$B%;%-%e%j%F%#%[!<%k(B memo - 2005.02
Last modified: Tue May 30 18:45:55 2006
+0900 (JST)
$B!!$3$N%Z!<%8$N>pJs$rMxMQ$5$l$kA0$K!"(B$BCm0U=q$-(B$B$r$*FI$_$/$@$5$$!#(B
$B!U(B
$B$*5RMM8D?M>pJs$NN.=P$K4X$9$k$*OM$S$H$*CN$i$;(B
($BEl2#%$%s(B, 2/25)$B!#!VEl2#%$%s#4!u#5%/%i%V%+!<%I!W$N>pJs$,1L$l$?$=$&$J$N$@$1$I!"2??MJ,N.=P$7$?$N$+$H$+!"$5$C$Q$j$o$+$i$J$$$7!#(B
$B;~ED$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!!(BIT$BJ]81%I%C%H%3%`$N5-;v(B$B$K$h$k$H!"(B400 $B7oN.=P$7!"0-MQ$b$5$l$F$7$^$C$F$$$k$=$&$J!#@>H*$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
Deepnet Explorer
$B$H$$$&(B IE $B%3%s%]!<%M%s%H7?(B? $B$N(B web $B%V%i%&%6$,$"$k$=$&$G$9!#(B
Phishing Alarm
$B$H$+(B
Adverts Killer - Stops Popup & Floating Ads
$B$H$+$$$C$?5!G=$,$"$k$=$&$G$9!#(B
$B6L2,$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
$B56B$%+!<%IBP:v!"@8BNG'>Z$OHH:a$NB?MM2=$r=uD9$N2DG=@-$b(B
($B%m%$%?!<(B, 2/28)$B!#(BIkeda $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
(link fixed: $BF?L>4uK>$5$s46
$B$b$7$b@8BNG'>Z$K$h$kK\?M3NG'$,Ia5Z$9$k$H!"%-%c%C%7%e%+!<%I$rC%$C$?8e$K!"M-L5$r8@$o$5$:$K;XLf$r
$B!!$D$^$j!V;X$r@Z$k!W!VZ$r:NMQ$9$l$P!"$=$&$$$&>u67$NH/@8$OM^;_$G$-$k$H;W$&$N$G$9$h$M!#(B
$B$G!"!VZ!W$d!V;X@EL.G'>Z!W$O!"$A$c$s$H@8;`$r6hJL$G$-$k$N$G$9$+$M!#(B
$B!U(B
$B$*5R$5$^8D?M>pJs$,F~$C$?7HBS>pJsC
($BKL3$F;%,%9(B, 2/25)$B!#;~ED$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$Be9S$i$7$J$s$@$1$I!"(B
2$B7n(B24$BF|8aA0(B9$B;~(B30$BJ,:"!"8!?K:n6H0w$,:n6H$K8~$+$&$?$a$K$K>h$j9~$s$@$H$3$m!"=ul$Ge9S$i$7$NHo32$K$"$C$F$$$?$b$N$H9M$($i$l$^$9!#(B
$B!!!D!D2?$3$l!#
$B!U(B
$B%[!<%`%Z!<%8$X$N%"%/%;%9=8CfBP:v!"(BIP$B%"%I%l%9
(ACCS, 2/28)$B!#$H$$$&$+!"$$$^$^$GpJs$"$j$,$H$&$4$6$$$^$9!#(B
3$B7n(B1$BF|$h$j!V(Bwww.accsjp.or.jp$B!W$K%"%/%;%9$7$?(BIP$B%"%I%l%9$r5-O?$7!":#8e!"2aEY$N%"%/%;%9$r7+$jJV$7$F$$$k%3%s%T%e!<%?$r4IM}$9$k%f!<%6$KBP$7$F!"%$%s%?!<%M%C%H%5!<%S%9%W%m%P%$%@$J$I$rDL$8$FCm0U$r4-5/$9$k$3$H$rM=Dj$7$F$$$^$9!#(B
$B!!$h$&$d$/!"(BAntinny $B$N$=$N5!G=$NK\Mh$NLr3d$G$"$k$H;W$o$l$k!V(BACCS $B$KDLJs$7$^$9$?!W$,5!G=$9$kLOMM!#(B
$B!!$H$3$m$G!"CfLn$5$s$b;XE&$7$F$$$?$N$G$9$,!"(BACCS $B$G$0$0$k(B$B$H$$$^$@$K(B
www.accs.or.jp $B$KM6F3$5$l$k$N$G!"(Bgoogle $B$K8@$C$F$*$/$Y$-$@$H;W$$$^$9$h!#(B
> ACCS $B$NCf$N?M!#(B
$B$=$l$H$b$b$7$+$7$F!"(BACCS $B$NCf$N?M$O(B google $BCN$i$J$$$H$+(B?
$B!U(B
RSBAC
1.2.4 $B$,EP>l$7$?$=$&$G$9!#(B
$B!U(B
Windows XP SP2$B$N<+F099?7Dd;_4|4V$,(B4$B7nCf=\$G=*N;$X(B
(CNET, 2/28)$B!#5Y2K$O$=$m$=$m=*$j$G$9!#(B
$B!U(B
$B;X$N@EL.$GK\?M3NG'!!$_$:$[!"M9Cy$,?7%+!<%I(B
($BFIGd(B, 1/31)$B!#!V@8BNG'>Z%+!<%I$r6&DL2=$9$kDs7H$K$O!";00f=;M'6d9T$b2C$o$kJ}8~$@!W$H$J$C$F$$$^$9$,!"@5<0H/I=$5$l$^$7$?(B: IC $B%-%c%C%7%e%+!<%I$X$N@8BNG'>ZF3F~$K$D$$$F(B
($B;00f=;M'6d9T(B, 2/28)$B!#;00f=;M'6d9T$O;k3P>c37
$B!!$H$3$m$G!";X@EL.$b$N$O%K%;;X$X$NBQ@-$O6/$$$s$G$7$g$&$+$M$(!#(B
$BF|N)%=%U%H$,;X@EL.G'>ZAuCV$N6H3&:G>.2=$K@.8y(B
($BF|N)%=%U%H(B, 2004.10.19) $B$r8+$k$H!"(B
$B;XLf$dFz:L$K$h$kG'>Z$H$O0[$J$j!"L\$K8+$($J$$@EL.%Q%?!<%s$r3hMQ$7$F$$$k$N$G56B$$K$h$k$J$j$9$^$7$,:$Fq$G$+$DG'>Z@:EY$O6K$a$F9b$$$N$,FCD9$G$9!#(B
$B$H$J$C$F$^$9$,!D!D!#(B
$B!!(B$B%-%c%C%7%e%+!<%I$N%;%-%e%j%F%#BP:v6/2=$K$D$$$F(B ($B;00f=;M'6d9T(B, 2/18)
$B$H$$$&$N$b=P$F$^$9$M!#?9$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
$B!V$I$&$9$l$P(BFirefox$B$r?.$8$i$l$k!)!W$N7o$,$d$C$HBP=h(B
(slashdot.jp)$B!#(BFirefox 1.0.1 $B$N%$%s%9%H!<%i$,EE;R=pL>$D$-$K$J$C$?$H$$$&OC!#(B
$B!U(B
Opera$B$,
(Internet Watch, 2/28)$B!#$X$'!A!#(B
$B!U(B
$B!T(B ESPIO! $B!UN"IU$1$i$l$?;0I)!V3+El3U!W$N!VL)CL!W(B$B!#(B
$B%5!<%S%9!"%5!<%S%9!#(B
$B!!$A$J$_$K!"(B$B%_%5%$%k7^7beG[Hw7?$GJF9qKIAm>J(B ($B;:7P(B, 2/25) $B$H$$$&5-;v$b=P$F$^$9$M!#(B$B%l%$%;%*%s$N%W%l%9%j%j!<%9(B$B$NJ}$,>\$7$$$G$9!#
$B!U(B
JPNIC$B!&(BJPCERT/CC $B%;%-%e%j%F%#%;%_%J!<(B2004 $B;qNA(B
$B$,8x3+$5$l$F$$$^$9!#(B
$B!U(B
$BB?L\E*1R@1$,%(%s%8%sJ.
($BFIGd(B, 2/27)$B!#(BMTSAT-1R$B!"=gD4$J$h$&$G$9!#(B
MTSAT-1R $B$K$D$$$F$O(B
$B5$>]1R@14QB,$K$D$$$F(B ($B5$>]D#(B) $B$,>\$7$$$h$&$G$9!#(B
1R $B$H$$$&$N$O!V?7(B 1 $B9f!W$J$N$+!#$J$s$@$+2>LL%i%$%@!<$_$?$$$@!#(B
$B!U(B
Microsoft$B!"%M%C%H7PM3$N@=IJ%"%/%F%#$Y!<%7%g%s$rCf;_$X(B
(ITmedia, 2/25) $B$N7o!"(BMSKK $B$N9-Js$OH]Dj$N%3%a%s%H$rH/I=$7$?$h$&$G!#(B
Mattun $B$5$s!"5HED$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!!(BMicrosoft PressPass
$B$d(B
Microsoft PressPass (Japan)
$B$K$O2?$b$"$j$^$;$s$M!#(B
- [SA14160] Mozilla / Firefox Three Vulnerabilities
$B!!(BFirefox 1.0.1 $B=P$^$7$?!#(B
$B>e5-7g4Y$,=$@5$5$l$F$$$^$9!#(B
- $B9q:]2=%I%a%$%sL>BP1~%V%i%&%6$K(BURL$B$,!H56Au!I$5$l$kLdBj!"(BIE$B$O1F6A$J$7(B
$B!!(BFirefox 1.0.1 $B$H(B Opera $B$N
Mozilla Foundation$B!"!V(BFirefox 1.0.1$B!W$r8x3+!AF|K\8lHG$O(B3$B7n>e=\M=Dj(B
(Internet Watch, 2/25)
$B9q:]2=%I%a%$%sL>$K$D$$$F$O!"!V(Bhttp://$BF|K\8l(B.jp/$B!W$H$$$C$?(BURL$B$X$N%"%/%;%9$O2DG=$@$,!"%"%I%l%9%P!<$J$I$G$O!V(Bhttp://xn--wgv71a119e.jp/$B!W$H(BPunycode$B$GI=<($5$l$k$h$&$KJQ99$5$l$?!#(B
Opera$B$,
(Internet Watch, 2/28)
$B:#2s$N%P!<%8%g%s$+$i(BOpera$B$O!"(BIDN$B$KBP$7$F87$7$$4p=`$r@_$1$F$$$k(BTLD$B$G$N$_(BIDN$B$rMxMQ$G$-$k$h$&$K$7$?!#$3$N%[%o%$%H%j%9%H$K$O!V(B.jp$B!W$d!V(B.kr$B!W!V(B.tw$B!W!V(B.cn$B!W$J$I$,4^$^$l$F$$$k!#(BOpera$B$N%[%o%$%H%j%9%H$K7G:\$5$l$F$$$J$$(BTLD$B$G!V(BLatin1$B!W0J30$NJ8;z%3!<%I$r;HMQ$7$?>l9g$K$O!"(BURL$B$,(Bpunycode$B$GI=<($5$l$k$3$H$K$J$C$F$$$k!#(B
$B!!(BOpera$B!"$d$j$^$9$J!#(B
$B!!$^$?!"(BFirefox $B$G;H$($k(B SpoofStick
$B$H$$$&%f!<%F%#%j%F%#$,$"$k$=$&$@!#(B
$B<+J,$NL\$b(B URL $B$b?.MQ$G$-$J$$(B
(TidBITS $BF|K\8lHG(B #766/14-Feb-05) $B$r;2>H!#(B
$B!!(Bwu-ftpd
2.6.2 $B0JA0$K7g4Y!#(Bwu-ftpd $B$KBP$7$F!"%/%i%$%"%s%H$+$i(B
dir *******($BCfN,(B)*******.*
$B$H$+$9$k$H(B DoS $B>uBV$K$J$k!#:G8e$N(B .* $B$,%]%$%s%H$N$h$&$@!#(B
iDEFENSE Advisory $B$K$O(B wu_fnmatch.c $B$N(B wu_fnmatch() $B$K$*$1$k:F5"=hM}$,!D!D$H$+=q$+$l$F$$$k$N$@$1$I!"K\Ev$J$N$+$J$"!#(B
CVE: CAN-2005-0256
$B!!(Bwu-ftpd.org $B%*%U%#%7%c%k$N=$@5%W%m%0%i%`!"$H$$$&$b$N$O:#$N$H$3$mB8:_$7$J$$!#(B
2005.03.01 $BDI5-(B:
$B!!(BRe: iDEFENSE Security Advisory 02.25.05: WU-FTPD File Globbing Denial of Service
Vulnerability
(bugtraq)$B!#(B
$BD>$9$Y$-$O(B
wu_fnmatch.c
$B$8$c$J$/$F(B
glob.c $B$J$N$G$O!"$H$$$&;XE&!#(Bpatch $B$D$-!#(B
$B$3$N(B patch $B$rE,MQ$9$k$H>e5-(B DoS $B$,H/@8$7$J$/$J$k$3$H$r
$B!U(B
$B>iCL$@$h$M!)(BNTT$B%G!<%?$5$s(B
($B:j;3?-IW$N(BBlog, 2/23)$B!#BgC@$H$7$+8@$$$h$&$,$J$$5$$,!#(B
$B4XO"(B: RFID$B$rMQ$$$?%7%9%F%`$N@_7W!&F3F~$K$*$1$k%W%i%$%P%7!<$NG[N8(B
($BIpED7=;K(B, 2/22)
$B!U(B
IDN$B7A<0$N(BURL$B$O(B2$B%P%$%HJ8;z$r;H$o$:$KI=<($9$k$h$&$K$J$C$?!V(BFirefox$B!W(Bv1.0.1
($BAk$NEN(B, 2/25) $B$,EP>l$7$?$=$&$G$9!#(B
Firefox 1.0 $BMxMQ
$B!U(B
Windows Rootkit$B8!=P$M$?(B
(SecuLog, 2/24)$B!#(B
FLISTER - uncovering files hidden by Windows rootkits (invisiblethings.org) $B$H$$$&%D!<%k$,$"$k$=$&$G$9!#(B
$B!U(B
$B2-Fl$+$i%U%#%j%T%s$N$d$i$;%F%m@oAh$KE>$8$kJF73(B
(tanakanews.com, 2/23)
$B!U(B
JPCERT/CC $B:NMQ>pJs(B (JPCERT/CC) $B$N%Z!<%8$,$"$C$?$s$G$9$M!#(B
$B?7B4:NMQ(B$B$b$O$8$^$k$=$&$G$9!#(B
$B!U(B
Patch10$B$rE,MQ$7$?$i!"(BVSE$B%$%s%9%H!<%k;~$N@_Dj$KLa$j$^$7$?!#(B
($B%^%+%U%#!<(B)$B!#(Bpatch10 $B$O!V2a5n$N$9$Y$F$N(B VSE8.0i $B$NN_@Q(B Patch $B$H$J$j$^$9!W$@$=$&$G$9!#(B
$B!U(B
$B%H%l%s%I%^%$%/%m!"%7%9%3%7%9%F%`%:$N(BIPS$B%7%j!<%:$K%&%$%k%9BP:v5;=Q$rDs6!3+;O(B
($B%H%l%s%I%^%$%/%m(B, 2/24)$B!#$^$@@5<0H/I=$7$F$J$+$C$?$N$M!#(B
$B!U(B
$B!V%i%A%i%A:>5=!WHo32$,0MA3$H$7$FB3$$$F$$$^$9!*(B
($B4z4z(B, 1/26)$B!#$6$V$H$s(B 3 $BKg!#(B
$B!U(B
OASIS$B$N;EMM$r%\%$%3%C%H$;$h(B--$B%*!<%W%s%=!<%9$NCxL>?M$i$,8F$S$+$1(B
(CNET, 2/23)$B!#!V(BRAND (reasonable and nondiscriminatory licensing: $B9gM}E*$+$DHo:9JLE*%i%$%;%s%9(B) $B!W%]%j%7!<$,>GE@$N$h$&$G$9!#(B
$B!U(B
$BL#$NAG!&%"%9%Q%k%F!<%`?&L3H/L@AJ>Y$N??e!K(B
$B#12/(B5,000$BK|1_$O!HJ6Ah2r7h6b!I$K2a$.$J$$(B
($BF|7P(B BP, 2/24)$B!#(B
$B!U(B
$B%U%)%s%H%W%m%0%i%`$NL55v2DO":?%3%T!<$G8x=0Aw?.8"?/32(B
(japan.internet.com, 2/24)$B!#85%M%?(B:
$B!V%[%C%H%i%$%s!W$G%U%)%s%H%W%m%0%i%`$rL55vBz%"%C%W%m!<%I(B
(ACCS, 2/23)$B!#(B
$B!!(BInernet Week 2004: DNS DAY
$B$G$b>R2p$5$l$?!"%&%=(B DNS $B1~Ez@8@.%G!<%b%s(B uso800d / dnsattack $B$r;HMQ$7$?(B
DNS $B:>>N967bu67$,(B DNS DAY $B$G$NR2p$5$l$F$$$?!#(B
$B!!$H$$$&$o$1$G!"%O%$$$$+$,$G$7$?$+!A!"(BDNS $B:>>N62$$$G$9$M!A!"62$7$$$G$9$M!A!"(BDNSSEC $BM_$7$$$G$9$M!A(B ($B@<(B: $BMd@nD9<#(B$B@h@8(B) $B$H$$$&OC$K$D$J$,$C$F$$$/$o$1$G$9$,!D!D!#(B
$B!!%H%l%s%I%^%$%/%m$N%"%I%P%$%6%j(B:
Vulnerability in VSAPI ARJ parsing could allow Remote Code execution (trendmicro.com)
$B!!%H%l%s%I%^%$%/%m$N(B VSAPI 7.500 $B0JA0$K7g4Y!#(B
ARJ $B%"!<%+%$%V$N=hM}$K7g4Y$,$"$j!"%"!<%+%$%VFb$ND9Bg$J%U%!%$%kL>$K$h$C$F(B buffer overflow $B$,H/@8$9$k!#(B
$B$3$l$K$h$j!":Y9)$7$?(B ARJ $B%"!<%+%$%V$r;H$C$FG$0U$N%3!<%I$r
$B!!(BVSAPI 7.510 $B$G=$@5$5$l$F$$$k!#(B
$B1Q8lHG(B VSAPI
$B$O(B 7.510 $B$,MQ0U$5$l$F$$$k$,!"(B
$BF|K\8lHG(B VSAPI
$B$O$^$@(B 7.500 $B$N$^$^$@!#!D!D$H$+=q$$$F$$$k$&$A$K!"$3$s$J$N=P$F$^$7$?(B:
$B!!9b66$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
- $B%&%$%k%9BP:v%=%U%HF3F~:Q$_(BXP SP2$B$G%V%k!<%9%/%j!<%s$K$J$kIT6q9g(B
$B!!(BKB 887742 $B$NF|K\8lHG$,EP>l(B: 887742 - Windows XP Service Pack 2 $B$^$?$O(B Windows Server 2003 $B$G(B Stop $B%(%i!<(B "Stop 0x05
(INVALID_PROCESS_ATTACH_ATTEMPT)" $B$,I=<($5$l$k(B$B!#(B
$B$^$?!"(Bpatch $B$,(B Windows Update $B$G$bG[I[$5$l$F$$$k$=$&$@(B
($BF|7P(B IT Pro)$B!#(B
$B$?$@$7!"(BWindows Server 2003 $BMQ$N(B patch $B$O$^$@$J$$$7!"(BWindows XP Tablet PC Edition 2005 $B$K(B Windows XP Service Pack 2 $BMQ$N(B patch $B$rE,MQ$7$F$b$$$$$N$+H]$+$bL@3N$G$O$J$$!#(BWindows XP Tablet PC Edition 2005 $B$G(B Windows Update $B$7$F$_$l$PEz$O$o$+$k$N$+$b$7$l$J$$!#(B
$B!!$=$l$G!"=$@5HG$O=P$?$s$G$9$+$M$(!#(B
- $BIT@5%-%c%C%7%e%+!<%I$N%3%9%H$OC/$,IiC4$9$Y$-$+(B
$B!!(B$B0BA4?@OC$r:n$i$;$F$O$J$i$J$$(B
($B:j;3?-IW$N(BBlog, 2005.02.15)$B!#8m2r$r>7$/5-=R$G$4$a$s$J$5$$!#(B
- XSS vulnerabilty in ASP.Net [with details]
$B!!(BASP.NET $B$K(B XSS? ($B?eL57n$P$1$i$N$($SF|5-(B, 2005.02.17)$B!#(BresponseEncoding $BB0@-$,(B
windows-$B$J$s$H$+(B $B$K$J$C$F$$$k>l9g$O!"F1MM$N=hCV$,I,MW$J$h$&$G$9!#(B
$B!!(BPutty
0.57 $B$h$jA0$N(B sftp $B
$B!!$I$A$i$b(B iDEFENSE $B$,H/8+!&DLJs$7$?$b$N$J$N$G!"$=$N$&$A(B advisory $B$,=P$k$@$m$&!#(B
$B!!(BPutty
0.57 $B$G=$@5$5$l$F$$$k!#LZB<$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#F|K\8lHG$N>u67(B:
$B!!(B$B:42l$N7o(B$B$OI9;3$N0l3Q$G!"$=$&$$$C$?;vNc$OB??tB8:_$9$k$=$&$G$9!#(B
$BFC$K!"(BOS $B$H$7$F(B Linux $B$,;H$o$l!"3n$D(B OpenSSH $B$d(B telnetd $B$r;H$C$F%j%b!<%H%"%/%;%9$r5v2D$7$F$$$k%$%s%?!<%M%C%H>o;~@\B3$N%5!<%P$KBh;05=(B (phishing) $B$NF'$_Bf%5!<%P$K$9$k%1!<%9$,B??t8+
$B!!(BWindows $B$8$c$J$$$+$i0B?4!"$H$+;W$C$F$k$H9s$$L\$K$"$&$N$G$7$g$&!#(B
$B!U(B
$B#27n(B13$BF|!JF|!K:G?78=COJs9p2q$X$N;22C$X$N8fNi$H$*OM$S!!(B
($B%A%'%A%'%s%K%e!<%9(B, 2/19)$B!#@bL@H4$-$N%t%#%8%e%"%k$H$$$&$N$O4m81$J$b$N$J$N$G$9$M!#(B
$BBh0l
$B!U(B
Windows Server 2003 Service Pack 1$B$r(BProLiant Storage Server$B$*$h$S(BStorageWorks NAS$B$K%$%s%9%H!<%k$7$F$O$$$1$^$;$s(B
(hp, 2/18)$B!#(B
HP ProLiant DL100 Storage Server, HP ProLiant DL380 Storage Server, HP ProLiant DL580 Storage Server, HP ProLiant ML110 Storage Server, HP ProLiant ML350 Storage Server, HP ProLiant ML370 Storage Server, HP StorageWorks NAS 1200s, HP StorageWorks NAS 1500s,HP StorageWorks NAS 2000s, HP StorageWorks NAS 4000s, HP StorageWorks NAS 9000s $B$K(B Windows Server 2003 SP1 $B$rE,MQ$9$k$H%V%k!<%9%/%j!<%s$K$J$k$=$&$G$9!#(B
$B!U(B
$BH/?.
