K(B
$B!!(BIkegami $B$5$s$+$i$N>pJs$K$h$k$H!"(BMozilla1.7b (20040329) $B$O$@$$$8$g$&$V!"(BOpera7.23J $B$O$@$a$@$=$&$G$9(B ($B$"$j$,$H$&$4$6$$$^$9(B)$B!#(B
$B!!BP93:v$H$7$F!"%f!<%6%9%?%$%k%7!<%H$r;H$C$F7Y9pE*I=<($r9T$&J}K!$,Ds0F$5$l$F$$$k$h$&$G$9(B:
$B!!%f!<%6!<%9%?%$%k%7!<%H$N@_DjJ}K!$O!"$?$H$($P(B
$B%f!<%6!<%9%?%$%k%7!<%H$N%9%9%a(B
(Personnel) $B$r;2>H!#%;%s%9$N$$$$%Z!<%8$@$J$"!#$&$i$a$d$^$7$$!#(B
$B!!4XO"5-;v(B: $B%j%s%/@h$N(BURL$B$r56Au$G$-$k%;%-%e%j%F%#!&%[!<%k$,(BIE$B$K!$(BOE$B%f!<%6!<$OFC$KCm0U(B
($BF|7P(B IT Pro)$B!#(B
$B%;%-%e%j%F%#$N4QE@$+$i$O!$!V$$$D$b$O%F%-%9%H7A<0$GI=<($5$;$FBj$,$J$$(BHTML$B%a!<%k$rFI$`>l9g$@$1!$(BHTML$B7A<0$GI=<($5$;$k!W$H$$$C$$J}$,K>$^$7$$!#(BOE$B$G$O!$!V%D!<%k!W$N!V%*%W%7%g%s!W%a%K%e!<$GI=$l$k!VFI$_
$B$H$O8@$&$b$N$N!"$3$l!"(Ball or nothing $B$J@_Dj$J$N$,$D$i$$$G$9$M!#(B
$B%G%U%)%k%H$O%F%-%9%HI=<($K$7$F$*$$$F!"1&%/%j%C%/$G(B HTML $BI=<($K$G$-$k!"$H$$$C$?(B
UI $B$,$"$k$H$&$l$7$$$N$+$J$"!#(B
$B8D?ME*$K$O!"(BHTML $B%a!<%k$J$I$H$$$&4m81$J$b$N$rAw$m$&$H9M$($k$N$J$i!"$;$a$FEE;R=pL>$/$i$$$D$1$k$Y$-$@$H;W$&$7!#EE;R=pL>$+$iH=CG$G$-$k:9=P?M$,(B xxx $B$N>l9g$N$_(B HTML $BI=<($r5v2D$9$k!"$J$s$F@_Dj$,$G$-$F$[$7$$5$$,!#(B
$B!U(B
$BF|K\=i!VNI?4$N<|?M!WG'Dj(B
$B!!H?@o%S%i$^$-BaJa!"5/AJ(B ($B5~ET?7J9(B)$B!#(B
AMNESTY$B!!%-%c%s%Z!<%s!&%"%C%W%G!<%H(B 2004.03.17 Vol.12$B!!DL4,(B123$B9f(B
($B%"%`%M%9%F%#(B)$B!#(B
$B8=BeF|K\$G%S%i$rG[I[$9$k$H!V=;5o?/F~:a!W$G%?%$%[$@$=$&$G$9!#(B
$B8x0B$O$b$C$HB>$K$d$k$Y$-$3$H$,$"$k$N$G$O!#(B
$B!U(B
$BJF(BMicrosoft$B$HJF(BSun$B!"Nr;KE*$JOB2r$K$h$j!HE((B"$B$+$iDs7H4X78$X(B
(Internet Watch)$B!#$3$l
Microsoft$B$O!"(BMicrosoft$B$N(BJava VM$B$KBP$9$k@=IJ%5%]!<%H$rB3$1$k$3$H$,$G$-$k!#(B
$B!!!D!D$$$D$^$GB3$/$s$G$7$g$&!D!D!#(BMS Java VM $B$C$F(B JRE 1.1 base
$B$J$s$G$9$h$M(B?
