$B%;%-%e%j%F%#%[!<%k(B memo - 2005.04

SYM05-007: Symantec AntiVirus RAR archive bypass

$B!!(BSYM05-007: Symantec AntiVirus $B$K(B RAR $B%"!<%+%$%V$r%P%$%Q%9$9$k@H ($B%7%^%s%F%C%/(B)$B!#(B

$B!!%7%^%s%F%C%/$N(B Windows $BMQ%"%s%A%&%$%k%9%W%m%@%/%H$K7g4Y!#(B $B6qBNE*$K$O!"(B Symantec Web Security, Symantec Mail Security for SMTP, Symantec AntiVirus Scan Engine, Symantec SAV/Filter for Domino NT, Symantec Mail Security for Exchange, Symantec Norton AntiVirus 2005, Symantec Norton Internet Security 2005 , Symantec Norton System Works 2005 $B$K7g4Y$,$"$k!#(B RAR $B%U%!%$%k$N8!::$K$*$$$F!"FCl9g$,$"$k!#$3$N7k2L!"Ev3:(B RAR $B%U%!%$%kFb$K%&%$%k%9$,3JG<$5$l$F$$$F$b8!::$5$l$J$$$^$^$K$J$C$F$7$^$&!#(B

$B!!=$@5HG$,$9$G$KB8:_$9$k!#(BLiveUpdate $BEy$G:G?7$N(B patch $B$rE,MQ$7$F$"$l$P!"=$@5$5$l$?HG0J9_$K$J$C$F$$$k$O$:$N$h$&$@!#>\:Y$K$D$$$F$O(B SYM05-007 $B$r;2>H!#(B $B

2005.04.30 $BDI5-(B:

$B!!(BSYM05-007: Symantec AntiVirus $B$K(B RAR $B%"!<%+%$%V$r%P%$%Q%9$9$k@H ($B%7%^%s%F%C%/(B)$B!#(B

$B!!LdBj$N%5%$%H(B Googkle.com $B$r$A$g$C$H8+$F$_$?$N$G$9$,!"3N$+$K$$$m$$$m;E3]$1$i$l$F$$$k$h$&$G!#$$$d$O$d!#;E3]$1$N$R$H$D(B counter.jpg $B$NCf?H$O$3$s$J46$8(B:

% unzip -l counter.jpg 
Archive:  counter.jpg
  Length     Date   Time    Name
 --------    ----   ----    ----
    19952  07-09-04 18:03   Counter.class
      240  07-09-04 18:03   Gummy.class
        0  07-09-04 18:03   META-INF/
       71  07-09-04 18:03   META-INF/MANIFEST.MF
      902  07-09-04 18:03   VerifierBug.class
     3400  07-09-04 18:03   Worker.class
     1263  07-09-04 18:03   Xeyond.class
     8992  04-24-05 18:52   web.exe
 --------                   -------
    34820                   8 files

$B!!$3$N$&$A(B MANIFEST.MF $B$O(B

Manifest-Version: 1.0
Created-By: 1.3.0_02 (Sun Microsystems Inc.)

$B$H$$$&$@$1$N%U%!%$%k$J$N$G$$$$$N$G$9$,!"B>$OA4It%"%l$J%U%!%$%k$G$9!#(B Gummy.class $B$d(B web.exe $B$r%&%$%k%9H=Dj$7$J$$%W%m%@%/%H$,$1$C$3$&$"$k$N$GCm0U!#(B web.exe $B$K$D$$$F$O!"(BAVG / Dr.Web / F-Prot / Kaspersky / mks_vir / VBA32 / McAfee $B$O8!=P$7$?!#(BNorton AntiVirus 2005 (20050427.008) $B$d(B Trendmicro (Virus Scanner v3.1, VSAPI v7.510-1002 / Pattern number 2.604.00) $B$G$O8!=P$7$J$+$C$?!#(B

2005.05.02 $BDI5-(B:

$B!!(BHandler's Diary April 30th 2005 (SANS ISC) $B$K$h$k$H!"Ev3:%I%a%$%s$N(B DNS $B%(%s%H%j$,:o=|$5$l$?LOMM!#(B googkle.com $B$NB>$K$b$$$m$$$m$"$C$?$_$?$$$G$9!#(B

Adobe Reader$B!?(BAcrobat$B$K%;%-%e%j%F%#!&%[!<%k!$%O%s%0%"%C%W$5$;$i$l$k62$l$"$j(B

$B!!(B$B%"%I%S%7%9%F%`%: ($BIY;NDL(B, 2005.04.21)$B!#@=IJE:IU(B CD-ROM $BFb$N(B Acrobat Reader / Adobe Reader $B$K4X$9$kJ8=q!#(B

$B%a%G%#%"!&#J#R$J$I#L#A#N>c32!"%&%$%k%9BP:v$GIT6q9g(B

$B!!(B$B%&%$%k%9%Q%?!<%s%U%!%$%k$K4X$9$kLdBj$K$D$$$F(B ($B%H%l%s%I%^%$%/%m(B) $B$H$$$&%Z!<%8$,$G$-$F$$$^$9!#(B

• $B%&%$%k%9%Q%?!<%s%U%!%$%k$K4X$9$kLdBj$K$D$$$F(B ($B%H%l%s%I%^%$%/%m(B)
• $B%&%$%k%9%Q%?!<%s%U%!%$%k$NLdBj$K4X$9$k!"8=;~E@$^$G$ND4::7k2L$H:#8e$NBP:v$K$D$$$F!J%(%P!&%A%'%s2q8+FbMF$K$D$$$F!K(B ($B%H%l%s%I%^%$%/%m(B, 2005.04.26)

• $B%&%$%k%9%Q%?!<%s%U%!%$%k$NLdBj$K4X$9$k$*5RMM$X$NBP1~$K$D$$$F(B ($B%H%l%s%I%^%$%/%m(B, 2005.04.27)$B!#0J2<$@$=$&$G$9!#(B

  • $B8D?M(B: $B7@Ls4|4V$rL5=~$G(B 1 $B$+7n1dD9!#(B $B$5$i$K!"I|5l$,I,MW$@$C$?>l9g$O(B:
    • $BI|5lHqMQ$N$B7@Ls4|4V$rL5=~$G(B 3 $B$+7n1dD9(B
  • $BK!?M(B: $B7@Ls4|4V$rL5=~$G(B 1 $B$+7n1dD9(B
  • $B7n3[HG(B: $BBP1~L$Dj(B

$B$$$m$$$m(B (2005.03.19)

$B!!(BDSA-717-1 lsh-utils -- buffer overflow, typo (Debian GNU/Linux, 2005.04.27)

Stable CVS Version 1.11.20 Released! * Security Update *

• Red Hat Linux ES 3: RHSA-2005:387-06 cvs security update
• Turbolinux: TLSA-2005-51

mixi$B$K(BCSRF$B@H

$B!!(B$B!V$\$/$O$^$A$A$c$s!W(B $B!=!=CN$i$l$6$k(BCSRF$B967b(B (@IT, 2005.04.27)

Stable CVS Version 1.11.20 Released! * Security Update *

• Debian GNU/Linux: DSA-715-1 cvs

$B%a%G%#%"!&#J#R$J$I#L#A#N>c32!"%&%$%k%9BP:v$GIT6q9g(B

• $B8!>Z%W%m%;%9!">pJsEAC#BN@)!D!D;v7o$,%H%l%s%I%^%$%/%m$KFM$-$D$1$?2]Bj(B (ITmedia, 4/27)

  $B!!%H%l%s%I%^%$%/%m$G$O:#G/(B2$B7n$h$j!"EZF|$r=|$/KhF|!"%&%$%k%9%Q%?!<%s%U%!%$%k$r%"%C%W%G!<%H$9$kBN@)$r$H$C$F$$$?!#$@$,$=$l$HAjA08e$7$F!"%&%$%k%9$N8m8!=P$J$I$N%H%i%V%k$,2?EY$+Js9p$5$l$F$$$k!#(B
  
  $B!!Bg;0@n;a$O$3$NE@$K$D$$$F!V2a5n$K@8$8$?8m8!=P$NIT6q9g$O!"%F%9%H;~$N?M0YE*%_%9$K5/0x$9$k:#2s$NLdBj$H$OJL$NLdBj!W$H$7!"O"F|99?7$K$h$k%9%1%8%e!<%k$N2aL)2=$,$3$N%H%i%V%k$K1F6A$7$?$H$N8+J}$OH]Dj$7$?!#(B
  
  $B!!$7$+$7!";v7o$rF'$^$($?%W%m%;%98+D>$7$N0l4D$H$7$F!"8m8!=PLdBj$K$D$$$F$b=$@5$9$k$3$H$K$7$?$H$$$&!#@h$N%5%$%I%(%U%'%/%H%F%9%H$J$I$O$=$N0l4D$@!#!V$3$l$^$G!"4m$J$$$b$N$r8!=P$G$-$k$+$I$&$+$O%F%9%H$7$F$$$?$,!"4{B8$N%7%9%F%`$K$I$&$$$C$?1F6A$rM?$($k$+$K$D$$$F$O%F%9%H$7$F$$$J$+$C$?!W!JF1;a!K!#(B

• $B!ZB3!9Js![!V$b$&0lEY%A%c%s%9$r$/$@$5$$!W$H%H%l%s%I%^%$%/%m(BCEO$B$, ($BF|7P(B IT Pro, 4/26)

• $B%H%l%s%I%^%$%/%m$N%Q%?!<%s%U%!%$%k>c32!]%A%'%s(BCEO$B$, (Enterprise Watch, 4/27)

TCP/IP $B$N@H

$B!!I{:nMQ>pJs(B:

• $B%;%-%e%j%F%#99?7%W%m%0%i%`(B MS05-019 $B$^$?$O(B Windows Server 2003 Service Pack 1 $B$N%$%s%9%H!<%k8e!"%/%i%$%"%s%H$H%5!<%P!<4V$N%M%C%H%o!<%/@\B3$,5!G=$7$J$$$3$H$,$"$k(B (Microsoft)$B!#(B NTBugtraq $B$G=P$F$$$?(B MS05-019 Breaks VPN $B$NOC$N$h$&$G$9!#(BMS05-019 $B$rF~$l$k$H!"(Bpath MTU Discovery $B$,$&$^$/F0$+$J$$$3$H$,$"$k$_$?$$!#%5%]!<%H$+$i(B patch $B$rF~

  $B$3$N(B KB$B!"(B$B1Q8lHG(B$B$H(B$BF|K\8lHG(B$B$H$G>pJsNL$,0c$$$^$9$M!D!D!#(B

2005 $BG/(B 4 $B7n$N%;%-%e%j%F%#>pJs(B

$B!!(BWindows $B%$%s%9%H!<%i(B 3.1 $B$r%$%s%9%H!<%k$9$k$H!"=$@5%W%m%0%i%`$K$h$C$F$OE,MQ$K<:GT$9$k2DG=@-$,$"$k(B (updatecorp.co.jp)$B!#(B

Windows $B%$%s%9%H!<%i$N8F$S=P$7;~$K40A4%5%$%l%s%H(B $B%$%s%9%H!<%k$N$?$a$N%*%W%7%g%s$r;XDj$9$k$H!"E,MQ$K<:GT$7$^$9!#(B

$B!!(B4 $B7n$N(B Windows Update $B$NF|$K(B Windows $B%$%s%9%H!<%i(B 3.1 $B$bG[I[$5$l$F$$$^$9$,!"8_49@-$K>/!9Fq$,$"$k$h$&$G$9!#(B

$B!!$J$s$@$+(B old news $B$G$9$,!D!D(B

$B!!(BMicrosoft Word 2000 (Office 2000), Word 2002 (Office XP), Word 2003 (Office 2003) $B$K(B 2 $B$D$N7g4Y!#(B

• Microsoft Word $B$N%P%C%U%!%*!<%P!<%i%s(B - CVE: CAN-2004-0963

  Word 2000 / 2002 / 2003 $B$K(B buffer overflow $B$9$k7g4Y$,$"$j!"(B $B96N,(B Word $B%U%!%$%k$rFI$`9~$`$3$H$GG$0U$N%3!<%I$rMS Word$B$K4m81$J%;%-%e%j%F%#!&%[!<%k!$?.Mj$G$-$J$$%U%!%$%k$O3+$+$J$$(B $B$NOC!#(B

• Microsoft Word $B$N%P%C%U%!%*!<%P!<%i%s(B - CVE: CAN-2005-0558

  Word 2000 / 2002 / 2003 $B$K(B buffer overflow $B$9$k7g4Y$,$"$j!"(B $B96N,(B Word $B%U%!%$%k$rFI$`9~$`$3$H$GG$0U$N%3!<%I$r

$B!!(Bpatch $B$,$"$k$N$GE,MQ$9$l$P$h$$!#$U$D$&$N?M$O(B Office Update $B$r;H$&$N$,$h$$$@$m$&!#(B

$B%a%G%#%"!&#J#R$J$I#L#A#N>c32!"%&%$%k%9BP:v$GIT6q9g(B

$B!!:#2s$N;v>]$K$D$$$F$O!"F|7P(B IT Pro $B$N0lO"$N5-;v$,$$$A$P$s$^$H$^$C$F$$$k46$8$G$9!#(B

• $B!V%&%$%k%9%P%9%?!c32$,H/@8(B ($BF|7P(B IT Pro, 4/23)
• $B%H%l%s%I%^%$%/%m;v7o!"(B7$B;~4VD6$N%m%s%0%i%s2q8+$b!V%F%9%HO3$l860x$OITL@!W(B ($BF|7P(B IT Pro, 4/24)
• $B%H%l%s%I%^%$%/%m$,(B24$BF|$K:F$S6[5^2q8+!$!V(BXP SP2$B4D6-$G$O%F%9%H$;$:!W(B ($BF|7P(B IT Pro, 4/24)
• $B!V%H%l%s%I$N%j%=!<%9$r(B100$B!s;H$$BP=h!W!$%M%.(BCFO$B$,Bg5,LO>c32$rDD ($BF|7P(B IT Pro, 4/24)

$B!!$"$H!"$3$s$J5-;v$b(B:

• $B7P;: (ITmedia, 4/25)

$B!!F|K\@/I\$4MQC#!"$G$9$7$M$(!#(B

2005.04.26 $B?

$B!!%(%P!&%A%'%s

• $B!V:G8e$N(B1$BBf$,D>$k$^$G;d$NJs=7$O(B594$B1_$K!W%H%l%s%I%^%$%/%m$N%A%'%s(BCEO (Internet Watch, 4/26)
• $B%H%l%s%I%^%$%/%m$N%A%c%s ($BF|7P(B IT Pro, 4/26)

$B!!0lJ}!"%H%l%s%I%^%$%/%m$N%5%]!<%H>pJs$,BgI}$K99?7$5$l$F$$$^$9!#(B

• $B%&%$%k%9%Q%?!<%s%U%!%$%k(B2.594.00$B!JF|K\;~4V!'8aA0(B7:33$B:"8x3+!K$X$N%"%C%W%G!<%H$K$*$1$k!"%3%s%T%e!<%?$N(BCPU$B$,(B100%$B$K$J$k8=>]$K4X$7$F(B ($B%H%l%s%I%^%$%/%m(B)

$B!!(BWindows XP SP2$B!"(BWindows Server 2003 gold / SP1 $B$O7g4Y$,9b$$3NN($GH/8=$9$k$,!"(BWindows Me $B$d(B Microsoft Office XP ($B$rEc:\$7$?(B PC) $B$G$bDc$$3NN($G$O$"$k$,H/8=$9$k!"$H$5$l$F$$$^$9!#(B 2ch.net $B$G$O!V(BWindows 2000 $B$@$1$IH/8=$7$?!W$H$$$&Js9p$,=P$F$$$?$1$I!"$3$&$$$&$3$H$@$C$?$N$+$J!#(B

$B!!$^$?!"A49qL5NA=PD%%5%]!<%H$HA49q(B CD $BG[I[$r9T$&$=$&$G$9!#(B

• $BL5NA=PD%%5%]!<%H(B ($B%H%l%s%I%^%$%/%m(B)
• $BLdBj=$I|%D!<%k!J(BCD-ROM$B!K$NG[I[(B ($B%H%l%s%I%^%$%/%m(B)

TCP/IP $B$N@H

$B!!I{:nMQ>pJs(B:

• 897656 - Windows XP Service Pack 1 $B$, (Microsoft)$B!#%?%$%H%kD9$9$.!#(B

$B!!$J$s$@$+(B old news $B$G$9$,!D!D!#(B

$B!!(BMSN Messenger 6.2 / MSN Messenger 7.0 $B&B$K7g4Y!#:Y9)$7$?(B GIF $B%U%!%$%k$K$h$C$FG$0U$N%3!<%I$r

$B!!=$@5HG(B MSN Messenger 6.2 $B$,MQ0U$5$l$F$$$k$N$G%$%s%9%H!<%k$9$l$P$h$$!#(B MSN Messenger 7.0 $B@5<0HG$K%"%C%W%0%l!<%I$9$k$3$H$GBP1~$9$k$N$b$h$$$@$m$&!#(B

$B!!4XO"(B:

• CVE: CAN-2005-0562

$B!!$J$s$@$+(B old news $B$G$9$,!D!D(B

$B!!(BExchange 2000 SP3, Exchange 2003 gold / SP1 $B$K7g4Y!#(B SMTP $B%5!<%S%9$K$*$1$k!"FCDj$N3HD%%3%^%s%I$r=hM}$9$kItJ,(B (xlsasink.dll) $B$K(B buffer overflow $B$9$k7g4Y$,$"$k$?$a!"(Bremote $B$+$iG$0U$N%3!<%I$r

• Exchange 2000 $B$N>l9g$O!"L5G'>Z%f!<%6$,!"(B $B:Y9)$7$?(B SMTP $B3HD%%3%^%s%I$r;H$C$F(B local SYSTEM $B8"8B$rC%

• Exchange 2003 $B$N>l9g$O!"(BExchange Enterprise Servers $B$^$?$O(B Exchange Domain Server $B%0%k!<%W$K=jB0$9$k%"%+%&%s%H$GG'>Z$5$l$?967bZ$5$l$k$3$H$,I,MW$J$N$G!"(BExchange 2000 $B$HHf$Y$k$H4m81@-$ODc$$!#(B

$B!!(Bpatch $B$,$"$k$N$GE,MQ$9$l$P$h$$!#$?$@$7!"(BExchange 2000 $BMQ$N(B patch $B$r%$%s%9%H!<%k$9$k$K$O!"(B SP3 $B$NB>!"(B2004 $BG/(B 8 $B7n8x3+$N(B Exchange 2000 Server Service Pack 3 $B0J9_$N99?7%W%m%0%i%`$N%m!<%k%"%C%W(B $B$r$"$i$+$8$a%$%s%9%H!<%k$7$F$*$/I,MW$,$"$k!#(B $B$^$?(B patch $B$r%$%s%9%H!<%k$9$k$H!"(BExchange 2000 $B$N>l9g$G$b!"(BExchange 2003 $B$HF1MM$NG'>Z$,;vA0$KI,MW$H$J$k!#(B

$B!!4XO"(B:

• CVE: CAN-2005-0560
• Microsoft Exchange $B$G$N%j%b!<%H$+$i$N%;%-%e%j%F%#?/32(B (ISSKK)
• [Full-disclosure] MS05-021 Microsoft Exchange X-LINK2STATE Heap Overflow PoC