(ITmedia, 2/18)$B!#(B
$B%I%3%b$O(B 3/4 $B$^$G$K40N;!"(BKDDI $B$O(B 3 $B7nCf=\$@$=$&$G$9!#(B
$B!U(B
IT$BBg2A$NI8=`2=%7%9%F%`$G6(NO(B
(ITmedia, 2/19)$B!#(B
$B!U(B
$B3KG3$,:G9b:[7hDj$r$9$jH4$1$k<+>N%&%i%s;DEZE15n$ND4::$r6/9T(B:
$B$@$,8)N)<+A38x1`Fb$NKcH*CO6h$X$NE15n$OIT2DG=$GF\:C$OI,;j(B
$B1]K\1WH~$5$sAJ>Y$O95AJ?3$G3KG3$N?^LL$NCWL?E*8m$j$J$I;XE&(B
($BH~IM$N2q(B, 2/14)$B!#(B
$B3KG3NA%5%$%/%k3+H/5!9=$H$$$&CDBN$O!"$3$&$$$&$3$H$r$9$k$s$G$9$+!#(B
$B$9$5$^$8$$$J$"!#(B
$B!U(B
$B!J2r@b!K(B
$BO;%v=j!&%,%i%98G2=BNCyB"@_Hw$G$N!V2r@O%_%9!W$NK\@-(B
($BH~IM$N2q(B, 2/14)$B!#(B
$B!U(B
$B!VEv3::`NA$N
($BH~IM$N2q(B, 2/14)$B!#(B
$B!U(B
$B3U5D8eBg?C5-
($B7P:Q;:6H>J(B, 2/18)$B!#(B
$B3K86NAJ*
$B!!(B$B3K86NAJ*
($B7P:Q;:6H>J(B, 2/18)
$B$O$=$l$@$1$N$b$N$G$O$J$$!#(B
$B!V35MW!W$+$i(B:
1. $BK!N'2~@5$NL\E*(B
$B!!86;RNO0BA45,@)$N=<o$NGQ4~J*Ey$HF1Ey$N07$$$rG'$a$k@)EY$NF3F~(B ($BCfN,(B) $B$r9T$&!#(B
$B!!$3$&$$$&$N$r!V5,@)$N=<$7$?J}$,$$$$$N$G$O!#(B
$B!!$G!"!V==J,Dc$$!W$H$O$I$&$$$&$3$H$+(B?
$B!VG/4V(B 0.01 $B%_%j%7!<%Y%k%H!W$H$$$&$N$,$=$N4p=`$N$h$&$G$9!#(B
$B!U(B
$BEl%7%J3$%,%9ED!'(B
$B!V9[6h@_Dj!WBP93:v$b!!@/I\Cf4VJs9p(B
($BKhF|(B, 2/19)$B!#85%M%?(B:
$BJ?@.#1#6G/EY4pACJ*M}C5::!V2-FlKL@>3$0h!J#3#D!K!W2r
($B7P:Q;:6H>J(B, 2/18)$B!#$^$:$O7!$l(B!
$B!U(B
$BBh(B03$B2s$^$C$A$c#1#3#9JY6/2q(B$B!"$_$J$5$s$*$D$+$l$5$^$G$7$?!#(B
$B%l%4%V%m%C%/8_49$i$7$$!"(B$B%a%,%V%m%C%/(B$B$N(B$B%5%s%@!<%P!<%I%7%j!<%:(B$B$r$*$_$d$2$KD:$-$^$7$?(B ($B$^$C$A$c$5$s$"$j$,$H$&$4$6$$$^$9(B)$B!#(B
$B$*$+$($7$H8@$C$F$O$J$s$G$9$,!"(B[evidenceML:00066] $B5-;v!'%O%$%F%/HH:a$NA\::(B
$B$rFI$s$GF~
$B!U(B
$B@83h0BA4>rNc$H$O2?$+!!4F;k
$B$H$$$&K\$,=P$?$h$&$G$9!#(B
$B!U(B
$B=82qJs9p!'(B
$B%A%'%A%'%s$G2?$,5/$3$C$F$$$k$N$+!c:G?78=CO>pJs$HFqL1;Y1gJs9p!d(B
($B%A%'%A%'%s%K%e!<%9(B, 2/18)$B!#(B
$B!U(B
Cisco Security
Agent $B!]%G%b%s%9%H%l!<%7%g%s$H5!G=2r@b!](B
(Cisco)$B!#6qBNE*$JFbMF$G$J$+$J$+6=L#?<$$$G$9!#(B
$B5;=Q;qNA$J$I$O(B$B$3$N$X$s(B$B!#(B
$Bkp$$J86g$I$*$j$KF0$$$F$/$l$k$N$J$i!"$J$+$J$+$&$l$7$=$&$J5$$,!#(B
$B$b$C$H$b!"7Y9pJ8>O$,F|K\8l2=$5$l$F$$$J$$$H!"$U$D$&$N?M$K;H$o$;$k$N$O$D$i$=$&$J$s$G$9$,!#8=;~E@$G$OF|K\8lHG(B OS $B$KBP1~$7$F$$$J$$$h$&$G$9$7!#(B
$B!!(BCisco $B$,Ds6!$9$k4k6H8~$1(B Windows $B%;%-%e%j%F%#%;%_%J!<(B (3/1$B!"%R%k%H%sEl5~(B)
$B$G!"(B$B$5$-$4$mH/I=$5$l$?(B
Cisco Security
Agent 4.5 $B$NOC$,J9$1$k$h$&$G$9!#(B
$B$*$C$H!"!V;38}(B $B1Q(B $B65$JJ}$b$$$i$C$7$c$k$h$&$G!#(B
$B$H$j$"$($:!"!VF|K\8lHG$O$$$D=P$k$s$G$9$+(B?$B!W$HJ9$$$F$*$$$F$/$@$5$$(B
($B$C$FC/$K8@$C$F$k$s$@$+(B)$B!#(B
$B!!$U$k$^$$8!CN!D!D$H$$$&$H!"(Bpanda software $B$N(B
TruPrevent (Corporate, Personal) $B$b$"$k$h$&$G$9$,!"(BCSA $B$K$O(B buffer overflow protection $B$H$+$b$"$k$h$&$@$7!#(B
$B!U(B
$B%$%s%?!<%M%C%HDjE@4QB,(B
(@police)$B!#(B
6129/tcp $B$,$:$$$V$sA}$($F$$$k$s$G$9$M!#(B
$B!U(B
$B%^%O%s3$73@oN,(B (boople)$B!#?7Lu$@$=$&$G$9!#(B
$B$3$&$$$&K\$,Gd$l$k$H!"(B$B%j%G%k!&%O!<%H$NK\(B$B$H$+$b=P$F$/$k$+$H!#(B
$B!U(B
iDEFENSE LABS
$B$N%Z!<%8$,$G$-$F$$$^$9!#(B
$B!U(B
$B!V(BXbox$B!W$NEE8;%1!<%V%k$K2P:R$N62$l!"A4@$3&$N(B1410$BK|Bf$,BP>]$K(B
($BF|7P(B BP, 2/17)$B!#(B
$B%*%U%#%7%c%k(B: $B%^%$%/%m%=%U%H!"(BXbox $BMQEE8;%3!<%I$N8r49$rH/I=(B
(xbox.com, 2/17)$B!#(B
$B8r49MQEE8;%3!<%I$O(B http://www.xbox.com/jp/ $B$+$i$*?=$79~$_$/$@$5$$!#(B
$B!!
$B!!(BASP.NET $B$K7g4Y!#(BASP.NET $B$G$OI8=`$G!"%/%m%9%5%$%H%9%/%j%W%F%#%s%07g4Y$rL$A3$KKI$0$?$a$K%j%/%(%9%H$r8!>Z$7!"4m81$JJ8;z$,4^$^$l$F$$$l$PNc30$rH/@8$5$;$k(B
(ValidateRequest, HttpRequestValidationException)$B!#(B
$B$H$3$m$,!"(BWeb.config
$B$N(B
globalization
$BMWAG$K$*$$$F(B responseEncoding $BB0@-$r(B windows-1251 $B$H$7$?>l9g$K!"(B
$B%j%/%(%9%HCf$K!"(B
$B!VA43Q!W1Q?tJ8;z(B
(unicode.org)
$B$r(B
HTTP $B%(%s%3!<%I$7$F4m81$JJ8;z$r5-=R$9$k(B ($B!c!d$J$I$r(B %uff1c %uff1e $B$J$I$N$h$&$K5-=R$9$k(B) $B$H!"8!>Z5!9=$rDL2a$7$?>e$G!"BP1~$9$k$U$D$&$N(B ($B!VH>3Q!W(B) $B1Q?tJ8;z$KJQ49$5$l$F$7$^$&!#(B
$B7k2L$H$7$F!"%/%m%9%5%$%H%9%/%j%W%F%#%s%07g4Y$,H/8=$9$k!#(B
$B$3$N7g4Y$O!"(BMicrosoft $B=c@5$N(B ASP.NET $B$NB>!"(BGNU $B$K$h$k(B .NET $B$K$=$N$h$&$J>u67$,H/@8$9$k(B responseEncoding $BB0@-$,B8:_$9$k$+$I$&$+$OITL@!#(B
$B!!=$@5%W%m%0%i%`$O:#$N$H$3$mB8:_$7$J$$!#2sHr$9$k$K$O!"(BresponseEncoding $BB0@-$r(B utf-8 $B$H$9$k$+!"%"%W%j%1!<%7%g%sB&$GA43Q1Q?tJ8;zNN0h$rGS=|$9$k!#(B
$B!!!D!D$H$$$&M}2r$G$$$$$N$+$J!#(B
UNICODE Collation Charts
$B$H$+$b;2>H!"$J$N$+$J!#(B
2005.02.21 $BDI5-(B:
$B!!(BASP.NET $B$K(B XSS? ($B?eL57n$P$1$i$N$($SF|5-(B, 2005.02.17)$B!#(BresponseEncoding $BB0@-$,(B
windows- $B$K$J$C$F$$$k>l9g$O!"F1MM$N=hCV$,I,MW$J$h$&$G$9!#(B
$B!U(B
$B%9%Q%$%&%'%"(BDCT$B!J%@%a!<%8%/%j!<%s%J%C%W%F%s%W%l!<%H!K(B159 $B$K$*$1$k8m7Y9p>pJs(B
($B%H%l%s%I%^%$%/%m(B, 2/17)$B!#(B
$B$^$?$^$?$^$?$^$?$G$9$+!D!D!#(B
$B!U(B
Mydoom $B$N0!
$B!!(BMydoom.BB $B$K;HMQ$5$l$F$$$k(B packer $B$N(B MEW $B$H$$$&$N$O(B
MEW 11 SE 1.2
(softpedia.com) $B$N$3$H$G$$$$$N$+$J!#(B
Analyst's Diary
$B$d(B
WORM_MYDOOM.BB
$B$K=q$+$l$F$$$^$9$,!"(BMEW $B$r;H$C$F05=L$5$l$F$$$k;v$r=|$1$P!"$3$$$D$O(B
Mydoom.m $B$HF1$8$_$?$$$G$9$M!#(B
$B!U(B
$BJF(BMicrosoft$B!"(B2005$BG/Cf$KM-NA$N%"%s%A%&%$%k%9@=IJ;T>l$K;2F~(B
(Internet Watch, 2/17)$B!#$@$=$&$G$9!#(B
$B!U(B
$B:42l$G%U%#%C%7%s%0:>5=$K;H$o$l$?%5!<%P$,H/8+$5$l$?LOMM(B
$B!!F?L>4uK>$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
$B!V%^%$%/%m%=%U%H@=%=%U%H%&%'%"$rKI1R%W%i%C%H%U%)!<%`$K!W$H%"%T!<%k(B (Internet Watch, 2/17)$B!#(B
$B!U(B
The Art of Computer Virus Research and Defense
$B$H$$$&K\$,=P$?$=$&$G$9!#(B
News from the Lab
Thursday, February 17, 2005 $B$b;2>H!#(B
$B!U(B
$B$*5R$5$^>pJs$,F~$C$?6HL3MQ7HBS%Q%=%3%s$NEpFqHo32$K$D$$$F(B
($BEl5~%,%9(B, 2/16)$B!#e9S$i$7!#(B
$B;~ED$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
$B%I%l%9%G%sBg6u=1#6#0G/<0E5!a6K1&@*NO$,%G%b9T?J!]%I%$%D(B
($B;~;v(B / yahoo, 2/14)$B!#%I%$%D$N1&$N?M$O$3$&$$$&$3$H$9$k$s$@!#(B
$B3N$+$K!"9q$r0&$7!"9qL1$r0&$9$k8E20$=$NB>$G$3$&$$$&3hF0$r$7$?!"$H$$$&OC$O$J$<$+J9$+$J$$$J$"!#$"$H!"<+9qL1$N$?$a$K5>@7$K$5$l$?B>9qL1$K$D$$$F$b$A$c$s$H(B care
$B$7$^$7$g$&$M!#1&$N?M$K$O$=$&$$$&4QE@$,$"$^$j$J$$$h$&$K8+$($^$9$,!#(B
$B!!%I%l%9%G%sBg6u=1$H$$$($P!"$d$C$Q$j(B$B%9%m!<%?!<%O%&%9(B 5
$B$G$9$+!#(B
$B!U(B
LiveUpdate $B$r
($B%7%^%s%F%C%/(B, 2/16 $B99?7(B)$B!#(Bftp.symantec.com
$B$K$D$J$,$i$J$$>l9g$O!"(Bftp.symantec.speedera.net $B$r;n$7$F$_$k$H$$$$$+$b$7$l$^$;$s!#(B$B$3$N$X$s(B$B!#(B
LiveUpdate v2.6 $B$N%j%j!<%9$G$O(B LiveUpdate $B$,%@%&%s%m!<%I$7$?(B ZIP $B%U%!%$%k$N=hM}$K$D$$$F$NLdBj$KBP1~$7$^$7$?!#(B
$B$H=q$+$l$F$$$^$9$M!#(B
$B!U(B
$BBgJ,8):4Gl;TBgF~Eg$G5/$-$F$$$k$3$H(B$B!#(B
$B$^$?$7$F$bEZLZ9);v$N$?$a$NEZLZ9);v$G$9$+!D!D!#(B
$B!U(B
$B%Q%?!<%s%U%!%$%k>pJs(B
($B%H%l%s%I%^%$%/%m(B)
$B$N>\:Y>pJs$,!":G?7%Q%?!<%s$@$1$K$J$C$F$7$^$C$F$$$^$9!#(B
$B$A$$$A$c$s$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!!:G?7%Q%?!<%s$O(B
http://www.trendmicro.com/ftp/products/pattern/whatsnew.txt
$B$N$h$&$J$N$G!"$3$l$r?t@$BeJ,J]B8$9$k$h$&$K$9$l$P$$$$$s$G$9$+$M$(!#(B
$B!U(B
$B%_%5%$%kKI1R!"G[HwA0$O8=M-$N%Q%H%j%*%C%H#2$G7^7b(B
($BFIGd(B, 2/16)$B!#(B
$B#P#A#C#2$OK\Mh!"9R6u5!$d
$B!!$=$7$FPerformance of the Patriot Missile System
(ceip.org) $B$h$j!#(B
Independent review of the evidence in support of the Army claims reveals that, using the Army's own methodology and evidence, a strong case can be made that Patriots hit only 9 percent of the Scud warheads engaged, and there are serious questions about these few hits. It is possible that the Patriots hit more than 9 percent, however, the evidence supporting these claims is even weaker.