$B!U(B
$B!H(Bphishing$B!I$N?7$?$J ($BF|7P(B IT Pro)$B!#(B
$B!U(B
$B%$%i%/4XO"(B$B!#%U%!%k!<%8%cJF9q?M;4;&;v7o4XO"(B:
$B!!$=$N$[$+(B:
- [aml 38531] $B%$%i%sL}ED3+H/$O<+1RBbGI8/$N8+JV$j(B$B!#$=$l$3$=$,!V9q1W$NDI5Z!W$H$$$&$b$N$@!"$H$$$&8+J}$b$"$k$@$m$&$J$"!#9q1W$8$c$J$/$FFCDj$N>&
$B!U(B
$B
($B>>2pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
$B;38}6d9T(B$B$N7o$G$9$,!"(B
2004.3.25 $B$*pJs$N30ItN.=P$K4X$9$k$4@bL@(B ($B;38}6d9T(B) $B$,$=$l$N$h$&$G$9!#(B
$B$^$D$@$5$s!"%9%,$5$s!"$d$^$6$-$5$s!"(BIkegami $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
$B46@wNO
($BFIGd(B)$B!#(B$B<"2l8)%[!<%`%Z!<%8(B$B$K$O2?$b$J$$$C$]$$$J$"!#(B
$B!U(B
$BO;K\LZ%R%k%:2sE>Hb;v8NFC=8%Z!<%8(B
$B!U(B
$BKLJ}%8%c!<%J%k$,N)2V;a$H=54)J8=U$K935D(B
($BFIGd(B)$B!#M>GH$,B3$$$F$^$9$M!#(B
$B!U(B
$B;0I)<+%O%V!"BQ5W
(asahi.com)$B!#(B
$B?73+H/$N#D7?%O%V$N;n:nIJ$O#9#2G/Kv$4$m$K:n$i$l!"$=$N8e$^$b$J$/BQ5W@-$r3N$+$a$kBf>e
$B!!$3$3$^$G%^%$%s%I$,Dc2<$7$F$$$?$H$O!D!D!#(B
$B!U(B
$BJQ$o$k!VF0$+$J$$%3%s%T%e!<%?!W!=!=IQH/$9$k>pJsO31L$r9M$($k(B
($BF|7P(B IT Pro)$B!#(B
$B!U(B
$BF|K\$+$i$NF~9q
(WIRED NEWS)$B!#$b$l$J$/;XLf$r(B get $B$5$l$k$=$&$G$9!#(B
$BBg$-$J7;Do$3$s$K$A$o!#(B
$B!V%V%i%8%k$N??;w!W$ON.9T$k$+$J!#(B
$B!U(B
NHK $B%9%Z%7%c%k(B $B%7%j!<%:!X0e;U$rLd$&!Y(B (NHK)$B!#$&!<$`!#(B
$BF|K\$N0eNE650i$O(B US $B$h$j(B 20 $BG/CY$l$F$$$k!"$H$$$&$3$H$J$N$+!#(B
$B!!4XO"$+$J(B: $B?46Z$3$&$=$/!'(B
$BF~1!45e$N:9(B ($BKhF|(B MSN)$B!#(B
$B8W$NLgIB1!!JEl5~ET9A6h!K$N;38}E01!D9$,H/8@$7$?!#!V3FIB1!$,@.@S$r8x3+$7!"I,MW$J$i8@$$Lu$r$9$l$P$$$$!W(B
$B!!$9$P$i$7$$!#(B
$B!U(B
$BK\$M$?(B
- $BE~Ce$7$?K\(B
-
- $BH/Cm$7$?K\(B
-
- $BD:$$$?K\(B ($B$"$j$,$H$&$4$6$$$^$9(B)
-
$B!U(B
Exploit-Coding ML
$B$,>CLG$7$F$7$^$$$^$7$?$M(B (T_T)$B!#(B
$B$b$A$m$s%5%$%P!rLs$,$i$_$G$9!#(B
$B$3$l$K$"$o$;$F!"
