$B%;%-%e%j%F%#%[!<%k(B memo - 2005.03
Last modified: Mon Jan 16 14:27:36 2006
+0900 (JST)
$B!!$3$N%Z!<%8$N>pJs$rMxMQ$5$l$kA0$K!"(B$BCm0U=q$-(B$B$r$*FI$_$/$@$5$$!#(B
$B!U(B
$B9u$/$L$l(B
$B!!$I$&9M$($F$bD+F|$,$d$C$?$N$OITE,@Z$J9T0Y$@$,!"(B
$B$?$H$($P(B
$BIpIY;NLdBj$HJsF;5!4X(B
($B@/<#7P:QK\pJs(B, 2003.12.10)
$B$rFI$s$@$j$9$k$H!";f$O$@$$$8$g$&$V$J$s$G$9$+$M$(!#(B
$B!U(B
CRYPTREC Report 2004 $B$N8x3+(B
(IPA ISEC, 3/31)
$B!U(B
iij.news vol.68 JANUARY/FEBRUARY 2005 (IIJ)$B!#(B
$B!VFCJLO":\!](Bspam$B$+$i%a!<%k$r
$B!U(B
Anti-detection service
(hxdef.czweb.org)$B!#>&Gd!">&Gd!#(B
$B!U(B
$B8D?M>pJsJ]8nK!(B $BMh7nA4LL;\9T!!O3$l$?$iBgJQ!"4k6H%T%j%T%j(B ($BKhF|(B, 3/30)$B!#(B
$B!!"!4k6H$O!J(B2$B!KMxMQL\E*$rL@<($7!"$=$NHO0O$G$N
--$BMxMQL\E*$O4k6H$,<+$iL@<($9$l$P$9$`$N$K!"$I$&$7$FCY$l$k$N$+(B
$B!!"!pJs$r07$&Bge$KL\E*$NHO0OFb$G$NA0$K$J$C$FJ,$+$C$F$-$?!#Nc$($P!"F1$88\5R$G$b>&IJ$N9XF~;~!"%"%s%1!<%HpJs$Np$@!#$=$NBP:v$r
$B!U(B
$B8D?M>pJs?7;v>p!!J]8nK!%9%?!<%H!!Gd$l$k%7%e%l%C%@!<(B
($BKhF|(B, 3/30)
$B0lJ}!"%3%s%T%e!<%?!<$KFbB"$5$l$F$$$k%O!<%I%G%#%9%/$N>pJs$r6/NO$J<'5$$G>C5n$9$kAuCV$bGd$l$F$$$k!#>.7?$O(B50$BK|1_!"Bg7?$O(B500$BK|1_!#(B3$BG/A0$K3+H/$7$?!V%*%j%(%s%HB,4o%3%s%T%e!<%?!e$2$OEv=i$NG/4V(B1000$BK|1_$+$i:#G/EY$OLs(B1$B2/(B5000$BK|1_$K5^A}$7$?!#(B
$B!!$9$4$$A}$(J}$G$9$M!#%\!<%J%9$$$C$Q$$=P$?$N$+$J$"!#(T_T)
$B!U(B
$B8D?M>pJs?7;v>p!'J]8nK!%9%?!<%H!!L>Jm6H
($BKhF|(B, 3/30)
$B!U(B
$BFbIt>pJsO3$($$BP:v$N>o<1(B:
$BA0JT(B$B!"(B$B8eJT(B
(ITmedia, 3/15 + 3/30)
$B!U(B
IT$B:G?7;v>p(B
$BBh(B57$B2s!A!V9u;z2=$K(B10$BG/$+$+$C$?%;%-%e%j%F%#;v6H!W!";0
($BF|7P(B BP, 3/29)
$B!U(B
$B:k6L8)!'=;4p%M%C%H$K4X$7(BISMS$B$H(BBS7799$B$NG'>Z$r
($BIpED7=;K(B, 3/31)$B!#$&!<$s!D!D!#(B
$B=;4p%M%C%H$NLdBj$O!"(B1 $BCOJ}<+<#BN$,(B ISMS
$B/0c$C$F$/$k$H;W$&$1$I!#(B
$BK\Mh=EMW$J$N$O4m81$r3NG'$7$?>e$G$=$l$r$$$+$K0BA4$J>uBV$K2~A1$7$F$$$/$+$H$$$&%W%m%;%9$N$O$:!#(B
$B!!=;4p%M%C%H$NLdBj$O!"!V2~A1!W$H$$$&%l%Y%k$GBP=h$G$-$k$s$G$7$g$&$+!#(B
$B!U(B
$B%;%7!<%k56q-;R!'(B
$B
($BKhF|(B, 3/31)$B!#$3$l$O$^$?0-
$B!U(B
Handler's Diary March 30th 2005: Another round of DNS cache poisoning (SANS ISC)$B!#(B
DNS $BA@$$$,N.9T$C$F$$$k$s$G$9$+$M$(!#$$$d$@$J$"!#(B
$B!U(B
Microsoft Releases Windows Server 2003 Service Pack 1
(Microsoft)$B!#(B
$B=P$^$7$?!#:#$N$H$3$m!"1Q8lHG$H%I%$%D8lHG$@$1$N$h$&$G$9!#(B
Windows Small Business Server
2003 Service Pack 1 $B$O(B 60 $BF|0JFb$KEP>l$9$k$=$&$G$9!#(B
$B!U(B
[AML 0976] [$B6[5^(B]$BJULn8E$G6/9T9);v$r;O$a$h$&$H$7$F$$$^$9!#935D$NEEOC$r!*(B
$B!!(BKerio Personal Firewall 4.1.2 $B0JA0$K7g4Y!#(B
$B96N,%"%W%j%1!<%7%g%s$,!"B>$N%"%W%j%1!<%7%g%s$K$J$j$9$^$7$F%M%C%H%o!<%/$K%"%/%;%9$9$k$3$H$,2DG=!#(BKerio Personal Firewall 4.1.3 $B0J9_$G=$@5$5$l$F$$$k!#(B
$B!!(BCisco VPN 3000 Concentrator $B$N%=%U%H%&%'%"(B 4.1.7.A $B0JA0$K7g4Y!#(B
HTTPS $B%5!<%S%9$r;HMQ$7$F$$$k>l9g$K!"(BHTTPS $B%5!<%S%9$KBP$7$F:Y9)$7$?%Q%1%C%H$rEj$2$k$H%5!<%S%9$,:F5/F0$5$l$k!#(B
$B%=%U%H%&%'%"(B 4.1.7.B $B0J9_$G=$@5$5$l$F$$$k!#(B
$B!!(BPHP $BMQ$N%F%s%W%l!<%H%(%s%8%s(B Smarty 2.6.7 $B0JA0$K7g4Y!#(Bregex_replace $B=$>~;R$K7g4Y$,$"$j!"(B
$B%F%s%W%l!<%H%;%-%e%j%F%#(B$B$,M-8z$K$J$C$F$$$F$b!"%F%s%W%l!<%H$+$i$N(B PHP $B%3!<%I$N
$B!!(BSmarty 2.6.8 $B$G=$@5$5$l$F$$$k!#(B
$B!!(BppBlog 1.4.0 $BL$K~$K7g4Y!#(B
$B8!:w%b%8%e!<%k(B search.inc.php $B$K%/%m%9%5%$%H%9%/%j%W%F%#%s%0$r5v$97g4Y$,B8:_$9$k!#(B
$B=$@5HG(B search.inc.php
$B$,8x3+$5$l$F$$$k$N$GF~$l$+$($l$P$h$$!#(B
$B8=:_&B%F%9%HCf$N(B ppBlog 1.4.0 $B$G$O!"$3$N7g4Y$O=$@5$5$l$F$$$k!#(B
2005.04.11 $BDI5-(B:
$B!!(BppBlog
1.4.0 $B$,@5<08x3+$5$l$F$$$^$9!#(B
$B!!(BSylpheed 0.8.0$B!A(B1.0.3 / 1.9.0 $B!A(B 1.9.4 $B$K!"(B
Sylpheed 1.0.2 $B0JA0$K%P%C%U%!%*!<%P!<%U%m!<$,H/@8$9$k7g4Y(B
$B$H$OJL$N!"(Bbuffer overflow $B$,H/@8$9$k7g4Y$,H/8+$5$l$?!#(B
Sylpheed 1.0.4 / 1.9.5 $B$G=$@5$5$l$F$$$k!#(B
CVE: CAN-2005-0926$B!#(B
takayama $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!!(BSylpheed 1.0.4 $B$N(B ChangeLog.jp $B$r8+$k$H!"$3$&=q$+$l$F$$$^$9!#(B
2005-03-24
* src/procmime.c:
procmime_scan_content_type()
procmime_scan_content_disposition(): $B%9%?%C%/%P%C%U%!%*!<%P!<(B
$B%U%m!<$r5/$3$92DG=@-$,$"$C$?$N$r=$@5!#(B
* src/codeconv.c: conv_unmime_header()
src/unmime.[ch]: unmime_header(): $B%P%C%U%!%5%$%:$N0z?t$rDI2C$7!"(B
$B%G%3!<%I$7$?J8;zNs$N%5%$%:$r@)8B$7!"%P%C%U%!%*!<%P!<%U%m!<$N(B
$B2DG=@-$rL5$/$7$?!#(B
- SYM05-006:
Denial of Service in Symantec Norton AntiVirus AutoProtect
$B!!F|K\8lHG%"%I%P%$%6%j=P$^$7$?(B:
SYM05-006:
Symantec Norton AntiVirus $B$N(B AutoProtect $B5!G=$K%5!<%S%95qH]$N@H
($B%7%^%s%F%C%/(B)
$B%7%^%s%F%C%/$NBP1~(B
$B%7%^%s%F%C%/$G$O!"(B2 $B7o$NLdBj$,(B Symantec Norton AntiVirus $B$N(B Auto-Protect $B5!G=$K1F6A$r$*$h$\$9$3$H$r3NG'$7!"1F6A$r
$B!!$J!"$J$s$@$C$F!<(B (AA $BN,(B)$B!#(B$B1Q8lHG%"%I%P%$%6%j(B
$B$K$O(B
Symantec Response
Symantec product engineers confirmed both issues impacting Symantec's Auto-Protect feature in Symantec Norton AntiVirus and have developed and released a patch for all impacted products through Symantec LiveUpdate. Customers running Automatic LiveUpdate should already be updated.
$B$H$"$k$N$K!#$I$&$d$i!"F|K\8lHG%W%m%@%/%HMQ$N=$@5(B patch $B$O$^$@$G$-$F$$$J$$LOMM$G$9!#(B
2005.04.07 $BDI5-(B:
$B!!F|K\8l(B KB $B=P$^$7$?(B: 889323 - $B4IM}
(Microsoft)
$B!!(BNorton AntiVirus 2004 / 2005$B!"(BNorton Internet Security 2004 / 2005$B!"(B
Norton System Works 2004 / 2005 $B$K7g4Y!#(B
Norton AntiVirus $B$N(B Auto-Protect $B$,M-8z$J>l9g(B ($BI8=`$GM-8z(B) $B$K!"(BDoS $B>uBV$,H/@8$7$F$7$^$&7g4Y$,(B
2 $B
$B!!(BLiveUpdate $B7PM3$G99?7HG$rF~
2005.03.30 $BDI5-(B:
$B!!F|K\8lHG%"%I%P%$%6%j=P$^$7$?(B:
SYM05-006:
Symantec Norton AntiVirus $B$N(B AutoProtect $B5!G=$K%5!<%S%95qH]$N@H
($B%7%^%s%F%C%/(B)
$B%7%^%s%F%C%/$NBP1~(B
$B%7%^%s%F%C%/$G$O!"(B2 $B7o$NLdBj$,(B Symantec Norton AntiVirus $B$N(B Auto-Protect $B5!G=$K1F6A$r$*$h$\$9$3$H$r3NG'$7!"1F6A$r
$B!!$J!"$J$s$@$C$F!<(B (AA $BN,(B)$B!#(B$B1Q8lHG%"%I%P%$%6%j(B
$B$K$O(B
Symantec Response
Symantec product engineers confirmed both issues impacting Symantec's Auto-Protect feature in Symantec Norton AntiVirus and have developed and released a patch for all impacted products through Symantec LiveUpdate. Customers running Automatic LiveUpdate should already be updated.
$B$H$"$k$N$K!#$I$&$d$i!"F|K\8lHG%W%m%@%/%HMQ$N=$@5(B patch $B$O$^$@$G$-$F$$$J$$LOMM$G$9!#(B
2005.04.01 $BDI5-(B:
$B!!(B2005 $B%7%j!<%:$K$D$$$F$OBP1~$5$l$?$h$&$G$9(B:
$B%7%^%s%F%C%/!"(BNorton AntiVirus 2005$B$NF|K\HG=$@5%Q%C%A$rG[I[3+;O(B
(Internet Watch, 2005.04.01)$B!#(B
$B
2005.04.06 $BDI5-(B:
$B!!(B2004 $B%7%j!<%:$K$D$$$F$bBP1~$5$l$?$h$&$G!"(B
SYM05-006:
Symantec Norton AntiVirus $B$N(B AutoProtect $B5!G=$K%5!<%S%95qH]$N@H
$B$,(B 4/5 $BIU$G!VK\7o$N1F6A$r
$B!!(Btelnet $B%/%i%$%"%s%H$KJ#?t$N7g4Y$,H/8+$5$l$F$$$k!#(B
$B!!(BiDEFENSE Advisory $B$K$O!"7g4Y$N$"$k$b$N$H$7$F!"(B
ALT Linux, Mac OS X, FreeBSD, MIT Kerberos, Openwall, Red Hat Enterprise Linux, Solaris 7$B!A(B10 $B$,5s$2$i$l$F$$$k!#$^$?(B HP-UX $B$H(B HP Tru64 UNIX $B$K$O$3$N7g4Y$O$J$$$=$&$@!#(B
$B!!$A$g$C$H3NG'$7$F$_$?$H$3$m!"(Bsocks 5 $B;2>H$B$K4^$^$l$k(B telnet $B%/%i%$%"%s%H$b7g4Y$"$j$N$h$&$K8+$($k!#(B
$BMIT krb5 Security Advisory 2005-001: Buffer overflows in telnet client
$B$N(B patch $B$,$[$\$=$N$^$^E,MQ$G$-$?$N$G!"$H$j$"$($:$=$l$GMM;R8+!#(B
fix / patch:
2005.04.21 $BDI5-(B:
$B!!(BGentoo, Vine, Debian, Heimdal $BDI2C!#(B
$B!U(B
$B2!$74s$;$kK!5,@)$NGH(B
($BF|7P(B IT Pro, 3/28)$B!#$3$l$8$c$"!"F|7P%3%s%T%e!<%?K\;o$rFI$^$J$$$HA4$/0UL#ITL@$@$J$"!#(B
$B!U(B
$B!V%;%-%e%j%F%#G'>Z$N
($BF|7P(B IT Pro, 3/25)$B!#8!1V%7%9%F%`$O%3%9%H$b7B(B 50m $B0JFb$K$D$$$F$bDs0F$G$-$F$$$J$$>u67!#(B
$B!U(B
$B%;%-%e%j%F%#%"%+%G%_!$B!#(B
2005.04.09$B!"Bg:eI\Bg:e;T!"(B3,000$B1_!#(B
$B!U(B
ACCS $BJ}LL(B
$B!!IqBf$O9b:[$X!#(B
$B!U(B
O'Reilly
$BJ}LL(B
$B!!%*%i%$%j!$BMh7n(B$B$K=P$k$=$&$G$9!#$3$l$,$=$3$=$3Gd$l$l$P!"(BNetwork Security Tools $B$bF|K\8l2=$5$l$k$+$b$7$l$J$$$H$N1=!#(B
$B!U(B
$BEEOC$NH/?.