$B!!(BnProtect:Netizen Ver.2005.4.20.1 $B$h$jA0$K7g4Y!#(BnProtect:Netizen $B$N%"%C%W%G!<%H5!G=$K7g4Y$,$"$j!"G$0U$N%U%!%$%k$rG$0U$N>l=j$KJ]B8$5$;$k$J$I$N0-6H$,2DG=$H$J$k!#(BVer.2005.4.20.1 $B0J9_$G=$@5$5$l$F$$$k!#(BnProtect:Netizen $B$r5/F0$9$k$3$H$K$h$j!"<+F0E*$K99?7$5$l$k!#(B $B4XO"(B:

• JVN#AF02FB4B (JVN)
• nProtect Netizen$B$K@H (npro-shop.jp, 2005.04.25)

$B!!(BnProtect:Netizen $B$K$D$$$F$O0J2<$b;2>H(B:

• [memo:8284] $B%U%#%C%7%s%0:>5=BP:vMQ(BActiveX $B0J2<$N%9%l%C%I!#(B
• $B%;%-%e%j%F%#>& ($B9bLZ9@8w!w<+Bp$NF|5-(B, 2005.04.08)

$B!!(BSAISON CARD$B%[!<%`%Z!<%8$K$F(BnProtect Netizen$B%5!<%S%93+;O(B (npro-shop.jp) $B$G$9$+!D!D!#(B

• KDE $B4XO"!#(BKDE 3.3.2 / 3.4.0 $BMQ$N(B patch $B$,8x3+$5$l$F$$$k!#(B KDE 3.2 $B$K$b7g4Y$,$"$k$H$5$l$F$$$k$1$l$I(B patch $B$O$J$$!#(B

  • [KDE Security Advisory]: kimgio input validation errors
    CVE: CAN-2005-1046
  • [KDE Security Advisory]: Kommander untrusted code execution
    CVE: CAN-2005-0754

• gzip directory traversal vulnerability$B!#(B $B:Y9)$7$?(B gzip $B05=L%U%!%$%k$r(B gunzip -N $B$G?-D%$9$k$H!"0U?^$7$J$$>l=j$KJ]B8$5$l$k>l9g$,$"$kLOMM!#(B CVE: CAN-2005-1228

• cpio directory traversal vulnerability$B!#(B

• Security Update 2005-004 (Apple)$B!#7g4Y$r=$@5$5$l$?(B iSync 1.5 $BEP>l!#(BCVE: CAN-2005-0193$B!#(B [harden-mac:0717] $B$b;2>H!#(B

• JVN#A7DA6818: WebUD $B$K$*$1$kG$0U$N%W%m%0%i%`$, (JVN)$B!#(BWebUD $B$K4^$^$l$k(B ActiveX $B$K7g4Y$,$"$C$?LOMM!#4XO"(B:

  • $B%&%'%V!&%"%/%;%7%S%j%F%#;Y1g%D!<%k!V(BWebUD$B!W$NIT6q9g$X$NBP1~$K$D$$$F(B ($BIY;NDL(B, 2005.04.22)
  • $BB> ($B9bLZ9@8w!w<+Bp$NF|5-(B, 2005.04.23)

mixi$B$K(BCSRF$B@H

$B!!(B$BBgNL$N!V$O$^$A$A$c$s!W$r@8$_=P$7$?(BCSRF$B$N@H (ITmedia, 2005.04.23)

$B%a%G%#%"!&#J#R$J$I#L#A#N>c32!"%&%$%k%9BP:v$GIT6q9g(B

$B!!B3Js$J$I(B:

• $B%&%$%k%9%Q%?!<%s%U%!%$%k(B2.594.00$B!JF|K\;~4V!'(B4$B7n(B23$BF|8aA0(B7:33$B:"8x3+!K$X$N%"%C%W%G!<%H$K$*$1$k!"%3%s%T%e!<%?$N(BCPU$B$,(B100%$B$K$J$k8=>]$K4X$7$F(B ($B%H%l%s%I%^%$%/%m(B, $B:G=*99?7(B 2005.04.24 23:40)$B!#(B
  0120 $B$JEEOCHV9f$H!"Bg:e!&6e=#$NEEOCHV9f$,MQ0U$5$l$F$$$^$9!#(B
• $B%&%$%k%9%P%9%?! (NEC, 2005.04.24)
• $B#J#RKL3$F;$b%7%9%F%`>c32(B ($BKL3$F;?7J9(B, 2005.04.24 07:03)
• $BLd$$9g$o$;$O(B30$BK|7o$KC#$9$k@*$$!A%H%l%s%I%^%$%/%m$NDj5A%U%!%$%k>c32(B (Internet Watch, 2005.04.25 12:59)
• $BETD#$NCc32(B $BLd$$9g$o$;#2#9K|7o(B ($BCfF|(B, 2005.04.25)
• $BBg$-$J%H%i%V%kJs9p$J$7!!=5L@$1!"%H%l%s%I%^%$%/%m ($B;:7P(B, 2005.04.25 16:33)

Stable CVS Version 1.11.20 Released! * Security Update *

• Fedora Core: [SECURITY] Fedora Core 3 Update: cvs-1.11.17-6.FC3
• FreeBSD: FreeBSD Security Advisory FreeBSD-SA-05:05.cvs - Multiple vulnerabilities in CVS

$B%a%G%#%"!&#J#R$J$I#L#A#N>c32!"%&%$%k%9BP:v$GIT6q9g(B

$B!!B3Js$J$I!#(B@IT $B$N5-;v$,>\$7$$!#(B

• $B%&%$%k%9%P%9%?!<860x$G%7%9%F%`%@%&%s!"7nMKD+$OCm0U$r(B (@IT, 2005.04.23)
• $B%H%l%s%I%^%$%/%m!"(BPC$B$r (ITmedia, 2005.04.23 23:52)
• $B%&%$%k%9%P%9%?!p$K#P#C2q (asahi.com, 2005.04.23 23:40)$B!#(B $B;W$$$"$^$C$F=i4|2=$7$F$7$^$C$??M$O!">/$J$/$J$$$h$&$G$9$M!#(B
• $B6&F1DL?.%K%e!<%9B.Js(B

  $B!Z(B00:20$B![!!%&%$%k%9BP:v%=%U%HHNGd85$N%H%l%s%I%^%$%/%mc32$r5/$3$7$?%&%$%k%9Dj5A%U%!%$%k$N8x3+A0$KI,MW$J%F%9%H$r$7$J$+$C$?$3$H$rL@$i$+$K$7$?!#(B

• $B%&%$%k%9%=%U%H99?7#P#C>c32(B (NHK, 2005.04.23 20:57)

$B!!(B$B%&%$%k%9%Q%?!<%s%U%!%$%k(B2.594.00$B!JF|K\;~4V!'(BAM7:33$B:"8x3+!K$X$N%"%C%W%G!<%H$K$*$1$k!"%3%s%T%e!<%?$N(BCPU$B$,(B100%$B$K$J$k8=>]$K4X$7$F(B ($B%H%l%s%I%^%$%/%m(B) $B$O?o;~2~D{$5$l$F$$$k!#;v>]$O!"%&%$%k%98!:w%(%s%8%s$,(B 7.5xx $B$N>l9g$K$N$_H/@8$7$F$$$?$h$&$@!#$^$"!"$U$D$&$O(B 7.510 $B$r;H$C$F$$$k$O$:$J$o$1$J$N$@$,!#(B

$B860x(B
Ultra Protect$B05=L%U%!%$%k$r2rE`!"8!:w$9$k$?$a$N%Q%?!<%s%U%!%$%k$NLdBj(B
$B"(860x$K$D$$$F$O!"0z$-B3$-D4::Cf$G$9!#(B

$B!!(BUltra Protect $B$H$$$&$N$O!"(B$B$3$l(B $B$N$3$H$+(B?

$B!!$5$i$KB3Js(B:

• $B%&%$%k%9%P%9%?!c32(B (asahi.com, 2005.04.24 02:00)
• $B!V%&%$%k%9%P%9%?!c32!"860x$O%A%'%C%/%_%9(B ($BFIGd(B, 2005.04.24 01:36)

$B!!$5$i$KB3Js(B (22:53):

• $B%H%l%s%I%^%$%/%m$N%Q%?!<%s%U%!%$%kLdBj!"%@%V%k%A%'%C%/$NITHw$,:GBg$N860x(B (CNET, 2005.04.24 18:56)

  $B!!$7$+$70lHV$NLdBj$O!"%F%9%H9)Dx$KITHw$,$"$C$?$3$H$@!#DL>o!"%Q%?!<%s%U%!%$%k$r8x3+$9$kA0$K$O@=IJ$H(BOS$B$NAH$_9g$o$;$r3NG'$9$k$?$aJ#?t$N(BOS$B>e$GF0:n3NG'$r9T$&!#$7$+$7:#2s$O(BWindows XP Service Pack 2$B4D6-$K$*$1$k%F%9%H$,?M0YE*%_%9$K$h$j9T$o$l$J$+$C$?!#(B
  
  $B!!$^$?!"F1

  $B$"$jF@$M!A!A!A!A!#0"A3!"X3A3!#(B

  $B860x$O!VFs=E$N?M0YE*%_%9!W!!%&%$%k%9%P%9%?! (ITmedia, 2005.04.24 21:06)$B!#0lLd0lEz5-O?$"$j!#(B

  $B!=!=LdBj$N%Q%?!<%s%U%!%$%k$O$I$&$$$&BN@)$G3+H/$7$F$$$k$N$+!#%A%'%C%/$K4X$9$k%k!<%k$O$"$C$?$N$+!#(B
  
  $BBg;0@n<99TLr0w!!==?t?M$N%A!<%`$G!"8rBe@)$GF0$$$F$$$k!#C/$,%A%'%C%/%_%9$7$?$N$+$O$^$@J9$$$F$$$J$$!#%A%'%C%/$K$O873J$J%k!<%k$rE,MQ$7$F$*$j!"(BISO9002$B!J9q:]IJZ5,3J!K$K$bG'Dj$5$l$F$$$k!#(B

  $B==?t?M$7$+$$$J$$$N$+!D!D!#!V%H%l%s%I%^%$%/%m$O:G6a%H%i%V%kB3$-$G$7$?$,!"IJ

  $B!Z2q8+B.Js![!V%H%l%s%I$N%j%=!<%9$r(B100$B!s;H$$BP=h!W!$%M%.(BCFO$B$,Bg5,LO>c32$rDD ($BF|7P(B IT Pro, 2005.04.24)

  $B!!:#2s$N>c32$O!$%&%$%k%9%P%9%?!<$,(BOS$B>e$N%U%!%$%k$r(BUltraProtect$B$K$h$k05=L$,;\$5$l$F$$$k$+$I$&$+H=Dj$9$k%W%m%0%i%`$GH/@8$7$?!#FCDj$N>r7o$,$=$m$C$?(BOS$B>e$N%U%!%$%k$X$N8!:w$,L58B%k!<%W$H$J$C$F$7$^$&$N$G$"$k!#(BWindows XP$B$N(BService Pack2$B$G!$B>$N(BOS$B$h$jBg$-$J>c32$,5/$-$kM}M3$K$D$$$F$O!V(BWindows XP$B$N(BService Pack2$B$K$O>r7o$K3:Ev$9$k%U%!%$%k$,B?$$!W!JF1!K$H$$$&!#(B

  $B!VFCDj$N>r7o!W$K9gCW$9$k$h$&$J%U%!%$%k$r;}$D%"%W%j%1!<%7%g%s$,%$%s%9%H!<%k$5$l$F$$$k!"$H$$$C$?>l9g$K$O!"(BWindows XP SP2 / Server 2003 $B$G$J$/$F$bH/8=$9$k$N$G$7$g$&$M!#$^$?!"(B #727330 (slashodot.jp) $B$,;XE&$7$F$$$k$h$&$K!"%G%e%"%k%V!<%H4D6-$G$b3:Ev$7$=$&$G$9!#(B

  Handler's Diary April 23rd 2005 (SANS ISC)

  $B%&%$%k%9BP:v%=%U%HIT6q9g$G (TBS, 2005.04.24 16:31)$B!#1GA|$"$j!#(B

  $B%&%$%k%9BP:v%=%U%HIT6q9g$K$h$k%7%9%F%`>c32!!HNGd85$N2qe2s$kLd$$9g$o$;(B (FNN, 2005.04.24 18:08)$B!#1GA|$"$j!#(B

  $B%&%$%k%9%P%9%?! (asahi.com, 2005.04.24 21:01)

  $B%H%l%s%I%^%$%/%m@=IJ$r$4;HMQ$N$*5RMM$X%&%$%k%9%Q%?!<%s%U%!%$%k$K4X$9$kLdBj$N$4Js9p$H$*OM$S(B ($B%H%l%s%I%^%$%/%m(B, 2005.04.24)

$B!!(BWindows XP SP 2 / Server 2003 + $B%H%l%s%I%^%$%/%m(B $B%&%$%k%9%P%9%?!<(B + $B%Q%?!<%s%U%!%$%k(B 2.594.00 $B$NAH$_9g$o$;$G(B CPU 100% $B>uBV$K$J$C$F$7$^$&$?$a!"(B $B$$$/$D$b$NAH?%$GBg5,LO$J>c32$,H/@8$7$?LOMM!#(B $B%Q%?!<%s%U%!%$%k(B 2.596.00 $B$G=$@5$5$l$F$$$k!#(B

• $B%&%$%k%9%Q%?!<%s%U%!%$%k(B2.594.00$B!JF|K\;~4V!'(BAM7:30$B:"8x3+!K$X$N%"%C%W%G!<%H$K$*$1$k!"%3%s%T%e!<%?$N(BCPU$B$,(B100%$B$K$J$k8=>]$K4X$7$F(B ($B%H%l%s%I%^%$%/%m(B, 2005.04.23)
• Windows XP Service Pack 2 machines with critical patches and OfficeScan Corporate Edition (OSCE) starts to experience high CPU utilization after updating to Pattern 594 (Trendmicro OfficeScan Corporate Edition, 2005.04.23)

$B!!JsF;$K$h$k$H!">/$J$/$H$b6&F1DL?.!"D+F|?7J9!"FIGd?7J9!"F|K\7P:Q?7J9!";:7P?7J9!"?.G;KhF|?7J9!"(BJR $BElF|K\!":4@n5^JX!"Bg:e;T1DCO2c32$,H/@8$7$F$$$?LOMM!#(B

• $B%7%9%F%`>c32!'(B $B%H%l%s%I%^%$%/%m$N%&%$%k%9%=%U%H$,860x(B ($BKhF|(B, 2005.04.23)
• $B6&F1!&D+F|$J$I%7%9%F%`>c32!!%&%$%k%9BP:v%=%U%H860x(B (asahi.com, 2005.04.23)
• $B#L#A#N%H%i%V%kAj ($BCfF|?7J9(B, 2005.04.23)
• JR$BElF|K\$dBgc32Aj (FNN, 2005.04.23 18:30)$B!#1GA|$"$j!#(B
• $B%H%l%s%I%^%$%/%m ($B;:7P?7J9(B, 2005.04.23 20:06)
• $B6&F1DL?.%K%e!<%9B.Js(B

$B!!(BWindows XP SP2 / Server 2003 $B$r:NMQ$7!"$+$D%Q%?!<%s%U%!%$%k$bB(9o99?7$7$F$$$k$h$&$JAH?%$G$@$11F6A$,H/8=$7$F$$$k$N$O!"$J$s$H$bHiFy$JOC$G$O$"$k!#(B

$BJ$J$I$K$O%H%i%V%k$O$J$/!"6bM;5!4X$N8=6b<+F0MBJ'5!!J#A#T#M!K$X$N>c32Js9p$b$J$$$H$$$&!#(B

$B!!$3$l$i$G$O(B XP SP2 / Server 2003 $B$r;H$C$F$$$J$$$N$+!"$"$k$$$O%Q%?!<%s%U%!%$%k$rB(9o99?7$7$F$$$k$o$1$G$O$J$$$N$+!#>/$J$/$H$b(B ATM $BJ}LL$O$^$@$^$@(B NT 4.0 $B$,B?$$$H;W$&$1$I!#(B

$B!!EZMKF|$@$C$?$?$a!"EZMKF|$G$b2TF/$7$F$$$k$h$&$JAH?%(B ($B%$%s%U%i7O(B) $B$G$7$+I=N)$C$?>c32$,H/8=$7$J$+$C$?$h$&$@$,!"J?F|$G$"$l$P$b$C$HBg5,LO$J>u67$K$J$C$F$$$?$H9M$($i$l$k!#@5D>!"$3$N$H$3$m$N%H%l%s%I%^%$%/%mJ}LL$OIT6q9g$,B?$9$.$k$h$&$K;W$&$N$@$,!"%H%l%s%I%^%$%/%m@=IJ$rF3F~!&1?MQ$7$F$$$kAH?%$NCf$N?M$O$I$N$h$&$K9M$($F$$$k$s$@$m$&!#(B

$B!!4XO"(B:

• $B%&%$%k%9%P%9%?! (Internet Watch, 2005.04.23)

• $B%&%$%k%9%P%9%?!<(B2005 Part19 (2ch.net)$B!#(B479 $B0J9_(B$B$+!#(B
  from: 553

  $B2q
  $B!V$$$+$J$k>l9g$G$"$C$F$b%"%s%A%&%#%k%9%=%U%H$r2r=|$7$F%Q%=%3%s$rA`:n$7$F$O$J$i$J$$!W(B
  
  $B$H$$$&9`L\$,$"$k$N$G$M!#(B $B0U30$K$3$N9`L\$C$F$_$J$5$s$N2qe$2$?$o$1$G$9$h!#(B
  $B$3$l$G2r=|$7$F!"%&%#%k%9$K$G$b46@w$7$?$i!"D(H3$b$N$G$9$h!#(B

  $B$3$&$$$&AH?%$O>/$J$/$J$$$H;W$o$l$k$,!":#2s$N$h$&$J;vBV$K$O$I$N$h$&$KBP=h$9$k$3$H$K$J$C$F$$$k$N$+!"3NG'$7$?J}$,$h$$$@$m$&!#(B

• $B%&%$%k%9%P%9%?!<(B2005 Part20 (2ch.net)
• $B%&%$%k%9%P%9%?!<(B2005 Part21 (2ch.net)
• $B%&%$%k%9%P%9%?!<(B2005 Part22 (2ch.net)
• $B%&%$%k%9%P%9%?!<(B2005 Part23 (2ch.net)
• $B!Z(BCPU$B![%&%$%k%9%P%9%?!<$GIT6q9gH/@8!Z(B100%$B![(B (2ch.net)
• $B!Zc32H/@8(B (2ch.net)
• [memo:8305] $B0J2<$N%9%l%C%I(B
• $B%&%$%k%9%P%9%?!<$NDj5A%U%!%$%k99?7$G!"(BCPU$B;HMQN($,(B100%$B$K$J$kIT6q9g(B (slashdot.jp)
• $B%H%l%s%I%^%$%/%ml9g!"%3%s%T%e!<%?$NF0:n$,Cx$7$/Dc2<$9$k8=>]$K$D$$$F(B ($B%^%$%/%m%=%U%H(B $B%H%i%V%k!&%a%s%F%J%s%9B.Js(B, 2005.04.23)

2005.04.24 $BDI5-(B:

$B!!B3Js$J$I!#(B@IT $B$N5-;v$,>\$7$$!#(B

• $B%&%$%k%9%P%9%?!<860x$G%7%9%F%`%@%&%s!"7nMKD+$OCm0U$r(B (@IT, 2005.04.23)
• $B%H%l%s%I%^%$%/%m!"(BPC$B$r (ITmedia, 2005.04.23 23:52)
• $B%&%$%k%9%P%9%?!p$K#P#C2q (asahi.com, 2005.04.23 23:40)$B!#(B $B;W$$$"$^$C$F=i4|2=$7$F$7$^$C$??M$O!">/$J$/$J$$$h$&$G$9$M!#(B
• $B6&F1DL?.%K%e!<%9B.Js(B

  $B!Z(B00:20$B![!!%&%$%k%9BP:v%=%U%HHNGd85$N%H%l%s%I%^%$%/%mc32$r5/$3$7$?%&%$%k%9Dj5A%U%!%$%k$N8x3+A0$KI,MW$J%F%9%H$r$7$J$+$C$?$3$H$rL@$i$+$K$7$?!#(B

• $B%&%$%k%9%=%U%H99?7#P#C>c32(B (NHK, 2005.04.23 20:57)

$B!!(B$B%&%$%k%9%Q%?!<%s%U%!%$%k(B2.594.00$B!JF|K\;~4V!'(BAM7:33$B:"8x3+!K$X$N%"%C%W%G!<%H$K$*$1$k!"%3%s%T%e!<%?$N(BCPU$B$,(B100%$B$K$J$k8=>]$K4X$7$F(B ($B%H%l%s%I%^%$%/%m(B) $B$O?o;~2~D{$5$l$F$$$k!#;v>]$O!"%&%$%k%98!:w%(%s%8%s$,(B 7.5xx $B$N>l9g$K$N$_H/@8$7$F$$$?$h$&$@!#$^$"!"$U$D$&$O(B 7.510 $B$r;H$C$F$$$k$O$:$J$o$1$J$N$@$,!#(B

$B860x(B
Ultra Protect$B05=L%U%!%$%k$r2rE`!"8!:w$9$k$?$a$N%Q%?!<%s%U%!%$%k$NLdBj(B
$B"(860x$K$D$$$F$O!"0z$-B3$-D4::Cf$G$9!#(B

$B!!(BUltra Protect $B$H$$$&$N$O!"(B$B$3$l(B $B$N$3$H$+(B?