$B!U(B
$B7P;:>J!"%=%U%H$N7g4Y=$@5$K!V(B45$BF|%k!<%k!W(B
($BF|7P(B)$B!#Nc$N(B IPA $B$NOC$@$H;W$$$^$9$,!"(B45 $BF|$C$FK\Ev$J$N$+$J$"!D!D!#(B
$B$^$"!"(BIPA $B$+$i@5<0H/I=$,$"$l$PL@$i$+$K$J$k$G$7$g$&!#(B
$B!U(B
www.accsjp.or.jp
$B$N(B DNS $B>pJs$,>C$($F$$$kLOMM!#(B
$B%-%s!|%^0!$B$N1F6A$+(B?! ($BBP93:v(B?)
$B!!Da55%a!<%k$N!V$@$$$VA0$+$i!W$N%P!<%8%g%s$K7g4Y!#(B
e-mail $B%"%I%l%9$NL>A0ItJ,$KD9Bg$JJ8;zNs$r@_Dj$7$F$*$/$H!"$=$N(B e-mail $B%"%I%l%9$r1&%/%j%C%/$7$?;~E@$G(B buffer overflow $B$,H/@8$7!"G$0U$N%3!<%I$N
2004.04.08 $BDI5-(B:
$B!!(B3.52 $BHG$K$bJL$N7g4Y$,$"$C$?$=$&$G!"(B3.53 $BHG$,EP>l$7$F$$$k(B [memo:7536]$B!#(B
2004.04.20 $BDI5-(B:
$B!!(BTsuru-Kame Mail 3.50 for Windows Buffer Overflow Vulnerability
(LAC)$B!#(B
$B!!(BElecom $B$N(B LD-BBR/B$B!"(B
LD-WBBR/B$B!"(B
LD-WBBRA/P$B!"(BLD-WBBRB/P$B!"(BLD-WBBRB/AP
$B$KJ#?t$N7g4Y$,$"$k$H$$$&;XE&!#0J2<$N7g4Y$,$"$k$H$$$&!#(B
$B%P%C%/%I%"%"%+%&%s%H(B tsubota $B$,B8:_$7!"$H$"$k%Q%9%o!<%I$r;H$&$H(B
WAN $BB&$+$i(B telnet $B$G(B login $B$G$-$F$7$^$&!#(B
$B1#$7(B cgi$B!V(Biptables.cgi$B!W$rMxMQ$7$F!"(Broot $B8"8B$GG$0U$N%3%^%s%I$r
WAN $BB&$+$i%U%!!<%`%&%'%"$r%"%C%W%G!<%H$G$-$F$7$^$&!#(B
$B!!$$$:$l$bCWL?E*$J7g4Y$N$h$&$K8+$($k$N$@$,!"$5$i$K:$$C$?$3$H$K!"(BElecom $B$O$3$l$i$N7g4Y$r!V(Bfix $B$O9T$o$J$$$7!"$=$NM=Dj$b$J$$!W$H$7$F$$$k$H$$$&!#(B
$B$5$i$K!"$5$i$K:$$C$?$3$H$K$O!"$3$N@=IJ!"(BGPL $B0cH?LdBj(B ($BN65A$5$s(B) $B$bJz$($F$$$k$=$&$G!#(B
$B!!N65A$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(BBB$B%k!<%?2rK6(B ($BN65A$5$s(B)
$B$K$O6=L#?<$$>pJs$,$$$C$Q$$$"$j$^$9$M!#(B
$B!!4XO"(B: ELECOM$B$N%k!<%?$G(BGPL$B0cH?$H%;%-%e%j%F%#LdBj$,H/3P(B (slashdot.jp)$B!#(B
$B8 ($B;32<9/@.$N%Z!<%8(B) $B$H$$$&OC$b$"$C$?$N$G$9$+!#(B
