$B%;%-%e%j%F%#%[!<%k(B memo - 2005.07
Last modified: Tue Apr 10 17:43:26 2007
+0900 (JST)
$B!!$3$N%Z!<%8$N>pJs$rMxMQ$5$l$kA0$K!"(B$BCm0U=q$-(B$B$r$*FI$_$/$@$5$$!#(B
$B!U(B
$B:9$7;_$a@A5a$GD@L[$9$k(BCisco$B@H
(ITmedia, 7/29)$B!#(B
Cisco$B$O$3$N:9$7;_$aL?Na$,H/9T$5$l$?8e!"!VL@F|Cf$K!W%;%-%e%j%F%#%"%I%P%$%6%j!<$r8x3+$9$k7W2h$G$"$k$HL@$i$+$K$7$?!#(B
$B!!$H$j$"$($:!"BT$A$G$9$M!#(B
$B!U(B
Windows Vista$B$N%;%-%e%j%F%#$OM-K>$=$&$@(B
(ITmedia, 7/29)$B!#8D?ME*$K$b4|BT$7$F$^$9!#(B
$B!U(B
$B;0=E8)$N8)L18~$17G<(HD%5%$%H$KIT@5%"%/%;%9!"%U%#%C%7%s%0:>5=$NF'$_Bf$K(B (Internet Watch, 7/29)$B!#%K%;(B eBay $B$K$5$l$?$=$&$J!#(B
$B!!85$M$?(B: $B;0=E8)!V#e!]%G%b2q5D<
($B;0=E8)(B)
$B!!;0=E8)$N!V#e!]%G%b2q5D<h$C
$B!!$&$R!h$Cu67$,$h$/$o$+$i$J$$$1$I!#(B
$B!U(B
$B!VCf9q$N73;v!W$r8l$k$3$H$r%?%V!<;k$9$k$J(B
($BF|7P(B BP, 7/29)$B!#$N$C$1$+$i(B
$B"#!H3K$N:nK!!I$rL5;k$7$?-73$NGzCFH/8@(B
$BCf9q?ML12rJ|73$N>-73$,$b$N$9$4$$H/8@$r$7$F$N$1$?!#$$$d$O$d!">W7bE*$H$$$&$+!"6CX3$H$$$&$+!"$S$C$/$j6DE7$7!"$=$N$"$H$KH)4($$62I]$K=1$o$l$k!"$H$$$&46$8$J$N$@!#(B
$B$J$s$F=q$$$F$"$k$+$i2?;v$+!"$H;W$C$?$i!"$3$s$JOC$@$=$&$@!#(B
$B!V$b$7%"%a%j%+$,Cf9q$HBfOQ$H$N73;vJ6Ah$K2pF~$7!"%_%5%$%k$dM6F3J<4o$rCf9qNNEZFb$NI8E*$K8~$1$FH/oJ<4o$G$N@oAh$r@o$$H4$/G=NO$O$J$$$+$i$@!W(B
$B!!$J$s$@!"$=$s$J$3$H$+!#(B
$BNd@o2Z$d$+$J$j$7:"!"(BNATO $B$O%h!<%m%C%Q@5LL$G;w$?$h$&$JH/8@$r$7$F$$$?$G$O$J$$$+!#!VDL>oJ<4o$G@>%I%$%D$K?/F~$7$?$i!"@o=Q3KJ<4o(B ($B%Q!<%7%s%0(B II) $B$GH?7b$9$k!W$H$$$&OC$@!#(BNATO $B$,8@$&$H$^$:$/$J$/$F!"Cf9q$,8@$&$H$^$:$$$N$+(B?
$B!!3K$O$7$g$;$sM^;_NOJ<4o$J$s$@$+$i!"$3$1$*$I$7$O@5$7$$;H$$J}$@$H;W$&$7!#(B
$BF|K\$K$H$C$F$O!"$^$:;H$o$l$J$$$@$m$&Cf9q$N3KJ<4o$h$j$b!"$?$C$?:#%?%lN.$5$l$F$$$kCf9q$N8x32J*
$B!U(B
$B;d$?$A$O$I$3$+$iMh$?$N$+!)!!%H%k%3$N%+%U%+%9?M$H%A%'%A%'%s@oAh(B (chechennews.org)$B!#(B2005.07.30$B!"El5~ETJ85~6h!"(B500$B1_!#(B
$B!!$$$/$D$+$NHG$N(B Sophos AntiVirus $B$K(B
buffer overflow $B$9$k7g4Y$,B8:_$9$k$=$&$G!#(B
$B>\:Y$OITL@!#(B
Sophos AntiVirus 3.96.0 ($B8x3+:Q(B) $B$*$h$S(B 4.5.4 ($B$^$@$_$?$$(B) $B$G$O=$@5$5$l$F$$$k$=$&$@!#(B
$B!!(B5.0.x $B7O$O(B?
2005.08.30 $BDI5-(B:
$B!!(BAdvisory: Sophos Anti-Virus Library Remote Heap Overflow (Sophos) $B$N:G?799?7$O(B
2005.08.26$B!#(BSophos Anti-Virus for Mac OS 8/9 $B$,(B 3.9.7 $B0J9_$G=$@5$5$l!"A4$F$N(B OS $BHG$G$N=$@5$,40N;$5$l$?$h$&$G$9!#(B5.0.x $B7O$O(B 5.0.5 $B0J9_$G=$@5$5$l$F$$$^$9!#(B
$B!U(B
National Vulnerability Database (NIST) $B$H$$$&$N$,$"$k$N$G$9$M!#(B
$B!U(B
$B!Z%G%8%?%kpJsJ]8n!A(B
(INSI)$B!#(B2005.09.08$B!"El5~ET=BC+6h!"L5NA!#(B
$B!U(B
$B2A3J(B.com$B2~cb;v7o!"(BNOD32$B$@$1$,%&%$%k%9$r8!CN$7$?$N$O$J$<$+(B
(Internet Watch, 7/27)$B!#$?$^$?$^%R%e!<%j%9%F%#%C%/$,8z$$$?$@$1$J$N$G$O!#(B
$B$=$l$O$H$b$+$/!"$H$C$H$H(B 2.50.x $B$rF|K\8l2=$7$F$/$@$5$$!#(B
$B:#8+$?$i(B 2.50.25 $B$K$J$C$F$F!"K\2HHG$O:Y$+$/%"%C%W%G!<%H$5$l$F$$$k$N$,$o$+$k$N$G$9$,!"F|K\8lHG$O$M$'!D!D!#(B
64bit $BHG(B (eset.com) $B$bMh$F$$$k$N$G!"$?$N$_$^$9$h!#(B
$B!U(B
$B!V?M5$%5%$%H$K$O%5%$%P!<%F%m$rKI$0@UG$$,$"$k!W%i%C%/@>K\
(Internet Watch, 7/27)
$B!U(B
$B!V%M%C%H%f!<%6!<$N6(NO$G%5%$%P!
(Internet Watch, 7/27)$B!#(Bpatch $B$"$F$@$1$G$OAk3d$l$OD>$i$J$$5$$,$7$^$9$,!#(B
$B!U(B
$B<"2l6d9TMM$,Z5;=Q$N:NMQ$r7hDj(B
($BIY;NDL(B, 7/27)
$B!U(B
$B!VKI$.$h$&$,$J$+$C$?!D!D!W!"%M%C%H6dIT@50z$-=P$7$NHo32
(ITmedia, 7/22)$B!#(BSATOU $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!V$3$s$J
$B!!$"$j$U$l$?
