$B%;%-%e%j%F%#%[!<%k(B memo - 2004.11
Last modified: Thu Feb 24 20:04:27 2005
+0900 (JST)
$B$H$$$&$o$1$G!"L@F|$O(B
$B%;%-%e%j%F%#%[!<%k(B memo BoF
$B$NF|$J$N$G$9!#(B
$B!U(B
$B!V0V0BIX$H$+8@MU8:$jNI$+$C$?!W!!652J=q=d$jJ82JAjH/8@(B
(asahi.com, 11/27)$B!#$J$s$@$+$J$"!#(B
$B!U(B
$B86H/BQ?L3J:9!'4p=`I>2AK!JQ$($:!!86;RNO0BA40Q(B
($BKhF|(B, 11/29)$B!#!V0BA4!W$OC/$N$?$a(B?
$B!U(B
ESPIO!
$B$+$i(B:
$B!U(B
$B%&%/%i%$%JL1
(tanakanews.com, 11/30)
$B!U(B
$B%=%U%H%P%s%/(BBB$B!"(BYahoo! BB$B8\5R>pJs(B900$B7o$,N.=P$+(B
(Internet Watch, 11/30)$B!#?75,$N;v0F$NLOMM!#$b$C$H$b!"%G!<%?<+BN$O%;%-%e%j%F%#$,6/2=$5$l$kA0$K1L$l$?$b$N$_$?$$!#(B
$B!U(B
$B>.AR=(IW$N!V(BIT$BK!$N(BTop Front$B!W(B $B$+$i(B:
$B!!Cf?H$H$OA4$/4X78$"$j$^$;$s$,!"(Bblog.goo.ne.jp $B$C$F!"$I$&$7$F$3$s$JJQ$J(B cookie $B$r;H$C$F$$$k$s$G$7$g$&!D!D!#(B
$B!U(B
$B%W%j%Z%$%I<07HBSEEOC!"7@LspJs$NEPO?5AL32=(B - $B3F
(MYCOM PC WEB, 11/30)$B!#(B
$BNA6bA0J'$$J}<0!"7n3[MxMQNAITMW$GMxMQ$G$-$k%W%j%Z%$%I<07HBSEEOC$O!"MxMQ@-$+$iHH:a$J$I$K0-MQ$5$l$kNc$,8e$r@d$?$J$$!#7HBSEEOC%-%c%j%"3F
$B!!(BWindows $B$K%W%j%$%s%9%H!<%k!"MxMQNAITMW$GMxMQ$G$-$k(B Internet Explorer $B$O!"MxMQ5=$J$I$K0-MQ$5$l$kNc$,8e$r@d$?$J$$!#(B
Windows OEM $B%Y%s%@!<3FFireFox $B$N%W%j%$%s%9%H!<%k$rH/I=!"Ho32$N:,@d$rL\;X$9!D!D$H$$$&OC$OJ9$+$J$$$J$"!#(B
$B!U(B
SCO.com
$B$,$^$?%d%i%l$?$h$&$G!#(B
News from the Lab
Monday, November 29, 2004
$B$J$I!#(B
Handler's Diary November 29th 2004 (SANS ISC)
$B$K$O!V8E$$(B PHP $B$,860x$+(B?!$B!WE*OC$,=R$Y$i$l$F$$$^$9!#(B
$B!U(B
AVAR $B4XO"(B
$B!U(B
JASRAC$B%7%s%]%8%&%`(B2004 $B$M$?(B
$B!U(B
Sophos
AntiVirus 3.88.0 Windows NT/2000/XP/2003 $B%j%j!<%9%N!<%H$+$i(B:
$B%&%$%k%946@w$7$?BeBX%G!<%?%9%H%j!<%`!J(BADS$B!K$,4XO"IU$1$i$l$F$$$k%U%!%$%k$d%U%)%k%@$NL>A0$,@53N$K%l%]!<%H$5$l$k$h$&!"(BSophos Anti-Virus $B$,=$@5$5$l$^$7$?!#$3$l$O(B NTFS $B%U%!%$%k%7%9%F%`$K$N$_3:Ev$7$^$9!#(B
NTFS $B$N(B ADS $B5!G=$K4X$9$k>\:Y$O!"
http://support.microsoft.com/kb/105763
$B%G%U%)%k%H$G!"(BADS $B8!:w5!G=$OK\@=IJ$GL58z$K$J$C$F$$$^$9!#M-8z$K$9$k$K$O!"
Key: HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\ADVANCED
Value Name: Scan Streams
Type: REG_DWORD
Data: 0x00000001
($BCfN,(B)
$B%U%)%k%@L>$K%@%V%k%P%$%HJ8;z$r4^$`%U%)%k%@$r8!:w$9$k:]$KH/@8$7$?LdBj$,=$@5$5$l$^$7$?!#$3$NLdBj$O!"$3$N$h$&$J%U%)%k%@$r%$%_%G%#%(!<%H8!:w$^$?$O%9%1%8%e!<%k8!:w$9$k>l9g$K$N$_H/@8$7$^$7$?!#(B
$B!U(B
Windows NT 4.0 $B$*$h$S(B Windows 98 $B6<0R$X$NBP:v%,%$%I(B
(Microsoft)$B!#(B
$B!U(B
$B%=%U%)%9!"(BSkulls $B%H%m%$$NLZGO$O(B Symbian $B7HBSEEOC46@w$N62$l$[$H$s$I$J$$!"$HJs9p(B
($B%=%U%)%9(B, 11/23)
$B!!(BWindows NT 3.51 / 4.0 / 2000 / Server 2003 $B$N(B WINS $B%5!<%P$K7g4Y!#(B
buffer overflow $B$9$k7g4Y$,B8:_$7!"$3$l$rMxMQ$9$k$H(B remote $B$+$iG$0U$N%3!<%I$r(B WINS $B%5!<%PMicrosoft WINS $B%5!<%P!<$N@H (ISSKK)$B!#(B
$B!!4XO"J8=q(B 890710 - How to help protect against a WINS security issue
(Microsoft)
$B$K$O!"2sHr:v$H$7$F!"(BWINS $B%5!<%P$rDd;_$9$k(B / $B:o=|$9$k!"(BWINS $B$,MxMQ$9$k(B 42/tcp $B$H(B 42/udp $B$r%U%!%$%"%&%)!<%k$d%Q%1%C%H%U%#%k%?$K$h$j%U%#%k%?$9$k!"(B
WINS $B%5!<%P4V$NF14|$K$D$$$F$O(B IPsec $B$GJ]8n$9$k!"(B
$B$,5s$2$i$l$F$$$k!#(B
$B!!$3$N7g4Y$rFM$/96N,%W%m%0%i%`$K$D$$$F!"(BISS $B$O0J2<$N$h$&$K=R$Y$F$$$k(B:
At the time of publication, no exploits are available to the public
at large. However, X-Force expects that exploits for this vulnerability
will appear in the near future.
$B!!$^$?(B
Handler's Diary November 28th 2004
(SANS ISC)
$B$O!"pJs$r7G:\$7$F$$$k(B:
There is some activity with irresponsible released exploits against WINS. As a precaution till Microsoft gets a chance to release a patch for it, we can only reiterate the urgent and continued need to make sure you block the unneeded ports in your firewalls (either the XP2 or the corporate firewall). Ports 42, 137-139, 445 both TCP and UDP can be safely blocked for most applications.
So far we doubt this will be a huge thing, but we might be proven wrong. Still the only thing you can do is block the protocols, which you probably already did if you read this.
I$B!G(Bll be the first to acknowledge that big vendors aren$B!G(Bt easy to get to move in order to release a patch for something you discovered in their product. Take on top of that, their legal and marketing spin once they finally do and most people will get frustrated by the process.
Still that$B!G(Bs no excuse to release attacking details without giving the world a chance to look into it and get ready for that newly created exploit. If the hackers out there are using it, you can$B!G(Bt really claim to have done it yourself, and if you$B!G(Bve done it all, there$B!G(Bs not really that urgent a need to beat anybody to releasing the details, but an urge to get your 15 minutes of fame. My guess anyway.
2004.12.01 $BDI5-(B:
$B!!85%M%?(B: Wins.exe remote vulnerability (immunitysec.com)$B!#(B
$B!!(BMicrosoft KB $BF|K\8lHG(B:
WINS $B$N%;%-%e%j%F%#$NLdBj$+$i%3%s%T%e!<%?$rJ]8n$9$kJ}K!(B
(Microsoft)
2004.12.15 $BDI5-(B:
$B!!(Bfix $BEP>l(B: WINS $B$N@H
- unarj 2.63 $B0JA0$K(B 2 $B$D$N7g4Y(B
$B!!(Bfix / patch:
- pacsec.jp $B$+$i(B
$B!!(BFireWire Presentation and Demos on Video
(Red Team, 11/18)$B!#(B
- IE 6$B$K?7$?$J%P%C%U%!%*!<%P!<%U%m!Z%3!<%I$O8x$K(B
$B!!(B$B%U%#%s%i%s%I@/I\!"(BIE$B$N;HMQCf;_$r4+9p(B--MS$B$N(BBofra$BBP:v5^$,$l$k(B
(CNET, 2004.11.29)$B!#(B
$B85%M%?$O(B
http://www.ficora.fi/suomi/tietoturva/cert.htm#2004-11-25_1337
(CERT-FI)
$B$+$J$"!#(B
$B!!$A$J$_$K(B 2004.11.22 $B$NOC$G$9$,!"$=$N8e(B Sophos $B$O(B minst.exe $B$r(B Troj/Virtum-A
$B$H$7$F8!=P$9$k$h$&$K$J$j$^$7$?!#(Bmmdom.exe $B$O%"%I%&%'%"$J$N$G$"$($F8!=P$7$F$$$J$$$h$&$G$9!#(B
$B!!Nc$($P8=:_!$:G?7$N%Q%C%A$^$G$rE,MQ$7$?>uBV$N(BWindows 2000$B$K!$(BWindows$B%3%s%]!<%M%s%H$N(B1$B$D$G$"$k!V(BWINS$B!W$rDI2C$9$k$H!$(BWINS$B$O%;%-%e%j%F%#!&%[!<%k$,;D$C$?>uBV$G%$%s%9%H!<%k$5$l$F$7$^$&!#(BSP4$B$N%j%j!<%98e$K!$(BWINS$B$N%;%-%e%j%F%#>e$N$<$$
$B!!;n$7$F$_$^$7$?!#(BWINS $BDI2C8e$K(B
Windows Update
$B$9$k$H(B MS04-006 $B$N=$@5%W%m%0%i%`(B
KB830352 $B$,I=<($5$l$^$7$?!#(B
$B$^$?(B MBSA $B$GD4$Y$k$H!"$3$3$G$b(B
MS04-006
$B$,<($5$l$^$7$?!#(B
$B$G$9$+$i!"(B
$B$G$h$$$N$G$O!#$"$H!"$3$l$C$F!V:FE,MQ!W$8$c$J$$$G$9$h$M!#(B
2004.12.07 $BDI5-(B:
$B!!(B$B%3%s%]!<%M%s%H$rDI2C$7$?$H$-$K!"%;%-%e%j%F%#99?7%W%m%0%i%`$,E,MQ$5$l$J$$8=>]$K$D$$$F(B
($BF|K\$N%;%-%e%j%F%#%A!<%`$N(B Blog, 2004.12.07)$B!#(B
$B!V$9$G$K%$%s%9%H!<%k$5$l$F$$$k%3%s%]!<%M%s%H!W$K$D$$$F$O(B XP / Server 2003 $B$N!V%G%e%"%k%b!<%I%$%s%9%H!<%k!W$G2r7h$5$l$F$$$k$,!"!V$^$@%$%s%9%H!<%k$5$l$F$$$J$$%3%s%]!<%M%s%H!W$r2r7h$9$k(B sticky updates $B$O$^$@MBSA $B$G3NG'!"$,8=>u$G$N:GA1
$B!!(BWindows $B$H(B Windows $B%3%s%]!<%M%s%HMQ%Q%C%1!<%8(B $B%$%s%9%H!<%i(B Update.exe $B$NFbIt%a%+%K%:%`(B
(Microsoft) $B$O!"$-$A$s$HFI$s$G$*$$$?J}$,$h$5$=$&$@$J$"!#(B
$B!!(BWindows XP SP2 $B$G(B Windows Update $B$K@\B3$9$k$H!"(B
Internet Explorer $BMQ$NN_@QE*$J%;%-%e%j%F%#99?7%W%m%0%i%`(B (834707) (MS04-038)
$B$N(B patch$B!"(B
Windows XP Service Pack 2 $BMQN_@QE*$J%;%-%e%j%F%#99?7%W%m%0%i%`(B (KB834707)
$B$,!"$J$<$+I=<($5$l$J$$LOMM!#<+F099?7$K$D$$$F$O2?$b=R$Y$i$l$F$$$J$$$N$G!"B?J,LdBj$J$$$N$G$7$g$&!#(B
Windows XP SP2 $B$J?M$OG0$N$?$a!"(B
- $B%3%s%H%m!<%k%Q%M%k$N!V%W%m%0%i%`$NDI2C$H:o=|!W$K$*$$$F!"!V99?7%W%m%0%i%`$NI=<(!W$r%A%'%C%/$7$?>e$G!"!V(BWindows XP $B%[%C%H%U%#%C%/%9(B - KB834707$B!W$NB8:_$r3NG'$9$k(B
- MBSA $B$r%$%s%9%H!<%k$7$F(B patch $BE,MQ>u67$r3NG'$9$k(B
$B$J$I$7$F$*$$$?J}$,$h$5$=$&$G$9!#(B
2004.11.30 $BDI5-(B:
$B!!(B$B%^%$%/%m%=%U%H!"(BWindows XP SP2$B$K$*$1$k(BWindows Update$B$NIT6q9g$r=$@5(B
(Internet Watch, 11/30)$B!#=$@5$5$l$?$h$&$G$9!#(B
$B!U(B
$B!V%W%m%b!<%7%g%s$h$j$b5;=QNO$G>!Ii$9$k!W!=!=%m%7%"(BKaspersky Labs
($BF|7P(B IT Pro, 11/26)$B!#(BOKADA $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
AVP/KAV $B%(%s%8%s$r@Q$s$@%=%U%H$,$A$g$C$H$[$7$+$C$?$N$G$9$,!"(B
$B$s$G$7$^$$$^$7$?!#(B
$B!U(B
$B0lIt%&%$%k%9BP:v%=%U%H$,(BWindows$BHG(BFFXI$B$N%7%g!<%H%+%C%H%W%m%0%i%`$r8m8!=P(B
(Internet Watch, 11/29)$B!#$U$%$s!#(B
$B!U(B
DropMyRights
(GrayRecord, 11/23)$B!#(B
$B8"8B$r:o$C$?>e$G%3%^%s%I$rpJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
$BIT@5%"%/%;%99T0Y$N6X;_Ey$K4X$9$kK!N'0cH?$NBh8^2s8xH=$rK5D0$7$?5-O?(B
($B$A$;$N$Z!<$8(B@$B$;$-$e$j$F$#(B, 11/28)
$B!U(B
Norton AntiVirus 2005
$B$r%$%s%9%H!<%k$7$F$_$F$S$C$/$j$7$?$N$@$,!"(BNAV 2005 $B$C$F!"$J$s$G$3$s$J!"j5$_$?$$$J%"%$%3%s$K$J$C$A$c$C$?$N(B?
$B$$$d!"K\Ev$O!"H"3($K$b$"$k!VD0?G4o!W$r%$%a!<%8$7$?$b$N$J$N$@$m$&$,!";DG0$J$,$ij5$K$7$+8+$($J$$$7!#$=$l$K$7$F$b!"(BNAV $B$O=E$$$J$"!#(B
$B!!IUB0$N(B Adobe Reader 6.0 $B$rF~$l$F$_$?$i!"$J$s$H!"%;%-%e%j%F%#%[!<%k$D$-$N(B 6.0.0 $B$G$9$h$"$J$?!#$@$a$8$c$s!#(B
$B!U(B
47$B;aK\?M$,5-$9!V(BWinny$B$N5;=Q!W(B
(slashdot.jp, 11/29)$B!#$*$)!#(B
$B%M%C%H%(!<%8%'%s%H(B
$B$J?M$K$h$k%3%i%`(B 4 $B%Z!<%8!"$H$+F~$C$F$k$H$b$C$H$*$b$7$m$=$&$@$1$I!"$I$&$+$7$i!#(B
$B!U(B
netstat$B$G%j%C%9%s$7$F$$$k%W%m%;%9$rFCDj$9$k(B
(@IT, 2004.11.27)$B!#(BXP SP2 $B$G$O(B -b $B$H$+(B -b -v $B$H$+$G$-$k$N$G$9$+!#(B
$B!U(B
$B2$=#(BLycos$B$,%9%Q%`%5%$%H$r!V(BDDoS$B967b!W$9$k%9%/%j!<%s%;!<%PG[I[(B
(ITmedia, 11/27)$B!#$^$H$b$J
$B!U(B
$B$h$j(BFirefox$B$r;H$$$3$J$9$?$a$N%(%/%9%F%s%7%g%s=8!'(B
$B$5$^$6$^$J4D6-@_Dj$r%o%s%\%?%s$G@_Dj$G$-$k(BPrefBar
(ITmedia, 11/27)
$B!U(B
$B%O%$%F%/%Q%9%]!<%H$N%;%-%e%j%F%#$K7|G0$N@<(B
(ITmedia, 11/29)$B!#(BRFID $B$J$N$+$J!#(B
$B!U(B
$B3$<+5_FqHt9TDz$N2~B$5!!"%a!<%+!<$,M"=P8!F$(B
(asahi.com, 11/27)$B!#(B
$BF1CKIHt9TDz$H$7$F!"%U%i%s%9$d%.%j%7%c$J$I;3NS2P:R$,B?$$2$=#=t9q$rCf?4$K?t==7o$N0z$-9g$$$,$"$j!"JF9q$+$i$b<{MW$r8+9~$s$G$$$k!#(B
$B!!(B$B>CKID#(B$B$,Gc$$$J$5$$!#!VEl3$!W$d!V4XEl!W$,5/$-$kA0$K!#(B
$B!U(B
$B9b?.Mj%a%C%;!<%8%s%0(B
(IPA $B%S%8%M%9%0%j%C%I%3%s%T%e!<%F%#%s%08&5f3+H/;v6H(B)$B!#(B
Requirements
Red Hat Linux 8.0 or later
Java2 SDK, Enterprise Edition Platform Edition 8 Update 1
Java2 SDK, Standard Edition 1.4.2
PostgreSQL 7.4
Apache Axis 1.1
$B!U(B
Windows 2000 Update Rollup Announcement
(Microsoft, 11/24)$B!#@5<0H/I=%-%?!A!#(B
Because Microsoft believes the Update Rollup will meet the needs of customers better than a new service pack, there will be no Service Pack 5 (SP5) for Windows 2000.
$B!!(BWindows 2000 SP5 $B$O=P$J$$$N$G!"(BSP4 $B$G(B 2010.06.30 $B$^$G%5%]!<%H$9$k!"$H!#(B
Windows $B%G%9%/%H%C%W@=IJ$N%i%$%U%5%$%/%k(B
- $B%5!<%S%9%Q%C%/%m!<%I%^%C%W(B
$B$b$=$N$&$A=q$-D>$5$l$k$N$G$7$g$&!#(B
$B!U(B
AVAR $B4XO"(B
$B!V%^%k%A%Y%s%@!