$B!!$7$+$b4|BT$N(B PAC 3 $B$b!"(B$B?77?!X%Q%H%j%*%C%H!Y%_%5%$%k!"7^7b@:EY$O8~>e$7$?$+(B
(WIRED NEWS, 2003.03.25) $B$K$h$k$H(B:
$BAG@2$i$7$$%7%9%F%`$N$h$&$K;W$($k!=!=M}O@E*$K$O!#$7$+$72A$,@:$$$C$Q$$$@!#=i4|$N3+H/CJ3,$K$*$1$k
$B$H$$$&3Z$7$$@-G=$7$+;}$C$F$$$J$$$h$&$G$9!#(B
good luck.
$B!!4XO"(B:
$B!U(B
Apple Computer Mac OS X v10.3.6 and Apple Computer Mac OS X Server v10.3.6,
both with Common Criteria Tools Package
(NIST)$B!#(BMac OS X 10.3.6 + Common Criteria Tools 1.0
$B$,(B EAL 3 $B$rEAL 3 $B$O(B C2 $B$KAjEv$9$k(B$B$=$&$G$9!#(B
$B!!(Binfo from: P-141: HP Web-enabled Management Software Vulnerability
(CIAC, 2005.02.16)$B!#1F6A$9$k%W%m%@%/%H(B:
PRODUCTS AFFECTED:
* HP Insight Management Agents for Servers
* HP Version Control Repository Agent
* HP Version Control Agent
* HP Insight Manager 7
* HP Array Configuration Utility
* HP Performance Management Pack
* HP Performance Management Pack Tools
* ProLiant Performance Analyzer
$B!!(BHP $B$J5!3#$,F~$C$F$$$k4D6-$@$H!"$1$C$3$&1F6A$7$F$$$?$j$9$k(B?
($B$h$/$o$+$i$s(B)
- Windows SharePoint Services $B$*$h$S(B SharePoint Team Services $B$N@H
$B!!(BSharePoint Portal Server 2003 $B$H(B
Small Business Server 2003 $B$K$O(B Windows SharePoint Services
$B$,4^$^$l$F$$$k$?$a!"$3$N7g4Y$N1F6A$r
$B!!(BIE 5.01 SP4 / 6 SP[12] $B$K7g4Y!#%9%F!<%?%9%P!<$KI=<($5$l$k%j%s%/@h(B URL $B$r56Au$9$k$3$H$,2DG=!#(B
$B;XE&J8=q$K<($5$l$F$$$k$b$N$rMxMQ$7$?(B$B%G%b%Z!<%8(B$B$r$D$/$C$F;n$7$?$H$3$m!"
$B!U(B
$B%9%Q%$%&%'%"%Q%?!<%s%U%!%$%k(B 0.229.00 $B$K$*$1$k8m7Y9p>pJs(B
($B%H%l%s%I%^%$%/%m(B)$B!#$^$?$^$?$^$?$G$9$+!#(B
$B!U(B
DCT$B!J%@%a!<%8%/%j!<%s%J%C%W%F%s%W%l!<%H!K(B 513 $B$K$*$1$k8m7Y9p>pJs(B
($B%H%l%s%I%^%$%/%m(B)$B!#$^$?$^$?$G$9$+!#(B
$B>.=P$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
$B%&%$%k%9%Q%?!<%s%U%!%$%k$N99?7%5%$%/%kJQ99$N$*CN$i$;(B
($B%H%l%s%I%^%$%/%m(B) $B$,2~D{$5$l$F$$$k!#(B
$B?7%5%$%/%k3+;OM=DjF|(B
$BL$Dj(B
2005$BG/(B2$B7n(B15$BF|(B ($BF|K\;~4V(B)$B$rM=Dj$7$F$*$j$^$7$?$,!":FEY3+;OF|$r8+D>$91?$S$H$J$j$^$7$?!#(B
$BM=Dj$,$o$+$j
$B!!!D!D$^$"!"6a!9$K$=$&$J$kM=Dj$G$"$k$3$H$K$OJQ$o$j$O$J$$$N$G$7$g$&$,!#(B
$B>.=P$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
$BF|N)!"(BHDD$BHsEk:\(BPC$B$J$I$rMQ$$$?>pJsO3$($$BP:v%=%j%e!<%7%g%s(B
(Enterprise Watch, 2/15)$B!#(B
$B!Z(BNET$B!u(BCOM2005 $B%l%]!<%H(B No.4$B![%3%m%s%V%9$NMq$+!)!!(BNEC$B%F%l%M%C%H%o!<%/%9!!%;%-%e%j%F%#K|A4$J(BHDD$B%l%9$N%N!<%H(BPC$B$r=PE8(B ($B%i%$%V%I%"(B)
$B$H$$$&$N$b$"$k$H$&$($7$^$5$s$K$*$7$($F$$$?$@$-$^$7$?(B ($B$"$j$,$H$&$4$6$$$^$9(B)$B!#(B
$B!!$3$N$"$?$j$NOC$O!"(B$BF|7P%3%s%T%e!<%?(B 2005.2.7 $B$N(B
$B!V!Z%/%m!<%:%"%C%W![(B $B%/%i%$%"%s%H5!$NK\L?$K$J$k$+(B $B!H%V%l!<%I(BPC$B!I$N@5BN!W(B
$B$G$b07$C$F$$$^$7$?$M!#(B
$B%V%l!<%I(B PC $B$G$0$0$k(B$B$H$$$m$$$m=P$F$-$^$9!#(B
$B!U(B
$B65?&0w;&=}$GBaJa$N>/G/;aL>7G:\!"Bg:eK!L36I$,#2$A$c$s$M$k$J$I$K:o=|MW@A(B
(Internet Watch, 2/16)$B!#85$O$H$$$($P(B
$B#1#7:PMF5?!"%U%8%F%l%S!V$H$/%@%M!*!W$GJ|1G(B
($BFIGd(B, 2/15) $B$G$9$+$i$M$(!#(B
$B!U(B
$B%Z%M%H%l!<%7%g%s%F%9%?!<$N$?$a$N(Bgoogle$B%O%C%-%s%0(B
($BIpED7=;K(B, 2/16)$B!#(B
$B>R2p$5$l$F$$$k(B
$B%5%$%P!$B$O$b$7$+$9$k$H>C$($A$c$&$+$b$H;W$C$?$N$G$$$=$$$G(B get $B$7$F$*$$$?!#(B
google $B%O%C%-%s%0$K$D$$$F$O(B
$B%O%C%+!<%8%c%Q%s(B
2005 $BG/(B 3 $B7n9f$G$b
$B!U(B
Gates Highlights Progress on Security, Outlines Next Steps for Continued Innovation
(Microsoft, 2/15)
Gates announced Internet Explorer 7.0, designed to add new levels of security to Windows XP SP2 while maintaining the level of extensibility and compatibility that customers have come to expect. Internet Explorer 7.0 will also provide even stronger defenses against phishing, malicious software and spyware. The beta release is scheduled to be available this summer.
$B!!(BIE 7 $B&B$,$3$N2F$KEP>l!#$?$@$7(B Windows XP SP2 $B$G$7$+F0$+$J$$(B?!
Microsoft $BE*$K$O!"(BWindows XP SP1 $B0JA0$O$b$O$d!V%l%,%7!
To further simplify the update process, Gates announced that a beta version of Microsoft Update, a unified update service for consumers and small businesses that includes technologies such as Windows XP, Windows 2000, Windows Server$B"o(B 2003, Office 2003 and Exchange Server 2003, is scheduled for release in mid-March.
$B!!(BMicrosoft Update $B&B$,(B 3 $B7nCf=\$KEP>l!#(B
In addition, Gates announced that version 2.0 of the Microsoft Baseline Security Analyzer (MBSA), a tool to help identify common security misconfigurations, will be available in the same timeframe as Windows Update Services, and will work seamlessly with Windows Update Services to provide consistency in scanning and deployment.
$B!!(BMBSA 2.0 $B$,(B Microsoft Update Services $B$HF1;~$KEP>l!#(B
$B!!4XO"(B:
RSA Conference 2005
($BF|K\$N%;%-%e%j%F%#%A!<%`$N(B Blog, 2/16)
$B!U(B
$B%M%*%3%s@oN,$NI|3h(B
(tanakanews.com, 2/16)
$B!U(B
$B%A%'%A%'%s%K%e!<%9(B Vol.05 No.04 2005.02.12$B!#(B
$B!V%A%'%A%'%sDd@o$N%$%s%Q%/%H!W!VL?$N4m81$K$5$i$5$l$k%A%'%A%'%s$N?M8"GIJ[8n;N!W(B
$B!U(B
$BJF(BCisco Systems$B!$!H<+8JKI1R7?!I%;%-%e%j%F%#BP:v@=IJ$rH/I=(B
($BF|7P(B IT Pro, 2/16)
$B!U(B
$BM-8B@UG$Cf4VK!?M#J#P#C#E#R#T%3!<%G%#%M!<%7%g%s%;%s%?!<$N5a?M0lMw(B
($B%j%/%J%S#N#E#X#T(B)$B!#BgNS$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!V$=$s$J(B JPCERT/CC$B!"=$@5$7$F$d$k(B!$B!W$H;W$C$F$$$k$"$J$?!"=PHV$G$9!#(B
($B!V$3$l$,
$B!!40A4HG(B SHA-1 $B$,GK$i$l$?$=$&$G$9!#(B
$B4XO"(B: SHA-1$B$,GK$i$l$?!)(B
($BIpED7=;K(B)
2005.04.07 $BDI5-(B:
$B!!(B$B2rFI$5$l$?(BSHA-1: $B!V(BCRYPTO-GRAM$B!!(BMarch 15, 2005$B!W$h$j(B
($BF|7P(B IT Pro, 2005.04.07)
$B!U(B
$B#1#7:PMF5?!"%U%8%F%l%S!V$H$/%@%M!*!W$GJ|1G(B
($BFIGd(B, 2/15)$B!#$@$a$9$.$G$9$J$"!#(B
$B!U(B
$B!cJF%_%5%$%kKI1R!d7^7b
($BKhF|(B / yahoo, 2/15)$B!#%P%+$_$?$$$K6b$,$+$+$k>e$K!"Ev$?$i$J$$!#(B
$B@5D>8@$C$F!"BPKL$H$$$&0UL#$G$O!"(BMD $B$h$j$b%H%^%[!<%/(B 1000 $BH/Gc$C$?J}$,0B$$>e$K0UL#$b$"$k$H;W$&$,!D!D!#(B
$B!U(B
Sunday, February 13, 2005:
War of the Worlds
(F-Secure: News from the Lab)$B!#(B
$B!V(B$B1'Ch@oAh(B$B!W$N(B US $B8x<0%5%$%H(B$B$,%d%i%l$F$$$?$s$G$9$M!#(B
$B!U(B
$B%=%U%)%9!"%W%m%"%/%F%#%V$J8!CN$G!"B?MM2=$9$k%&%$%k%9$N6<0R$r2r7h$9$k?7$7$$%(%s%?!<%W%i%$%:%=%j%e!<%7%g%s$rH/I=(B
($B%=%U%)%9(B, 2/15)$B!#!V0dEA;R7?!W8!CN5;=Q(B?
$B!U(B
S.M.A.R.T.$BBP1~(BHDD$B$N!H7r9/EY!I$r%Q!<%;%s%HI=<($G$-$k!V(BHDDlife$B!W$,8x3+(B
($BAk$NEN(B, 2/10)
$B!U(B
[AML 0447] $BET650Q$N<7@8M\8n3X9;$X$N967b$KBP$7$FJ[8n;N2q$,!V7Y9p=q!W(B$B!#(B
$B!U(B
$B%N%k%&%'!<@/I\!"(BCD$B$N%3%T!<$r@)8B$9$k?7K!0F(B
(ITmedia, 2/14)$B!#;~Be$K5U9T$9$k$h$&$JOC$@$J$"!#(B
$B!U(B
SCO$B$N>Z5r$OA4$/IT==J,!=!=H=;v$,CGDj(B
(ITmedia, 2/14)
$B!U(B
sudosh
1.4.2 $B$,=P$F$$$^$9!#(B
$B!U(B
351$B7o$N%O%s%2!<%`%f!<%6!<(BID$B$KIT@5%"%/%;%9!"$&$A(B131$B7o$K$O
(Internet Watch, 2/14)
$B!U(B
GHH - The "Google Hack" Honeypot
1.0 $B$,=P$?$=$&$G$9!#(B
$B!U(B
nmap
3.81 $B$,=P$?$=$&$G$9!#(B
$B!!(BMozilla 1.7.5 / Firefox 1.0 $B$K(B 3 $B$D$N7g4Y!#(B
[Full-Disclosure] Firedragging [Firefox 1.0] (bugid 279945)$B!#(B
$B@hF,$K$O(B gif $B2hA|$,$D$$$F$$$k$,!"$=$l$KB3$1$F(B DOS $B$N(B Batch $B%3%^%s%I$,B3$/$h$&$J%U%!%$%k(B ($B%G%b(B$B;2>H(B) $B$r:n@.$7!"(B.bat $B3HD%;R$r$D$1(B image/gif $B$GDs6!$9$k!#(B
web $B%V%i%&%62hLL>e$G$O2hA|$H$7$FI=<($5$l$F$$$k$,!"$=$N2hA|$r%G%9%/%H%C%W>e$K(B drag & drop $B$9$k$H(B .bat $B$H$7$FJ]B8$5$l$F$7$^$&!#(B
[Full-Disclosure] Firetabbing [Firefox 1.0] (bugid 280056)$B!#(B
$BK\MhL5;k$5$l$k$h$&$J(B javascript: URL $B$N(B drag & drop
$B$,!"(B
$B%?%V4V$G$OM-8z$KF/$$$F$7$^$&!#(B
$B%&%#%s%I%&4V$N(B drag & drop $B$OL5;k$5$l$k$N$K%?%V4V$G$OM-8z$KF/$$$F$7$^$&!#$3$N7k2L!"(Bcookie $B$NO31H$dG$0U$N%3!<%I$N
[Full-Disclosure] Fireflashing [Firefox 1.0] (bugid 280664)$B!#(B
$B%W%i%0%$%s$+$i(B about:config $B$d(B file:/// $B%j%s%/$K%"%/%;%9$G$-$F$7$^$&!#(B
$B!!
2005.02.28 $BDI5-(B:
$B!!(BFirefox 1.0.1 $B=P$^$7$?!#(B
$B>e5-7g4Y$,=$@5$5$l$F$$$^$9!#(B
2005.03.02 $BDI5-(B:
$B!!(BMozilla Advisory:
$B!!(BZoneAlarm / Check Point Integrity $B$K7g4Y!#(B
local user $B$,(B DoS $B967b$r
$B!!(BZoneAlarm $B$N>l9g$O<+F0%"%C%W%G!<%H$K$h$j<+F0E*$K=$@5$5$l$k!#(B
Check Point Integrity $B$O(B 4.5.122.000 / 5.1.556.166 $B$G=$@5$5$l$F$$$k!#(B
$B!!(BSquirrelmail S/MIME plugin 0.5 $B0JA0$K7g4Y!#F~NOCM$N=|@w$,IT40A4$J$?$a!"G'>Z$5$l$?(B remote $B%f!<%6$,(B
web $B%5!<%P8"8B$GG$0U$N%3!<%I$r
$B!!(BS/MIME plugin 0.6 $B$G=$@5$5$l$F$$$k!#(B
$B!!(BExchange 2003 $B$N(B Outlook Web Access $B$K7g4Y!#(B
$B%m%0%*%sMQ$N(B asp $B%Z!<%8$,(B https://[owa-host]/exchweb/bin/auth/owalogon.asp
$B$K$"$k>l9g$K!"(B
https://[owa-host]/exchweb/bin/auth/owalogon.asp?url=http://3221234342/
$B$K%"%/%;%9$9$k$H!"G'>Z8e$K(B http://3221234342/ (= http://192.0.34.166/ = http://example.com/) $B$K%j%@%$%l%/%H$5$l$F$7$^$&!#(B
https://[owa-host]/exchweb/bin/auth/owalogon.asp?url=http://3221234342/virus.exe
$B$NJ}$,$o$+$j$d$9$$$+!#96N,%j%s%/$D$-$N(B HTML $B%a!<%kEy$r8+$F!"%j%s%/$r%/%j%C%/$9$k$H!"!D!D!#(B
$B!!$J$*!"$3$N7g4Y$O$5$l$k$=$&$G$9!#(B
Exchange 2003 SP2?
$B!!(BEmacs 21.3 $B0JA0(B / XEmacs 21.4 $B0JA0$KIUB0$N(B movemail $B$K7g4Y!#(B
popmail() $B$K(B format $B%P%0$,$"$j!"96N,(B pop $B%5!<%P$K@\B3$9$k$HG$0U$N%3!<%I$r
fix / patch:
$B!!(BPDFml-J ML $B%"!<%+%$%V$N%"%/%;%9%"%+%&%s%H$K$D$$$F$O(B
$B!Z2a5n%a!<%k$N
$B$r;2>H!#(B
$B!!(BPDF $B$K$OE:IU%U%!%$%k$r@_CV$9$k$3$H$,$G$-$k$,!"$3$NE:IU%U%!%$%k$,%&%$%k%9$K46@w$7$F$$$F$b!"%"%s%A%&%$%k%9%=%U%H$G$O8!=P$5$l$J$$$h$&$@!"$H$$$&;XE&!#(B
$B[PDFml-J:03644]$B!"$d$O$j8!=P$5$l$J$+$C$?!#(B
$B$J$*!"$3$NOC$O2?G/$bA0$K;XE&$5$l$F$$$k(B
[PDFml-J:03641]
$B$=$&$G!"$=$l$O(B
Adobe PDF files can be used as virus carriers (Richard M. Smith)
$B$G$O$J$$$+$H;W$o$l!#(B
$B!!(BAWStats
6.3 ($B:G?7(B stable) $BHG0JA0$K7g4Y!#(B
awstats.pl $B$,(B CGI $B$H$7$Fl9g$K!"F~NO$KBP$9$k=|@w=hM}$K7g4Y$,$"$j!"(B
remote $B$+$i(B
$B!U(B
$B!VEl5~?M:`6d9T!W$N#H#P2~$6$s!"Dd;_!!3$30$N%O%C%+!<$+(B
(asahi.com, 2/14)$B!#(B
DEFACEMENT DETAILS: http://www.tokyo-jingin.go.jp
(zone-h)
$B!U(B
ClamAV
0.83 $B$,=P$?$=$&$G$9!#(B
due to a high number of bad files produced by broken software, the
MS05-002 exploit detector now only checks specific RIFF files. This version
also fixes a stability problem of clamav-milter/clamd and improves e-mail
scanning.
$B!!$&!<$s!"%F%9%H$,B-$j$J$$$N$+$J!D!D!#$=$N$/$;(B freshclam $B$N%m%0$K$O(B
WARNING: Your ClamAV installation is OUTDATED - please update immediately!