$B6H0w$N$&$A(B3$B?M$,E:IU%U%!%$%k$r%/%j%C%/$7$F$$$?!#(B
$B!!0B0W$Ku67$O$+$J$j0c$&5$$,!#(B
$B$=$&$$$&$3$H$,$G$-$k%"!<%+%$%VE83+$b$N$C$F!"$I$3$+$K$J$$$G$9$+$M!#(B
$B%m%0%$%s;~$N%Q%9%o!<%I$H$7$F!"%f!<%6!<$KMp?tI=$rH/9T$7$F$$$k6d9T$b$"$k!#!V$3$l$J$i!":#2s$NHH9T$OL$A3$KKI$2$?$N$G$O$J$$$+!W$H(BT$B
$B!!H]!#(B
$B%9%Q%$%&%'%"$K$h$kIT@5Aw6bHo32$,3HBg!"$_$:$[6d9T$d%8%c%Q%s%M%C%H6d9T$G$b(B (ITmedia, 7/9) $B$K$"$k$h$&$K%8%c%Q%s%M%C%H6d9T$G$b%d%i$l$F$$$?$o$1$G$9$,!"%8%c%Q%s%M%C%H6d9T$G$O(B $B%8%c%Q%s%M%C%H6d9T$N%;%-%e%j%F%#BP:v(B (japannetbank.co.jp) $B$K$"$k$h$&$K(B
$B?6$j9~$_!"=;=jJQ99$J$I$NBg@Z$J
$BMp?tI=$r:NMQ$7$F$$$?$K$b$+$+$o$i$:%d%i$l$F$$$^$9!#(B
$B$^$"!"$3$NSecurID $B$/$i$$:NMQ$7$F$b$h$5$=$&$K;W$&$N$@$1$I!"$=$&$$$&OC$C$F$J$$$s$G$9$+$M!#(B
$B$=$N>l9g$O$b$A$m$s%O!<%I%&%'%"%H!<%/%s$G!#(B
$B!U(B
BS $B%G%#%Y!<%H(B (NHK)$B!#!VK\3J2TF/$+$i(B 2 $BG/(B: $B!H=;4p%M%C%H!I$O$I$&$"$k$Y$-$+!W(B
$B$H$$$&$N$,(B 7/31 $B$KJ|1G$5$l$k$=$&$G$9!#F?L>4uK>$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B$C$F!";d$O(B BS $B$O8+$l$J$$$s$G$9$,!#(B
$B!!$7$+$7!"(Bw3m $B$G8+$k$H$o$1$o$+$i$s%Z!<%8$@$J!#(B
$B!U(B
SIM$B$G4k6H$N%;%-%e%j%F%#$rE}9g4IM}$;$h(B
(@IT, 7/26)
$B!U(B
[WD2003] Word 2003 $B$G%a%?%G!<%?$r:G>.8B$KM^$($kJ}K!(B
(Microsoft)
$B!U(B
$B%i%F%s%"%a%j%+$OG3$($F$$$k$+(B
($B%k!&%b%s%I!&%G%#%W%m%^%F%#!<%/(B, 2005.06)
$B!U(B
$B!VHw$($k?4!W$,Bg;v!=!=%+%+%/%3%`$N%$%s%7%G%s%H$+$iF@$i$l$?6571(B
(ITmedia, 7/27)
$B!!%+%+%/%3%`$N>l9g!"$3$&$7$?I{:nMQ%j%9%/$NCf$G0lHV?4$rDK$a$?$N$,!"5;=Q7O%a%G%#%"$K$h$k!V>\:Y$r8x3+$7$J$$$N$O$1$7$+$i$s!W$H$$$&O@D4$@$C$?$H$$$&!#(B($BCfN,(B) $B860x$d>\:Y$N8xI=$K4X$7$FF1;a$O!V2?$i$+$N
$B!!%+%+%/%3%`$K$H$C$F$O!"!V2?$i$+$NpJsO31H$9$iH/@8$7$F$$$k$K$b$+$+$o$i$:!"$=$&$$$&G'<1$G$9$+!#(B
$B$=$l$H$b!"%+%+%/%3%`$+$iO31H$7$?EE;R%a!<%k%"%I%l%9$NA4$F$O8D?M>pJs$K$O3:Ev$7$J$$7A<0$@$C$?$+$i(B ok ok$B!"$H$$$&OC$J$N$+!#(B
$B!!!V8x3+$9$k$3$H$K$h$k%a%j%C%H$b$"$k$,!"8xI=$7$?>l9g$N%j%9%/$,FI$a$J$$$3$H$+$i8@$o$J$$$h$&$K$7$F$$$?$,!D!D!W!J1sF#;a!K!"7k2L$H$7$F
$B!!!V8xI=$7$?>l9g$N%j%9%/!W$d!V8xI=$7$J$+$C$?>l9g$N%j%9%/!W$K$D$$$F!"(BLAC $B$N@>K\$5$s$H$+$KAjCL$7$J$+$C$?$s$@$m$&$+!#(B
$B!U(B
$B%7%c%H%k!"50F;>e$GE@8!=`Hw!!BQG.%?%$%k$NGKJRC&Mn(B
(asahi.com, 7/27)$B!"(B$B%?%s%/$d5!BN$+$iGKJR!)!!%7%c%H%kBG$A>e$2;~!!#N#A#S#A(B (CNN, 7/27)
$B!#%P!<%I%9%H%i%$%/$b$"$C$?$N$+!#(B
$B!!4XO"(B:
Return to Flight (NASA)$B!#(B
$B!U(B
www.xoops.org $B$,%/%i%C%/$5$l$?$=$&$G$9!#(B
$B@';^$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!!(BSAK Streets
$B$G8x3+$5$l$F$$$?(B
CGI $B%9%/%j%W%H(B
$B$N$$$/$D$+$K$D$$$F!"0JA0$NHG$K7g4Y$,$"$j!"(Bremote $B$+$i(B OS $B>e$NG$0U$N%7%'%k%3%^%s%I$r$B8=:_8x3+$,Dd;_$5$l!"1?MQCf;_$,8F$S$+$1$i$l$F$$$k(B$B!#(B
$B$J$+$N$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!!$0$0$k$H!"$3$N7o$N(B exploit $B$H$*$\$7$-$b$N$bH/8+$G$-$F$7$^$$$^$9$M!D!D!#(B
$B%/!<%k7G<(HD$J$I(B w_s3*.cgi $B$N1?MQ
$B!!(BMozilla $B%W%m%8%'%/%H$K$*$$$F(B IDN ($B9q:]2=%I%a%$%sL>(B)
$B$,M-8z$K$5$l$k(B TLD $B$N%j%9%H!#(B
$B$b$A$m$s(B .jp $B$b4^$^$l$F$$$^$9!#(B
$B5U$K8@$&$H!"$3$3$K4^$^$l$F$$$J$$(B TLD $B$G$O(B IDN $B$O4m81$9$.$FM-8z$K$G$-$J$$!"$H!#(B
4$B7n(B1$BF|$+$i(B5$B7n(B12$BF|$^$G(B ($BCfN,(B) $B$KJa3M$7$?%W%m%0%i%`$N$&$A!$%\%C%H$H$7$F$N5sF0$,3NG'$5$l$?$N$O!$(B3$BK|(B1846$B7o!J(B3705$B.;3;a!K(B
$B!!B?$$$H$OJ9$$$F$$$^$7$?$,!"$=$l$[$I$H$O!#(B
$BFC$K!"8!=P$G$-$J$$(B bot $B$N?t!D!D!#(B
$B%\%C%H$,Aw?.$9$k%H%i%U%#%C%/$O!$(B1$BBf!J(B1IP$B%"%I%l%9!K$"$?$j(B0.3k$B%S%C%H!?ICDxEY!#$3$N$?$a!$9qFb$N(BISP$B%f!<%6!<$N(B2$B!A(B2.5$B!s$,46@w$7$F$$$k$H$9$k$H!$A4%]%C%H$,@j$a$kBS0h$O(B10G$B%S%C%H!?IC$KAjEv$9$k$H$$$&!#(B
$B!!$U$D$&$N4k6H$J$i!"(B1/100 $B$K967b$5$l$?$@$1$G$b%D%V$5$l$k$h$M$(!#(B
$B$$$d$O$d!#(B
- HTTP Request Smuggling
$B!!(B[SA14530] Apache HTTP Request Smuggling Vulnerability
(secunia)$B!#(BApache 2.0.55 $B$G=$@5$5$l$kM=Dj$@$=$&$G$9!#(B
- $BHkJ8$H(BSymantec AntiVirus$B!"F10l(BPC$B$K%$%s%9%H!<%k$9$k$H0E9f%U%!%$%kGK2u$N$*$=$l(B
$B!!%7%^%s%F%C%/$+$i2sHr%D!<%k$,8x3+$5$l$^$7$?(B:
$BHkJ8$G0E9f2=$7$?%U%!%$%k$r3+$1$J$$(B ($B%7%^%s%F%C%/(B)$B!#(B
$B0J2<$N%3%^%s%I$r
* SAVCE $B%/%i%$%"%s%H$N>l9g(B:
C:\Program Files\Symantec AntiVirus\SAVRTICFG.exe ICFG:OpenScanningMode 0
* SCS $B%/%i%$%"%s%H$N>l9g(B:
C:\Program Files\Symantec Client Security\Symantec AntiVirus\SAVRTICFG.exe ICFG:OpenScanningMode 0
$B!!$J$s$@$+(B SAVCE $B$d(B SCS $B$N5!G=$N0lIt$rL58z2=$7$F$$$k46$8$G$9$M!D!D!#(B
SAVRTICFG.exe $B$r;H$&$H!"$b$C$H$$$m$$$m@_Dj$G$-$k$N$+$J$"!#(B