2004.04.27 $BDI5-(B:
$B!!(Bfix $B$,=P$?$h$&$G$9(B:
$BJ@ (ELECOM)$B!#(B
LD-BBR/B$BMQ!!%U%!!<%`%&%'%"(B (ELECOM) $B$K$h$k$H(B:
Ver2.13
- Telnet$B%]!<%H$rL58z$K$7$^$7$?!#(B
- $BEv
- WAN$BB&$+$i$N%U%!!<%`%"%C%W$r6X;_$7$^$7$?!#(B
- $B%U%!!<%`%"%C%W$N:]$K%Q%9%o!<%I$,I,MW$K$J$j$^$7$?!#(B
- $B%U%!!<%`%&%'%"%U%!%$%k$K%9%/%i%s%V%k$r$+$1$^$7$?!#(B
$B!!$^$"D>$C$?$N$O$J$K$h$j$J$N$G$7$g$&$,!"!VEv
$B!U(B
Handlers Diary April 1st 2004
(Updated April 2nd 2004 02:37 UTC):
Possible new multi-exploit bot or worm (request for information), Rose IP Fragmentation, Scammers making use of backdoored machines
(ISC)$B!#(B
$B!U(B
$B;38}6d9T!!8\5R>pJs!"(B2$BE9$N(B405$B?MJ,$,N.=P(B
($BKhF|(B)$B!#(B$B;38}6d9T(B web $B%Z!<%8(B$B$K$O2?$N>pJs$b$J$$$h$&$G$9!#(B
$B!U(B
$B%$%s%9%?%s%H!&%a%C%;!<%8%s%0!&%=%U%H$KIU$/4F;k%=%U%H$K$4MQ?4!*(B
($BF|7P(B IT Pro)$B!#(BAIM 5.5 $B$K$O$b$l$J$/(B WildTangent $B$H$$$&%b%N$,$D$$$F$/$k$=$&$G!#(B
$B!U(B
$BJF6H3&$N%;%-%e%j%F%#6/2=Ds8@!"@/I\5,@)$bMFG'(B
(ITmedia)$B!#$3$l$_$?$$(B: National Cyber Security Partnership Task Force:
Issues Report on Security Across the Software Development Lifecycle
(NCSP)$B!#(B
$B!U(B
$B%"%C%+4XO"(B
$B!!$I$3$+$i$I$&1L$l$?$N$+$O$$$<$sITL@!#(B
$B!U(B
$B:[H=0wK!0F4XO"(B
$B!U(B
$B%G%#!<%<%k5,@)H>G/!"IbM7N3;R>uJ*
($BFIGd(B)$B!#(B
$B!U(B
$B#D#V$d%9%H!<%+!
(asahi.com)$B!#2~A1$5$l$kJ}8~$K$O$"$k$H$$$&$3$H$G!#(B
$B!U(B
$BKL3$F;N99T$N8$$b%(%-%N%3%C%/%946@w$+(B
(asahi.com)
$B!U(B
$BF1;~B?H/%F%m!!!V@/I\9b41CN$C$F$$$?!W$H$N>Z8@$r1Q;fJsF;(B
(asahi.com)
$B!U(B
$BJF@/I\$K$h$k9R6uN95R8D?M>pJs$NMW5a$K2$=#5D2q$,H?H/(B
(WIRED NEWS)$B!#(B
$B!U(B
$BL5?MDe;!5!$r;&?M%^%7%s$KJQ$($kJF9qKIAm>J$N7W2h(B
(WIRED NEWS)$B!#%@%@%s%@%s%@%@%s!#(BJohn Conner, its time.