(ITmedia, 11/27)
$B!VEE;R%a!<%k$N?.Mj@-$,Bg$-$/MI$i$.$D$D$"$k!W!=!=(BAVAR 2004 in Tokyo$B%j%]!<%H(B (2)
($BF|7P(B IT Pro, 11/26)$B!#$=$N3d$K$O(B S/MIME $B$H$+N.9T$j$^$;$s$M!#(B
$B%Z%j!<;a(B ($BCfN,(B) $B$K$h$l$P!$%f!<%6!<$r650i$9$k$&$($GBg$-$J%M%C%/$K$J$C$F$$$k$3$H$N0l$D$H$7$F!VMQ8l$NDj5A$N$"$$$^$$$5!W$,$"$k$H$$$&!#(B
($BCfN,(B)
$B$=$3$G%Z%j!<;a$O8=:_!$$[$+$N@lLg2H$H6(NO$7$F!$%Y%s%@!<$NOH$rD6$($FMQ8l$NE}0l$r?^$k$Y$/:n6H$r?J$a$F$$$k$H$$$&!#!V(B2004$BG/Kv$r%a%I$K(B20$B6a$/$N%&%$%k%94XO"MQ8l$K$D$$$FDj5A$rL@3N$K$7$?$$!W!JF1;a!K!#(B
$B$3$l$O$h$5$2$@$J$"!#$C$F!"$"$H(B 1 $B$+7n$7$+$"$j$^$;$s$
$B!VL5@~(BLAN$B$r0-MQ$9$k%&%$%k%9$NEP>l$KCm0U$,I,MW!W!=!=(BAVAR 2004 in Tokyo$B%j%]!<%H!J(B3$B!K(B
($BF|7P(B IT Pro, 11/26)
$B!VNc$($P@h$KL5@~(BLAN$B%&%$%k%9$r;H$C$F!$%(%"%3%s$,F0$$$F$$$J$$$+$rJs9p$5$;$k!#$=$7$F!$6u$-2H$G$"$k$3$H$r3NG'$7$?$N$AJ*M}E*$K?/F~$9$k!#$"$k$$$O!$%M%C%H%o!<%/!&%+%a%i$r30$+$i%3%s%H%m!<%k$7$F2H$NCf$r2l$9$k$3$H$5$(3(6u;v$H$O$$$($J$/$J$j$D$D$"$k!W(B
$B%(%"%3%s$O$H$b$+$/!"%M%C%H%o!<%/%+%a%i$O:#$G$b$G$-$=$&$G$9$M$(!#(B
$B!U(B
$B$*5RMM>pJsN.=P$K$D$$$F$N$*OM$S$H$4@bL@(B
($B%d%^%@EE5!(B, 11/23)$B!#%O!<%I%G%#%9%/$NFbMF$r>C5n$7$J$$$^$^!"Cf8E%Q%=%3%s$rHNGd$7$F$7$^$C$?LOMM!#$7$+$b!"J#?tE9J^$G;v0F$,H/@8!#(B
$BJ@pJs:o=|%W%m%;%9$,IT==J,$@$C$?$?$a(B
$B$H$"$k$,!"C1$J$kC4Ev
$B!!(Bc32 $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
Fighting Spammers With Honeypots: Part 1
(SecurityFocus, 11/26)$B!#(B
$B!U(B
$B%;%-%e%j%F%#%[!<%k(Bmemo BoF$B$G$NM=Dj(B
($B9bLZ9@8w!w<+Bp$NF|5-(B, 11/24)$B!#(B
$B%;%-%e%j%F%#%[!<%k(B memo BoF
$B$N%Z!<%8$K$b%j%s%/$rDI2C$7$^$7$?!#(B
$B!!$U$H;W$$=P$7$?$N$G$9$,!"K\$C$F$I$&$J$C$F$$$k$s$G$7$g$&(B? > $B9bLZ$5$s!#(B
$B!U(B
Vine Linux
3.1 CR / 3.1 $B$,=P$?$=$&$G$9!#(B
$B!U(B
$BL>Lg%+!<%M%.!<%a%m%sBg3X$,?@8M$KF|K\9;!"9bEY$J>pJs%;%-%e%j%F%#?M:`$r0i@.(B
(ITmedia, 11/26)$B!#$$$h$$$h%9%?!<%H$G$9$+!#(B
$B!U(B
ISP$B$,L5=~$G%&%$%k%9BP:v$H%U%!%$%"%&%)!<%k5!G=$rDs6!$9$Y$-M}M3(B
(ITmedia, 11/24)$B!#(BAOL $B$OL5NA$@$+$i$$$$$1$I!"F|K\$G$b$h$/8+$+$1$k!V7n3[(B x $B1_!W$H$$$&$N$O!"$h$/9M$($k$H$U$D$&$KGc$&$h$j$b9b$$%3%H$,B?$$$h$&$J!#(B
- Sun Alert ID 57591: Security Vulnerability With Java Plug-in in JRE/SDK
$B!!(B.go.jp $BJ}LL$J$I$NEE;R?=@A%7%9%F%`$K$O(B Java $B$r;H$C$?$b$N$,B?$$$o$1$G$9$,!"Nc$K$h$C$F!"$3$N7g4Y$X$NBP1~$O?J$s$G$$$J$$$h$&$G$9!#Nc(B:
$B!U(B
AVAR $B4XO"(B
$B!U(B
$B%?!<%2%C%H9J$C$?%U%#%C%7%s%0$,A}2C(B - $BF|K\$b%[%9%F%#%s%09q$K%i%s%/%$%s(B
(MYCOM PC WEB, 11/26)$B!#(B
Anti-Phishing Working Group
$B$H$$$&AH?%$,$"$k$s$G$9$M!#(B
$B!U(B
$B!V%5!<%P!<$rG'>Z$9$k!W$3$H$G%U%#%C%7%s%0:>5=$rKI$0%=%j%e!<%7%g%s(B
(Enterprise Watch, 11/24)$B!#(B
$B%;%-%e%"%V%l%$%s(B
$B$N(B 1 $BH/L\$O%U%#%C%7%s%0BP:v%=%U%H$J$N$@$=$&$G$9!#(B
$B$G$b%5!<%PB&$K$b$3$N%=%U%H$,F~$l$i$l$F$$$J$$$H0UL#$,$J$$$h$&$G!"!D!D!#(B
$B!U(B
$B6&M-(B PC $B$C$F!"%3%o!<(B
(exconn.net, 11/25)$B!#1|E7;U>"%-!<%m%,!<$rH/8+$9!#(B
$B!U(B
$B%;%-%e%j%F%#@nLx!"B3$1$^$9$+!";_$a$^$9$+(B
(exconn.net, 11/25)$B!#3N$+$K=EBg$JLdBj$G$9(B (^^;;)$B!#(B
$B8D?ME*$K$O!"7QB3$K0lI
$B!U(B
$B%"%/%;%9C5De(BIHARA (cbook24.com)
$B$N%?%$%H%k$H%5%V%?%$%H%k$,JQ2=$7$F$$$^$9(B ($B>P(B)$B!#(B
$B0JA0$N>u67(B$B!"(B$B4XO">pJs(B ($B6K3Z$;$-$e$"F|5-(B)$B!#(B
$B!U(B
$B@nFbGn;K!V@5!9F2!9!WF|5-(B$B$+$i(B:
2004$BG/(B11$B7n(B24$BF|(B
($BCfN,(B)
$B:#!"Cf9q$G$O!"8=CO$N$*6b;}$AC#$,!"F|K\$N@8;:
$B
$B$=!<$G$9!*!*G@NS?e;:J*$bCNE*:b;:@oN,$,7k$S$D$/;~Be$G$9!*(B
$B$G$b!"$\$/$,:#2s!"G@?e0Q0w2q$Ge$2$kl$O3$B1?)IJ$G$"$U$l$F$$$k$N$G$O!"$H;W$o$l$k>uBV$G$9!#(B
$B!U(B
$BJ82=D#Cx:n8"2]$,:G6a0lG/4V$K ($B=05D1!(B, $BDs=P$B@nFbGn;K5D0w(B)$B!#(B
$BCx:n8"2]D9$OK\G/6e7n==<7F|$K3+:E$5$l$?Cx:n8"%U%)!<%i%`$G9T$C$?9V1i$K:]$7$F!V:#2s$N2~@5$KEv$?$C$F$O!XCx:n8"$OJ82=$N$?$a$@$1$G$O$J$$!Y$H$$$&0U<1$Gr$N!VJ82=$NH/E8$K4sM?$9$k$3$H$rL\E*$H$9$k!W$HDj$a$i$l$F$$$k4pK\M}G0$d!"J8It2J3X>J@_CVK!!JJ?@.==0lG/<77n==O;F|K!N'Bh6e==O;9f!KBhFs==<7>r$K$*$$$F!VJ82=D#$O!"J82=$N?66=5Z$S9q:]J82=8rN.$N?66=$r?^$k$H$H$b$K!"=!65$K4X$9$k9T@/;vL3$rE,@Z$K9T$&$3$H$rG$L3$H$9$k!#!W$HDj$a$i$l$F$$$kJ82=D#$N@_CVL\E*$r0oC&$7$F$$$k$N$G$O$J$$$+!#(B
$B!U(B
$BCx:n8"K!Bh;0==H,>rBh0l9`5Z$SBh;M9`$N2r
($B=05D1!(B, $BDs=P$B@nFbGn;K5D0w(B)$B!#(B
$B;d3XJ}LL$N?M$O$3$N$"$?$j$KCmL\$+$J(B:
$BBh0l9`$HBh;M9`$N!VNA6b!W$K$D$$$F0[$J$k2re$N:,5r$,B8:_$7$J$$8=>u$G$OJ?@.==<7G/0l7n0lF|;\9T$NCx:n8"K!$N0lIt$r2~@5$9$kK!N'!JJ?@.==O;G/O;7n6eF|K!N'Bh6e==Fs9f!#0J2r$NFs$,GQ;_$5$l$F0J9_!";dN)$N3X9;K!?M$,3X@8$KIUB0?^=q4[$N?^=q$rB_$7=P$99T0Y$O!V650i9T0Y$H$7$FI,MWIT2D7g$G$"$C$F$b!"K!BhFs==O;>r$N;0$K5,Dj$5$l$kB_M?8"$r?/32$9$k!W$H2r$5$l$k$N$G$O$J$$$+!#(B
$B!U(B
$B%I%k$N<+LG(B
(tanakanews.com, 11/26)$B!#@PL}$O$"$$$+$o$i$:9b$$$71_$b9b$$$7$G!"%"%l$K$J$C$F$$$kF|K\4k6H$OB?$$$N$@$m$&$J$"!#(B
$B!U(B
TEPCO$B$R$+$j$N%a!<%k%K%e!<%9EPO?
(Internet Watch, 11/25)
$B!U(B
$B$O$F$J$X$N=;=jEPO?$N5AL32=E12s$K$D$$$F(B
($B$O$F$J(B, 11/25)$B!#8D?ME*$K$O!"=;=j$h$j$b$3$3$@(B:
$B7Y;!$+$i$N>H2q$J$IK!E*94B+NO$,$J$$$b$N$K$D$$$F$O3+<(>r7o$+$i30$7!"%W%i%$%P%7!<%]%j%7!<$rJQ99$7$^$7$?!#(B
$B!U(B
$BJF(BMicrosoft$B!$(BWindows 2000 SP5$B$r
($BF|7P(B IT Pro, 11/25)$B!#%^%8$G$9$+(B?!
SP $BBG$A$I$a$K$9$k$K$O$^$@%A%HAa$$$H;W$&$s$G$9$,!D!D!#(B
SP4 $B$8$c$J$/$F(B SP5 $B$GBG$A$I$a$9$k$/$i$$$,$A$g$&$I$$$$5$$,$9$k$s$G$9$,!D!D!#(B
$B!U(B
VSE8.0i$B%$%s%9%H!<%k%(%i!
($B%^%+%U%#!<(B, 2004.11.26)$B!#(B
$B%$%s%9%H!<%i$r;vA0$KE83+$9$kJ}K!!#(B
$B!!(BWindows XP SP2 / XP Tablet PC Edition 2005 / Server 2003 $B$K7g4Y!#(B
http.sys $B$K7g4Y$,$"$j!"(B
- TDI $B%U%#%k%?%I%i%$%P$,%$%s%9%H!<%k$5$l$F$*$j!"$+$D(B
- $B$=$N(B TDI $B%U%#%k%?%I%i%$%P$,!"(BTDI_SET_EVENT_HANDLER I/O $B%j%/%(%9%H$KBP$7$F(B STATUS_PENDING $B$rJV$9(B
$B>l9g$K!"(Bhttp.sys $B$,%9%?%C%/$rGK2u$7$F$7$^$&!#$=$N7k2L!"(BOS $B$,%V%k!<%5%s%@!<>uBV$K$J$C$F$7$^$&!#(BTDI $B%U%#%k%?%I%i%$%P$O!"E57?E*$K$O%"%s%A%&%$%k%9%=%U%H$d%U%!%$%"%&%)!<%k%=%U%H$K4^$^$l$k$=$&$@!#(B
$B!!$3$N7g4Y$O(B Windows XP gold / SP1 $B$K$OB8:_$7$J$$!#(B
$B!!(BWindows XP SP2 $BMQ$N(B patch (KB887742) $B$O$"$k$,!"(BWindows Server 2003 $BMQ$N(B patch $B$O$^$@$J$$LOMM!#(BWindows XP Tablet PC Edition 2005 $BMQ$N(B patch $B$K$D$$$F$OL@5-$5$l$F$$$J$$$N$@$,!"(B
The Windows XP SP2 features and components are included in Windows XP Tablet PC Edition 2005.
$B$@$=$&$J$N$G!"(BWindows XP SP2 $BMQ$N(B patch $B$rE,MQ$G$-$k$s$8$c$J$$$+$H$$$&5$$,$9$k!#(B
2005.02.24 $BDI5-(B:
$B!!(BKB 887742 $B$NF|K\8lHG$,EP>l(B: 887742 - Windows XP Service Pack 2 $B$^$?$O(B Windows Server 2003 $B$G(B Stop $B%(%i!<(B "Stop 0x05
(INVALID_PROCESS_ATTACH_ATTEMPT)" $B$,I=<($5$l$k(B$B!#(B
$B$^$?!"(Bpatch $B$,(B Windows Update $B$G$bG[I[$5$l$F$$$k$=$&$@(B
($BF|7P(B IT Pro)$B!#(B
$B$?$@$7!"(BWindows Server 2003 $BMQ$N(B patch $B$O$^$@$J$$$7!"(BWindows XP Tablet PC Edition 2005 $B$K(B Windows XP Service Pack 2 $BMQ$N(B patch $B$rE,MQ$7$F$b$$$$$N$+H]$+$bL@3N$G$O$J$$!#(BWindows XP Tablet PC Edition 2005 $B$G(B Windows Update $B$7$F$_$l$PEz$O$o$+$k$N$+$b$7$l$J$$!#(B
$B!U(B
$B%Q%=%3%s9)K<(B$B$G(B$B%W%m%;%V%s(B$B$r
$B!U(B
$B=>6H0w$N!V4F;k!W$H!V%W%i%$%P%7!
(ITmedia, 11/24)$B!#(B
$B!U(B
MS$B!"1Q$G3$B1HG$N(BWindows XP$B$rL5=~8r49(B
(ITmedia, 11/25)$B!#0lDj$N>r7o(B?
$B!U(B
$B!V(BITmedia$B!W$H!V(B@IT$B!W$,(B3$B7n$K9gJ;!"3t<08x3+$b;kLn$K(B
(Internet Watch, 11/25)$B!#$*$)$)$)$)$)!A(B?!
$B!U(B
WHoppix
2.5 $B$,=P$F$$$k$=$&$G$9!#(B
$BF~$C$F$$$k$b$N(B$B!#3N$+$K$$$m$$$mF~$C$F$^$9$M!D!D!#(B
FAQ$B!#(B
$B!U(B
$B%P%$%*%a%H%j%/%9(BID$B%+!<%I7W2h!"=w2&1i@b$GH/I=(B
(ITmedia, 11/24)
$B!U(B
$B9R6u!&E4F;;v8ND4::0Q0w2q(B ($B9qEZ8rDL>J(B)
$B!!6=L#?<$$$G$9!#(B
$B!U(B
$B%U%j!<$N%&%$%k%9BP:v%=%U%H$GCN$i$l$kFH(BH$B!\(BBEDV$B!$?7%V%i%s%I$G@$3&?J=P(B ($BF|7P(B IT Pro, 11/24)$B!#(BAVIRA $B$@$=$&$G$9!#(B
$B%W%m%^!<%/(B$B$C$F0JA0$O(B Kaspersky $B$r;H$C$F$$$?$O$:$G$9$,!"$$$D$N$^$K(B H+BEDV $B$K!D!D!#(B
$B%@%&%s%m!<%I(B CGI $B%Z!<%8(B$B$N(B URL $B$r$_$k$H!"(Bversion 6 $B$G(B H+BEDV $B$K$J$C$?$N$+$J$"!#(B
$B$J$+$J$+L%NOE*$J(B$B2A3J(B$B$G$9$M!#(B
$B!U(B
$B!V(B10$BK|1_$N
($BF|7P(B IT Pro, 11/24)$B!#(BTEMPEST $BOC!#(B
$B!U(B
[aml 41914] Fwd: [TUP-Bulletin] $B#T#U#PB.Js#4#1#09f(B $B%j%P!<%Y%s%I$NF|5-!J#1#17n#1#6F|!K(B $B#1#17n#2#0F|(B$B!#(B
$B%P%0%@%C%I!&%P!<%K%s%0(B by $B%j%P!<%Y%s%I(B$B!#(B
$B!U(B
[aml 41941] Fwd: [TUP-Bulletin] $B#T#U#PB.Js#4#1#19f(B $BM-8"
$B!U(B
[aml 41940] $B?@F`@n8)650Q$X!V2#IMJ[8n;N2q4+9p=q$N
$B!U(B
$B%;%-%e%"#O#S%+%s%U%!%l%s%9(B$B!#(B2004.12.06$B!"El5~ET9A6h!"(B3,000$B1_!#(B
$B!U(B
Web$B%O%C%-%s%0%i%$%V%;%_%J!<(B$B!#(B2004.12.9$B!"El5~ET@iBeED6h!"L5NA!#(B
$B!!(Bunarj 2.63a $B0JA0$K(B 2 $B$D$N7g4Y!#(B
$B!!(Bunarj $B$8$c$J$/$F(B arj
$B$r;H$&$Y$-!"$H$$$&OC$b$"$kLOMM!#(BDebian $B$N(B unstable $B$G$O(B
unarj $B$O(B arj $B$N%@%_!<(B$B$i$7$$!#(B
fix / patch:
$B!!(BPukiWiki 1.4.x $B$K4^$^$l$k(B color $B%W%i%0%$%s$K!"%/%m%9%5%$%H%9%/%j%W%F%#%s%07g4Y$,B8:_$7$?$=$&$G$9!#(Bplugin/color.inc.php 1.13 $B$G=$@5$5$l$F$$$k$=$&$G$9!#(B
heno $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
Buy Nothing Day Japan$B!#(B
2004.11.27 $B$O(B Buy Nothing Day $B$G$9!#%,!<%S$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B7/$OA5%?%/%m!<%9$r8+$?$+!#(B
$B!U(B
$B@.ED$N%[%F%k;:HnNA$+$i%+%I%_%&%`!!=P2YDd;_$X(B
(asahi.com, 11/24)$B!#(B
$B%(!<%(%L%(!<%[%F%k@.ED(B$B$G$9$+!#(B
$B!VHnNA
$B!U(B
$B@E2,CO8!!'(B
$BA\::>pJsO3$($$$J$I$G8!;v$i#2#8?M=hJ,(B
($BKhF|(B, 11/25)
$B!U(B
$B2-Fl!&;M9q$NN&>e<+1RBb$rA}6/!!KI1RD#$N!V>-MhA|!W(B
(asahi.com, 11/24)$B!#6=L#?<$$!#(B
$B!!(B$BKI1RD#$NN&<+A}6/J}?K$K2-Fl8)Fb$G6/$$H?H/(B
(asahi.com, 11/24)$B!#$=$j$c$=$&$@$o$J$"!#(B
$B!U(B
$B!VGw7bK$?tH/$G4m81$HH=CG$7$J$$!W!!KI1RD#@bL@$KH?H/$,(B
(asahi.com, 11/24)$B!#?tH/$G?M$,;`$s$G$b(B ok ok $B$J$N$@$m$&$J!#(B
$B!U(B
$B%U%!%k!<%8%c967b!'(B
$BL5Dq93%$%i%/?M\=R(B
($BKhF|(B, 11/24)
$B!U(B
$B!V%D!<%I%C%0%9!W$N2s<}$K4X$9$k$*OM$S$H$*CN$i$;(B
($B%-%j%s(B, 11/24)$B!#(B
$B!U(B
$B%;%-%e%j%F%#%3%s%F%s%D$Nd~M>6J@^(B
(Microsoft, 2004.11.24)$B!#(B
$B$=$s$JCf$G@8$^$l$F$-$?$N$,!"!V3($G$_$k%;%-%e%j%F%#>pJs!W$d%9%/%j!<%s%7%g%C%H$rCf?4$KBP:vpJs%Z!<%8$N$h$&$K;W$o$l$^$9$,!"4k6HFb$N%f!<%6!<$KBP:v$r@bL@$9$k>l9g$KHs>o$KM-8z$H$49%I>$$$?$@$$$F$$$^$9(I!$BJ@pJs!W$O>o$K>e0L$K?)$$9~$s$G$$$^$9(I!(B
$B!U(B
Bot $B$H$O(B (Microsoft, 2004.11.24)$B!#(B
$B1|E7;U>"$K$h$k(B bot $B$N2r@b!#(B
$B!U(B
$B%Q%9%U%l!<%:(B vs. $B%Q%9%o!<%I(B Part 2
(Microsoft, 2004.11.24)$B!#%Q%9%U%l!<%:$O0lHL$K;W$o$l$F$$$k$[$I6/$$$o$1$G$O$J$$!"$H$$$&OC!#(B
$B!U(B
$BF|K\$N%;%-%e%j%F%#%A!<%`$N(B Blog
(eXconn.net)$B!#KhF|99?7$9$k!"$/$i$$$N5$9g$$$G$d$k!D!D$N$OL5M}$+$J$"!#(B
$B!U(B
$B:B>L$N3$2&4]$r$D$j>e$2!!=$M}$N$?$aB$A%=j$K(B
($B7'K\F|F|?7J9(B, 11/24)$B!#CO?L$P$+$j$,CmL\$5$l$^$9$,!"BfIwHo32$NI|5l$b!"$^$@$^$@=*$C$F$^$;$s!#(B
$B!U(B
$B%&%/%i%$%JJ}LL(B
- $BEl@>$KMI$l$k%&%/%i%$%J(B
($B%k!&%b%s%I!&%G%#%W%m%^%F%#!<%/(B, 2004.10)
- $B%&%/%i%$%JBgE}NNA*!'(B
$BA*4I!V
($BKhF|(B, 11/22)
- $B%&%/%i%$%JBgE}NNA*!'(B
$B%d%L%3%S%C%A
($BKhF|(B, 11/23)
- $B%&%/%i%$%JBgE}NNA*!'(B
$BBg5,LO935D!!IeGTBN@)$X$NITK~J.=P!]!]@>B&;V8~9-$,$j(B
($BKhF|(B, 11/23)
- $B%&%/%i%$%J!'(B
$B%-%(%U$G6[D%9b$^$k!!5l%=O"9q2H$KGH5Z$b(B
($BKhF|(B, 11/24)
- $B%&%/%i%$%J!'(B
$B308r41$,HcH=@5qH](B
($BKhF|(B, 11/24)
- $B%&%/%i%$%J!'(B
$B!VIT@5$NC{8u!W$HJF!"@):[A
($BKhF|(B, 11/24)
- $B%&%/%i%$%J!'(B
$BNW;~@/I\
($BKhF|(B, 11/24)
$B!U(B
$B6u<+5!$G!V6uHt$V
($BFIGd(B, 11/24)$B!#(BC-130 $B$M$'!D!D!#$J$s$@$+%G%+$9$.$^$;$s(B?