$B!!(BClamAV 0.86.1 $B0JA0$KJ#?t$N7g4Y!#(B
TNEF, CHM, FSG $B%U%!%$%k$N8!>Z$K$*$$$F(B integer overflow $B$9$k7g4Y$,$"$j!"96N,%U%!%$%k$K$h$jG$0U$N%3!<%I$r
$B!!(BClamAV 0.86.2 $B$G=$@5$5$l$F$$$k!#(B
$B!!$^$:$O0lFI$r!#$$$d$O$d!#(B
$B!!(BZoomSight
(hitachi.co.jp)
$B$O(B
2004 $BG/EY%0%C%I%G%6%$%s>^$r^(B$B$7$F$$$k$N$@$=$&$G!#(B
$B$G!"(B
$BF|N)<+?H$K$h$k%G%b%5%$%H(B$B$,MQ0U$5$l$F$$$k$N$G$9$,!"(B
$B$=$3$+$i$?$I$l$k(B ZoomSight $B@bL@%Z!<%8(B$B$G$b(B
$BF0:n>r7o(B
($BCfN,(B)
* $B$*;H$$$N%V%i%&%6$N@_Dj$,!"=pL>IU$-(BActiveX$B$N
$B$H$5$l$F$7$^$C$F$$$^$9$M!#F0:n>r7o$H$7$F;XDj$7$^$9$+$=$&$G$9$+!D!D!#(B
SIer $B$H$$$&$h$j$O3+H/85$NLdBj$_$?$$$G$9$M$(!#$b$C$H$b!"$=$l$K5?Ld$r46$8$J$$(B
SIer $B$bLdBj$J$N$@$m$&$1$I!#(B
2005.08.04 $BDI5-(B:
$B!!;w$?$h$&$J;X<($OB>$K$b$$$m$$$m$"$k$N$@$=$&$G(B:
$B!!(BInternet Explorer $B$K$*$1$k(B JPEG $B%U%!%$%k$Nl9g$K$h$C$F$OG$0U$N%3!<%I$N$B%5%s%W%k(B JPEG $B%U%!%$%k(B$B$r
$B!!4XO"(B: IE$B$KL$%Q%C%A$N@HZ%3!<%I$"$j(B
(slashdot.jp, 2005.07.19)
2005.08.10 $BDI5-(B:
$B!!(BInternet Explorer $BMQ$NN_@QE*$J%;%-%e%j%F%#99?7%W%m%0%i%`(B (896727) (MS05-038) (Microsoft) $B$G=$@5$5$l$^$7$?!#(B
CVE: CAN-2005-1988
$B!!85$M$?(B: Secunia Research 21/07/2005
- avast! Antivirus ACE File Handling Two Vulnerabilities -
(secunia)$B!#(Bavast! 4.x $B$K$*$1$k(B ACE $B7A<0%U%!%$%k$N07$$$K7g4Y!#(B
avast! 4.x $B$K4^$^$l$k(B 3rd $B%Q!<%F%#%i%$%V%i%j(B UNACEV2.DLL $B$K7g4Y$,$"$j!"(B
- .. $B%P%0$N$?$a!"G$0U$N%G%#%l%/%H%j$K%U%!%$%k$r=q$-9~$^$l$k(B
- $BD9Bg$J%U%!%$%kL>$K$h$j(B buffer overflow $B$,H/@8!"G$0U$N%3!<%I$r
$B!!=$@5HG$,=P$F$$$k!#(B
$B!!Ev3:$N(B UNACEV2.DLL $B$O(B winace.com
$B$N(B Developers $B$+$iF~
$B!U(B
$B;dJ*#P#C$,46@w!"86H/8!::;qNA$,%M%C%H>eN.=P(B
($BFIGd(B, 7/22)$B!#Nc$K$h$C$F(B Winny $B$M$?$J$N$G$9$,!"(B
$B%G!<%?$,J]B8$5$l$F$$$?J]0B1!8!::41$N;dJ*%Q%=%3%s$,%3%s%T%e!<%?!<%&%$%k%9$K46@w$7!"N.=P$,5/$-$?$H$_$i$l$k!#3KJ*
$B$h$j$K$b$h$C$FJ]0B1!$N8!::41$+$i%@%@1L$l$7$A$c$C$F$^$9!#(B
- CAN-2005-2096: zlib 1.2.x buffer overflow
$B!!$3$N7g4Y$,=$@5$5$l$?(B zlib
1.2.3 $B$,=P$F$$$^$7$?!#(B
$B!!(Bfetchmail 6.2.5 $B0JA0$K7g4Y!#(BPOP3 $B5!G=$K(B buffer overflow $B$9$k7g4Y$,$"$j!"96N,%5!<%P$ND9Bg$J(B UID $B=PNO$K$h$C$FG$0U$N%3!<%I$rCAN-2005-2335
$B!U(B
GTA$B3+H/85!"$o$$$;$D%7!<%s:n@.G'$a$k!#%l!<%F%#%s%0$O!V@.?M$N$_!W$K(B
(ITmedia, 7/21)
$B!U(B
$B$I$3$G$b%;%-%e%"$K<+J,@lMQ$N(BPC$B4D6-$r:F8=$9$k%=%U%H%&%'%"(B
$B!V%7%'%"!<%I(BPC$B!W$rH/Gd(B (NTT-IT, 7/21)
$B!U(B
$BF|K\$N!VM"F~:9;_?=N)@)EY!W$K7g4Y(B---$B%-%d%N%s$N!V%i%C%A%l%P!
($BF|7P(B Tech On, 7/20)
$B!U(B
$B2F5Y$_!uD94|5Y2K(B
($BF|K\$N%;%-%e%j%F%#%A!<%`$N(B Blog$B!"(B 7/21)$B!#(B
$BBg3X$NCf$N?ME*$K$O$`$7$m!"$3$l$+$i$,>!Ii$@$C$?$j$9$k$N$G$9$,!#(B
$B!U(B
$BJF(BMicrosoft$B!$%9%Q%$%&%(%"BP:v%=%U%H!V(BWindows AntiSpyware$B!W%Y!<%?HG$r%"%C%W%G!<%H(B
($BF|7P(B IT Pro, 7/21)$B!#$^$?99?7$5$l$?$=$&$G$9!#(B
$BF1%j%j!<%9$O!$1Q8lHG$N(BWindows OS$B0J30$K$OE,MQ$G$-$J$$!#(B
$B!!$"$l$C(B? $B$=$s$J$3$H$J$$$H;W$&$1$I!D!D!#(B
$B$b$A$m$sF|K\8lBP1~$O$5$l$F$J$$$N$G(B at your own risk $B$@$1$I!#$C$F!"$b$H$b$H$,&BHG$J$s$@$7!D!D!#(B
$B!U(B
$BJF(BMicrosoft$B$,JF(BFinjan$B$K=P;q!$%;%-%e%j%F%#FC5v$N%"%$%G%"$r%i%$%;%s%9
($BF|7P(B IT Pro, 7/21)
$B!U(B
$BJF(BMicrosoft$B!$%;%-%e%j%F%#!&%a%C%;!<%8%s%0$NJF(BFrontBridge$BGc<}$G!V(BExchange Server$B!W6/2=$X(B
($BF|7P(B IT Pro, 7/21)$B!#(BFrontBridge
$B$O$3$s$J46$8$N$3$H$r$d$C$F$k%H%3$N$h$&$G(B: $B%a%C%;!<%8%s%0!&%;%-%e%j%F%#!&%5!<%S%9$X$N4k6H%K!<%:$,9b$^$k(B
(ITmedia, 2003.08.22)
$B!U(B
Microsoft$B$O(BClaria$B
($BF|7P(B IT Pro, 7/20)
$BI.pJs$K$h$l$P!$(BMicrosoft$B$O4{$K(BClaria$B$NGc<}$rCGG0$7$?!#Gc<}$9$k$H$$$&$&$o$5$NI>H=$,$"$^$j$K0-$+$C$?$?$a$@!#(BMicrosoft$B$,%f!<%6!<$N9TF0$r%b%K%?%j%s%0$9$k5;=Q$r5a$a$F$$$k$H$$$&$3$H$KJQ$o$j$O$J$$!#(B
$B!!$&!<$s!D!D!#!V(BMicrosoft$B$,%f!<%6!<$N9TF0$r%b%K%?%j%s%0$9$k5;=Q$r5a$a$F$$$k$H$$$&$3$H$KJQ$o$j$O$J$$!W$H$$$&$N$,$h$/$o$+$i$s$J$"!#(B
Microsoft $B$K$O(B Curious Browser $B$b$"$k$o$1$G!"$J$<$o$6$o$6(B Gator $B$J$s$+$,$[$7$$$H$$$&OC$K$J$k$N$+$,$h$/$o$+$i$s!#(B
$B!U(B
$BJFJ$,H?BP(B
($BKhF|(B, 7/21)
$B!U(B
$BCf9q$N!VD94|E*6<0R!W$r6/D4!!9qKIAm>JG/ (CNN,7/20)
$B!U(B
$B%$%i%/$NJFJ<;N$K@:?@E*LdBj(B (NHK, 7/21)$B!#(B
$B$?$@$G$5$(@55A$,$J$$>e$K!"=#J<$H$+$,9T$C$F$k$o$1$@$7!#(B
$BAuHw$bIT==J,$_$?$$$@$7!#(B
$B8=e$J$s$G$7$g$&$M!#(B
$B!U(B
$B%_%5%$%kKI1R$G4tIl$K#P#A#C#3!!KI1RD#J}?K(B
($BCfF|(B, 7/21)$B!#:k6L!"4tIl!"J!2,$@$=$&$G$9!#(B
$BB>$O8=>u$N$^$^$J$N$+$J!D!D(B PAC1 $BAjEv$G$7$?$C$1(B?