$B!U(B
$B;~Be$KB($7$?%;%-%e%j%F%#5!G=$HA`:n@-!"(BWindows XP SP2$B$N3+H/C4Ev
(ITmedia)$B!#(B
$B!U(B
Executive E-Mail 2004.03.31: $B%^%$%/%m%=%U%H$N%;%-%e%j%F%#$X$N
(Microsoft)$B!#(B
$B!U(B
$B!V(BInterScan WebManager 3.1 $B%9%?%s%I%"%m%sHG!W%5!<%S%9%Q%C%/(B1$B8x3+Cf;_$N$*CN$i$;(B ($B%H%l%s%I%^%$%/%m(B)$B!#IT6q9g$,=P$F$$$kLOMM!#(B
$BIT6q9g$r2sHr$9$k$K$O(B SP1 $B$r%"%s%$%s%9%H!<%k$9$k$7$+$J$/!"(BSP1 $B$r%"%s%$%s%9%H!<%k$9$k$K$O!V(BInterScan WebManager 3.1 $B%9%?%s%I%"%m%sHG$N:F%$%s%9%H!<%k!W$r$9$k$7$+$J$$$=$&$G$9!#$&$R$c$"!#(B
$B!!56Au!D!D$H$$$&$+!"(BForm $B$OL5;k$7$F!"I=<($I$*$j$K(B trusted_site $B$X$N%j%s%/$r$?$I$C$F$/$l$l$P$$$$$@$1$J$s$G$9$1$I$M!#(B
$B!!(BMozilla 1.5 $B$O$@$$$8$g$&$V$C$]$$$G$9!#(B
$B%F%9%H%Z!<%8(B$B!#(B
$B%^%:$$>l9g$O(B www.st.ryukoku.ac.jp $B$K$D$J$,$C$F$7$^$$$^$9!#(B
$B$@$$$8$g$&$V$J>l9g$O(B www.microsoft.com $B$K$D$J$,$j$^$9!#(B
2004.04.06 $BDI5-(B:
$B!!(BIkegami $B$5$s$+$i$N>pJs$K$h$k$H!"(BMozilla1.7b (20040329) $B$O$@$$$8$g$&$V!"(BOpera7.23J $B$O$@$a$@$=$&$G$9(B ($B$"$j$,$H$&$4$6$$$^$9(B)$B!#(B
$B!!BP93:v$H$7$F!"%f!<%6%9%?%$%k%7!<%H$r;H$C$F7Y9pE*I=<($r9T$&J}K!$,Ds0F$5$l$F$$$k$h$&$G$9(B:
$B!!%f!<%6!<%9%?%$%k%7!<%H$N@_DjJ}K!$O!"$?$H$($P(B
$B%f!<%6!<%9%?%$%k%7!<%H$N%9%9%a(B
(Personnel) $B$r;2>H!#%;%s%9$N$$$$%Z!<%8$@$J$"!#$&$i$a$d$^$7$$!#(B
$B!!4XO"5-;v(B: $B%j%s%/@h$N(BURL$B$r56Au$G$-$k%;%-%e%j%F%#!&%[!<%k$,(BIE$B$K!$(BOE$B%f!<%6!<$OFC$KCm0U(B
($BF|7P(B IT Pro)$B!#(B
$B%;%-%e%j%F%#$N4QE@$+$i$O!$!V$$$D$b$O%F%-%9%H7A<0$GI=<($5$;$FBj$,$J$$(BHTML$B%a!<%k$rFI$`>l9g$@$1!$(BHTML$B7A<0$GI=<($5$;$k!W$H$$$C$$J}$,K>$^$7$$!#(BOE$B$G$O!$!V%D!<%k!W$N!V%*%W%7%g%s!W%a%K%e!<$GI=$l$k!VFI$_
$B$H$O8@$&$b$N$N!"$3$l!"(Ball or nothing $B$J@_Dj$J$N$,$D$i$$$G$9$M!#(B
$B%G%U%)%k%H$O%F%-%9%HI=<($K$7$F$*$$$F!"1&%/%j%C%/$G(B HTML $BI=<($K$G$-$k!"$H$$$C$?(B
UI $B$,$"$k$H$&$l$7$$$N$+$J$"!#(B
$B8D?ME*$K$O!"(BHTML $B%a!<%k$J$I$H$$$&4m81$J$b$N$rAw$m$&$H9M$($k$N$J$i!"$;$a$FEE;R=pL>$/$i$$$D$1$k$Y$-$@$H;W$&$7!#EE;R=pL>$+$iH=CG$G$-$k:9=P?M$,(B xxx $B$N>l9g$N$_(B HTML $BI=<($r5v2D$9$k!"$J$s$F@_Dj$,$G$-$F$[$7$$5$$,!#(B
$B!U(B
$BEl5~1_5^?-!"#1#0#31_Bf$KFMF~!!#4G/$V$j$N9bCM?e=`(B
(asahi.com)$B!#!V2pF~$J$7!W$OK\Ev$@$C$?$N$+!#(B
$B!U(B
$B2sE>%I%";v8N!"A49q$G#1#4#07oD6!!E15n8!F$$NF0$-9-$,$k(B
(asahi.com)$B!#(B
$B$7$+$7!"K\Ev$KE15n$G$-$k$s$G$9$+$M!#$=$b$=$b$J$<2sE>%I%"$K$7$?$N(B?