$B<+8JL\E*2=$7$F$$$k0u>]$r
$B!U(B
$B!VCF05$X$N?4F@!W@V4z
(asahi.com, 11/24)$B!#%S%iG[$C$?$?$1$GBaJa!&5/AJ$5$l$k@$$NCf$G$9$+$i$M$(!#(B
$B!U(B
$B2u2=BP:v$K7j!!Cf1[CO?L6571!"9q8r>J8+D>$7$X(B
(asahi.com, 11/24)$B!#(B
$B!!Ho32$NB?$/$O!"2A0$NBg1+$b1F6A$7$FCO2u2=$7$d$9$$:=$r;H$C$F$$$?$3$H!"$J$I$,860x$H$_$i$l$k!#(B
$B!U(B
$B%"%/%;%9C5De(BIHARA
$B$H$$$&$N$OpJs%;%-%e%j%F%#%3%_%C%/!W$@$C$?$s$G$9$+!#CN$j$^$;$s$G$7$?!#(B
$B!U(B
BASE
1.0 $B$,=P$?$=$&$G$9!#F|K\8l2=$b$5$l$F$$$k$=$&$G$9!#(B
$B!U(B
$B!V<+J,$?$A$N3hF0$r7QB3$5$;$k$?$a$N%;%-%e%j%F%#$r!W!=!=;38}1Q;a9V1i(B
(ITmedia, 11/23)$B!#(B
$B!U(B
JFK Reloaded$B!#(B
$B!V0-l$K$J$C$F9M$($l$P(B)$B!"!V$J$<%*%:%o%k%I;a$O:G$b8z2LE*$J=V4V$K$O0z6b$r0z$+$J$+$C$?$N$+!W$H$$$&AGKQ$J5?Ld$,L@$i$+$K$J$k$H;W$&$N$@$,!#$"$H!"!V==;zK$2P%*%W%7%g%s!W$,$J$$$i$7$$$N$O%@%a$G$9$M!#66$N>e!"LZ1"!"!D!D!#$$$d!"(B$99 $BJ'$&$H$G$-$?$j$9$k$N$+$b!#CN$i$s$1$I!#(B
$B!U(B
$B%P%k%^!GHB3$/!=!=!H%*!<%W%s%=!<%9J]812q
(ITmedia, 11/24)$B!#(BFUD $B$N57@7
$B!U(B
IE$B$N%7%'%"!"$D$$$K(B90$B!sBf$r3d$j9~$`!=!=JFD4::Js9p(B
(ITmedia, 11/24)$B!#$$$h$$$hK\J*(B?
Mozilla / Firefox $B$N%7%'%"$,(B 10% $B$K$$$DFO$/$+$,%]%$%s%H$+$J$"!#(B
$B!!$=$l$O$=$l$H$7$F!"(B$B86J8(B$B$H(B$BLuJ8(B$B$H$G$:$$$V$s0c$C$F$^$;$s$+(B?
$B!U(B
$BJF(BMicrosoft$B!$(BWindows Update Services$B$N8x3+I>2A$r3+;O(B
($BF|7P(B IT Pro, 11/22)$B!#(B
$B!!(BJava SDK / JRE 1.4.2_05 $B0JA0!"(B1.4.1 $B$*$h$S(B 1.4.0 $B7ONsA4$F!"(B1.3.1_12 $B0JA0$K7g4Y!#$3$l$i$K4^$^$l$k(B Java Plug-in $B$K7g4Y$,$"$j!"(BJavaScript $B$rMxMQ$7$F!"(BJava $B%;%-%e%j%F%#%^%M!<%8%c$rL58z$K$G$-$F$7$^$&!#$3$N7k2L!"(BJava $B%"%W%l%C%H$r%5%s%I%\%C%/%9$K$h$k@)8B$J$7$GF0:n$5$;$k$3$H$,2DG=$H$J$k!#(B
$B!!(BJava SDK / JRE 1.4.2_06 $B$*$h$S(B 1.3.1_13 $B$G=$@5$5$l$F$$$k!#(B
$B$^$?!"(BSDK / JRE 5.0 $B$K$O$3$N7g4Y$O$J$$!#4XO"(B:
2004.11.29 $BDI5-(B:
$B!!(B.go.jp $BJ}LL$J$I$NEE;R?=@A%7%9%F%`$K$O(B Java $B$r;H$C$?$b$N$,B?$$$o$1$G$9$,!"Nc$K$h$C$F!"$3$N7g4Y$X$NBP1~$O?J$s$G$$$J$$$h$&$G$9!#Nc(B:
2004.12.10 $BDI5-(B:
$B!!(B$B%5%s!"(BJava$B%W%i%0%$%s$NG[I[$GIT
(CNET, 2004.12.08)$B!#IT
$B!!$$$?$,$-$5$s$+$i(B ($B$"$j$,$H$&$4$6$$$^$9(B):
Java$B%W%i%0%$%s$N%"%C%W%G!<%HG[I[$NLdBj$K$D$$$F(BCNET$B$KJs$8$i$l$F$$$^$7$?$,!":#F|8=:_!"%W%i%0%$%s$N<+F0%"%C%W%G!<%H5!G=!J%3%s%H%m!<%k%Q%M%k$K$h$k$b$N!K$,5!G=$7$F$$$J$$$h$&$G$9!#(B1.4.2_05$B$N%^%7%s$G
$B!!;n$7$K(B J2SE SDK 1.4.2_03 $B$r%$%s%9%H!<%k$7$F!"(BJava Plug-in $B%3%s%H%m!<%k%Q%M%k$+$i%"%C%W%G!<%H$7$F$_$?$i!"$=$3$K8=$l$k$N$O(B J2SE JRE 1.4.2_05-b04 $B$H$$$&$b$N$G$7$?!#$U$%$`!#$J$<(B 1.4.2_06 $B$G$O$J$$$N$G$7$g$&$M$(!#(B
2005.01.07 $BDI5-(B:
$B!!(BSYM05-001:
Sun Alert ID 57591:Java Runtime Environment (JRE)
($B%7%^%s%F%C%/(B, 2005.01.04)$B!#(BSymantec Gateway Security 5400 Series v2.0 / v2.0.1 $B!"(BSymantec Enterprise Firewall v8.0 $B$,3:Ev$9$k$=$&$G$9!#(B
$B!!(BCyrus IMAP Server $B$K(B 4 $B$D$N7g4Y!#967b
imapmagicplus $B%*%W%7%g%s$rM-8z$K$9$k$H!"(BPROXY $B$*$h$S(B LOGIN $B%3%^%s%I$G(B
stack buffer overflow $B$,H/@8!#(B
2.2.4 $B!A(B 2.2.8 $B$K1F6A!#(B
$BG'>ZA0$K96N,2DG=$G$"$k$?$a!"$3$N7g4Y$OFC$K=EBg!#(B
CVE: CAN-2004-1011
PARTIAL $B%3%^%s%I$N0z?t=hM}$K$*$$$F%a%b%jGKB;$,H/@8!#(B
2.2.6 $B0JA0$K1F6A!#(B
CVE: CAN-2004-1012
FETCH $B%3%^%s%I$N0z?t=hM}$K$*$$$F%a%b%jGKB;$,H/@8!#(B
2.2.8 $B0JA0$K1F6A!#(B
CVE: CAN-2004-1013
APPEND $B%3%^%s%I$,L$Dj5AF0:n$r0z$-$*$3$92DG=@-$,$"$k!#(B
2.2.7 $B$H(B 2.2.8 $B$K1F6A!#(B
$B!!(BCyrus IMAP Server 2.2.9 $B$G=$@5$5$l$F$$$k!#(B
fix / patch:
$B!!(BiCal 1.5.3 $B0JA0$K7g4Y!#(B
iCal $B$G%+%l%s%@!<$r3+$/$H$-!"$"$k$$$O(B import $B$9$k$H$-$K!"$=$N%+%l%s%@!<$K(B
alarm $B$,4^$^$l$F$$$F$b!"2?$N7Y9p$bI=<($5$l$J$+$C$?!#(B
alarm $B$K$O%W%m%0%i%`$r3+$$$?$j%a!<%k$rAw$C$?$j$G$-$k5!G=$,$"$k$?$a!"0-0U$"$k%+%l%s%@!<$K$h$C$FG$0U$N%3%^%s%I$,7Y9p$J$7$K
$B!!(BiCal 1.5.4 $B$G=$@5$5$l$F$$$k!#(BiCal 1.5.4 $B$G$O!"$=$N$h$&$J%+%l%s%@!<$r3+$/(B / import $B$9$k:]$K$O>5G'$r5a$a$k$h$&$K$J$C$?$h$&$@!#(B
$B!!(BWinamp
5.05 $B0JA0$K7g4Y!#(BIN_CDDA.dll $B$K(B stack buffer overflow $B$9$k7g4Y$,$"$j!"(B
$B:Y9)$7$?(B .m3u $B%U%!%$%k$rMxMQ$7$FG$0U$N%3!<%I$r\:Y(B: [Full-Disclosure] Winamp - Buffer Overflow In IN_CDDA.dll
$B!!(BWinamp 5.06 $B$G=$@5$5$l$F$$$k!#(B
2004.11.24 $BDI5-(B:
$B!!(BWinamp 5.06 $B$G$b7g4Y$,=$@5$5$l$F$$$J$$;]$,!"LdBjH/8+[Full-Disclosure] Winamp - Buffer Overflow In IN_CDDA.dll [Unpatched]$B!#LdBjH/8+
2004.12.06 $BDI5-(B:
$B!!(BWinamp 5.07 $B$,EP>l$7$F$$$^$9!#7g4Y$,=$@5$5$l$?$3$H$K$J$C$F$$$k$h$&$G$9!#(B
$B!!8m2r$r>7$-$d$9$$FbMF$@$C$?$N$G!"=q$-$J$*$7$^$7$?!#(B
$B=q$-D>$7$?$b$N(B: 57591: Security Vulnerability With Java Plug-in in JRE/SDK
$B!U(B
SANS ISC$B!#(B
RAID 5 $B$G(B 2 DISK $BF1;~%(%i!<$G$9$+!D!D!#(B
$B!U(B
$B%F%l%S%3%^!<%7%c%k;~Be$N=*_a(B
(ITmedia, 11/22)$B!#$"$?$i$7$$%S%8%M%9%b%G%k$,I,MW$G$9$M!D!D!#(B
$B!U(B
$B%A%jBgE}NN!"%V%C%7%e;a7YHwC4Ev
(asahi.com, 11/22)$B!#$I$3$^$G$$$C$F$b(B USA $B$O(B USA$B!#(B
$B!U(B
$B86H/!'(B
$BBQ?L@-$K#1#0#0#0G\$N:9!!86;RNO0BA44pHW5!9=$,;n;;(B
($BKhF|(B, 11/22)$B!#(B
$B!U(B
$B;00fJ*;:$,GS5$%,%9>t2=AuCV$N%G!<%?$r56Au(B
- $B;00fJ*;:!"GS%,%9=|5n$N@-G=56$k!!A4IJ2s<}!&8r49$X(B
(asahi.com, 11/22)
$B;00fJ*;:$OJ*N.2ql@jM-N($O%H%C%W$G!"Ls#43d$r@j$a$F$$$?!#(B
- $B%G%#!<%<%kt2=AuCV!";00fJ*;:$,5u56%G!<%?(B
($BFIGd(B, 11/22)
$B#2#0#0#3G/#1#07n$K%9%?!<%H$7$?ET$J$I$N%G%#!<%<%ke9b$O#1#9#42/1_$K$N$\$C$?!#(B
- $B!VN"@Z$j9T0Y$@!W;00fJ*;:$N5u56%G!<%?$GJ0$j$N@<(B
($BFIGd(B, 11/22)
- $B;00fJ*;:!"GS%,%9>t2=AuCV$G5u56%G!<%?Js9p(B
($BF|7P(B, 11/22)
- $BJ@
($B;00fJ*;:(B, 11/22)
$BK\7o$OJ@$A$K
$BL$$@A4MF$,L@$i$+$K$J$C$F$O$$$J$$$H$$$&$3$H$+!#(B
- DPF$B$*5RMMAk8}@_CV$K$D$$$F(B
($B;00fJ*;:(B, 11/22)
$B!U(B
$B2P>C$7%i%$%@!<;2>e!*=BBZ$J$s$N!"Ho:RCO$G$b3hLv4|BT(B
($BFIGd(B, 11/22)$B!#(B
$B"v%i%$%@!C$7%i%$%@!
$B!U(B
ACCS$B:[H=!"J[8nB&$OIT@5%"%/%;%96X;_K!$N5;=QE*2r
(Internet Watch, 11/22)
$B!U(B
$B8&5f3hF0$N<+M3$H%;%-%e%j%F%#(B
($BF|7P(B IT Pro / CRYPTO-GRAM, 2004.11.16)$B!#(B
$B!!$"$i$f$k2J3XJ,Ln$O9q:]2=$5$l$F$*$j!$%+%s%U%!%l%s%9$dBg3X$G$N8&5f3hF0$G$O!$<+M3$G%*!<%W%s$J>pJs8r49$,9T$o$l$k!#$3$&$7$?3hF0$,!$K\EZKI1R$KIT2D7g$J5;=Q$r:GBg8B?JJb$5$;$k!#$+$D$F%=O"$O8&5f3hF0$N<+M3$r9qFb$@$1$K@)8B$7$h$&$H$7$?$,!$$h$$$3$H$O2?$b$J$+$C$?!#2f!9$OF1$8E2$rF'$s$G$O$$$1$J$$!#(B
$B!!AmL3>J$NCf$N?M$O$o$+$j$^$7$?$+!#(B
$B!U(B
ejovinuwere's Journal
(ejovi.net, info from $B$?$L$-$sIOK3F|5-(B)
$B$=$3$G(BNuwere$B;a$O!"K\DsAJ$K$h$j!"F|K\$K$*$$$F:#8e$3$N$h$&$J8x8"NO$K$h$kK8329T0Y$,7+$jJV$5$l$J$$$h$&!":[H=$GLdBj$rL@$i$+$K$9$k$3$H$K$$$?$7$^$7$?!#(B
11$B7n(B22$BF|!"El5~COJ}:[H==j$K$FI=8=$N<+M3$N?/32$K4p$E$/B;32Ge=~@A5a$NAJ>Y$rDs5/$7$^$9!#(B
$B2<5-F|Dx$G5-
$B!!@oF.3+;O!#4XO"(B:
$B!U(B
[Unicode$B$H%;%-%e%j%F%#(B] $B$=$N(B1 ($BMU$C$QF|5-(B, 11/20)$B!#(B
$B!U(B
Sober$B%o!<%`$K!"$*?'5$O)@~$N?70!l(B
(CNET, 11/22)$B!#(B
$B!!$7$+$7!"%I%$%D8l7w$K=;$s$G$$$J$$8B$j!"%a!<%k$NFbMF$O$"$^$jL%NOE*$G$O$J$$!#(BSober.i$B$O!"%@%s%5!<$N%a%C%;!<%8$r(B.de$B!J%I%$%D!K$"$k$$$O(B.ch $B!J%9%$%9!K$N$h$&$J%I%$%D8l7w$N%I%a%$%s$K$@$1Aw?.$9$k$h$&%W%m%0%i%`$5$l$F$$$k!#(B
$B!!$J$!$s$@!"$,$C$/$j(B ($B0c(B)$B!#(B
$B!U(B
$B%U%#%C%7%s%0:>5=BP:v!"(B3$B3d$O!V$I$&$9$l$P$h$$$+J,$+$i$J$$!W!=!=%7%^%s%F%C%/D4::(B
(ITmedia, 11/19)
$B%7%^%s%F%C%/$O(B11$B7n(B19$BF|!"%$%s%?!<%M%C%H$NMxMQ]$K9T$C$?!V%*%s%i%$%s:>5=$K4X$9$kD4::7k2L!W$rL@$i$+$K$7(B
$B!!$I$3$GL@$i$+$K$7$?$s$@$m$&!#(B
$B%7%^%s%F%C%/:G?7%K%e!<%9%j%j!<%9(B
$B$K$O2?$b$J$$$h$&$J$N$@$,!#(B
$B%U%#%C%7%s%0:>5=$KqY$5$l$J$$$?$a$N?49=$($b=EMW!A%7%^%s%F%C%/D4::(B
(Internet Watch, 11/19) $B$G$bITL@3N!#(B
$B%7%^%s%F%C%/!"!V%;%-%e%j%F%#BP:v%=%U%H$@$1$G%*%s%i%$%s:>5=$OKI$2$J$$!W(B
(CNET, 11/19) $B$K$O!VF15=$K4X$9$kD4::7k2L$N@bL@2q!W$H$"$k$J$"!#(B
$B!U(B
$B!N(BWSJ$B!OF|K\$G$N(BiTunes Music Store$BDs6!$O!V$G$-$k$@$1Aa4|$K!W(B
(ITmedia, 11/19)$B!#(B
$B!!2;3Z%5!<%S%9N)$A>e$2$N=`Hw$O$$$D@0$&$N$+!"Ds6!$9$k3Z6J?t$O$I$NDxEY$+$K$D$$$F$OL$Dj$H%"%C%W%k9-Js$OIU$12C$($?!#(B
$B!!2A3J$O7hDj:Q$_!"$C$F%3%H(B?
$B!U(B
GPS$B$G5o>l=j$,DLCN$5$l$k7HBSEEOC!)(B
($B9bLZ9@8w!w<+Bp$NF|5-(B, 11/20)$B!#(B
$B!U(B
NHK$B$N8=>u$K$D$$$FK\$r>R2p$9$k(B ($B>>1:?8Li$N(BL/D, 11/10)$B!#(B
$B!U(B
$B8541K
(ESPIO!, 11/18)$B!#(B
$B%H%+%2$N%7%C%]@Z$j$G$9$i$J$$!"$N$+$b$7$l$J$$!#(B
$B!U(B
[aml 41898] $B#I#L#O$,4+9p(B $BF|K\$N;JK!!&7Y;!$OO+F/AH9g8"$r?/32(B$B!#(B
$B!XE4O)$N#7?M!Y(B$B$NOC$NLOMM!#(B
$B!U(B
$B%m%7%"$NCf1{=88"2=$KJF$,7|G0!!JF%m2qCL(B
(asahi.com, 11/21)$B!#$H$j$"$($:8@$C$F$_$k%F%9%H(B?