$B!U(B
$BA0ED2qD95- ($BA46d6((B, 7/19)$B!#%9%Q%$%&%'%";v7o!"8D?M>pJsJ6<:;v7o$J$I$K$D$$$F!#(B
$B!!A42q0w6d9T$KBP$7$FE0Dl$7$?FbMF$K$D$$$F0lIt?=$7$"$2$k$H!"56B$%-%c%C%7%e%+!<%ILdBj$N:]$K!"Ho32FO$rC/$,=P$9$N$+$K$D$$$FD4@0$K
$B!!8DJL$N6d9T$NOC$G?=$7$"$2$k$H!"$_$:$[$N>l9g$K$O!"A4$F$N%$%s%?!<%M%C%H%P%s%-%s%0$N$*5RMM$KBP$7(B50$BK|1_$^$G!"99$K#M#M#C$N$*5RMM$K$O(B100$BK|1_$^$G!"J]81$r$+$1$5$;$F$$$?$@$$$F$$$k!#:#2s$NHo32$KAx$o$l$?$*5RMM$N>l9g$K$O!"$*$R$H$j$NJ}$O$3$NJ]816b3[$NHO0OFb$G$"$k$?$a$K!"$"$k0UL#$G$OHw$($,=PMh$F$$$?$H$b8@$($k$,!"$b$&$R$HJ}$N>l9g$O!"$3$N6b3[$rD6$($?Ho32$,=P$F$$$k!#(B
$B!!@$$NCf!"$9$3$7$O?JJb$7$F$$$k$h$&$G$9!#(B
$B!U(B
$B%S%67O%+!<%I!"$5$i$K#1#3#1#2?MJ,$N>pJsN.=P$+(B (asahi.com, 7/20)
$B!U(B
$BM9Cy$,#A#T#MBg2~=$!!Ls#2K|#6@iBf!"KIHH5!G=9b$a$k(B
(asahi.com, 7/13)$B!#$3$l$+$i$d$j$^$9!"$H$$$&OC$_$?$$!#(B
$B#0#6G/Kv$^$G$K?t2/1_$+$1$FF~NO%G!<%?$N0E9f2=$J$I$NBP:v$r6/2=$9$k$H8+$i$l$k!#(B ($BCfN,(B) $B2$JF$N#A#T#M$G$OF~NO$5$l$?0E>ZHV9f$,30It$+$iEp$_e$,I,MW!W$H!":rG/8eH>$+$i8x
$B!!$b$7$+$7$F!":#$,$$$A$P$s$"$V$J$$$G$9$+(B?
$B!!(BGreasemonkey
$B$N(B 0.3.5 $B$h$jA0$NHG$K7g4Y!#(B
$B>/$J$/$H$b(B 1 $B$D$N(B
UserScript
$B$K%^%C%A$9$k(B web $B%5%$%H$,!"%f!<%6(B PC $B>e$N%m!<%+%k%U%!%$%k$rFI$_-Mh$NHG$G5!G=$,I|3h$9$kM=Dj$@$=$&$@!#(B
$B!!(BWiki $BHiki $B$N(B
0.8.0 $B!A(B 0.8.1 $B$K$*$$$F!"%W%i%0%$%s=q<0Fb$NJ8;zNs$K$*$1$k(B " $B$N%(%9%1!<%W$,$J$5$l$F$$$J$$$?$a$K(B XSS $B7g4Y$,B8:_!#(B
0.8.2 $B$G=$@5$5$l$?$=$&$G$9!#$+$:$R$3$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!!(BtDialy $B$H(B$B$O$F$J(B$B$G(B CSRF $B7g4Y$X$NBP1~$,$J$5$l$F$$$k$h$&$G$9!#(B
$B!!$$$:$l$b!"(BCSRF $B7g4YBP1~$N$?$a$K;EMM$,JQ99$5$l$F$$$k$=$&$G!#(B
$BCm0U$7$^$;$&!#(BtDiary $B$N>l9g$O(B
tDiary 2.0.2$B!"(B2.1.2$B%j%j!<%9(B
$B$K$$$m$$$m$HCm0U=q$-$,$"$j$^$9!#(B
$B!U(B
$B%9%Q%$%&%'%"$K$h$kHo32$NKI;_$K8~$1$?Cm0U4-5/(B
(IPA, 7/20)
$B!U(B
$B%=%U%H%&%(%"Ey$N@HpJs$K4X$9$kFO=P>u67(B
[2005$BG/Bh(B2$B;MH>4|!J(B4$B7n!A(B6$B7n!K(B]
(IPA, 7/19)
$B!U(B
$B!V(B4000$BK|?MJ,>pJsO3$($$!W%+!<%I7h:Q2q
(ITmedia, 7/20)
$B!U(B
$B3$308~$1$K!V%j%M!<%8%e(BII$B!WMQIT@5%W%m%-%7@_CV!"Cf9q?MN13X@8$rBaJa(B
(Internet Watch, 7/20)
$B!U(B
$B9q;:0E9f%"%k%4%j%:%`!V(BCamellia$B!W$,%$%s%?!<%M%C%H$NI8=`0E9f5,3J$K:NMQ(B (Internet Watch, 7/20)
$B!U(B
OCN$B%f!<%6!<$,#2$A$c$s$M$k$K0l;~%"%/%;%9$G$-$J$$;vBV$K(B
(Internet Watch, 7/19)
$B#2$A$c$s$M$k$G$O!V(BOCN$B$K3d$jEv$F$i$l$F$$$k(BIP$B%"%I%l%9$+$i(BDoS$B967b$r5$l$J$$!W$H2sEz!#$3$l$r
$B!!(B$B!V41@=%O%C%+!J(B
$B$H$$$&OC$,$"$j$^$7$?$,!"
$B!!$"$H!"$d$C$Q$j:#G/$+$i$d$i$J$$$H4V$K$"$o$J$$$N$G$O(B?
$B$H;W$C$?$1$I!"$"$H(B 1 $B$+7n
$B!U(B
$B!V(BMicrosoft Windows Server 2003 Service Pack 1$B!W$X$NBP1~$K$D$$$F(B
($B%H%l%s%I%^%$%/%m(B)$B!#$"$$$+$o$i$:!V8!>ZCf!W$H$+!V2005.07.26 $B$+$i(B SP1 $B$r<+F099?7$GG[?.$9$k%<(B$B$HB)$^$$$F$$$k4k6H$,B8:_$9$k$N$G$9$,!D!D!#$&!<$`!#4XO"(B:
$B!U(B
$B>pJs=hM}(B$B$N:G?79f(B 2005 Vol.46 No.7 $B$,(B spam $BFC=8$G$9$M!#(B
$B!U(B
JPCERT/CC $B3hF035MW(B [ 2005$BG/(B4$B7n(B1$BF|!A(B 2005$BG/(B6$B7n(B30$BF|(B ]
(JPCERT/CC)
$B!U(B
$BBh;02s%;%-%e%j%F%#$b$_$8%;%_%J!<(B$B!#(B
2005.08.20$B!"9-Eg8)9-Eg;T!"0lHL(B 2500 $B1_!#(B
$B$O$^$b$H$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
$B!V%M%C%H%(!<%8%'%s%H$N%U%)%l%s%8%C%/!&%5!<%S%9!"D4::5;=Q%<%_$r3+;O!W(B
--- $B8=>l$ND4::0w!&A\::41$K9bEY$J5;=Q$r4T85$9$k%<%_(B ---
($B%M%C%H%(!<%8%'%s%H(B, 7/20)$B!#(B
$B!!$3$s$J$N$b(B:
$B!U(B
[AML 2583] $B!X(B8/6$BLw9q?@$B!#3Z$7$=$&$G$9$M!#(B
$B!!(BFreeBSD 5.x $B$N(B devfs(5) $B$K7g4Y!#(Bjail(2) $B4D6-$NFbB&$+$i!"1#JC$5$l$F$$$k$O$:$N%G%P%$%9$K%"%/%;%9$G$-$F$7$^$&!#(Bpatch $B$,$"$k$N$G!"E,MQ$7$?>e$G(B kernel $B$r:F9=C[$7!"%$%s%9%H!<%k8e:F5/F0$9$l$P$h$$!#(B
$B4XO"(B:
$B!U(B
$B2x$7$5$,A}$9%m%s%I%s%F%m;v7o(B
(tanakanews.com, 7/19)$B!#$&!<$`!#(B
$B!U(B
http://ns.hyougo-net.com (= www.hyougo-net.com) (Netcraft) $B$H$$$&!V(B$B$R$g$&$427Gd;T>l6(F/%M%C%H%o!<%/?d?J6(5D2q(B$B!W$N%5%$%H$,$"$k$=$&$J$N$G$9$,!"(B
$B!VDj4|%"%2!W$N$h$&$K%d%i$l$F$$$k$h$&$G$9(B (zone-h.org)$B!#(B
x_kobe_x $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
Rgrey - S25R + postgrey $B%Q%C%A(B (hakuba.jp)$B!#(B
$BAK;_N((B99%$B$N%9%Q%`BP:vJ}<0$N8&5fJs9p(B (gabacho-net.jp) $B$K$*$1$k(B whitelist $B$N%a%s%F%J%s%9J}K!$H$7$F(B greylisting $B$r;H$&OC!#(B
postgrey
$B$X$N(B patch $B$H$7$F
$B!U(B
$B!V0BA4$J%V%i%&%6!W$J$I$b$&B8:_$7$J$$(B
(CNET, 7/15)$B!#(BUS-CERT $B$N(B Art Manion $B;a$K$h$k2r@b!#(B
$B!U(B
Firefox$B$N%W%m%b!<%7%g%s%5%$%H$K2?