($BF|7P(B IT Pro, 3/25)$B!#$G$-$k%7%j!<%:!#(B
$B!U(B
$B!V:#$3$=!"L54X?4$r>h$j1[$($F!W%^%9%O!<%I%UBgE}NN;&32$K4X$9$k6&F1@
($B%A%'%A%'%s%K%e!<%9(B, 3/24)$B!#(B
$B!U(B
OpenSSL
0.9.7f $B$,=P$?$=$&$G$9!#(Biida $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
$BDk5~Bg9V;U$,2JA\8&2JD9!!2#ED$5$s#D#N#A4UDj$G
($B6&F1(B, 3/25)$B!#Cf$N?M$K$J$C$F$7$^$C$?$N$G$9$M!#(B
$B!U(B
$BC]Eg$HFHEg!!$3$l$r!VM'>pEg!W$K!D$NL4A[(B
(asahi.com, 3/27)$B!#C]Eg$H$$$&L>$r/$J$/$H$b8=>u$h$j$OMZ$+$K%^%7$G$O$"$k!#$5$F!D!D!#(B
$B!!C]Eg4XO"(B: [AML 0931] $B=54)?7D,$NC]Eg!aFHEg5-;v$rHcH=$9$k(B
$B!U(B
$BEl%7%J3$%,%9ED3+H/!"@/I\$NBP=hJ}?K$,H=L@(B
($BFIGd(B, 3/28)$B!#$^$:$O7!$l(B!
$B!U(B
$BKLD+A/!"D;%$%s%U%k%(%s%6H/@8$r=iH/I=(B
(CNN, 3/27)$B!#(B
$B!U(B
$B#U#N#H#C#R$NDEGH2R;Y1g$,Dd;_!"%$%s%I%M%7%"@/I\MW@A$;$:(B
(CNN, 3/25)$B!"(B
$B%$%s%IMNDEGH!"?7$?$K#4#4:PK.?MCK@-$N;`K43NG'(B
($BFIGd(B, 3/28)
$B8=;~E@$G!"CO?LH/@8;~$KHo:R9q$rN99T$7!"O"Mm$r
$B!U(B
$B%"%K%oOQ$KBgNL$NCFLtEj4~!)(B
($BKL3$F;?7J9(B, 3/25)
$B!U(B
$BF|K\HG%]%j%F%#%+%k%3%s%Q%9$K$D$$$F(B (sakidatsumono)$B!#(B
$B$d$C$F$_$?!#(B
$BJ]
($B7P:QE*$J(B)$B1&!&:8EY(B -1.82
$B$"$J$?$NJ,N`$O%j%Y%i%k:8GI(B($B%j%Y%i%j%9%H(B)$B$G$9!#(B
$B!!$^$"$3$s$J$b$s$@$m$&!#(B
$B!U(B
$B%K%e!<%h!<%/!JJF9q!K!'JF9qF1;~B?H/%F%m!J%o!<%k%I!&%H%l!<%I!&%;%s%?!
($B30L3>J(B, 3/28)
$B!U(B
$B:rF|$K$R$-$D$E$-(B NCA5
$B$ND4;R$,0-$$$h$&$G!"$3$N%Z!<%8$,8+$($?$j8+$($J$+$C$?$j$7$F$$$k$h$&$G$9!#(B
$B$3$3$G=EMW$J$N$O!"%$%s%]!<%H@h$,!VG'>Z6I>ZL@=q!W$G$O$J$$$H$$$&$3$H$@!#<+J,$G:n$C$?%*%l%*%lG'>Z6I>ZL@=q$r!VG'>Z6I>ZL@=q!W%9%H%"$K%$%s%]!<%H$9$kJ}K!$G$b!"F1MM$K@5>o$J(BSSL$B@\B3$rZL@=q$KqY$5$l$k!J$b$7$/$OG=F0E*EpD0$r$5$l$k!K%j%9%/$,@8$8$F$7$^$&!#$=$l$KBP$7!"%*%l%*%l%5!<%P>ZL@=q$r!V%5%$%H>ZL@=q!W%9%H%"$KEPO?$9$k$3$NJ}K!$G$"$l$P!"K|$,0lHkL)80$,N.=P$7$F$b!"<+J,MQ$N%5!<%P$X$N%"%/%;%9$K%j%9%/$,@8$8$k$@$1$G:Q$`!#(B
$B!!$*$)!A!#$3$s$J5!G=$,$"$C$?$H$O!#(BFirefox $B$9$P$i$7$$$G$9!#%V%i%\!
$B!U(B
NCA5
$B$ND4;R$,0-$$$h$&$G!"$3$N%Z!<%8$,8+$($?$j8+$($J$+$C$?$j$7$F$$$k$h$&$@!#(B
$B$&!<$`!D!D!#(B
$B!U(B
DVForge Virus Prize 2005 (DVForge)$B!#%-%c%s%;%k$9$k$/$i$$$J$i!":G=i$+$i$7$J$-$c$$$$$N$K!#(B$B$b$H$b$H$O$3$&$@$C$?$=$&$G$9(B$B!#(Bfrom News from the Lab, Saturday, March 26, 2005 (F-Secure)
$B!U(B
$B2qG+$G:FEY$NBg5,LO8!1\!!8x3+=h7:1GA|N.=P$G(B
($BD+A/F|Js(B, 3/27)
$B!U(B
$BF|4Z4X78(B ($BC]EgJ}LL(B)
$B!!!V9q:];JK!:[H==j$G7kCe$r$D$1$k!W$H$$$&9M$($O!"F|K\B&$K$O$:$$$V$sA0$+$i$"$k$h$&$J$N$G$9$,!"4Z9q$O0l4S$7$F5qH]$7$F$$$k$h$&$G$9$M!#(B
$B4Z9q$N_/4pJ8!J%Q%s!&%.%`%s!K308rDL>&Aj$O(B ($BCfN,(B) $B$5$i$K!"4Z9q@/I\$N?7$?$JBPF|6/9E@/:v$K4X$7!"!V$?$@$9$Y$-$O@5$7!"2r7h$9$Y$-$b$N$O2r7h$9$k$,!"7P:Q!&J82=8rN.$bJB9T$7$F?J$a$k$H$$$&$N$,@/I\$N4pD4$@!W$H=R$Y$?!#(B
$B!!$=$&$$$&$3$H$r8@$&$/$i$$$J$i!"$=$l$3$=9q:];JK!:[H==j$G7kCe$r$D$1$?J}$,$$$$$H;W$&$N$G$9$,!#(B
$B!U(B
$B2-%ND;Eg$K4QB,MQ%l!<%@!
($BFIGd(B, 3/27)
$B!U(B
$BH?J,NvK!H?BP$K#1#0#0K|?M935D!!BfOQ!"DDAmE}$b%G%b;22C!!!Z ($BKL3$F;?7J9(B, 3/26)
$B!U(B
$BJF73!"%S%s%i%G%#%sF($,$9!!8x3+J8=q$K5-=R(B
(CNN, 3/25)$B!#(B
$B!U(B
Handler's Diary March 26th 2005
(SANS ISC, 3/26)$B!#(Brcp $B$G$9$+!#(B
$B!U(B
ACCS $B;v7oH=7h4XO"(B
$B!!$d$C$Q$jH=7hA4J8$rFI$s$G$+$i5DO@$7$?J}$,$$$$$_$?$$!#(B
$B!U(B
$B%$!<%P%s%/6d9T$,%V%l!<%I(BPC$B$rF3F~$7$F>pJsO3$($$BP:v$r6/2=(B
($BF|7P(B IT Pro, 3/25)
$B!U(B
$BEl5~ET650Q!!%M%C%HMxMQ!V(B5$B$+>r!W$N650w8~$1;XF3;qNA$r:n@.(B
($BKhF|(B, 3/25)
$B!U(B
InterScan for Lotus Notes 2.6 Solaris$BHG(B Service Pack 1 Patch 2 $B8x3+$N$*CN$i$;(B
($B%H%l%s%I%^%$%/%m(B, 3/25)
$B!U(B
F-Secure BlackLight
$B$G$9$,!"@:NOE*$K99?7$5$l$F$$$^$9$M!#(B23-Mar-05 $B$,:G?7!#%3%^%s%I%i%$%sHG$b$G$-$F$$$^$9!#(B
Spyware authors challenge BlackLight (F-Secure)
$B$K$"$k$h$&$K!"(B
rename $B$7$F$+$i;HMQ$7$^$7$g$&!#(B
$B!U(B
$B!V(BWindows$B$N$[$&$,0BA4!W$ND4::7k2L$K(BRed Hat$B44It$,H?H/(B
(ITmedia, 3/24)$B!#(B
Windows vs. Linux Web Server Security Study
(securityinnovation.com) $B$NOC!#(B
$Bl9g$O$"$k$G$7$g$&!#(B
$B$U$D$&$N0U8+$H$7$F$O!"(B
$B$I$C$A$b$A$c$s$HLLE]$_$J$$$H$@$a$@$h$M!"(B
$B$@$m$&$H;W$$$^$9!#(B$B$\$d$\$d$7$F$k$H8e$m$+$i$P$C$5$j$@!#$I$C$A$b$I$C$A$b!#$I$C$A$b$I$C$A$b(B!
$B!U(B
$B%/%j%(%$%F%#%V!&%3%b%s%:!=%G%8%?%k;~Be$NCNE*:b;:8"(B
$B$H$$$&K\$,$"$k$s$G$9$M!#(B
$B!U(B
$BBQ?L@_7W!"A4LL3+<($r!!IM2,86H/AJ>Y$G@E2,CO:[L?Na(B
(asahi.com, 3/22)
$B!U(B
W32/Mytob-D
(Sophos) $B$H$$$&$N$,$A$g$m$A$g$mFO$-$O$8$a$F$$$^$9!#(B
F-Secure Anti-Virus for Linux 4.61 + 2005-03-24_02,
Trend Micro VSAPI v7.510-1002 + 2.512.00
Norton AntiVirus 2005 + 20050324.008,
McAfee VSE 8.0i engine 4400 + dat 4454
$B$G$O8!=P$7$J$$$h$&$G$9!#(B
Jotti's malware scan
$B$GD4$Y$F$_$?$H$3$m!"(BBitDefender, F-Prot, Kaspersky, mks_vir, NOD32 $B$O8!=P$9$k$h$&$G$9!#(B
$B!!
- W32/Mytob.gen@MM (McAfee)$B!#(BDAT4455 $B$G?7
AVERT has received 3 new variants within an hour of this threat. The variants are use multiple forms of compression/encryption and detection will be added
to the 4455 DAT files.
4455 $B=P$^$7$?!#(B
- ClamAV 0.83 + main.cvd 30 daily.cvd 784 $B$G(B Worm.Mytob.H-1
$B$H$7$F8!=P$7$^$9!#(B
- WORM_MYTOB.K,
WORM_MYTOB.L
(Trendmicro) : 2.516.00 $B$GBP1~!#(B
$B!!(BW32/Mytob-E (Sophos),
W32/Mytob-G (Sophos)
$B$b=P$^$7$?!#(B
$B!U(B
ACCS $B;v7oH=7h(B$B!"(B
office $B;a$OD(Lr(B8$B$+7n!"<99TM1M=(B3$BG/$@$=$&$G$9!#(B
$B4pK\E*$K8!;!B&$NpJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!!H=7hA4J8$r$I$3$+$GFI$a$k$h$&$K$J$i$J$$$+$J$"!#(B
$B!U(B
The Trustworthy Computing Security Development Lifecycle
(Microsoft, 2005.03)
$B!U(B
F-Secure$B%"%s%A%&%#%k%9$N(BLinux$B@=IJ(B($B5Z$S0lIt$N(BWindows$B4D6-(B)$B$N(B
$B!!!!Dj5A%U%!%$%k99?7%5!<%PJQ99$K$D$$$F(B
(F-Secure, 2005.03.23)$B!#(B4/18 $B$+$i(B akamai $B2=$5$l$k$=$&$G$9!#(B
$B!!(BCERT(R) Incident Note IN-2001-11: Cache Corruption on Microsoft DNS Servers
$B$r$$$^$@$KBP1~$7$F$$$J$$$H$3$m$,$"$C$F!"8+;v$K(B DNS $B%-%c%C%7%e1x@w$5$l$?LOMM!#(B
Windows 2000 $B$N(B DNS $B%5!<%P$N>l9g$O!"(B
$BFC=8(B $B%$%s%?!<%M%C%H!V>o;~!W@\B37W2h(B
$BBh(B6$B2s(B DNS$B%5!<%P$N@_Dj$H3NG'(B
(@IT) $B$,;29M$K$J$k!#(B
- OpenPGP$B$K@_7W>e$N@H
$B!!(BGnuPG 1.4.1 $B=P$F$$$^$9!#(B
Added countermeasures against the Mister/Zuccherato CFB attack
<http://eprint.iacr.org/2005/033>
$B!!(BGnuPG 1.2.7 / 1.4.0 $BMQ(B patch:
[Announce] Attack against OpenPGP encryption
- DeleGate 8.10.3-pre7
$B!!(BDeleGate
8.11.1 $B$,=P$F$$$^$9!#(BC99
$B$KE,9g$7$F$$$J$$(B gcc 2.x $B$G$b:n@.$G$-$k$h$&$K$J$j$^$7$?!#$"$j$,$?$d!#(B
$B!U(B
Nature's Linux ver.1.3$B%j%j!<%9(B
(slashdot.jp, 3/24)$B!#$*$b$7$m$=$&$@$J$"!#(B
$B!U(B
$BJF(BMS$B$,%Q%C%AE,MQ%=%U%H(BSUS$B8e7Q@=IJ$NL>>N$r(BWSUS$B$KJQ$(!$@=IJ8uJdHG$rDs6!3+;O(B
($BF|7P(B IT Pro, 3/23)$B!#$&$%!";n$7$?$$!D!D!#(B
$B4XO"(B: Microsoft Update Beta & WSUS RC
($BF|K\$N%;%-%e%j%F%#%A!<%`$N(B Blog, 3/23)
$B!U(B
842607 - $B%;%-%e%j%F%#$GJ]8n$5$l$?(B Web $B%5%$%H$K@\B3$9$k$H(B Internet Explorer 6 SP1 $B$,1~Ez$rDd;_$9$k$3$H$,$"$k(B
(Microsoft)
$B$3$NLdBj$O!"%3%s%T%e!<%?$N9=@.$N!"%;%-%e%j%F%#(B $B%*%W%7%g%s$N%]%j%7!<$G!"(BFederal Information Processing Standard (FIPS) $B0E9f2=%"%k%4%j%:%`$r;HMQ$9$k$h$&$K@_Dj$5$l$F$$$k>l9g$KH/@8$9$k$3$H$,$"$j$^$9!#(B
($BCfN,(B)
$B%;%-%e%j%F%#$GJ]8n$5$l$?(B Web $B%5%$%H$K@5>o$K@\B3$9$k$K$O!"(BFIPS $B=`5r%"%k%4%j%:%`$rMW5a$9$k%7%9%F%`(B $B%]%j%7!<$rL58z$K$7$^$9!#(B
$B!U(B
$B#1Bf$N(BPC$B$G%;%-%e%"$J#2$D$N(BWindows$B4D6-$re(B
($BF|N)%=%U%H(B, 3/24)$B!#(B
SELinux + VMWare $B$J%=%j%e!<%7%g%s$@$=$&$G$9!#(B
$B!U(B
$BJ#?t$N@8BNG'>ZJ}<0$KBP1~$7$??77?(BATM$B!"2-EE5$(B
($BF|7P(B BP, 3/24)$B!"(B
$B%;%-%e%j%F%#5!G=$r6/2=$7$?6bM;5!4X8~$1?77?(BATM$B!V(BATM-BankIT$B!W$rH/I=(B
($B2-EE5$(B, 3/23)$B!"(B$BB?5!G=(BATM$B!!(BATM-BankIT ($B2-EE5$(B)$B!#(B
$B!U(B
ACCS $BJ}LL(B
$B!!$=$&$$$($P!"L@F|$O(B ACCS $B;v7o$NH=7h$,=P$^$9$M!#(B
$B!U(B
$B%^%$%/%m%=%U%H$NFC5v5;=Q$O(BIPv6$B$KN`;w(B--$BJFCDBN$,L58z@-$r (CNET, 3/24)
$B!U(B
antinny $B$M$?(B
$B!!0lIt$U$;;z$K$7$^$7$?!#$4N;>5$/$@$5$$!#(B
$B!U(B
$B!V:.MpKI$0$?$aHVAH$N;vA0@bL@$b!W!!#N#H#KM};v(B
(asahi.com, 3/23)$B!#$"$$$+$o$i$:$@$J$"!#(B
$B!V0lHL4k6H$N3t
$B!!!V0lHL4k6H$N3t
$B!U(B
$B<:GT$r@8$+$;!"2J3X5;=Q$N;v8N%G!<%?%Y!<%9(B
(asahi.com, 3/24)
$B!!(BFirefox 1.0.2 $B$,EP>l!#(B3 $B7o$N%;%-%e%j%F%#7g4Y$,=$@5$5$l$F$$$^$9!#(B
$B!!(BFirefox $BMxMQ$BM}9)3XIt(B RINS$B!"(B
mozilla-japan.org$B!#(B
$B$^$?(B MFSA 2005-30, 32 $B$O(B Mozilla $B$K$b1F6A$7(B 1.7.6 $B$G=$@5$5$l$F$$$^$9!#(B
MFSA 2005-30 $B$O(B Thunderbird $B$K$b1F6A$7(B 1.0.2 $B$G=$@5$5$l$F$$$^$9!#(B
$B$"$o$;$F99?7$7$^$7$g$&!#(B
$B!!(BMozilla 1.7.5 $B0JA0!"(BFirefox 1.0.1 $B0JA0!"(BThunderbird 1.0.1 $B0JA0$K7g4Y!#(B
GIF $B2hA|$N=hM}$K$*$$$F(B buffer overflow $B$,H/@8$9$k$?$a!"96N,(B GIF $B2hA|$K$h$jG$0U$N%3!<%I$r
$B!!(BMozilla 1.7.6$B!"(BFirefox 1.0.2$B!"(BThunderbird 1.0.2 $B$G=$@5$5$l$F$$$k!#(B
$B!U(B
Security Summit 2005 $B40N;(B!