$B%W!<%A%sBgE}NN$O2qCLA0!"%a%G%#%"$K!V$$$+$J$k0UL#$G$b%m%7%"$,A4BN
$B!!$7$+$7!"8B$j$J$/$=$l$K6a$E$/$3$H$O$G$-$^$9$J!#(B
$B!U(B
$B%_%5%$%k7^7b!V3U5D>JN,!W$NK!2~@50F!!MhG/Ds=P$X(B
(asahi.com, 11/21)$B!#4V$K$"$o$J$1$l$P0UL#$J$$$G$9$+$i$M!#$^$"!"(BBMD $B$N>l9g!"H/
$B!U(B
$B$"$i$?$a$F%9%Q%$%&%'%"$d%"%I%&%'%"$K$D$$$FD4$Y$F$$$?$N$G$9$,!"%&%#%-%Z%G%#%"$N2r@b$,M%$l$F$$$k$h$&$K8+$($^$9(B
$B!!(Be-words $B$N2r@b(B$B$O$$$^$$$A$C$F46$8!#(B
$B!U(B
Ad-Aware SE$B$K$h$k%9%Q%$%&%'%"$N=|5nJ}K!(B
($B%"%@%k%H%5%$%HHo32BP:v$NIt20(B)
$B!vCm(B $B!'(B $B5l%P!<%8%g%s$N(BAd-aware 6.0$B$O(B2004$BG/(B11$B7n$NBh0l=5$G%5%]!<%H$,=*N;$5$l$^$9!#(B
$B!!$&$O!"$=$&$@$C$?$N$+!#$5$C$=$/(B Ad-Aware SE $B$KF~$l$+$(!#(B
$B!U(B
$B%;%-%e%j%F%#%"%+%G%_!<(B$B!"$*$)!"!V(B $B%"%/%;%9C5De(B $BCB@8HkOC!W$G$9$+!#(B12/5 $B$G$9$+!#$&$%!A!D!D;22C$OL5M}$+!D!D!#(B
$B!U(B
$B%"%U%,%s!"!V%"%X%s9q2H!W$K5ULa$j$N4m81@-$H!"9qO"(B
(CNN, 11/19)$B!#8@$o$s$3$C$A$c$J$$!"$H$$$&$d$D$G$9$J!#(B
$B!U(B
$B%S%s%i!<%G%#%sL>$G%M%C%H$KGzGKM=9p!"Bg3X#1G/@8BaJa(B
($BFIGd(B, 11/20)$B!#$3$&$$$&$3$H$9$k$H%j%"%k$G%?%$%[$5$l$k$C$F$3$H$,!"$^$@$o$+$i$J$$?M$,$$$k$s$G$9$M$(!#(B
$B$D!<$+!"%F%m%j%9%H$,!V;d$O%F%m%j%9%H$N!D!D!W$H$+8@$C$?$j$O$7$J$$$s$@$1$I$M!"$U$D$&!#(B
$BD;
$B$K$O!"$3$N7o$K$D$$$F$O2?$b$J$$$h$&$G$9!#(B
$B!!%;%-%e%j%F%#$JOC$H$7$F$O!"(B
FileVault $B$,M-8z$J>l9g$G$b<+F0%P%C%/%"%C%W$,@5>o$KF0:n$7$^$9!#(B
$B%^%/%m$r4^$`=qN`$r3+$/$H$-$N%;%-%e%j%F%#$,6/2=$5$l$^$7$?!#(B
SSL $B$r;HMQ$7$?(B SMTP $B$,6/2=$5$l$^$7$?!#(B
$B$"$?$j$+!#(Bimprove $B$NLu8l$O!V6/2=$9$k!W$h$j$b!V2~A1$9$k!W$NJ}$,E,@Z$J>l9g$,B?$$$H;W$&$N$@$,!#(B
$B!!$"$H!"(BOffice 2004 for Mac SP1 $B$K$D$$$F$O!"$3$s$JOC$b$"$k$=$&$G(B:
888136 - [XL2004] Excel 2004 for Mac $B$r=*N;$9$k;~$N%(%i!<(B "$BHsI=<(%b%8%e!<%k(B AutoExec $BFb$G%3%s%Q%$%k(B $B%(%i!<$,H/@8$7$^$7$?!#(B"
(Microsoft)$B!#(B
$B!!(BMac OS X $BMQ(B IE 5.2 $B$K$*$1$k(B $B>ZL@=q$N(B fingerprint $B$NI=<($K$*$$$F!"(B17 $B%P%$%HL\$,0[>o$K$J$k$3$H$,$"$kLOMM!#(B
1$B%P%$%HL\$+$i(B16$B%P%$%HL\$N>pJs$,@5$7$$>l9g$K$O;XLf>pJs$,@5$7$$$HH=CG$G$-$^$9$N$G(B $B!"8=>]$,H/@8$7$?:]$K$O(B 17 $B%P%$%HL\$OL5;k$7$F2<$5$$!#(B
$B!!$3$N2q$7$J$5$$!#(B
- ISA Server 2000 $B$*$h$S(B Proxy Server 2.0 $B$N@H
$B!!(B890097 - $B%^%$%/%m%=%U%H(B $B%;%-%e%j%F%#99?7%W%m%0%i%`(B MS04-039 $B$N%$%s%9%H!<%k8e$KJ#?t$N>c32$,H/@8$9$k(B
(Microsoft)
- IE 6$B$K?7$?$J%P%C%U%!%*!<%P!<%U%m!Z%3!<%I$O8x$K(B
$B!!%"%I%&%'%"20$5$s$b$3$N7g4Y$r;H$$$O$8$a$?$h$&$G$9(B:
$B!!(B62.4.84.45 $B$O$^$@@8$-$F$$$k$h$&$G$9!#(Bget $B$G$-$k$b$N$r8!::$7$F$_$k$H!"(B
- ClamAV 0.80 (main.cvd 28, daily.cvd 600) $B$O(B mmdom.exe $B$r(B Trojan.Dropper.Virmo-1 $B$H$7$F8!=P$7$^$7$?!#(B
- $B%H%l%s%I%^%$%/%m(B VSAPI v7.000-1011 (2.257.00)
$B$O(B minst.exe $B$r(B TROJ_DLOADER.R $B$H$7$F8!=P$7$^$7$?!#(B
- $B%^%+%U%#!<(B VSE 8.0i (engine 4320, dat 4409) $B$O(B minst.exe $B$r(B Vundo $B$H$7$F8!=P$7$^$7$?!#(B
- NOD32 (1.928) $B$O(B mmdom.exe $B$r(B Win32/Spy.Agent.NAD $B%H%m%$$H$7$F8!=P$7$^$7$?!#(B
- Sophos AntiVirus 3.87.0 $B$O2?$b8!=P$7$^$;$s$G$7$?!#(B
$B!U(B
$B%=%U%H%P%s%/!!8\5R>pJsN.=P;v7o!!623e(B2$BHo9p$KM-:aH=7h(B ($BKhF|(B, 11/19)$B!#(B
$B!U(B
$B
($BKhF|(B, 11/19)$B!#$&!<$`!#(B
$B!U(B
$B8D?M>pJsN.=P!!!VE0DlDI5Z!!8D?M>pJsN.=P;v7o!W!!:4!9LZ=S>0;a$,=PHG(B
($BKhF|(B, 11/19)$B!#$X$'!#(B
$B!U(B
$B%U%!%$%k8r49%=%U%H$rMxMQ$7$?(B
$B2;3Z%U%!%$%kIT@5%"%C%W%m!<%I%f!<%6!<$N(B
$BH/?.pJs3+<(@A5a
($BF|K\%l%3!<%I6(2q(B, 11/16)$B!#@oF.3+;O!#(B
$B!U(B
Sober.I $B$,%h!<%m%C%QJ}LL$GN.9T$C$F$k(B?
$B!U(B
$B8D?M>pJsJ]8n(B:
$BL5KIHw$J3X9;8=>l!!;D$5$l$?;~4V>/$J$/(B
($BKhF|(B, 11/17)
$B!U(B
AppRecon$B!#(B
$B%M%C%H%o!<%/>e$G2TF/$7$F$$$k%"%W%j$rC5$9%D!<%k$@$=$&$G$9!#(B
$B!U(B
ATK - Attack Tool Kit
3.0 $B$,=P$?$=$&$G$9!#(BVisual Basic $B$G=q$+$l$?(B GPL $B$J@H
$B!U(B
Fedora Core 3 $B$K(B WebDAV $BMQ$N%]%j%7!<$r@_Dj$7$h$&(B
($BOBI'$5$s$A$N#S#E#R#A$G$9$h(B)$B!#(B
FC3 $B$O$$$m$$$m$H%]%j%7!<$,B-$j$J$$$h$&$G$9$M!#(B
$B!U(B
USA $BBgE}NNA*5sOC(B
$B!!AGE($J9q$@$3$H!#(B
$B!U(B
$B@m3U$N7YHw6/2=!!3$>eJ]0BD#!"=d;kA%#2@IBN@)$K(B
($BN05e?7Js(B, 11/18)
$B!U(B
$BJULn8EOC(B
$BD4::!"%"%;%9BP>]$K!!@lLg2H!"H?BPGI!V4D6-GK2u!W(B
($BN05e?7Js(B, 11/18)
$BD4::9T0Y$=$l<+BN$,4D6-GK2u$K$D$J$,$k2DG=@-$,9b$$$K$b$+$+$o$i$:!"$J$<$+4D6-1F6AI>2A$NBP>]30$K$J$C$F$$$kLOMM!#FaGFKI1R;\@_6I$K$O$J$+$J$+AGE($J?MC#$,$$$i$C$7$c$k$4MM;R!#(B
$BH?BPGI$X$NGS=|7c2=!!6H
($BN05e?7Js(B, 11/18)
$B!!C14IB->l7z@_$,9T$o$l$?JULn8E5y9A2-$G$O8aA0$K9TF0$r;O$a$?%+%L!l$K6n$1$D$1$?J?NI$5$s$,@x?e$7!"C14I%Q%$%W$r$D$+$`$J$I$7$FK832$9$k$H!"6H
$BFaGFKI1R;\@_6I$+$i!"$H$C$F$bAGE($J;X<($,=P$F$$$?$s$G$7$g$&$+$M!#(B
$B!U(B
911 $B%\!<%$%s%0$rA\$;(B$B!#(B
$B6=L#?<$$:nIJ$N$h$&$G$9!#(B
$B%*%j%8%J%k%5%$%H(B
$B$G$O!V(BThe Director's Cut$B!WHG$,EP>l$7$F$$$k$h$&$G$9!#(B
$B!!(B$B#9#1#1Bh#2CFJ!2,$G=i8x3+!J(B11/19$B!K(B (peace2001.org)$B!#Bh(B 2 $BCF$bMQ0U$5$l$F$$$k$h$&$G$9!#(B
$B!U(B
Flaws in SP2 security features, part II
(heise.de)$B!#(B
Windows XP SP2 $B$G(B nmap $B$,$&$^$/F0$+$J$$(B (raw socket $B$N07$$$,JQ$o$C$?$N$G(B) $BOC$r2sHr$9$kJ}K!!#(Bnet stop SharedAccess $B$9$l$P$h$$$N$@$=$&$@!#(B
$B!U(B
MS$B$N%P%k%^!<(BCEO$B$,FM$-$D$1$?!V(BLinux$B$K$O(B228$B$NFC5v?/32!W@b(B
(ITmedia, 11/18)$B!#(BFUD $B$G$9$+!#(B
$B!!%P%k%^!<;a$O(BMicrosoft$B$N%=%U%H%&%'%"$K4X$9$k%;%-%e%j%F%#$X$NIT0B$O8XD%$5$l$?$b$N$@$H=R$Y$?!#(B
$B!!!V$o$l$o$l$N%=%U%H%&%'%"$O%*!<%W%s%=!<%9%=%U%H%&%'%"$h$j$b$:$C$H0BA4$@$H9M$($F$$$k!#$o$l$o$l$,8e$m=b$H$J$C$F!"$o$l$o$l$,=$I|$7$F$$$k$+$i!"$o$l$o$l$,:n$C$F$$$k$+$i!"$h$j0BA4$J$N$@!#%*!<%W%s%=!<%9$N%=%U%H%&%'%"$O!"C/$,:n$C$?$+$9$iJ,$+$i$J$$!W$H%P%k%^!<;a$O8l$C$?!#(B
$B!!!V$o$l$o$l$,8e$m=b$H$J$C$F!"$o$l$o$l$,=$I|$7$F$$$k$+$i!"$o$l$o$l$,:n$C$F$$$k$+$i!W$H!V$h$j0BA4!W$,7k$S$D$/$+$I$&$+$O!"@5D>$h$/$o$+$i$s$J$"!#(B
$B>/$J$/$H$b(B Microsoft $B$O!"(BIE $BJ}LL$N(B 0day $B%P%7%P%7>u67$K$O$&$^$/BP1~$G$-$F$$$J$$$h$&$K8+$($k$7!#F3F~%=%U%H$r7hDj$9$k:]$K!"(B
$B!X(B$B%;%-%e%j%F%#%[!<%k$rMxMQ$5$l$J$$$?$a$K!V(BInternet Explorer$B!W$N%b%8%e!<%k$r;H$o$J$$$3$H(B$B!Y(B
$B$H$+8@$o$l$A$c$&$h$&$J%=%U%H$r$D$/$C$F$k%H%3%m$C$F!"B>$K$"$j$^$9$+(B?
Windows XP SP2 $B$O$h$/$,$s$P$C$F$$$k$H$b;W$&$1$I!"$U$D$&$N4k6H$J$i!":#G/$$$C$Q$$$/$i$$$O%F%9%H$7$J$$$HF3F~$9$k5$J,$K$J$l$J$$$@$m$&$7!#(B
$B!!!V%*!<%W%s%=!<%9$N%=%U%H%&%'%"$O!"C/$,:n$C$?$+$9$iJ,$+$i$J$$!W$H$$$&$N$O$"$kJ}LL$G$O$=$N$H$*$j$J$N$@$,!"$=$l$G$b!"$I$s$J%3!<%I$+$O$o$+$k$s$@$h$M!#(B
$B!V$3$s$J%3!<%I$8$c$@$a$@!"%9%F%9%F!W$H$$$&H=CG$O!"%*!<%W%s%=!<%9$K$D$$$F$O$d$j$d$9$$$N$@$1$I!"(BMicrosoft $B@=IJ$K$D$$$F$O:$Fq$J$s$@$h$M!#(B
$B!U(B
$BJF(BOracle$B!"%;%-%e%j%F%#!&%Q%C%A$rDj4|4)9T2=(B
($BF|7P(B BP, 11/19)$B!#G/(B 4 $B2s$7$+=P$5$J$$$H$$$&8f?@Bw!#(B
$B!U(B
$B%U%j!<$N%"%s%A%&%$%k%9%=%U%H!V(BAVG Free Edition$B!W(Bv6$B$N8e7QHG(Bv7.0.289$B$,8x3+(B
($BAk$NEN(B, 11/16) $B$@$=$&$G$9!#(B
$B$J$*!"(B
AVG Free Edition 7 $B$N(B E-Mail Scanner $B$O(B APOP $B$r%5%]!<%H$7$F$$$J$$(B (Firewall & Forest $B7G<(HD(B)
$B$=$&$J$N$G!"$4Cm0U$/$@$5$$!#(B
$B!U(B
C6 : $B%$%s%?!<%M%C%H>e$NK!N'JY6/2q!!!V%M%C%H>e$NLBOG9T0Y$N8=>u$K$D$$$F!W(B [$B8aA0$NIt(B]
(Internet Week 2004)$B!#(BAntinny $B$K$h$k(B ACCS DDoS $BOC$N$h$&$G$9!#(B
$B!U(B
IIJ Technical WEEK 2004
$B4XO"(B
$B!!:#F|$N9`L\$K$O!VIT@5?/F~$NHo32D4::!W$J$s$F$N$b$"$j$^$9$M!#(B
$B!U(B
$B>pJs%;%-%e%j%F%#4pK\LdBj0Q0w2q(B $BBh#1
$BBg3X$rCf?4$H$7$?650i5!4X$G$N?M:`0i@.$NpJs%;%-%e%j%F%#>)3X6b(B ($B2>>N(B)$B!W$NAO@_$r8!F$!#(B
$B!U(B
@nifty$B!"5HED@o
(Internet Watch, 11/18)$B!#$J$!$s$@!"(B11/24 $B$+$i$8$c$s!D!D!#(B
$B!U(B
$B2/K|D9
(nikkansports.com, 11/19)$B!#(B400 $BK|DL(B / day $B!D!D!#$5$9$,$G$9!#(B
$B!U(B
$B@x?e4O?/F~LdBj$HF|Cf4X78(B (tanakanews.com, 11/19)
$B!!Cf9q$,@$3&$NBg9q$H$7$F$U$k$^$($k$N$O!"%"%a%j%+$KBP$9$k5$7s$M$,$"$^$j$J$/!"%"%a%j%+$,7y$&9q!9$H$N4X78$rL)@\$K$7$?$j!"%,%j%l%*$J$I%"%a%j%+$KBP93$9$k;v6H$K$b;22h$G$-$k<+M3$r$b$C$F$$$k$+$i$@!#F|K\$,Cf9q$KBP93$7$h$&$H;W$C$?$i!"F|K\$b%"%a%j%+$KBP$9$k5$7s$M$r$d$a$F308rE*$K$$$m$$$m$d$l$PNI$$!#@$3&$NB?6K2=$,$7$@$$$K3NDjE*$K$J$j!"F|K\$K$H$C$F$b308rE*$J2DG=@-$,9-$,$C$F$$$k!#$@$,!"F|K\$G$O@/I\$K$b!"%^%9%3%_$d%M%C%H>e$N8@O@3&$K$b!"$=$N$h$&$JH/A[$O$[$H$s$I$J$$!#(B
$B!U(B
$B%Q%&%(%k<-G$$NGX7J(B (tanakanews.com, 11/17)$B!#%V%l%"$NCGKvKb$G$9$+!D!D!#(B
$B!U(B
$B%^%$%/%m%=%U%H$,L5NA%a!<%k$r!V(Bhotmail.co.jp$B!W$KJQ99!"LBOG%a!<%kBP:v(B
($BF|7P(B BP, 11/18)$B!#:#8e!"?75,MxMQ
$B!U(B
$B%U%#%C%7%s%0$M$?(B
$B!U(B
$BIT@5%"%/%;%9(B $B2?$,6X;_K!$G=hH3$5$l$k$Y$-$+!!(BACCS$B;v7o$NK!Dn$+$i(B
($BKhF|(B, 11/18)$B!#(B
$B!!0lJ}!"J[8nCD$OKAF,DD=R$G!"IT@5%"%/%;%96X;_K!$N1?MQ$N$"$k$Y$-;Q$K$D$$$F$NO@$rE83+$7$?!#$=$NO@$r$+$$$D$^$s$G8@$($P!"IT@5%"%/%;%96X;_K!$H$$$&$N$O9T@/K!$K6a$$@-3J$r;}$C$F$*$j!"$I$N$h$&$J9T0Y$,IT@5%"%/%;%96X;_K!$KDq?($9$k$N$+$H$$$&$3$H$r87L)$KDj5A$5$l$J$1$l$P$J$i$J$$$H$$$&$b$N$G$"$k!#8!;!41$,!VHo9p$O(BACCS$B$N0U?^$7$F$$$J$$J}K!$G(BASKACCS$B$K%"%/%;%9$7$?!W$H$$$&E@$rB*$($FIT@5%"%/%;%9$@$H
$B!!$=$7$F%"%J%m%8!<$H$7$F!"8rDLK!5,$K4X$o$kLdBj$r>e$2$?!#8rDLK!$K$O!V8rDL0BA4$O]E*$J35G0$OB8:_$9$k$,!"!V8rDL0BA4$rZ$5$l$k!#(B
$B!!2?EYFI$s$G$b!";d$K$O!"J[8nCD
$B!!4XO"!#5-;v$O$$$:$l$b:4!9LZ=S>0;a!#(B
$B!U(B
$B%m%7%"$N:[H==j!"%&%$%k%9:n (ITmedia, 11/19)$B!#(B
$B:#G/$O%&%$%k%9$N:n
$B!U(B
$BJh>l$+$iAI$C$?(BSender ID
($BF|7P(B IT Pro, 11/18)
$B!U(B
$B99?7$5$l$?(BWindows Server$B$N%m!<%I%^%C%W$N$^$H$a(B
($BF|7P(B IT Pro, 11/18)
$B!U(B
Downloader-RK
($B%^%+%U%#!<(B) $B$M$?$N$D$E$-!#(B
Sophos $B$G$bBP1~$5$l$^$7$?(B: Troj/Dloader-EB$B!#(B
$B!!(BphpMyAdmin 2.6.0-pl2 $B0JA0$KJ#?t$N%/%m%9%5%$%H%9%/%j%W%F%#%s%07g4Y$,$"$k$=$&$G!"(B2.6.0-pl3 $B$GD>$C$?$=$&$G$9!#(B
$B!!(BZoneAlarm Security Suite / ZoneAlarm Pro $B$K7g4Y!#(B
ad-blocking $B5!G=$K7g4Y$,$"$j!"(Bweb $B%5%$%H>e$NFCuBV$K$J$k!#(B
$B!!(B2004.11.8 $B$KEP>l$7$?(B 5.5.062 $BHG$G=$@5$5$l$F$$$k!#(B
Check For Update $B$rMxMQ$7$F%"%C%W%G!<%H$9$l$P$h$$!#(B
$B!!(BSP2 $B$r4^$`(B Internet Explorer 6 $B$K(B 2 $B$D$N7g4Y$,$"$k!"$H$$$&;XE&!#(B
- Content-Location $B%X%C%@$r:Y9)$9$k$3$H$K$h$j!"%@%&%s%m!<%I%@%$%"%m%0$rI=<($5$;$J$$$h$&$K$9$k$3$H$,2DG=(B
- JavaScript $B4X?t(B execCommand() $B$rMxMQ$7$FFCDj$N7A<0$N%U%!%$%k$rJ]B8$9$k$H%(%i!<$K$J$k$3$H$rMxMQ$7$F!"(B"Save HTML Document" $B%@%$%"%m%0$KI=<($5$l$k%U%!%$%k3HD%;R$r56Au$9$k$3$H$,2DG=!#$?$@$7!"%U%)%k%@%*%W%7%g%s!VEPO?$5$l$F$$$k3HD%;R$OI=<($7$J$$!W$,M-8z$K$J$C$F$$$k$3$H$,>r7o(B ($B%G%U%)%k%H$GM-8z(B)$B!#(B