$B$H$+J?5$$G=P$9$7$J$"!#(B
$B!U(B
$B!Z;vNc![(BIC$B%+!<%I$d(BVPN$B$NF3F~$G>pJsO3$($$;v7o$N:FH/KI;_$X(B---$B1'<#;T!J>e!K(B
($BF|7P(B IT Pro, 2/15)$B!#(B
$B!U(B
NTT$B%I%3%b!'(B
$B7HBS$N8\5R>pJs(B2$BK|(B4632$B7oN.=P(B
($BKhF|(B, 2/14)$B!#(B
$B:#7n(B9$B!"(B11$BF|!"D+F|?7J9
$B!!D+F|$N5-;v(B: $B%I%3%b!"8\5R#2K|?MD6$9>pJsN.=P!!#93d$,CO?LHo:R
(asahi.com, 2/14)
$B!!%*%j%8%J%k(B: $B$*OM$S$H$*CN$i$;(B
(NTT $B%I%3%b(B, 2/14)
$BCf1[CO?L$NHo:RCO0h$K$D$$$FNA6b8:LHA
$B!!$D$$:G6a$N8\5R>pJs$G$9$M$(!D!D!#(B
$B!U(B
$BCf9q$H%$%i%s$X%_%5%$%kL)M"5?OG!!%&%/%i%$%J!"%/%A%^A0@/8";~(B
($B;:7P(B, 2/8)$B!#(B
AS-15 $B$H$$$&$N$O6uCfH/
$B!U(B
$B>2<$,%8%c%9%H%7%9%F%`$rFC5v8"?/32$GAJ$($^$7$?!#El5~CO:[$G$O>>2<$NA4LL>!AJ$K$J$j$^$7$?$,!"IT2D2r$K;W$&?M$bB?$$$O$:!#$3$N7o$K$D$$$F!"$"$J$?$,0lHV0-$$$H;W$&$N$O!)(B
($B%j%"%k%?%$%`@$O@D4::(B@$B%$%s%?!<%M%C%H(B)$B!#(B
$B8D?ME*$K$O!"$3$s$J$b$N$KFC5v$rM?$($k$N$,$@$a$@$H;W$C$F$$$k$N$G$=$N$h$&$KEjI>2<$N>2<(B = $B0-!"$H$$$&$N$O$$$5$5$+C1=c$9$.$k8+J}$@$H;W$&$7!#(B
$B%8%c%9%H%7%9%F%`$b!">/$J$/$H$b(B
2005 $BHG$G$O!V!)!W$@$1$K$7$F$1$P$h$+$C$?$N$K$H;W$&$7!#(B
$B8=>u$G$O!"%8%c%9%H%7%9%F%`$K$O!V8\5RJ]8n!W$H$$$&4QE@$,7g$1$F$$$k(B ($B8\5RJ]8n$h$j$b<+
$B!U(B
$B%U%!!<%_%s%0:>5=$H6hJL$,$D$+$J$$<+<#BNEE;R?=@A%5%$%H(B
($B9bLZ9@8w!w<+Bp$NF|5-(B, 2/12)$B!#D`$jJ}$,$A$,$&$@$1$G!"$I$C$A$bD`$j$@$H;W$&$1$I$J$"!#2<-Mh$K!VJ#9g7?$N6<0R!W$H$+8@$C$F$a$s$I$/$5$$@bL@$r$7$J$/$A$c$$$1$J$/$J$k5$$b$9$k$7!#$=$l$h$j$O!":#$+$i!V%U%#%C%7%s%0:>5=$K$b$$$m$$$m
$B!U(B
$B!VCNE*:b;:?d?J7W2h#2#0#0#4!W$N8+D>$7$K4X$9$k0U8+Jg=8(B
$B$K%U%'%"%f!<%9$M$?$G%a!<%k$r=P$7$F$_$?!#Dy@Z$OK\F|(B 17:00$B!#(B
iTMS $B$r;H$$$?$$$"$J$?!"0U8+$rI=L@$7$^$7$g$&!#(B
$B!U(B
$B$1$s$N$\$d$-(B 2005-02-14 $B$+$i(B:
Description of Promqry 1.0 and PromqryUI 1.0
(Microsoft)$B!#(B
chkrootkit
$B$N(B ifpromisc $B%3%^%s%I$N$h$&$J$b$N$N$h$&$@!#(B
Both tools require the .NET Framework in order to run.
$B$J$N$G(B .NET Framework $B$r%$%s%9%H!<%k$7$F$*$-$^$7$g$&!#(B
Promqry and PromqryUI may report that the physical interface is running in Promiscuous mode on a Windows-based computer that is running Microsoft Virtual PC and/or Microsoft Virtual Server.
$B
$B%W%l%$%*%s%i%$%s$N%"%+%&%s%HEpMQ$K$D$$$F(B (playonline.com, 2/8)$B!#(B
$B:#2s$N7o$rF'$^$($F!"%W%l%$%*%s%i%$%s$r$4MxMQ$N$*5RMM$K$*4j$$$,$4$6$$$^$9!#%&%'%V>e$G$N%W%l%$%*%s%i%$%s$+$i$N$40FFb$O!"$9$Y$F!V(Bplayonline.com$B!W%I%a%$%s$N%&%'%V%Z!<%8$K$FDs6!$7$F$*$j$^$9!#%W%l%$%*%s%i%$%s(BID$B$d%W%l%$%*%s%i%$%s%Q%9%o!<%I$rF~NO$5$l$k>l9g$K$O!"!V(Bplayonline.com$B!W%I%a%$%s$N%&%'%V%Z!<%8$G$"$k$3$H$r==J,$K$43NG'$/$@$5$$!#(B
$B3NG'J}K!$O$I$3$K$b5-:\$5$l$F$$$J$$!"$H$$$&$N$,%_%=$G$7$g$&$+!#(B
Advanced SQL Injection in Oracle databases
(2/4)
Security Configuration Guides (NSA)$B!#(B
.NET Framework, Office XP/2003, Mac OS X $BMQ$N%I%-%e%a%s%H$,MQ0U$5$l$F$$$k!#(B
- PNG $B=hM}$N@H
$B!!(BMS05-009
$B$K7Y9p$,DI2C$5$l$?!#(B
$B7Y9p(B : 2005 $BG/(B 2 $B7n(B 10 $BF|(B ($BJF9qF|IU(B) $B$+$i!"(BMSN Messenger $B%5!<%S%9$O!"(BMSN Messenger $B$N1F6A$rl9g$,$"$j$^$9!#(B
$B!!$H$$$&$o$1$G!"%"%C%W%0%l!<%I$7$^$7$g$&!#(B
- F-Secure $B%"%s%A%&%$%k%9(B $B%i%$%V%i%j(B $B%*%P!<%U%m!<(B
$B!!(BF-Secure $B%"%s%A%&%#%k%9@=IJ%P%C%U%!%*!<%P%U%m!<@H ($BF|K\%(%U!&%;%-%e%"(B, 2005.02.14)$B!#(B
$BF|K\8lHGBP1~(B patch $B=P$F$$$^$9(B ($BK\2H$HF1$8$+$b$7$l$J$$$1$I(B)$B!#(B
littlecub $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
- SYM05-003:
$B%7%^%s%F%C%/$N(B UPX $B2r@O%(%s%8%s$K%R!<%W(I%$B%*!<%P!<%U%m!<$N@H
$B!!(BSYM05-003 $B$,BgI}$K2~D{$5$l$F$$$k!#(B
$BBg7'$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#2~D{HG$K$h$k$H!"(B
Symantec AntiVirus Corporate Edition 9.0
$B$K$O$3$N7g4Y$O$J$$!#(B
$BF|K\8lHG$N(B
Symantec AntiVirus Corporate Edition 8.0 / 8.1
$B$K$O$3$N7g4Y$O$J$$!#(B
$B1Q8lHG$K$O7g4Y$,B8:_$7!":G?7HG$G=$@5$5$l$F$$$k!#(B
Symantec AntiVirus Corporate Edition 7.6 $B$K$O$3$N7g4Y$O$J$$!#(B
Symantec Client Security 2.0 $B$K$O$3$N7g4Y$O$J$$!#(B
$BF|K\8lHG(B Symantec Client Security 1.0 / 1.1 $B$K$O$3$N7g4Y$O$J$$!#(B
$B1Q8lHG$K$O7g4Y$,B8:_$7!":G?7HG$G=$@5$5$l$F$$$k!#(B
$B!U(B
pharming$B!J%U%!!<%_%s%0!K!=!=%*%s%i%$%s:>5=$O!VD`$j!W$+$i!VG@6H!W$X!)(B
($BF|7P(B IT Pro, 2/9)$B!#(B
$B%9%Q%$%&%'%"$H$+(B bot $B$b$N$K(B
DNS spoof $B%(%s%8%s$_$?$$$J$b$N$,I8=`AuHw$5$l$?$j$9$k$H%9%2!<7y$@$J$"!"(B
$B$H$$$&?4G[$r:G6a$7$F$$$?$j!#$G$b;~4V$NLdBj$+$b!#(B
$B$=$&$J$kA0$K(B DNSSEC $B$,N.9T$C$F$/$l$l$PLdBj$J$$$+$b$7$l$J$$$,!#(BDNSSEC $BMQ$N(B root CA $B9=C[;q6b=P$7$F$/$@$5$$(B > $B7P;:>J$5$s(B?
1 $B2/1_(B/$BG/$/$i$$(B?
$B!U(B
[AML 0464] $B!Z%"%`%M%9%F%#$h$j6[5^9TF0MW@A![F|K\!'%/%k%I?MAw4T$N4m5!!&0eNE>e$N7|G0(B
$B!U(B
TerraServer-USA
(Microsoft) $B$J$s$F$b$N$,$"$k$s$G$9$M!#(B
Eyeballing the FEMA Federal Support Center
(cryptome, 2/11)
$B$GCN$j$^$7$?!#(B
$B!U(B
A satellite image of North Korea's 5MW nuclear reactor, taken in September 2004 and released today by Digital Globe, appears to show that a perimeter security fence has been removed on the river side of the facility
(cryptome, 2/11)$B!#$J$s$G$@$m!A(B
- $BKLD+A/$OJ?OB$J$N$G%U%'%s%9$OITMW(B
- $B$B;q:`ITB-$,$"$^$j$K?<9o$J$N$G%U%'%s%9$O$R$C$Z$,$7$FB>$KE>MQ$7$A$c$$$^$7$?(B
- $B!D!D(B
OpenPGP$B$O5pBg$J%U%!%$%k$rI|9f2=$9$k:]$KA4It$rI|9f$7$J$/$F$b80$,4V0c$C$F$$$k$+$I$&$+$9$0$K%A%'%C%/$G$-$k;EAH$_$rHw$($F$$$k!#(B
$B!!MxJX@-$rDI5Z$9$k$H%;%-%e%j%F%#$O!D!D$NE57?;vNc$J$@$1$N5$$,!#(B
$B$^$"!"$3$N7g4Y$,O*Dh$9$k$h$&$J(B ($B0lHLE*$G$O$J$$(B) $B>u67$K$*$$$F$b(B
$B9,$$$K$b(BOpenPGP$B$N>l9g$O0E9f2=$NA0$KF~NO$r05=L$9$k$N$,0lHLE*$J$?$a!"05=L$5$l$?%G!<%?$NCGJR$7$+F@$i$l$:!"K\Ev$NJ?J8$N:F9=C[$O:$Fq$@!#(B
$B$@$=$&$J$N$G!":#$9$0?4G[$9$kI,MW$O$J$5$=$&$G$9$,!#(B
2005.03.25 $BDI5-(B:
$B!!(BGnuPG 1.4.1 $B=P$F$$$^$9!#(B
Added countermeasures against the Mister/Zuccherato CFB attack
<http://eprint.iacr.org/2005/033>
$B!!(BGnuPG 1.2.7 / 1.4.0 $BMQ(B patch:
[Announce] Attack against OpenPGP encryption
2005.08.23 $BDI5-(B:
$B!!(BCVE: CAN-2005-0366
$B!!F|K\$N6d9T%-%c%C%7%e%+!<%I$O!"Bg
$B!!$b$C$H$b!"!V(BIC $B%+!<%I2=!W$K$b$$$m$$$m$"$C$F!"(B
$B$H$$$&$N$b$"$k$N$GCm0U$,I,MW$+$H!#3N$+$K!V(BIC $B%+!<%IHsBP1~!W$J(B ATM $B$b$^$@$^$@B?$$$@$m$&$H$O;W$$$^$9$,!"$G$b$M$(!#(BUFJ $B6d9T$N>l9g$O!"<'5$%+!<%IItJ,$K$D$$$F$O!"(B
$B$=$l0J30$N#A#T#M(B($BB>9T#A#T#M!&Ev9T#I#C%+!<%IL$BP1~#A#T#M$J$I(B)$B$r$4MxMQ$N>l9g$O!"$"$i$+$8$a$*?==P$$$?$@$$$?!"#1F|$"$?$j$NMxMQ8BEY3[(B($BNc$($P(B10$BK|1_(B)$B$rD6$($?=P6b(B($B$*0z=P$7!"$*?69~$_!"$*?6BX$($=$l$>$l$K$D$$$F(B)$B$r@)8B$$$?$7$^$9!#(B
$B$H$$$&KI8f(B ($BMxMQ8BEY3[%5!<%S%9(B) $B$O$$$A$*$&$"$k$_$?$$$G$9$,!"!V%5!<%S%9$r?=$79~$^$J$$$H;H$($J$$!W$H$$$&$N$,$=$b$=$b!D!D!#>e5-Nc$G$b!"KhF|(B 10 $BK|$:$D0z$-=P$5$l$F$$$k;v$K5$$,$D$+$J$+$C$?$i%*%o%j$J$o$1$@$7!"$$$^$$$A%$%1$F$J$$5$$,!#$?$H$($P%$!<%P%s%/6d9T$,(B 4 $B7n$+$iM=Dj$7$F$$$k!V(BATM$BA`:n;~$NB(;~%a!<%kDLCN!W$_$?$$$J$b$N$,$"$C$F$[$7$$$J$"!#(B
$B$"$H!"MxMQ8BEY3[%5!<%S%9$rL@<(E*$K@_Dj$7$J$$>l9g$O!"<'5$%+!<%IItJ,$r;H$C$?=P6b$,%G%U%)%k%H$GL58z2=$5$l$k$H$+$@$H$&$l$7$$$h$&$J!#(B
$B!!4XO"(B:
$BBg
(asahi.com / goo, 2005.02.09)
$B;00f=;M'!"$_$:$[!"#U#F#J$N#39T$O#I#C$H<'5$<0$rJ;MQ$9$k!#(B($BCfN,(B)
$B$3$l$KBP$7El5~;0I)$O!"@8BNG'>Z5!G=IU$-#I#C%+!<%I$+$i!"<'5$<0$G0z$-=P$;$k5!G=$r$J$/$7$?!#$3$N%+!<%I$rA*$V$H!"El5~;0I)$N#I#CBP1~#A#T#M0J30$G;H$($J$/$J$k$,!"56B$Ho32$KAx$C$?>l9g$O#5#0#0K|1_!JG/2qHq#1K|#5#0#01_$J$i#12/1_!K$^$GJd=~$9$k!#(B
$B56B$:$Fq#I#C%+!<%I2=!"#9#5!s$N6d9T%a%IN)$?$:(B
($BFIGd(B / goo, 2005.02.02)$B!#(B
$B$J$+$J$+%-%S%7%$$h$&$G$9!#(B
2005.02.21 $BDI5-(B:
$B!!(B$B0BA4?@OC$r:n$i$;$F$O$J$i$J$$(B
($B:j;3?-IW$N(BBlog, 2005.02.15)$B!#8m2r$r>7$/5-=R$G$4$a$s$J$5$$!#(B
$B!!(Bmailman 2.1.5
$B0JA0$K7g4Y!#(Bprivate.py $B$K$*$1$k=|@w=hM}$,IT==J,$J$?$a$K(B
directory traversal $B7g4Y$,H/@8!"(Bremote $B$+$iG$0U$N%U%!%$%k$rFI$_=P$9$3$H$,2DG=!#(B
CVE: CAN-2005-0202
$B!!=$@5HG$O$^$@$J$$!#$H$j$"$($:BP1~$9$k$K$O!"(Bprivate.py $B$N(B
true_path() $B$r(B
$B;XE&J8=q(B
$B$K$"$k$h$&$K=q$-$+$($k!#(B
fix / patch:
$B!!(BF-Secure Anti-Virus for Workstation version 5.43 $B0JA0(B / for Windows Servers version 5.50 $B0JA0$J$I!"(BF-Secure $B$N%"%s%A%&%$%k%9@=IJ$K7g4Y!#(B
ARJ $B=q8K%U%!%$%k$N=hM}$K$*$$$F(B buffer overflow $B$9$k7g4Y$,$"$j!":Y9)$7$?(B
ARJ $B%U%!%$%k$K$h$C$FG$0U$N%3!<%I$r
$B!!(BF-Secure Internet Security / F-Secure Anti-Virus 2004 / 2005$B!"(B
F-Secure Personal Express $B$K$D$$$F$O<+F0E*$K99?7$5$l$k$=$&$@$,!"(B
$BF|K\8lHG(B F-Secure Internet Security / F-Secure Anti-Virus $B$G$b$=$&$J$N$+$OITL@!#$=$&$@$H$7$F$b!"8=;~E@$G=$@5$,MQ0U$5$l$F$$$k$N$+$I$&$J$N$+!#(B
$B8DJL(B patch $B$rF~l9g$O(B
F-Secure Anti-Virus 5 hotfixes
$B$K$"$k$h$&$@!#(B
$B$^$?%2!<%H%&%'%$@=IJ$d(B Linux $BHG@=IJ$J$I$K$D$$$F$O!"(B
F-Secure Security Bulletin FSC-2005-1:
Code execution vulnerability in ARJ-archive handling
$B$K8DJL(B patch $B$,<($5$l$F$$$k$,!"$3$l$bF|K\8lHG$N%W%m%@%/%H$KE,MQ$7$F$$$$$N$+$I$&$+$O$h$/$o$+$i$J$$!#(B
2005.02.14 $BDI5-(B:
$B!!(BF-Secure $B%"%s%A%&%#%k%9@=IJ%P%C%U%!%*!<%P%U%m!<@H ($BF|K\%(%U!&%;%-%e%"(B, 2005.02.14)$B!#(B
$BF|K\8lHGBP1~(B patch $B=P$F$$$^$9(B ($BK\2H$HF1$8$+$b$7$l$J$$$1$I(B)$B!#(B
littlecub $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!!(B.NET Framework 1.0 SP2 / SP3, .NET Framework 1.1 gold / SP1 $B$K7g4Y!#(B
ASP.NET $B$K$*$1$k%Q%9L>$N@55,2=$BJs9p$5$l$?(B Microsoft ASP.NET $B$N@HpJs(B
$B$NOC!#(B
CVE: CAN-2004-0847
$B!!=$@5%W%m%0%i%`$,$"$k$N$GE,MQ$9$l$P$h$$!#(B
2005.03.17 $BDI5-(B:
$B!!$3$N(B patch $B$K$OI{:nMQ$,$"$kLOMM!#(B
$B!!(BKB887219
$B$K4XO"%j%s%/$r4^$a$F>pJs$,$"$k!#(B
KB887219 $BF|K\8lHG(B
$B$O!"99?7>u67$,1Q8lHG$KDI$$$D$$$F$$$J$$LOMM!#(B(3/18 $B$KDI$$$D$$$?$i$7$$(B)
2005.05.27 $BDI5-(B:
$B!!(BInstallation of .NET Framework service packs is not completed if you first install security update MS05-004 (Microsoft)$B!#(B
$B!!(BOffice XP (Word 2002, PowerPoint 2002), Project 2002, Visio 2002,
Works Suite 2002 / 2003 / 2004 $B$K7g4Y!#(B
$BD9Bg$J(B URL $B%m%1!<%7%g%s$K$h$C$F(B buffer overflow $B$,H/@8!"G$0U$N%3!<%I$r\:Y$K$D$$$F$O(B
Finjan Security Advisory: Microsoft Office XP Remote
Buffer Overflow Vulnerability
$B$r;2>H!#(B
CVE: CAN-2004-0848
$B!!=$@5%W%m%0%i%`$,$"$k$N$GE,MQ$9$l$P$h$$!#(B
$B!!4XO"(B:
$B!!(BWindows SharePoint Services $B$*$h$S(B SharePoint Team Services $B$K7g4Y!#(B
$B%/%m%9%5%$%H%9%/%j%W%F%#%s%07g4Y$,$"$j!"$3$l$rMxMQ$7$F0-0U$"$k%9%/%j%W%H$rCAN-2005-0049
$B!!=$@5%W%m%0%i%`$,$"$k$N$GE,MQ$9$l$P$h$$!#(B
2005.02.17 $BDI5-(B:
$B!!(BSharePoint Portal Server 2003 $B$H(B
Small Business Server 2003 $B$K$O(B Windows SharePoint Services
$B$,4^$^$l$F$$$k$?$a!"$3$N7g4Y$N1F6A$r
$B!!(BWindows XP $B$K7g4Y!#(B
$BL>A0IU$-%Q%$%W$+$i!"6&M-%j%=!<%9$K%"%/%;%9$7$?MxMQ$rCAN-2005-0051
$B!!=$@5%W%m%0%i%`$,$"$k$N$GE,MQ$9$l$P$h$$!#(B
$B!!>\:Y(B: Some details about MS05-007 security bulletin$B!#(B
The MS05-007 patch forbids the NetrSessionEnum operation in the context of a
NULL session.