($BF|K\$N%;%-%e%j%F%#%A!<%`$N(B Blog, 3/18)$B!#$*$D$+$l$5$^$G$7$?!#(B
$B$^$?!"$I$3$+$N5!2q$GD>@\$*OC$5$;$F$$$?$@$1$k$3$H$r3Z$7$_$K$7$F$$$^$9!#(B
$B!!Japan MVP Summit 2005 $B$G$7$g$&$+!#(B
$B$H=q$$$F$_$k%F%9%H!#(B
$B!U(B
$B@8BNG'>Z$HFsMWAGG'>Z$,5?Ld;k$5$l$kM}M3(B
($BIpED7=;K(B, 3/23)$B!#(B
$B$U$`$s!D!D!#(B
$B!U(B
$B%*!<%W%s%=!<%9%=%U%H%&%'%"$N@-G=$H?.Mj$rB,$k%D!<%k!"(BIPA$B$+$i(B
(MYCOM PC WEB, 3/23)$B!#(B
$B!V#O#S#S$N@-G=!&?.Mj@-I>2A!?>c322r@O%D!<%k3+H/!W$N@.2L$r8x3+$7$^$7$?(B
(IPA)$B!#(B
$B!U(B
IBM$B!"%9%Q%`BP:v5;=Q!V(BFairUCE$B!W$r8x3+(B
(ITmedia, 3/23)$B!#(B
FairUCE
(IBM alphaWorks)$B!#$h$/$o$+$i$s$J$"!#(B
$B%=!<%9FI$`$7$+$J$$$N$+$J!#(B
$B!U(B
CA$B!"%&%$%k%9BP:v$H%9%Q%$%&%'%"BP:v$G8D?M8~$1%;%-%e%j%F%#;T>l$K;2F~(B (Internet Watch, 3/23)$B!#(BeTrust EZ Antivirus 2005 $B$NF|K\8lHG$N$h$&$G$9$M!#(B
$B!U(B
$BJFBg3X$KIT@5%"%/%;%9!"(B5$BK|(B9000$B?M$N8D?M>pJsN.=P$N2DG=@-(B
(ITmedia, 3/23)$B!"(B
$B:#EY$O%+%j%U%)%k%K%"=#N)Bg3X$GBgNL(BID$B@`Ep(B
(WIRED NEWS, 3/23)
$B!U(B
SQLRecon 1.0 $B$,=P$F$$$^$9!#(B
$B!U(B
nessus
2.2.4 $B$,=P$F$$$^$9!#(B
$B!U(B
$B%A%'%A%'%s4XO"(B
- $B%A%'%A%'%s$G2?$,5/$3$C$F$$$k$N$+(B
$B!c%^%9%O%I%UBgE}NN;&32$H!"J6Ah$N:#8e$r9M$($kBPOC=82q!d(B$B!#(B
2005.03.24$B!"El5~ET=BC+6h!"(B1000 $B1_!#(B
- $B%m%7%"!'%A%'%A%'%s6&OB9q$N(B6$B;v7o$K4X$9$k%h!<%m%C%Q?M8":[H==j$NH=7h(B
($B%"%`%M%9%F%#(B, 2/24)
- $B%A%'%A%'%sBgE}NN%^%9%O%I%U$r%m%7%"<#0B5!4X$,0E;&(B
($B%A%'%A%'%s%K%e!<%9(B, 3/9)
- $B%^%9%O%I%U$O$I$&$7$F;&$5$l$?$N$+!)(B
($B%A%'%A%'%s%K%e!<%9(B, 3/10)
- $BC/$,%"%9%i%s!&%^%9%O!<%I%U$r;&$7$?$N$+(B
($B%N!<%t%!%d%,%
$B!U(B
$B$"$*$>$i6d!"MB6b;D9b$J$I#2K|(B6000$B7o$N8D?M>pJsJ6<:(B
($BF|7P(B, 3/22)$B!#9b66$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B$"$*$>$i6d9T!!8D?M>pJs(B2$BK|(B6000$B7oJ6<:(B--$B=BC+$J$I(B3$B;YE9(B
($BKhF|(B, 3/23)
$B!!%5%$%\%&%:(B Office 6.1(1.0) $B0JA0$K%/%m%9%5%$%H%9%/%j%W%F%#%s%07g4Y$,$"$k$=$&$G$9!#(B$B!V%/%m%9%5%$%H%9%/%j%W%F%#%s%0@H ($B%5%$%\%&%:(B)$B!#(B
$B!!$^$@=$@5$5$l$F$$$^$;$s!#(B
- APPLE-SA-2005-03-21 Security Update 2005-003
$B!!(BSecurity Update 2005-003 $B$N$&$A!"%5!<%PMQ$,$R$C$3$a$i$l$?LOMM$G$9(B
[harden-mac:0712]$B!#3N$+$K!"(B$B%@%&%s%m!<%I%Z!<%8(B$B$K$O%/%i%$%"%s%HMQ$7$+$J$$LOMM$G$9!#(B
$B!U(B
$B2M6u@A5a$N>/3[AJ>Y!"!V6K$a$F0-5=!W$HGe=~L?Na(B
($BFIGd(B, 3/22)$B!#(B
$B!U(B
$B6d9T$r=1$&?7$?$J%U%#%C%7%s%0967b!"!V%/%m%9%U%l!<%`!W%9%/%j%W%F%#%s%0(B
(ITmedia, 3/22)$B!#(B
$B!U(B
$B!VCF$O$^$@;D$C$H$k$,$h!W!=!=(B2$B$D$N%^%k%&%'%"H/@8!"(BWinny$B>e$G8D?M%G!<%?N.=PCf(B
(ITmedia, 3/20)$B!#K:$l$?$3$m$K!D!D$H$$$&46$8$G$7$g$&$+!#(B
$B!U(B
$B%"%I%S!"(BAcrobat 7.0$B$G(Be-$BJ8=qK!$KBP1~$9$k%?%$%`%9%?%s%W$r:NMQ(B
(Internet Watch, 3/22)
$B!U(B
Spyware authors challenge BlackLight
(News from the Lab, 3/21)$B!#(B
rename $B$7$F$NMxMQ$r?d>)$@$=$&$G$9!#(B
$B!U(B
$BJsF;Ho32$B$H$$$&CDBN$,7k@.$5$l$F$$$?$N$@$=$&$G$9!#(B
$BJsF;Ho32$B!"(B
2005.04.16$B!"L>8E20;TCf6h!"(B300$B1_!#(B1 $BG/A0$K$G$-$F$$$?$N$G$9$M!#(B
$B!U(B
$B0cK!44:YK&<#NE!"%m%7%"$GLnJ|$7(B
(WIRED NEWS, 3/14)$B!#%m%7%"$O%m%7%"!#(B
$B!U(B
$BH~IM(B 3 $B9f5!;v8N(B - $B9q!&4XEE$N!V:G=*Js9p=q(B ($B0F(B)$B!W$rHcH=$9$k!!(B3.27 $B3X=,!&F$O@2q(B ($BH~IM$N2q(B)$B!#(B
2005.03.27 13:30-16:30$B!"Bg:e;TCf1{6h!"0lHL(B 500 $B1_!#(B
$B!U(B
$B%0%j!<%s%T!<%9!&%$%s%?!<%J%7%g%J%k3KLdBjC4Ev(B $B%H%`!&%/%l%a%s%D;a$r0O$s$G(B $BF|K\$N%W%k%H%K%&%`@/:v$r9q:]E*$J;kE@$G9M$($k(B
($BH~IM$N2q(B)$B!#(B
2005.03.24 18:30-21:00$B!"Bg:e;TCf1{6h!"L5NA(B?
$B!U(B
ID$B@`Ep$@$1$G$O$J$$!"8D?M>pJsHNGd$NBgLdBj!V8m>pJs!W(B
(WIRED NEWS, 3/18)$B!#:$$C$?$b$N$@$J$"!D!D!#(B
$B!U(B
$B%H%i%V%k$?$:$M$F;0@iN$(B
$B!J(B191$B!K!V%;%-%e%j%F%#!e!K(B
($BKhF|(B, 3/22)$B!#(BMac $B$G;XLfG'>Z$7$F$_$h$&$H$$$&OC!#(B
$B!U(B
$B8D?M>pJsO31H$M$?(B$B!#;~ED$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
John the Ripper
$B$C$F!"$$$m$s$J(B patch $B$,$"$k$s$G$9$M!#(B
$B!U(B
$BJ!2,8)@>J}2-$r?L8;$H$9$kCO?L$K$D$$$F(B($BBh(B4$BJs(B)
($BFb3UI\KI:RItLg(B, 3/22 09:00 AM)
$B!U(B
$B!V(Btakeshima.com$B!W$J$I$NFHEg%I%a%$%s!"4Z9q$,@h
($BD+A/F|Js(B, 3/20)$B!#(B
$B4Z9q$O!V(Btakeshima.net$B!W!V(Btakeshima.com$B!W!"!V(Btakeshima.org$B!W$J$IC]Eg4XO"%5%$%HL>$rA4$F@h$K
$B!!4Z9q@/I\$,$d$C$F$$$k$o$1$8$c$J$$$N$@$m$&$7!"!V4Z9q$O!W$8$c$J$/$F!V4Z9q?M$,!W$@$m$&$H;W$&$N$@$,!#$=$l$H$b!"
$B0lJ}!"F|K\$N9qFbMQ%I%a%$%s$G$"$k!V(Btakeshima.go.jp$B!W!V(Btakeshima.or.jp$B!W$J$I$O?=@AuBV$@!#(B
$B!!(Btakeshima.go.jp $B$OC/$G$bEPO?$G$-$k$o$1$8$c$J$$$@$m$&!"$I$&9M$($F$b!#(B
$B!!$H$3$m$G!"5-;v$K$O$J$$$1$l$I!"(Btakeshima.jp $B$O2!$5$($i$l$F$$$k$h$&$G$9$J!#(Bwhois $B>pJs(B$B!#(B
$B!!(Bhttp://speednames.com/
$B$C$F!"$$$m$s$J$H$3$m$N%I%a%$%s$rD4$Y$i$l$k$s$G$9$M!#(B
$B!!(BSybase Adaptive Server Enterprise 12.5.3 $B0JA0$K(B buffer overflow $B$*$h$S(B
DoS $B7g4Y$,$"$j!"(B
ASE 12.5.3 ESD#1 $B$G=$@5$5$l$F$$$k!#(B
$B!!4XO"(B: Details of Sybase ASE bugs withheld
(NGSSoftware)
2005.04.06 $BDI5-(B:
$B!!>\:Y(B: [VulnWatch] Sybase ASE Multiple Security Issues (#NISR05042005)
(NGSSoftware)
$B!!(BFirefox 1.0.1 $B$K$R$-$D$E$-!"(BMozilla 1.7.6 $B$H(B Thunderbird 1.0.2 $B$,EP>l!#(B
Known Vulnerabilities in Mozilla (mozilla.org) $B$b99?7$5$l$F$$$^$9!#(B
Mozilla / Thunderbird $BMxMQ
$B!!(BApple Security Update 2005-003 $B$,=P$F$$$^$9!#(B
Mac OS X 10.3.8 / X Server 10.3.8 $BMQ$7$+MQ0U$5$l$F$$$^$;$s!#(B
$B$$$h$$$h(B 10.2.x $B7ONs$NJ]
$B!!4XO"(B:
2005.03.23 $BDI5-(B:
$B!!(BSecurity Update 2005-003 $B$N$&$A!"%5!<%PMQ$,$R$C$3$a$i$l$?LOMM$G$9(B
[harden-mac:0712]$B!#3N$+$K!"(B$B%@%&%s%m!<%I%Z!<%8(B$B$K$O%/%i%$%"%s%HMQ$7$+$J$$LOMM$G$9!#(B
2005.03.31 $BDI5-(B:
$B!!%5!<%PMQ$,(B
Security Update 2005-003 (Server) 1.1
$B$H$7$F:F8x3+$5$l$F$$$^$9!#(B
ANNOUNCE: LSH-2.0.1, fix for denial of service bug (lsh-bugs ML)$B!#(B
GNU $B$N(B SSH $B
src/keyexchange.c (parse_kexinit): Bugfix (DOS).