(CNET, 7/19)$B!#$$$m$$$m=P$^$9$M$(!#(B
$B!U(B
$BJF(BVeriSign$B!"JF(BiDEFENSE$B$r(B4,000$BK|%I%k$GGc<}(B
(Internet Watch, 7/15)$B!#(B
$B!U(B
$B%Q%?!<%s%U%!%$%kLdBj$G(B9$B2/1_!"%H%l%s%I%^%$%/%m6H@SM=A[$r2
(Internet Watch, 7/15)$B!#(B9 $B2/1_$G:Q$s$G$h$+$C$?$G$9$M$(!#(B
$BJ?F|$@$C$?$i7e$,(B 1 $B$D$+(B 2 $B$D0c$C$F$$$?$G$7$g$&$+$i!#(B
$B!U(B
$B!V(BSender ID$B$d(BSPF$B$r5U
($BF|7P(B IT Pro, 7/16)
$B!!(BWindows $B>e$G(B NOD32 $B$N%P!<%8%g%s(B 2.50.23 $B$h$jA0$NHG$rMxMQ$7$F$$$k>l9g$K!"(BWindows Update $B$d(B Microsoft Update $B$,(B 0x8007041D $B%(%i!<$r=P$7$F<:GT$9$k$3$H$,$"$kLOMM!#(B2.50.23 $B0J9_$G2r7h$5$l$F$$$kLOMM!#(B
$B!!%-%d%N%s%=%j%e!<%7%g%s$K$b(B
Microsoft Update$B!J(BWindows Update$B!K$,$G$-$J$$(B (canon-sol.jp) $B$H$7$F>pJs$,=P$F$$$k$,!"$J$<$+(B
KB 902322 (Microsoft)
$B$[$IL@3N$JFbMF$G$O$J$$!#(B
$B$A$J$_$K(B $BK\2H$N%@%&%s%m!<%I%Z!<%8(B$B$r8+$k$H!":G?7%P!<%8%g%s$O(B 2.50.25 $B$NLOMM!#(B
$B
$B!!$*$*$+$o$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!!$J$*!"(BWindows Update $B$N%H%i%V%k$K$D$$$F$O!"$^$:$O(B
884101 - Windows Update $B$K4X$9$k5;=Q>pJs(B
(Microsoft) $B$r8+$F$_$k$H5H$J$h$&$G$9!#(B
$B!!(BFirefox $B$H(B Thunderbird $B$N(B 1.0.5 $BHG$K$O(B API $B$NJQ99$KH<$&8_49@-$NLdBj$,H/@8$7$F$*$j!"(B
- $B$3$l$KBP1~$7$?(B 1.0.6 $BHG$rAa4|$KDs6!$9$k(B ($B4{$K(B RC $BHG(B$B$,EP>l$7$F$$$k(B)
- 1.0.5 $BHG$K$D$$$F$O1Q8lHG$N$_$H$7!"3F9q8l%m!<%+%i%$%:HG$ODs6!$5$l$J$$(B
$B$3$H$,7hDj$5$l$?LOMM!#(B
$B$3$N>u67$KBP$7$F!"3F9q$N%m!<%+%i%$%:HGMxMQe$2$F$$$kLOMM!#(B
$BF|K\8lLu(B #768544 (slashdot.jp) $B$h$j(B:
$B!VMj$`$+$i!"$=$s$J$K[#Kf$JBVEY$O$d$a$F$/$l!*!!2?$,LdBj$J$N$+$-$A$s$H@bL@$r$7$F$/$l!*!W$H%]!<%i%s%I8l$N%m!<%+%i%$%Firefox 1.0.5 $B%m!<%+%i%$%u67$K4X$9$k(B netscape.public.mozilla.l10n $B%K%e!<%9%0%k!<%W$X$N%a%C%;!<%8(B$B$NCf$GHaDK$N@<$r>e$2$F$$$k!#!V%]!<%i%s%I$N(B Firefox $B%f!<%6$+$i(B Firefox 1.0.5 $B$,$J$<%]!<%i%s%I8l$GMxMQ$G$-$J$$$N$+$r?R$M$kEE;R%a!<%k$r;3$N$h$&$Ku67$rCN$i$7$a$kBg!9E*$J@kEA$K$J$C$F$7$^$&!#!W(B
$B!!4{$K==J,@kEA$K$J$C$F$$$k$h$&$J5$$,!#(B
$B!!(B#768544 $B$O(B slashdot.jp $B$N4XO"%9%l(B
$B!V(BFirefox/Thunderbird 1.0.5$BF|K\8lHG$O8+Aw$j(B$B!W(B($B8+Aw$i$l$?$N$OF|K\8lHG$@$1$G$O$J$$$N$G$3$N%?%$%H%k$O8m2r$r>7$$$F$$$k$h$&$@$,!D!D(B) $B$+$i$N$b$N!#B>$K$b$$$/$D$+(B:
#768380: Stable$B$C$F$J$s$@$m$&(B
(slashdot.jp)$B!#(B
$B0B0W$JJQ99$rL57Y9p$G9T$C$F$7$^$C$?$N$+$J$"!#(B
#768444 (slashdot.jp)$B!#(B
$B<+J,$N4D6-$@$H%m!<%+%i%$%:%;%s%?!<(B [mozilla-japan.org]$B$K$"$k!V(BMozilla Firefox 1.0+ $BF|K\8lHG(B Win/Linux $BMQ(B XPI $B%Q%C%1!<%8!W$GF|K\8l2=$O!J$?$V$s!KBg>fIW$J$s$G$9$h$M(B
$B7o$N$b$N(B$B$O!V(BFirefox 1.0 $B%j%j!<%98e$Kl9g$K$O==J,$K$4Cm0U$/$@$5$$!W$H$5$l$F$$$k$N$G!"$U$D$&$N?M$K?d>)$9$k$N$O:$Fq$@$H;W$$$^$9$,!D!D!#(B
$B!!$H$b$"$l!"(Bmake the switch today (Firefox $B%[!<%`%Z!<%8(B$B$G$NI=8=(B) $B$HK\5$$G8@$C$F$$$k$N$J$i!"!V1Q8lHG$H%m!<%+%i%$%:HG$N%j%j!<%9F|$,%:%l$F$$$k(B = $B%m!<%+%i%$%:HGMxMQu67$r2r7h$9$k!"$N$,:,K\E*$JBP:v$@$m$&!#(B
0day exploit $B$KAa5^$KBP1~$9$kI,MW$,$"$k$N$G;EJ}$J$/!D!D$H$$$&>u67$J$i$H$b$+$/!"(B1.0.5 $B$G9T$o$l$?=$@5$O$=$&$G$O$J$$$N$G$7$g$&(B?
$B!!AaED$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
2005.07.20 $BDI5-(B:
$B!!(BFirefox
$B$H(B
Thunderbird
$B$N(B 1.0.6 $BHG$,=P$^$7$?!#(BFirefox 1.0.6 $B$K$D$$$F$O3F9q8l%m!<%+%i%$%:HG$bF1;~%j%j!<%9$5$l$F$$$^$9!#;DG0$J$,$i!"(BThunderbird 1.0.6 $B$O:#$N$H$3$m1Q8lHG$7$+$"$j$^$;$s!#(B
$B!!AaED$5$s!">eED$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
Thunderbird 1.0.5$B$,%j%j!<%9(B (ITmedia, 7/14)$B!#(B
Fixed in Thunderbird 1.0.5 (mozilla.org)$B!#(B
$B8=;~E@$G$O(B$B1Q8lHG$N$_(B$B$N$h$&$G$9!#(B
[Full-disclosure] LSS Security Advisory: Winamp remote buffer
overflow vulnerability$B!#(B
Winamp 5.03a, 5.09, 5.091 $B$K$*$$$F!"(BMP3 $B$N(B ID3v2 $B%?%0$N=hM}$K(B
buffer overflow $B$9$k7g4Y$r3NG'$7$?!"$H$$$&OC!#(B
$B=$@5HG$,$^$b$J$/EP>l$9$kM=Dj$@$H$$$&!#%G%b(B MP3 $B%U%!%$%k$,8x3+$5$l$F$$$k!#(B
APPLE-SA-2005-07-12 Darwin Streaming Server 5.5.1$B!#(B
Version 5.5 for Windows 2000/2003 Server $B$K(B DoS $B7g4Y!#(B5.5.1 $B$G(B fix $B$5$l$F$$$k!#(B
Mac OS X / Linux $BHG$K$O$3$N7g4Y$O$J$$!#(B
MIT Krb5 $BJ}LL!#(B
MIT krb5 1.4.1 $B0JA0$K7g4Y!#(B
MIT krb5 1.4.1 $BMQ$N(B patch $B$,Ds6!$5$l$F$$$k!#(B
MPSB05-05 - Security Patch available for JRun 4.0 token collision
(Macromedia)$B!#(B
JRun 4.0, ColdFusion MX 6.1 Enterprise with JRun, ColdFusion MX 7.0 Enterprise Multi-Server Edition $B$K1F6A!#(Bpatch $B$,$"$k$N$GE,MQ$9$l$P$h$$!#(B
[Full-disclosure] Stack-Based Buffer Overflow in Sybase
EAServer 4.2.5 to 5.2
RHSA-2005:571-06: cups security update$B!#(B
STR #700: Location and printer name case sensitivity (cups.org)$B!#(B