$B!!(BWindows Media Player 9 (Windows 2000 / XP SP1 / Server 2003 $B>e$N$_(B)$B!"(B
Windows Messenger 4.7.2009 (Windows XP SP1) / 4.7.3000 (Windows XP SP2) /
5.0 ($BA4(B OS)$B!"(BMSN Messenger 6.1 / 6.2 $B$K7g4Y!#(B
PNG $B2hA|$N=hM}$K7g4Y$,$"$j!"G$0U$N%3!<%I$re$N(B Windows Media Player 9$B!"(B
Windows Messenger 5.1$B!"(BMSN Messenger for Mac $B$K$O$3$N7g4Y$O$J$$!#(B
CVE: CAN-2004-0597
CAN-2004-1244
$B!!=$@5%W%m%0%i%`$,$"$k$N$GE,MQ$9$l$P$h$$!#$J$*!"(B
MSN Messenger 6.1 / 6.2 $B$*$h$S(B/$B$^$?$O(B
Windows Messenger 5.0 $B$rMxMQ$7$F$$$k>l9g$O!"$3$l$i$K4X$9$k(B
MS05-009
$B=$@5%W%m%0%i%`$O(B Windows Update $B$G$OE,MQ$5$l$J$$$?$a!"(B
MS05-009 web $B%Z!<%8(B
$B$+$i8DJL$KF~MSN Messenger 7.0 $B$*;n$7HG(B$B$r%$%s%9%H!<%k$9$k$3$H$G$bBP1~2DG=!#(B
$B$^$?!V(BWindows Messenger 5.0 $BMQ$N=$@5%W%m%0%i%`!W$N@5BN$O(B
Windows Messenger 5.1
$B$G$"$k!#(B
$B!!(BMS05-009
$B$K$O2sHrJ}K!$b$$$m$$$m$H5-:\$5$l$F$$$k$N$G!"=$@5%W%m%0%i%`$rE,MQ$G$-$J$$(B / $B$7$-$l$J$$>l9g$O9MN8$5$l$?$$!#(B
$B!!4XO"(B:
2005.02.15 $BDI5-(B:
$B!!(BMS05-009
$B$K7Y9p$,DI2C$5$l$?!#(B
$B7Y9p(B : 2005 $BG/(B 2 $B7n(B 10 $BF|(B ($BJF9qF|IU(B) $B$+$i!"(BMSN Messenger $B%5!<%S%9$O!"(BMSN Messenger $B$N1F6A$rl9g$,$"$j$^$9!#(B
$B!!$H$$$&$o$1$G!"%"%C%W%0%l!<%I$7$^$7$g$&!#(B
2005.04.13 $BDI5-(B:
$B!!(BMS05-009 $B$,(B 2005.04.13 $BIU$G99?7$5$l$F$$$k!#(B
$B$J$<%^%$%/%m%=%U%H$O$3$N%;%-%e%j%F%#>pJs$r(B2005$BG/(B4$B7n(B13$BF|$K99?7$7$?$N$G$9$+(B?
$B$3$N%;%-%e%j%F%#>pJs$N%j%j!<%98e!"(BWindows Messenger version 4.7.0.2009 (Windows XP Service Pack 1 $B$Gl9g(B) $B$N99?7$,(B SMS $B$^$?$O<+F099?7$r2p$7G[I[$5$l$?>l9g!"%$%s%9%H!<%k$,<:GT$9$k$3$H$,3NG'$5$l$^$7$?!#(B $B99?7$5$l$?%Q%C%1!<%8$O$3$NF0:n$r=$@5$7$^$9!#(B
$BA02s$N99?7$,@5>o$K%$%s%9%H!<%k$5$l!"8=:_(B Windows Messenger $B$N%P!<%8%g%s(B 4.7.0.2010$B$r
$B!U(B
Exchange5.5-KB841765-x86-jpn.EXE $B$K$OF1L>$N99?7HG$,B8:_$9$k(B
(UpdateExpert, 2/10)
$B!U(B
$B%H%l%s%I%^%$%/%m$,(B$B%Q%?!<%s%U%!%$%k$N99?7IQEY$r!VKhF|!W$K$9$k(B (solution 10830) $B$N$K$R$-$D$E$-(B (?)$B!"%^%+%U%#!<$b(B
2/25 $B$+$iKhF|(B ($B7n!A6b(B) $B99?7$K$J$k$=$&$G$9!#(B
Daily DAT$B%j%j!<%9$K4X$9$k(BFAQ($BK!?M8~$1(B)
($B%^%+%U%#!<(B)
$B!U(B
$B%U%)%m!<%"%C%W(B (Matz$B$K$C$-(B, 2/5)$B!#(B
$B%"%$%3%sA{F0(B$B4XO"!#(B
$B:#2sLdBj$K$J$C$F$$$k$N$O!V(B89$BG/$KFC5v=P4j$7!"(B98$BG/$KEPO?$5$l$?!WFC5v$G$9$+$i!"!V>>2<$N(B1989$BG/(B10$B7n=P4j$NFC5v$O0J>e$N(B1987$BG/$N(BMacTech$B5-;v$rCN$k$b$N$J$iMF0W$KA[E~$G$-$?%l%Y%k$N$b$N$HI>2A$;$6$k$rF@$J$$!W(B
$B$H$$$&(B
Mac$B%f!<%6!<$H$7$F>>2 ($B:rF|$H:#F|(B, 2/3)
$B$N;XE&$O$?$$$X$s6=L#?<$$$G$9$M$(!#(B
$B!!F?L>4uK>$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
JANOG 15 $B%W%m%0%i%`(B$B!";qNA$,8x3+$5$l$F$$$^$9!#(B
NTP $BOC$d(B DDoS $BOC!"%U%#%k%?OC$J$I$"$j$^$9!#(B
$B!U(B
$B@D?'(BLED$BAJ>Y$NGHLf!J(B2$B!KF|K\$N:[H==j$O??
($BF|7P(B Tech On, 2/9)$B!#(B
$B$9$k$HH`$O!V>/$J$/$H$bL1;vAJ>Y$K4X$7$F:[H==j$O!$$$$o$P!X$I$C$A$NNAM}%7%g!F$-$H$b$s$8$c>F$-$J$I!$Fs$D$NNAM}$N$&$A!$$I$A$i$,$*$$$7$$$+$r6%$&%F%l%SHVAH!#L@@P;:$N?7A/$J%?%3$r;H$C$?$@$N!$FCJL$JHnNA$r;H$C$F$&$^$_$,6E=L$5$l$?>.G~$r;H$C$?$@$N!$$*$$$7$=$&$K;W$($kMWAG$r%"%T!<%k$7$F!$$h$j$*$$$7$=$&$K;W$o$;$?J}$,>!$D!#$=$l$H4pK\E*$KF1$8$G$9!W!#(B
- Internet Explorer $BMQ$NN_@QE*$J%;%-%e%j%F%#99?7%W%m%0%i%`(B (867282) (MS05-014)
$B!V(BURL $B$N%G%3!<%G%#%s%0%>!<%s$N$J$j$9$^$7$N@H\:Y(B:
Internet Explorer zone spoofing with encoded URLs
IE $B$N=$@5%W%m%0%i%`(B MS05-014 (KB867282) $B$rE,MQ$9$k:]$NCm0U(B
(UpdateExpert)$B!#Cm0UE@$,$F$s$3$b$j!#(B
867282 - MS05-014: Cumulative security update for Internet Explorer
(Microsoft)$B!#(B
$B$3$N(B patch $B$O!"(B
$B%l%8%9%H%jCM(B
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\QFEInstalled
$B$K$h$C$F5sF0$,0[$J$kLOMM!#(B
$B$3$l$^$G$NN_@QE*(B IE patch $B$G$O!"!V%;%-%e%j%F%#(B fix $B$N$_HG!W$H!VHs%;%-%e%j%F%#(B fix $B$b4^$`HG!W$,L@3N$KJ,$1$i$l$F$$$?$,!":#2s$+$i$O$3$l$,E}9g$5$l!"(B
$BA05-%l%8%9%H%jCM$K1~$8$F(B
- QFEInstalled $B$,$J$$!"$"$k$$$OCM$,(B 0 = $B%;%-%e%j%F%#(B fix $B$N$_HG(B
- QFEInstalled $B$,$"$j!"CM$,(B 1 = $BHs%;%-%e%j%F%#(B fix $B$b4^$`HG(B
$B$,%$%s%9%H!<%k$5$l$kLOMM!#(B
- SMTP $B$N@H
$B!!(BExchange 2000 Server $B$b$3$N7g4Y$N1F6A$r2004 $BG/(B 8 $B7n8x3+$N(B Exchange 2000 Server Service Pack 3 $B0J9_$N99?7%W%m%0%i%`$N(B
$B%m!<%k%"%C%W(B$B!W$,I,MW!#(B
- $B9q:]2=%I%a%$%sL>BP1~%V%i%&%6$K(BURL$B$,!H56Au!I$5$l$kLdBj!"(BIE$B$O1F6A$J$7(B
$B!!(BJPRS $B$+$iJ8=q=P$^$7$?(B:
$B9q:]2=%I%a%$%sL>(B(IDN)$B$N%U%#%C%7%s%0:>5=@H
($BF|K\8l(B.jp, 2/9)$B!#(B
$B$7$+$7LdBj$J$N$O!":?$O$$$A$P$s
$BJsF;$G;HMQ$5$l$?(B"payp$B#a(Bl.com" $BFb$N%-%j%kJ8;z!V#a!W$,(BASCII$BJ8;z!V(Ba$B!W$N(Bvariant($BF10l$H$_$J$9$Y$-J8;z(B)$B$G$"$k$HDj5A$9$k$h$&$J%k!<%k$r$3$l$i%,%$%I%i%$%s$K=>$$5,Dj$7$F$*$1$P!"$3$NLdBj$b2sHr$G$-$^$9!#(B
$B8=:_(BIDN$B$r%5!<%S%9$7$F$$$k%l%8%9%H%j$N$[$H$s$I$O!"$3$N%,%$%I%i%$%s$K=>$C$FEPO?%5!<%S%9$r9T$C$F$$$k!"$b$7$/$O!"=>$&$3$H$r7W2hCf$G$9!#(B
$B!VA4$F$N%l%8%9%H%j$,]$,8=
JP$B%I%a%$%sL>$G$O!"F|K\8l(BJP$B%I%a%$%sL>$H$7$F;HMQ$G$-$kJ8;z$r4A;z!&2>L>!&1Q?t;z$K8BDj$7$F$$$^$9!#$=$N$?$a!"%-%j%kJ8;z$J$I1Q?t;z$KHs>o$K$h$/;w$?J8;z$,:.:_$7$?%I%a%$%sL>$OEPO?$G$-$^$;$s!#$7$?$,$C$F!":#2s;XE&$5$l$?Nc$K$"$kIT@5%5%$%H$O!"(BJP$B%I%a%$%sL>$K$OB8:_$7$F$$$^$;$s!#(B
$B!!(B.jp $B$K$D$$$F$OBg>fIW$J$h$&$G$9$,!"B>$N%I%a%$%s!"FC$K(B .com $B$J$I$N(B gTLD $B$K$*$$$F$-$A$s$H1?MQ$5$l$F$$$J$$$H!"!V9q:]2=%I%a%$%sL>$O@x:_E*$K4m81$J$N$G;H$($J$$!W$K$J$C$F$7$^$$$^$9$h$M!D!D!#(B
$B!!$^$?!"!V4A;z!&2>L>!&1Q?t;z!W$NFbIt$KB8:_$9$k!";w$?$h$&$J7A$NJ8;z(B ($BNc(B: $B%H(B $B$H(B $BKN(B ($B$\$/(B)) $B$K$D$$$F$OF1MM$NLdBj$,H/@8$9$k$3$H$K$J$k$N$G$7$g$&$+$iCm0U$,I,MW$J$N$G$7$g$&!#(B
$B%^%$%/%m%=%U%H(B.jp $B$OEPO?$5$l$F$$$k$h$&$G$9$,!"%^%$%/%m%=%UKN(B.jp $B$OEPO?$5$l$F$$$J$$$h$&$G$9$M!#(B
$B!!%7%^%s%F%C%/$N(B Norton Antivirus 2004 $B$d(B Norton Antivirus 9.0 for Macintosh$B!"(B
Norton Internet Security for Macintosh 3.0$B!"(BSymantec AntiVirus Corporate Edition 8.01 / 8.1.1 / 9.0$B!"(BSymantec Client Security 1.0 / 2.0 $B$J$I$N%"%s%A%&%$%k%9@=IJ$K4^$^$l$k(B
DEC2EXE $B2r@O%(%s%8%s!&%b%8%e!<%k$K7g4Y!#(B
UPX $B05=L$5$l$?%U%!%$%k$N2r@O$K$*$$$F(B heap overflow $B$,H/@8$9$k$?$a!":Y9)$7$?(B
UPX $B%X%C%@$r;}$D96N,%U%!%$%k$K$h$C$FG$0U$N%3!<%I$r]@=IJB?$9$.$J$N$G!"(B
$B%7%^%s%F%C%/@=IJMxMQSYM05-003
$B$r;2>H$7$F3NG'$5$l$?$$!#(B
$B$J$*!"(BNorton Antivirus 2003 / 2005 $B$K$O$3$N7g4Y$O$J$$!#(B
$B!!BP1~$9$k$K$O(B:
$BBP>]@=IJ$,(B LiveUpdate $B$KBP1~$7$F$$$k>l9g$O!"(BLiveUpdate $B$rMxMQ$7$F:G?7HG$K99?7$9$l$P$h$$!#(B
Symantec Gateway Security 5300 / 5400 $B$K$D$$$F$O!"(Bpatch $B$r%5%]!<%H$+$iF~
Symantec Antivirus Corporate Edition / Symantec Client Security
$B$K$D$$$F$O!"(BSymantec Antivirus Corporate Edition 9.0 / Symantec Client Security 2.0 $B$N%a%s%F%J%s%9!&%j%j!<%9(B 1 (MR1) $B0J9_$GBP1~$5$l$F$$$k!#:G?7$N%a%s%F%J%s%9!&%j%j!<%9$O(B 3 (MR3) $B$@$,!"F|K\8lHG(B MR3 $B$O%j%j!<%9$5$l$F$$$J$$!#(B
$BF|K\8lHG$N:G?7$O(B MR2$B!#(B
($BBg7'$5$s46
Symantec BrightMail AntiSpam versions 4.0 / 5.5 $B$K$D$$$F$O!"(B
brightmail.cfg $B$N@_Dj$K$h$C$F(B DEC2EXE $B%b%8%e!<%k$rL58z$K$9$k$3$H$G$3$N7g4Y$r2sHr$G$-$k!#(B
$B!!4XO"(B:
Symantec $B%"%s%A%&%#%k%9(B $B%i%$%V%i%j$G$N%R!<%W(B $B%*!<%P!<%U%m!<(B
(ISSKK)
2005.02.11 $BDI5-(B:
$B!!(BBloodhound.Exploit.26
($B%7%^%s%F%C%/(B)
2005.02.14 $BDI5-(B:
$B!!(BSYM05-003 $B$,BgI}$K2~D{$5$l$F$$$k!#(B
$BBg7'$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#2~D{HG$K$h$k$H!"(B
Symantec AntiVirus Corporate Edition 9.0
$B$K$O$3$N7g4Y$O$J$$!#(B
$BF|K\8lHG$N(B
Symantec AntiVirus Corporate Edition 8.0 / 8.1
$B$K$O$3$N7g4Y$O$J$$!#(B
$B1Q8lHG$K$O7g4Y$,B8:_$7!":G?7HG$G=$@5$5$l$F$$$k!#(B
Symantec AntiVirus Corporate Edition 7.6 $B$K$O$3$N7g4Y$O$J$$!#(B
Symantec Client Security 2.0 $B$K$O$3$N7g4Y$O$J$$!#(B
$BF|K\8lHG(B Symantec Client Security 1.0 / 1.1 $B$K$O$3$N7g4Y$O$J$$!#(B
$B1Q8lHG$K$O7g4Y$,B8:_$7!":G?7HG$G=$@5$5$l$F$$$k!#(B
- $B$$$m$$$m(B (2005.02.03)
$B!!(B$B%7%9%F%`%/%i%C%7%e$r0z$-5/$3$9@H ($B%i%$%V%I%"(B)$B!#(B
[VulnWatch] High Risk Vulnerabilities in Eudora Mail Client
$B$N7o$,=$@5$5$l$F$$$k$=$&$G$9!#6L2,$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
- $B9q:]2=%I%a%$%sL>BP1~%V%i%&%6$K(BURL$B$,!H56Au!I$5$l$kLdBj!"(BIE$B$O1F6A$J$7(B
$B!!(Bsecunia $B$N%G%b%5%$%H(B$B$K@\B3$7$?:]$N%"%I%l%9%P!<$N8+$(J}(B:
- $B1Q8lHG(B Windows 2000 SP4 $B>e$N1Q8lHG(B Mozilla:
- $BF|K\8lHG(B Windows XP SP2 $B>e$NF|K\8lHG(B Mozilla:
$B!!F|K\8lHG(B Windows $B>e$NF|K\8lHG(B Mozilla $B$@$H3d$H;kG'$7$d$9$=$&$@$1$I!"1Q8lHG(B Windows $B>e$N1Q8lHG(B Mozilla $B$@$H!"$3$l$O$o$+$i$J$$$G$9$M!#(B
$B!!!V2sHrJ}K!!W$H$7$F$O!"9q:]2=%I%a%$%sL>$X$NBP1~$rL58z$K$9$k!#(B
Mozilla $B$N>l9g$O!"(Babout:config $B$K%"%/%;%9$7!"(B
network.enableIDN $B$r(B false $B$K$9$k$3$H$GL58z$K$G$-$k!#(B
Mozilla Firefox $B$N>l9g$O!"(Bcompreg.dat $B%U%!%$%k$rJT=8$9$k$3$H$GL58z$K$G$-$k!#(BPermanent Fix for the Shmoo Group exploit
(Tech.Life.Blogged)
$B$r;2>H!#(B
IE $B$N>l9g$OI8=`$G$O9q:]2=%I%a%$%sL>$KBP1~$7$F$$$J$$$N$@$,!"(B
$BF|K\8l%I%a%$%sL>%W%i%0%$%s(B
$B$J$I$K$h$C$F9q:]2=%I%a%$%sL>$KBP1~$7$F$$$k>l9g$O!"$=$l$r%"%s%$%s%9%H!<%k$9$k!#(B
Opera $B$d(B Safari $B$K$D$$$F$O!":#$N$H$3$mL58z$K$9$kJ}K!$,$J$$!#(B
- IE$B$K%U%#%C%7%s%0$N4m81!=!=(BActiveX$B$KLdBj(B
$B!!(BMS05-013
$B$G=$@5$5$l$F$$$k!#(B
CVE: CAN-2004-1319
- IE$B$K(B2$B
$B!!(BMS05-008
$B$H(B
MS05-014
$B$H$N9g$o$;5;$G=$@5$5$l$F$$$k!#(B
(CVE: CAN-2005-0053
$B!!(BWindows NT 4.0 Server / 2000 Server / Server 2003 $B$K7g4Y!#(B
$B%i%$%;%s%9%m%0%5!<%S%9$K(B buffer overflow $B$9$k7g4Y$,$"$j!"(Bremote $B$+$i(B local SYSTEM $B8"8B$GG$0U$N%3!<%I$r%f!<%6$,%i%$%;%s%9%m%0%5!<%S%9$K@\B3$G$-$k!#(BWindows 2000 Server SP4 $B$*$h$S(B Windows Server 2003 $B$G$O!"G'>Z$5$l$?%f!<%6$"$k$$$O%W%m%0%i%`$N$_$,%i%$%;%s%9%m%0%5!<%S%9$K@\B3$G$-$k!#(B
CVE: CAN-2005-0050
$B!!=$@5%W%m%0%i%`$,$"$k$N$GE,MQ$9$l$P$h$$!#(B
$B$^$?%i%$%;%s%9%m%0%5!<%S%9$rDd;_$7$F$7$^$($P2sHr$G$-$k!#(B
2005.03.19 $BDI5-(B:
$B!!(Bhttp://www.immunitysec.com/downloads/llssrv_miss.pdf (immunitysec.com)$B!#(BWindows 2000 Advanced Server SP3 / SP4 $B$N>l9g$O!"L5G'>Z%f!<%6$G$"$C$F$b%i%$%;%s%9%m%0%5!<%S%9$K@\B3$G$-$F$7$^$&$H$$$&!#(B
$B4XO"(B: Windows 2000 Advanced Server$B$OCm0U!$(B2$B7n$N@H
($BF|7P(B IT Pro, 2005.03.17)$B!#(B
2005.04.13 $BDI5-(B:
$B!!(B$BF|K\8lHG(B MS05-010
$B$O99?7$5$l$F$$$J$$$h$&$@$,!"(B
$B1Q8lHG(B MS05-010
$B$O(B 2 $BEY99?7$5$l$F$$$k!#$3$N$"$?$j(B:
Mitigating Factors for License Logging Service Vulnerability - CAN-2005-0050:
($BCfN,(B)
On Windows 2000 Server Service Pack 4 and Windows Server 2003, only authenticated users or programs can establish a connection to the License Logging service. However, this does not apply to installations of Windows 2000 Server where Service Pack 4 has been `slipstreamed' into the operating system directory. For more information, see Microsoft Knowledge Base Article 896658.