$B!!$5$i$KB3Js(B:

• $B%&%$%k%9%P%9%?!c32(B (asahi.com, 2005.04.24 02:00)
• $B!V%&%$%k%9%P%9%?!c32!"860x$O%A%'%C%/%_%9(B ($BFIGd(B, 2005.04.24 01:36)

2005.04.24 22:53 $BDI5-(B:

$B!!$5$i$KB3Js(B:

• $B%H%l%s%I%^%$%/%m$N%Q%?!<%s%U%!%$%kLdBj!"%@%V%k%A%'%C%/$NITHw$,:GBg$N860x(B (CNET, 2005.04.24 18:56)

  $B!!$7$+$70lHV$NLdBj$O!"%F%9%H9)Dx$KITHw$,$"$C$?$3$H$@!#DL>o!"%Q%?!<%s%U%!%$%k$r8x3+$9$kA0$K$O@=IJ$H(BOS$B$NAH$_9g$o$;$r3NG'$9$k$?$aJ#?t$N(BOS$B>e$GF0:n3NG'$r9T$&!#$7$+$7:#2s$O(BWindows XP Service Pack 2$B4D6-$K$*$1$k%F%9%H$,?M0YE*%_%9$K$h$j9T$o$l$J$+$C$?!#(B
  
  $B!!$^$?!"F1

  $B$"$jF@$M!A!A!A!A!#0"A3!"X3A3!#(B

  $B860x$O!VFs=E$N?M0YE*%_%9!W!!%&%$%k%9%P%9%?! (ITmedia, 2005.04.24 21:06)$B!#0lLd0lEz5-O?$"$j!#(B

  $B!=!=LdBj$N%Q%?!<%s%U%!%$%k$O$I$&$$$&BN@)$G3+H/$7$F$$$k$N$+!#%A%'%C%/$K4X$9$k%k!<%k$O$"$C$?$N$+!#(B
  
  $BBg;0@n<99TLr0w!!==?t?M$N%A!<%`$G!"8rBe@)$GF0$$$F$$$k!#C/$,%A%'%C%/%_%9$7$?$N$+$O$^$@J9$$$F$$$J$$!#%A%'%C%/$K$O873J$J%k!<%k$rE,MQ$7$F$*$j!"(BISO9002$B!J9q:]IJZ5,3J!K$K$bG'Dj$5$l$F$$$k!#(B

  $B==?t?M$7$+$$$J$$$N$+!D!D!#!V%H%l%s%I%^%$%/%m$O:G6a%H%i%V%kB3$-$G$7$?$,!"IJ

  $B!Z2q8+B.Js![!V%H%l%s%I$N%j%=!<%9$r(B100$B!s;H$$BP=h!W!$%M%.(BCFO$B$,Bg5,LO>c32$rDD ($BF|7P(B IT Pro, 2005.04.24)

  $B!!:#2s$N>c32$O!$%&%$%k%9%P%9%?!<$,(BOS$B>e$N%U%!%$%k$r(BUltraProtect$B$K$h$k05=L$,;\$5$l$F$$$k$+$I$&$+H=Dj$9$k%W%m%0%i%`$GH/@8$7$?!#FCDj$N>r7o$,$=$m$C$?(BOS$B>e$N%U%!%$%k$X$N8!:w$,L58B%k!<%W$H$J$C$F$7$^$&$N$G$"$k!#(BWindows XP$B$N(BService Pack2$B$G!$B>$N(BOS$B$h$jBg$-$J>c32$,5/$-$kM}M3$K$D$$$F$O!V(BWindows XP$B$N(BService Pack2$B$K$O>r7o$K3:Ev$9$k%U%!%$%k$,B?$$!W!JF1!K$H$$$&!#(B

  $B!VFCDj$N>r7o!W$K9gCW$9$k$h$&$J%U%!%$%k$r;}$D%"%W%j%1!<%7%g%s$,%$%s%9%H!<%k$5$l$F$$$k!"$H$$$C$?>l9g$K$O!"(BWindows XP SP2 / Server 2003 $B$G$J$/$F$bH/8=$9$k$N$G$7$g$&$M!#$^$?!"(B #727330 (slashodot.jp) $B$,;XE&$7$F$$$k$h$&$K!"%G%e%"%k%V!<%H4D6-$G$b3:Ev$7$=$&$G$9!#(B

  Handler's Diary April 23rd 2005 (SANS ISC)

  $B%&%$%k%9BP:v%=%U%HIT6q9g$G (TBS, 2005.04.24 16:31)$B!#1GA|$"$j!#(B

  $B%&%$%k%9BP:v%=%U%HIT6q9g$K$h$k%7%9%F%`>c32!!HNGd85$N2qe2s$kLd$$9g$o$;(B (FNN, 2005.04.24 18:08)$B!#1GA|$"$j!#(B

  $B%&%$%k%9%P%9%?! (asahi.com, 2005.04.24 21:01)

  $B%H%l%s%I%^%$%/%m@=IJ$r$4;HMQ$N$*5RMM$X%&%$%k%9%Q%?!<%s%U%!%$%k$K4X$9$kLdBj$N$4Js9p$H$*OM$S(B ($B%H%l%s%I%^%$%/%m(B, 2005.04.24)

2005.04.25 $BDI5-(B:

$B!!B3Js$J$I(B:

• $B%&%$%k%9%Q%?!<%s%U%!%$%k(B2.594.00$B!JF|K\;~4V!'(B4$B7n(B23$BF|8aA0(B7:33$B:"8x3+!K$X$N%"%C%W%G!<%H$K$*$1$k!"%3%s%T%e!<%?$N(BCPU$B$,(B100%$B$K$J$k8=>]$K4X$7$F(B ($B%H%l%s%I%^%$%/%m(B, $B:G=*99?7(B 2005.04.24 23:40)$B!#(B
  0120 $B$JEEOCHV9f$H!"Bg:e!&6e=#$NEEOCHV9f$,MQ0U$5$l$F$$$^$9!#(B
• $B%&%$%k%9%P%9%?! (NEC, 2005.04.24)
• $B#J#RKL3$F;$b%7%9%F%`>c32(B ($BKL3$F;?7J9(B, 2005.04.24 07:03)
• $BLd$$9g$o$;$O(B30$BK|7o$KC#$9$k@*$$!A%H%l%s%I%^%$%/%m$NDj5A%U%!%$%k>c32(B (Internet Watch, 2005.04.25 12:59)
• $BETD#$NCc32(B $BLd$$9g$o$;#2#9K|7o(B ($BCfF|(B, 2005.04.25)
• $BBg$-$J%H%i%V%kJs9p$J$7!!=5L@$1!"%H%l%s%I%^%$%/%m ($B;:7P(B, 2005.04.25 16:33)

2005.04.26 $BDI5-(B:

$B!!:#2s$N;v>]$K$D$$$F$O!"F|7P(B IT Pro $B$N0lO"$N5-;v$,$$$A$P$s$^$H$^$C$F$$$k46$8$G$9!#(B

• $B!V%&%$%k%9%P%9%?!c32$,H/@8(B ($BF|7P(B IT Pro, 2005.04.23)
• $B%H%l%s%I%^%$%/%m;v7o!"(B7$B;~4VD6$N%m%s%0%i%s2q8+$b!V%F%9%HO3$l860x$OITL@!W(B ($BF|7P(B IT Pro, 4/24)
• $B%H%l%s%I%^%$%/%m$,(B24$BF|$K:F$S6[5^2q8+!$!V(BXP SP2$B4D6-$G$O%F%9%H$;$:!W(B ($BF|7P(B IT Pro, 2005.04.24)
• $B!V%H%l%s%I$N%j%=!<%9$r(B100$B!s;H$$BP=h!W!$%M%.(BCFO$B$,Bg5,LO>c32$rDD ($BF|7P(B IT Pro, 2005.04.24)

$B!!$"$H!"$3$s$J5-;v$b(B:

• $B7P;: (ITmedia, 2005.04.25)

$B!!F|K\@/I\$4MQC#!"$G$9$7$M$(!#(B

2005.04.26 $B?

$B!!%(%P!&%A%'%s

• $B!V:G8e$N(B1$BBf$,D>$k$^$G;d$NJs=7$O(B594$B1_$K!W%H%l%s%I%^%$%/%m$N%A%'%s(BCEO (Internet Watch, 2005.04.26)
• $B%H%l%s%I%^%$%/%m$N%A%c%s ($BF|7P(B IT Pro, 2005.04.26)

$B!!0lJ}!"%H%l%s%I%^%$%/%m$N%5%]!<%H>pJs$,BgI}$K99?7$5$l$F$$$^$9!#(B

• $B%&%$%k%9%Q%?!<%s%U%!%$%k(B2.594.00$B!JF|K\;~4V!'8aA0(B7:33$B:"8x3+!K$X$N%"%C%W%G!<%H$K$*$1$k!"%3%s%T%e!<%?$N(BCPU$B$,(B100%$B$K$J$k8=>]$K4X$7$F(B ($B%H%l%s%I%^%$%/%m(B)

$B!!(BWindows XP SP2$B!"(BWindows Server 2003 gold / SP1 $B$O7g4Y$,9b$$3NN($GH/8=$9$k$,!"(BWindows Me $B$d(B Microsoft Office XP ($B$rEc:\$7$?(B PC) $B$G$bDc$$3NN($G$O$"$k$,H/8=$9$k!"$H$5$l$F$$$^$9!#(B 2ch.net $B$G$O!V(BWindows 2000 $B$@$1$IH/8=$7$?!W$H$$$&Js9p$,=P$F$$$?$1$I!"$3$&$$$&$3$H$@$C$?$N$+$J!#(B

$B!!$^$?!"A49qL5NA=PD%%5%]!<%H$HA49q(B CD $BG[I[$r9T$&$=$&$G$9!#(B

• $BL5NA=PD%%5%]!<%H(B ($B%H%l%s%I%^%$%/%m(B)
• $BLdBj=$I|%D!<%k!J(BCD-ROM$B!K$NG[I[(B ($B%H%l%s%I%^%$%/%m(B)

2005.04.27 $BDI5-(B:

• $B8!>Z%W%m%;%9!">pJsEAC#BN@)!D!D;v7o$,%H%l%s%I%^%$%/%m$KFM$-$D$1$?2]Bj(B (ITmedia, 2005.04.27)

  $B!!%H%l%s%I%^%$%/%m$G$O:#G/(B2$B7n$h$j!"EZF|$r=|$/KhF|!"%&%$%k%9%Q%?!<%s%U%!%$%k$r%"%C%W%G!<%H$9$kBN@)$r$H$C$F$$$?!#$@$,$=$l$HAjA08e$7$F!"%&%$%k%9$N8m8!=P$J$I$N%H%i%V%k$,2?EY$+Js9p$5$l$F$$$k!#(B
  
  $B!!Bg;0@n;a$O$3$NE@$K$D$$$F!V2a5n$K@8$8$?8m8!=P$NIT6q9g$O!"%F%9%H;~$N?M0YE*%_%9$K5/0x$9$k:#2s$NLdBj$H$OJL$NLdBj!W$H$7!"O"F|99?7$K$h$k%9%1%8%e!<%k$N2aL)2=$,$3$N%H%i%V%k$K1F6A$7$?$H$N8+J}$OH]Dj$7$?!#(B
  
  $B!!$7$+$7!";v7o$rF'$^$($?%W%m%;%98+D>$7$N0l4D$H$7$F!"8m8!=PLdBj$K$D$$$F$b=$@5$9$k$3$H$K$7$?$H$$$&!#@h$N%5%$%I%(%U%'%/%H%F%9%H$J$I$O$=$N0l4D$@!#!V$3$l$^$G!"4m$J$$$b$N$r8!=P$G$-$k$+$I$&$+$O%F%9%H$7$F$$$?$,!"4{B8$N%7%9%F%`$K$I$&$$$C$?1F6A$rM?$($k$+$K$D$$$F$O%F%9%H$7$F$$$J$+$C$?!W!JF1;a!K!#(B

• $B!ZB3!9Js![!V$b$&0lEY%A%c%s%9$r$/$@$5$$!W$H%H%l%s%I%^%$%/%m(BCEO$B$, ($BF|7P(B IT Pro, 2005.04.26)

• $B%H%l%s%I%^%$%/%m$N%Q%?!<%s%U%!%$%k>c32!]%A%'%s(BCEO$B$, (Enterprise Watch, 2005.04.27)

2005.04.28 $BDI5-(B:

$B!!(B$B%&%$%k%9%Q%?!<%s%U%!%$%k$K4X$9$kLdBj$K$D$$$F(B ($B%H%l%s%I%^%$%/%m(B) $B$H$$$&%Z!<%8$,$G$-$F$$$^$9!#(B

• $B%&%$%k%9%Q%?!<%s%U%!%$%k$K4X$9$kLdBj$K$D$$$F(B ($B%H%l%s%I%^%$%/%m(B)
• $B%&%$%k%9%Q%?!<%s%U%!%$%k$NLdBj$K4X$9$k!"8=;~E@$^$G$ND4::7k2L$H:#8e$NBP:v$K$D$$$F!J%(%P!&%A%'%s2q8+FbMF$K$D$$$F!K(B ($B%H%l%s%I%^%$%/%m(B, 2005.04.26)

• $B%&%$%k%9%Q%?!<%s%U%!%$%k$NLdBj$K4X$9$k$*5RMM$X$NBP1~$K$D$$$F(B ($B%H%l%s%I%^%$%/%m(B, 2005.04.27)$B!#0J2<$@$=$&$G$9!#(B

  • $B8D?M(B: $B7@Ls4|4V$rL5=~$G(B 1 $B$+7n1dD9!#(B $B$5$i$K!"I|5l$,I,MW$@$C$?>l9g$O(B:
    • $BI|5lHqMQ$N$B7@Ls4|4V$rL5=~$G(B 3 $B$+7n1dD9(B
  • $BK!?M(B: $B7@Ls4|4V$rL5=~$G(B 1 $B$+7n1dD9(B
  • $B7n3[HG(B: $BBP1~L$Dj(B

2005.05.01 $BDI5-(B:

$B!!4XO"5-;v(B:

• $B!V:#8e$N%S%8%M%9$K1F6A!W$O(B3$B3d6/!"%H%l%s%I%^%$%/%m$NG'Dj%Q!<%H%J!<$K6[5^D4::(B ($BF|7P(B IT Pro, 2005.04.28)

  $B%Q!<%H%J!<$N4V$+$i$O!V?WB.$JBP1~$GHo32$r:G>.8B$K;_$a$?!W$J$I$H!">c32H/@88e$N%H%l%s%I%^%$%/%m$N0lO"$NBP1~$KBP$7$FI>2A$9$k%3%a%s%H$,L\N)$C$?!#(B

  $B:#2s$N>u67$,J?F|$KH/@8$7$F$b$J$*!V?WB.$JBP1~$GHo32$r:G>.8B$K;_$a$?!W$H8@$($?$N$+$I$&$+!"%Q!<%H%J!<$NCf$N?M$O$h$/9M$($?J}$,$$$$$H;W$&$N$@$,!D!D!#(B

• $B%&%$%k%9BP:v%=%U%H!"$=$l$G$b<+F099?7$O7QB3$9$Y$-$+H]$+!)(B (ITmedia, 2005.04.28)$B!#(B

  $B>/$J$/$H$b;d$NH>7B(B 50m $B0JFb$K$D$$$F$O!"<+F099?7$r;_$a$k$D$b$j$O$J$$$G$9!#(B

2005.06.27 $BDI5-(B:

• $B%&%$%k%9%Q%?!<%s%U%!%$%k$K4X$9$kLdBj$N$4Js9p$H!":#8e$N ($B%H%l%s%I%^%$%/%m(B, 2005.06.23)
• $B0BA4$J%G%8%?%k>pJs$r8r49$G$-$k@$3&$N ($B%H%l%s%I%^%$%/%m(B)
• $B!Z6[5^O":\!!:#K\Ev$KI,MW$J%;%-%e%j%F%#BP:v![!J(B4$B!K(B $B%H%l%s%ILdBj$,;D$7$?6571(!(!C10l%=%U%H$K0MB8$9$k4m81@-(B ($BF|7P(B IT Pro, 2005.06.15)
• $B!Z6[5^%$%s%?%S%e! ($BF|7P(B IT Pro, 2005.06.23)
• $B%H%l%s%I%^%$%/%m!$%G%$%j!<$G$N%Q%?!<%s!&%"%C%W%G!<%H!&%5!<%S%9$r(B7$B7n(B11$BF|$K:F3+(B ($BF|7P(B IT Pro, 2005.06.23)

$B!!(BIE 5.01 / 5.5 / 6 $B$K!"?7$?$J(B 3 $B$D$N7g4Y!#(B

• DHTML $B%*%V%8%'%/%H(B $B%a%b%j$NGKB;$N@HCAN-2005-0553

  IE 5.01 / 5.5 / 6 $B$K7g4Y!#(B DHTML $B$K$*$1$k%*%V%8%'%/%H$d%a%=%C%I$NuBV$,H/@8!#$3$l$rMxMQ$9$k$H!"96N,(B web $B%Z!<%8$d96N,(B HTML $B%a!<%k$K@_CV$7$?(B JavaScript $B$rMxMQ$7$F!"(BIE $B>e$GG$0U$N%3!<%I$r

  $B4XO"(B:

  • iDEFENSE Security Advisory 04.12.05: Microsoft Internet Explorer DHTML Engine Race Condition Vulnerability
  • Technical details for DHTML Object memory corruption vulnerability (MS05-20) (Berend-Jan Wever)$B!#(BPoC $B%3!<%I$b7G:\$5$l$F$$$k!#(B

• URL $B2r@O%a%b%j$NGKB;$N@HCAN-2005-0554

  IE 5.01 / 5.5 / 6 $B$K7g4Y!#(B URL $BCf$KD9Bg$J%[%9%HL>$r5-=R$9$k$H%R!<%WGK2u$,H/@8!#(B $B$3$l$rMxMQ$9$k$H!"96N,(B web $B%Z!<%8$d96N,(B HTML $B%a!<%k$rMxMQ$7$F!"(BIE $B>e$GG$0U$N%3!<%I$r

  $B4XO"(B:

  • iDEFENSE Security Advisory 04.12.05: Microsoft Windows Internet Explorer Long Hostname Heap Corruption Vulnerability
  • [Full-disclosure] Internet Explorer wininet.dll URL parsing memory corruption technical details

• $B%3%s%F%s%D(B $B%"%I%P%$%6(B $B%a%b%j$NGKB;$N@HCAN-2005-0555

  IE 5.01 / 5.5 / 6 $B$K7g4Y!#(B $B%3%s%F%s%D$N5,@)%U%!%$%k(B (.rat $B%U%!%$%k(B) $B$N=hM}$K$*$$$F(B buffer overflow $B$9$k7g4Y$,B8:_!#(B $B$3$N$?$a!"96N,(B .rat $B%U%!%$%k$rDL$8$F!"G$0U$N%3!<%I$r

$B!!=$@5%W%m%0%i%`$,$"$k$N$GE,MQ$9$l$P$h$$!#(B $B$A$J$_$K=$@5%W%m%0%i%`$K$O!"%;%-%e%j%F%#=$@5$@$1$G$O$J$/!"Hs%;%-%e%j%F%#$N=$@5$b4^$^$l$F$$$k!#(B $BHs%;%-%e%j%F%#=$@5$bE,MQ$7$?$$>l9g$O!"(B897225 - Internet Explorer 6 Service Pack 1 $BMQ$NN_@QE*$J%;%-%e%j%F%#99?7%W%m%0%i%`$K4^$^$l$k=$@5%W%m%0%i%`$r%$%s%9%H!<%k$9$kJ}K!(B (Microsoft) $B$K=>$C$F:n6H$9$k$3$H!#(B $B4^$^$l$F$$$kHs%;%-%e%j%F%#=$@5$N0lMw$O$3$A$i(B: 890923 - [MS05-020] Internet Explorer $BMQ$NN_@QE*$J%;%-%e%j%F%#99?7%W%m%0%i%`(B (Microsoft)

NISCC Vulnerability Advisory ICMP - 532967: Vulnerability Issues in ICMP packets with TCP payloads

$B!!(BICMP attacks against TCP (Proof-of-Concept code) (MS05-019, CISCO:20050412)

TCP/IP $B$N@H

$B!!(BWindows Malformed IP Options DoS Exploit (MS05-019)$B!#(B

$B%a%C%;!<%8(B $B%-%e!<$N@H

$B!!(BMS05-017$B!?(B892944 $B%a%C%;!<%8!&%-%e!<$N@H (@IT, 2005.04.19) $B$K$h$k$H!"(B

$B$?$@$7(BDA Lab$B$G8!>Z$7$?$H$3$m!"(BWindows XP SP1$B!?(BSP1a$B$G$O!"L@<(E*$K(BMSMQ$B$r%$%s%9%H!<%k$7$F$$$J$$>l9g$G$b!"(BWindows Update$B$G(BMSMQ$B$r9=@.$9$k%U%!%$%k$N0lIt$,8!=P$5$l!"(BMSMQ$B$r%$%s%9%H!<%k$7$F$$$J$$4D6-$G$b!"(BWindows Update$B$G(BMS05-017$B$NE,MQ$,I,MW$@$HH=Dj$5$l$k>l9g$,$"$k!#6qBNE*$J1F6A$OITL@$@$,!"$3$N>l9g$OG0$N$?$a(BMS05-017$B$rE,MQ$7$F$*$$$?J}$,0B?4$@$m$&!#(B

$B$@$=$&$G$9!#(BSugawara $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B

mixi$B$K(BCSRF$B@H

$B!!F?L>4uK>$5$s$+$i(B ($B>pJs$"$j$,$H$&$4$6$$$^$9(B):

Ver.3 $B$KBP$9$kBP:v$O$$$A$*$&(Bmixi$B$G$b(B $B$N2U=j$K4X$7$F$OF1MM$N967b$,DLMQ$9$k$H$N$3$H!#(B
http://d.hatena.ne.jp/mixi_love/20050420/p6

$B$J$*!"(Bmixi $B$G$O$3$l$^$G$K2?EY$b(B CSRF $B$N@Hl$7$N$.$NBP1~$G=*$o$C$F$$$^$9!#(B

$B;d$,CN$C$F$$$k$@$1$G$b(B

2005$BG/(B2$B7n(B mixi $B$X$N>7BT5!G=$G(B CSRF
http://yamagata.int21h.jp/d/?date=20050217#p04

2005$BG/(B3$B7n(B
$B%^%$%_%/%7%#$N6/@):o=|$*$h$S%3%_%e%K%F%#$N6/@)B`2q$K4X$9$k(BCSRF$B$r(Bmixi$B$KJs9p$9$k$b!"CfESH>C<$JBP:v$N$_!#(B

2005$BG/(B4$B7n(B
$B%^%$%_%/%7%#$N%j%/%(%9%H$N6/@)Aw?.$K4X$9$k(BCSRF$B$r(B mixi$B$KJs9p$9$k$bJVEz$J$7!#(BIPA$B$XO"Mm!"
$B$H$$$&$h$&$J>u67$G$9!#(B

telnet $B%/%i%$%"%s%H$KJ#?t$N7g4Y(B

$B!!(BGentoo, Vine, Debian, Heimdal $BDI2C!#(B

Microsoft$B$N(BJet$B%G!<%?%Y!<%9%(%s%8%s$K@H

$B!!(BExploit-MSJet.gen ($B%^%+%U%#!<(B)

• P.o.C Exploit Code for BitchX (g-0.org)$B!#(BBitchX $B$,(B suid root $B$GF~$C$F$$$k4D6-$NJ}!"$4Cm0U$r!#(B

• JVN#97757029: w3ml $B$K$*$1$k%/%m%9%5%$%H%9%/%j%W%F%#%s%0$N@H (JVN)$B!#(BSubject: $B$N=|@w$,IT==J,$@$C$?$=$&$G!"(B w3ml 0.4-20050413 $B$G=$@5$5$l$F$$$^$9!#(B

• PosgreSQL <=8.0.1 Remote Reboot Exploit$B!#(B CAN-2005-0247 $B$N96N,%W%m%0%i%`$G$7$g$&$+!#(B

• Windows 2000$B$N%(%/%9%W%m!<%i$KG$0U$N%3!<%I$, (Internet Watch)$B!#(B GreyMagic Security Advisory GM#015-IE $B$N7o!#%G%b%U%!%$%k$b8x3+$5$l$F$$$^$9!#(BWord $B%I%-%e%a%s%H$N!V:n@.e$G$=$N(B Word $B%I%-%e%a%s%H$rA*Br$9$k$H!V:n@.

  $B!!1F6A$9$k$N$O(B Windows 2000 $B$N(B Explorer $B$N$_!#(BExplorer $B$N(B [$B%U%)%k%@(B $B%*%W%7%g%s(B] $B$G!V=>Mh$N(B Windows $B%U%)%k%@$r;H$&!W$K$9$l$P2sHr$G$-$^$9!#(B

2005.05.11 $BDI5-(B:

$B!!(BWindows 2000 $B$N(B Explorer $B$N7o$O(B MS05-024 $B$G=$@5$5$l$^$7$?!#(B

$B!!(BWindows $B$N(B TCP/IP $B

• IP $B$N8!>Z$N@HCAN-2005-0048

  Windows 2000 / XP SP1 $B$K7g4Y!#(BTCPIP.SYS $B$K7g4Y$,$"$j!"(B $BIT@5$J(B IP $B%*%W%7%g%s$,@_Dj$5$l$?(B IP $B%Q%1%C%H$K$h$j%a%b%jGK2u$,H/@8!#(B $B$3$l$K$h$j!"(Bremote $B$+$i(B DoS $B967b$,!"G$0U$N%3!<%I$No$O%m!<%+%k%5%V%M%C%HFb$G$N$_M-8z!#(B

  $B4XO"(B: Windows IP $B%*%W%7%g%s$K$h$k%j%b!<%H$+$i$N%;%-%e%j%F%#?/32(B (ISSKK)

• ICMP $B@\B3%j%;%C%H$N@HCAN-2004-0790

  Windows 2000 / XP / Server 2003 gold $B$K7g4Y!#(B ICMP type 3 code 2$B!A(B4 $B%Q%1%C%H$rMxMQ$7$F(B TCP $B@\B3$r%j%;%C%H$9$k$3$H$,2DG=!#(B

  $B4XO"(B: NISCC Vulnerability Advisory ICMP - 532967: Vulnerability Issues in ICMP packets with TCP payloads

• ICMP $B$N%Q%9(B MTU $B$N@HCAN-2004-1060

  Windows 2000 / XP / Server 2003 gold $B$K7g4Y!#(B Path MTU Discovery $B$r0-MQ$7!"(Bnext-hop MTU $B$,6KC<$K>.$5$$$h$&$J(B ICMP Type 3 Code 4 $B%Q%1%C%H$rAw$k$3$H$K$h$j!"(B $BE>Aw8zN($r6KC<$K0-2=$5$;$k$3$H$,$G$-$k!#(B

  $B4XO"(B: NISCC Vulnerability Advisory ICMP - 532967: Vulnerability Issues in ICMP packets with TCP payloads

• TCP $B@\B3%j%;%C%H$N@HCAN-2004-0230

  Windows 2000 / XP SP1 / Server 2003 gold $B$K7g4Y!#(B TCP $B%&%#%s%I%&%5%$%:$,Bg$-$$4D6-$G$O!"8EE5E*$J(B TCP $B%j%;%C%H967b$,!"$3$l$^$G9M$($i$l$F$$$?$h$j$bMF0W$K2DG=!#(B Windows XP SP2 $B$K$O$3$N7g4Y$O$J$$!#(B

  $B4XO"(B: TCP $B%W%m%H%3%k$K@x:_$9$k?.Mj@-$NLdBj(B

• $B:>>N$N@\B3MW5a$N@HCAN-2005-0688

  Windows XP SP2 / Server 2003 gold $B$K7g4Y!#(B $B8EE5E*$J(B land $B%"%?%C%/$N1F6A$r

  $B4XO"(B: Windows XP SP2$B$H(BServer 2003$B!"!H8EE5E*$J967b!I$K@H

$B!!(Bpatch $B$,$"$k$N$GE,MQ$9$l$P$h$$!#$J$*!"(BWindows Server 2003 SP1 $B$K$O$3$N7g4Y$O$J$$!#(B

$B!!$^$?!"(Bpatch $B$rE,MQ$9$k$H!"$=$NI{:nMQ$H$7$F(B TCP $B$N%&%$%s%I%&%5%$%:$,(B 64K $B$+$i(B 17520 $B%P%$%H$K8:>/$9$k$N$GCm0U!#;2>H(B: 890345 - $B%;%-%e%j%F%#99?7%W%m%0%i%`(B 893066 $B$O(B Windows 2000 $B$G(B TCP $B (Microsoft)$B!#%l%8%9%H%j$r$$$8$k$3$H$K$h$j!"(BSP3 $B0J9_$N%G%U%)%k%HCM$@$C$?(B 64KB $B$KLa$9$3$H$,2DG=!#(B

2005.04.21 $BDI5-(B:

$B!!(BWindows Malformed IP Options DoS Exploit (MS05-019)$B!#(B

2005.04.26 $BDI5-(B:

$B!!I{:nMQ>pJs(B:

• 897656 - Windows XP Service Pack 1 $B$, (Microsoft)$B!#%?%$%H%kD9$9$.!#(B

2005.04.27 $BDI5-(B:

$B!!I{:nMQ>pJs(B:

• 898060 - $B%;%-%e%j%F%#99?7%W%m%0%i%`(B MS05-019 $B$^$?$O(B Windows Server 2003 Service Pack 1 $B$N%$%s%9%H!<%k8e!"%/%i%$%"%s%H$H%5!<%P!<4V$N%M%C%H%o!<%/@\B3$,5!G=$7$J$$$3$H$,$"$k(B (Microsoft)$B!#(B NTBugtraq $B$G=P$F$$$?(B MS05-019 Breaks VPN $B$NOC$N$h$&$G$9!#(BMS05-019 $B$rF~$l$k$H!"(Bpath MTU Discovery $B$,$&$^$/F0$+$J$$$3$H$,$"$k$_$?$$!#%5%]!<%H$+$i(B patch $B$rF~

  $B$3$N(B KB$B!"(B$B1Q8lHG(B$B$H(B$BF|K\8lHG(B$B$H$G>pJsNL$,0c$$$^$9$M!D!D!#(B

2005.05.17 $BDI5-(B:

$B!!(BWindows (XP, 2k3, Longhorn) is vulnerable to IpV6 Land attack. (ntbugtraq)$B!#(B patch $BE,MQ8e$b!"(BIPv6 $B$K$D$$$F$O(B land $B%"%?%C%/$,M-8z$G$"$k!"$H$$$&;XE&!#(B

2005.05.20 $BDI5-(B:

$B!!(BMS05-019 patch $B$K$O!"(BVulnerability Note VU#637934: TCP does not adequately validate segments before updating timestamp value $B$KBP$9$k=$@5$b4^$^$l$F$$$k$=$&$@!#(B

• Microsoft Security Advisory (899480): Vulnerability in TCP Could Allow Connection Reset (Microsoft)

$B!!$^$?(B Microsoft Security Advisory (899480) $B$K$O!"(BMS05-019 patch $B$,(B 6 $B7n$K:F%j%j!<%9$5$l$kM=Dj$G$"$k!"$H$b5-:\$5$l$F$$$k!#(B KB898060 $BLdBj$,=$@5$5$l$k$h$&$@!#(B

2005.05.26 $BDI5-(B:

$B!!(BMicrosoft Security Advisory (899480) $B$NF|K\8lHG$,=P$^$7$?(B: $B%^%$%/%m%=%U%H(B $B%;%-%e%j%F%#(B $B%"%I%P%$%6%j(B (899480) TCP $B$N@H (Microsoft)

2005.06.15 $BDI5-(B:

$B!!2~D{HG(B patch $B$,=P$F$$$^$9!#E,MQ$7$^$;$&!#(B

2005.06.17 $BDI5-(B:

$B!!2~D{HG(B patch $B$rE,MQ$9$k$H!"(BISS $B@=IJ$N0lIt$,F0:n$rDd;_$7$F$7$^$&$=$&$G(B:

• 901159 - $B%;%-%e%j%F%#99?7%W%m%0%i%`(B MS05-019 $B$N2~D{HG$r(B Windows 2000 $B%Y!<%9$N%3%s%T%e!<%?$K%$%s%9%H!<%k$7$?8e!"0lIt$N(B Internet Security Systems $B@=IJ$,F0:n$rDd;_$9$k(B (Microsoft)

$B!!(BISS $B@=IJMQ$N(B patch $B$,=P$F$$$k$N$G!"3:Ev

$BK!L3>J$H2,;3!";3M|!"BgJ,$N3F8)$,5nG/$+$i:#G/$K$+$1$FDs6!$7$?EE;R?=@AMQ$N%=%U%H$K7g4Y$,$"$k$3$H$,$o$+$j$^$7$?!#(B

$B!!$0$0$C$F$_$k$H!"$3$N$"$?$j$N$*OC$N$h$&$G$9(B:

• $BK!L3>J%*%s%i%$%s?=@A%7%9%F%`%$%s%9%H!<%i$N%;%-%e%j%F%#>e$NLdBjE@$*$h$S$=$NBP:v$K$D$$$F$N$*4j$$(B ($BK!L3>J(B, 2005.03.14)

• JAVA$B4XO"%=%U%H%&%'%"$N%$%s%9%H!<%k$K$h$k%;%-%e%j%F%#>e$NLdBj$K$D$$$F(B ($B2,;38)(B, 2005.02.16, $B:G=*99?7(B 2005.02.19)

• JAVA$B4XO"%=%U%H%&%'%"!J%;%-%e%j%F%#BP1~HG!K$N%$%s%9%H!<%k$K$D$$$F(B ($B2,;38)(B, 2005.02.21)$B!#(B

• 2005$BG/(B2$B7n(B16$BF|0JA0$KEE;R?=@A%f!<%6@_Dj%U%!%$%kAH$_9~$_$r9T$C$?%Q%=%3%s$G0-0U$N$"$k%5%$%H$rK,$l$?>l9g$J$I$K%;%-%e%j%F%#>eLdBj$,@8$8$k2DG=@-$,H/8+$5$l$^$7$?(B ($B$d$^$J$7?=@A!&M=Ls%]!<%?%k%5%$%H(B, 2005.02.22)$B!#(B $B%;%-%e%j%F%#LdBj$N>\:Y@bL@(B ($B$d$^$J$7?=@A!&M=Ls%]!<%?%k%5%$%H(B) $B$b;2>H!#(B

  $B$d$^$J$7?=@A!&M=Ls%]!<%?%k%5%$%H(B$B$N(B $B!V%7%9%F%`4IM}

• $BEE;R?=@AEy ($BBgJ,8)(B) $B$N!V%7%9%F%`$+$i$N$*CN$i$;!W!#(BSSL $B%5%$%H>ZL@=q$,!D!D!#(B

$B!!$I$&$d$i$*OC$O(B 2 $B

• $B;XDj$7$F$$$k(B JRE $B$N%P!<%8%g%s$,8E$$$N$G!"(B Sun Alert ID 57591: Security Vulnerability With Java Plug-in in JRE/SDK $B$K3:Ev$7$F$7$^$&$*OC!#(B $BBP1~$H$7$F$O!"?7$7$$(B JRE $B$r%$%s%9%H!<%k$9$k!#(B J2SE JRE 1.4.2 $B$N:G?7$O(B 1.4.2_08 $B$N$h$&$G$9!#(B

• Java $B%;%-%e%j%F%#%]%j%7!<$NFH<+@_Dj$K4X$9$kCm0U4-5/(B (IPA ISEC, 2005.02.28) $B$K3:Ev$9$k$h$&$J!"ITE,@Z$J%]%j%7!<@_Dj$,$J$5$l$F$$$k$*OC!#(B $BBP1~$H$7$F$O!"E,@Z$J%]%j%7!<$r@_Dj$9$k!#(B

$B!!(BNHK $B$NJsF;$O!"8e

• $B:G?7$N!V%"%W%l%C%H4D6-@_Dj%W%m%0%i%`!W$NDs6!$K$D$$$F(B ($B9qEZ8rDL>J(B, 2005.03.28)

2005.05.03 $BDI5-(B:

$B!!(B$BEE;R?=@A%7%9%F%`$NE@8!;X<((B (NHK, 2005.04.29)$B!#$9$G$K>C$($F$7$^$C$F$$$k(B (T_T) $B$N$G!"0J2<$KA4J80zMQ$5$;$F$$$?$@$-$^$9!#(B