$B!D!D$BJ!;c$H@_Hw#2#0#0#1=U5(9f(B $BBg7?2sE>%I%"FC=8(B ($B%U%8%?%/%H(B)$B!"(B
$B2sE>%I%"(B
($B$?$^$4$d(B)$B!#$7$+$7!"F3F~C4Ev%I%"$K0BA44p=`$,$J$+$C$?$J$s$F!":#2s$O$8$a$FCN$C$?$7!#(B
$B!U(B
[aml 38504] $B7Y;!D#$KA\::Hq$N>pJs8x3+@A5a(B 3-31$B!#$,$s$P$l%*%s%V%:%^%s!#(B
$B!U(B
$B=54)J8=U=PHG:9$7;_$aL?Na4XO"(B
$B!!9b:[$O!V;vA0:9$7;_$a(B = $BH]!W$H7kO@$7$?$,!"0lJ}$G!"CO:[!&9b:[6&$K!"5-;v$O%W%i%$%P%7!
$B!U(B
$B!V@>Nq(B2038$BG/LdBj!W$G%H%i%V%kAj
($BF|7P(B IT Pro)$B!#(B
$B!U(B
Security Warrior
$B$H$+(B
Network Security Assessment
$B$H$+!"$$$m$$$m=P$F$k$s$G$9$M!#(B
Security Warrior $B$C$F!"$=$&$$$&K\$@$C$?$N$+!#(B
$B!U(B
$B%U%m%C%T!<$+$i%V!<%H$9$l$P!"$-$l$$$K%G!<%?$r>C$9$3$H$N$G$-$k(B
$B%O!<%I%G%#%9%/>C5n%D!<%k(B
($B$$$7$8$^!y$@$$(B)$B!#$h$5$2!#(B
$B!U(B
NetSky-Q $BE~C#;~4VOC(B$B!#(B
$B$"$k?M$N$H$3$m$X$O(B 3/29 08:47 $B$4$m$K(B osaka.ocn.ne.jp $BJ}LL$+$iFO$-!"(B2 $BH/L\$O4{$KAH?%Fb$@$C$?$=$&$G$9!#(B
$B$^$?JL$N$"$k?M$N$H$3$m$X$O!"(B3/29 02:27 $B$4$m$K(B aol.com $BJ}LL$+$iFO$$$F$$$?$=$&$G$9!#(B
$B$5$i$KJL$N$"$k?M$N$H$3$m$X$O!"(B3/29 03:21 $B$4$m$K$I$3$+(B ($BE>Aw;~$K>pJs$,GK2u$5$l$F$7$^$$L$3NG'(B) $B$+$iFO$$$F$$$?$=$&$G$9!#(B
$B>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
[$B%$%s%?!<%M%C%H(B $B%*%W%7%g%s(B] $B$G%^%$(B $B%3%s%T%e!<%?$N%;%-%e%j%F%#(B $B%>!<%s$rM-8z$K$9$kJ}K!(B (Microsoft)$B!#(B
$B!U(B
$B%U%!%$%k8r49%f!<%6!<$X$NAJ>Y!"@$3&$K9-$,$k(B
(ITmedia)$B!#(B
$B!U(B
$B%2%$%D;a!"%;%-%e%j%F%#6/2=$N?JD=>u67$rJs9p(B
(ITmedia)$B!#$=$l$C$]$$$b$N(B: [Full-Disclosure] FW: Microsoft Progress Report: Security$B!#(B
$B;d$O$F$C$-$j(B 4/1 $B$J$N$+$H!D!D!#(B
$B!U(B
$B%$%s%?!<%M%C%H;v7oJm(B $BBh(B10$B2s!!%d%U%*%/!V3$B1HG$;$sLG:n@o!W$,$D$$$K;OF0!*(B
(Internet Watch)$B!#8=;~E@$G$O7^7b$K@.8y$7$F$$$kLOMM!#(B