$B!!(BWindows 2000 / XP / Server 2003 $B$K7g4Y!#(BMRXSMB.SYS $B$K$*$1$k(B
SMB $B%/%i%$%"%s%H=hM}$K7g4Y$,$"$j!"%5!<%P$,:Y9)$7$?%l%9%]%s%9$rJV$9$H!"%/%i%$%"%s%HB&$G(B overflow $B$,H/@8!"(Blocal SYSTEM $B8"8B$GG$0U$N%3!<%I$rCAN-2005-0045$B!#(B
$B>\:Y(B: Windows SMB Client Transaction Response Handling
Vulnerability
(eEye)$B!#(B
$B!!=$@5%W%m%0%i%`$,$"$k$N$GE,MQ$9$l$P$h$$!#(B
2005.02.12 $BDI5-(B:
$B!!4XO"(B: GREENAPPLE (SMB Remote in Windows)
(immunitysec.com)$B!#%5!<%P>ZL@=q$N4|8B$,@Z$l$F$^$9!#(B
2005.03.11 $BDI5-(B:
$B!!$3$N7g4Y$O!"$9$G$K%5%]!<%H$,=*N;$7$F$$$k(B Windows NT 4.0 $B$K$bB8:_$9$k$3$H$,H=L@!#(B
$B!!(Bkitt $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
2005.06.28 $BDI5-(B:
$B!!(BWindows SMB Client Transaction Response
Handling (Exploit, MS05-011)
(securiteam.com)
2006.05.08 $BDI5-(B:
$B!!(BKB896427 - $B%;%-%e%j%F%#99?7%W%m%0%i%`(B 885250 (MS05-011) $B$N%$%s%9%H!<%k8e!"(BWindows XP $B$^$?$O(B Windows Server 2003 $B$G%M%C%H%o!<%/6&M-$N%5%V%U%)%k%@$NFbMF$,I=<($5$l$J$$$3$H$,$"$k(B
(Microsoft)$B!#(B8+3 $B%U%!%$%kL>$N@8@.$rL58z$K$7$F$$$k4D6-$K(B MS05-011 patch $B$r%$%s%9%H!<%k$9$k$H!"IT6q9g$,H/@8$9$kLOMM!#(B
patch $B$,=P$F$$$^$9!#(B
$B!!(BWindows 98 / 98 SE / Me / 2000 / XP / Server 2003 $B$K(B 2 $B$D$N7g4Y!#(B
COM $B9=B$2=%9%H%l!<%8$N@HCAN-2005-0047
Windows 2000 / XP / Server 2003 $B$K7g4Y!#(B
COM $B9=B$2=%9%H%l!<%8(B $B%U%!%$%k$^$?$O%*%V%8%'%/%H$N=hM}$K$*$1$k%a%b%j$X$N%"%/%;%9J}K!$K7g4Y$,$"$j!"(B
$B$3$l$rMxMQ$9$k$H!"FC8"$r;}$?$J$$(B local user $B$,(B
local SYSTEM $B8"8B$r
$BF~NO$N8!>Z$N@HCAN-2005-0044
Windows 98 / 98 SE / Me / 2000 / XP / Server 2003 $B$K7g4Y!#(B
OLE $B$K$*$1$k%G!<%?8!>Z=hM}$K$*$$$F(B buffer overflow $B$9$k7g4Y$,$"$j!"(B
web $B%Z!<%8$dEE;R%a!<%k$KE:IU$5$l$?96N,(B
OLE $B%*%V%8%'%/%H$K$h$C$FG$0U$N%3!<%I$r
$B!!(BWindows 2000 / XP / Server 2003 $B$K$D$$$F$O!"=$@5%W%m%0%i%`$,$"$k$N$GE,MQ$9$l$P$h$$!#(B
Windows 98 / 98 SE / Me $B$K$D$$$F$O!"(B
$BM-=~%5%]!<%H$+$i(B $B=$@5%W%m%0%i%`$rF~
2005.02.15 $BDI5-(B:
$B!!I{:nMQ>pJs(B: [OL2003] MS05-012 $BE,MQ8e$KE:IU%U%!%$%kL>$,6uGr$K$J$k(B
(Microsoft)$B!#E:IU%U%!%$%k$N%U%!%$%kL>$,!V(B42 $B%P%$%H!W0J>e$N>l9g$KH/@8$9$kLOMM!#(B
2005.04.01 $BDI5-(B:
$B!!I{:nMQ>pJs(B:
896648 - $B%;%-%e%j%F%#99?7%W%m%0%i%`(B 873333 $B!J(BMS05-012$B!K(B $B$N%$%s%9%H!<%k8e(B svchost.exe $B%(%i!<$,H/@8$9$k$3$H$,$"$j$^$9(B (Microsoft)$B!#(B
$BIT6q9g$NB8:_$r3NG'$7$F$$$k$=$&$G$9!#(B
2005.04.19 $BDI5-(B:
$B!!(B896648 - $B%;%-%e%j%F%#99?7%W%m%0%i%`(B 873333 $B!J(BMS05-012$B!K(B $B$N%$%s%9%H!<%k8e(B svchost.exe $B%(%i!<$,H/@8$9$k$3$H$,$"$j$^$9(B (Microsoft) $B$,99?7$5$l$^$7$?!#(B
Windows XP COM+ $B=$@5%W%m%0%i%`%m!<%k%"%C%W%Q%C%1!<%8(B 9
(Microsoft) $B$rE,MQ$9$k$3$H$G2r7h$9$k$=$&$G$9!#%U%m!<%H$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
2005.05.20 $BDI5-(B:
$B!!IT6q9g>pJs(B: 894391 - [FIX] $B%;%-%e%j%F%#99?7%W%m%0%i%`(B MS05-012 $B$r%$%s%9%H!<%k8e!"%j%C%A%F%-%9%H7A<0$NEE;R%a!<%k%a%C%;!<%8$G(B 2 $B%P%$%HJ8;z%;%C%H$NE:IU%U%!%$%kL>$,I=<($5$l$:!"%(%i!<%a%C%;!<%8(B "Generic Host Process" $B$,I=<($5$l$k$3$H$,$"$k(B (Microsoft)$B!#(B
patch $B$b8x3+$5$l$F$$$k(B: $B%-!<%o!<%I(B "894391" (Microsoft $B%@%&%s%m!<%I%;%s%?!<(B)$B!#(B
$B$3$N(B patch $B$G
$B!!(B896648 - $B%;%-%e%j%F%#99?7%W%m%0%i%`(B 873333 $B!J(BMS05-012$B!K(B $B$N%$%s%9%H!<%k8e(B svchost.exe $B%(%i!<$,H/@8$9$k$3$H$,$"$j$^$9(B (Microsoft) $B$K$D$$$F$O!V(BWindows XP COM+ $B=$@5%W%m%0%i%`%m!<%k%"%C%W%Q%C%1!<%8(B 9 $B$r!W$N$^$^$@$,!"(B
894391 $B$r%$%s%9%H!<%k$9$k$H8F$S=P$5$lB&$N(B ole32.dll $B$,99?7$5$l$k$N$G!">u67$,JQ2=$9$k$+$b$7$l$J$$!#(B
$B!!%U%m!<%H$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
2005.06.23 $BDI5-(B:
$B!!(B$B%&%$%k%9%P%9%?!<(B2005$B$N%$%s%9%H!<%k8e!"(I"(BGeneric host Process for win32 services(I#$B%(%i!<$,H/@8$9$k(B ($B%H%l%s%I%^%$%/%m(B, 2005.06.22)$B!#(B
$B!!(BWindows 98 / 98 SE / Me / 2000 / XP / Server 2003 $B$K7g4Y!#(B
IE$B$K%U%#%C%7%s%0$N4m81!=!=(BActiveX$B$KLdBj(B
$B$NOC!#(B
DHTML Editing ActiveX $B%3%s%H%m!<%k(B$B$K$*$$$F!"K\Mh$OJL!9$N%;%-%e%j%F%#%I%a%$%s$KB8:_$9$k$H$7$F07$o$l$J$1$l$P$J$i$J$$$b$N$,!"!<%s8"8B$GF0:n$7$F$7$^$&!#(B
$B$3$l$K$h$j!"%"%I%l%9%P!<$d%9%F!<%?%9%P!<$N=q$-$+$(!"%&%$%k%9$NCAN-2004-1319
$B!!=$@5%W%m%0%i%`$,$"$k$N$GE,MQ$9$l$P$h$$!#(B
2006.04.18 $BDI5-(B:
$B!!$3$N(B patch $B$rE,MQ$9$k$H!"(BWindows XP / Server 2003 $B$GI{:nMQ$,H/@8$9$k$3$H$,$"$kLOMM(B:
$B!!(BKB896180 $B1Q8lHG(B
$B$K$h$k$H!"M-=~%5%]!<%H$+$i$5$i$J$k=$@5%W%m%0%i%`$rF~
$B!!(BWindows 98 / 98 SE / Me / 2000 / XP / Server 2003 $B$K7g4Y!#(B
$B%I%i%C%0%"%s%I%I%m%C%W(B $B%$%Y%s%H$N=hM}$K7g4Y$,$"$j!"96N,(B web $B%5%$%H$r%"%/%;%9$7$?$H$-$K!"%U%!%$%k$r<+F0E*$+$DL57Y9p$G%9%?!<%H%"%C%W%U%)%k%@$J$I$K%3%T!<$5$;$k$3$H$,2DG=!#$3$N7k2L!"IE$B$K(B2$B
$B$NOC!#(BCVE: CAN-2005-0053
$B!!(BWindows 2000 / XP / Server 2003 $B$K$D$$$F$O(B $B=$@5%W%m%0%i%`$,$"$k$N$GE,MQ$9$l$P$h$$!#(B
Windows 98 / 98 SE / Me $B$K$D$$$F$O!"(B
$BM-=~%5%]!<%H$+$i(B $B=$@5%W%m%0%i%`$rF~
$B!!$3$N7g4Y$N0lIt$O(B
MS05-014
$B$K$*$$$F=$@5$5$l$F$$$k!#40A4$K=$@5$9$k$K$O!"(BMS05-014 $B=$@5%W%m%0%i%`$H(B
MS05-008 $B=$@5%W%m%0%i%`$NN>J}$rE,MQ$7$J$1$l$P$J$i$J$$!#(B
$B!!(BInternet Explorer 5.01 SP[34] / 5.5 SP2 / 6 SP[12] $B$N:G?7$NN_@QE*$J=$@5%W%m%0%i%`!#(B
$B?7$?$K(B 4 $B$D$N7g4Y$N=$@5$,Ii2Y$5$l$F$$$k!#(B
$B%I%i%C%0%"%s%I%I%m%C%W$N@HCAN-2005-0053
$B%I%i%C%0%"%s%I%I%m%C%W(B $B%$%Y%s%H$N=hM}$K7g4Y$,$"$j!"96N,(B web $B%5%$%H$r%"%/%;%9$7$?$H$-$K!"%U%!%$%k$r<+F0E*$+$DL57Y9p$G%9%?!<%H%"%C%W%U%)%k%@$J$I$K%3%T!<$5$;$k$3$H$,2DG=!#$3$N7k2L!"IE$B$K(B2$B
$B$NOC!#(B
$B$3$N7g4Y$N0lIt$O(B
MS05-008
$B$K$*$$$F=$@5$5$l$F$$$k!#40A4$K=$@5$9$k$K$O!"(BMS05-014 $B$H(B MS05-008 $B$NN>J}$rE,MQ$7$J$1$l$P$J$i$J$$!#(B
$B=$@5%W%m%0%i%`$rE,MQ$9$k$H!"%I%i%C%0%"%s%I%I%m%C%W2DG=$J%U%!%$%k$N3HD%;R$,8BDj$5$l$k!#%I%i%C%0%"%s%I%I%m%C%W2DG=$J%U%!%$%k$N3HD%;R$O(B
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedDragImageExts $B$KEPO?$5$l$?$b$N$@$1$H$J$k!#(B
URL $B$N%G%3!<%G%#%s%0%>!<%s$N$J$j$9$^$7$N@H!<%s8"8B$GG$0U$N%3!<%I$,CAN-2005-0054
DHTML $B%a%=%C%I$N%R!<%W%a%b%j$NGK2u$N@HCAN-2005-0055
$B%A%c%s%M%kDj5A7A<0(B (CDF) $B$N%/%m%9%I%a%$%s$N@HCAN-2005-0056
$B!!=$@5%W%m%0%i%`$,$"$k$N$GE,MQ$9$l$P$h$$!#(B
$B$^$?(B $B=$@5%W%m%0%i%`$rE,MQ$9$k$H!"
Microsoft ActiveX Image Control 1.0
(CLSID: {D4A97620-8E8F-11CF-93CD-00AA00C08FDF})
$B$K(B Kill Bit $B$,@_Dj$5$l$k!#(B
MS04-004 $B0J9_$HF1MM$K!"(B
http(s)://username:password@example.com/
$B7A<0$N(B URL $B$,L58z$H$J$k!#(B
2005.02.10 $BDI5-(B:
$B!V(BURL $B$N%G%3!<%G%#%s%0%>!<%s$N$J$j$9$^$7$N@H\:Y(B:
Internet Explorer zone spoofing with encoded URLs
IE $B$N=$@5%W%m%0%i%`(B MS05-014 (KB867282) $B$rE,MQ$9$k:]$NCm0U(B
(UpdateExpert)$B!#Cm0UE@$,$F$s$3$b$j!#(B
867282 - MS05-014: Cumulative security update for Internet Explorer
(Microsoft)$B!#(B
$B$3$N(B $B=$@5%W%m%0%i%`$O!"(B
$B%l%8%9%H%jCM(B
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\QFEInstalled
$B$K$h$C$F5sF0$,0[$J$kLOMM!#(B
$B$3$l$^$G$NN_@QE*(B IE patch $B$G$O!"!V%;%-%e%j%F%#(B fix $B$N$_HG!W$H!VHs%;%-%e%j%F%#(B fix $B$b4^$`HG!W$,L@3N$KJ,$1$i$l$F$$$?$,!":#2s$+$i$O$3$l$,E}9g$5$l!"(B
$BA05-%l%8%9%H%jCM$K1~$8$F(B
- QFEInstalled $B$,$J$$!"$"$k$$$OCM$,(B 0 = $B%;%-%e%j%F%#(B fix $B$N$_HG(B
- QFEInstalled $B$,$"$j!"CM$,(B 1 = $BHs%;%-%e%j%F%#(B fix $B$b4^$`HG(B
$B$,%$%s%9%H!<%k$5$l$kLOMM!#(B
2005.02.12 $BDI5-(B:
$B!!(Bsecunia $B$+$i>pJs$,8x3+$5$l$?(B:
2005.05.18 $BDI5-(B:
$B!!I{:nMQ>pJs(B:
$B!!(BMS05-020
$B$GBP1~$7$F$$$k$=$&$@!#(B
$B!!(BWindows 2000 / XP / Server 2003 $B$K7g4Y!#%O%$%Q!<%j%s%/%*%V%8%'%/%H%i%$%V%i%j$K(B buffer overflow $B$9$k7g4Y$,$"$j!":Y9)$7$?%j%s%/$r;H$C$FG$0U$N%3!<%I$rCAN-2005-0057
$B!!=$@5%W%m%0%i%`$,$"$k$N$GE,MQ$9$l$P$h$$!#(B
2005.03.09 $BDI5-(B:
$B!!$3$N7g4Y$O(B Windows 9x / Me $B$K$b$"$j$^$7$?(B ($B$9$$$^$;$s(B)$B!#(B
Windows 98 / 98 SE / Me $BMQ$N=$@5%W%m%0%i%`$,EP>l$7$?$=$&$G$9!#(B
Windows Update $B$GF~
$B!U(B
$B%9%Q%$%&%'%"%Q%?!<%s%U%!%$%k(B 0.219.00 $B$K$*$1$k8m7Y9p>pJs(B
($B%H%l%s%I%^%$%/%m(B)$B!#(B$B$^$?$G$9$+(B!