$B!!N>e$KJ]B8$5$;$3$H$,2DG=$H$J$k$H$$$&!#(B
$B!!2sHr$9$k$K$O!"%"%/%F%#%V%9%/%j%W%H$rL58z$H$7!"%U%)%k%@%*%W%7%g%s!VEPO?$5$l$F$$$k3HD%;R$OI=<($7$J$$!W$rL58z$K$9$k(B ($B%A%'%C%/$r30$9(B)$B!#(B
$B!!$J$*!"(BMS$B!"(BIE$B$N@H
(ITmedia, 11/18) $B$N$h$&$K!V(Bsecunia $B$,%P%i$7$?!W$H4*0c$$$7$F$$$k?M$,$$$k$h$&$@$,!"(B
secunia $B$,Js$8$?7g4Y$rH/8+$7$?$N$O(B cyber flash $B$H$$$&!"(Bsecunia $B$N30$N?M$NLOMM!#(B
$B40A4L$8x3+$J$i(B secunia $B$OJs$8$J$$$@$m$&$+$i!"$I$3$+$G$O>\:Y$,8x3+$5$l$F$$$k$N$@$m$&(B ($B21B,EY(B 200%)$B!#(B
2004.11.25 $BDI5-(B:
$B!!(BInternet Explorer 6.0 SP2 File Download Security Warning Bypass Exploit
(k-otik.com)$B!#>e5-$K$*$1$k!"8e$B%F%9%H%Z!<%8(B
$B$r$D$/$j$^$7$?!#(B
$B!!%^%+%U%#!<$O$3$N(B exploit $B$KBP1~$7$?$h$&$G$9(B:
Exploit-NotFound$B!#(B
$B!!(BFreeBSD $B$KIUB0$N(B fetch $B%3%^%s%I$K7g4Y!#@0?t%*!<%P!<%U%m!<$,860x$K$h$k(B buffer overflow $B$,H/@8!#96N,%5!<%P$K(B fetch $B$G@\B3$7$?>l9g$K!"(Bfetch $BF0:n8"8B$K$h$jG$0U$N%3!<%I$r
$B!!(BFreeBSD 4.8 / 4.10 / 5.2 / 5.3 $BBP1~$N(B patch $B$,MQ0U$5$l$F$$$kB>!":G?7$N(B RELENG_4_7 / RELENG_5_0 $B0J9_$G=$@5$5$l$F$$$k!#(B
$B!!(BShuriken Pro3
$B$K7g4Y!#EE;R=pL>%a!<%k$K$*$$$F!">ZL@=q$NEE;R%a!<%k%"%I%l%9$H!"Aw$i$l$F$-$?EE;R%a!<%k$K5-:\$5$l$?EE;R%a!<%k%"%I%l%9$,0[$J$C$F$$$F$b7Y9p$,I=<($5$l$J$$$?$a!"ITE,@Z$JEE;R=pL>%a!<%k$r@5Ev$HH=CG$7$F$7$^$$$+$M$J$$!#(B
$B!!(B2004.11.16 $B0J9_$N(B Shuriken Pro3 $B%"%C%W%G!<%H%b%8%e!<%k(B$B$K$h$jBP1~$5$l$F$$$k!#(B
Shuriken Pro3 $B$K$O(B
Shuriken Pro3 $B!"(BShuriken Pro3$B!!(B/R.2$B!"(BShuriken Pro3 /R.2 [$B%Y%j%5%$%s(B $B%;%-%e%j%F%#%a!<%k%;%C%H(B]$B$G%G%8%?%k=pL>IU$-$G%a!<%k$rAw?.$7$?:]$K]$K$D(B
$B$$$F(B
$B$H$$$&OC$b$"$j!"$3$l$K$D$$$F$O(B 2004.06.30 $B0J9_$N%"%C%W%G!<%H%b%8%e!<%k$GBP1~$5$l$F$$$k$h$&$G$9$M!#(B
$B!!(BBecky! S/MIME plug-in
1.03 $B0JA0$K7g4Y!#(B$B>ZL@=q%A%'%$%s(B$B$d>ZL@=q$NM-8z4|4V$,8!>Z$5$l$J$$$?$a!"<+8J=pL>>ZL@=q$rMxMQ$7$?:>>NEE;R=pL>%a!<%k$K5$$,$D$+$J$+$C$?$j!"4|8B@Z$l$N>ZL@=q$K$h$k=pL>$K5$$,$D$+$J$+$C$?$j$9$k!#(B
$B$^$?!">ZL@=q$NEE;R%a!<%k%"%I%l%9$H!"Aw$i$l$F$-$?EE;R%a!<%k$K5-:\$5$l$?EE;R%a!<%k%"%I%l%9$,0[$J$C$F$$$F$b7Y9p$,I=<($5$l$J$$$?$a!"ITE,@Z$JEE;R=pL>%a!<%k$r@5Ev$HH=CG$7$F$7$^$$$+$M$J$$!#(B
$B!!(BBecky! S/MIME plug-in 1.04 $B$G=$@5$5$l$F$$$k!#(BBecky! S/MIME plug-in 1.04 $B$O(B 2004.09.20 $B$K:n@.$5$l$F$$$k$h$&$G$9$M!#(B
$B!!(BInterScan for Lotus Notes 2.51, 2.51J, 2.6, 2.6+SP1 $B$K7g4Y!#(B
$B4IM}
$B!!(Bpatch $B$O:#$N$H$3$mB8:_$7$J$$$h$&$@!#2sHrJ}K!$,5-$5$l$F$$$k$N$G!"$$$:$l$+$NJ}K!$r
- Apache <= 1.3.32 mod_include local buffer overflow Exploit
$B!!(Bfix / patch:
- Bash scripts run via Sudo can be subverted
$B!!$I$&$d$i(B sudo 1.6.8p2 $B$OIT==J,$@$C$?$h$&$G!"(Bsudo 1.6.8p3 $B$,=P$F$$$^$9!#(B
1.6.8p2 $B$G=$@5$5$l$?$O$:$N(B
549) Bash exported functions and the CDPATH variable are now stripped from
the environment passed to the program to be executed.
$B$,(B 1.6.8p3 $B$G$O(B
549) Bash exported functions are now stripped from the environment passed
to the program to be executed.
$B$H$J$C$F$*$j!"?7$?$K(B
550) The CDPATH variable is now stripped from the environment passed
to the program to be executed.
551) Fix temp file generation on systems where the _PATH_VARTMP macro
lacks a trailing slash.
$B$,DI2C$5$l$F$$$^$9!#$D$^$j!"(B1.6.8p2 $B$G$O(B CDPATH $B$^$o$j$,L$=$@5$G$"$k!"$H!#(B
$B$&$%!"(B1.6.8p2 $B$rF~$l$^$/$C$?$N$K!D!D!#(B(T_T)
$B!!L@F|$N$3$N%Z!<%8$N99?7$OB?J,$"$j$^$;$s!#(B
$B!U(B
[aml 41850] $BCf9q$NL1Mp$KCmL\$r!*(B$B!#(B
$BFIGd$N$B!NCf9q935DA{F0!O!V!X
$B$G$9$M!#(B
$B!U(B
$B%$%i%/GIJ<1d4|0FH]7h!"%O%s%,%j!<$OG/FbE1B`(B
(asahi.com, 11/16)$B!#$5$h$&$J$i!#(B
$B!U(B
$BHsIpAu!&L5Dq93$N%$%i%/?MIi=}
(asahi.com, 11/16)$B!#$=$iMh$?!#$3$s$J$N$O!"$=$l$3$=!VI9;3$N0l3Q!W$J$N$G$7$g$&$M!#(B
$B!U(B
$B%*%i%s%@73E1B`8e$N%5%^%o(B $B%$%i%/ItBb$,<#0B0];}(B
($BCfF|(B, 11/13)$B!#%$%i%/73$G$@$$$8$g$&$V$J$s$G$9$+$M!#(B
$B!U(B
IT$B@oN,K\It0Q0w2q!'(B
60$B?M5,LO$N9q2H>pJs%;%-%e%j%F%#%;%s%?!
($BKhF|(B, 11/16)$B!#$"$l(B? 100 $B?M$H$+8@$C$F$^$;$s$G$7$?$C$1(B?
$B4XO"(B: $B>pJs%;%-%e%j%F%#4pK\LdBj0Q0w2q!VBh(B1$B
(MYCOM PC WEB, 11/16)$B!#(B
$B!U(B
$BCf9q!"86@x$NNN3$?/HHG'$a$k!V0d48!"8m$C$FF~$C$?!W(B
(asahi.com, 11/16)$B!#0U30$HAGD>$KG'$a$?$h$&$J!#(B
$BNN3$?/HH$N86@x!"Cf9q4pCO$KF~9A!D1R@1>pJs$J$I$G3NG'(B
($BFIGd(B, 11/16)$B!#!VF|JF$N1R@1>pJs!W$G$9$+!#(B
$B!U(B
$B%&%$%k%9%P%9%?!<(B $B%3!<%]%l!<%H%(%G%#%7%g%s(B: $B%$%s%F%k(B Itanium / Itanium 2 $B%W%m%;%C%5$X$NBP1~$K$D$$$F(B
($B%H%l%s%I%^%$%/%m(B)$B!#7k6I$I$l$bBP1~$7$F$J$$$s$8$c$s!D!D!#(B
$B!U(B
Mass deploying Osiris
(linuxsecurity.com, 2004.10.18)$B!#(B
$B!U(B
DLL Help (Microsoft)$B!#(B
2.0 $B$@$=$&$G$9!#(B
$B!U(B
Virtual Server 2005 $BFCJLDs6!%-%c%s%Z!<%s(B
(Microsoft)$B!#$X$'!#(Bget $B$7$F$*$+%J%$%H!#(B
$B!U(B
$B?73c8)Cf1[CO?L$NHo:RCO$K3X$V!H6/$$DL?.!I$N
($BF|7P(B IT Pro, 11/13)$B!#$h$/$^$H$^$C$F$$$F=u$+$k$J$"!#(B
$B!U(B
$B!Z:#=5$N(BSecurity Check$B![%9%Q%$%&%(%"$K$4MQ?4!A6n=|:n6HBN835-!A(B
($BF|7P(B IT Pro, 11/12)$B!#?M@8$$$m$$$m!"%9%Q%$%&%'%"$b$$$m$$$m!#(B
$B!U(B
$BCx:n8"J,2J2qK!@)LdBj>.0Q0w2q!JBh#32s!K5D;vO?(B
($BJ82J>J(B)$B!#(B
$BCx:n8"K!2~@5MWK>;v9`$KBP$9$k0U8+Jg=8$N7k2L$K$D$$$F(B
$B$J$I$,7G:\$5$l$F$$$^$9!#(B
$B
(The Trembling of a Leaf, 11/15)
$B$K!"35;;E}7W$,7G:\$5$l$F$$$^$9!#(B
$B!!(B$BCx:n8"K!2~@5MWK>;v9`$KBP$9$k3FI\>J$N0U8+$K$D$$$F(B
$B$b$*$b$7$m$$!#(B
(100) $B%W%m%0%i%`$*$h$S%G!<%?%Y!<%9$NCx:nJ*$OCx:n $B$H$$$&OC$,$"$C$?$s$G$9$M!#(B
$B!U(B
$B$I$&$J$k!)(B $B%a!<%k$NAw?.Z(B
($BF|7P(B IT Pro, 11/15)
$B!U(B
$B!VLBOG%a!<%k$X$NBP1~$N:_$jJ}$K4X$9$k8&5f2qCf4V$H$j$^$H$a0F!W(B
$B$KBP$9$k0U8+Jg=8(B
($BAmL3>J(B, 11/15)$B!#(B
$B!U(B
$B$*5RMM$N>pJs$,30It$+$i1\Mw$G$-$k>u67$K$"$C$?;v>]$K$D$$$F(B
(NTT $B@>F|K\Bg:e;YE9(B, 11/16)$B!#(B
$B$J$<$+(B GIF $B2hA|$rE=$C$?$@$1$N(B web $B%Z!<%8!#;k3P>c37
$B!U(B
Trend Micro Network VirusWall 2500
($B%H%l%s%I%^%$%/%m(B) $B$H$$$&$b$N$,=P$k$N$@$=$&$G!#(B
$B!!(BTrend Micro Network VirusWall 300
$B$N(B
$BHNGdBeM}E9(B
$B$O$^$@L@5-$5$l$F$$$^$;$s$M!#(B
$B!!(BImageMagick
6.1.1 $B0JA0$K7g4Y!#(BEXIF $B7A<0%U%!%$%k$N=hM}$K$*$$$F(B buffer overflow $B$9$k7g4Y$,$"$j!"96N,(B EXIF $B%U%!%$%k$K$h$C$FG$0U$N%3!<%I$NCAN-2004-0981
$B!!(BImageMagick 6.1.2 $B0J9_$G=$@5$5$l$F$$$k!#(B
ChangeLog
$B$N(B
2004-10-25 Daniel Kobras <kobras@debian.org>
* Fix EXIF code to prevent an overflow of the ifdstack array by one entry.
$B$,$3$N=$@5!#(B
fix / patch:
$B!!(B[memo:7884] Yahoo!$B$rAu$C$?F|K\8l%U%#%C%7%s%0%a!<%k(B
$B$G8l$i$l$F$$$k%U%#%C%7%s%0%a!<%k$NOC!#(B
[memo:7890]
$B$K$h$k$H!"$3$N%U%#%C%7%s%0$O(B Yahoo! $B%a!<%k(B$B$KB8:_$9$k%/%m%9%5%$%H%9%/%j%W%F%#%s%0@HpJs$r[memo:7895] $B$K$h$k$H!"56%5%$%H$K$b7g4Y$,$"$k$?$a!"56%5%$%H$KAw$i$l$?$O$:$N(B ID / password $B>pJs$,!"qY$5$l$F$$$kB>$N(B Yahoo! $B%f!<%6$KEO$C$F$7$^$&>l9g$,$"$kLOMM!#(B
$B!!2sHrJ}K!$H$7$F$O!"(Bweb $B%V%i%&%6$G(B JavaScript $B$rL58z$H$9$l$P$h$$$h$&$G$9(B
[memo:7892]$B!#$7$+$7(B JavaScript $BL58z$J(B web $B%V%i%&%6$G(B Yahoo! $B%a!<%k$K%"%/%;%9$9$k$H!"!V$4MxMQ$N%V%i%&%6$N(BJavaScript$B$N@_Dj$,L58z$K$J$C$F$$$k>l9g$O2<5-$N$C$F!"(BJavaScript$B$N@_Dj$rM-8z$K$7$F$/$@$5$$!W$H8@$o$l$F$7$^$$$^$9$M!#(B
2004.12.06 $BDI5-(B:
$B!!>\:Y$,8x3+$5$l$F$$$^$9(B:
$B%d%U!<$+$i$NDLCN$rAu$C$?F|K\8l%U%#%C%7%s%0$G2?$,5/$-$F$$$?$+(B ($B9bLZ9@8w!w<+Bp$NF|5-(B, 2004.12.05)$B!#(B
$B!!(BSamba 3.0.7 $B0JA0$N(B 3.0.x $B$K7g4Y!#(B
$B:Y9)$7$?(B TRANSACT2_QFILEPATHINFO $B%j%/%(%9%H$K$h$j(B UJNICODE $B%U%!%$%kL>$G$N(B buffer overflow $B$,H/@8!"(Bremote $B$+$iG$0U$N%3!<%I$NCAN-2004-0882
$B!!(BSamba 3.0.8 $B$G=$@5$5$l$F$$$k!#$^$?(B Samba 3.0.7 $BMQ$N(B
patch
$B$,MQ0U$5$l$F$$$k!#(B
$B!!(BIPSwitch IMail 8.13 $B$K7g4Y!#D9Bg$J(B DELETE $B%3%^%s%I$K$h$j(B buffer overflow $B$,H/@8$9$k$?$a!"(BIMail $B$NG'>Z$rDL2a$G$-$k%f!<%6$,!"(BIMail $B>e$GG$0U$N%3!<%I$r
$B!!:G?7$O(B
8.14
$B$N$h$&$@$1$I!"$3$N7g4Y$,=$@5$5$l$F$$$k$N$+$I$&$+$O$h$/$o$+$i$J$$!#(B
$B>pJs$O(B
Support $B$N%Z!<%8(B
$B$K$$$m$$$m$"$k$_$?$$$J$s$@$1$I!#(B
$B!!(BWindows $BHG$N(B Skype $B$K7g4Y!#(Bcallto: URI $B$NThe vulnerability affects versions 1.0.*.95 through 1.0.*.98
$B$H=q$$$F$$$k$,!"(BWindows $BHG(B Skype $B$N(B Change Log
$B$r8+$k8B$j!"$=$l$K9gCW$9$k$N$O(B 1.0.0.97 $B$N$_!#(B
$B!!:G?7$N(B Skype 1.0.0.100 $B$G=$@5$5$l$F$$$kLOMM!#(B
$B!!4XO"(B: [Full-Disclosure] Skype callto:// BoF technical details
$B!!(Bsudo 1.6.8p1 $B0JA0$K7g4Y!#(B
sudo $B$G(B bash $B%9%/%j%W%H$rl9g!"(Blocal user $B$K$h$k8"8B>e>:$,2DG=$JLOMM!#(Bsudo 1.6.8p2 $B$G=$@5$5$l$F$$$k!#$^$?!"(Bsudoers $B%U%!%$%k$G(B
Defaults env_reset
$B$r@_Dj$9$k$3$H$G2sHr$G$-$k!#(B
2004.11.18 $BDI5-(B:
$B!!$I$&$d$i(B sudo 1.6.8p2 $B$OIT==J,$@$C$?$h$&$G!"(Bsudo 1.6.8p3 $B$,=P$F$$$^$9!#(B
1.6.8p2 $B$G=$@5$5$l$?$O$:$N(B
549) Bash exported functions and the CDPATH variable are now stripped from
the environment passed to the program to be executed.
$B$,(B 1.6.8p3 $B$G$O(B
549) Bash exported functions are now stripped from the environment passed
to the program to be executed.
$B$H$J$C$F$*$j!"?7$?$K(B
550) The CDPATH variable is now stripped from the environment passed
to the program to be executed.
551) Fix temp file generation on systems where the _PATH_VARTMP macro
lacks a trailing slash.
$B$,DI2C$5$l$F$$$^$9!#$D$^$j!"(B1.6.8p2 $B$G$O(B CDPATH $B$^$o$j$,L$=$@5$G$"$k!"$H!#(B
$B$&$%!"(B1.6.8p2 $B$rF~$l$^$/$C$?$N$K!D!D!#(B(T_T)
2004.11.19 $BDI5-(B:
$B!!$H$+8@$C$F$$$k4V$K(B sudo 1.6.8p4 $B$,=P$^$7$?$h!#(B
552) The KRB5CCNAME environment variable is preserved during sudo
execution for password lookups that use GSSAPI.
$B$@$=$&$G$9!#(B
fix / patch:
$B!U(B
$B=;4p%M%C%H?/F~J$,Fq?'(B
(asahi.com, 11/12)$B!#$J$s$8$c$=$j$c!A!#(B
$B!U(B
$BAH?%HH:aBP:vMW9K$N@)Dj$K$D$$$F(B
($B7Y;!D#(B, 11/10)$B!#(B
$B%S%i$rG[$C$?$@$1$GBaJa!&5/AJ$5$l$??M!9(B
$B$O!"H`$iE*J,N`$G$O!V(B($B%+(B) $BpJs$r<}=8!&J,@O$7$F$$$l$P!"$b$C$HB>$K$d$k$Y$-$3$H$,$"$k!"$3$H$,$o$+$k$N$G$O$H;W$&$N$@$,!#(B
$B!U(B
F-Secure
$B$b(B
Bofra
$B$KL>>N$rJQ99$7$F$^$9$M!#(B
$B!U(B
833594 - "Windows Installer Clean Up" $B$rMxMQ$7$?%H%i%V%k%7%e!<%F%#%s%0(B
(Microsoft)
$B!U(B
$B6d9T$GBT$AIz$;(B--$B%*%s%i%$%s%P%s%/MxMQ
(CNET, 11/12)$B!#MW$O%-!<%m%,!<(B?