CVE: CAN-2004-2154$B!#(B
[ GLSA 200507-12 ] Bugzilla: Unauthorized access and information disclosure$B!#(B
Bugzilla 2.18.1, 2.19.3 Security Advisory (bugzilla.org)$B!#(B
2.18.2 $B$*$h$S(B 2.20rc1 $B$G=$@5$5$l$F$$$k$=$&$G!#(B
[SA16065] Windows Network Connections Service Denial of Service$B!"(B
exploit$B!#(B
SSH Tectia Server Private Key Permission Vulnerability in Windows (ssh.com)$B!#(B
Windows $BHG$N(B SSH / SSH Tectia Server $B$NOC!#(B
[Full-disclosure] [ Suresec Advisories ] - Linux kernel ia32
compatibility (ia64/x86-64) race condition
[ GLSA 200507-13 ] pam_ldap and nss_ldap: Plain text
authentication leak$B!#(B
TLS $BMxMQ;~$NOC$_$?$$!#(BSSL $B$@$HLdBj$J$7!#(B
[Full-disclosure] [ZH2005-16SA] Insecure temporary file
creation in Skype for Linux
2005.07.21 $BDI5-(B:
$B!!(BNullsoft$B!"G$0U$N%3!<%I$,
($BAk$NEN(B, 2005.07.21)$B!#(B[Full-disclosure] LSS Security Advisory: Winamp remote buffer
overflow vulnerability $B$N7o$,=$@5$5$l$?LOMM!#(B
- IBM ThinkPad X41 $B$,30It$+$iC/$G$b%7%c%C%H%@%&%s$G$-$k;EMM$K$D$$$F(B
$B!!!V%7%9%F%`$r%7%c%C%H%@%&%s$9$k$N$K%m%0%*%s$rI,MW$H$7$J$$!W%]%j%7!<$r(B
$BM-8z$K!"$8$c$J$/$FL58z$K!"$G$7$?!#(BMattun $B$5$s46
- Update: New Windows XP SP2 vulnerability
$B!!(BMicrosoft Security Advisory (904797):
Vulnerability in Remote Desktop Protocol (RDP) Could Lead to Denial of Service
(Microsoft, 2005.07.16)$B!#(B
RDP $B$K(B DoS $B967b$r?)$i$&7g4Y$,$"$k$3$H$,3NG'$5$l$?LOMM!#(B
Windows 2000 Server / Server 2003 $B$N%?!<%_%J%k%5!<%S%9!"(B
Windows XP $B$N%j%b!<%H%G%9%/%H%C%W(B / $B%j%b!<%H%"%7%9%?%s%9$,3:Ev!#(B
$BFC$K(B Windows XP Media Center Edition $B$G$O%j%b!<%H%G%9%/%H%C%W$,%G%U%)%k%H$GM-8z$K$J$C$F$$$k$=$&$@!#(B
- $B%^%$%/%m%=%U%H(B $B%+%i!<4IM}%b%8%e!<%k$N@H
-
$B!U(B
$B:#$N$H$3$m%H%i%V%k$J$7!=!=%Q%?!<%s%U%!%$%kF|
(ITmedia, 7/14)$B!#$^$:$O$J$K$h$j!#(B
$BF|K\$G$N;T>l%7%'%"$r9M$($k$H!"%H%l%s%I%^%$%/%m$O%3%1$F$b$i$C$F$O:$$k4k6H$@$+$i$J$"!#(B
$B!U(B
istrings 0.2
$B$,=P$?$=$&$G$9!#(B
$B!U(B
$B>.3X(B3$BG/@8!A(B5$BG/@8(B20$BL>BP>](B $B!V2F5Y$_<+M38&5fBN8365<
($B%H%l%s%I%^%$%/%m(B, 7/15)$B!#(B2005.08.18$B!"El5~ET=BC+6h!"L5NA!#(B
$B!U(B
$B!V0lB@O:!W%X%k%W%\%?%s;v7o$NH=7h$O(B9$B7n(B30$BF|(B
(CNET, 7/15)
$B!U(B
$B@/I\$N>pJs%;%-%e%j%F%#BP:v2q5D$,7G$2$k(B5$B$D$N6[5^;\:v(B
(ITmedia, 7/15)
$B!U(B
$BJF73$,3+H/?J$a$k!V;X8~@-%(%M%k%.!
(WIRED NEWS, 7/14)$B!#86J8%?%$%H%k$O%9%?!<%H%l%C%/$M$?$K$J$C$F$^$9$M!#(B
$B!U(B
$BC]Eg!'30L3>J#H#P$N0LCV!!9qEZCOM}1!CO?^$H#1#1%-%m%:%l(B
($BKhF|(B, 7/16)
$B!!CO?^@=:n2q
$B!!C/$b$,CN$C$F$$$?$1$IC/$b65$($F$"$2$J$+$C$?$s$G$9$M!#(B
$B!!(BMicrosoft Security Advisory (903144):
A COM Object (Javaprxy.dll) Could Cause Internet Explorer to Unexpectedly Exit $B$N7o!#=$@5FbMF$b!"(BAdvisory $B$G<($5$l$F$$$?$N$HF1$8!"(BView $B%W%m%U%!%$%i(B (Javaprxy.dll) COM $B%*%V%8%'%/%H(B (CID: 03D9F3F2-B0E3-11D2-B081-006008039BF0) $B$KBP$9$k(B Kill Bit $B$N@_Dj!#(B
$B!!(BWindows 98 / 98 SE / Me / 2000 / XP / Server 2003 $B$K7g4Y!#(B
$B%+%i!<4IM}%b%8%e!<%k$K$*$1$k!"(BICC $B%W%m%U%!%$%k%U%)!<%^%C%H$N%?%0$N8!>Z=hM}$K7g4Y$,$"$k!#(B
$B$=$N$?$a!"(B$B%+%i!<%W%m%U%!%$%k$H$7$F(B ICC $B%W%m%U%!%$%k$rKd$a9~$s$@(B$B96N,2hA|%U%!%$%k$K$h$j!"(BWindows 2000 / XP / Server 2003 $B$G$OG$0U$N%3!<%I$rCAN-2005-1219
$B!!(BICC $B%W%m%U%!%$%k%U%)!<%^%C%H$N%?%0$N8!>Z=hM}!"$H$$$&$N$O!"$?$H$($P(B
Specification ICC.1:2004-10 (Profile version 4.2.0.0) $B$N(B p.14 $B$K$*$1$k!V(BTag Table$B!W$H!V(BTagged Element Data$B!W$H$N4X78$N=hM}$r8@$&$N$+$J!#(B
$B!!(BWindows 2000 / XP / Server 2003 $B$K$D$$$F$O=$@5%W%m%0%i%`$,$"$k$N$GE,MQ$9$l$P$h$$!#(B
$B!!H/8+ICST
$B$H$$$&$N$O!"BfOQ$NAH?%$J$s$G$9$M!#(B
2005.07.17 $BDI5-(B:
$B!!(BMicrosoft Word 2000 (Office 2000) / Word 2002 (Office XP) $B$K7g4Y!#(B
$B%U%)%s%H$N=hM}$K$*$$$F(B buffer overflow $B$,H/@8$9$k$?$a!"96N,(B Word $B%I%-%e%a%s%H$K$h$C$FG$0U$N%3!<%I$r
$B!!=$@5%W%m%0%i%`$,MQ0U$5$l$F$$$k$N$GE,MQ$9$l$P$h$$!#(B
Word 2002 (Office XP) $B$rMxMQ$7$F$$$k>l9g$O(B
Microsoft Update
$B$+$i$bE,MQ$G$-$k$,!"(BWord 2000 (Office 2000) $B$N>l9g$O(B
Office $B%"%C%W%G!<%H(B$B$r9T$&$+!"$"$k$$$O(B
MS05-035 $B%Z!<%8$+$i8DJL$K=$@5%W%m%0%i%`$rF~
$B!!4XO"(B:
$B!!(BMSN $B%5!<%A(B $B%D!<%k%P!<(B with Windows $B%G%9%/%H%C%W(B $B%5!<%A(B
(MSN) $B$N!V(BWindows $B%G%9%/%H%C%W(B $B%5!<%A!W$rM-8z$K$9$k$H!"(B$BDa55%a!<%k(B$B$G!"$U$D$&$N%a!<%k$,%&%$%k%9$HH=Dj$5$l$F$7$^$&!"Aw?.:Q$_%a!<%k$,L$Aw?.%U%)%k%@$K;D$C$F$7$^$&!"$J$I$H$$$C$?IT6q9g$,H/@8$9$kLOMM!#$3$N$h$&$JIT6q9g$OB>$N%=%U%H$G$bH/@8$9$k62$l$,$"$k$h$&$@!#(B
$B=($^$k$*;a$O2sHr:v$H$7$F0J2<$r5s$2$F$$$k(B:
- $B!V%$%s%G%C%/%9$N:n@.$rM%@h$9$k!W%*%W%7%g%s$OI,$:(BOFF$B$K$9$k!#(B
- $BDa55B&$N!VA4HLE*$J@_Dj!&%&%#%k%9BP:v!&%"%s%A%&%#%k%9%=%U%H$N%j%"%k%?%$%`8!:w$KBP1~$5$;$k!W$r(BOFF$B$K$9$k!#(B