$B!U(B
$B%;%-%e%j%F%#=$@5%W%m%0%i%`$K4X$9$k$h$/4s$;$i$l$k
(Microsoft)$B!#@$$NCf$K$O$b$O$d(B Windows 2000 / XP / Server 2003 $B$7$+B8:_$7$J$$!"$H$$$&A0Ds$G$$$$$N$+$J!#(B
$B!U(B
Upcoming Advisories (eEye)$B!#(B
Windows $B$NH>G/%P%0$O$^$@D>$i$J$$$7!#(B
$B!U(B
$B8!:w%(%s%8%s!!%j%j!<%9%N!<%H(B
($B%H%l%s%I%^%$%/%m(B)$B!#(B
VSAPI 7.000 $B$O(B Windows Server 2003 $B$HCg$,0-$+$C$?$h$&$G!"(B
VSAPI 7.100 $B$G=$@5$5$l$?$h$&$G$9!#(B
$B!U(B
$BBQ?LFC ($B%8!<%Y!<%9(B)$B!#(B
$B%"!<%H0z1[%;%s%?!<$G$O(B
$B%"!<%H$N%W%m%;%V%s(B
$B$H$7$F%5!<%S%92=$5$l$F$$$k!#(B
$B0z1[;~(B only $B$G$O$J$/!"(BPro-7 $B$NAuCe$N$_$N%5!<%S%9$b$"$j!#(B
$B%M%?$b$H(B: $B$$$D$>$d$N(B TBS NEWS23 3/27 $B$N%V%m!<%I%-%c%9%?!
$B!U(B
$BB3!&(BICMP$B$N%U%#%k%?%j%s%0$N5:8@(B ($B$1$s$N$\$d$-(B)$B!#(B
$B%U%!%$%"%&%)!<%k9=C[(B $BBh(B2$BHG(B
VOLUME 2 $B!=(B $B%$%s%?!<%M%C%H%5!<%S%9(B (O'Reilly)
$B$@$H(B 25.4 $B@a(B (p.363)$B!#$7$+$7$3$NK\!"$J$<$+(B type = 13$B!A(B18 $B$N5-:\$,$J$$!#(B
$B!U(B
Windows XP SP2 $B4XO"(B
$B!U(B
http://itpro.nikkeibp.co.jp/security/
$B$H$$$&%Z!<%8$,$G$-$?$s$G$9$M!#(B
$B!U(B
SpywareBlaster
3.0 $B$,=P$?$=$&$G$9!#(B
SpywareBlaster$B$K$h$k%9%Q%$%&%'%"46@w$NM=KI(B ($B%"%@%k%H%5%$%HHo32BP:v$NIt20(B) $B$NKvHx$K$"$k!V%P!<%8%g%s(B3.0$B$X$N%"%C%W%G!<%H$K$D$$$F(B $B!](B $B5l%P!<%8%g%s$r$*;H$$$NJ}$X!W$b;2>H$9$k$H$h$$$G$7$g$&!#(B
$B!!8D?M>pJs$r(B ACCS $B$KAw$C$F$7$^$&%-%s!|%^0!l!#!V$=$&$$$&$b$N$,=P$F$-$?$i!D!D!WE*OCBj$,$"$A$3$A$K$"$C$?$h$&$K;W$$$^$9$,!"K\Ev$K=P$F$-$?$s$G$9$M!#(B
$B!!L\O?ItJ,$N%j%s%/$O$J$<$+@Z$l$F$$$k$h$&$J$N$G!"(BPDF $BHG$r8+$?J}$,$h$$$G$7$g$&!#(B
$B4XO"$+$J(B: $B%,%i%9$NKIHH@-G=$K4X$9$kHD>K;R6(2q4p=`(B ($BHD>K;R6(2q(B)$B!#(B
![[$B%;%-%e%j%F%#%[!<%k(B memo]](/%7Ekjm/security/memo/sechole-memo.gif)
$B;d$K$D$$$F(B