$B!U(B
VISA $B%U%#%C%7%s%0$M$?(B
$B!U(B
$B$O$F$J!"=;=jEPO?$K4X$7$F9-$/0U8+$rJg=8(B
(ITmedia, 11/11)$B!#$U$%$`!#(B
$B!U(B
$B!V(BSP2$B$K(B10$B7o$N@H
(ITmedia, 11/12)$B!#(B
$B85%M%?(B: Finjan Software Warns of Ten New Vulnerabilities in Windows XP SP2
(Finjan Software, 11/10)$B!#(B
$B!U(B
$BCf9q3$73@x?e4O$,NN3$?/HHOC(B
$B!U(B
$B%$%i%/J}LL(B
$B!U(B
$B4Z9q$N%&%i%sG;=L!"HyNL$J$,$iJ<4o5i$b!!#I#A#E#AJs9p(B
(CNN, 11/12)$B!#$X$'!#(B
$B!U(B
$B%&%$%k%9BP:v%=%U%H$N99?72A3J>e>:$NM}M3$O!)(B
(ITmedia, 11/11)$B!#(B
Analyst's Diary (viruslist.com)
$B$N(B AV products are NOT all the same (November 11, 2004 | 17:34 MSK)
$B$,$3$N5-;v$r
$B!U(B
$BBg:eI\7Y$N7YItJd!"(B2,146$B?MJ,$NJdF35-O?$rJ]B8$7$?7HBS7?%a%b%j$rJ6<:(B (Internet Watch, 11/12)$B!#(B
$B!U(B
[FreeBSD-users-jp 81722] Re: Accusys ACS-7500$B!"(B
[FreeBSD-users-jp 81723] Re: Accusys ACS-7500$B!#(B
RAID $BOC!#(B
$B$-$s$M$3;a$,!V$&$A$N@=IJ!W$H8@$C$F$$$k$b$N$K$D$$$F$O!"$?$H$($P(B
[FreeBSD-users-jp 81584]
$B$H$+(B
[FreeBSD-users-jp 81596]
$B$K8@5Z$,$"$k!#(B
$B$3$N%9%l%C%I$OA4BN$H$7$F6=L#?<$$$G$9!#(B
$B!!(BVERITAS Cluster Server Solaris $BHG(B / Linux $BHG$K7g4Y!#(B
local user $B$,(B root $B8"8B$rC%
$B!!(BMozilla Firefox $B$N@5<0HG(B 1.0 $B$G$O!"%W%l%j%j!<%9HG$KB8:_$7$?!"(B
Known Vulnerabilities in Mozilla
$B$K$O5-:\$5$l$F$$$J$$(B 3 $B$D$N7g4Y$,=$@5$5$l$F$$$k$=$&$@!#(B
$B!!(BFirefox $BMxMQ
$B!!(BCISCO IOS 12.2(18)EW, 12.2(18)EWA, 12.2(14)SZ, 12.2(18)S, 12.2(18)SE, 12.2(18)SV, 12.2(18)SW $B$K7g4Y!#(BDHCP $B%5!<%P(B / DHCP $B%j%l!<%(!<%8%'%s%H$rF0:n$5$;$F$$$k(B (no service dhcp $B$7$F$$$J$$(B) $B>l9g$K!"FCDj$N:Y9)$7$?!"G[Aw$G$-$J$$$h$&$J(B DHCP $B%Q%1%C%H$rAw$i$l$k$H!"$=$l$,F~NO(B queue $B$KN/$j$D$E$1$F$7$^$&!#$=$N$h$&$J%Q%1%C%H$G(B queue $B$,Kd$a$D$/$5$l$k$H(B DoS $B>uBV$K$J$C$F$7$^$&!#(B
$B!!(BDHCP $B$,I,MW$J$1$l$P(B no service dhcp $B$9$k$3$H$G$3$N7g4Y$r2sHr$G$-$k!#$^$?(B ACL $B$rMxMQ$9$k$3$H$G!"967b$r.$5$/$9$k$3$H$,$G$-$k!#(B
$B!!BP1~$H$7$F$O!"=$@5HG$N(B IOS $B$,MQ0U$5$l$F$$$k$N$G!"$=$l$KF~$l$+$($l$P$h$$!#(B
$B!!4XO"(B:
$B!!(Bapache 2.0.35$B!A(B2.0.52 $B$K7g4Y!#BgNL$N6uGr%j%/%(%9%H$rAw$k$H!"(Bapache $B$,(B DoS $B>uBV$K$J$C$F$7$^$&!#(B
$B!!:G?7$N(B apache 2.0.x $B3+H/HG$G$O=$@5$5$l$F$$$kLOMM!#(B
fix / patch:
2005.02.11 $BDI5-(B:
$B!!(BApache 2.0.53 $B$,EP>l$7$?!#(B
CHANGES_2.0
$B!!$3$N$X$s$NOC(B:
$B!!;XE&
$B!!(BNorton AntiVirus 2005 $BMQ$N(B patch $B$,$"$j!"%5%]!<%H$+$iF~
$B!U(B
$B!V6%9gB>
($BF|7P(B IT Pro, 11/10)$B!#(B
SmartFilter $B$H8@$($P!":G6a$G$O(B
$B$@$a$@$aF|5-$r%V%m%C%/$7$?(B$B$3$H$GM-L>$K$J$j$^$7$?$M(B
($B$=$N8e(B$B$^$C$H$&$J%+%F%4%j$KF~$l$i$l$?(B$B$h$&$G$9$,(B)$B!#(B
$B%7%'%"$,9b$$$@$1$K!"$$$m$s$JJ}LL$K1F6A$7$A$c$&$s$G$9$h$M!#(B
$B!U(B
[aml 41770] $B!XE4O)$N#7?M!Y$N$40FFb(B$B!#$3$l$^$?8x0B$G$9$+!D!D!#(B
$B!U(B
$BCO5e29CH2=!"JFD4::@8J*?t$K1F6A$r3NG'(B (WIRED NEWS, 11/11)$B!#(B
$B;~4V$O$b$&$[$H$s$I$J$$$N$K!"4D6-%F%m9q2H$,$N$5$P$C$F$$$k$7$J$"!#(B
$B!U(B
$B0[>o5$>]$K=1$o$l$kCf9q(B (WIRED NEWS, 11/11)$B!#(B
$B!U(B
[aml 41784] $B3KGQ4~J*M"AwNs
$B!U(B
[Full-Disclosure] bash-3.0-18 FC3 + syslog patch$B!#$=$&$$$&$b$N$@$=$&$G$9!#(B
$B!U(B
$BLBOG%a!<%k$N5,@)K!6/2=$X!$AmL3>J$N8&5f2q$,Cf4V$H$j$^$H$a0F(B
($BF|7P(B IT Pro, 11/10)
$B!U(B
Eudora
6.2 ($B1Q8lHG(B) $B$,=P$?$=$&$G$9!#(B
6.2 $B$K$O(B
ScamWatch
$B$H$$$&BP(B phishing $B5!G=$,Ec:\$5$l$F$$$k$=$&$G$9!#6L2,$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
VISA $B%U%#%C%7%s%0$M$?(B
$B!!google $B%D!<%k%P!<(B$B$KIUB0$N%]%C%W%"%C%W%V%m%C%/5!G=$O!"$3$N>l9g8z$-$^$;$s$M!#(B
$B$G$b(B$BL\$G8+$k!V%"%I%l%9%P!<56B$7?!W%U%#%C%7%s%0:>5=$N
(ITmedia, 11/11) $B$K$"$k$h$&$K!"(B
google $B%D!<%k%P!<(B ($B$G$J$/$F$b!"2?$i$+$N%D!<%k%P!<$b$N(B) $B$,$"$l$P!"0LCV$,%:%l$k$*$+$2$G56Au$K5$$,$D$/$3$H$O$G$-$^$9!#(B
$B!!$7$+$7$3$N%a!<%k!"(BContent-Type: text/html; charset="iso-8859-1"
$B$GAw$i$l$F$k$8$c$J$$$G$9$+!#J8;z2=$1$7$?>uBV$GI=<($9$k$N$,@5$7$$=hM}$@$H;W$&$N$G$9$,!#(B($BF;M}$G5$$,$D$+$J$$$o$1$@!D!D(B)
$B!!$"$H!"Ev3:(B web $B%Z!<%8$r1\Mw$9$k$H!"%^%+%U%#!<(B VirusScan Enterprise $B$O(B
JS/Stealus.gen $B$H$7$F8!=P$7$^$9$M!#%9%/%j%W%H$N
$B!!%H%l%s%I%^%$%/%m(B $B%&%$%k%9%P%9%?!<(B 2004 $B$@$H(B
JS STEALUS.A $B$H$7$F8!=P$9$k$N$G$9$,!"%"%I%l%9%P!<56Au<+BN$O9T$o$l$F$7$^$$$^$7$?!#(B
$B$7$+$b$J$<$+!V(BJS STEALUS.A$B!W$O%H%l%s%I%^%$%/%m$N%&%$%k%9%G!<%?%Y!<%9$K$OB8:_$7$J$$$h$&$G$9!#(B
$BFf!#(B
$B!!(BNOD32 $B$H(B eTrust AntiVirus 7.0 $B$O2?$b8!=P$7$^$;$s$G$7$?!#(B
$B!U(B
$B:G?7$N(BMyDoom$B0!
(CNET, 11/11)$B!#(Bquick response $B$OK>$a$J$$!"$H$$$&0UL#$G!V(BIE $B$O;H$($J$$!W$HH=CG$9$k$N$O@5$7$$$H;W$&$7!#(B
$B$=$N!V(BMyDoom$B0!l$7B3$1$F$$$k$h$&$G(B:
$B!U(B
$BBg;3$5$s$+$i(B ($B$"$j$,$H$&$4$6$$$^$9(B)
$B!!(BFirefox $B$N7o$J$s$G$9$,!"(BBugzilla $B$r(B spoofing $B$G8!:w$9$k$H!";3$N$h$&$K%P%0$,Ns5s$5$l$^$9!#(B
$B!!%;%-%e%j%F%#(Bmemo$B$Ge$2$i$l$F$$$?%"%s%+!
$B!!(BFirefox $B$,(B IE $B$h$j$O%/%j%F%#%+%k$J4m81@-$,>/$J$$$3$H$O;d$bG'$a$^$9$,!"7h$7$F40A4$K0BA4$J%V%i%&%6$G$J$$$3$H$O$?$7$+$G$9!#(B
$B!!$"$^$j%a%G%#%"$G(B Firefox $B$O0BA4$@!"$H6/D4$7$J$$J}$,$$$$$H9M$($F$$$^$9!#(B
$B!U(B
$B!V86H/;v8N$KHw$($F%h%&2=%+%j%&%`$r!W7W2h$N8=>u(B
(WIRED NEWS, 11/10)$B!#(B
$B%h%&2=%+%j%&%`(B ($B!J:b!K86;RNO0BA48&5f6(2q(B $BJ|
$B$I$l$/$i$$$N4|4V0{$_B3$1$l$P$$$$$N$@$m$&$+!#!V$3$Nl$+$i(B30$B?t%-%m%a!<%H%k7wFb$K$$$k>l9g!"(B28$B>{!=!=$[$\(B1$B%u7nJ,$H$7$F!=!=$rHw$($F$*$-$?$$$H$$$&!#(B
$B!!(Bhttp://e-tyozai.com/ki.html
$B$r8+$k$H!"(B100 $B>{$G!o(B2,600 $B$@$=$&$G!#$3$N@=IJ$O!V(B24 $B;~4VKh$K(B 2 $B4](B (1 $B4](B = 50mg)$B!W$@$=$&$J$N$G!">e5-%b%j%9
$B!U(B
$BITMW=qN`=hM}@AIi2q ($B6K3Z$;$-$e$"F|5-(B, 11/11)$B!#(B
$B;f$rMO$+$9$H$$$&$H(B NSA
($B$9$Y$F$OK5)
$B$r;W$$=P$7$^$9!#$"$H!"EE;R%a%G%#%"$N%G!<%?>C5n$r4^$a$?GQ4~!&%j%5%$%/%k$K$D$$$F$O!"$?$H$($P(B$B%*%j%(%s%HB,4o(B$B$5$s$,3hF0$5$l$F$^$9$M!#(B
$B%O!<%I%G%#%9%/J*M}%/%i%C%7%c!<(B$B$b!"%j%5%$%/%k$rG0F,$KCV$$$F3+H/$5$l$F$$$k$=$&$G$9!#(B($B%O!<%I%G%#%9%/%/%i%C%7%c!<(B$B$NM=;;2=$K$O<:GT$7$^$7$?!"$9$$$^$;$s(B > $BC4Ev;a(B)
$B!U(B
$B!Z(BCRYPTO-GRAM$BF|K\8lHG![(BDES$B$N0d;:(B
($BF|7P(B IT Pro, 11/8)
$B!U(B
$B!Z?73c8)Cf1[CO?L![?L:R;~$KKI:RL5@~$,;H$o$l$J$+$C$?K\Ev$NM}M3(B
($BF|7P(B IT Pro, 11/10)
$B!!(BLinux 2.4.27 $B0JA0(B / 2.6.8 $B0JA0$N(B
ELF $B%P%$%J%j%m!<%@$K$*$$$F!"(B
setuid $B$5$l$?%P%$%J%j$N=hM}$KJ#?t$N7g4Y$,$"$k$H$$$&;XE&!#(B
local user $B$,(B root $B8"8B$rC%
$B!!(BLinux 2.6.9 $B$bF1MM$@$H(B$B%U%)%m!<(B$B$5$l$F$$$k!#(B
$B!!(BSamhain 1.8.9$B!A(B2.0.1 $B$K7g4Y!#(B
$B%G!<%?%Y!<%9$r99?7$9$k$?$a$N%3!<%I$K7g4Y$,$"$j!"(Blocal user $B$,(B samhain $BF0:n8"8B$rC%
Fixed buffer overflow in sh_hash_compdata() (only in 'update' code)
$B!!(BSamhain 2.0.2 $B$G=$@5$5$l$F$$$k!#:G?7$O(B 2.0.2a$B!#(B
$B"#(B
XSS@truste.org
(bugtraq, Tue, 09 Nov 2004 01:05:49 +0900)
$B!!(Bhttps://www.truste.org/ivalidate.php
$B$K%/%m%9%5%$%H%9%/%j%W%F%#%s%0LdBj$,B8:_$9$k$H$$$&;XE&!#(B
$B!!(BSquirrelMail
1.4.3a $B0JA0(B / 2004.11.23 $B0JA0$N(B 1.5.1-cvs $B$K7g4Y!#(B
$BFCDj$N%X%C%@$K$*$1$k(B encoded text $B$N%G%3!<%I$K:]$7$F%/%m%9%5%$%H%9%/%j%W%F%#%s%0LdBj$,H/@8!#(B
1.4.3a $BMQ$N(B patch $B$,MQ0U$5$l$F$$$k!#(B
1.5.1-cvs $B$K$D$$$F$O!":G?7$N$b$N$O=$@5$5$l$F$$$k!#1JLn$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!!(BCVE: CAN-2004-1036
fix / patch:
$B!!FCDj$N(B DNS $Bu67$,$"$jF@$k$?$a!"(BDoS $B>uBV$,H/@8$7F@$k!#(B
$B$H$$$&M}2r$G$$$$$N$+$J!#(B
$B!!7g4Y$N$"$k$b$N$H$7$F$O!"(BAxis $BPoslib
$B$,<($5$l$F$$$k!#(B
$BBP1~$9$k(B JVN$B!"(BNISCC-758884:
DNS$B%W%m%H%3%k
(JVN) $B$K$O7g4Y$N$"$k$b$N$O5-:\$5$l$F$$$J$$!#(B
$B!U(B
i$B%b!<%IEA8@HD$N@.8y$G!":R32;~$NO"MmJ}K!$OJQ$o$k$+(B
(ITmedia, 11/9)$B!#(B
$B!U(B
$B@lMQ%/%i%$%"%s%H$G40A4$J%H%s%M%j%s%0$r
(ITmedia, 11/9)
$BF1l9g$KHw$(!"%m%0%"%&%H8e$K%;%C%7%g%s$K4X$9$k%G!<%?$r:o=|$7!">pJsO31L$d$J$j$9$^$7$N4m81@-$r8:$i$9!V(BSecure Workspace$B!W5!G=$,DI2C$5$l$?!#(B
$B!!$>!A$C!#$=$&$$$&?.MQ$G$-$J$$C
$B!U(B
$B%a!<%kG'>Z%5%_%C%H$G$b(BSender ID$BLdBj$,OCBj$K(B (ITmedia, 11/10)$B!#(B
$B!U(B
Windows$BN.=P%3!<%IHNGd$NCK@-$rBaJa(B
(ITmedia, 11/10)$B!#(B
$B!U(B
HideSeek ($B%5%C%]%m%o!<%/%9(B) 2.0.0 $B$,=P$F$$$^$9!#(B
$B!U(B
ExRegView ($B%5%C%]%m%o!<%/%9(B)$B!#(B
$B!U(B
$B$h$&$d$/F0$-;O$a$?%/%l%8%C%H!&%+!<%I$N!V$J$j$9$^$7!WBP:v(B
($BF|7P(B IT Pro, 10/26)
$B!U(B
$B%;%-%e%j%F%#%[!<%k(B memo BoF 2004$B!"(B
$B%W%m%0%i%`$r8x3+$7$^$7$?!#(B
$B!U(B
$B%"%i%U%!%H$N!V;`!W(B
(tanakanews.com, 11/10)$B!#(B
$B!U(B
$B%"%s%1!<%H$GJ,$+$C$?!V?4$NIB!W$NHa;4$J
($BF|7P(B IT Pro, 11/4)$B!#(B
$B!U(B
$B!V6bM;5!4X%5%$%H$N%3%s%F%s%D$r56J*$K$9$j$+$($k!W!$?7$?$J%U%#%C%7%s%0
($BF|7P(B IT Pro, 11/9)$B!#%/%m%9%5%$%H%9%/%j%W%F%#%s%07g4Y$rMxMQ$7$?(B web $B%Z!<%8=q$-$+$(!"$+$J$"!#F|K\$G$O(B (office $B$5$s$N$*$+$2$G(B) $B$h$/CN$i$l$?LdBj$J$s$@$1$I!"(BUK $B$G$OL\?7$7$$LdBj$J$s$@$m$&$+!#(B
$B!U(B
$B!V%;%-%e%j%F%#$GA*$P$l$k(BFirefox$B!W!=!=(BMozilla Foundation$B$N%G%#%l%/%?(B
($BF|7P(B IT Pro, 11/2)
$B!V(BIE$B$K$O!X%;%-%e%j%F%#!&%>!<%s!Y$H$$$&9M$(J}$,$"$k!#$3$N9M$(J}!J%"!<%-%F%/%A%c!K$G$O!$!<%s$H(BActiveX$B%3%s%H%m!<%k!$$3$N(B2$B$D$G$[$H$s$I$N%;%-%e%j%F%#LdBj$O5/$-$F$$$k!#(BFireFox$B$G$O$3$l$i$N%"!<%-%F%/%A%c$O:NMQ$7$F$$$J$$$N$G?4G[$O$J$$!W(B
$B!!(BFireFox $B$G$O!"$$$+$J$kiCL$G$7$g$&%U%!%$%s%^%s$5$s!#(B
$B!!!D!D(BFirefox$B$O(BIE$B$KHf$Y$F%;%-%e%j%F%#LL$G$bM%0L!A(BMozilla$B5;=Q@UG$
(Internet Watch, 11/2) $B$rFI$s$@J}$,$h$$$h$&$G$9!#?y86$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
Firefox
1.0 $B@5<0HG$,EP>l$7$?$=$&$G$9!#(B
$B!U(B
$B%*%i%/%k$,%5%]!<%H!&%5!<%S%9$r1dD9(B
($BF|7P(B IT Pro, 11/9)$B!#6b$5$(=P$;$P1J1s$KJ]
$B!U(B
DSA-588-1 gzip -- insecure temporary files$B!"(B
tmp=/tmp/zfoo.$$
$B$H$+$$$&%3!<%I$,J|CV$5$l$F$$$k$N$O$J$<$J$s$@$m$&!#(B
$B!!(BISA Server 2000 $B$*$h$S(B Proxy Server 2.0 $B$K7g4Y!#(B
ISA Server 2000 $B$*$h$S(B Proxy Server 2.0 $B$O!"(B
DNS $B$N5U0z$-$GF@$i$l$?>pJs$r%-%c%C%7%e$9$k$N$O$$$$$N$@$,!"$3$N5U0z$-%-%c%C%7%e$r@50z$-$K$b;HMQ$7$F$7$^$&(B ($B$J$s$A$e$&>N$r0z$-$*$3$9$3$H$,2DG=!#7k2L$H$7$F!"(B
ISA Server 2000 $B$^$?$O(B Proxy Server 2.0 $B$r7PM3$7$F%$%s%?!<%M%C%H$K@\B3$9$k$H!"56%5!<%P$KM6F3$5$l$F$7$^$&2DG=@-$,$"$k!#(B
ISA 2000 $B$O(B SBS 2000 / 2003 $B$K$b4^$^$l$F$$$k$N$GCm0U!#(B
ISA 2004 $B$K$O$3$N7g4Y$O$J$$!#(B
CVE: CAN-2004-0892$B!#(B
$B!!2sHr:v$H$7$F$O!"(BISA Server 2000 $B$*$h$S(B Proxy Server 2.0 $B$N(B DNS $B%-%c%C%7%e%5%$%:$r(B 0 $B$H$9$k!#6qBNE*$JJ}K!$O(B 889189 - How to work around the ISA Server 2000 and Proxy Server 2.0 DNS spoofing vulnerability described in Microsoft Security Bulletin MS04-039
$B$G2r@b$5$l$F$$$k!#(B
$B!!BP1~$H$7$F$O!"(Bpatch $B$,$"$k$N$GE,MQ$9$l$P$h$$!#(B
patch $B$O(B Proxy Server 2.0 SP1 $B$*$h$S(B ISA 2000 SP1 / Feature Pack 1 / SP2 $B$KE,MQ$G$-$k!#(B
2004.11.19 $BDI5-(B:
$B!!(BISA Server 2000 (SBS 2000 / 2003) $BMQ$N(B patch $B$,2~D{$5$l$F$$$^$9!#(B
- ISA Server 2000 SP1 $B$GF0:n$9$k$?$a$KI,MW$J%U%!%$%k$,ITB-$7$F$$$?(B
- Windows 2000 SP3 $B$K$&$^$/%$%s%9%H!<%k$G$-$J$+$C$?(B
2004.11.22 $BDI5-(B:
$B!!(B890097 - $B%^%$%/%m%=%U%H(B $B%;%-%e%j%F%#99?7%W%m%0%i%`(B MS04-039 $B$N%$%s%9%H!<%k8e$KJ#?t$N>c32$,H/@8$9$k(B
(Microsoft)
$B!!(BKerio Personal Firewall 4.0.0$B!A(B4.1.1 $B$K7g4Y!#(BFWDRV.SYS $B$K7g4Y$,$"$j!"D9$5(B
0x00 $B$N(B IP $B%*%W%7%g%s$r@_Dj$7$?(B TCP / UDP / ICMP $B%Q%1%C%H$K$h$C$FL58B%k!<%W$K4Y$C$F$7$^$&!#(B
Kerio Personal Firewall 4.1.2 $B$G=$@5$5$l$F$$$k!#(B
$B!!4XO"(B: KSEC-2004-11-04-01
(kerio.com)
$B!!(Bsamba 3.0.7 $B0JA0$N(B 3.0.x $B$K7g4Y!#(B
$B%o%$%k%I%+!<%IJ8;z$,4^$^$l$?%U%!%$%kL>$KBP$9$kF~NOCM8!>Z$K7g4Y$,$"$j!"(Bremote $B$+$i(B DoS $B967b(B ($B9b(B CPU $BIi2Y(B) $B$rpatch $B$,MQ0U$5$l$F$$$k$N$GE,MQ$9$l$P$h$$!#(B
$B!!4XO"(B:
- IE 6$B$K?7$?$J%P%C%U%!%*!<%P!<%U%m!Z%3!<%I$O8x$K(B
$B!!(B[memo:7841]
$B$J$I$G:F8=@.8y$,Js9p$5$l$F$$$?$N$G!"(Bweb $B%5!<%P$N@_Dj$r8+D>$7$?$H$3$m!":F8=$K@.8y$7$?!#(BPoC $B%3!<%I$O(B UNICODE $B$G=q$+$l$F$$$k$N$@$1$I!"