$BAmL3>J$O9T@/$,7g4Y$N$"$k%=%U%H$rG[I[$7$F$$$?$3$H$OLdBj$@$H$7$F!"A49q$N<+<#BN$KBP$7!"F1$8$h$&$J7g4Y$N$"$k%=%U%H$rG[I[$7$F$$$J$$$+$I$&$+Mh7n#1#3F|$^$G$KE@8!$9$k$h$&;X<($7$^$7$?!#$^$?!"Fb3U41K<>pJs%;%-%e%j%F%#!<%;%s%?!<$G$b3F>JD#$KBP$7!"A49q$N=P@h5!4X$,;H$C$F$$$kEE;R?=@A%=%U%H$N0BA4@-$rE@8!$9$k$h$&;X<($7$^$7$?!#(B

$B!!$^$@A4$F$NBP1~$,=*$C$?$o$1$G$O$J$$!"$H$$$&$3$H$J$s$G$7$g$&$+!#(B $B$=$N3d$K$O!"$$$m$s$J<+<#BN$,>!pJs$r=P$7$F$7$^$C$F$$$F!"$J$+$J$+%"%l$J5$$,$7$^$9!#(B $B%$%s%7%G%s%HBP1~

$B!!$H$3$m$G!"(B$B%=%U%H%&%(%"Ey$N@HpJs$K4X$9$kFO=P>u67(B [2005$BG/Bh(B1$B;MH>4|!J(B1$B7n!A(B3$B7n!K(B] (IPA ISEC) $B$K$3$s$JJ8>O$,$"$k$N$G$9$,!"(B

2005$BG/Bh(B1$B;MH>4|$NFO=P;vNc$H$7$F!"(BJava$B%"%W%j%1!<%7%g%s!J(BJava$B%"%W%l%C%H!K$N%$%s%9%H!<%k%W%m%0%i%`Ey$,%$%s%9%H!<%k;~$K%/%i%$%"%s%H(BPC$B$N(BJava$B4D6-$N%;%-%e%j%F%#%]%j%7!<$r=q49$($F$7$^$$!"7k2L$H$7$F!"%/%i%$%"%s%H(BPC$B$N%;%-%e%j%F%#%l%Y%k$rDc2<$5$;$F$7$^$&!"$H$$$&$b$N$,J#?t$"$j$^$7$?!#(B(7)
$BCfN,(B
(7) $B$3$l$i$O!"%/%i%$%"%s%H(BPC$B$K%$%s%9%H!<%k$9$k%=%U%H%&%(%"$G$9$,!"%&%'%V%"%W%j%1!<%7%g%s$r;H$&$?$a$N$b$N$G$"$j!"$=$N%&%'%V%"%W%j%1!<%7%g%s$HFHN)$7$F5/F0$5$l!";HMQ$5$l$k$b$N$G$O$J$$$?$a!"%&%'%V%"%W%j%1!<%7%g%s$N0lIt$H$7$FB*$(!"%&%'%V%"%W%j%1!<%7%g%s$N@HpJs$NFO=P$H$7$F

$B%;%-%e%j%F%#LdBj$N>\:Y@bL@(B ($B$d$^$J$7?=@A!&M=Ls%]!<%?%k%5%$%H(B) $B$K(B

$B!!(B2005$BG/(B2$B7n(B16$BF|$N(B10$B;~(B33$BJ,$K!"(BIPA$B!JFHN)9T@/K!?M>pJs=hM}?d?J5!9=!K$N%;%-%e%j%F%#%;%s%?$+$i!"(Be-$B$d$^$J$7%5%]!<%H%;%s%?08$K!V$d$^$J$7?=@A!&M=Ls%]!<%?%k%5%$%H!W$N!V$*;H$$$N(BPC$B$N@_Dj!W(B-$B!V%f!<%6@_Dj%U%!%$%k!W$G%U%!%$%k$NAH$_9~$_$r9T$C$?>l9g!"%;%-%e%j%F%#>e$NLdBj$,@8$8$k2DG=@-$,$"$k$H$$$&$4;XE&$rD:$-$^$7$?!#(B
($BCfN,(B)
$B%;%-%e%j%F%#LdBj(B
$B!!EE;R?=@A%5!<%S%9$NEE;R=pL>$r9T$&>l9g$K$O!"$*;H$$$N%Q%=%3%s>e$K$"$k;q8;!J=pL>$KI,MW$J%U%!%$%kEy!K$NMxMQ$r9T$&$?$a$K!"%f!<%6@_Dj%U%!%$%k$NAH$_9~$_$r9T$C$F$$$?$@$$$F$$$^$9!#(B
$B!!$=$N%f!<%6@_Dj%U%!%$%k$N(B1$B$D$H$7$F!"!V(Bjava.policy$B!W%U%!%$%k$NAH$_9~$_$r9T$C$F$$$?$@$$$F$$$^$9$,!"(B2005$BG/(B2$B7n(B16$BF|0JA0$N!V(Bjava.policy$B!W%U%!%$%k$N5-=RFbMF$K8m$j$,$"$j$^$7$?!#(B
$B!!(B2005$BG/(B2$B7n(B16$BF|0JA0$K%f!<%6@_Dj%U%!%$%k$NAH$_9~$_$r9T$C$?%Q%=%3%s$G!"0-0U$N$"$k%5%$%H$rK,$l$?>l9g$K!"%f!<%6L>!"%m!<%+%k%U%!%$%k$NEp$_=P$7!&GK2u!"G$0U%3!<%I$N

$B$H$"$k$N$G!"$3$l$,$=$NOC$J$s$8$c$J$$$N$+$J!<$H$$$&5$$,$7$^$9!#(B

$B!!$7$+$7$3$NOC$N>l9g!"1F6AHO0O$,Ev3:(B web $B%5%$%H$K8B$i$l$k$o$1$G$O$J$$$N$G$9$+$i!"!V%&%'%V%"%W%j%1!<%7%g%s$N@HpJs$NFO=P$H$7$F

$B!!(BWindows 2000 / XP / Server 2003 $B$K7g4Y!#(B Windows Kernel $B$K(B 4 $B$D$N7g4Y$,$"$k!#(B

• $B%U%)%s%H$N@HCAN-2005-0060

  $B%U%)%s%H$N=hM}$K$*$$$F(B buffer overflow $B$9$k7g4Y$,$"$j!"(B local user $B$,(B local SYSTEM $B8"8B$rC%Windows kernel overflow fixed (NGSSoftware)

• Windows $B%+!<%M%k$N@HCAN-2005-0061

  local user $B$,(B local SYSTEM $B8"8B$rC%

• $B%*%V%8%'%/%H4IM}$N@HCAN-2005-0550

  local user $B$,(B DoS $B967b$r

• CSRSS $B$N@HCAN-2005-0551

  buffer overflow $B$9$k7g4Y$,$"$j!"(B local user $B$,(B local SYSTEM $B8"8B$rC%iDEFENSE Security Advisory 04.12.05: Microsoft Windows CSRSS.EXE Stack Overflow Vulnerability

$B!!(Bpatch $B$,$"$k$N$GE,MQ$9$l$P$h$$!#(B

2005.04.27 $BDI5-(B:

$B!!$=$&$$$($P!"IT6q9g>pJs$,$"$C$?$N$G$7$?!#(B

• PRIMERGY FT $B%b%G%k(B: Windows Update$B$K4X$9$kN10U;v9`(B ($BIY;NDL(B)$B!#(B PRIMERGY TX200FT $B$X$N(B MS05-018 $BE,MQ$GLdBj$,H/@8$9$k$h$&$G!"!V6[5^=$@5%W%m%0%i%`!W$,8x3+$5$l$F$$$^$9!#(B$B%;%-%e%j%F%#99?7%W%m%0%i%`(B (890859) (MS05-018) $BE,MQ$K4X$9$kN10U;v9`(B ($BIY;NDL(B) $B$b;2>H!#(B(typo fixed: Shibuya $B$5$s46

2005.05.27 $BDI5-(B:

$B!!(BYou receive a "STOP 0x0000001E" error after you install security update MS05-018 on a Windows 2000-based computer (Microsoft)$B!#%5%]!<%H7PM3$G(B hotfix $B$rF~

$B!!(BMac OS X 10.3.9 Update $B$K$OJ#?t$N%;%-%e%j%F%#=$@5$,4^$^$l$F$$$k!"$H$$$&OC!#(B

• Kernel - CAN-2005-0969 CAN-2005-0970 CAN-2005-0971 CAN-2005-0972 CAN-2005-0973 CAN-2005-0974 CAN-2005-0975
• Safari - CAN-2005-0976$B!#(B
  $B>\:Y>pJs(B: AppleWebKit XMLHttpRequest arbitrary file disclosure vulnerability$B!#(B $B3:Ev$9$k$N$O(B Safari 1.2.x $B$N$_!#(B1.2 $B$h$j>.$5$$%P!<%8%g%s!"(B1.3 $B$h$jBg$-$$%P!<%8%g%s$K$O$3$N7g4Y$O$J$$!#(B

$B!!(BMac OS X 10.3.x $BMxMQ

• Mac OS X Combined Update 10.3.9 (Apple)
• Mac OS X Server Update 10.3.9 (Combo) (Apple)

$B$J$*!"(BMac OS X 10.3.9 $B$r%$%s%9%H!<%k$9$k$H!"(BJava $B$,$&$^$/F0$+$J$/$J$k;vNc$,H/@8$7$F$$$kLOMM!#3:Ev$9$k>l9g$O(B Java and Safari issues after updating to Mac OS X v10.3.9 (Apple) $B$r;2>H$7$FBP1~$5$l$?$$!#(B Java Update 1.4.2 Update 2 $B$*$h$S(B / $B$^$?$O(B Security Update 2005-002 $B$NE,MQ$K$h$j2r7h$9$kLOMM!#(B

$B!!(BWindows 2000$B!"(BWindows XP SP1 $B$K7g4Y!#(B Microsoft Message Queuing ($B%G%U%)%k%H$G$O%$%s%9%H!<%k$5$l$F$$$J$$(B) $B$K(B buffer overflow $B$9$k7g4Y$,$"$j!"(Bremote $B$+$iG$0U$N%3!<%I$r(B local SYSTEM $B8"8B$G

$B!!(Bpatch $B$,$"$k$N$GE,MQ$9$l$P$h$$!#(B

$B!!4XO"(B:

• CVE: CAN-2005-0059
• [Dailydave] mqsvc fun (immunitysec.com)$B!#(BCANVAS $B$H$$$&$N$O(B $B$3$&$$$&$b$N(B $B$@$=$&$G$9!#(BMetasploit Framework $B$_$?$$$J$b$N$J$s$G$9$+$M$(!#(B

2005.04.21 $BDI5-(B:

$B!!(BMS05-017$B!?(B892944 $B%a%C%;!<%8!&%-%e!<$N@H (@IT, 2005.04.19) $B$K$h$k$H!"(B

$B$?$@$7(BDA Lab$B$G8!>Z$7$?$H$3$m!"(BWindows XP SP1$B!?(BSP1a$B$G$O!"L@<(E*$K(BMSMQ$B$r%$%s%9%H!<%k$7$F$$$J$$>l9g$G$b!"(BWindows Update$B$G(BMSMQ$B$r9=@.$9$k%U%!%$%k$N0lIt$,8!=P$5$l!"(BMSMQ$B$r%$%s%9%H!<%k$7$F$$$J$$4D6-$G$b!"(BWindows Update$B$G(BMS05-017$B$NE,MQ$,I,MW$@$HH=Dj$5$l$k>l9g$,$"$k!#6qBNE*$J1F6A$OITL@$@$,!"$3$N>l9g$OG0$N$?$a(BMS05-017$B$rE,MQ$7$F$*$$$?J}$,0B?4$@$m$&!#(B

$B$@$=$&$G$9!#(BSugawara $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B

$B!!%=!<%7%c%k%M%C%H%o!<%/(B mixi $B$K(B Cross-Site Request Forgeries (CSRF; $B%/%m%9%5%$%H!&%j%/%(%9%H56B$(B) $B7g4Y$,$"$C$?LOMM!#(B $BNX2&$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B $B8=:_$O!V$O$^$A$A$c$s(B ver 3.0$B!W$r4^$aBP1~$5$l$F$$$k$h$&$G$9!#(B

$B!!(B$B%=%U%H%&%(%"Ey$N@HpJs$K4X$9$kFO=P>u67(B [2005$BG/Bh(B1$B;MH>4|!J(B1$B7n!A(B3$B7n!K(B] (IPA ISEC) $B$K!V%/%m%9!&%5%$%H!&%j%/%(%9%H!&%U%)!<%8%'%j!W$H$$$&8@MU$,=P$F$$$F!"8D?ME*$K$O!V$=$l$O2?(B?$B!W>uBV$@$C$?$N$G$9$,!"$3$&$$$&$b$N$@$=$&$G$9(B:

• CSRF - $B%/%m%9%5%$%H%j%/%(%9%H%U%)!<%8%'%j(B ($B$F$1$H$&$J(BWeb$B3+H/CSRF - $B%/%m%9%5%$%H%j%/%(%9%H%U%)!<%8%'%j(B (hoshikuzu | star_dust $B$N=q:X(B)

$B!!@$$NCf$$$m$$$m$"$k$s$G$9$M!#(B

2005.04.21 $BDI5-(B:

$B!!F?L>4uK>$5$s$+$i(B ($B>pJs$"$j$,$H$&$4$6$$$^$9(B):

Ver.3 $B$KBP$9$kBP:v$O$$$A$*$&(Bmixi$B$G$b(B $B$N2U=j$K4X$7$F$OF1MM$N967b$,DLMQ$9$k$H$N$3$H!#(B
http://d.hatena.ne.jp/mixi_love/20050420/p6

$B$J$*!"(Bmixi $B$G$O$3$l$^$G$K2?EY$b(B CSRF $B$N@Hl$7$N$.$NBP1~$G=*$o$C$F$$$^$9!#(B

$B;d$,CN$C$F$$$k$@$1$G$b(B

2005$BG/(B2$B7n(B mixi $B$X$N>7BT5!G=$G(B CSRF
http://yamagata.int21h.jp/d/?date=20050217#p04

2005$BG/(B3$B7n(B
$B%^%$%_%/%7%#$N6/@):o=|$*$h$S%3%_%e%K%F%#$N6/@)B`2q$K4X$9$k(BCSRF$B$r(Bmixi$B$KJs9p$9$k$b!"CfESH>C<$JBP:v$N$_!#(B

2005$BG/(B4$B7n(B
$B%^%$%_%/%7%#$N%j%/%(%9%H$N6/@)Aw?.$K4X$9$k(BCSRF$B$r(B mixi$B$KJs9p$9$k$bJVEz$J$7!#(BIPA$B$XO"Mm!"
$B$H$$$&$h$&$J>u67$G$9!#(B

2005.04.25 $BDI5-(B:

$B!!(B$BBgNL$N!V$O$^$A$A$c$s!W$r@8$_=P$7$?(BCSRF$B$N@H (ITmedia, 2005.04.23)

2005.04.27 $BDI5-(B:

$B!!(B$B!V$\$/$O$^$A$A$c$s!W(B $B!=!=CN$i$l$6$k(BCSRF$B967b(B (@IT, 2005.04.27)

2005.05.01 $BDI5-(B:

$B!!(B$B%/%m%9%5%$%H%j%/%(%9%H%U%)!<%8%'%j!J(BCSRF$B!K$N@5$7$$BP:vJ}K!(B ($B9bLZ9@8w!w<+Bp$NF|5-(B, 2005.04.27)

$B!!(BRealPlayer$B!"(BRealOne Player$B!"(BRealPlayer Enterprise$B!"(BHelix Player $B$K7g4Y!#(BRam $B%U%!%$%k(B $B$N=hM}$K$*$$$F(B buffer overflow $B$,H/@8!"96N,(B Ram $B%U%!%$%k$K$h$jG$0U$N%3!<%I$r

$B!!(BRealPlayer 10 $B7ONs$H(B Linux $BMQ$N(B Helix Player 10 $B$*$h$S(B Realplayer Enterprise $B$K$D$$$F$O=$@5%W%m%0%i%`$,MQ0U$5$l$F$$$k!#(B RealOne Player $B$d(B RealPlayer 8 $B$K$D$$$F$O!":G?7$N(B RealPlayer 10 $B7ONs$X$N%"%C%W%0%l!<%I$,I,MW$H$J$k!#>\:Y$O(B RealNetworks $B$K$h$kJ8=q(B$B$r;2>H$5$l$?$$!#(B

$B!!4XO"(B: RealNetworks RealPlayer/RealOne Player/Helix Player Remote Heap Overflow$B!#(B

2005 $BG/(B 4 $B7n$N%;%-%e%j%F%#>pJs(B

$B!!(BWindows Update$B ($B%^%+%U%#!<(B, 2005.04.15)$B!#(BVirusScan for Client 4.5.1 SP1 $B$H(B Windows Installer 3.1 $B$,7v2^$r$9$k$=$&$G$9!#(BVirusScan Enterprise $B$X%"%C%W%0%l!<%I$9$l$P2r7h$9$k$=$&$G$9!#(B

OLE $B$*$h$S(B COM $B$N@H

$B!!(B896648 - $B%;%-%e%j%F%#99?7%W%m%0%i%`(B 873333 $B!J(BMS05-012$B!K(B $B$N%$%s%9%H!<%k8e(B svchost.exe $B%(%i!<$,H/@8$9$k$3$H$,$"$j$^$9(B (Microsoft) $B$,99?7$5$l$^$7$?!#(B 895200 - Availability of Windows XP COM+ Hotfix Rollup Package 9 (Microsoft) $B$rE,MQ$9$k$3$H$G2r7h$9$k$=$&$G$9!#%U%m!<%H$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B

iDEFENSE Security Advisory 03.31.05: PHP getimagesize() Multiple Denial of Service Vulnerabilities

$B!!(B[SECURITY] [DSA 708-1] New PHP3 packages fix denial of service$B!#(BDebian $B$5$9$,$G$9!#$$$^$@$K(B PHP3 $B$,%a%s%F%J%s%9$5$l$F$$$^$9!#(B

Critical Patch Update - April 2005

• [AppSecInc Team SHATTER Security Advisory] Multiple SQL Injection vulnerabilities in DBMS_CDC_SUBSCRIBE and DBMS_CDC_ISUBSCRIBE packages
• [AppSecInc Team SHATTER Security Advisory] SQL Injection in CREATE_SCN_CHANGE_SET procedure
• [AppSecInc Team SHATTER Security Advisory] Denial of Service in Oracle interMedia
• [AppSecInc Team SHATTER Security Advisory] Multiple SQL Injection vulnerabilities in DBMS_METADATA package
• [AppSecInc Team SHATTER Security Advisory] SQL Injection in ALTER_MANUALLOG_CHANGE_SOURCE procedure
• [Full-disclosure] - Argeniss - Oracle exploits and workarounds

$B!!(B$B%^%+%U%#!<(B $B%$%s%?!<%M%C%H%;%-%e%j%F%#%9%$!<%H(B 2005 $B$K7g4Y!#(B $B%$%s%9%H!<%k$5$l$?>uBV$K$*$1$k!"%^%+%U%#!<(B $B%$%s%?!<%M%C%H%;%-%e%j%F%#%9%$!<%H(B 2005 $B$N%U%!%$%k$N%Q!<%_%C%7%g%s$K7g4Y$,$"$j!"4IM}

$B!!%^%+%U%#!<(B $B%$%s%?!<%M%C%H%;%-%e%j%F%#%9%$!<%H(B 2005 $B$N<+F099?75!G=$K$*$$$F=$@5$5$l$F$$$k$=$&$@!#$,!"F|K\$G$b$=$&$J$N$+$O$$$^$$$AITL@!#(B

$B!!(BCVE: CAN-2005-1107

2005.04.19 $BDI5-(B:

$B!!@DLZ$5$s$+$i(B ($B$"$j$,$H$&$4$6$$$^$9(B)

$B$3$l$G$9$,!"(BTrendMicro VirusBuster $B$b;w$?$h$&$J$b$N$N$h$&$K;W$($^$9!#(B

$B0J2<$O%P%9%?!<(B 2004 $B$NOC$G$9$,(B 2005 $B$bF1MM$@$C$?$h$&$J!#(B

C:\Program Files\Trend Micro\Virus Buster 2004
$B$3$l0J2<$N%U%!%$%k!"%U%)%k%@$O(B Everyone: Full $B$K$J$C$F$$$^$9!#$=$3$K$O(B Tmntsrv.exe, tmproxy.exe $B$,$"$j$^$9$,!"$=$l$i$O(B LocalSystem $B$K$FF0$/%5!<%S%9$G$9!#$^$?$3$l$i$N%5!<%S%9$O!"@)8B%f!<%6!<$GDd;_!"3+;O$,2DG=$K@_Dj$5$l$F$$$^$9!#(B

$B$=$&$7$J$$$H4IM}8"8B$N$J$$%f!<%6!<$,%m%0%*%s$7$F$$$k$H$-$K%Q%?!<%s%U%!%$%kEy$N%"%C%W%G!<%H$,=PMh$J$$$?$a!"$=$N$h$&$J!V;EMM!W$K$J$C$F$$$k$N$G$O$J$$$+$H;W$o$l$^$9!#(B

$B!!