- $B=PMh$l$P!"Da55%a!<%k$N%G!<%?MQ%U%)%k%@$O8!:wBP>]$H$J$i$J$$$h$&$K@_Dj$9$k!#!J%G%U%)%k%H$G$O8!:wBP>]$H$J$i$J$$$O$:$@$1$I$b!K(B
- $B=PMh$l$PDa55%a!<%kB&$NDj4|
$B!!IT6q9g$N$&$A!"Da55%a!<%k$GBP1~$G$-$k$b$N$K$D$$$F$O(B Version4.18 $B$GBP1~$5$l$kM=Dj$@$=$&$@!#$7$+$7$=$l$GA4$F$,2r7h$5$l$k$O$:$b$J$/!"!D!D!#(B
$B!!(BWindows XP $B$N(B$B%j%b!<%H%"%7%9%?%s%95!G=(B ($BI8=`$GM-8z!"(BWindows $B%U%!%$%"%&%)!<%k$G$bNc30@_Dj$5$l$F2rJ|$5$l$F$$$k(B) $B$K7g4Y$,$"$j!"(B
$B30It$+$i(B Windows XP $B<+BN$r%/%i%C%7%e(B ($B%V%k!<2hLL(B) $B$5$;$k$3$H$,2DG=$i$7$$!#(B
$B>\:YITL@!#(BRDP (3389/tcp) $B$r%U%#%k%?$9$l$P2sHr$G$-$k$i$7$$!#(B
2005.07.17 $BDI5-(B:
$B!!(BMicrosoft Security Advisory (904797):
Vulnerability in Remote Desktop Protocol (RDP) Could Lead to Denial of Service
(Microsoft, 2005.07.16)$B!#(B
RDP $B$K(B DoS $B967b$r?)$i$&7g4Y$,$"$k$3$H$,3NG'$5$l$?LOMM!#(B
Windows 2000 Server / Server 2003 $B$N%?!<%_%J%k%5!<%S%9!"(B
Windows XP $B$N%j%b!<%H%G%9%/%H%C%W(B / $B%j%b!<%H%"%7%9%?%s%9$,3:Ev!#(B
$BFC$K(B Windows XP Media Center Edition $B$G$O%j%b!<%H%G%9%/%H%C%W$,%G%U%)%k%H$GM-8z$K$J$C$F$$$k$=$&$@!#(B
2005.07.20 $BDI5-(B:
$B!!F|K\8lHG=P$^$7$?(B: $B%^%$%/%m%=%U%H(B $B%;%-%e%j%F%#(B $B%"%I%P%$%6%j(B (904797):
$B%j%b!<%H(B $B%G%9%/%H%C%W(B $B%W%m%H%3%k(B (RDP) $B$N@H
(Microsoft)
2005.08.10 $BDI5-(B:
$B!!(Bpatch: $B%j%b!<%H(B $B%G%9%/%H%C%W(B $B%W%m%H%3%k$N@H (Microsoft)
$B!U(B
$B:#Lk$o$+$k%a!<%k%W%m%H%3%k(B$B$N(B p.188:
$B$H$d$^$5$s$+$i(B
$B$&$($N$X(B
$B$"$X$"$X(B
$B!!$"$X$"$X$G$9$+$=$&$G$9$+!D!D!#(B
$B!U(B
$B#B#S#E5m!'F|K\$GH/8+$N#2#0F,Cf$N#9F,!"JF$J$i8!::BP>]30(B
($BKhF|(B, 7/15)$B!#LsH>J,$O$9$jH4$1$F$k!"$H!#(BUS $B%S!<%U!"$5$9$,$G$9!#(B
$B!U(B
$BCf9q$N%O%C%+!<%0%k!<%W!"4Z9q%5!<%P!<7PM3$7F|K\967b$X(B
($BEl0!F|Js(B, 7/14)$B!#Cf$N?M$OL2$l$J$$F|!9$r2a$4$9$3$H$K$J$k$s$@$m$&$+!#(B
$B!U(B
Windows$B$d(BOffice$B$N99?7%W%m%0%i%`$r0l3gDs6!$9$k%5!<%S%9(B Microsoft Update$B$rDs6!3+;O(B (Microsoft,, 7/14)$B!#(B
Windows Update $B$9$k$H!"0\9T$7$^$7$g$&!A$H=P$^$9$M!#(B
$B!U(B
$BDL?.5!4o!J#S#O#H#O8~$1EEOC%7%9%F%`!K$K$*$1$k(B
$BIT6q9g$*$h$S:#8e$NBP1~$K$D$$$F(B
(NTT $B@>F|K\(B, 7/14)
$B6[5^5!4X$+$i!V8F$SJV$7!W"(#1$r9T$J$&I,MW$,$"$C$?:]$K!"$*5RMM$NEEOC5!$,LD$i$J$$$3$H$,H=L@$$$?$7$^$7$?!#(B($BCfN,(B)
$B!J#1!KBP>]5!4o(B
<1>$B%l%+%`!&%^%k%A%a%G%#%"%[!<%`%7%9%F%`(B $B#F#X(B
<2>$B%l%+%`!&%^%k%A%a%G%#%"%[!<%`%7%9%F%`(B $B#F#X(BII
<3>$B#R#O#U#T#E#R(B $B#P#H#O#N#E(B $B#P#A#C#S#I#A(BII$B!J#N#T#TElF|K\!K(B
$B!!!!#S#O#H#O(B $B#R#O#U#T#E#R(B $B#S#Y#S#T#E#M(B $B#P#A#C#S#I#A(BII$B!J#N#T#T@>F|K\!K(B
<4>$B#N#e#t#c#o#m#m#u#n#i#t#y(B $B#S#Y#S#T#E#M(B $B#A#X(B
<5>$B#N#e#t#c#o#m#m#u#n#i#t#y(B $B#S#Y#S#T#E#M(B $B#X#7#0#0#0(B
$B!U(B
Multipot (iDefense Lab)$B!#$?$N$7$$:+Cn:N=8%=%U%H$N$h$&$G$9!#(B
$B!U(B
KGB Keylogger
(refog.com)$B!#B?J,(B KGB $B$H$O4X78$J$$$s$@$m$&$1$I!#(B
$B!U(B
Firefox$B$N;T>l%7%'%"$,8:>/!A%;%-%e%j%F%#!<%[!<%kH/8+$,860x$+!)(B (Internet Watch, 7/14)$B!#$J$s$@$+$J$"!#(B
$B!U(B
$B!V%9%Q%`Aw?.MQ!H%\%C%H%M%C%H!I$N%l%s%?%kNA$O(B1$B;~4V$G(B300$B%I%k!W!=!=JF(BMX Logic$B$N(BCTO
($BF|7P(B IT Pro, 7/13)$B!#$J$+$J$+%S%_%g!<$J2A3J@_Dj$@$J$"!#(B
$B$=$&$$$($P!"(Biij.news vol.70 MAY/JUNE 2005
$B$K(B Scott Chasin$B;a$K$h$k5-;v$,=P$F$^$9!#%U%#%C%7%s%0(B / $B%U%!!<%_%s%0$M$?$G$9$,!#$"$H!"!V(Bspam $B$+$i%a!<%k$r
$B!U(B
Google$B$H6&KE:a(B ($B:j;3?-IW$N(BBlog, 7/14)
$B6&KE:a$,F3F~$5$l$?8e!"(BGoogle$B$G$bJL$N2q
$B!!$5$F!">e5-$K!"(B$B!V6&KE:a!W=01!$G
(asahi.com, 7/12) $B$N0J2<$NItJ,$r2C$($k$H$I$&$J$k$+!#(B
$B!V$"$k=8CD$,;&?M$N6&KE$r=E$M!"$G$b:G8e$K$OOC$79g$C$F$d$a$?!#$=$l$G$b6&KE:a$NBP>]$+!W!#L1M8c5D0w$,?R$M$?!#$=$NEzJ[$O!VBP>]$K$J$k!W!#(B
$B!!e$O%?%$!<%[2DG=$J5$$,!#8D?ME*$K$O7{K!0cH?$@$H$7$+;W$($J$$$N$@$,!"(B
$B!!6&KE:a$r@_$1$k:,5r$N!V9q6-$r1[$($?!J1[6-E*!KAH?%HH:a$NKI;_$K4X$9$k>rLs!W$G$O!"F1:a$NMW7o$K!VAH?%E*HH:a=8CD$,4XM?$9$k$b$N!W$H$$$&@)8B$r$+$1$i$l$k$H$7$F$$$k$,!"K!0F$G$OL@J82=$5$l$F$$$J$$!#(B
$B!!$3$l$KBP$7K!L3>J$O!V0lHL$N;TL1CDBN$dO+F/AH9g!"2q
$B!!!V$J$i$P7|G0$r$L$0$&$?$a$K!"AH?%E*HH:a=8CD$N9T0Y$K8BDj$9$k$HD>$7$?$i$I$&$+!#$=$NJ}$,0B?4$9$k!W$H8xL@$N
$B:GDc$G$b!"873JE,MQ$NL@J82=$OI,MW$G$7$g$&!#(B
- $B=EMW(B: PowerChute Business Edition v6.x.x $B=$@5BP1~$N$40FFb(B
$B!!(BPowerChute Business Edition v6.x.x $B$NLdBj$K4X$9$k(B Q&A$B=8(B
(APC) $B$,$G$-$F$$$^$7$?!#(B
- JCE 1.2.1 $B$N>ZL@=q4|8B@Z$l$K4X$9$kCm0U4-5/(B
$B!!(BJVN#93926203:
Java Cryptography Extension 1.2.1$B!J(BJCE 1.2.1$B!K$N>ZL@=q$N4|8B@Z$l$G(B 2005/07/28 $B0J9_%=%U%H%&%(%"$,@5>o$KF0:n$7$J$/$J$kLdBj(B
(JVN) $B$KB?$/$N>pJs$,=8@Q$5$l$F$$$^$9$N$G!"0lFI$r$*$9$9$a$7$^$9!#$^$C$A$c$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