<Files *.html>
ForceType 'text/html; charset=ISO-2022-JP'
</Files>
$B$K$7$F$"$C$?$N$G!"$J$s$@$+JQ$K$J$C$F$$$?LOMM!#(B
$B!!$H$$$&$o$1$G!"$3$l$O%d%P$$$G$9$M!#$3$N7g4Y$,=$@5$5$l$k$^$G$O!"(BIE $B$NMxMQ$O$7$J$$J}$,$h$5$=$&$G$9!#(BWindows XP SP2 $B$J$i$@$$$8$g$&$V$J$h$&$G$9$,!#(B
$B4XO"(B: IE$B$K?7$?$J%;%-%e%j%F%#!&%[!<%k!$(BWeb$B%Z!<%8$d(BHTML$B%a!<%k$r3+$/$@$1$GHo32$r ($BF|7P(B IT Pro, 11/4)$B!#(B
$B!!$"$H!"(BMcAfee VSE 8.0i
$B$r%$%s%9%H!<%k$7$F$"$k$H!"(BVSE 8.0i $B$N%P%C%U%!%*!<%P!<%U%m!$B2hA|(B$B!#(B
$B!!(BHandler's Diary November 8th 2004 (SANS ISC)$B!#$3$N7g4Y$rMxMQ$9$k(B MyDoom $B0!l$7$F$$$k$h$&$G$9!#(B
$B!!(Bexploit $BMQ$N(B signature $B$bMQ0U$5$l$F$$$k$h$&$G$9(B:
$B!!4XO"(B: $B%a!<%k$N%j%s%/$r%/%j%C%/$9$k$@$1$G46@w!"(BIE$B$N@H
(Internet Watch, 11/9)
$B!U(B
884776 - $B;~9o$,Bg$-$/JQ99$5$l$J$$$h$&$K(B Windows $B%?%$%`(B $B%5!<%S%9$r9=@.$9$k(B
(Microsoft)$B!#(B
$B!U(B
Winny $BJ}LL$G$"$?$i$7$$%&%$%k%9$,N.9T$C$?$_$?$$$G$9(B
$B!U(B
$BEl3$!&ElFn3$CO?L!"F1;~H/@8$J$i!D!"MI$l$N9-$,$jJ}M=B,(B
(asahi.com, 11/8)
$BLs#1#0#0IC8e$KE~C#$9$k4XElJ?Ln$G$O!"Fp$i$+$$BO@Q!J$?$$$;$-!KAX$N1F6A$G#6!A#1#0IC$H$$$&D9$$<~4|$NMI$l$,A}I}$5$l!"MI$l$O#3J,0J>eB3$/8+9~$_$@!#$f$C$/$j$H$7$?!VD9<~4|CO?LF0!W$G!"D69bAX%S%k$dBg7?$N66$J$I$KHo32$rM?$($k2DG=@-$,$"$k!#(B
$B!U(B
$B$"$V$j=P$9$^$G$bL5$/(B
(The Trembling of a Leaf, 11/4)$B!#(B
$B%U%'%"%f!<%9(B! $B%U%'%"%f!<%9(B!! $B%U%'%"%f!<%9(B!!!
$B!U(B
$BHs>o;vBV$G$b;v6H7QB3$G$-$kBN@)$r!A!V%S%8%M%9!&%3%s%F%#%K%e%$%F%#!W$N=EMW@-!A(B
($BF|7P(B IT Pro, 11/1)$B!#"-$J5-;v$b!";v6H7QB3$N<:GT;vNc$N$R$H$D$G$9$h$M$(!#(B
$B!U(B
$B!Z?73c8)Cf1[CO?L![IT0BDj$J5kEE$G%5!<%P!<$,%/%i%C%7%e(!(!>.@iC+;T$N>pJs%7%9%F%`(B
($BF|7P(B IT Pro, 11/6)
$B!U(B
$B1?E>Cf$N7HBS!"%O%s%:%U%j!<$G$b4m81!!9)6HBg=u65Z(B
(asahi.com, 11/3)$B!#$=$l$r8@$$=P$9$H!"=u
$B!!4XO"(B: $B8)Fb;v8N7o?t!V7HBS!W>e2s$k!!!V%O%s%:%U%j!
($B?.G;KhF|?7J9pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!!(BHashimoto $B$5$s$+$i(B ($B$"$j$,$H$&$4$6$$$^$9(B):
$B%O%s%:%U%j!l9g$OOC$7Aju67$J$I$rJ,$+$C$?>e$G2qOC$9$k$N$G1?E>l9g$O1?E>>u67$,J,$+$i$J$$$N$G0lJ}E*$K$J$C$F$7$^$&$=$&$G$9!#(B)
$B!!5U$K8@$&$H!"1?E>u67$rL5;k$7$FC}$j$^$/$k$H%9%2!<4m81!"$H$$$&$3$H$G$9$M!#$=$&$$$&F1>h/$J$/$J$$$H;W$&$7!#(B
$B!!$"$H!"(B$B%X%C%I%;%C%H$O(BOK$B!)(BNG$B!)!A$I$&$J$k
(ITmedia, 10/28) $B$H$$$&OC$b$"$k$=$&$G$9!#F#0f$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
USA $BBgE}NNA*5s(B
$B!!L1
$B!U(B
$B6&F1DL?.!"!V9aED$5$s;&32!W8mJs$GJT=86ID9$i$r99E3(B
($BFIGd(B, 11/8)$B!#(B
$B!U(B
$B#B#S#ELdBj!'(B
$B7nNpH=JLK!$N8!F$2q@_CV!!8|O+!&G@?eN>>J(B
($BKhF|(B, 11/5)$B!#%"%j%P%$$E$/$j:n@o$K$J$i$J$1$l$P$$$$$N$G$9$,!#(B
$B85%M%?(B: $BBh#12s5m$N7nNpH=JL$K4X$9$k8!F$2q$N3+:E$K$D$$$F(B
($BG@NS?e;:>J(B, 11/5)$B!#(B11/12 $B$@$=$&$G$9!#(B
$B!U(B
$B>pJs%U%!%$%k!'(B
$BD;%$%s%U%k%(%s%6!!%"%*%5%.$+$i%&%$%k%98!=P!]!]9a9A(B
($BKhF|(B, 11/6)
$B!U(B
$B?73cCf1[CO?L!'(B
$B5{>B;T$G?LEY#56/!a8aA0#1#1;~#1#6J,(B
($BKhF|(B, 11/8)$B!#$J$+$J$+$*$5$^$i$J$$$J$"!D!D!#(B
$B!U(B
$B%$%i%/J}LL(B
$B!!$^$?$b$dB?$/$NHs@oF.0w$,;`=}$7!"$=$7$FL5;k$5$l$k$N$@$m$&$J!D!D!#(B
$B!!(B$BKLIt%/%k%ICO6h$r=|$/%$%i%/A4EZ$K(B 60 $BF|4V$NHs>o;vBV@k8@(B$B$,=P$F$$$k>u67$G!"(B
$B$^$@Hs@oF.CO0h$@$H8@$$$^$9$+!D!D!#(B
$B!U(B
$B2,EDBeI=!"N&>e<+1RBb4Q1\<0$K=P@J(B
($BL1
$B!U(B
$B!Z%"%@%k%H%5%$%HHo32BP:v$NIt20![$N(BWiki
$B$,$G$-$F$$$^$9!#(B
$B!U(B
$B$"$N?M$,!*!*(B
(B-) $B$NFH$j8@(B, 11/2)$B!#$"$N?M$C$FC/(B? $B$H;W$C$F$$$?$i!"(BK $B;a$@$C$?$N$G$9$M(B
($B%a!<%k$"$j$,$H$&$4$6$$$^$9(B)$B!#(B
Lyris MailShield Server
$B$G$9$+!D!D!#(B
$B!U(B
$B%=%U%H%P%s%/(BBB$B0$B?;a!VMzNr=q$d:NMQ>pJs$b8D?M>pJsJ]8n$NBg$-$J2]Bj!W(B
(Internet Watch, 11/5)$B!#3N$+$K$J$"!#(B
$B3X9;$@$HF~;nJ}LL$G$9$M$(!#(B
$B!U(B
$B5m$NKv$7$g$&?@7P$dI{?U$+$i0[>o%W%j%*%s8!=P(B
($BF|7P(B, 11/2)$B!#$I$3$^$G
$B!U(B
$BKI1RD#!H2fK}$N8B3&!I;0I)=E9)$N;XL>Dd;_8!F$(B $B<+F0
(ZAKZAK, 11/5)$B!#(B
$B;0I)=E9)6H3t<02q8E20M6F3?d?J%7%9%F%`@=:n=j(B
$B$G$9$+!D!D!#(B
$B$@$,!";0I)=E9)$G$OIT>M;v$,B3H/!##F#2;Y1g@oF.5!$N;qNAN.=P!"%X%jEk:\8n1R4O!V$*$*$J$_!W$N%^%9%HMO@\%_%9!D!#(B
$B!!(BF2 $BJ}LL$O!";qNAN.=P$h$j$b5!BN6/EYITB-LdBj$NJ}$,MZ$+$K=EBg$@$H;W$&$,!#(B
$B85$r$?$I$l$P!"J5@/<#E*$JM}M3$G(B F-16 $B$J$s$+$r%Y!<%9$K$7$?$N$,$=$b$=$b!D!D!#(BFS-X $B8uJd$@$C$?(B F/A-18 $B$O$=$N8e6/2=7?(B E/F (super hornet) $B$,EP>l$7!":#$G$O(B
US NAVY $B$N
$B!!(BMSIE <IFRAME> and <FRAME> tag NAME property bufferoverflow PoC exploit (was: pyth
on does mangleme (with IE bugs!)) $B$N7o$@$H;W$o$l$^$9!#(B
$BBP1~J}K!$H$7$F$O!"!V(BIE $B$O;H$o$J$$!W$K$J$k$s$G$9$+$M$(!#(B
$B
2004.11.09 $BDI5-(B:
$B!!(B[memo:7841]
$B$J$I$G:F8=@.8y$,Js9p$5$l$F$$$?$N$G!"(Bweb $B%5!<%P$N@_Dj$r8+D>$7$?$H$3$m!":F8=$K@.8y$7$?!#(BPoC $B%3!<%I$O(B UNICODE $B$G=q$+$l$F$$$k$N$@$1$I!"
<Files *.html>
ForceType 'text/html; charset=ISO-2022-JP'
</Files>
$B$K$7$F$"$C$?$N$G!"$J$s$@$+JQ$K$J$C$F$$$?LOMM!#(B
$B!!$H$$$&$o$1$G!"$3$l$O%d%P$$$G$9$M!#$3$N7g4Y$,=$@5$5$l$k$^$G$O!"(BIE $B$NMxMQ$O$7$J$$J}$,$h$5$=$&$G$9!#(BWindows XP SP2 $B$J$i$@$$$8$g$&$V$J$h$&$G$9$,!#(B
$B4XO"(B: IE$B$K?7$?$J%;%-%e%j%F%#!&%[!<%k!$(BWeb$B%Z!<%8$d(BHTML$B%a!<%k$r3+$/$@$1$GHo32$r ($BF|7P(B IT Pro, 11/4)$B!#(B
$B!!$"$H!"(BMcAfee VSE 8.0i
$B$r%$%s%9%H!<%k$7$F$"$k$H!"(BVSE 8.0i $B$N%P%C%U%!%*!<%P!<%U%m!$B2hA|(B$B!#(B
$B!!(BHandler's Diary November 8th 2004 (SANS ISC)$B!#$3$N7g4Y$rMxMQ$9$k(B MyDoom $B0!l$7$F$$$k$h$&$G$9!#(B
$B!!(Bexploit $BMQ$N(B signature $B$bMQ0U$5$l$F$$$k$h$&$G$9(B:
$B!!4XO"(B: $B%a!<%k$N%j%s%/$r%/%j%C%/$9$k$@$1$G46@w!"(BIE$B$N@H
(Internet Watch, 11/9)
2004.11.22 $BDI5-(B:
$B!!%"%I%&%'%"20$5$s$b$3$N7g4Y$r;H$$$O$8$a$?$h$&$G$9(B:
$B!!(B62.4.84.45 $B$O$^$@@8$-$F$$$k$h$&$G$9!#(Bget $B$G$-$k$b$N$r8!::$7$F$_$k$H!"(B
- ClamAV 0.80 (main.cvd 28, daily.cvd 600) $B$O(B mmdom.exe $B$r(B Trojan.Dropper.Virmo-1 $B$H$7$F8!=P$7$^$7$?!#(B
- $B%H%l%s%I%^%$%/%m(B VSAPI v7.000-1011 (2.257.00)
$B$O(B minst.exe $B$r(B TROJ_DLOADER.R $B$H$7$F8!=P$7$^$7$?!#(B
- $B%^%+%U%#!<(B VSE 8.0i (engine 4320, dat 4409) $B$O(B minst.exe $B$r(B Vundo $B$H$7$F8!=P$7$^$7$?!#(B
- NOD32 (1.928) $B$O(B mmdom.exe $B$r(B Win32/Spy.Agent.NAD $B%H%m%$$H$7$F8!=P$7$^$7$?!#(B
- Sophos AntiVirus 3.87.0 $B$O2?$b8!=P$7$^$;$s$G$7$?!#(B
2004.11.30 $BDI5-(B:
$B!!(B$B%U%#%s%i%s%I@/I\!"(BIE$B$N;HMQCf;_$r4+9p(B--MS$B$N(BBofra$BBP:v5^$,$l$k(B
(CNET, 2004.11.29)$B!#(B
$B85%M%?$O(B
http://www.ficora.fi/suomi/tietoturva/cert.htm#2004-11-25_1337
(CERT-FI)
$B$+$J$"!#(B
$B!!$A$J$_$K(B 2004.11.22 $B$NOC$G$9$,!"$=$N8e(B Sophos $B$O(B minst.exe $B$r(B Troj/Virtum-A
$B$H$7$F8!=P$9$k$h$&$K$J$j$^$7$?!#(Bmmdom.exe $B$O%"%I%&%'%"$J$N$G$"$($F8!=P$7$F$$$J$$$h$&$G$9!#(B
2004.12.02 $BDI5-(B:
$B!!(Bpatch $B$,=P$?$h$&$G$9(B:
Internet Explorer $BMQ$NN_@QE*$J%;%-%e%j%F%#99?7%W%m%0%i%`(B (889293) (MS04-040)
(Microsoft)$B!#(B
$B!!(BCisco Secure Access Control Server (ACS) 3.3.1 $B$K7g4Y!#(BEAP-TLS $BG'>Z$K$*$$$F!"(B
$B7A<0E*$K@5Ev$J>ZL@=q$G$"$l$P!"<+8J=pL>$@$m$&$,2?$@$m$&$,
$B!!(BWinRAR
3.40 $B0JA0$K!V(Bmedium risk vulnerability$B!W$,B8:_$7!"(BWinRAR 3.41 $B$G=$@5$5$l$?$N$@$=$&$@!#>\:Y$K$D$$$F$O(B 2005.02.02 $B$K8x3+$5$l$k$=$&$@!#(B
$B!!!V%a!<%k%\%C%/%9$r8!:w$9$k!W$O;H$C$A$c%@%a$i$7$$!#(B
$B!!(BSophos MailMonitor for SMTP - UNIX 2.1 $B$K7g4Y!#(B
$B>\:YITL@$@$,!":Y9)$7$?%a!<%k$K$h$C$F2?$+$,5/$3$kLOMM!#(B
Linux / Solaris $BMQ$N%"%C%W%G!<%H%Q%C%1!<%8$,MQ0U$5$l$F$$$k$N$GE,MQ$9$l$P$h$$!#(B
$B!!(BSun Java System Web Proxy Server (Sun ONE Proxy Server) 3.6 SP4 $B0JA0$K7g4Y!#(B
buffer overflow $B$9$k7g4Y$,$"$j!"(Bremote $B$+$i(B Web Proxy Server $BF0:n8"8B(B
($B%G%U%)%k%H(B: nobody) $B$"$k$$$O(B Admin Server $BF0:n8"8B(B ($B%G%U%)%k%H(B: root)
$B$rC%
$B!!4XO"(B: Buffer Overflow Vulnerabilities in Sun Java System Web Proxy Server
(pentest.co.uk)$B!"(B
Sun fixes flaw in Java proxy server
(techtarget.com)$B!#(Bconnect $B$r$&$^$/07$($J$$$=$&$G!#(B
$B!!(BGD
2.0.28 $B0JA0$K7g4Y!#(BPNG $B%U%!%$%k$Ne$GG$0U$N%3!<%I$rCAN-2004-0990
$B!!(BGD 2.0.29
$B$G=$@5$5$l$F$$$k!#:G?7$O(B 2.0.33$B!#(B
fix / patch:
$B!!(Bshadow
4.0.4.1 $B0JA0$K7g4Y!#(Blibmisc/pwdcheck.c $B$N(B passwd_check() $B$K7g4Y$,$"$j!"(B
local user $B$,(B
chfn $B$d(B chsh $B$rMxMQ$7$F%"%+%&%s%H$N%W%m%Q%F%#$r0U?^$7$J$$7A$GJQ99$G$-$F$7$^$&!#(B
CVE: CAN-2004-1001
$B!!(Bshadow 4.0.5 $B$G=$@5$5$l$F$$$k!#(B
fix / patch:
$B!!(Biptables 1.2.11 $B$K7g4Y!#FCDj$N>u67$G!"I,MW$J%b%8%e!<%k$,%m!<%I$5$l$J$$!#(B
iptables.c $B$H(B ip6tables.c $B$K7g4Y$,4^$^$l$kLOMM!#(B
CVS $BHG$G$O=$@5$5$l$F$$$k$=$&$@$,!"$$$D$N;~E@$GD>$C$?$N$+$h$/$o$+$i$J$$!#(B
CVS
$B$N(B web $B%$%s%?!<%U%'%$%9$O;`$s$G$$$k$h$&$@$7!#(B
CVE: CAN-2004-0986
fix / patch:
$B!!(B2.6.7 $B0JA0$N(B Linux 2.6.x $B%+!<%M%k$K7g4Y!#(B
iptables $B$K@0?t%"%s%@!<%U%m!<$9$k7g4Y$,$"$j!"(Bremote $B$+$i(B DoS $B967b$r
- ZIP $B%U%!%$%k$M$?(B
$B!!(B[Full-Disclosure] [HV-MED] Zip/Linux long path buffer overflow $B$N(B patch $B$,<($5$l$F$$$k(B:
$B$=$N(B1$B!"(B
$B$=$N(B2$B!#(B
- IE$B$K(B2$B
$B!!(B888534 - Internet Explorer $B$N%;%-%e%j%F%#>e$NLdBj(B "$B%/%j%C%/$H%9%/%m!<%k(B" $B$+$i%3%s%T%e!<%?$rJ]8n$9$kJ}K!(B (Microsoft)$B!#(B
MS04-038
$B$rE,MQ$7!"%$%s%?!<%M%C%H%>!<%s$*$h$S%$%s%H%i%M%C%H%>!<%s$G!V%U%!%$%k$N%I%i%C%0(B/$B%I%m%C%W!"$^$?$O%3%T!<(B/$BE=$jIU$1!W$rL58z$H$9$l$P2sHr$G$-$k$h$&$G$9!#(B
$B!!2?F|$bA0$N%a!<%k$r:#$4$mFI$s$G$$$k%b!<%I!#(B
$B!U(B
[memo:7832] ftp.nai.com $B$N$U$7$.(B$B!#[memo:7833] $B!D!D!#(B
$B!!4XO"(B: $B<+F0%"%C%W%G!<%H$N(BFTP$B%5!<%P$N%G%#%l%/%H%j(B/$B%Q%9L>$K$D$$$F(B (nai.com)$B!#(B
$B!U(B
Antivirus Partners Currently Supporting Windows Security Center
(Microsoft)$B!#%7%^%s%F%C%/$H%^%+%U%#!<$,$J$$$N$O$J$<(B?