• [postgrey] ANNOUNCE: Postgrey 1.21 (SECURITY)$B!#(B Postgrey 1.20 $B0JA0$K(B format $B%P%0$,$"$j!"(Bremote $B$+$i(B DoS $B967b$r

• RSA Authentication Agent for Web - IISWebAgentIF.dll - Cross Site Scripting Vulnerability (oliverkarow.de)$B!#(B RSA Authentication Agent for Web for IIS 5.2 $B$K(B XSS $B7g4Y$,$"$j!"(B RSA Authentication Agent for Web for IIS 5.3 $B$G=$@5$5$l$?$=$&$G$9!#(B

• CA BrightStor ARCServe Backup $B$G$N%j%b!<%H$+$i$N%;%-%e%j%F%#?/32(B (ISSKK)$B!#(BBrightStor ARCServe Backup r9.01 $B!A(B r11.1 $B$,3:Ev!#(B iDEFENSE Security Advisory 04.11.05: Computer Associates BrightStor ARCserve Backup UniversalAgent Buffer Overflow $B$HF1$8OC$G$9$M!#(BCVE: CAN-2005-1018

• 0098-01$B!!35MW!'(BXsun$B!"(BXprt Server Font Handling $B$N@H (CTC)$B!#(BSolaris 7$B!A(B9 $B$NOC!#(B

• 0096-01$B!!35MW!'(Blibgss(3LIB) $B$N@H (CTC)$B!#(BSolaris 7$B!A(B9 $B$NOC!#(B

• [SECURITY] Fedora Core 3 Update: vixie-cron-4.1-33_FC3$B!#(B crontab from vixie-cron allows read other users crontabs $B$N(B fix $B$@$=$&$@!#(BCVE: CAN-2005-1038

• Dameware NT Utilities and MiniRemote Control <= 4.9 vulnerability

• Overflow.pl Security Advisory #2: Libsafe - Safety Check Bypass Vulnerability$B!#(B Libsafe 2.0.16 ($B0JA0(B?) $B$O(B $B%^%k%A%9%l%C%I$J4D6-$G$O$&$^$/F/$+$J$$$H$$$&;XE&!#(B

• iDEFENSE Security Advisory 04.08.05: Microsoft Multiple E-Mail Client Address Spoofing Vulnerability$B!#(B Outlook 2002 / 2003 $B$*$h$S(B Exchange 2003 $B$N(B Outlook Web Access $B$K$*$$$F!"(BFrom: $B$KJ#?t$N%"%I%l%9$,5-:\$5$l$F$$$F$b(B 1 $B$D$7$+I=<($5$l$J$$!"$H$$$&;XE&!#(B

• iDEFENSE Security Advisory 04.06.05: IBM Lotus Domino Server Web Service DoS Vulnerability$B!#(B Lotus$B@=IJ$K7g4Y(B--$B%;%-%e%j%F%#D4::2q (CNET, 2005.04.08) $B$NOC!#(BiDEFENSE $B$O(B Domino 6.5.1 / 6.0.3 $B$K7g4Y$,$"$j!"(B 6.5.3 $B$G$O=$@5$5$l$F$$$k!"$H$7$F$$$k$N$@$,!"(BIBM $B$OLdBj$r:F8=$G$-$J$+$C$?LOMM!#(B

• Remote Buffer Overflow in Lotus Domino (NGSSoftware)$B!#(B Domino 6.0.5 / 6.5.4 $B$K(B buffer overflow $B$9$k7g4Y(B$B$,$"$j!"(B$B=$@5%W%m%0%i%`$,8x3+(B$B$5$l$F$$$k!#(B

• XV multiple buffer overflows (update)$B!#(B SUSE $B$d(B Gentoo $B$J$I$N(B xv $B$N=$@5$OIT40A4$@!"$H$$$&;XE&!#(B $B$3$l$r[ GLSA 200504-17 ] XV: Multiple vulnerabilities

• [SA14551] GNU Sharutils unshar Insecure Temporary File Creation

$B!!(BFreeBSD 4.x / 5.x $B$K7g4Y!#(BSIOCGIFCONF ioctl $B$K$*$$$F%P%C%U%!$,=i4|2=$5$l$J$$$^$^;HMQ$5$l$F$7$^$&$?$a!"%+!<%M%k%a%b%j$NFbMF(B (12 $B%P%$%H(B) $B$,O31H$7$F$7$^$&!#(B

$B!!:G?7$N(B RELENG_4 / RELENG_4_10 / RELENG_4_11 / RELENG_5 / RELENG_5_3 / RELENG_5_4 $B$K99?7$9$k$+!"$"$k$$$O(B FreeBSD 4.x / 5.3 $BMQ$N(B patch $B$rE,MQ$7!"(Bkernel $B$r:F9=C[$7$F%$%s%9%H!<%k$7!":F5/F0$9$k!#(B RELENG_4_8 $B$O$b$O$d0];}$5$l$F$$$J$$$,!"(BFreeBSD 4.x $BMQ(B patch $B$OE,MQ$G$-$?!#(B

$B!!$&$%!"$^$?%+!<%M%k$D$/$j$J$*$7$G$9$+!D!D(B (T_T)

$B!!(BCVS 1.11.19 / 1.12.11 $B0JA0$KJ#?t$N7g4Y!#(BNEWS $B$K$h$k$H!"(BCVS $BK\BN$K(B buffer overflow $B$d(B memory leak $B$J$IJ#?t$N7g4Y$,$"$j!"(B $B4sB#$5$l$?J#?t$N(B perl $B%9%/%j%W%H$K$b7g4Y$,$"$C$?(B$B$H$$$&!#(B buffer overflow $B$K$D$$$F$O(B CAN-2005-0753 $B$H$7$FEPO?$5$l$F$$$k!#(BCVS $B3+H/

$B!!(BCVS 1.11.20 $B$*$h$S(B 1.12.12 $B$G=$@5$5$l$F$$$k!#$?$@$7!"(Bperl $B%9%/%j%W%H$N7g4Y$O40A4$K$O2r>C$5$l$F$$$J$$$=$&$@!#(B

• Red Hat Linux ES 3: RHSA-2005:387-06 cvs security update
• Fedora Core: [SECURITY] Fedora Core 3 Update: cvs-1.11.17-6.FC3
• Turbolinux: TLSA-2005-51
• SUSE Linux: SUSE Security Announcement: cvs (SUSE-SA:2005:024)
• Gentoo Linux: GLSA 200504-16 / CVS
• Debian GNU/Linux: DSA-715-1 cvs
• FreeBSD: FreeBSD Security Advisory FreeBSD-SA-05:05.cvs - Multiple vulnerabilities in CVS

$B!!(BWindows 2000 / XP / Server 2003 $B$K7g4Y!#(B MS Office $BJ8=q$O!"3HD%;R$rJQ99$7$F$b(B MS Office $BJ8=q$H$7$F3+$+$l$k$3$H$O$h$/CN$i$l$F$$$k!#$3$l$HF1$85!9=$rMxMQ$9$k$3$H$G!"G$0U$N3HD%;R$N$D$$$?%U%!%$%k$r(B Microsoft HTML Application Host (MSHTA) $B%U%!%$%k$G$"$k$H$7$F

$B!!=$@5%W%m%0%i%`$,$"$k$N$GE,MQ$9$l$P$h$$!#$J$*!"$3$N7g4Y$O(B Windows Server 2003 SP1 $B$*$h$S(B Windows XP / Server 2003 x64 Edition $B$K$OB8:_$7$J$$!#(B

$B!!4XO"(B:

• iDEFENSE Security Advisory 04.12.05: Microsoft MSHTA Script Execution Vulnerability
• PoC $B%3!<%I(B
• CVE: CAN-2005-0063

JVN#9ADCBB12: $B7HBSEEOCC

$B!!>\:Y$,8x3+$5$l$?(B: au$B7HBSEEOC$N%P!<%3!<%I%j!<%@$G%8%c%s%W@h(BURL$B$,56Au$5$l$k(B (bugtraq-jp)

$B!!$H$s$G$b$J$$4*0c$$$r$7$F$$$?$N$G=$@5!#@>B<$5$s$4;XE&$"$j$,$H$&$4$6$$$^$9!#(B _o_

$B!!(BSSL $B%5!<%P>ZL@=q$K$*$$$F!"(BOrganization $B9`L\(B$B$,:>>N$5$l$?$b$N$rC/$G$b4JC1$K

$B!!(BPoC $B%5%$%H$H(B Opera 8 Beta 3 $B$G$NI=<(Nc$,(B http://www.geotrust.com/resources/advisory/sslorg/index.htm $B$K<($5$l$F$$$k!#(BOpera 8 Beta 3 $B$G$O%"%I%l%9%P!<$K:>>N$5$l$?(B Organization $B9`L\$,Bg$-$/I=<($5$l$F$7$^$&$?$a!"

$B!!(BGeoTrust $B$,(B Organization $B:>>N>ZL@=q$r$I$3$+$iF~

$B!!(BFirefox 1.0.3 / Mozilla 1.7.7 $BEP>l!#B??t$N7g4Y(B (Firefox: 9 $B$D!"(BMozilla: 7 $B$D(B) $B$,=$@5$5$l$F$$$k!#(B

$B!!(BFirefox / Mozilla $BMxMQ

• $B1Q8lHG%@%&%s%m!<%I(B: Firefox$B!"(BMozilla
• $BF|K\8lHG(B Firefox 1.0.3 $B%@%&%s%m!<%I(B:
  • Windows $BMQ(B
  • Mac OS X $BMQ(B
  • Linux $BMQ(B

$B!!(B(typo fixed: $B>._7$5$s46

$B!!4XO"(B:

• Firesearching
• Firelinking

• Segmentation fault on failed PUT/POST request (squid-cache.org)$B!#(BSquid-2.5 $B0JA0$G!"<:GT$7$?(B PUT/POST $B%j%/%(%9%H$,(B seg $BMn$A$r>7$/$3$H$,$"$kLOMM!#(Bsquid-2.5.STABLE7 $BMQ$N(B patch $B$,=P$F$$$k!#(B CVE: CAN-2005-0718

• portupgrade -- insecure temporary file handling vulnerability (freebsd.org)$B!#0l;~%U%!%$%k$NA`:n$K7g4Y!#(B portupgrade-20041226_2 $B$G=$@5$5$l$F$$$k!#(B CVE: CAN-2005-0610

• [Hat-Squad Advisory] Bakbone NetVault Heap overflow Vulnerabilities$B!#(B Bakbone NetVault 6.x / 7.x $B$K(B remote $B$*$h$S(B local $B$K$*$1$k(B heap buffer overflow $B7g4Y$,$"$k$H$$$&;XE&!#(BPoC $B%3!<%I$b$"$o$;$F8x3+$5$l$F$$$k!#(B

  patch $B$O$^$@$J$$!#(B20031/tcp $B$*$h$S(B 20031/udp $B$r%U%#%k%?$9$k$3$H$G2sHr$G$-$k!#(B

• [VulnWatch] GLD (Greylisting daemon for Postfix) multiple vulnerabilities.$B!#(B gld (standalone greylisting server for Postfix) 1.4 $B0JA0$K(B buffer overflow $B7g4Y$d$i(B format $B%P%0$d$i$,$"$k$H$$$&;XE&!#(B gld 1.5 $B$G=$@5$5$l$F$$$kLOMM!#(B

• cpio TOCTOU file-permissions vulnerability$B!#(B GNU cpio 2.6 $B0JA0$K(B CAN-2005-0953 (bzip2 TOCTOU file-permissions vulnerability) $B$d(B CAN-2005-0988 (gzip TOCTOU file-permissions vulnerability) $B$HF1MM$N7g4Y$,$"$k$H$$$&;XE&!#(B

  cpio patch$B!#(B gzip $B$N>l9g$O(B$B$3$l(B$B!#(B

• IBM WebSphere Widespread configuration JSP disclosure$B!#(B IBM WebSphere Application 6 $B0JA0$K!"(BJSP $B%=!<%9$,O31H$7$F$7$^$&7g4Y$,$"$k$H$$$&;XE&!#(B

• Multiple Sql injection and XSS vulnerabilities in phpBB Plus v.1.52 and below and some of its modules.

• [VulnWatch] Patch available for critical Veritas i3 Server vulnerability$B!#(B VERITAS i3 (tm) 7.1 - Patch IN_INBA_710_007 (veritas.com) $B$,(B patch $B$@$=$&$G$9!#7g4Y>\:Y$OL$8x3+!#(B

• [VulnWatch] Multiple medium risk flaws fixed in new version of PHP (late advisory)$B!#(B PHP 5.0.3 / 4.3.10 $B$KJ#?t$N7g4Y$,$"$j!"=$@5$5$l$?!"$=$&$G$9!#(B $B7g4Y>\:Y$OL$8x3+!#(B

• iDEFENSE Security Advisory 04.11.05: Computer Associates BrightStor ARCserve Backup UniversalAgent Buffer Overflow$B!#(B BrightStor ARCserve Backup UniversalAgent $B$K!"(Bremote $B$+$i96N,2DG=$J(B buffer overflow $B7g4Y$,$"$j!"=$@5(B patch $B$,=P$F$$$k$=$&$G!#(B CVE: CAN-2005-1018

• [NEWS] Oracle Forms SQL Injection

March 2005 DNS Poisoning Summary

$B!!(B4/12 $BDI5-J,$H$^$H$a$?!#(B

• $B!V0-!u$HBP:v!J>e!K(B ($BF|7P(B IT Pro, 4/12)
• $B!V0-!u$HBP:v!J2 ($BF|7P(B IT Pro, 4/13)

2005 $BG/(B 4 $B7n$N%;%-%e%j%F%#>pJs(B

$B!!(BPRIMERGY FT $B%b%G%k(B: Windows Update$B$K4X$9$kN10U;v9`(B ($BIY;NDL(B)$B!#(B PRIMERGY TX200FT $B$X$N(B MS05-018 $BE,MQ$GLdBj$,H/@8$9$k$h$&$G!"!V6[5^=$@5%W%m%0%i%`!W$,8x3+$5$l$F$$$^$9!#(B$B%;%-%e%j%F%#99?7%W%m%0%i%`(B (890859) (MS05-018) $BE,MQ$K4X$9$kN10U;v9`(B ($BIY;NDL(B) $B$b;2>H!#(B(typo fixed: Shibuya $B$5$s46

$B!!(BOpenOffice.org 1.1.4 $B0JA0$K7g4Y!#(B StgCompObjStream::Load() $B$K(B heap overflow $B$9$k7g4Y$,$"$j!"(B $B96N,J8=q%U%!%$%k$r3+$+$;$k$3$H$K$h$jG$0U$N%3!<%I$rIssue 46388 (openoffice.org) $B$r;2>H!#(B

$B!!(BOpenOffice.org 1.1.4 $BMxMQl9g$O!"$^$:(B 1.1.4 $B$^$G>e$2!":9BX%U%!%$%k$rE,MQ$9$k!#(B

$B!!!V0-0U$N$"$k%=%U%H%&%'%"$N:o=|%D!<%k!W(BV 1.3 (April 2005) $B$,EP>l$7$F$$$^$9!#(B V 1.3 $B$G$OCxL>$J(B Windows $BMQ%k!<%H%-%C%H$N$R$H$D(B HackerDefender $B$KBP1~$7$F$$$^$9!#(B HackerDefender 1.0.0 $B$G;n$7$F$_$?$H$3$m!"8!=P!&:o=|$5$l$k$N$O!V5/F0$5$l$F$$$?(B HackerDefender$B!W$@$1$N$h$&$G$9!#(B HackerDefender $B$r5/F0$;$:$KC1$KCV$$$F$*$/$H!":o=|$I$3$m$+8!=P$9$i$5$l$^$;$s$G$7$?!#(B

$B!!$D$$$G$K(B F-Secure BlackLight $B$G(B HackerDefender 1.00 $B$r;n$7$F$_$?$H$3$m!"5/F0$5$l$F$$$?$j1#$5$l$F$$$?$j$7$?%W%m%;%9!&%U%!%$%k$N>pJs$rI=<($9$k$N$_$G$7$?!#!V0-0U$N$"$k%=%U%H%&%'%"$N:o=|%D!<%k!W$O!"$H$j$"$($::o=|$7$F$/$l$k$H$$$&0UL#$G$O$o$+$j$d$9$=$&$G$9!#(B HackerDefender$B$r0-MQ$7$?%9%Q%$%&%'%"(B $B!](B $B%9%Q%$%&%'%"=|5n%"%W%j%1!<%7%g%s$,;H$($J$$(B ($B%"%@%k%H%5%$%HHo32BP:v$NIt20(B) $B$b!"!V0-0U$N$"$k%=%U%H%&%'%"$N:o=|%D!<%k!W$rMxMQ$9$k7A$K99?7$9$k$H$$$$$+$b$7$l$^$;$s!#(B

$B!!$H$$$&$o$1$G!"!V0-0U$N$"$k%=%U%H%&%'%"$N:o=|%D!<%k!W$O!V%"%s%A%&%$%k%9$rF3F~$7$F$$$k?M$b$<$R

$B!!$J$*!"(BHackerDefender $B$NA\:w!&>C5n$K4X$7$F(B Strider GhostBuster Rootkit Detection (Microsoft Research) $B$N5;=Q$,;H$o$l$F$$$k$N$+$I$&$+$K$D$$$F$O$h$/$o$+$j$^$;$s!#(B