$B$G!"(Bsrc/keyexchange.c $B$r$_$F$_$k$H(B:
--- lsh-2.0/src/keyexchange.c Thu Jun 10 21:55:39 2004
+++ lsh-2.0.1/src/keyexchange.c Sat Feb 12 18:49:46 2005
@@ -117,7 +117,7 @@
/* Bad format */
int j;
for (j = 0; j<i; j++)
- KILL(lists[i]);
+ KILL(lists[j]);
KILL(res);
return NULL;
}
$B$3$NItJ,$O(B lsh 1.5.4 $B$G$bF1MM$J$h$&$J$N$G!"(B1.x $B7ONs$K$b1F6A$9$k$H;W$o$l!#(B
[SA14609] LSH lshd Unspecified Denial of Service Vulnerability (secunia) $B$G$b(B LSH 1.x / 2.x $B$K3:Ev!"$H$5$l$F$$$k!#(B
Linux ISO9660 handling flaws$B!#(B
Linux 2.6.11 $B0JA0$G$N!"(BLinux $B%+!<%M%kFb$K$*$1$k(B ISO9660 $B%U%!%$%k%7%9%F%`$N
$B$3$N7g4Y$N:G$bL@$i$+$JItJ,$K$D$$$F$O(B 2.6.12 $B$G=$@5$5$l$F$$$k$=$&$@!#(B
[SA14570] Linux Kernel PPP Server Denial of Service Vulnerability$B!#(B
Linux 2.6.11.4 $B$G=$@5$5$l$F$$$k$=$&$@!#(B
[SA14560] Citrix MetaFrame Password Manager Secondary Password Disclosure$B!#(B
patch $B$,$"$k(B$B$N$GE,MQ$9$l$P$h$$!#(B
Multiple KDE Security Advisories (2005-03-16)
patch $B$,MQ0U$5$l$F$$$k!#$^$?:G?7$N(B KDE 3.4 $B$G=$@5$5$l$F$$$k!#(B
[SECURITY] [DSA 662-2] New squirrelmail package fixes regression$B!#(B
$B$3$3$G=$@5$5$l$F$$$k(B CAN-2005-0152 $B$O!"(Bsquirrelmail 1.2.6 $B$K$N$_1F6A$9$k7g4Y$@$=$&$G$9!#(B
[SECURITY] Fedora Core 3 Update: xloadimage-4.1-34.FC3$B!#(B
CAN-2005-0638
$B$,=$@5$5$l$F$$$k$=$&$G$9!#(B
$B%7%'%k%a%?%-%c%i%/%?F~$j$N%U%!%$%kL>$N
ADVISORY: DataRescue Interactive Disassembler Pro Debugger
Format String Vulnerability
Java Web Start argument injection vulnerability$B!#(B
J2SE 1.4.2 $B7ONs$N(B Java Web Start $B$K7g4Y$,$"$j!"(BJava sandbox $B$r2sHr$9$k$3$H$,2DG=$G$"$kLOMM!#(BJ2SE 1.4.1 $B7ONs0JA0$d(B 5.0 $B7ONs$K$O$3$N7g4Y$O$J$$!#(B
CVE: CAN-2005-0418
J2SE 1.4.2_07 $B$G=$@5$5$l$F$$$k!#(B
Windows 2000 GDI32.DLL GetEnhMetaFilePaletteEntries() API
specially crafted EMF file DOS vulnerability$B!#(B
Windows 2000 $B$N(B GDI32.DLL $B$K$"$k(B
GetEnhMetaFilePaletteEntries() API $B$K$*$1$k(B EMF $B%U%!%$%k$N
Antidebugging For (M)asses - Protecting the Enviroment
$B!#%G%P%C%,$rK832$9$kJ}K!$H$+!"$_$?$$!#(B
2005.04.28 $BDI5-(B:
$B!!(BDSA-717-1 lsh-utils -- buffer overflow, typo (Debian GNU/Linux, 2005.04.27)
$B!U(B
$BKI1RD#!!:G?7$N(BIT$B5;=Q$r6n;H!!>pJs@oN,7W2hA4MFH=L@(B
($BKhF|(B, 3/14)
$B!U(B
[TOOL] Snmpfuzz - SNMPv1 Fuzzer
$B$H$$$&$b$N$,$"$k$=$&$G$9!#(B
$B!U(B
[AML 0768] $B#4!%H!<%/%i%$%V!VCN$i$l$6$k8x0B$NFbKk!W(B$B!#(B
2005.04.04$B!"El5~ET?7=I6h!"(B1000$B1_!#(B
$B$J$+$J$+$J%a%s%D$G$9$M!#(B
$B!U(B
[connect24h:8473] Snort$B%f!<%62q%F%/%K%+%k%;%C%7%g%s$N$*CN$i$;(B$B!#(B
2005.03.26 ($BEZ(B)$B!"El5~ET?7=I6h!"L5NA!#(B
$B9k2Z$J%a%s%D$G$9$M!#(B
$B@0M}7t$r(B get $B$7$J$$$HF~$l$J$$$h$&$J$N$G!"AaL\$KJB$S$^$7$g$&!#(B
$B!U(B
$BIT@52;3Z%U%!%$%k8r49!$1Q9bEyK!1!$,(BISP$B$K%f!<%6!<$N?H853+<($rL?Na(B
($BF|7P(B IT Pro, 3/14)$B!#!V9bEyK!1!$NL?Na$K$h$j!$(B6$B$H=;=j$r(BBPI$B$KDs=P$7$J$1$l$P$J$i$J$$!W$=$&$G$9!#(B
$B!U(B
SELinux$B%7%9%F%`4IM}(B
$B!=(B $B%;%-%e%"(BOS$B$N4pAC$H1?MQ(B
(O'Reilly)$B!#(B3/29 $BH/GdM=Dj$@$=$&$G$9!#(B
$B$b$C$HAa$/l9g$O!"(B$B%*!<%W%s%=!<%9%+%s%U%!%l%s%9(B2005
(3/25$B!A(B26, $BEl5~ET?7=I6h(B) $B$K;22C$9$k$H$h$$$h$&$G$9!#(B
$B!U(B
$BJF$NBg3X$GAj
(ITmedia, 3/18)
$B!U(B
$B1Q9q$N;00f=;M'$G%O%C%-%s%0;v7o!"(B2$B2/(B2000$BK|%]%s%IEpFqL$?k(B
(ITmedia, 3/18)
$B!U(B
$BEDCf1'$N9q:]%K%e!<%92r@b(B$B$+$i(B:
$B!U(B
$B!V@lLgE*$J?M:`$,(B12$BK|?MITB-!W!$AmL3>J$N%;%-%e%j%F%#(BWG$B$GJs9p(B
($BF|7P(B IT Pro, 3/17)$B!#(B
$B%1%$!&%*%W%F%#%3%`$,!$8=>l$N%;%-%e%j%F%#5;=Ql$N
$B!!8=
$B%;%-%e%j%F%#;v6H$rN)$A>e$2$?Ev;~$NCf3K%a%s%P!<0J30$N?M:`$O!$!V6HL3Cf?4$N%;%-%e%j%F%#650i$H$J$j!$7OE}N)$F$?650i$,Fq$7$$!W$N$@$H$$$&!#(B
$B!!$d$C$Q$jBg3X$H$+$G4pACBNNO$rM\$&$Y$-$@$H;W$&$N$G$9$,!"$=$NBg3X$N8=>u$O$H$$$&$H!"!D!D!#(B
$B!!$H$3$m$G!"(B$B ($BAmL3>J(B) $B$N%Z!<%8$K$O!"(B
$B%;%-%e%j%F%#%o!<%-%s%0%0%k!<%W$OBh#12s2q9g$N>pJs$7$+5-:\$5$l$F$$$^$;$s$M!#(B
$B!!4XO"(B: $B%;%-%e%j%F%#?M:`$N9T$/Kv$O!)$^$:$O3hMQ%W%i%s$N@_Dj$+$i(B
($BIpED7=;K(B, 3/18)
$B!U(B
Ring Server Project $B$,(B NTP $B%5!<%P$N%5!<%S%9$r3+;O(B
(Ring Server Project, 3/17)$B!#(B
$B6L2,$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
$B5mFy%H%l!<%5%S%j%F%#4XO"(B
$B5mFy$N%H%l!<%5%S%j%F%#(B ($BG@NS?e;:>J(B)
$B!Z$^$@$^$@=P$F$/$k$Y!A![5m$N<*I8IU$1BX$(7lE}56$jHNGd!"KL3$F;A0D.5D$rBaJa(B
($BFIGd(B / $B0$=$Me(B, 2004.12.09)
$B5mFy56AuHNGd!'(B
$B<*I8IU$1BX$($N852HC\>&$iM-:a!!6|O)CO:[(B
($BKhF|(B, 3/16)
$B@P86G@NS?e;:;vL3
($BG@NS?e;:>J(B, 3/17)$B!#(B
$B#Q!'(B($BCfN,(B) $B:rF|!"6|O)CO:[$,<*I8<+BN$,4JC1$KIU$1BX$($i$l$k9=B$$@$C$?$H$$$&$3$H$G!"%H%l!<%5%S%j%F%#K!0cH?$K$D$$$F$O:a$rLd$o$J$$$H$$$&H=7h$r=P$7$^$7$?$1$l$I$b!"$3$N$3$H$K$D$$$F$I$&J$H$7$F!":#8e!":#!"9-$/;H$o$l$F$$$k$o$1$G$9$1$l$I$b!"$I$&BP1~$5$l$k$N$+!"$3$l$K$D$$$F$*J9$-$7$?$$$N$G$9$,!#(B
$B#A!'(B($BCfN,(B) $BLdBj$N<*I8$,!"$=$b$=$b!"K!$G5a$a$k<*I8$KEv$?$i$J$$$H$$$&$3$H$+$iL5:a$H$5$l$?$H$$$&$3$H$J$s$G$9$1$l$I$b!"$3$N<*I8$,K!$G5a$a$F$$$k$b$N$K9g$C$F$J$+$C$?$H$$$&$3$H$K$J$j$^$9$H!"5m$N%H%l!<%5%S%j%F%#K!<+?H$rMI$k$,$9$h$&$JBg$-$J$3$H$@$H;W$C$F$*$j$^$9!#(B($BCfN,(B) $B$J$*!"$3$l$b$3$l$^$G$4@bL@$7$F$*$j$^$9$h$&$K!"$3$N<*I8<+?H$O2~A1$NEXNO$O$7$J$1$l$P$J$i$J$$$H;W$C$F$$$^$9!#$3$l$O!":rG/Mh!"4X78%a!<%+!<$NJ}$K$=$&$$$&$3$H$O5a$a$F$$$k$H$3$m$G$4$6$$$^$9$1$l$I$b!"$7$+$7!"8=:_$N%h!<%m%C%Q$G$b;H$o$l$F$$$k$H$$$&$3$H!"$=$&$$$&$3$H$+$i$7$^$9$H!"8=CJ3,$G$O$3$N<*I8$,%Y%9%H$@$H!"$=$7$F!":#2s$N;XE&$5$l$?<*I8<+?H$,!"$3$NK!$,5a$a$k<*I8$H$7$F$OE,3J@-$,$"$k$s$8$c$J$$$+$H!"$3$&9M$($F$$$k$H$3$m$G$4$6$$$^$9!#(B
$BF|K\8lLu(B: $BIU$1BX$($O6K$a$FMF0W$G$"$k$,!"$=$l$KBP$7$F6[5^$K2?$+BP1~$9$k$D$b$j$O$J$$!#(B
$B!!$H$$$&$o$1$G!"9q;:5mFy$N0BA4!&0B?4$OA4$/3NJ]$5$l$F$^$;$s!#(Bgood luck.
$B!U(B
$B%+%k%S!<4XO"(B
- $B%+%k%S!<2HBpA\:w!!L$8!::$N%$%b>yEOMF5?$GKL3$F;7Y(B
(asahi.com, 3/17)
$BF1J$O#1#4F|$KF;7Y$K7:;v9pH/$7$?!#(B ($BCfN,(B)
$BF;$K$h$k$H!"%7%9%H%;%s%A%e%&$O0lEYH/@8$9$k$HKPLG$9$k$3$H$O6K$a$FFq$7$/!"F;$OF1
- $B%+%k%S!<(B $BKI1VK!0cH?$GA\:w(B
(NHK, 3/17)
- $B%+%k%S!<(B $BIJGv4|$N%$%b3NJ]$+(B (NHK, 3/18)
- $BL$8!::%8%c%,%$%b(B $BGQ4~$rL?Na(B (NHK, 3/18)$B!#G@NS?e;:>J$,!"LdBj$N$B%+%k%S!<(B (google news)
- $B@P86G@NS?e;:;vL3
($BG@NS?e;:>J(B, 3/17)
- $B?"J*KI1VK!$K4X$9$kJsF;$K$D$-$^$7$F(B
($B%+%k%S!<3t<02q$B?"J*KI1VK!$K4X$9$kJsF;$K$D$-$^$7$F(B ($B%+%k%S!<%]%F%H3t<02q$B?"J*KI1VK!$*$h$S%7%9%H%;%s%A%e%&$K4X$9$k(BQ&A ($B%+%k%S!<%]%F%H3t<02q
$B%7%9%H%;%s%A%e%&$O(B ($BCfN,(B) $B$8$c$,$$$b$J$I$N:,$KIU$-!"1IM\$r5[<}$7$F<}3ONL$rDc2<$5$;$k62$l$N$"$k32Cn$G$9!#(B
$B!!!V0lEYH/@8$9$k$HKPLG$9$k$3$H$O6K$a$FFq$7!W$$$H$J$k$H!"$$$b@8;:G@2H$K$H$C$F$O%7%c%l$K$J$i$J$$$H;W$o$l!#(B
$B!U(B
$B0eNE;v8ND4::(B $BH>?t6a$/$,5qH](B
(NHK, 3/18)$B!#6(NO$r5qH]$7$?IB1!L>$r8x3+$9$Y$-$@$h$M!#(B
$B!U(B
$B8D?M>pJsJ]8nK!!'%+%k%F2~$6$s87H35a$a%7%s%]!!Bg:e(B
($BKhF|(B, 3/14)
$B!U(B
$BD;%$%s%U%k%(%s%6!"KLD+A/$GN.9T$+(B
(CNN, 3/16)
$B!U(B
$B%$%s%F%k!"8x5!"4|8B$O(B4$B7n(B1$BF|$K(B
(PC Watch, 3/18)
$B!U(B
Whois$B%5!<%S%9$NJQ99$K$D$$$F(B
(JPNIC, 3/8)
JP$B%I%a%$%sL>$K4X$9$k>pJs$O(BJPRS$B$N(BWhois$B$N$_$GDs6!$7!"(B IP$B%"%I%l%9$K4X$9$k>pJs$O(BJPNIC$B$N(BWhois$B$N$_$G$NDs6!$K$J$j$^$9!#(B
$B!!$G!"$=$l$G$OMxJX@-$,Dc$$$N$G(B
http://whois.jp/
$B$H$$$&%5%$%H$,$G$-$k$N$@$=$&$G$9!#(Bwhois $B%3%^%s%I$N>l9g$O(B
whois -h whois.jp $B$@$=$&$G$9!#(B
$B!!$3$N>u67$O(B 3/22 $B$+$i3+;O$5$l$k$=$&$G$9!#(B
$B!!(BMcAfee $B%"%s%A%&%$%k%9%=%U%H%&%'%"$N%9%-%c%s%(%s%8%s(B 4320 $B$K$*$$$F!"(BLHA
$B%U%!%$%k$r%9%-%c%s$9$k>l9g$K(B buffer overflow $B$,H/@8!#(B
$B!!$U$D$&$N(B McAfee $B%f!<%6$O!"<+F0E*$K%9%-%c%s%(%s%8%s(B 4400 $B$+$D(B
DAT4436 $B0J9_$N>uBV$K$J$C$F$$$k$O$:(B (AsAP $B$@$H(B 4320 $B$N$^$^$N>l9g$,$"$k$+$b(B)$B!#(B
$B%?%9%/%H%l%$$N%7!<%k%I%"%$%3%s$r1&%/%j%C%/$7$F%P!<%8%g%s>pJs$r3NG'$5$l$?$$!#(B
$B!!4XO"(B: JVN#1F649902:
McAfee$B%&%$%k%9%9%-%c%s%(%s%8%s$K%P%C%U%!%*!<%P!<%U%m!<$N@H
(JVN)
$B!U(B
$B%o%7%s%H%s$G$bJULn8E8+D>$7$NAJ$((B
$B!AJULn8E2-$G$O!"KI1R;\@_6I$,9);v$r6/9T:F3+(B
($B%0%j!<%s%T!<%9(B, 3/16)
$B!U(B
$B@5$7$$(BURL$B$r56%5%$%H$K$D$J$2$k!V%U%!!<%_%s%0:>5=!W(B($B>e(B)
(WIRED NEWS, 3/17)
$B!U(B
Gang targeted Sumitomo in UK
(Financial Times, 3/16)$B!#(B
$B2$=#K.6d(B $B#4#4#02/1_@`EpL$?k(B
(NHK, 3/17)$B!#(B
$B!U(B
$B30L3>J%[!<%`%Z!<%8$K(B DoS $B967b(B
$B!!(B$BJsF;412q8+5-O?!JJ?@.(B17$BG/(B3$B7n!K(B
($B30L3>J(B) $B$K$O$^$@(B 3/16 $B$^$G$7$+$"$j$^$;$s$M!#(B
$B!!$d$C$Q$jC]EgJ}LL$J$s$G$9$+$M!D!D!#(B
$B!U(B
$B%5%C%+!
($B:_%$%i%sF|K\9qBg;H4[(B, 3/8)$B!#FC$K=w@-$NJ}!"Cm0U$7$^$7$g$&!#(B
$B!U(B
$B$*5RMM>pJs$NN.=P$K4X$9$kD4::7k2L$H:FH/KI;_:v$K$D$$$F(B
($B%*%j%(%s%?%k%i%s%I(B, 3/16)$B!#(B
$B0J>e!"J9$-pJsITB-$J$I$+$i!":G=*E*$K>pJs$NN.=P85$K$D$$$FFCDj$9$k$K$O;j$j$^$;$s$G$7$?!#(B
$B!U(B
JPCERT/CC$B!"%$%s%?!<%M%C%HDjE@4QB,7k2L$K%"%/%;%9CO0hJL%0%i%U$rDI2C(B
(Internet Watch, 3/16)$B!#(B
ISDAS $B%"%/%;%985CO0hJL%0%i%U(B
(JPCERT/CC)$B!#05E]E*$K(B .jp $B$+$i$,B?$$$G$9$M!#$=$&$$$&%;%s%5G[CV$@$H$$$&$3$H$G!#(B
$B!U(B
IIJ$B!"LBOG%a!<%kBP:v$KAw?.%I%a%$%sG'>Z5;=Q$rF3F~(B
(Internet Watch, 3/17)$B!#(B
IIJ$B!"Aw?.%I%a%$%sG'>Z5;=Q$NF3F~$r3+;O(B
(IIJ, 3/17) $B$h$j(B:
$B:#2s!"(BIIJ$B$O(BIP$B%"%I%l%97?!J(BSender ID/SPF$B!K$HEE;R=pL>7?!J(BDomainKeys$B!K$N(B2$B$D$NG'>ZJ}<0$rJ#9g$7$?Aw?.%I%a%$%sG'>Z$r!"<+
$B!U(B
$B>pJs%;%-%e%j%F%#@oN,%7%s%]%8%&%`(B$B4XO"(B
$B!U(B
$BJF(BAkamai$B!"JF(BSpeedera$B$rLs(B1$B2/(B3,000$BK|%I%k$GGc<}$9$k$3$H$G9g0U(B
(Internet Watch, 3/17)
$B!U(B
Secuirty Summit 2005 $BEl5~3+:E=*N;(B
($BF|K\$N%;%-%e%j%F%#%A!<%`$N(B Blog, 3/17)
$BEl5~$G$O!"%^%$%/%m%=%U%H@=IJ$N%;%-%e%j%F%#6/2=$K4X$9$kl$d@H@\EA$($F$b$i$$$^$7$?!#(B
$B!!El5~$@$1$G$9$+!D!D!#(B
$B!U(B
$BCO5e$rGK2u$9$kJ}K!(B
($BIpED7=;K(B, 3/16)$B!#GK2u$7$J$/$F$b!"D>7B(B 400km $B$/$i$$$N>.OG@1$r$=$l$J$j$NB.EY$G$V$D$1$F$"$2$k$@$1$G!"I=LL$K=;$s$G$$$kO"Cf$OA4It;&$;$k$C$]$$$=$&$G!#(B
$BCO5eBg?J2=(B $BBh(B 1 $B=8(B (NHK)
$B@8L?$N5/8;$H86;OCO5e$N29EY(B
($B5\@n(B $B?-(B)$B!#(B
Sleep$B$i(B[62]$B$O(B, $BD>7B(B440 km$BB.EY(B17 km/s$B$N>.OG@1$N>WFM$O3$MN$r$9$Y$F>xH/$5$;$k$[$I$N%(%M%k%.!<$rJ|=P$7(B, $B$=$N;~7A@.$5$l$k?t@iEY$N9b29%W%j%e!<%`$ONd5Q$5$l$k$N$K?t%v7n$+$+$k$G$"$m$&$HJs9p$7$F$$$k(B.