$B!U(B
$B%P!<%<%k>rLs!"0zB`$7$?A%Gu$O!VM-FGGQ4~J*!W$HG'Dj(B
(WIRED NEWS, 11/5)$B!#(B
$B!VJF9q@/I\$O:#2s$N7hDj$KBP$7$F!"0l4S$7$FH?BP$7$F$-$?!W$H%0%j!<%s%T!<%9$O=R$Y$F$$$k!#JF9q$O!"(B1992$BG/$KH/8z$7$?%P!<%<%k>rLs$KHc=Z$7$F$*$i$:!"F1>rLs$NDj$a$k5,B'$K$7$?$,$&5AL3$O$J$$!#(B
$B!!$5$9$,$O(B USA$B!"4D6-%F%m9q2H$NLLL\LvG!$G$9$M!#(B
$B!U(B
11$B7n(B4$BF|$N(BWeb$B2~cb>pJs(B
(NetSecurity, 11/4)$B!#$C$F!"$"$N!A!"(Bwiki $B$J$s$G$9$1$I!D!D!#(B
$B3+H/F|5-(B/2004-11-04 (PukiWiki)
$B$K8!>Z5-;v$,$"$k$=$&$G$9!#(Bheno $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
$B%*%C%/%9%U%)!<%IBg!"3XFb%M%C%H%o!<%/$r%O%C%-%s%0$7$?3X@8$rDd3X=hJ,$K(B
(ITmedia, 11/2)
$B!U(B
$BB.Js!*(BWindows Server 2003 SP1$B$N?75!G=(B
($BF|7P(B IT Pro)
$B!U(B
$BBh#92s!!J,;6%7%9%F%`(B/$B%$%s%?!<%M%C%H1?MQ5;=Q%7%s%]%8%&%`(B
- $B:F9M!!%M%C%H%o!<%/$N1?MQ!&4IM}$H%;%-%e%j%F%#(B -$B!#(B
2004.12.09$B!A(B10$B!"9-Eg;TCf6h!"0lHLHs2q0w(B 15,000$B1_!#(B
$B$*$b$7$m$=$&$@$J$"!#(B
$B!U(B
[aml 41715] $B!Z$40FFb![1!Fb=82q!V=;L14pK\BfD"$NBgNL1\Mw$H=;4p%M%C%H!"8D?M>pJsJ]8nK!!W(B$B!#(B
2004.11.11$B!"(B $BEl5~ET@iBeED6h!"L5NA!#(B
$B!U(B
[aml 41710] $BH?@o%S%iCF055a7:(B$B!#(B
$BH=7h$O(B
12/16 $B$@$=$&$G$9!#(B
$B!U(B
$BJFBgE}NNA*!'EE;REjI<5!$N%H%i%V%kJs9p!"Aje(B)
(WIRED NEWS, 11/4)$B!#(B
$B!U(B
[selinux-users:00542] SELinux BOF$B3+:E$N$*CN$i$;(B$B!#(B
2004.11.30$B!"El5~ET9A6h!"L5NA!#(B
$B!U(B
Security Information Vol.028 2004/11/04
(F-Secure, 11/4)$B!#(B
$B!|(BF-Secure$B%&%#%k%98&5f=jD9%_%C%3!&%R%C%]%M%s$,(BAVAR2004$B$G9V1i(B
($BCfN,(B)
$B!!$J$*!"F|K\%(%U!&%;%-%e%"$O(BF-Secure$B%"%s%A%&%#%k%9$N%f!<%6!"%Q!<%H%J!<$K8B$j!"(BAVAR2004$B$XL5NA>7BT$7$F$$$^$9!#$44uK>$NJ}$O(BJapan@f-secure.com
$B08$K$*Ld$$9g$o$;$/$@$5$$!#(B
$B!!$X$'!A!#6L2,$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
Analyst's Diary
(viruslist.com) $B$H$$$&%Z!<%8$,$"$k$=$&$G$9!#(B
Kaspersky $B$J?M$N(B weblog $B$@$=$&$G$9!#(B
$B6L2,$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
IY$B%P%s%/6d9T$,(BWindows$B4*Dj7O$N:NMQ$r@5<0H/I=!"2TF/$O(B2006$BG/(B
($BF|7P(B IT Pro, 11/2)$B!#%&%$%k%9%A%'%C%/$9$k4*Dj7O$K$J$k$N$@$m$&$+!#(B
$B!U(B
$B%5!<%I!&%Q!<%F%#@=IJ$G6/2=$9$k!V%V%i%&%6!&%;%-%e%j%F%#!W(B
($BF|7P(B IT Pro, 11/1)
$B!U(B
$B!V%;%-%e%j%F%#$GA*$P$l$k(BFireFox$B!W!=!=(BMozilla Foundation$B$N%G%#%l%/%?(B
($BF|7P(B IT Pro, 11/2)
$B!U(B
$B!T(B ESPIO! $B!UD($j$J$$!V%O%C%+!<8!;v!W(B$B!#@5D>!"??56$O$h$/$o$+$i$L$,!D!D!#(B
$B!U(B
$B%A%'%A%'%s$G$NJ?OBAO=P$N$?$a$N%8%c!<%J%j%9%H$+$i$NDs0F(B ($B%A%'%A%'%s%K%e!<%9(B, 11/3)
$B!U(B
Nonlethal Weapons: Terms and References
(The Memory Hole, 11/3)
$B!U(B
$B7Y;!D#0K3-;a!V7Y;!$K$b>pJs%;%-%e%j%F%#$K6/$$O"Cf$,$$$k!W(B
(Internet Watch, 11/2)$B!#(B
$B!V%^%K%"%C%/$J5;=Q$K$b<+?.$,$"$k!#$J$pJs%;%-%e%j%F%#$K6/$$O"Cf$,$$$k$H$$$&$3$H$r;W$$=P$7$F$[$7$$!W(B
$B!!$J$]$,6/$$$+$i!"$J$N$G$O!#(B
$B$"$H!"%3%s%T%e!<%?!&%G!<%?:9$7$*$5$(7O$X$N7|G0$H$+(B?
$B!U(B
OpenNTPD
3.6 $B$,=P$?$=$&$G$9!#(B
$B!U(B
$B%$%i%/J}LL(B
$B!!9aED$5$s4XO"(B:
$B!!<+1RBb4XO"(B:
$B!!;`
$B!!%U%!%k!<%8%c(B:
$B!!(BUSA $B$K$h$kJaN:5TBT(B:
2004.11.08 $BDI5-(B:
$B!!(B[Full-Disclosure] [HV-MED] Zip/Linux long path buffer overflow $B$N(B patch $B$,<($5$l$F$$$k(B:
$B$=$N(B1$B!"(B
$B$=$N(B2$B!#(B
2004.11.26 $BDI5-(B:
$B!!(BSYM04-017:
Symantec Windows LiveUpdate $B$K%5!<%S%95qH]$*$h$S%G%#%l%/%H%j(I%$B%H%i%P!<%5%k$N$o$:$+$J4m81@-(B
($B%7%^%s%F%C%/(B, 2004.11.23)$B!#(B
2004.12.06 $BDI5-(B:
$B!!(Bzip 2.3 $BJ}LL(B fix:
$B!U(B
$B>.%M%?(B (SecuLog, 11/4)$B!#(Bsendmail / postfix $B$G!"(Bsyslog $B$K%a!<%k$N(B Subject $B$r5-O?$9$kJ}K!!#(B
$B!U(B
Apple Mac OS X v10.3.x "Panther" Security Configuration Guide
(NSA, 2004.10.15)$B!#(B
$B!U(B
889255 - Windows XP Service Pack2 $B%Y!<%9$N%3%s%T%e!<%?$K$*$$$F(B STOP$B%(%i!<$N%a%C%;!<%8$rI=<($7Dd;_$9$k$3$H$,$"$j$^$9(B
(Microsoft)$B!#%a%b%j%j!<%/$G$9$+!D!D!#(B
$B!U(B
$B$^$@$"$C$?!"EE;REjI<$N%@%a$J$H$3$m(B
(ITmedia, 11/4)$B!#$*$C$7$c$k$H$*$j!#(B
$B!U(B
$B$O$F$JEPO?>pJs$N=;=jDI2C!"@5$7$$>pJsEPO?$N$*4j$$$K$D$$$F(B
($B$O$F$J(B)$B!#(B
$BF|K\$NK!N'$K$N$C$H$j!"8"Mx?/329T0Y$KBP$7$F4k6H$H$7$FE,@Z$JBP1~$r9T$$!"Kv1J$/%5!<%S%9$rDs6!$7B3$1$k$?$a$K$O!"!V%f!<%6!<$N3'$5$s$,$I$J$?$J$N$+!W$r$h$j@53N$KGD0.$7$J$/$F$O$J$i$J$$$HH=CG$7$^$7$?!#(B
$B!!$=$l<+BN$OM}2r$G$-$k$N$G$9$,!"!V0lIt$N%f!<%6!<$K=;=j3NG'$O$,$-$rAw$k!W$@$1$G!"A4$F$N%f!<%6!<$N!V@5$7$$>pJsEPO?!W$rJ]>c$G$-$k$s$G$9$+(B?
$B!!$=$l$K$7$F$b!"@5D>$J$H$3$m!"2?$,!V$5$o$.!W$J$N$+$h$/$o$+$i$:!#(B
$B$O$F$J$N$d$j$+$?$,5$$KF~$i$J$$$N$J$i!"$H$C$H$H%9%F$G$$$$$N$G$O!#(B
$B!U(B
spam$BBP:v(BBoF (Internet Week 2004)$B!#(B
2004.11.30$B!"%Q%7%U%#%32#IM(B ($B2#IM;T@>6h(B)$B!"L5NA!#(B
$B!U(B
$B?7$K$o$+4IM}pJs$,O3$($$$9$k$H$O!*(B
(@IT)$B!#(B
$B!U(B
News from the Lab
Monday, October 25, 2004$B!#6=L#?<$$?^$N$D$/$j$+$?!"(B
DIGITAL GENOME MAPPING - ADVANCED BINARY MALWARE ANALYSIS
(f-secure.com) $B$G$$$m$$$m2r@b$5$l$F$$$k$h$&$G!#(B
$B!U(B
$B8=
(ITmedia, 10/29)$B!#(B
$B!U(B
$B<+J,$N%G!<%?$,Ep$^$l$?$3$H$r$I$&$d$C$FCN$k$+!)(B
(ITmedia, 10/26)$B!#(BUCB $B%O%C%-%s%0;v7o4XO"!#(B
$B!U(B
$B%;%-%e%j%F%#6H3&!"<:$C$??.Mj$O$I$&2sI|$9$Y$-$+!)(B
(ITmedia, 10/30)$B!#$&!<$s!"A4BNE*$K$O@N$h$j:#$NJ}$,$^$H$b$K$J$C$F$-$F$$$k$H;W$&$1$I!"$=$&$G$b$J$$$N$+$J$"!#JQ$J$3$H$r8@$&%Y%s%@!<$d(B SIer $B$O@N$b$$$^$7$?$7!#(B
$B!U(B
$BEl]@=IJ$O%a%b%j$rL5=~8r49(B
(PC Watch, 11/1)
$B!U(B
ATM$B$d(BPOS$B$G$b%&%$%k%9Ho32A}2C!A%H%l%s%I%^%$%/%m!"BP:v5!4oH/I=(B
(Internet Watch, 11/1)$B!#0lHLGd$j$O$7$J$$$N$+$J$"!#(B
$B!U(B
apache
1.3.33 $B$,=P$F$$$^$9$,!"(B[Apache-Users 4723] apache-1.3.32 $B$G(B mod_rewrite $B$NIT6q9g(B?
$B$N7o$,L58@$GD>$C$F$$$k(B ($B85$KLa$C$F$$$k(B) $B$N$@$=$&$G$9!#(B
1.3.32 $B$O$J$+$C$?$3$H$K$J$C$F$$$k$+$i$J$N$G$7$g$&$,!"$G$b$M$(!#(B
$B$i$`$8$#$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
apache-1.3/src/modules/standard/mod_rewrite.c
$B$b;2>H!#(B
$B!U(B
$B%?!<%\%j%J%C%/%9$H%H%l%s%I%^%$%/%m$,!"(BLinux$B8~$1%&%$%k%9BP:v$G%0%m!<%P%k$NDs7H!]F|K\9qFb$@$1$G$J$/%o!<%k%I%o%$%I$G$N6(6H$X!](B
($B%H%l%s%I%^%$%/%m(B, 10/29)$B!#(B
$B$H$j$"$($:(B ISMSS $B$r(B Turbolinux 10 Server $B$G%5%]!<%H$7$F$[$7$$$J!#(B
$B!U(B
$B%V%C%7%e;Y1g4k6H$N4p=`$H4k6HL>!&>&IJL>$N%j%9%H$G$9(B
($B%T!<%9%A%g%$%9(B)$B!#(BMicrosoft $B$NL>A0$b$"$j$^$9$M!#(B
$B!U(B
$B%"%a%j%+Dk9q$N4pACCN<1(B
$B$H$$$&K\$,=P$F$$$k$=$&$G$9!#(B
$B!U(B
Debian GNU/Linux 3.0 $B$N%"%C%W%G!<%H(B ($B%j%S%8%g%s(B 3)
$B$,=P$?$=$&$G$9!#(B
$B!U(B
$BCx:n8"$r?6$j2s$7%"%a%j%+$G>P$$
($B3$30%\%D!*(BNews, 10/29)$B!#$$$d$O$d!#(B
$B!U(B
$B5f6K$N8e=P$7%8%c%s%1%s(B
(The Trembling of a Leaf, 10/30)$B!#M"F~8"OC!"(B
$B4DN.KI;_BP>]4|4V$,(B 4 $BG/$K7hDj(B$B$@$=$&$G!#(B
$B<($5$l$F$$$kFC0[;vNc$J$N$@$,!"(B
- 10 + 8 + 18 = 36 $BK|Kg$G!"A4Gd>e(B 340 $BK|Kg$N(B 10% $BDx$J$o$1$G!#(B
$BEvA3!"(B3 $BG/L\$^$G$NKg?t$HHf3S$9$Y$-$O$:$@$,!"<($5$l$F$$$J$$$N$O$I$&$$$&$o$1$+!#(B
- 4 $BG/L\!"(B5 $BG/L\$K$O?t@i$@$,(B 6 $BG/L\$K(B 9 $BK|Kg(B ($BA4Gd>e(B 50 $BK|Kg(B)
$B$H$$$&Nc$b!"EvA3!"(B3 $BG/L\$^$G$NKg?t$HHf3S$9$Y$-$O$:$@$,!"<($5$l$F$$$J$$$N$O$I$&$$$&$o$1$+!#(B
$B!!$I$A$i$K$D$$$F$b!"0U?^$7$F1#JC$7$F$$$k$H$7$+;W$($J$$!#(B
$B$3$l$O$"$^$j$K$^$:$9$.$k$N$G$O!#(B
$B!U(B
$B@>It7Y;!(B
$BI|3h$O$$$$$1$l$I!"%A%'%A%'%s%^%U%#%"$C$F2?$@!#(B
$B!U(B
OpenBSD 3.6$B8x3+(B
(slashdot.jp, 10/30) $B$@$=$&$G$9!#(B
pf $B$,$$$$!"$H$$$&0U8+$,J#?t=P$F$$$k$J$"!#(B
ports/security/pf/
$B$r%$%s%9%H!<%k$7$F$_$k$Y$-$+!#(B
$B!!!D!D(Bpf $B%I%-%e%a%s%H(B$B$r$A$i$C$H8+$F$_$?$N$G$9$,!"$3$l$O3N$+$K$$$$$G$9$M!#(B
$B!U(B
$B9aED$5$s0dBN$GH/8+!#(B$B:#2s$OK\Ev$G$7$?$+!D!D!#(B
$B!!(B$B%5%^%o$NN&<+=I1DCOFb$KCeCF$+!!Bg$-$JGzH/2;!"Ho32$J$7(B
(asahi.com, 11/1) $B$H$$$&OC$b$"$k$h$&$G!#(B
$B!!4XO"(B:
- New URL spoofing bug in Microsoft Internet Explorer
$B!!$5$i$K?7$?$JRe: New URL spoofing bug in Microsoft Internet Explorer$B!#(B
$BNc$K$h$C$F(B$B%F%9%H%Z!<%8(B$B$r$D$/$C$F$_$?!#(B
IE 6.0 SP2 $B$G$b$R$C$+$+$k$C$]$$(B ($B?'$,JQ$@$1$I(B)$B!#(BMozilla 1.7.3 $B$O$R$C$+$+$i$J$$!#(B
Opera 7.54 $B$@$H$R$C$+$+$j$=$&(B ($B$h$/8+$l$PH=CG$G$-$k$+$b$J$N$@$1$I(B)$B!#(B
$B!!4XO"(B: IE$B$N%9%F!<%?%9!&%P!<$r56Au$9$k
($BF|7P(B IT Pro, 2004.11.01)
- PuTTY SSH2_MSG_DEBUG Buffer Overflow Vulnerability
$B!!(BWinSCP
3.71 $B$,=P$F$$$^$9!#(BSSH core upgraded to PuTTY 0.56
$B$@$=$&$G$9!#(Bstm_d $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!!(BPuTTY 0.56 + IPv6 patch10 + fix01
$B$H$$$&$b$N$,$"$k$=$&$G$9!#(Bstm_d $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
- JVN#E59B594B
$BDa55%a!<%k$K$*$1$k(BS/MIME$B$N=pL>8!>Z$K@H
$B!!4XO"(B: $B3+H/
($B9bLZ9@8w!w0q>k8)$D$/$P;T(B $B$NF|5-(B, 2004.10.30)$B!#(B
- Apache <= 1.3.32 mod_include local buffer overflow Exploit
$B!!(Bapache 1.3.33 $B$,=P$^$7$?!#$3$N7g4Y$,=$@5$5$l$F$$$^$9!#(B
CHANGES_1.3$B!#(B
![[$B%;%-%e%j%F%#%[!<%k(B memo]](/%7Ekjm/security/memo/sechole-memo.gif)
$B;d$K$D$$$F(B
![$B4DN.KI;_BP>]4|4V$,(B 4 $BG/$K7hDj(B](http://publiccomment.seesaa.net/image/bunka041029.jpg){kind=link}