$B!!(Bau $B$N7HBSEEOC(B PENCK$B!"(BW31SA$B!"(BW21CA$B!"(BW21T$B!"(BW22H$B!"(BW22SA$B!"(BW21SA$B!"(BW21S$B!"(BTalby$B!"(BA5509T$B!"(BA5507SA$B!"(BA5506T$B!"(BA5505SA$B!"(BA5502K$B!"(BA1404S$B!"(BA1402S II$B!"(BA1402S $B$KEc:\$5$l$F$$$k(B $B%P!<%3!<%I%j!<%@%"%W%j$K7g4Y!#(B $BFCDj$N(B QR $B%3!<%I$rFI$_9~$s$@>l9g$K!"!V(B1 $B9TL\!W$K%+!<%=%k$,$"$k$K$b$+$+$o$i$:!V(B2 $B9TL\!W$N(B URL $B$K%"%/%;%9$7$F$7$^$&!#(B $B%P!<%3!<%I(B (2$B (au, 2005.04.14) $B$K>\:Y$,$"$k$N$G;2>H$5$l$?$$!#(B

$B!!=$@5HG$N%P!<%3!<%I%j!<%@%"%W%j$,MQ0U$5$l$F$$$k$N$G99?7$9$l$P$h$$!#(B

2005.04.18 $BDI5-(B:

$B!!>\:Y$,8x3+$5$l$?(B: au$B7HBSEEOC$N%P!<%3!<%I%j!<%@$G%8%c%s%W@h(BURL$B$,56Au$5$l$k(B (bugtraq-jp)

$B!!K\F|(B 2005.04.14 $B$+$i!"!X(BEZweb$B%"%/%;%9;~$K(BEZ$BHV9f$r!VDLCN$7$J$$!W@_Dj$rA*Br$G$-$k5!G=!Y$,DI2C$5$l$k$=$&$G$9!#9bLZ@h@8$,2?G/$bA0$+$i$=$N4m81@-$K$D$$$F;XE&$7$F$-$?$o$1$G$9$,!"(B$B%o%s%/%j%C%/:>5=(B$B$K$5$s$6$s0-MQ$5$l$k$h$&$K$J$C$F!"$h$&$d$/!D!D$J$o$1$G$9$M!#(B

$B!!=P$?$h$&$G$9!#(B $BF|K\$N(B Oracle $B$K$O(B 2005.04.15 $B$K>pJs$,7G:\$5$l$k$h$&$G$9!#F?L>4uK>$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B

2005.04.14 $BDI5-(B:

$B!!(B[VulnWatch] Multiple High Risk flaws fixed in Oracle (NGSSoftware)

2005.04.19 $BDI5-(B:

• [AppSecInc Team SHATTER Security Advisory] Multiple SQL Injection vulnerabilities in DBMS_CDC_SUBSCRIBE and DBMS_CDC_ISUBSCRIBE packages
• [AppSecInc Team SHATTER Security Advisory] SQL Injection in CREATE_SCN_CHANGE_SET procedure
• [AppSecInc Team SHATTER Security Advisory] Denial of Service in Oracle interMedia
• [AppSecInc Team SHATTER Security Advisory] Multiple SQL Injection vulnerabilities in DBMS_METADATA package
• [AppSecInc Team SHATTER Security Advisory] SQL Injection in ALTER_MANUALLOG_CHANGE_SOURCE procedure
• [Full-disclosure] - Argeniss - Oracle exploits and workarounds

$B!!(BICMP $B$r;H$&$H!"4{B8$N(B TCP $B%3%M%/%7%g%s$r%j%;%C%H$7$?$jB.EY$rDc2<$5$;$?$j$9$k$3$H$,2DG=$@$H$$$&;XE&!#(B

• CVE: CAN-2004-0790

  RFC1122 $B$NMW@A$K$h$j!"(BICMP type 3 code 2$B!A(B4 $B$r)$5$l$F$$$J$$!#(B $B$3$N$?$a!"%7!<%1%s%9HV9f$N8!::$rl9g!"56B$(B ICMP $B%Q%1%C%H$K$h$k(B TCP $B%j%;%C%H$rMF0W$K

• CVE: CAN-2004-1060

  Path MTU Discovery $B$r0-MQ$7!"(Bnext-hop MTU $B$,6KC<$K>.$5$$$h$&$J(B ICMP Type 3 Code 4 $B%Q%1%C%H$rAw$k$3$H$K$h$j!"(B $BE>Aw8zN($r6KC<$K0-2=$5$;$k$3$H$,$G$-$k!#(B

• CVE: CAN-2004-0791

  RFC1122 $B$NMW@A$K$h$j!"(BICMP type 4 (Source Quench) $B$rAwB.EY$,Dc2<$9$k!#(B ICMP type 4 $B%Q%1%C%H$K$O(B IP $B%X%C%@$*$h$S(B TCP $B%X%C%@$N:G=i$N(B 64 $B%S%C%H$,%Z%$%m!<%I$H$7$FEc:\$5$l$F$$$k$,!"(BRFC $B$G$O(B TCP $B%X%C%@Cf$N%7!<%1%s%9HV9f$,Ev3:(B TCP $B%3%M%/%7%g%s$H0lCW$9$k$+$I$&$+$N8!::$,?d>)$5$l$F$$$J$$!#(B $B$3$N$?$a!"%7!<%1%s%9HV9f$N8!::$rl9g!"56B$(B ICMP $B%Q%1%C%H$K$h$k(B TCP $BE>AwB.EYDc2<$rMF0W$K

$B!!F1MM$N967b$O(B IPv6 (ICMPv6) $B$K$*$$$F$b

$B!!4XO"(B:

• ICMP attacks against TCP (Internet Draft)

• NISCC-532967: TCP $B (JVN)

• Vulnerability Note VU#222750: Multiple TCP/IP implementations do not adequately validate ICMP error messages (CERT/CC)

• Cisco: Cisco Security Advisory: Crafted ICMP Messages Can Cause Denial of Service
• Foundry: $B$3$N7g4Y$O$J$$!#(B
• Juniper: https://www.juniper.net/alerts/viewalert.jsp?txtAlertNumber=PSN-2004-09-009
• Nortel: Security Advisory Bulletins $B$K;qNAB??t$"$j!#(B
• Apple: Mac OS X 10.2 $B0J9_$K$3$N7g4Y$O$J$$!#(B
• Fedora Project: Fedora Core 2, Fedora Core 3 $B$K$3$N7g4Y$O$J$$!#(B
• IBM: ftp://aix.software.ibm.com/aix/efixes/security/icmp_efix.tar.Z
• Microsoft: TCP/IP $B$N@H
• Red Hat Linux: Red Hat Inc. Information for VU#222750$B!#(BRHEL 2.1 / 3.0 $B$G$O!"(B kernel-2.4.9-e.59 (2.1), kernel-2.4.18-e.54 (ia64 $BMQ(B 2.1), kernel-2.4.21-27.0.2.EL (3.0) $B0J9_$N(B kernel $B$G=$@5$5$l$F$$$k!#(B
• Sun: 57746: Sun TCP Connections May Experience Performance Degradation If Certain ICMP Error Messages Are Received$B!#(B patch $B$O$^$@$J$$!#(B

2005.04.21 $BDI5-(B:

$B!!(BICMP attacks against TCP (Proof-of-Concept code) (MS05-019, CISCO:20050412)

2005.05.06 $BDI5-(B:

$B!!(BSYM05-008: $B%7%^%s%F%C%/$N%;%-%e%j%F%#!&%2!<%H%&%'%$(B ICMP $B$K%5!<%S%95qH]$N4m81@-(B ($B%7%^%s%F%C%/(B, 2005.05.02)$B!#(B $B0J2<$N%7%^%s%F%C%/@=IJ$K7g4Y$,$"$k$=$&$@!#(B

Symantec Gateway Security 5400 Series, v2.x
Symantec Gateway Security 5300 Series, v1.0
Symantec Enterprise Firewall, v7.0.x $B!J(BWindows $BHG$*$h$S(B Solaris $BHG!K(B
Symantec Enterprise Firewall v8.0 $B!J(BWindows $BHG$*$h$S(B Solaris $BHG!K(B
Symantec VelociRaptor, Model 1100/1200/1300 v1.5
Symantec Gateway Security 300 Series $B!J$9$Y$F$N%U%!!<%`%&%'%"(I%$B%P!<%8%g%s!K(B
Symantec Gateway Security 400 Series $B!J$9$Y$F$N%U%!!<%`%&%'%"(I%$B%P!<%8%g%s!K(B
Symantec Firewall/VPN Appliance 100/200/200R $B!J$9$Y$F$N%U%!!<%`%&%'%"(I%$B%P!<%8%g%s!K(B
Nexland ISB SOHO Firewall Appliances $B!J$9$Y$F$N%U%!!<%`%&%'%"(I%$B%P!<%8%g%s!K(B
Nexland Pro Series Firewall Appliances

$B!!$3$N$&$A=$@5HG$,$"$k$N$O(B Symantec Gateway Security 300 Series$B!"(BSymantec Gateway Security 400 Series $B$@$1$G!"B>$K$D$$$F$O3+H/Cf$@$=$&$@!#(B

2005.05.20 $BDI5-(B:

$B!!(B$B!V(BTCP$B ($BF|N)(B)

$B%i%$%;%s%9(B $B%m%0(B $B%5!<%S%9$N@H

$B!!(B$BF|K\8lHG(B MS05-010 $B$O99?7$5$l$F$$$J$$$h$&$@$,!"(B $B1Q8lHG(B MS05-010 $B$O(B 2 $BEY99?7$5$l$F$$$k!#$3$N$"$?$j(B:

Mitigating Factors for License Logging Service Vulnerability - CAN-2005-0050:
($BCfN,(B)
On Windows 2000 Server Service Pack 4 and Windows Server 2003, only authenticated users or programs can establish a connection to the License Logging service. However, this does not apply to installations of Windows 2000 Server where Service Pack 4 has been `slipstreamed' into the operating system directory. For more information, see Microsoft Knowledge Base Article 896658.

PNG $B=hM}$N@H

$B!!(BMS05-009 $B$,(B 2005.04.13 $BIU$G99?7$5$l$F$$$k!#(B

$B$J$<%^%$%/%m%=%U%H$O$3$N%;%-%e%j%F%#>pJs$r(B2005$BG/(B4$B7n(B13$BF|$K99?7$7$?$N$G$9$+(B?

$B$3$N%;%-%e%j%F%#>pJs$N%j%j!<%98e!"(BWindows Messenger version 4.7.0.2009 (Windows XP Service Pack 1 $B$Gl9g(B) $B$N99?7$,(B SMS $B$^$?$O<+F099?7$r2p$7G[I[$5$l$?>l9g!"%$%s%9%H!<%k$,<:GT$9$k$3$H$,3NG'$5$l$^$7$?!#(B $B99?7$5$l$?%Q%C%1!<%8$O$3$NF0:n$r=$@5$7$^$9!#(B

$BA02s$N99?7$,@5>o$K%$%s%9%H!<%k$5$l!"8=:_(B Windows Messenger $B$N%P!<%8%g%s(B 4.7.0.2010$B$r

$B%+!<%=%k$*$h$S%"%$%3%s$N%U%)!<%^%C%H$N=hM}$N@H

$B!!(BMS05-002 $B$N(B Windows 98 / 98 SE / Me $BMQ(B patch $B$,99?7$5$l$^$7$?!#(B

2005 $BG/(B 4 $B7n(B 13 $BF|$K$3$N%;%-%e%j%F%#>pJs$r99?7$7$?$N$O$J$<$G$9$+(B?

$B%;%-%e%j%F%#>pJs(B MS05-002 $B$r%j%j!<%98e!"%^%$%/%m%=%U%H$O(B Windows 98$B!"(B98SE $B$*$h$S(B ME $BMQ$N%;%-%e%j%F%#99?7%W%m%0%i%`$rE83+$7$?$*5RMM$K1F6A$rM?$($kLdBj$r3NG'$7$^$7$?!#$[$H$s$I$N>l9g$O$3$NLdBj$K$h$j!"%3%s%T%e!<%?!<$,M=4|$7$J$$$H$-$K:F5/F0$7$^$9!#(B

$B%^%$%/%m%=%U%H$O$3$NLdBj$rD4::$7!"$3$l$i$N%W%i%C%H%U%)!<%`MQ$N2~D{HG$N%;%-%e%j%F%#99?7%W%m%0%i%`$rMQ0U$7$^$7$?!#$3$l$i$N2~D{HG$N%;%-%e%j%F%#99?7%W%m%0%i%`$O!"(BWindows Update $B$*$h$S%^%$%/%m%=%U%H(B $B%@%&%s%m!<%I(B $B%;%s%?!<$+$iF~
$B4{$K%*%j%8%J%k$N%P!<%8%g%s$N(B Windows 98$B!"(B98SE $B$*$h$S(B ME $BMQ$N%;%-%e%j%F%#99?7%W%m%0%i%`$rE,MQ$7$?$*5RMM$b!"(BWindows Update $B$+$i8=:_$N2~D{HG$N99?7%W%m%0%i%`$r%$%s%9%H!<%k$9$k$3$H$r?d>)$7$^$9!#(B

$B!!$J$*!"(B$B%^%$%/%m%=%U%H!'!V(BWindows$BMQ%Q%C%A$K@H (CNET, 2005.04.01) $B$@$,!"(BMicrosoft $B$,G'<1$7$F$$$?$N$O$"$/$^$G!V5l(B patch $B$rE,MQ$9$k$H(B OS $B$,IT0BDj$K$J$k!W;v$G$"$C$F!"!V(BMS05-002 $B5l(B patch $B$,%;%-%e%j%F%#E*$KIT==J,!W$H$$$&;v

$B!!=P$^$7$?!#(BMS05-016 $B$+$i(B MS05-023 $B$^$G$N(B 8 $B$D$G$9!#(B $B$U$D$&$N$R$H$O!"$3$s$J

• $B<+F099?7$d(B Windows Update $B$r;H$C$F(B Windows $BMQ$N99?7$rE,MQ$7!":F5/F0$9$k!#(B

• Office Update $B$r;H$C$F(B Microsoft Office $B4X78$N99?7$rE,MQ$9$k!#(B

• MSN Messenger $B$r;H$C$F$$$k>l9g$O!"(B MS05-022 $B$rE,MQ$9$k$+!"$"$k$$$O:G?7$N(B MSN Messenger 7.0 $B$K%"%C%W%0%l!<%I$9$k!#(B

• Exchange 2000 / 2003 $B$r;H$C$F$$$k>l9g$O!"(B MS05-021 $B$rE,MQ$9$k!#(B

$B!!$J$*!"(BOS Kernel $B$OJQ$o$C$F$k(B$B$o!"(BTCP/IP $B%W%m%H%3%k%9%?%C%/$OJQ$o$C$F$k(B$B$o!"(BIE $B$OJQ$o$C$F$k(B$B$o$J$N$G!"$$$D$b$h$jCm0U?<$/%F%9%H$7$^$7$g$&!#(B $B%G%U%)%k%H$N5sF0$,JQ99$K$J$kOC$b$"$k$h$&$G$9!#(B KB 893066 $B$H$+!#(B

$B!!$3$l$K$"$o$;$F!"!V(BMicrosoft Windows $B%$%s%9%H!<%i(B 3.1$B!W$H!V%P%C%/%0%i%&%s%I(B $B%$%s%F%j%8%'%s%HE>Aw%5!<%S%9(B (BITS) 2.0 $B$*$h$S(B WinHTTP 5.1 $BMQ$N99?7%W%m%0%i%`!W$b8x3+$5$l$F$$$k$h$&$G$9$M!#(B

$B!!$J$*!";DG0$J$,$i:#2s$N(B patch $B$G$O(B Upcoming Advisories (eEye) $B$N(B EEYEB-20050316 $B$H(B EEYEB-20050329 $B$O>C$($F$$$^$;$s!#(B

2005.04.14 $BDI5-(B:

$B!!IT6q9g>pJs$,=P$F$-$F$$$^$9!#(B

• PRIMERGY FT $B%b%G%k(B: Windows Update$B$K4X$9$kN10U;v9`(B ($BIY;NDL(B)$B!#(B PRIMERGY TX200FT $B$X$N(B MS05-018 $BE,MQ$GLdBj$,H/@8$9$k$h$&$G!"!V6[5^=$@5%W%m%0%i%`!W$,8x3+$5$l$F$$$^$9!#(B$B%;%-%e%j%F%#99?7%W%m%0%i%`(B (890859) (MS05-018) $BE,MQ$K4X$9$kN10U;v9`(B ($BIY;NDL(B) $B$b;2>H!#(B(typo fixed: Shibuya $B$5$s46

• MS05-019 breaks TCP raw socket sends (NTBugtraq)

2005.04.20 $BDI5-(B:

$B!!(BWindows Update$B ($B%^%+%U%#!<(B, 2005.04.15)$B!#(BVirusScan for Client 4.5.1 SP1 $B$H(B Windows Installer 3.1 $B$,7v2^$r$9$k$=$&$G$9!#(BVirusScan Enterprise $B$X%"%C%W%0%l!<%I$9$l$P2r7h$9$k$=$&$G$9!#(B

2005.04.27 $BDI5-(B:

$B!!(BWindows $B%$%s%9%H!<%i(B 3.1 $B$r%$%s%9%H!<%k$9$k$H!"=$@5%W%m%0%i%`$K$h$C$F$OE,MQ$K<:GT$9$k2DG=@-$,$"$k(B (updatecorp.co.jp)$B!#(B

Windows $B%$%s%9%H!<%i$N8F$S=P$7;~$K40A4%5%$%l%s%H(B $B%$%s%9%H!<%k$N$?$a$N%*%W%7%g%s$r;XDj$9$k$H!"E,MQ$K<:GT$7$^$9!#(B

$B!!(B4 $B7n$N(B Windows Update $B$NF|$K(B Windows $B%$%s%9%H!<%i(B 3.1 $B$bG[I[$5$l$F$$$^$9$,!"8_49@-$K>/!9Fq$,$"$k$h$&$G$9!#(B

2005.05.19 $BDI5-(B:

$B!!(BWindows $B%$%s%9%H!<%i(B 3.1(v2) $B$H!"(BWindows 2003 SP1 $B$*$h$S(B 64bit $BHG(B Windows XP $BMQ$N(B Windows $B%$%s%9%H!<%i(B 3.1 $B%"%C%W%G!<%H$,8x3+$5$l$F$$$^$9!#(B

• 893803 - Windows Installer 3.1 (v2) is available (Microsoft)

  Issue that is addressed in Windows Installer 3.1 (v2)
  Windows Installer no longer fails silently when the installer tries to update a file that is protected by the Windows File Protection feature.