($BCfN,(B)
62. Sleep, N. H., Zahnle, K. J., Kasting, J. F. and Morowitz, H. J. Annihilation of ecosystems by large asteroid impacts on the early Earth, Nature 342, 139-142 (1989).
Annihilation of ecosystems by large asteroid impacts on the early Earth.
(nih.gov) $B$,$=$l$N$h$&$G!#(B
- Symantec Enterprise Firewall DNSd $B$K$*$1$k(B DNS Cache Poisoning $B$N@H
$B!!(BSYM05-005:
$B%7%^%s%F%C%/$N%;%-%e%j%F%#(I%$B%2!<%H%&%'%$@=IJ$K(B DNS $B%j%@%$%l%/%7%g%s$N@H
($B%7%^%s%F%C%/(B, 2005.03.15)$B!#=$@5%W%m%0%i%`$,(B 3/15 $BIU$G$5$i$K99?7$5$l$?LOMM$G$9!#(B
- $BJF9q@/I\$,:G=i$K(BWindows$B$N%Q%C%A$rF~
$B!!(BMicrosoft$B!"!V%Q%C%A$NJF@/I\8~$1;vA0G[I[!WJsF;$KH?O@(B
(ITmedia, 3/14)$B!#(B
$B!V%=%U%H%&%'%"%"%C%W%G!<%H$N%?%$%`%j!<$JG[I[!W$N6qBNE*FbMF$,!"0lIt$N4k6H$@$1$K8BDj$5$l$?%W%m%0%i%`$G$"$k(BSUVP$B$K6u73$r4^$a$k$H$$$&$3$H$@!#(B
$B!!(BSUVP (Security Update Validation Program) $B$O%;%-%e%j%F%#(B patch $B$N&B%F%9%H$r9T$&%W%m%0%i%`$@$=$&$G!#(BMS$B!"?7$7$$%Q%C%A%F%9%H%W%m%0%i%`$rH/I=!=!=8\5R$d%Q!<%H%J!<$H6(NO(B
(ITmedia, 1/14)$B!#(B
microsoft.com $B<+?H$K$O!"(BSecurity Update Validation Program $B$K4X$9$k>pJs$O$[$H$s$IB8:_$7$J$$$h$&$G$9$M!#(B
$B!!(Bbotnet $B$M$?!#L@F|$O$o$,?H$G$b$*$+$7$/$J$$$N$G!"FI$s$G$*$-$^$7$g$&!#(B
$B!!(Bzip $B%U%!%$%k$K3JG<$5$l$k%U%!%$%k$NL>A0$K@8%(%9%1!<%W%7!<%1%s%9$r4^$a$k$H(B
- $B$=$N%U%!%$%k$,4{CN$N%&%$%k%9$G$"$C$F$b8!=P$7$J$$%"%s%A%&%$%k%9%=%U%H(B
- $B%U%!%$%kL>Cf$N%(%9%1!<%W%7!<%1%s%9$r@8$N$^$^I=<($7$F$7$^$&(B and/or $B%m%0%U%!%$%k$K5-O?$7$F$7$^$&(B ($B%3%s%=!<%k>e$GM=4|$7$J$$>u67$,H/@8$9$k62$l$,$"$k(B) $B%"%s%A%&%$%k%9%=%U%H(B
$B$,B8:_$9$k!"$H$$$&;XE&!#(B
$B!U(B
$B!V(Bpayp$B'Q(Bl.com$B!W$H!V(Bpaypal.com$B!W!$0c$$$,J,$+$j$^$9$+!)(B
($BF|7P(B IT Pro, 3/16)$B!#(BIDN $BOC!#(B
$B!U(B
UFJ$B6d9T$H$_$:$[6d9T$r$+$?$k%U%#%C%7%s%0%a!<%k$,H/@8(B
(CNET, 3/15)$B!#$_$:$[$b$@$C$?$G$9$+!#(B
$B!U(B
$BF|K\%Y%j%5%$%s$NEpFq(BPC$B!"%;%-%e%j%F%#$O!VFs=E%Q%9%o!<%I!W$N$_(B
(CNET, 3/14)
$B!U(B
Return of the Bluesniper
(News from the Lab, Tuesday, March 15, 2005)$B!#(B
How To: Building a BlueSniper Rifle
(tomsnetworking.com)$B!#(B
$B%G%b8z2LH472$G$9$M!#(B
$B!U(B
Awstats Vulerability Leads To Linux Rootkit
Post (nin.org)$B!#(Brootkit $B$K96N,$5$l$?%5%$%H$N
$B!U(B
[memo:8233] UFJ$B6d9T$rqY$C$?%U%#%C%7%s%0:>5=%a!<%k(B
$B$,9-HO0O$K$P$i;5$+$l$F$$$k$h$&$G$9!#(B
80.55.101.22 $B$H(B 61.38.30.55 $B$O$^$@@8$-$F$$$k$h$&$G$9(B [memo:8238]$B!#(B
$B!!4XO"(B:
$B!!(BFirefox 1.0.1 $B0JA0$K7g4Y!#%j%s%/$r1&%/%j%C%/$7$F(B "save link as..." $B$rA*Br$7$?>l9g$K!"%9%F!<%?%9%P!<$KI=<($5$l$F$$$?$b$N$H$O0[$J$k%j%s%/@h$r
$B!!4XO"(B:
$B!!(BApache Tomcat 3.x $B$K7g4Y!#(BAPJ12 (Apache JServ Protocol 1.2) $B%]!<%H(B
($B%G%U%)%k%H(B: 8007/tcp)
$B$KBP$7$FFCDj$N%Q%1%C%H$rAw$k$H(B Tomcat $B$,%/%i%C%7%e$7$?$jDd;_$7$?$j$9$k$?$a(B
DoS $B$,@.N)!#$3$N7g4Y$O(B Tomcat 5.x $B$K$OB8:_$7$J$$!#(B
$B!!$3$N7g4Y$,=$@5$5$l$kM=Dj$O$J$$!#(BTomcat 5.x $B$K0\9T$9$k$+!"(B8007/tcp $B$r%U%#%k%?$9$k$3$H$G2sHr$G$-$k!#(B
2005.03.17 $BDI5-(B:
$B!!(BVU#204710 $B!'(B Tomcat$B$N@H
($B%H%l%s%I%^%$%/%m(B)$B!#(BTrend Micro Control Manager $B$K$O1F6A$J$7!#(B
$BJF(BMicrosoft$B$O(B ($BCfN,(B)
$B=EMW$J%=%U%H%&%(%"$N99?7$,0lHL$K%j%j!<%9$5$l$k$h$j$b:GBg(B1$B%+7nAa$/!$JF9qEZ0BA4J]>c>J8~$1%P!<%8%g%s$rDs6!$9$k$H$$$&!#(B
$B!!$3$l$C$F!"!V(BUSA $B@/I\$,B>9q$KB8:_$9$k(B Windows $B$r3N
$B!!(BSECURITY SUMMIT 2005 $B$,=*$C$F$+$i$3$s$J%M%?$K5$$,$D$/$H$O!D!D@ZJ"(B > $B26!#(B
2005.03.16 $BDI5-(B:
$B!!(BMicrosoft$B!"!V%Q%C%A$NJF@/I\8~$1;vA0G[I[!WJsF;$KH?O@(B
(ITmedia, 3/14)$B!#(B
$B!V%=%U%H%&%'%"%"%C%W%G!<%H$N%?%$%`%j!<$JG[I[!W$N6qBNE*FbMF$,!"0lIt$N4k6H$@$1$K8BDj$5$l$?%W%m%0%i%`$G$"$k(BSUVP$B$K6u73$r4^$a$k$H$$$&$3$H$@!#(B
$B!!(BSUVP (Security Update Validation Program) $B$O%;%-%e%j%F%#(B patch $B$N&B%F%9%H$r9T$&%W%m%0%i%`$@$=$&$G!#(BMS$B!"?7$7$$%Q%C%A%F%9%H%W%m%0%i%`$rH/I=!=!=8\5R$d%Q!<%H%J!<$H6(NO(B
(ITmedia, 1/14)$B!#(B
microsoft.com $B<+?H$K$O!"(BSecurity Update Validation Program $B$K4X$9$k>pJs$O$[$H$s$IB8:_$7$J$$$h$&$G$9$M!#(B
2005.03.17 $BDI5-(B:
- Windows XP SP2$B$H(BServer 2003$B!"!H8EE5E*$J967b!I$K@H
$B!!(BWindows Server 2003 $B$K$D$$$F$O!"(B
324270
- How To Harden the TCP/IP Stack Against Denial of Service Attacks in Windows Server 2003
(Microsoft) $B$K$"$k@_Dj$r;\$;$P$@$$$8$g$&$V$JLOMM!#(B
$B$H$$$&$+!"%G%U%)%k%H$GM-8z$G$O$J$$$N$G$9$M!D!D!#(B
- $B%+!<%=%k$*$h$S%"%$%3%s$N%U%)!<%^%C%H$N=hM}$N@H
$B!!!V(BWindows 98 / 98 SE / Me $BMQ$N=$@5%W%m%0%i%`!W$J$N$@$,!"$3$l$r%$%s%9%H!<%k$9$k$H%V%k!<2hLL$K$J$k;vNc$,$=$3$+$7$3$GH/@8$7$F$$$kLOMM!#7'G-$5$/$i$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!!$I$&$d$i!V(BWindows 98 / 98 SE / Me $BMQ$N=$@5%W%m%0%i%`!W$O!"%b%8%e!<%kF~$l$+$(7?$N!V=$@5%W%m%0%i%`!W$G$O$J$/!">oCs%W%m%0%i%`$K$h$C$F7g4Y$r2sHr$9$k$b$N$N$h$&$G$9$M!#$G!"$=$l$,!V2?$+!W$H$V$D$+$k$3$H$,$"$k$h$&$G$9!#(B
$BLdBj$J$$?M$K$OA4$/LdBj$J$$$h$&$J$N$G$9$,!#(B
$B=$@5%W%m%0%i%`$r8DJL$K$7$?$iLdBj$,2r>C$5$l$?Nc(B (2ch.net) $B$b$"$k$h$&$J$N$G!"%V%k!<$J?M$O;n$7$F$_$k$H$$$$$+$b!#(B
$B!!(BEthereal 0.10.10 $BEP>l!#(B
CAN-2005-0704
CAN-2005-0705
CAN-2005-0699
$B$,=$@5$5$l$F$$$k$=$&$@!#(B
$B6a$$$&$A$K!"$I$N$h$&$K$7$F%3%3%m%0$K(B SSI $B$,%$%s%8%'%/%7%g%s$G$-$k$N$+!"$=$l$G2?$,$G$-$k$N$+$r$^$H$a$F=q$3$&$+$J$H;W$C$F$$$^$9!#(B
($BCfN,(B)
2005-03-12 $BDI5-(B: $B!V6a$$$&$A$K!W$H=q$-$^$7$?$,!"$7$P$i$/>pJs$N8x3+$r8+Aw$j$^$9!#@hAw$j$NM}M3$O=R$Y$i$l$^$;$s$,!"$*;!$7$/$@$5$$!#(B
$B!!%3%3%m%0$NL@F|$O$I$C$A$@(B orz
$B!!$5$^$6$^$J:Y9)$r;\$7$?(B zip $B%U%!%$%k$K%&%$%k%9$r4^$^$;$F$*$/$H!"B?$/$N%"%s%A%&%$%k%9%=%U%H$N8!::$r$+$$$/$0$i$;$k$3$H$,2DG=$H$$$&;XE&!#(B
$B:Y9)$NJ}K!$H$7$F$O0J2<$,<($5$l$F$$$k(B:
- $B8m$C$?(B CRC32 $B%A%'%C%/%5%`$r@_Dj$9$k(B
- $B%m!<%+%k%U%!%$%k%X%C%@(B$B$N(B "General purpose bit flag" $B$K(B 0x2f ($B$O(B '/' $B$J$N$@$,!";XE&J8=q$G$O(B '\' $B$K$J$C$F$$$k!D!D(B '\' $B$O(B 0x5c $B$J$N$@$,(B) $B$r@_Dj$9$k(B
- $BD9Bg$J%"!<%+%$%V%3%a%s%H(B (ZIP format $B$N(B
zipfile comment $B$N$3$H$+(B?) $B$r@_Dj$9$k(B
$B!!$3$N7g4Y$O!"FC$K%a!<%k$d(B web $B$J$I$KBP$9$k%"%s%A%&%$%k%9%2!<%H%&%'%$$K$*$$$F=EBg$J1F6A$r;}$D$H9M$($i$l$k!#4{CN$N%&%$%k%9$G$"$C$F$b!">e5-$N$h$&$J:Y9)$7$?(B zip $B%U%!%$%k$K4^$^$;$k$3$H$G!"%"%s%A%&%$%k%9%2!<%H%&%'%$$rDL2a$7$F$7$^$&$N$@!#(B
$B$$$:$l$K$D$$$F$b%G%b%U%!%$%k$,MQ0U$5$l$F$$$k$N$G!"3F<+$,MxMQ$7$F$$$k%"%s%A%&%$%k%9%=%U%H$G;n$7$F$_$k$H$h$$$@$m$&!#(B
$B!!$3$N$h$&$J(B zip $B%"!<%+%$%V$,!"(Bzip $B%U%!%$%kBP1~%"%W%j%1!<%7%g%s$K$*$$$F$b0[>o$J$b$N$H$7$F07$o$l$l$PLdBj$J$$$N$@$,!"o$K!WE83+$7$F$7$^$&$N$GLdBj$K$J$k!#(B
2005.03.17 $BDI5-(B:
$B!!(BJotti's malware scan 2.42
$B$G;n$7$F$_$?7k2L$,Js9p$5$l$F$$$^$9(B: Re: [Full-disclosure] Re: Av issues
$B!!(BMySQL 4.0.23 $B0JA0(B / 4.1.10 $B0JA0$K(B 3 $B$D$N7g4Y!#(B
$B!!(BMySQL 4.0.24 / 4.1.10a $B$G=$@5$5$l$F$$$k!#(B
$B!U(B
Exchange$B$N%9%Q%`BP:v%U%#%k%?$,99?7$5$l$?(B
($BF|7P(B IT Pro, 3/8)
$B!U(B
$B!V%V%?$+$i?M9)%$%s%U%k%(%s%6!&%&%$%k%9H/8+!W$NFf(B
(WIRED NEWS, 3/10)$B!#8=:_%G!<%?$r3NG'Cf$NLOMM!#(B
$B!U(B
$BBh#82s!!%3%s%T%e!<%?HH:a$K4X$9$kGrIM%7%s%]%8%&%`!!#R#E#P#O#R#T(B
($B2J3X5;=Q>pJsH/?.!&N.DLAm9g%7%9%F%`(B, 3/10) $B$,8x3+$5$l$F$$$^$9!#(B
$B?yK\$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$BBh#82s(B $B%3%s%T%e!<%?HH:a$K4X$9$kGrIM%7%s%]%8%&%`(B$B$G$N9V1iO?$N$h$&$G$9!#(B
$B$A$J$_$K!"(B
http://www.sccs-jp.org/SCCS2005/ $B$H$$$&%Z!<%8$O$^$@B8:_$7$J$$$h$&$G$9!#(B
$B!U(B
snort 2.3.2
$B$,=P$F$$$^$9!#(B
snort rule $B$K$D$$$F$O(B
[Snort-users-jp:01555] $B$r;2>H!#(B
$B!U(B
2005 SELinux Symposium $B;qNA(B
$B$,8x3+$5$l$F$$$^$9!#(B
$B!U(B
$B8D?M>pJsO31H$M$?(B$B!#(B
$B;~ED$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B$*5R$5$^>pJs$,5-:\$5$l$?9);v4X78=qN`$NEpFq$K$D$$$F(B
(TEPCO $B$R$+$j(B, 3/7)
$B9);v4X78=qN`(B46$B7oJ,$,9);v$H$H$b$KEpFqHo32$KAx$&$H$$$&;v7o$,H/@8$$$?$7$^$7$?!#(B
$B2?$=$l!D!D!#(B
$B$*5RMM>pJs$NJ6<:$K$D$$$F(B
($BBh;06d9T(B, 3/7)
$BEv9T;MF|;T;YE9$N?&0w$,2q>:e;TFb$K$*$$$F$*5R$5$^$N8D?M>pJs$NF~$C$?;dMQ3s$rJ6<:$$$?$7$^$7$?!#(B
$B$J$s$G$=$s$J$b$N$,!V2q
$B7@Ls?=9~=qEy$NJ6<:$K$D$$$F(B
($B%I%3%bElKL(B, 3/9)
2005$BG/(B2$B7n(B25$BF|!J6b!K$KpJs4IM}%7%9%F%`$K$OEPO?$5$l$F$$$k$,!"%^%$%/%m%U%#%k%`2=$,L$=hM}$N$b$N$,$"$k$3$H$,H=$j!"(B
$B%A%'%C%/5!9=$,M-8z$K5!G=$7$?!"$H$$$&$3$H$G$9$M!#$3$l<+BN$O$9$P$i$7$$OC$G$9!#(B
$B!!:#2s!"$3$N$h$&$J;vBV$,H/@8$7$?$3$H$r=E$/$7$H:n6H4D6-$N@0Hw!"JB$S$K:n6H9)Dx$4$H$N@UG$BN@)$NL@3N2=$H%A%'%C%/BN@)$N6/2=$rpJs4IM}$NE0Dl$r?^$j!"$*5RMM$N?.Mj2sI|$KA4NO$r5s$2$F
$B!!$J$*!"7@Ls?=9~=qEy$K$D$$$F$O!"(B2005$BG/(B2$B7n$h$j!"pJs4IM}%7%9%F%`$KD>@\
$B:#8e$NBP1~$,6qBNE*$K5-:\$5$l$F$$$k$N$b(B good $B$@$J$"!#(B
TEPCO $B$R$+$j(B
$B$d(B
$BBh;06d9T(B
$B$N;vNc$K$"$k$h$&$J5-=R$@$H!"!V$G!"