$B!!4XO"(B: $B8m7Y9p$,H/@8$9$k860x$K4X$7$F(B
($B%H%l%s%I%^%$%/%m(B)$B!#(B
$B8m7Y9p$NH/@8$K$OBg$-$/J,$1$F0J2<$N(B2$B$D$N860x$,$4$6$$$^$9!#(B
1. $B%Q%?!<%s%^%C%A%s%0$K$h$k8m7Y9p!'(B($BCfN,(B)
2. $B%&%$%k%9$N9=@.$NJ#;(2=$KH<$&8m7Y9p!'(B($BCfN,(B)
$B0JA0$O(B 1. $B$N860x$K$h$k8m7Y9p$,B?$/3NG'$5$l$F$*$j$^$7$?$,!":G6a$O(B 2. $B$N860x$K$h$k8m7Y9p$,A}2C$7$F$$$^$9!#(B
2. $B$N860x$K$h$k8m7Y9p$O!"%&%$%k%9$N9=@.%U%!%$%k$K0lHL$N%U%!%$%k$,N.MQ$5$l$F$$$k$3$H$K$h$C$FH/@8$9$k$?$a!"$3$N$h$&$JJ#;($J9=@.$N%&%$%k%9$N>l9g!"H/@8IQEY$O9b$/$J$j$^$9!#(B
$B!!:#2s$N8m8!CN$O!"$I$A$i$b%$%s%9%H!<%i(B (setup.exe) $B$G$9$M!D!D!#(B
$B!U(B
$B#3#5LdCf#3#3Ld$,:rG/$HF1$8!!@E2,8)N)9bF~;n$G%_%9(B
(asahi.com, 2/8)$B!#$I$3$+$i$3$&$$$&%_%9$,H/@8$7$?$N$@$m$&!#(B
$B$D!<$+!"C/$b5nG/$NLdBj3P$($F$J$+$C$?$o$1(B?
$B!U(B
$BCfEl2qCL!"Dd@o$r@k8@!!%O%^%9!V9g0U$K$7$P$i$l$:!W(B
(asahi.com, 2/8)$B!#:#EY$3$=$J$N$+!":#EY$b$^$?$@$a$H$J$k$N$+!#(B
$B!U(B
$B%8%c%9%H%7%9%F%`$,95AJ!!0l?3H=7h!VE~Dl>5I~$G$-$J$$!W(B
(asahi.com, 2/8)
$B!U(B
$BCf9q$N%O%C%+!]D#$b967b(B
($B5~ET?7J9(B, 2/8)$B!#(B
$BCf9q9H5RO"LA!#(B
http://www.cnhonker.com
$B$b(B
http://www.cnhonker.net
$B$b3N$+$K$^$C$7$m$K$J$C$F$^$9$M!#(B
$B@DEg9H5RO"LA(B
http://qdhonker.myrice.com
$B$O:#$G$b$"$k$_$?$$$G$9!#(B
$B!U(B
OS$B$N%[%9%H%U%!%$%k$r=q$-49$($F$7$^$&?75=$KCm0U(B
(Internet Watch, 2/8)$B!#(Bhosts $B%U%!%$%k=q$-$+$($O%&%$%k%9$G$O$:$$$V$s@N$+$i;H$o$l$F$-$?Running IE with decreased privileges
$B$G(B IE $B$@$18"8B$r8:$i$7$F$_$k$H$+!#(B
$B$"$H$O!"(B
$B%U%)%k%@4F;k(B
$B$N$h$&$J%U%!%$%k99?7%A%'%C%/7O$N%W%m%0%i%`$G(B hosts $B%U%!%$%k$N99?7$r(B watch $B$7$F$*$/$H$+!#(B
$B$b$A$m$s(B tripwire $B$_$?$$$J$b$N$r;E3]$1$k$N$b%"%j$G$9$,!#(B
$B!U(B
$B!V>pJs%;%-%e%j%F%#FIK\(B- IT$B;~Be$N4m5!4IM}F~Lg(B -$B!W(B
$B650iMQ%W%l%<%s;qNA(B
(IPA ISEC)$B!#A4>O$=$m$C$?$=$&$G$9!#(B
$B!!LdBj$H$$$&$+!D!D$3$l$,LdBj$@$H8@$&$N$G$"$l$P!"$=$l$O(B$B9q:]2=%I%a%$%sL>(B$B$NLdBj$G$9$h$M$(!#!V;w$?$h$&$K8+$($kL>A0!W$NOC$O9q:]2=%I%a%$%sL>$,9=A[$5$l$?;~$+$i$"$C$?OC$G$9$7!"3F(B web $B%V%i%&%6$O9q:]2=%I%a%$%sL>$KBP1~$7$?$@$1$G$9$7!#(B
IE $B$N>l9g$b!"$?$H$($P(B
$BF|K\8l%I%a%$%sL>%W%i%0%$%s(B
$B$rF~$l$F$$$?$i1F6A$"$k$G$7$g$&$7!#(B
$B!!BP1~$H$7$F$O!D!D2?$+A`:n$9$k$H@8%I%a%$%sL>$bI=<($9$k$H$+!"$J$N$+$J$"!#(B
$B$"$k$$$O!"?'$rJQ$($k$H$+$7$F!V9q:]2=%I%a%$%sL>!W$G$"$k$3$H$,L@3N$K$o$+$k$h$&$K$9$k$H$+(B?
$B!!4XO"(B:
2005.02.09 $BDI5-(B:
$B!!(Bsecunia $B$N%G%b%5%$%H(B$B$K@\B3$7$?:]$N%"%I%l%9%P!<$N8+$(J}(B:
- $B1Q8lHG(B Windows 2000 SP4 $B>e$N1Q8lHG(B Mozilla:
- $BF|K\8lHG(B Windows XP SP2 $B>e$NF|K\8lHG(B Mozilla:
$B!!F|K\8lHG(B Windows $B>e$NF|K\8lHG(B Mozilla $B$@$H3d$H;kG'$7$d$9$=$&$@$1$I!"1Q8lHG(B Windows $B>e$N1Q8lHG(B Mozilla $B$@$H!"$3$l$O$o$+$i$J$$$G$9$M!#(B
$B!!!V2sHrJ}K!!W$H$7$F$O!"9q:]2=%I%a%$%sL>$X$NBP1~$rL58z$K$9$k!#(B
Mozilla $B$N>l9g$O!"(Babout:config $B$K%"%/%;%9$7!"(B
network.enableIDN $B$r(B false $B$K$9$k$3$H$GL58z$K$G$-$k!#(B
Mozilla Firefox $B$N>l9g$O!"(Bcompreg.dat $B%U%!%$%k$rJT=8$9$k$3$H$GL58z$K$G$-$k!#(BPermanent Fix for the Shmoo Group exploit
(Tech.Life.Blogged)
$B$r;2>H!#(B
IE $B$N>l9g$OI8=`$G$O9q:]2=%I%a%$%sL>$KBP1~$7$F$$$J$$$N$@$,!"(B
$BF|K\8l%I%a%$%sL>%W%i%0%$%s(B
$B$J$I$K$h$C$F9q:]2=%I%a%$%sL>$KBP1~$7$F$$$k>l9g$O!"$=$l$r%"%s%$%s%9%H!<%k$9$k!#(B
Opera $B$d(B Safari $B$K$D$$$F$O!":#$N$H$3$mL58z$K$9$kJ}K!$,$J$$!#(B
2005.02.10 $BDI5-(B:
$B!!(BJPRS $B$+$iJ8=q=P$^$7$?(B:
$B9q:]2=%I%a%$%sL>(B(IDN)$B$N%U%#%C%7%s%0:>5=@H
($BF|K\8l(B.jp, 2/9)$B!#(B
$B$7$+$7LdBj$J$N$O!":?$O$$$A$P$s
$BJsF;$G;HMQ$5$l$?(B"payp$B#a(Bl.com" $BFb$N%-%j%kJ8;z!V#a!W$,(BASCII$BJ8;z!V(Ba$B!W$N(Bvariant($BF10l$H$_$J$9$Y$-J8;z(B)$B$G$"$k$HDj5A$9$k$h$&$J%k!<%k$r$3$l$i%,%$%I%i%$%s$K=>$$5,Dj$7$F$*$1$P!"$3$NLdBj$b2sHr$G$-$^$9!#(B
$B8=:_(BIDN$B$r%5!<%S%9$7$F$$$k%l%8%9%H%j$N$[$H$s$I$O!"$3$N%,%$%I%i%$%s$K=>$C$FEPO?%5!<%S%9$r9T$C$F$$$k!"$b$7$/$O!"=>$&$3$H$r7W2hCf$G$9!#(B
$B!VA4$F$N%l%8%9%H%j$,]$,8=
JP$B%I%a%$%sL>$G$O!"F|K\8l(BJP$B%I%a%$%sL>$H$7$F;HMQ$G$-$kJ8;z$r4A;z!&2>L>!&1Q?t;z$K8BDj$7$F$$$^$9!#$=$N$?$a!"%-%j%kJ8;z$J$I1Q?t;z$KHs>o$K$h$/;w$?J8;z$,:.:_$7$?%I%a%$%sL>$OEPO?$G$-$^$;$s!#$7$?$,$C$F!":#2s;XE&$5$l$?Nc$K$"$kIT@5%5%$%H$O!"(BJP$B%I%a%$%sL>$K$OB8:_$7$F$$$^$;$s!#(B
$B!!(B.jp $B$K$D$$$F$OBg>fIW$J$h$&$G$9$,!"B>$N%I%a%$%s!"FC$K(B .com $B$J$I$N(B gTLD $B$K$*$$$F$-$A$s$H1?MQ$5$l$F$$$J$$$H!"!V9q:]2=%I%a%$%sL>$O@x:_E*$K4m81$J$N$G;H$($J$$!W$K$J$C$F$7$^$$$^$9$h$M!D!D!#(B
$B!!$^$?!"!V4A;z!&2>L>!&1Q?t;z!W$NFbIt$KB8:_$9$k!";w$?$h$&$J7A$NJ8;z(B ($BNc(B: $B%H(B $B$H(B $BKN(B ($B$\$/(B)) $B$K$D$$$F$OF1MM$NLdBj$,H/@8$9$k$3$H$K$J$k$N$G$7$g$&$+$iCm0U$,I,MW$J$N$G$7$g$&!#(B
$B%^%$%/%m%=%U%H(B.jp $B$OEPO?$5$l$F$$$k$h$&$G$9$,!"%^%$%/%m%=%UKN(B.jp $B$OEPO?$5$l$F$$$J$$$h$&$G$9$M!#(B
2005.02.15 $BDI5-(B:
$B!!(BFirefox$B$H(BMozilla$B$N
(Internet Watch, 2005.02.15)$B!#8=>u$G$OBEEv$JA*Br$G$7$g$&!#(B
2005.02.28 $BDI5-(B:
$B!!(BFirefox 1.0.1 $B$H(B Opera $B$N
Mozilla Foundation$B!"!V(BFirefox 1.0.1$B!W$r8x3+!AF|K\8lHG$O(B3$B7n>e=\M=Dj(B
(Internet Watch, 2/25)
$B9q:]2=%I%a%$%sL>$K$D$$$F$O!"!V(Bhttp://$BF|K\8l(B.jp/$B!W$H$$$C$?(BURL$B$X$N%"%/%;%9$O2DG=$@$,!"%"%I%l%9%P!<$J$I$G$O!V(Bhttp://xn--wgv71a119e.jp/$B!W$H(BPunycode$B$GI=<($5$l$k$h$&$KJQ99$5$l$?!#(B
Opera$B$,
(Internet Watch, 2/28)
$B:#2s$N%P!<%8%g%s$+$i(BOpera$B$O!"(BIDN$B$KBP$7$F87$7$$4p=`$r@_$1$F$$$k(BTLD$B$G$N$_(BIDN$B$rMxMQ$G$-$k$h$&$K$7$?!#$3$N%[%o%$%H%j%9%H$K$O!V(B.jp$B!W$d!V(B.kr$B!W!V(B.tw$B!W!V(B.cn$B!W$J$I$,4^$^$l$F$$$k!#(BOpera$B$N%[%o%$%H%j%9%H$K7G:\$5$l$F$$$J$$(BTLD$B$G!V(BLatin1$B!W0J30$NJ8;z%3!<%I$r;HMQ$7$?>l9g$K$O!"(BURL$B$,(Bpunycode$B$GI=<($5$l$k$3$H$K$J$C$F$$$k!#(B
$B!!(BOpera$B!"$d$j$^$9$J!#(B
$B!!$^$?!"(BFirefox $B$G;H$($k(B SpoofStick
$B$H$$$&%f!<%F%#%j%F%#$,$"$k$=$&$@!#(B
$B<+J,$NL\$b(B URL $B$b?.MQ$G$-$J$$(B
(TidBITS $BF|K\8lHG(B #766/14-Feb-05) $B$r;2>H!#(B
2006.05.30 $BDI5-(B:
$B!!$D$E$-(B: Opera$B$K$*$1$k%"%I%l%9%P!<$"$k$$$O%9%F!<%?%9%P!<56Au2DG=$N%]%F%s%7%c%j%F%#!<(B
$B!U(B
$B9b66$5$s$+$i(B ($B$"$j$,$H$&$4$6$$$^$9(B)
$B%H%l%s%I%^%$%/%mpJs$rF@$?$N$G!"4{$K$4B8CN$+$b$7$l$^$;$s$,$*CN$i$;$5$;$F$$$?$@$-$^$9!#(B
----------------------------------------------------
$B8=:_!"=5#22s!J2P!"6b!K$NIQEY$K$FDj4|E*$J%Q%?!<%s%U%!%$%k$N(B
$B8x3+!J(BOPR$B!K$r9T$C$F$*$j$^$9$,$*5RMM$N$4MWK>$K1~$(!"(B
$B$h$j%?%$%`%j!<$K%&%$%k%9$KBP1~$9$k$?$a$K!"(B
$B2<5-$NFbMF$G%Q%?!<%s8x3+%5%$%/%k$rJQ99$9$k$3$H$H$J$j$^$7$?!#(B
$B!ZBh(B1$B%U%'!<%:![(B
$B8x3+%5%$%/%k!'7n!A6b$NKhF|%Q%?!<%s8x3+(B
$BH$/$@$5$$!#(B
$B"((B $B%"%i!<%HH/@8;~!"8m7Y9pH/@8;~$J$I$O:#$^$G$I$*$j6[5^%j%j!<%9$r9T$$$^$9!#(B
$B"((B $B$3$N8x3+%5%$%/%k$NJQ99$O%&%$%k%9%Q%?!<%s$N$_$G$9!#%9%Q%$%&%'%"!"(BDCT$B!"(B
NVP$B!"(BVA$B$J$I$O4^$^$l$^$;$s!#(B
$B"((B $B%Q%?!<%s%5%$%:$O!"$3$l$K$h$jA}$($k$3$H$OL5$$$H9M$($F$*$j$^$9!#(B
$B=5(B2$B2s$GBP1~$7$F$$$?$b$N$r!"(B5$B2s$KJ,$1$k$@$1$G$9$N$G!"%H!<%?%k$G$_$l$P!"(B
$B:#$^$G$H$[$\F1$8$K$J$j$^$9!#(B
$B"((B $B:9J,%"%C%W%G!<%H$G$-$k4|4V$,C;$/$J$j$^$9!#(B
$B=5(B2$B2s(BOPR$B$rl9g$O!"Ls(B4$B=54V$O:9J,%"%C%W%G!<%H$,2DG=$G$7$?(B
$B$,!"KhF|(BOPR$B$rl9g$O!":9J,%"%C%W%G!<%H$,2DG=$J4|4V$O(B1$B=54V$K(B
$B$J$j$^$9!#(B
$B!!$=$l$b$$$$$1$I8m8!CN$r$J$s$H$+$7$F$/$l!"$H$$$&@<$,J9$3$($F$-$=$&$J:#F|$3$N$4$m!#(B
$B!U(B
$B%$!<%P%s%/6d9T!"!V%-%c%C%7%e%+!<%I=P6b$N%m%C%/5!G=!W$r3+;O(B
($B%$!<%P%s%/6d9T(B, 2/4)$B!#(B
4 $B7n$KM=Dj$5$l$F$$$k$H$$$&!V(BATM$BA`:n;~$NB(;~%a!<%kDLCN!W!V8\5R$K$h$k(BATM$B=P6b8BEY3[$N8DJL@_Dj5!G=!W$H$$$&$N$O$h$5$2$@$J$"!#(B
$B!U(B
$BJF(BFBI$B!!!V(Bfbi.gov$B!W%a!<%k%"%+%&%s%H$rDd;_!"%O%C%-%s%0$N5?$$(B
($BKhF|(B, 2/7)
$B!U(B
$BF|K\(B SELinux $B%f!<%6!<2q(B
$B$,@5<0$KH/B-$7$?$=$&$G$9!#(B
$B!U(B
PHP Security Consortium: PHP Security Guide$B!#(B
$B!U(B
$B%8%c%9%H%7%9%F%`!"95AJ8!F$$N0lJ}$G!V=$@5%=%U%H$NG[I[$b$"$j$&$k!W(B
($BF|7P(B IT Pro, 2/4)$B!#$H$$$&$+!"$U$D$&$O$=$l$r:G=i$K$d$k$G$7$g$&!#(B
$B:#$4$m$K$J$C$F$d$k$N$,$=$b$=$b!D!D!#(B
$B!U(B
$B!Z?7O":\![?*$^$l$k?4!"4k6H@8$-;D$j$NBe=~Bh(B1$B2s!A$"$k%1!<%?%$MQ%=%U%H5;=Ql9g!J(B1$B!K(B
($BF|7P(B BP, 2/4)
$B!U(B
[AML 0372] $BH,2&;R$G(BNHK$BLdBj$N6[5^=82q!V2?$,>C$5$l$?$N$+!W!&!n#1#0F|(B$B!#(B
$B!U(B
$B%&%$%k%9%P%9%?!<(B2005 $B%$%s%?!<%M%C%H(B $B%;%-%e%j%F%#(B
$B%W%m%0%i%`%P!<%8%g%s(B12.1 $B%S%k%I(B1034 $B8x3+$N$*CN$i$;(B
($B%H%l%s%I%^%$%/%m(B, 2/7)
$B!U(B
$B8!:w%(%s%8%s(B VSAPI 7.500$B!J(BLinux$BHG!K8x3+$N$*CN$i$;(B
($B%H%l%s%I%^%$%/%m(B, 2/7)
$B!U(B
$B%Q!<%=%J%k!&%U%!%$%"%&%*!<%k$r;H$C$?8!1V%M%C%H%o!<%/MQ%=%U%H!$(BNEC$B%=%U%H$,=iE8<((B
($BF|7P(B IT Pro, 2/2)$B!#(BNET & COM 2005 $B$K$*$$$F$O!"(BSymantec Client Security $B$rMxMQ$7$?$b$N$O(B NEC $B$NB>$K$bF|N)>pJs%7%9%F%`%:$N(B SHIELD/ExLink-VG
$B$d(B$B%f%K%"%G%C%/%9$N8!1V%=%j%e!<%7%g%s(B$B$,$"$j$^$7$?!#(B
$B$^$?(B F-Secure $B%"%s%A%&%#%k%9$rMxMQ$7$?(B
F-Secure$B8!1V%3%s%H%m!<%i(B
$B$d(B
Sygate Secure Enterprize$B!"(B
CheckPoint Integrity (ZoneAlerm $B%Y!<%9$N@=IJ$@$=$&$G$9(B)
$B$rMxMQ$7$?8!1V%M%C%H%o!<%/%=%j%e!<%7%g%s$b>R2p$5$l$F$$$^$7$?!#(B
$B$=$N0lJ}$G!"%H%l%s%I%^%$%/%m$d%^%+%U%#!<$N%"%s%A%&%$%k%9(B / $B%Q!<%=%J%k%U%!%$%"%&%)!<%k$rMxMQ$7$?8!1V%M%C%H%o!<%/%=%j%e!<%7%g%s$O$I$3$K$b$"$j$^$;$s$G$7$?!#(B
$B!U(B
ClamAV
0.82 $B$,=P$F$$$^$9!#(B
[Clamav-announce] announcing ClamAV 0.82
$B!U(B
pure Windows port of ClamAV
$B$,=P$F$$$^$9!#(B(from [clamav-jp 85])
[SA14120] Perl "PERLIO_DEBUG" Privilege Escalation Vulnerabilities
(secunia)
perl 5.x $B$K7g4Y!#(Bsetuid $B$7$?(B perl $B%9%/%j%W%H$K$*$1$k(B
PERLIO_DEBUG $B4D6-JQ?t$N07$$$K7g4Y$,$"$j!"0lHL%f!<%6$,G$0U$N%U%!%$%k$r>e=q$-$G$-$F$7$^$&(B (CVE: CAN-2005-0155)$B!#(B
$B$^$?!"(BPERLIO_DEBUG $B4D6-JQ?t$,@_Dj$5$l$F$$$k$HD9Bg$J%Q%9L>$K$h$j(B
buffer overflow $B$,H/@8$7!"(Broot $B8"8B$GG$0U$N%3!<%I$rCAN-2005-0156)
Python Security Advisory PSF-2005-001 - SimpleXMLRPCServer.py
(python.org)
Python 2.2.x / 2.3.5 $B$h$jA0$N(B 2.3.x / 2.4 $B$K7g4Y!#(B
SimpleXMLRPCServer $B%i%$%V%i%j$K7g4Y$,$"$j!"(Bremote $B$+$i!"(B
$BEPO?$5$l$?%*%V%8%'%/%H$d$=$N%*%V%8%'%/%H$N%b%8%e!<%k$NFbIt>pJs!"$5$i$K$OB>$N%b%8%e!<%k$NFbIt>pJs$K%"%/%;%92DG=!#(B
$B$3$N7g4Y$O(B register_instance() $B%a%=%C%I$rMxMQ$7$?(B Python XML-RPC $B%5!<%P$G$N$_H/8=!#(B
CVE: CAN-2005-0089
Python 2.3.5 $B$*$h$S(B 2.4.1 $B$G=$@5$5$l$F$$$k(B (2.4.1 $B$O:#7nCf$KEP>lM=Dj(B)$B!#(B
Python 2.2 $BMQ$N(B patch$B!"$*$h$S(B Python 2.3 / 2.4 $BMQ$N(B patch $B$,8x3+$5$l$F$$$k!#(B
$B!U(B
$BMI$5$V$i$l$C$3>I8u72!"I2DG=@-!!>INcH/I=(B
(asahi.com, 2/5)$B!#(B
$B>e@*0eD9$O!V;R$I$b$NF,$rMI$5$V$k$N$O4m81!#h$;$k$3$H$OHr$1$?J}$,$$$$!W$HOC$7$F$$$k!#(B
$B!U(B
Windows Server 2003 SP1$B$G:n$k8!1V%7%9%F%`!"$=$NMxE@$H2]Bj(B
(ITmedia, 2/3)$B!#(B
$B
$B!!(BNET & COM 2005 $B$G$b!V;~4V$N$+$+$k8!1V!W$K$D$$$F8@5Z$7$F$$$?%Y%s%@!<$,J#?t$"$C$?!#l9g$,$"$k$3$H$K5$$,$D$$$?$N$+$J$"!#@5D>!"(B3 $BJ,$b$+$+$k$h$&$G$O$@$a$G$7$g$&!#(B
$B$b$C$H$b$3$NE@$K$D$$$FF1l9g$G!"$=$&$7$?%1!<%9$O$=$l$[$IIQHK$K$O5/$3$i$J$$$@$m$&!#%"%/%;%9$9$kHO0O$dMxMQ$9$k%"%W%j%1!<%7%g%s$K1~$8$F!"8!1V$NITMW$J%]!<%?%k%5!<%P$d(BOWA$B!J(BOutlook Web Access$B!K$H;H$$J,$1$l$P$$$$!W$H@bL@$7$F$$$k!#(B
$B!!$J$s$8$c$=$j$c!#!V8!1V$NITMW$J%]!<%?%k%5!<%P$d(BOWA$B!W$NF3F~HqMQ$O(B
Microsoft $B$,IiC4$7$F$/$l$k$H$G$b$*$C$7$c$k$*$D$b$j$+(B?