• 898715 - An update for Windows Installer 3.1 is available for Windows Server 2003 SP1 and for the 64-bit editions of Windows XP (Microsoft)

$B!!$3$NOC(B:

• [Full-disclosure] [HV-HIGH] Microsoft Jet DB engine vulnerabilities $B!#(B msjet40.dll $B$N:G?7HG(B 4.00.8618.0 $B$K7g4Y$,$"$j!":Y9)$7$?(B mdb $B%U%!%$%k$K$h$jG$0U$N%3!<%I$r[Full-disclosure] Microsoft Jet (msjet40.dll) Exploit$B!#(B $B>e5-;XE&$K4p$E$$$F!"(B $B:Y9)$7$?(B mdb $B%U%!%$%k$r=PNO$9$k$H$$$&(B C $B%=!<%9!#(B calc.exe $B$,5/F0$9$k$H$$$&$,!"K\Ev$+$I$&$+;d$OCN$i$J$$!#(B C $B%=!<%9$K(B www.computerterrorism.com $B$H$$$&J8;zNs$,$"$C$?$N$G(B http://www.computerterrorism.com $B$K%"%/%;%9$7!"$5$i$K(B http://www.computerterrorism.com/msjet.htm $B$K%"%/%;%9$9$k$H!"(BVSE 8.0i $B$,!V(BExploit-IEPageSpoof$B!W$r8!=P!#(B $B$d$C$F$/$l$^$9$M!#(B

2005.04.21 $BDI5-(B:

$B!!(BExploit-MSJet.gen ($B%^%+%U%#!<(B)

2005.10.04 $BDI5-(B:

$B!!(BMS Office$B$N@H (ITmedia, 2005.10.04)

March 2005 DNS Poisoning Summary

$B!!(B$B!V0-!u$HBP:v!J>e!K(B ($BF|7P(B IT Pro, 4/12)

ppBlog $B8!:w%b%8%e!<%k$K(BXSS$B$N@H

$B!!(BppBlog 1.4.0 $B$,@5<08x3+$5$l$F$$$^$9!#(B

$B!!(BAN HTTP 1.42n $B0JA0$K(B 2 $B$D$N7g4Y!#(B

• cmdIS.DLL $B$K(B buffer overflow $B$9$k7g4Y$,$"$j!"(Bremote $B$+$iG$0U$N%3!<%I$r

• $B%m%0%U%!%$%k$K(B URI $B$r5-O?$9$k:]$N=|@w=hM}$,IT==J,$J$?$a!"@)8fJ8;z$J$IG$0U$NJ8;z$rA^F~$G$-$k!#$3$l$K$h$j%m%0%U%!%$%k$N2~$6$s$,2DG=!#(B $B$^$?(B cmdIS.DLL $B$K$h$C$F

$B!!=$@5HG$O$^$@$J$$!#(BAN HTTP $B%[!<%`%Z!<%8(B $B$G$O(B

$B%P!<%8%g%s(B 1.42n $B$*$h$S$=$l0JA0$N$9$Y$F$N%P!<%8%g%s$N%5%s%W%k%9%/%j%W%H$K=EBg%;%-%e%j%F%#%[!<%k$,$"$j$^$9!#(B scripts $B%U%)%k%@$N(B cmdIS.dll $B$r:o=|$7$F$/$@$5$$!#(B(2005/4/7)

$B$H8F$S$+$1$F$$$k!#(B

$B!!(BColdFusion MX 6.1 $B$N(B Updater 1 $B$K7g4Y$,$"$j!"%U%!%$%k$^$k$_$(7O$N;v>]$,H/@8$9$kLOMM!#2sHr:v$,7G:\$5$l$F$$$k!#(B

Critical Patch Update - April 2005 (scheduled for release at noon PDT on 12 April 2005)

$B!!(BOracle $B$+$i!"(B2005.04.12 12:00 -0700 (PDT) $B$KN_@QE*(B patch $B$,8x3+$5$l$k$=$&$G$9!#(BJST $B$@$H(B 2005.04.13 04:00 $B$+$J!#(B

$B!!(B4 $B7n$N(B Windows Update $B$NF|(B ($BF|K\$G$O(B 4/13) $B$K$O

• OS - 5 $B7o(B
• Office - 1 $B7o(B
• MSN Messenger - 1 $B7o(B
• Exchange - 1 $B7o(B

$B!!$b$j$@$/$5$s$G$9$M!#(B $B$3$l$K$"$o$;$F!V0-0U$N$"$k%=%U%H%&%'%"$N:o=|%D!<%k!W$,99?7$5$l!"$5$i$K(B

Windows Update $B%5%$%H$G(B Windows $BMQ$N%;%-%e%j%F%#0J30$NM%@hEY9b$N99?7%W%m%0%i%`$r%j%j!<%9$9$kM=Dj$G$9!#$3$l$i$O(B Software Update Services $B$KG[I[$5$l$kM=Dj$G$9!#(B

$B$@$=$&$G$9!#$J$s$@$m$&!D!D!#(B

• Cisco Security Advisory: Vulnerabilities in the Internet Key Exchange Xauth Implementation

  CISCO IOS $B$N(B Easy VPN $B%5!<%P5!G=$K$*$$$F(B XAUTH $B5!G=$rMxMQ$9$k$H!"(B $BL5G'>Z%f!<%6$,(B VPN $B$K@\B3$G$-$F$7$^$&!#(B

• Cisco Security Advisory: Vulnerabilities in Cisco IOS Secure Shell Server

  CISCO IOS $B$N(B SSH $B%5!<%P5!G=$K(B 2 $B$D$N7g4Y$,$"$k!#(B

  1. CISCO IOS $B$G(B SSH version 2 $B%5!<%P$r5!G=$5$;$F$*$j!"$+$D!"(B

     • $B%f!<%6$,(B TACACS+ $B%5!<%P$GG'>Z$5$l$F$*$j!"(B $B%f!<%6L>$K%I%a%$%sL>$,4^$^$l$F$$$k$+!"(B
     • $B?7$7$$(B SSH $B%;%C%7%g%s$,G'>Z%U%'!<%:$K$"$j!"$+$D!"(B $B4{B8$NG'>Z:Q$_(B SSH $B%;%C%7%g%s$K$*$$$F(B send $B%3%^%s%I$,;H$o$l$?$+!"(B
     • terminal monitor $B%3%^%s%I$r;H$C$F%m%0%a%C%;!<%8$r(B SSH $B%;%C%7%g%s$KAw$k@_Dj$r$7$F$$$k>l9g$K!"(BSSH $B%5!<%P$,(B SSH $B%/%i%$%"%s%H$K%G!<%?$rAw$C$F$$$k:GCf$K%;%C%7%g%s$r@Z$C$F$7$^$&(B

     $B$H!"(BIOS $B$rF0:n$5$;$F$$$k%G%P%$%9$,%j%m!<%I$5$l$k!#(B

  2. CISCO IOS $B$G(B SSH version 1 $B$"$k$$$O(B 2 $B$N%5!<%P$r5!G=$5$;$F$*$j!"(B $B$+$D!"%f!<%6$,(B TACACS+ $B%5!<%P$GG'>Z$5$l$F$$$k>l9g$K!"4V0c$C$?%f!<%6L>$"$k$$$O%Q%9%o!<%I$r;HMQ$9$k$H!"%a%b%j%j!<%/$,H/@8!#(B SSH 2 $B$N>l9g$O!"@5>o$JG'>Z;~$K$b%a%b%j%j!<%/$,H/@8!#(B RADIUS $B%5!<%P$r;H$C$FG'>Z$7$F$$$k>l9g$K$O$3$N7g4Y$O$J$$!#(B

$B!!(BNTT $B%3%_%e%K%1!<%7%g%s%:$,07$C$F$$$k%H%i%s%8%C%H!&%5!<%S%9$@$1$G$b!V%O%$%l%Y%k$J$b$N$@$1$G(B1$BF|$K(B60$B7o!W$G$9$+!#$=$&$$$&;~Be$K$J$C$F$7$^$C$?$N$G$9$M!#(B

Microsoft Windows Server 2003 "Shell Folders" Directory Traversal Vulnerability

$B!!(BWindows Server 2003 SP1 $B1Q8lHG$G=$@5$5$l$F$$$k$3$H$,3NG'$5$l$?(B: penetration technique research site $B;2>H!#(B $B$^$?(B PivX $B$K$h$k$H!"(Bbid 7826 $B$N(B exploit $BMs(B$B$K$"$k(B ftpexp.html $B$K$D$$$F$O(B Windows Server 2003 $B$@$1$G$J$/(B Windows XP (SP2 $B4^$`(B) $B$K$b1F6A$9$k$H$$$&!#(B

March 2005 DNS Poisoning Summary

$B!!(BHandler's Diary April 7th 2005: DNS cache poisoning update (SANS ISC)$B!#7g4Y$"$j$N(B Windows NT / 2000 DNS $B%5!<%P$+$i(B BIND $B$d>e0L(B Windows NT / 2000 DNS $B%5!<%P$K(B forward $B$7$F$$$?>l9g$K$I$&$J$k$+!"$H$$$&OC$,=P$F$$$k!#(B

• Windows DNS $B"*(B BIND 9 $B$X(B forward: BIND 9 $B$,%4%_$r=|5n$7$F$/$l$k$N$G!"(Bcache $B1x@w$OH/@8$7$J$$!#(B

• Windows DNS $B"*(B BIND 4 $B$^$?$O(B BIND 8 $B$X(B forward: BIND 4 / 8 $B$O%4%_$r=|5n$7$F$/$l$J$$$N$G!"(Bcache $B1x@w$,H/@8!#(B

• Windows DNS $B"*(B Windows DNS: $B>e0L$N(B Windows DNS $B$K(B KB241352 $B$N@_Dj$,$5$l$F$$$l$P!"2<0L(B Windows DNS $B$K$O(B cache $B1x@w$OH/@8$7$J$$!#$=$&$G$J$1$l$P!"(Bcache $B1x@w$,H/@8!#(B

$B!!(BHandler's Diary $B$G$O!">e0L(B DNS $B%5!<%P$,(B BIND $B$N>l9g$O!"(BBIND 9 $B$X$N%"%C%W%0%l!<%I$r?d>)$7$F$$$k!#(B

$B$$$m$$$m(B (2005.03.30)

$B!!F|K\8l(B KB $B=P$^$7$?(B: 889323 - $B4IM} (Microsoft)

SHA-1 Broken

$B!!(B$B2rFI$5$l$?(BSHA-1: $B!V(BCRYPTO-GRAM$B!!(BMarch 15, 2005$B!W$h$j(B ($BF|7P(B IT Pro, 2005.04.07)

$B!!(BeTrust Intrusion Detection 3.0 / 3.0 SP1 $B$K7g4Y!#(Bbuffer overflow $B$9$k7g4Y$,$"$j!"(BDoS $B967b$r$B$3$N%Z!<%8(B $B$K$OB8:_$7$J$$$h$&$@!#(B

$B!!(BPHP 4.3.10 / 5.0.3 $B0JA0$K(B 2 $B$D$N7g4Y!#(B

• php_handle_iff() $B$K7g4Y$,$"$j!":Y9)$7$?2hA|%U%!%$%k$K$h$j(B DoS $B$,H/@8!#(B

  CVE: CAN-2005-0524

• php_handle_jpeg() $B$K7g4Y$,$"$j!":Y9)$7$?(B JPEG $B%U%!%$%k$K$h$j(B DoS $B$,H/@8!#(B

  CVE: CAN-2005-0525

$B!!(BPHP 4.3.11 / 5.0.4 $B$G=$@5$5$l$F$$$k!#(B

2005.04.19 $BDI5-(B:

$B!!(B[SECURITY] [DSA 708-1] New PHP3 packages fix denial of service$B!#(BDebian $B$5$9$,$G$9!#$$$^$@$K(B PHP3 $B$,%a%s%F%J%s%9$5$l$F$$$^$9!#(B

• FreeBSD Security Advisory FreeBSD-SA-05:02.sendfile: sendfile kernel memory disclosure

  FreeBSD 4.x / 5.x $B$N(B sendfile(2) $B$K7g4Y!#(B $B%U%!%$%k$NE>Aw$r3+;O$7!"E>AwCf$K%U%!%$%k$NBg$-$5$r=L>.$9$k$H!"(B kernel memory $B$N0lIt$,O31H$7$F$7$^$&LOMM!#(B patch $B$,$"$k$N$GE,MQ$9$l$P$h$$!#(B RELENG_4_8 $B$K$D$$$F$b=$@5$5$l$F$$$k!#(B

• FreeBSD-SA-05:03.amd64: unprivileged hardware access on amd64

  AMD64 $B$G$N(B FreeBSD 5.x $B$K7g4Y$,$"$j!"HsFC8"%W%m%;%9$,%O!<%I%&%'%"$N0lIt$KD>@\%"%/%;%9$G$-$F$7$^$&!#$3$N7k2L!"(BDoS $B967b$d%;%s%7%F%#%V>pJs$NO31H!"8"8B$N>e>:$,2DG=$K$J$k!#(B patch $B$,$"$k$N$GE,MQ$9$l$P$h$$!#(B

Adaptive Server Enterprise - Companion TechNote to UCN entitled Urgent from Sybase: Security Issues in ASE 12.5.3 and Earlier.

$B!!>\:Y(B: [VulnWatch] Sybase ASE Multiple Security Issues (#NISR05042005) (NGSSoftware)

SYM05-006: Denial of Service in Symantec Norton AntiVirus AutoProtect

$B!!(B2004 $B%7%j!<%:$K$D$$$F$bBP1~$5$l$?$h$&$G!"(B SYM05-006: Symantec Norton AntiVirus $B$N(B AutoProtect $B5!G=$K%5!<%S%95qH]$N@H $B$,(B 4/5 $BIU$G!VK\7o$N1F6A$r

March 2005 DNS Poisoning Summary

$B!!(B316786 - DNS $B%5!<%P!<$N(B [Pollution $B$KBP$7$F%;%-%e%j%F%#$G%-%c%C%7%e$rJ]8n$9$k(B] $B@_Dj$K$D$$$F(B (Microsoft)

DNS $B%-%c%C%7%eGK2u$NKI;_$O!"(BWindows 2000 SP3 $B0J9_$G$O!"%G%U%)%k%H$GM-8z$K$5$l$^$9!#(B

$B!!$=$&$@$C$?$N$+!#$9$k$H!"967b$r

$B!!(BAdobe Reader 7.0 / Adobe Acrobat 7.0 $B0JA0(B for Windows $B$K!"(BDoS $B$H$J$k7g4Y$H%Q%9>pJs$,O31H$9$k7g4Y!#(BAdobe Reader 7.0.1 / Adobe Acrobat 7.0.1 for Windows $B$G=$@5$5$l$F$$$k!#(Bpatch$B!#(B

$B!!L5=~$N(B Adobe Reader $B$O$H$b$+$/!"M-=~$N(B Adobe Acrobat 6.x $B$K$D$$$F$b!"(B7.0 $B$X$N%"%C%W%0%l!<%I$G$7$+BP1~$5$l$J$$LOMM!#$9$P$i$7$$2q

2005.04.28 $BDI5-(B:

$B!!(B$B%"%I%S%7%9%F%`%: ($BIY;NDL(B, 2005.04.21)$B!#@=IJE:IU(B CD-ROM $BFb$N(B Acrobat Reader / Adobe Reader $B$K4X$9$kJ8=q!#(B

$B!!$3$N$4$mA{$.$K$J$C$F$$$k(B DNS $B%-%c%C%7%e1x@w$5$o$.$N35MW!#(B Microsoft $B$O:#$+$i$G$b!"(BWindows NT 4.0 / 2000 $B$N(B DNS $B%5!<%P$KBP$7$F!"(B KB241352 $B$N@_Dj$r<+F0E*$K9T$C$F:F5/F0$9$k$h$&$J!V%;%-%e%j%F%#=$@5%W%m%0%i%`!W$r!V=EMW$J99?7!W$H$7$F8x3+$9$Y$-$J$N$G$O$J$$$N$+!#(B

$B!!(BWindows $B$J(B DNS $B%/%i%$%"%s%HJ}LL$K$D$$$F$O!"(BVulnerability Note VU#458659: Microsoft Windows domain name resolver service accepts responses from non-queried DNS servers by default $B$NOC$b;2>H!#$^$?%-%c%C%7%e4|4V$K$D$$$F$O(B:

• Windows XP $B$*$h$S(B Windows Server 2003 $B$G%/%i%$%"%s%HB&$N(B DNS $B%-%c%C%7%e$rL58z$K$9$kJ}K!(B (Microsoft)
• Windows 2000 $B$G%/%i%$%"%s%HB&$N(B DNS $B%-%c%C%7%e$rL58z$K$9$kJ}K!(B (Microsoft)

2005.04.06 $BDI5-(B:

$B!!(B316786 - DNS $B%5!<%P!<$N(B [Pollution $B$KBP$7$F%;%-%e%j%F%#$G%-%c%C%7%e$rJ]8n$9$k(B] $B@_Dj$K$D$$$F(B (Microsoft)

DNS $B%-%c%C%7%eGK2u$NKI;_$O!"(BWindows 2000 SP3 $B0J9_$G$O!"%G%U%)%k%H$GM-8z$K$5$l$^$9!#(B

$B!!$=$&$@$C$?$N$+!#$9$k$H!"967b$r

2005.04.07 $BDI5-(B:

$B!!(BHandler's Diary April 7th 2005: DNS cache poisoning update (SANS ISC)$B!#7g4Y$"$j$N(B Windows NT / 2000 DNS $B%5!<%P$+$i(B BIND $B$d>e0L(B Windows NT / 2000 DNS $B%5!<%P$K(B forward $B$7$F$$$?>l9g$K$I$&$J$k$+!"$H$$$&OC$,=P$F$$$k!#(B

• Windows DNS $B"*(B BIND 9 $B$X(B forward: BIND 9 $B$,%4%_$r=|5n$7$F$/$l$k$N$G!"(Bcache $B1x@w$OH/@8$7$J$$!#(B

• Windows DNS $B"*(B BIND 4 $B$^$?$O(B BIND 8 $B$X(B forward: BIND 4 / 8 $B$O%4%_$r=|5n$7$F$/$l$J$$$N$G!"(Bcache $B1x@w$,H/@8!#(B

• Windows DNS $B"*(B Windows DNS: $B>e0L$N(B Windows DNS $B$K(B KB241352 $B$N@_Dj$,$5$l$F$$$l$P!"2<0L(B Windows DNS $B$K$O(B cache $B1x@w$OH/@8$7$J$$!#$=$&$G$J$1$l$P!"(Bcache $B1x@w$,H/@8!#(B

$B!!(BHandler's Diary $B$G$O!">e0L(B DNS $B%5!<%P$,(B BIND $B$N>l9g$O!"(BBIND 9 $B$X$N%"%C%W%0%l!<%I$r?d>)$7$F$$$k!#(B

2005.04.14 $BDI5-(B:

$B!!(B4/12 $BDI5-J,$H$^$H$a$?!#(B

• $B!V0-!u$HBP:v!J>e!K(B ($BF|7P(B IT Pro, 4/12)
• $B!V0-!u$HBP:v!J2 ($BF|7P(B IT Pro, 4/13)

$B%+!<%=%k$*$h$S%"%$%3%s$N%U%)!<%^%C%H$N=hM}$N@H

$B!!(B$B%^%$%/%m%=%U%H!'!V(BWindows$BMQ%Q%C%A$K@H (CNET, 2005.04.01)$B!#(B Windows 9x/Me $BMQ$N(B patch $B$O$I$&$d$iIT==J,$i$7$$!#(B $B%V%k!<$K$J$k>e$KIT==J,!D!D!#(B

OLE $B$*$h$S(B COM $B$N@H

$B!!I{:nMQ>pJs(B: 896648 - $B%;%-%e%j%F%#99?7%W%m%0%i%`(B 873333 $B!J(BMS05-012$B!K(B $B$N%$%s%9%H!<%k8e(B svchost.exe $B%(%i!<$,H/@8$9$k$3$H$,$"$j$^$9(B (Microsoft)$B!#(B $BIT6q9g$NB8:_$r3NG'$7$F$$$k$=$&$G$9!#(B

SYM05-006: Denial of Service in Symantec Norton AntiVirus AutoProtect

$B!!(B2005 $B%7%j!<%:$K$D$$$F$OBP1~$5$l$?$h$&$G$9(B: $B%7%^%s%F%C%/!"(BNorton AntiVirus 2005$B$NF|K\HG=$@5%Q%C%A$rG[I[3+;O(B (Internet Watch, 2005.04.01)$B!#(B $B