$B$*5RMM>pJs$NN.=P$K$D$$$F(B
($B%8%g!
$B30It$NJ}$+$i8D?M>pJs$,N.=P$7$F$$$k$N$G$O$J$$$+$H$N$4;XE&$rpJs$N%G!<%?$rF~H9g$N7k2L!"
$B8\5R>pJs#7#9#7?MJ,N.=P!!7z@_6H%8%g!
($B0&I2?7J9(B, 3/9) $B$@$H!V
$B!U(B
Warez$B%0%k!<%W$N44It(B3$B?M$KM-:aH=7h(B
(ITmedia, 3/10)
$B!U(B
$B$3$s$J$K$"$C$?(BUI$BFC5v!=!=%8%c%9%H(B-$B>>2<:[H=$GIb$+$S>e$,$k2]Bj(B
($BF|7P(B IT Pro, 3/10)$B!#(B
$BK\Ev$K3W?7E*$J(B UI $B$K$J$iFC5v$rM?$($F$b$$$$$+$J$"$H$O;W$&$N$@$1$I!"(B
$BiCL$N$h$&$JFC5v!W$,B?$$$+$i$J$"!#(B
$B!U(B
DoS$B967b$N (@IT, 3/11)
$B>pJs%7%9%F%`C4Evu67$K$J$j$D$D$"$k$H$$$($k$N$G$O$J$$$@$m$&$+!#(B
$B!!!VBT$C$?$J$7$N>u67$K$J$j$D$D$"$k$H$$$($k$N$G$O$J$$$@$m$&$+!W$H$$$&!"$o$+$C$?$h$&$J$o$+$i$J$$$h$&$JI=8=$O$H$b$+$/$H$7$F!"?tG/A0$HHf$Y$F!"(BDDoS $B$OMZ$+$K$"$jF@$k(B / $BMF0W$JOC$K$J$C$?$N$O3N$+$G$9$M!#(B
$B!U(B
memtest86+
1.51 $B$,=P$F$$$^$9!#F#0f$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
- OpenSSH $B$N@H
$B!!(B3/10 $B$H(B 3/11 $B$K2~D{$5$l$F$$$^$9!#(B
$B?/F~$r5=(B (phishing) $B$NF'$_Bf%5!<%P$K$5$l$k$J$I$N;vNc$,!":#G/(B 1$B7n0J9_(B10$B7o0J>eJs9p$5$l$F$$$^$9!#(B
<- $B%5!<%P!<(B $B%a%C%;!<%8(B $B%V%m%C%/$N@H
$B!!$3$N7g4Y$O!"$9$G$K%5%]!<%H$,=*N;$7$F$$$k(B Windows NT 4.0 $B$K$bB8:_$9$k$3$H$,H=L@!#(B
$B!!(Bkitt $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
$B%S%i$r;5$/$@$1$G$^$?$^$?BaJa(B$B!"$7$+$794CV@A5a$9$i$5$l$:!#(B
$B!!0lO"$NBaJa$O?M8"?/32$H$7$+;W$($^$;$s$+$i!"(B
$B?M8"MJ8nK!0F(B$B$,$b$7$b2D7h!&@.N)$5$l$F$7$^$C$?>l9g$O!"(B
$B$<$R$H$bBh#1CF$H$7$FEl5~ET650i0Q0w2q$d7Y;!8"NO$H%,%A%s%3>!Ii$7$F$$$?$@$-$?$$$H$3$m$G$9!#(B
$B!!$=$N?M8"MJ8nK!0F$K$D$$$F$O!"<+L1E^5D0w$G$9$i5?G0$rJz$+$6$k$rF@$J$+$C$?$h$&$G!"(B
$B?M8"MJ8nK!0F!"<+L1It2q$,N;>58+Aw$j(B
($BFIGd(B, 3/10) $B$J$s$F>u67$K$J$C$F$$$k$h$&$G$9!#(B
$B$7$+$7!":#8e$I$&$J$k$+$K$D$$$F$O$^$@$^$@M=CG$r5v$5$J$$>u67$N$h$&$G$9!#(B
$B!!$H$3$m$G!"?M8"MJ8n0Q0w$C$F:#$G$b(B 14,000 $B?M$/$i$$$$$k$h$&$J$s$G$9$,(B:
$B?M8"MJ8n0Q0w$r$4B8$8$G$9$+!)(B
($BK!L3>J(B)$B!#(B
$B!U(B
$B!VYTB$!W$O!"5-;v$+4UDj7k2L$+(B $B$a$0$_$5$s!V0d9|!W$a$0$jBgA{F0(B
($B=54)8=Be(B 2005$BG/(B3$B7n(B19$BF|9f(B / $B0$=$Me(B)
$B!U(B
Bluetooth $B$b$N(B
$B!U(B
$BJF$G$^$?8D?M>pJsN.=P!"(B3$BK|(B2000$B?M$NcHV9f$J$IO3$($$(B
(ITmedia, 3/10)$B!#(B
$B!U(B
$B%M%C%H%o!<%/%H%i%V%k$N$?$a!"(B
16:25 $B$4$m$+$i(B 17:00 $B$4$m$K$+$1$F!"(B
$B$3$N%Z!<%8$N1\Mw$,$G$-$^$;$s$G$7$?!#$9$s$^$;$s!#(B
$B!U(B
$B$_$J$5$^$N(B NHK
$B!U(B
$B@PL}$O$"$$$+$o$i$:9bCM$N$h$&$G(B:
$B!U(B
$BKLD+A/6u73!"Ht9T71N}$OG/#1#5;~4V!D:_4ZJF73;JNa41(B
($BFIGd(B, 3/9)$B!#6u73$O;ve!"@oF.G=NO%<%m$J$N$G$O!#(B
$B!U(B
$B4D6-4IM}$K4X$9$k$*OM$S(B
($B>$B>
(TBS, 3/9) $B$N7o!#:FH/KI;_:v$K$O$3$s$JJ8>O$,(B:
$BB,Dj%G!<%?$dJs9p=q$KBP$9$k%A%'%C%/5!G=$,F/$/BN@)$KJQ99$7$^$7$?!#(B
$B!!$=$l$@$18@$o$l$F$b!"$I$s$JBN@)$J$s$@$+$5$C$Q$j$o$+$j$^$;$s$M$(!D!D!#(B
$B!U(B
$B?e
($BFIGd(B, 3/10)$B!#(B
JFE $B%9%A!<%k(B$B$N7o!#(BJFE $B%9%A!<%k(B web $B%Z!<%8(B$B$K$3$s$J$N=P$F$^$7$?(B:
$B!U(B
$BJF$G2P4oN`$r!V9gK!E*$K9XF~!W$H!"%F%mMF5?
(CNN, 3/9)$B!#MF5?
$B8=9T$NK!N'$G$O!"=FGdGc$K4XO"$9$k5-O?$O#2#4;~4VFb$K>C5Q$5$l$k7h$^$j$,$"$k!#(B
$B!U(B
$B9gH]3NG'$N%O%C%-%s%0
(CNN, 3/9)
$B!U(B
$BCx:n8"0cH?$NE&H/Be9T!V%M%C%Q%i%C%A!W$,Bg3hLv(B
($BCf1{F|Js(B, 3/9)
$B!U(B
$B62I]$N9;FbK=NOAH?%!V0l?X2q!W!!@-9T0Y%$%Y%s%H$b(B
($BD+A/F|Js(B, 3/9)
$B!U(B
$BCT4A%o!<%9%H#1!&:k5~@~!"D+$K$b=w@-@lMQ(B
($BFIGd(B, 3/9)$B!#(B
$B!U(B
OpenSSH
4.0 $B%-%?!OpenSSH 4.0 released
$B$r;2>H!#$b$&$A$g$C$H$9$l$P!"(Bmirror site $B$K$b9T$-EO$k$G$7$g$&!#(B
$B!U(B
IE$B$N%b!<%@%k%@%$%"%m%0%&%#%s%I%&$K(BSSL$BDL?.$N!V80!W$,I=<($5$l$J$$8=>](B
(Internet Watch, 3/9)$B!#(B
$B%*%j%8%J%k(B: 895510 - SSL $BDL?.$K$*$1$k(B ModalDialog $B%&%#%s%I%&$K(B "$B80(B"$B%^!<%/$N%"%$%3%s$,I=<($5$l$J$$(B
(Microsoft)
$B!U(B
$B%F%9%H%I%i%$%V(B (hp)$B!#0lIt$N%W%i%C%H%[!<%`$K4X$7$F!"F|K\8l$G$NBP1~$,2DG=$K$J$C$?LOMM!#(B
$B!U(B
$BEE;R%a!<%k!&%;%-%e%j%F%#!&%b%8%e!<%k(B S/Goma
$B%P!<%8%g%s(B2.14 PL7 $B$,=P$F$$$^$9!#(B
V2.14PL6b $B$+$i(B V2.14PL7 $B$X$NJQ99E@(B$B$h$j(B:
1. X.509$B8x3+80>ZL@=q$N(BV3$B3HD%$N4pK\@)Ls$K4X$7$F!"$3$N3HD%$,$J$$$+!"%N%s%/%j%F%#%+(B $B%k$G(Bca=false$B$N>l9g!"(B $B>ZL@=q$NH/9T85$H$7$F$O!"IT@5$H$7$F07$&$h$&$K$7$^$7$?!#!N=EMW!O(B
$B!U(B
Sun$B$NL50UL#$JH/I=(B
(ITmedia, 3/9)$B!#%9%H!<%k%^%s;U$N$*$3$H$P!#(B
$B!U(B
$B
(F-Secure, 3/9)$B!#(Brootkit $B$r8!=P!&:o=|$G$-$k$=$&$G!#(B
$B%(%U(I%$B%;%-%e%"$O!"!V(BF-Secure$B%V%i%C%/%i%$%H!W$rAH$_9~$s$@!V(BF-Secure$B%"%s%A%&%#%k%9(B $B%/%i%$%"%s%H%;%-%e%j%F%#!W$r!"(B2005$BG/Fb$K=P2Y3+;O$9$kM=Dj$G$9!#(B
$B!!C1IJGd$j$O$7$J$$$N$+$J$"!#(B
The Cure - F-Secure BlackLight (Beta Release) (F-Secure) $B$+$i&BHG$r%@%&%s%m!<%I$G$-$kM=Dj$@$=$&$G!#(B
$B!U(B
$B%^%$%/%m%=%U%H$N%&%$%k%96n=|%D!<%k!"(BBagle$B$d(BBropia$B$N6n=|$KBP1~(B
(Internet Watch, 3/9)$B!#$=$&$$$($PKh7n99?7$G$7$?$M!#(B
$B!U(B
http://shopping.msn.com.sg/x.htm$B!#$"$j$c$j$c$s!#(B
zone-h.org $B$N2~$6$s>pJs(B$B!#(B
http://www.msn.com.sg/
$B$d(B
http://shopping.msn.com.sg/
$B$O$U$D$&$N(B MSN $B$N$h$&$J$N$G$9$,!#(B
$B9b66$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
Paros - for web application security assessment
$B$N(B 3.2.0 $B$,EP>l$7$?$=$&$G$9!#(B
$B!!(Bmsearch 1.50 / 1.51 $B$*$h$S(B UNICODE $BHG(B msearch 1.51 $B$K7g4Y!#(B
$B%G%#%l%/%H%j%H%i%P!<%5%k7g4Y(B (../ $B%P%0(B) $B$,$"$j!"(Bmsearch CGI $B$NF0:n8"8B$G%"%/%;%92DG=$J%5!<%PFb$NG$0U$N%U%!%$%k$N$&$A!"FCDj$N7A<0$rK~$?$9$h$&$J$b$N$K$D$$$F!"$=$NFbMF$r
$B%?%V$K$h$C$F(B5$B$D$N%U%#!<%k%I$KJ,$1$i$l$F!$#19T#1%l%3!<%I$K$J$C$F$$$k%U%!%$%k$G$9!%(B 2$BHVL\!$(B4$BHVL\!$(B5$BHVL\$N%U%#!<%k%I$K4^$^$l$F$$$kFbMF$O(Bmsearch$B$N8!:w$K$h$C$F8!:w7k2L$KI=<($5$l$k>l9g$,$"$j$^$9!%(B
$B$3$l$O%$%s%G%C%/%9%U%!%$%k$N7A<0!#B>$K@_Dj%U%!%$%k$N7A<0$HF10l$N>l9g$K$b
$B!!(Bmsearch 1.52 $B$*$h$S(B UNICODE $BHG(B msearch 1.52 (U1) $B$K$*$$$F=$@5$5$l$F$$$k!#(B
$B!!%h%o%h%o$J(B OpenSSH $B$d!"%h%o%h%o$J%Q%9%o!<%I$rA@$C$?967b$,N.9T$C$F$$$k$h$&$G$9!#5$$r$D$1$^$7$g$&!D!D$H8@$C$F$bDL$8$J$$?M$,LdBj$J$s$@$m$&$1$I$J$"!#(B
2005.03.11 $BDI5-(B:
$B!!(B3/10 $B$H(B 3/11 $B$K2~D{$5$l$F$$$^$9!#(B
$B?/F~$r5=(B (phishing) $B$NF'$_Bf%5!<%P$K$5$l$k$J$I$N;vNc$,!":#G/(B 1$B7n0J9_(B10$B7o0J>eJs9p$5$l$F$$$^$9!#(B
- $B%O%$%Q!<%j%s%/(B $B%*%V%8%'%/%H(B $B%i%$%V%i%j$N@H
$B!!$3$N7g4Y$O(B Windows 9x / Me $B$K$b$"$j$^$7$?(B ($B$9$$$^$;$s(B)$B!#(B
Windows 98 / 98 SE / Me $BMQ$N=$@5%W%m%0%i%`$,EP>l$7$?$=$&$G$9!#(B
Windows Update $B$GF~
- $B%+!<%=%k$*$h$S%"%$%3%s$N%U%)!<%^%C%H$N=hM}$N@H
$B!!(BWindows 98 / 98 SE / Me $BMQ$N=$@5%W%m%0%i%`$,$h$&$d$/EP>l$7$?$=$&$G$9!#(B
Windows Update $B$GF~
$B!U(B
$B!V%8%c!<%J%j%:%`$O@/<#8"NO$H$I$&8~$+$$9g$&$Y$-$+!W(B
$B!A8x6&J|Aw(BNHK$B$H@/<#8"NO!A(B$B!#(B
2005.03.10 ($BLZ(B) ($B$C$FL@8eF|$8$c$s(B)$B!"El5~ETJ85~6h!"(B1000$B1_!#(B
$B!U(B
Virus writers exchanging information
(kaspersky.com, 3/8)
In the space of just 2 days, approximately 50 modifications of a range of malicious programs were mass mailed. The timing of these mailings clearly shows that they are automated or semi-automated.