$BEvA3$J$,$iMxMQ
$B!U(B
$B!V(BMS$B$N%&%$%k%9BP:v%=%U%H;2F~$KBP$9$k@oN,$O$"$k!W%H%l%s%I%^%$%/%m(B
(MYCOM PC WEB, 2/4)
(link fixed: Maeda $B$5$s46
$B!U(B
vCJD $BOC(B
$B!U(B
$B8x
(NHK, 2/5)
$B!U(B
$B$_$J$5$^$N(B NHK
$B!U(B
$BMD;y;&=}$NCK$OL5?&$N#3#4:P(B
$B!V;&$7$F$d$m$&$H;W$C$?!W(B
$B@UG$G=NO$"$j$H0&CN8)7Y(B
($BCfF|(B, 2/5)$B!#(B
$B%$%H!<%h!<%+%I!<0B>kE9$KE~Ce$7$?;01:$5$s$O(B
($BCfN,(B) $B$9$0$KfFGO$A$c$s$N=}$r3NG'$7$?$,!";W$o$:B)$r$N$s$@!#JqCz$O9u$$JA$H$o$:$+#2!"#3%;%s%A$N?O$NItJ,$r;D$7!"BgItJ,$,>.$5$JF,$K;I$5$C$F$$$?!#(B
$B!!@(;4$9$.$k!#(B
$B!U(B
$B%^%$%/%m%=%U%H(B $B%;%-%e%j%F%#>pJs$N;vA0DLCN(B
(Microsoft, 2/4)$B!#9g7W(B 13 $B7o$@$=$&$G$9!#(B
$B!U(B
893587 - NTBackup $B$NI|85$r9T$&$HI|85$5$l$J$$%U%!%$%k$,B8:_$9$k(B
(Microsoft)$B!#$-$A$s$H%P%C%/%"%C%W$G$-$J$$%P%C%/%"%C%W%=%U%H!D!D!#(B
$B!U(B
$B%4%k%U>l$rIqBf$K$7$?%+!<%I56B$;v7o$O!V:#$N>pJs%;%-%e%j%F%#$NLdBj$N>]D'!W(B
(ITmedia, 2/4)$B!#$&!<$s!"$I$NItJ,$,!V:#$N>pJs%;%-%e%j%F%#$NLdBj$N>]D'!W$J$s$@$m$&!#(B
$B!V$$$/$i5;=QE*$JBP:v$r;\$7$?$H$7$F$b%;%-%e%j%F%#$O407k$7$J$$!W$N$O@N$+$i$NOC$@$7!D!D!#(B
$BL@F|$HL@8eF|$O!"$3$N%Z!<%8$OB?J,99?7$5$l$^$;$s!#(B
$B!D!D$H$$$&M=Dj$@$C$?$s$G$9$,!#(B
$B!U(B
$B%"%$%3%sA{F0(B
$B!!8x<08+2r(B: $B0lB@O:!&2V;R$K4X$9$kJsF;$K$D$-$^$7$F(B
($B%8%c%9%H%7%9%F%`(B)$B!#(B
$B!U(B
$B%9%.2VJ4!"4XElFnIt$G$O#1#0F|$+$iBgNLHt;6(B
($BFIGd(B, 2/2)$B!#$M$s$N$?$a!"$5$-$[$I%/%9%j$r$b$i$C$F$-$?!#(B
$B!U(B
$B#H#2#A%m%1%C%H!'(B
$B#79f5!BG$A>e$2#2#4F|8a8e#5;~#9J,(B
($BKhF|(B, 2/3)$B!#$?$N$`$>(B JAXA$B!#(B
$B!U(B
$BN&<+%X%j!"Iw05$GL12H$N20:,?a$-Ht$P$9!!%$%s%I%M%7%"(B
(asahi.com, 2/2)$B!#$@$a$8$c$s!#0-0U$O$J$$$@$m$&$H$O;W$&$,!D!D!#(B
$B!U(B
$B%&%$%k%9BP:v5!G=$rEk:\$G$-$k7HBSEEOC%5%$%:$N%;%-%e%j%F%#C
(Internet Watch, 2/2)
$B!U(B
Net::Packet
$B$H$$$&(B perl $B%b%8%e!<%k$,$"$k$N$@$=$&$G$9!#(B
$B!U(B
Windows Forensic Toolchest
$B$H$$$&$b$N$,$"$k$=$&$G$9!#(B
([evidenceML:00062])
$B!U(B
Panda$B!"L$CN$N%&%$%k%9$N!H?6$kIq$$!I$r8!CN$9$k%&%$%k%9BP:v%=%U%H(B
(Internet Watch, 2/2)
TruPrevent$B%F%/%N%m%8!<$rEk:\$7$?%=%U%H$O!"4{B8$N%&%$%k%9BP:v%=%U%H$HJ;MQ2DG=$G!"!VL$CN$N%&%$%k%9$rKI8f$7$-$l$J$$4{B8$N%&%$%k%9BP:v%=%U%H$rJd40$G$-$k!W$H$7$?!#$J$*!"2q>l$G$O%H%l%s%I%^%$%/%m$N!V%&%$%k%9%P%9%?!<(B 2005$B!W$HJ;MQ$9$k%G%b%s%9%H%l!<%7%g%s$b9T$J$C$F$$$?!#(B
$B!!==J,0BDj$7$FF0$/$N$+$J$"!D!D!#(B
$B!U(B
$B%Q%V%j%C%/%3%a%s%HJg=8Cf(B
$B!U(B
$B8x3+%7%s%]%8%&%`(B
$B$*$+$7$$$>!*7Y;!!&8!;!!&:[H==j(B
($BAO=PHG(B)$B!#(B2005.02.14$B!"El5~ETJ85~6h!"!D!DNA6bITL@!#(B
$B!U(B
$B%a!<%k$d%[!<%`%Z!<%8$K$h$k!V2M6u@A5a!WEy$X$NCm0U4-5/(B
($B7Y;!D#(B, 2/1)
$B!U(B
$B%$!<%P%s%/$5$s$O$"$/$^$GX@XiL5Ni$G$9(B
($B@iG/N99T$O$8$a$^$7$?(B, 2/1)$B!#(B
$B%$!<%P%s%/6d9T!"NI$$L#=P$7$F$k$M$((B
$B$N$D$E$-!#(B
$B!U(B
InterScan Web Security Suite 1.1 Solaris$B!"(B1.02 Linux$BHG!"(B1.01 Windows$BHG(B Patch$B8x3+$N$*CN$i$;(B
($B%H%l%s%I%^%$%/%m(B)
$B!U(B
$B
(tanakanews.com, 1/25)
$B!U(B
$B%^%+%U%#!
($BF|7P(B IT Pro, 2/1)
Anti-Spyware Enterprise Edition$B%b%8%e!<%k$O!$F1
$B!U(B
$B!VAw?.Z$J$7$G$OJF9q$K%a!<%k$,FO$+$J$/$J$k!W$H%;%s%I%a!<%k$,;XE&(B
($BF|7P(B IT Pro, 2/1)
$B!U(B
Windows Server 2003 $B%j%=!<%9%-%C%H5!G=JT(B IIS 6.0
(Microsoft)
$B!U(B
RFC3986: Uniform Resource Identifier (URI): Generic Syntax
(IETF) $B$,=P$F$$$^$9!#(BObsoletes RFC2732, RFC2396, RFC1808 $B$G(B
Updates
RFC1738 $B$G(B
Status: STANDARD $B$@$=$&$G$9!#(B
$B!V(B7. Security Considerations$B!W$H$$$&>O$b$"$j$^$9!#(B
$B!U(B
$B%A%'%A%'%s%K%e!<%9(B Vol.05 No.02
($B%A%'%A%'%s%K%e!<%9(B, 2005.02.02)$B!#!V%A%'%A%'%sFHN)GI$NBgE}NN%"%9%i%s(I%$B%^%9%O%I%U!W;a$N2HB2$,2?
$B:rG/#1#07n!"%m%7%"$N%&%9%A%N%U8!;vAmD9$O!"2<1!$G!"!V%F%m%j%9%H$N2HB2$KBP$9$k5UM62}$O!"%F%m$H$N@o$$$N0lIt$@!W$HH/8@$7$?!#(B
$B!!$$$d$O$d!#$a$A$c$/$A$c!#(B
$B!!!V%Y%9%i%s;v7o$NN"$K%m%7%"<#0B5!4X!)!W$K$bCmL\!#(B
$B!!(BUW-imap
$B$K7g4Y!#(BCRAM-MD5 $BG'>Z$,M-8z$J>l9g$K!"(BCRAM-MD5 $BG'>Z$,@5$7$/=hM}$5$l$J$$$?$a!"(B
$BG$0U$N%f!<%6$K$J$j$9$^$9$3$H$,2DG=!#(B
CRAM-MD5 $BG'>Z$r;H$C$F$$$J$$?M$K$O$3$N7g4Y$O1F6A$7$J$$!#(B
$B!!(BVU#202777 $B$G$O(B
imap-2004b $B$G=$@5$5$l$F$$$k(B$B$H$J$C$F$$$k$N$@$,!"(B
UW IMAP Server Documentation
(washington.edu) $B$r8+$k8B$j$G$O!"(Bimap-2004b $B$G$O$J$/(B imap-2004c $B$G=$@5$5$l$?$G$O$J$$$N$+!"$H$$$&5$$,$9$k!#(B
$B$A$J$_$K(B
ftp://ftp.cac.washington.edu/mail/
$B$K$"$k:G?7HG$O(B imap-2004c1 $B$G$"$j!"$^$?(B
ftp://ftp.cac.washington.edu/mail/old/
$B$K$O$J$<$+(B imap-2004b $B$@$1$,B8:_$7$J$$!#(B
$B!!(BJVN: JVNVU#702777:
UW-imap$B$G%f!<%6G'>Z$,@5$7$/9T$o$l$J$$@H
2005.03.08 $BDI5-(B:
$B!!?.Mj$G$-$k6Z$+$i!V(Bimap-2004b $B$G=$@5$5$l$?!W;]$N>pJs$r
$B!!(BOpenswan
1.0.9 $B$h$jA0$N(B 1.x$B!"(B2.3.0 $B$h$jA0$N(B 2.x $B$K(B buffer overflow $B$9$k7g4Y$,$"$j!"(B
Openswan $B%"%W%j$r(B XAUTH $B$*$h$S(B PAM $B%5%]!<%H9~$G%3%s%Q%$%k$7$?>l9g$K7g4Y$,H/8=$9$k!#(B
remote $B$+$iG$0U$N%3!<%I$rCAN-2005-0162
$B!!(BOpenswan 1.0.9 / 2.3.0 $B$G=$@5$5$l$F$$$k!#$^$?(B Openswan 2.x $BMQ$N(B patch $B$,;XE&J8=q$KE:IU$5$l$F$$$k!#(B
$B!!(BDefeating Microsoft Windows XP SP2 Heap protection
and DEP bypass
(maxpatrol.com) $B$NOC!#(BWindows XP SP2 $B$N(B
DEP
(@IT)
$B$r2sHr$7$F(B buffer overflow $B7g4Y$r96N,$G$-$k!"$H$$$&;XE&!#(B
$B!U(B
2005$BG/(B1$B7n(B31$BF|IU$1$N%&%$%k%9Dj5A$G(B Regtlib.exe $B$,(B W32.Randex $B$K46@w$7$F$$$k$H8!=P$5$l$k(B
($B%7%^%s%F%C%/(B, 1/31)$B!#(B
$B!V(B2005$BG/(B1$B7n(B31$BF|IU$1(B (rev. 17) $B$N%&%$%k%9Dj5A%U%!%$%k!W$G8m8!=P$,H/@8$7$F$$$?$h$&$G$9!#!V(B2005$BG/(B1$B7n(B31$BF|IU$1(B (rev. 37) $B!W$G=$@5$5$l$F$$$^$9!#F#0f$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
Dr.Web for Unix $B%H%i%$%"%k(B/$BHNGd3+;O(B
(drweb.jp)$B!#F|K\>eN&$G$9$+!#(B$B2A3J(B
$B!U(B
$B%"%$%3%sA{F0(B$B!#(B
$B!!2><99T$O$J$$$N$G0lB@O:$OHNGd$5$lB3$1$k$7!"(B
$B%8%c%9%H%7%9%F%`$O95AJM=Dj$@$7!"(B
$B4{$K0lB@O:$r;}$C$F$$$k?M$,$=$l$r
$B!!%"%$%3%s$C$F2?(B? $B$H$$$&$N$,AhE@$N$h$&$G$9$,!"%"%$%3%s$O$d$C$Q$j(B$B%W%m%0%i%_%s%08@8l(B$B$G$9$h$M$(!#(B
$B!U(B
$B!V65$($F!*%&%k%H%i
($B%F%l%SEl5~(B, 2/1)$B!#$$$d$O$d!#(B
$B$d$C$F$_$J$/$A$c$o$+$i$J$$(B
$B$HBg=q$-$7$F$$$kHVAH$NCf?H$,$3$l$G$O!D!D!#(B
$B!U(B
$BJFO"K.CO:[!'(B
$B%0%"%s%?%J%b$G$N309q?M94B+$K0c7{H=7h(B
($BKhF|(B, 2/1)$B!#$9$P$i$7$$!#(B
$B!!4XO"(B: $B=!65$N%?%V!<$r0-MQ!"%0%"%s%?%J%b4pCO$G!H@-E*!I?RLd(B
($BFIGd(B / goo, 1/28)
$B!U(B
$BG'>ZMQ(BRFID$B%?%0$N0E9f$,GK$i$l!"$J$j$9$^$7$N4m81@-$,Z(B
(slashdot.jp, 1/31)$B!#$&!<$s!"(B
$B$3$N%?%0$O(B40$B%S%C%H$N0E9f80$rFbB"$7!"FIZ$r
$B!!$3$N;~E@$G=*$C$F$$$k$N$OL@$i$+$@$C$?$,$=$l$r
$B!U(B
$BO;%v=j:F=hM};\@_Fb$N%,%i%98G2=BNCyB";\@_$K=EBg$J@_7W%_%9(B
![[$B%;%-%e%j%F%#%[!<%k(B memo]](/%7Ekjm/security/memo/sechole-memo.gif){kind=small}