$B!U(B
vCJD $BOC(B
$B!U(B
MSN Messenger $B$rA@$C$?(B Worm $B$,N.9T$C$F$$$k$s$@$=$&$G!#(B
$B%H%l%s%I%^%$%/%m$O%$%(%m!<%"%i!<%H$r=P$7$F$$$^$9!#(B
$B!U(B
$B%a%b(B: Windows Server 2003 $B$N(B EMS ($B6[5^%7%9%F%`4IM}%5!<%S%9(B)
($B%7%9%F%`4IM}$J;(5-(B, 3/8)$B!#$X$'!A!#(B
$B!U(B
$B%$%9%i%(%k73$GF3F~?J$`!":G?773;v5;=Q(B
(WIRED NEWS, 3/8)
$B!U(B
$BK:$l$A$c$$$1$J$$!VJ*M}E*0BA4A
(ITmedia, 3/7)
$B!U(B
$B1?M"B?L\E*1R@1?7#19f(B($B#M#T#S#A#T!]#1#R(B)$B$N@E;_2=40N;5Z$S0&>N$K$D$$$F(B
($B5$>]D#(B, 3/8)$B!#$R$^$o$j$,5"$C$F$-$?!#%V%i%\!
$B!U(B
$B%$%s%F%k%M%?(B
$B!!%$%s%F%k$C$F!"$3$N
$B!U(B
$B!V(BiPod$B%4%m!W$D$$$KEP>l$+(B--$B9a9A4k6H!"FC5v8"?/32$rM}M3$KJ,$1A0$rMW5a(B
(CNET, 3/8)
$B!U(B
iDEFENSE Labs Releases IDA RPC Enumerator
$B$@$=$&$G$9!#(B
$B!U(B
IC $B%Q%9%]!<%HOC(B
$B!!(Be-Passport (IC $B%Q%9%]!<%H(B) $BOC(B$B$b4XO"$+$J$"!#(B
$B!U(B
$B%^%$%/%m%=%U%H$,(BData Protection Server$B$N>\:Y$rL@$i$+$K!$@5<0=P2Y$O(B2005$BG/8eH>(B
($BF|7P(B IT Pro, 3/8)
Exchange Server$B$d(BSQL Server$B$r%P%C%/%"%C%W$9$k5!G=$O!$(B2006$BG/0J9_$K=P2Y$9$k8e7QHG$K@9$j9~$`7W2h$K$J$C$F$$$k!#(B
$B!!$J$s$@$=$j$c$"!A!#(B
$B!!$3$l$C$F$D$^$j!"!V%Q%9%o!<%I$r=q$$$?IUd5;f$r%G%#%9%W%l%$$KE=$j$D$1$F$"$k!W$N$H;w$?$h$&$J>u67$J$o$1$G$9$h$M!D!D!#(B
$B!!$=$&$$$($P!"$3$N$4$m;XLfG'>Z$rBj:`$H$7$?(B IBM $B$N(B CM
(IBM$B;XLf%;%s%5!<(B?)
$B$,$*Cc$N4V$KN.$l$F$$$^$9$,!"$"$l$O%0%_;X967b$X$NBQ@-$O$"$k$s$G$9$+$M$(!#(B
$B!D!D$*$C!"(BIBM$B;XLf%;%s%5!<(B$B$N%Z!<%8$KAGE($J$3$H$,=q$$$F$"$k(B:
$B;XLfG'>Z5;=Q$O(B100%$B40A4$JK\?MG'>Z!&>H9g$rJ]>Z$9$k$b$N$G$O$"$j$^$;$s!#K\;XLf%;%s%5!<$r;HMQ$5$l$?$3$H!"$^$?$O;HMQ$G$-$J$+$C$?$3$H$K$h$C$F@8$8$k$$$+$J$kB;32$K4X$7$F$b!"Ev5$/$@$5$$!#(B
$B!!%0%l%$%H!#(B
$B!!(BWindows Server 2003 $B$d(B Windows XP SP2 $B$,(B
LAND attack
$B$N1F6A$r
$B!!
$B!!(BICF $B$d(B Windows $B%U%!%$%"%&%)!<%k$rM-8z$K$9$l$PKI$0$3$H$,$G$-$k!#(B
2005.03.13 $BDI5-(B:
$B!!(BWindows Server 2003 $B$K$D$$$F$O!"(B
324270
- How To Harden the TCP/IP Stack Against Denial of Service Attacks in Windows Server 2003
(Microsoft) $B$K$"$k@_Dj$r;\$;$P$@$$$8$g$&$V$JLOMM!#(B
$B$H$$$&$+!"%G%U%)%k%H$GM-8z$G$O$J$$$N$G$9$M!D!D!#(B
2005.04.21 $BDI5-(B:
$B!!(BTCP/IP $B$N@H
$B$G=$@5$5$l$F$$$k!#(B
$B!U(B
$BEl5~6u=1#6#0G/(B $B%"%K%a40@.(B
(NHK, 3/7)$B!#(B
$B$"$7$?855$$K$J!A$l(B! $B!AH>J,$N$5$D$^$$$b!A(B$B!#(B
$B!U(B
$B%"%/%j%k%"%_%I(B $B8:$i$9BP:v$r(B
(NHK, 3/7)
$B!U(B
$B5m$N7nNp%G!<%?!"JF9q$,DI2CDs=P$r5qH]!!M"F~:F3+CY$l$b(B
(asahi.com, 3/7)$B!#=P$9$KB-$k$h$&$J%G!<%?$,$=$b$=$b$J$$(B?
$B!U(B
$B8m
$B!U(B
$B%;%-%e%j%F%#$G$,$s$8$,$i$a!"
(ITmedia, 3/4)
$B!U(B
$B%^%$%/%m%=%U%H!$(BOEM$BHG(BWindows XP$B$rBP>]$K(B
$B%M%C%H7PM3$N%"%/%F%#%Y!<%7%g%s$rCf;_(B
($BF|7P(B IT Pro, 3/4)
$B!U(B
Windows $B$G;H$($k%U%j!<$J(B FTP $B%/%i%$%"%s%H(B
EmFTP
2.00 ($B8=:_(B beta 4) $B$O(B SFTP $B$KBP1~$7$F$$$k$s$G$9$M!#(B
$B!U(B
HOSTS$B%U%!%$%k$N2~$6$s$r7Y9p!V(BHOSTS$B%&%)%C%A%c!
($BAk$NEN(B, 3/7)$B!#$=$b$=$b!"(Bhosts $B%U%!%$%k$r$$$8$l$k$h$&$J8"8B$GF|>o@83h$rAw$kJ}$,%^%:$$$o$1$G$9$,!D!D!#(B
$B!U(B
$B<+<#BN$O@?
($B9bLZ9@8w!w<+Bp$NF|5-(B, 3/6)$B!#(B
$B9bCN8)!!EE;R?=@A!&FO=P%7%9%F%`(B
$B$G$O!"!V%$%s%?!<%M%C%H!W%>!<%s$K$*$$$FL$=pL>$N(B ActiveX $B%3%s%H%m!<%k$r%@%&%s%m!<%I!&%$%s%9%H!<%k$5$;$k$h$&$J@_Dj$KJQ99$9$k$h$&6/MW$7$F$$$kLOMM!#(B
$B$3$N!<%s$N>pJs$rJQ$($5$;$h$&$H$9$k$s$@$m$&!#$=$&$$$&$H$-$N$?$a$K!V?.Mj:Q$_%5%$%H!W%>!<%s$H$$$&$b$N$,$"$k$H;W$&$N$@$,!D!D!#(B
$B!U(B
Sophos AntiVirus
$B$C$F!"(B$B%(%s%?!<%W%i%$%:%=%j%e!<%7%g%s(B$BEP>l$KH<$C$F!"(B
Windows 2000 $B0J9_MQ$,%P!<%8%g%s(B 5.0.x$B!"(BWindow 9x/Me/NT 4.0 $B$*$h$S(B Mac OS X $BMQ$,%P!<%8%g%s(B
4.5.x $B$K$J$C$F$?$s$G$9$M!#(BUI $B$b0l?7$5$l$F$$$k$h$&$G!#(B
$B!U(B
$B%S%i$r;5$$$F$$$k?M$,$$$k$H7Y;!$KDLJs$7$FBaJa$5$;$k9b9;$NOC(B$B!#(B
- cURL $BG'>Z7g4Y(B
$B!!(BcURL
7.13.1 $B$,=P$^$7$?!#>e5-7g4Y$,=$@5$5$l$F$$$^$9!#(B
iida $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
- Sylpheed 1.0.2 $B0JA0$K%P%C%U%!%*!<%P!<%U%m!<$,H/@8$9$k7g4Y(B
$B!!(BSylpheed $B$K%P%C%U%!%*!<%P!<%U%m!<$NLdBj(B (slashdot.jp)$B!#(B
$B!U(B
Heads up: End of RELENG_4_8 support
(freebsd-security ML, Sat, 05 Mar 2005 16:43:28 +0900)$B!#(B
3 $B7nKv$G(B FreeBSD 4.8 $B$N%5%]!<%H$O=*N;$7$A$c$&$N$G!"(B3 $B7nKv$^$G$K(B
4.11 $B$K%"%C%W%0%l!<%I$7$^$;$&OC!#
$B!U(B
$BEl5~Bg6u=1!'(B
$BIc$HADIc$b5>@7Jm$K!D#6#0G/A0$N5-21Mj$j(B
($BKhF|(B, 3/6)$B!#(B
$BEl5~Bg6u=1(B: 60 $BG/L\$NHo32CO?^(B (NHK $B%9%Z%7%c%k(B) $B$r8+$F$$$?$N$@$,!"(B
$B$3$l$OEl5~Bg5T;&$H8F$V$Y$-$@$h$M!#(B
$B>e:GBg$N5T;&(B:
$BEl5~Bg6u=1(B
(MINEGISHI, KAZUO $B$N%[!<%`%Z!<%8(B) $B$H$+!#(B
$B!!73;v:n@o$H$7$F$NEl5~Bg6u=1$K$D$$$F$O!"(B$BEl5~Bg6u=1!=#B#2#9$+$i8+$?;07n==F|$N??
($B8w?M\$7$$$i$7$$(B ($B>.Eg$OL$FI(B)$B!#(B
$B!U(B
$B%9%^%H%i2-BgCO?L1g=uBb$NN&<+@hH/Bb$,5"9q(B
(asahi.com, 3/6)$B!#9qO"Cf?4$N1g=uBN@)$K$J$k$H$$$&OC$O$I$&$J$C$F$$$k$s$@$m$&!#(B
$B!U(B
$BIpIt<+L144;vD9!'(B
$B!VF|K\$OE79D$N9q!W(B
($BKhF|(B, 3/6)$B!#$3$l$,<:8@$K$J$C$F$$$J$$$i$7$$$H$3$m$,!"<+L1E^$N<+L1E^$?$k=j0J$G$7$g$&$+!#$$$d$O$d!#(B
$B!U(B
[AML 0651] $B!Z>pJs![(B UNEP $BJs9p=q!'%=%^%j%"$GITK!Ej4~$5$l$?;:6HGQ4~J*$,DEGH$G;6Mp!"?M!9$KB?$/$N7r9/Ho32(B
$B!!%=%^%j%"$O9q:]E*$KG'$a$i$l$?Cf1{@/I\$,$J$/!"GQ4~J*$K4X$9$k5,@)$J$I$,$[$H$s$I9T$o$l$F$-$^$;$s$G$7$?!#$=$3$G!"M-FG$JGQ4~J*$r07$&$$$/$D$+$N9q:]E*$J4k6H$,%=%^%j%"$KL\$rIU$1!"%=%^%j%"$N3$4_$K!"J|M-FG$JGQ4~J*$,BgNL$KEj4~$5$l$F$-$?$H$$$&$3$H$G$9!#(B
$B$3$l$i$NM-FG$JGQ4~J*$,DEGH$K$h$C$F$5$i$o$l!"6a3$$r1x@w$7$?$j!"$3$l$i$r<}G<$7$F$$$?%3%s%F%J$d%I%i%`4L$J$I$,GK2u$5$l$F!"GQ4~J*$,O*=P$7$?$?$a$K!"$3$l$i$r4^$s$@Iw$,FbN&$K$^$GE~C#$7!"1h4_It$G5y6H$K$h$C$F@87W$rN)$F$F$$$k5yL1$?$A$@$1$G$J$/!"FbN&It$ND.$N=;L1$K$b!"0[>o$J7r9/Ho32$,@8$8$F$$$k$H$$$&$3$H$G$9!#(B
$BJs9p=q$K$h$k$H!"FMA3;`$J$I$b4^$`AjEv$N7r9/Ho32$,@8$8$F$$$k$h$&$G$9!#(B
$B!!$J$s$F$3$C$?$$!D!D!#(B
$B!U(B
$B8D?M>pJsO31H!D!D$H$$$&$+J6<:$M$?(B$B!#(B
$B;~ED$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
McAfee AntiSpyware Enterprise$B$,%$%s%9%H!<%k$5$l$F$$$k4D6-$K(BVirusScan Enterprise8.0iPatch10$B$rE,MQ$9$k$H(BMcAfee AntiSpyware Enterprise$B$,F0:n$7$J$/$J$k(B
($B%^%+%U%#!<(B)$B!#(B
patch10 $B$rE,MQ$7$F$+$i(B
McAfee Anti-Spyware Enterprise
$B$r%$%s%9%H!<%k$9$l$P2sHr$G$-$k$=$&$G!#(B
$B!U(B
$B!VCx:n8"?/32$N=q$-9~$_J|CV$O%@%a!W#2$A$c$s$M$k4IM}
(Internet Watch, 3/4)$B!"(B
$BCx:n8"?/32$G%M%C%H:o=|L?Na(B
(NHK, 3/3)$B!#(B
$B9b:[$G$O(B 2ch.net $B4IM}?M$NIi$1!#(B
$BCO:[$G$O(B 2ch.net $B4IM}?M$N>!$A$@$C$?(B: $BEl5~COH=J?(B16$B!&(B3$B!&(B11$B!JJ?@.(B15$BG/(B($B%o(B)$BBh(B15526$B9f!K(B
(sekidou.com)
$B!U(B
$B;R$I$b$N8D?M>pJs$K78$k>CHqu$HBP1~(B
($B9qL1@83h%;%s%?!<(B, 3/4)$B!#;R6!$rD>@\A@$C$?F0$-$,A}$($F$$$k$=$&$G$9!#(B
$B&K!Ho32KI;_6&F1%-%c%s%Z!<%s(B
($B9qL1@83h%;%s%?!<(B) $B$b4XO"$G$7$g$&$+!#(B
$B!!(B$BKIHH%,%i%9!"KIHH%U%#%k%`$N@-G=(B
($B9qL1@83h%;%s%?!<(B)
$B$H$+(B
$B%/%l%8%C%H2qjM??.Ey$K$D$$$F!](B
($B9qL1@83h%;%s%?!<(B)
$B$H$+$b6=L#?<$=$&!#(B
$B!U(B
$B>CHq&
(IPA, 3/4)$B!#$3$NFbMF$@$H!"1?MQ$8$c$J$/$F3+H/$N$h$&$J5$$,!#(B
$B!U(B
$B%^%$%/%m%=%U%H(B $B%;%-%e%j%F%#>pJs$N;vA0DLCN(B
(Microsoft)
2005 $BG/(B 3 $B7n(B 8 $BF|(B ($BJF9qF|IU(B)$B!"%^%$%/%m%=%U%H(B $B%;%-%e%j%F%#(B $B%l%9%]%s%9(B $B%;%s%?!<$O!"?7$7$$%;%-%e%j%F%#>pJs$r%j%j!<%9$9$kM=Dj$O$"$j$^$;$s!#(B
$B!!!V869F!"Mn$H$7$?$J!W(B
$B!!!V!D!D$=$&$$$&$3$H$8$c$J$$$H;W$&$s$@$1$I!D!D!W(B
$B!!(BMSRC $B$K$O$2$^$7$N$*$?$h$j$rAw$m$&(B!
(spam $B$O$@$a$@$h(B)
$B!U(B
$B%&%$%k%946@w$d8D?M>pJs$NO31L$O%N!<%H(I%$B%Q%=%3%s$,Bg$-$J860x$K$J$j$&$k!$%M%C%H%9%?!<$,D4::(B
($BF|7P(B Tech On, 3/2)$B!#85%M%?(B:
$B%N!<%H%Q%=%3%s;}$A9~$_!&;}$A=P$74IM}$NL$@0Hw$,!"(B $B%&%$%k%946@w!"8D?M>pJsO3$($$H/@8$NMW0x(B
($B%M%C%H%9%?!<(B, 3/2)$B!#(B
$B%M%C%H%9%?!<$,#U#R#L%G!<%?%Y!<%9$rDs6!$7$F$$$k
$B!!%U%#%k%?20$5$s$G$9$+!#(B
$B6=L#?<$$$N$G$9$,!"$=$N(B note PC $B$K$O$A$c$s$H%"%s%A%&%$%k%9$,F~$C$F$$$FDj5A%U%!%$%k$b99?7$5$l$F$$$k$+$H$+!"(BWindows Update $B$7$F$"$k$+$H$+!"$=$&$$$&$3$H$O%"%s%1!<%H9`L\$K$OF~$C$F$$$J$$$s$G$9$M!#(B
$B!U(B
$B%"%k%W%9EE5$!$85!&K!L3C4Ev5=!W$G9pAJ(B
($BF|7P(B Tech On, 3/2)$B!#!VK!L3C4Ev5=!W$G$9$h$"$J$?!D!D!#(B
$B!U(B
$B%0%j!<%s%T!<%9(B$B!#!VFz$N@o;N9f!W$O:#!"2-Fl8)$OFaGF9A$K2s9R$5$l$F$*$j!"(B
$BL@F|(B 3/5 $B$K0lHL8x3+$5$l$k(B$B$=$&$G$9!#(B
$B!U(B
$B$4Js9p$H$*OM$S(B
(cybozu / google "$B%-%c%C%7%e(B")$B!#8\5R>pJsF~$j$N(B PC $B$rJ6<:!#(B
$B$3$N$?$S$N;vBV$r87=M$+$D=E$/pJs$rJ6<:Ey$9$k$3$H$,$J$$$h$&!"e$KK|A4$r4|$7$F$^$$$k=jB8$G$4$6$$$^$9!#(B
$B!!!V87=M$+$D=E$/C5n$7$F$7$^$&$H$$$&;v4uK>$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
Jotti's malware scan
$B$H$$$&%Z!<%8$,$"$k$s$G$9$M!#(B
Virustotal
$B$HF1MM$N$b$N$N$h$&$G$9!#(B
$B!U(B
$B%H%l%s%I%^%$%/%mJ}LL$N(B patch
$B!!(Bpatch $B$G$O$J$/(B workaround:
$B!U(B
$B%3%s%T%e!<%?%&%$%k%9!&IT@5%"%/%;%9$NFO=P>u67$K$D$$$F(B
(IPA, 3/3)$B!#>\:Y$O!"(B$B%3%s%T%e!<%?%&%$%k%9$NFO=P>u67(B (IPA) $B$K$"$k(B PDF $BHG$r!#(B
$B%$%s%?!<%M%C%HDjE@4QB,!J(BTALOT2$B!K$G$N4QB,>u67$K$D$$$F(B
(IPA)
$B$,(B 2 $B7n$+$i8x3+$5$l$k$h$&$K$J$C$F$$$?$s$G$9$M!#(B
$B!U(B
$B!V4k6H$K$*$1$k>pJs%;%-%e%j%F%#%,%P%J%s%9$N$"$jJ}$K4X$9$k8&5f2q!!Js9p=q!J0F!K!WEy$KBP$9$k0U8+$NJg=8$K$D$$$F(B
($B7P:Q;:6H>J(B, 2/28)$B!#(B
$B>pJs=hM}3X2q(B $BBh(B67$B2sA49qBg2q(B$B$N(B$BFCJL%;%C%7%g%s!J(B3$B!K(B
$B$G!"(BIBM $B%S%8%M%9%3%s%5%k%F%#%s%0%5!<%S%9$NBgLZ$5$s$+$iOC$,=P$F$$$?$N$O!"$3$l$N$3$H$@$H;W$$$^$9!#(B
$B!!(Bsquid 2.5-STABLE7 $B$+$i(B 2.5-STABLE9 $B$K7g4Y!#(B
$B%5!<%PB&$,;~BeCY$l$N(B Netscape Set-Cookie $B;EMM$K4p$E$/5sF0$r<($9>l9g$K!"(BSet-Cookie $B%X%C%@$,B>?M$KO31H$7$F$7$^$&!#(B
2.5-STABLE9 $BMQ$N(B patch $B$,MQ0U$5$l$F$$$k!#(B
$B!!(BSylpheed 0.8.0 $B!A(B 1.0.2 $B$K7g4Y!#(B
ascii $B0J30$NJ8;z$r4^$`FCDj$N%X%C%@$r$b$D%a%C%;!<%8$KJV?.$7$?$H$-$K%P%C%U%!%*!<%P!<%U%m!<$,H/@8$9$k2DG=@-$,$"$C$?(B
$B!!(BChangeLog.jp $B$r8+$k$H!"(B1.0.3 $B$N$H$3$m$K$O!"$3$&=q$+$l$F$$$^$9!#(B
* src/codeconv.[ch]: $B%P%C%U%!%*!<%P!<%U%m!<$r5/$3$7$F$$$?(B
conv_unmime_header_overwrite() $B$r:o=|!#(B
* src/compose.c: compose_parse_header(): $B%P%C%U%!%*!<%P!<%U%m!<$r(B
$B5/$3$9(B conv_unmime_header_overwrite() $B$r;HMQ$7$J$$$h$&$K$7$?!#(B
$B!!(Bsrc/compose.c $B$r8+$F$_$k$H!"3:Ev$9$k$N$O(B
reply-to:, cc:, bcc:, followup-to: $B$N$h$&$G$9!#(B
$B!!(BSylpheed 1.0.3 $B$G=$@5$5$l$F$$$^$9!#(B
2005.03.07 $BDI5-(B:
$B!!(BSylpheed $B$K%P%C%U%!%*!<%P!<%U%m!<$NLdBj(B (slashdot.jp)$B!#(B
Java $B%"%W%j%1!<%7%g%s$N%$%s%9%H!<%k%W%m%0%i%`Ey$NCf$K$O!"$b$H$b$H@_Dj$5$l$F$$$k%]%j%7!<$r>e=q$-$7$F>C$7$F$7$^$C$?$j!"%]%j%7!<$NE,MQHO0O$r@)8B$7$F$$$J$$$b$N$,$"$j$^$9!#$3$N7k2L!"%&%'%V%Z!<%8>e$K;E3]$1$i$l$?f+$J$I$K$h$j!"%/%i%$%"%s%H>e$N%U%!%$%k$,Ep$_8+$i$l$?$j!"GK2u$5$l$?$j!"%/%i%$%"%s%H$,Bh;0$N(B Java $B%"%W%j%1!<%7%g%s$,F0:n$7$J$/$J$k2DG=@-$,$"$j$^$9!#(B
$B$@$=$&$G$9!#ITE,@Z$J%]%j%7!<@_Dj$NNc$b5-:\$5$l$F$$$^$9$N$G!"(BJava $B$JJ}$O$40lFI$r!#(B
$B!!(BCA $B%i%$%;%s%9%=%U%H%&%(%"(B ($B%i%$%;%s%9%5!<%P$H%i%$%;%s%9%/%i%$%"%s%H$NN>J}(B)
v1.53 $B!A(B V1.61.8 $B$KJ#?t$N7g4Y!#(B
remote $B$+$i(B local SYSTEM $B8"8B$rC%patch
$B$,$"$k$N$GE,MQ$9$l$P$h$$!#(B
$B!!4XO"(B:
$B!!(BcURL
7.13.0 $B0JA0$K7g4Y!#(B
$B!!(BCVE: CAN-2005-0490
2005.03.07 $BDI5-(B:
$B!!(BcURL
7.13.1 $B$,=P$^$7$?!#>e5-7g4Y$,=$@5$5$l$F$$$^$9!#(B
iida $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!!JQ$J(B DNS $B%l%9%]%s%9$K$h$C$F(B squid $B$,0[>o=*N;$7$F$7$^$&LOMM!#(B
2.5.STABLE8 $BMQ$N(B patch $B$,=P$F$$$kB>!"(B2.5.STABLE9 $B$G=$@5$5$l$F$$$k!#(B
$B!!(BphpBB 2.0.13 $BEP>l!#0J2<$NLdBj$,(B fix $B$5$l$F$$$k!D!D$_$?$$!#(B
$B!!(BphpBB 2.0.12 $B$NCJ3,$G!"0J2<$NLdBj$,(B fix $B$5$l$F$$$?LOMM!#(B
$B!!(BFirefox 1.0.0, Thunderbird 1.0.0, Mozilla 1.7.5 $B0JA0$K7g4Y!#(B
$BJ8;zNsA`:n4X?t$K7g4Y$,$"$j!"%a%b%jGK2u$,H/@8!#96N,(B web $B%Z!<%8$rFI$_$3$^$;$k$3$H$K$h$jG$0U$N%3!<%I$rCAN-2005-0255
$B!!(BFirefox 1.0.1, Thunderbird 1.0.1, Mozilla 1.7.6 $B$G=$@5$5$l$F$$$k!#(B
Thunderbird 1.0.1 / Mozilla 1.7.6 $B$O$^$b$J$/EP>lM=Dj!#(B
Mozilla Foundation Security Advisory 2005-18
(mozilla.org) $B$b;2>H!#(B
$B!!$3$NB>$K$b!"(BKnown Vulnerabilities in Mozilla
(mozilla.org) $B$K$O(B Firefox 1.0.1 $B$G=$@5$5$l$?(B 17 $B$N7g4Y$,>R2p$5$l$F$$$k!#(B
$B!!(BKDE 3.1.5 $B0JA0$K4^$^$l$k(B kppp $B$K7g4Y!#(B
local user $B$,(B /etc/hosts $B$d(B /etc/resolv.conf $B$r2~JQ$G$-$F$7$^$&!#(B
KDE 3.2.x $B$K$O$3$N7g4Y$O$J$$!#(B
$B4XO"(B: iDEFENSE Security Advisory 02.28.05: KPPP Privileged File
Descriptor Leak Vulnerability$B!#(B
CVE: CAN-2005-0205$B!#(B
$B!!(BKDE 3.1.5 $BMQ$N(B patch $B$,MQ0U$5$l$F$$$k!#(B
$B!!(BRealplayer Enterprise 1.1, 1.2, 1.5, 1.6, 1.7 $B$K7g4Y!#(B
$B96N,(B WAV / SMIL $B%U%!%$%k$K$h$j(B buffer overflow $B$,H/@8!"(B
$BG$0U$N%3!<%I$,
$B!!BP1~$9$k$K$O!"99?7HG$N(B audp3260.dll $B$*$h$S(B smlr3260.dll $B$,8x3+$5$l$F$$$k$N$G!"$3$l$i$rF~$l$+$($l$P$h$$!#(B
$B!!4XO"(B: [Full-Disclosure] iDEFENSE Security Advisory 03.01.05: RealNetworks RealPlayer .smil Buffer Overflow Vulnerability$B!#(B
iDEFENSE $B$K$h$k$H!"(BRealPlayer 8 / 10 / 10.5$B!"(BRealOne Player V1 / V2 $B$K$bF1MM$N7g4Y$,$"$kLOMM!#$^$?(B Mac OS $BHG$d(B Linux $BHG$N(B RealPlayer / RealOne / Helix Player
$B$K$b7g4Y$,$"$k!"$H$5$l$F$$$k!#(B
http://service.real.com/help/faq/security/security022405.html
$B$K$"$k$N$O(B Realplayer Enterprise
$B@lMQ$N99?7%b%8%e!<%k$J$N$GCm0U$5$l$?$$!#(B
$B!!(BRealPlayer 8 / 10 / 10.5$B!"(BRealOne Player V1 / V2
$B$O$3$A$i(B: RealNetworks, Inc.$B!"%;%-%e%j%F%#@H
(RealNetworks)$B!#6L2,$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!!(BCVE: CAN-2005-0455
$B!!%7%^%s%F%C%/$N(B Firewall/VPN Appliance 200/200R, Gateway Security 360/360R,
Gateway Security 460/460R, Nexland Pro800turbo $B$K7g4Y!#(B
$B!V(BWAN $B$N%P%$%s%IBP>]$H$7$F%f!<%6!<$,A*Br$7$?9=@.$rL5;k$7$F(B SMTP$B!JAw?.$5$l$kEE;R%a!<%k!K%H%i%U%#%C%/$NIi2YJ,;6$,9T$o$l$k2DG=@-!W$,$"$k$=$&$J!#(B
$B?7$7$$%U%!!<%`%&%(%"$rE,MQ$9$l$P$h$$$h$&$G$9!#(B
$B!U(B
$B%8%c%9%H%7%9%F%`!"!V0lB@O:!W%X%k%W%\%?%s$N%G%6%$%sJQ99%b%8%e!<%k$rDs6!(B
(Internet Watch, 3/1)$B!#5$$K$J$k?M$OE,MQ$7$^$7$g$&!#(B
$B!U(B
$B?73cBgK!3XIt$G8D?M>pJsN.=P(B
($B?73cF|Js(B, 3/1)$B!#@.@S>pJsO31H$G$9$+!D!D!#;~ED$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
$BD;%$%s%U%k%(%s%6$G#3#4?ML\$N;`
(CNN, 2/28)
$B!U(B
$BG/2l>u:n@.!&=;=jO?4IM}%=%U%H!VI.$^$a!W(B $B$H(B VirusScan Enterprise 8.0i $B4D6-$G$NIT6q9g$K$D$$$F(B
($B%^%+%U%#!<(B)$B!#8DJL(B patch $B$,=P$F$$$?$,!"(Bpatch 10 $B$K
$B!U(B
Strider GhostBuster Rootkit Detection
(Microsoft Research)$B!#(BMicrosoft Research $B$G$b(B rootkit $B$N8!=PRootkitRevealer
(sysinternals.com) $B$,;HMQ$7$F$$$k
$B!U(B
NIST$B!'@/I\5!4X8~$1%;%-%e%j%F%#4IM}%,%$%I%i%$%s5Z$S?HJ,>ZL@=q;EMM$r:vDj(B
($BIpED7=;K(B, 3/1)$B!#(B
$B!U(B
$B$j$=$J%+!<%I$N8\5R>pJsN.=P!"%M%C%H$GIT@5
($BFIGd(B / yahoo, 2/26)$B!#(B
$B$*5RMM8D?M>pJs$NN.=P$K4X$9$k$*OM$S$H$*CN$i$;(B
($BEl2#%$%s(B, 2/25) $B$NOC!#(B439 $B?M$@$=$&$G$9!#(B
Ikegami $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
![[$B%;%-%e%j%F%#%[!<%k(B memo]](/%7Ekjm/security/memo/sechole-memo.gif)
$B;d$K$D$$$F(B