- Update Rollup 1 for Windows 2000 SP4 $B$r%$%s%9%H!<%k$9$k$HIT0BDj$K$J$k;vNc(B
$B!!(B904392 - Windows Update $B$d(B Microsoft Update $B%5%$%H$K%"%/%;%9$9$k$H(B 0x800700C1 $B%(%i!<$,I=<($5$l$k(B
(Microsoft)$B!#$$$/$D$+$N7G<(HDEy$G;vNc$,<($5$l$F$$$?!"(BUpdate Rollup 1 $B$rE,MQ$9$k$H(B msxml3.dll $B$H(B msxml3r.dll $B$,(B 0 $B%P%$%H$K$5$l$F$7$^$&OC!#$3$&$J$C$?>l9g$NBP1~$H$7$F$O!"0J2<$N$$$:$l$+$@$=$&$@!#(B
msxml3.dll $B$H(B msxml3r.dll $B$NL>A0$rJQ99$9$k!#(B
$BJQ99$9$k$H!"(BSystem File Protection $B5!G=(B $B$,(B msxml3.dll $B$H(B msxml3r.dll $B$r:F@8@.$7$F$/$l$k$N$@$m$&!#(B
Update Rollup 1 $B$G$O(B msxml3.dll $B$H(B msxml3r.dll $B$O(B System File Protection $B5!G=$NBP>]$K$J$C$F$$$k!#(B
XML Parser (MSXML) 3.0 SP5 $B$r8DJL$K%$%s%9%H!<%k$9$k!#(B
$B!!$A$J$_$K!"(BWindows 2000 SP4 $B%m!<%k%"%C%W(B 1$BIT6q9g>pJs(B (HotFix Report BBS) $B$K$h$k$H!"(BMSXML 3.0 SP7 $B$,%$%s%9%H!<%k$5$l$?4D6-$K(B
Update Rollup 1 $B$rE,MQ$9$k$H!"(BMSXML 3.0 SP5 $B$KL[$C$F%@%&%s%0%l!<%I$5$l$F$7$^$&$3$H$,$"$k!"$HJs9p$5$l$F$$$k!#(B
- $BHkJ8$H(BSymantec AntiVirus$B!"F10l(BPC$B$K%$%s%9%H!<%k$9$k$H0E9f%U%!%$%kGK2u$N$*$=$l(B
$B!!(B$B!Z=EMW![HkJ8%7%j!<%:(B
Symantec AntiVirus Corporate Edition 10.0$B$r%$%s%9%H!<%k$9$k$H!"0E9f%U%!%$%k$,07$($J$/$J$kLdBj$K$D$$$F$N$*CN$i$;(B($BB3Js(B) ($BF|N)%=%U%H(B)
$B$K$h$k$H!"F1MM$NLdBj$,(B Symantec Client Security 3.0 $B$G$bH/@8$9$k$=$&$@!#(B
$BHkJ8$G0E9f2=$7$?%U%!%$%k$r3+$1$J$$(B ($B%7%^%s%F%C%/(B) $B$K$h$k$H!"(B
- Symantec AntiVirus Corporate Edition (SAVCE) 10.0 $B$d(B Symantec Client Security (SCS) 3.0 $B$GH/@8(B
- SAVCE 9.x $B$d(B SCS 2.x $B$G$OH/@8$7$J$$(B
$B$=$&$@!#(B
$B!!(BSquirrelMail 1.4.0$B!A(B1.4.5-RC1 $B$K7g4Y!#(Boptions_identities.php $B$K$*$1$k(B
$_POST $BJQ?t$N07$$$K7g4Y$,$"$j!"B>%f!<%6$N@_Dj$rFI$_=q$-$7$?$j!"%/%m%9%5%$%H%9%/%j%W%F%#%s%07g4Y$,H/@8$7$?$j!"(Bweb $B%5!<%PF0:n8"8B$K$*$$$F=q$-9~$_5v2D$,B8:_$9$k%U%!%$%k$r2~$6$s$7$?$j$G$-$kLOMM!#(B
CVE: CAN-2005-2095
$B!!(BSquirrelMail 1.4.5 $B$G=$@5$5$l$F$$$k!#(B
2005.07.15 $BDI5-(B:
$B!!4XO"(B:
$B!!(BWiki $B%/%m!<%s(B Hiki
0.8.0 $B$K(B CSRF $B967b$rpJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
PacSec/core05 Call For Papers$B!#(B
$B:#G/$b$"$k$_$?$$$G$9$h!#(B
$B!U(B
Windows Server 2003 SP1$B$N<+F099?7$K$h$kG[?.3+;O$K$D$$$F(B
(Microsoft)$B!#(B2005.07.26 $B$+$i<+F099?7$GG[?.$@$=$&$G$9!#%d$J?M$O(B Blocker Toolkit
$B$G;_$a$^$7$g$&!#(B
$B!!$7$+$7!"(BWindows Server 2003 SP1 $B$X$N3F%X%s%@$NBP1~$C$F!"6C$/$[$I?J$s$G$$$J$$$H;W$&$N$G$9$,!#$?$H$($P%"%s%A%&%$%k%9J}LL$H$+!#(B
$B!U(B
[memo:8604] Download.com $B$GG[I[$5$l$?(B DAEMON Tools $B$K%H%m%$(B$B$@$=$&$G$9!#(B
$B!!(BWin32.Qrap $B$H$$$&$N$O(B
W32.Gregcenter
(SARC)
$B$N$3$H$_$?$$$G$9!#(B
$B!U(B
$BDk?M%Z%C%H%\%H%k:F@8;v6H$,1G$9!VMF%jK!!W$NC>$S!"!H(B100$B2/1_9)>l!IA`6HDd;_$K(B
($BF|7P(B BP, 7/13)
$B!U(B
$B$3$s$J(B RFC $B$,=P$F$k$s$G$9$M(B:
$B!!(BRFC 4127 - Russian Dolls Bandwidth Constraints Model for Diffserv-aware MPLS Traffic Engineering
$B$H$$$&$N$b=P$F$^$9$M!#(B$B%^%H%j%g!<%7%+?M7A(B$B$G$9$+!D!D!#(B
$B!U(B
$B:#Lk$o$+$k%a!<%k%W%m%H%3%k(B
($B$&$5$.J83XF|5-(B, 7/1) $B$r$h$&$d$/FI$s$@!#(B
$BNc$K$h$C$F$h$/$^$H$^$C$F$$$k$N$@$,!"$A$g$C$H8m?"$,L\N)$D$N$,6L$K%-%:!#(B
$B$3$3$K$"$k$b$N(B$B$NB>$K$b!"(Bp.43 $B$O(B UCS-2 $B$J$N$+(B USC-2 $B$J$N$+$H$+!#(Bp.29 $B$N!VIuE{(B ($B%X%C%@(B) $B$HCf?H(B ($B%\%G%#(B) $B$N=q$-J}$O!"7h$^$C$F$$$k$s$@$C%F!W$O!"J8L.E*$K$O!V08L>(B ($B%X%C%@(B) $B$HCf?H(B ($B%\%G%#(B) $B!W$H$+$NJ}$,$$$$$@$m$&$7!#(B
$B!U(B
7 $B7n$N%;%-%e%j%F%#>pJs(B
($BF|K\$N%;%-%e%j%F%#%A!<%`$N(B Blog, 7/13)
$B:#7n$+$i(B Windows 2000 Service Pack 3 (SP3) $B$N%;%-%e%j%F%#99?7$rDs6!$7$F$$$^$;$s!#$3$l$O!"(B2005/06/30 $B$K(B SP3 $B$N%5%]!<%H%i%$%U%5%$%/%k$,K~N;$7$?$?$a$G$9!#(B
$B!!(BSP3 $B=*N;!"$H$$$&$3$H$G!#(B
$B!U(B
897341: $B%[%C%H%Q%C%A$r;HMQ$7$F(B Windows Server 2003 Service Pack 1 $BMQ$N%;%-%e%j%F%#99?7%W%m%0%i%`$r%$%s%9%H!<%k$9$kJ}K!(B
(Microsoft)
$B!U(B
MS$B$N%9%Q%$%&%'%"BP:v%=%U%H$O!V%9%Q%$%&%'%";?@.%=%U%H!W$H8F$V$Y$-(B
(ITmedia, 7/13)$B!#%*%H%J$N;v>p$H$$$&E[$G$9$+$M$(!D!D!#(B
$B!V$=$s$J$3$H$b$"$m$&$+$H!W!"%U%j!<$J%D!<%k$,
$B!U(B
$BJF9q%[!<%`%i%s%I%;%-%e%j%F%#$NF08~(B
($BF|N)%;%-%e%j%F%#%=%j%e!<%7%g%s(B Secureplaza)
- CAN-2005-2096: zlib 1.2.x buffer overflow
$B!!(BTurbolinux $B$N>u67$rDI5-!#(B
$B!!(BDiscovering copies of zlib (enyo.de)$B!#(Bzlib $BMxMQ%"%W%j$r(B ClamAV $B$rMxMQ$7$F8!=P$9$kJ}K!!#(B
$B!!$H$j$"$($:$a$b!#(B
$B!!(BEEYEB-20050329 $B$O:#7n$bD>$j$^$;$s$G$7$?!#(Borz
$B!U(B
$B!Z
($BCf1{F|Js(B, 7/12)
$B!U(B
$B!VBaJa$O0[>o;vBV!W!!=PHG4X78
($B?@8M?7J9(B, 7/12)$B!"(B $B=PHGM@4~B;MF5?$G?@8MCO8!(B
($B?@8M?7J9(B, 7/12)$B!#(B$B$BM@4~B;MF5?$G!WBaJa!#(B$B$B$G$O!VCG8G@o$$$^$9!W$H$7$F$$$k!#(B
$B!U(B
$B6&KE:a(B
$B!U(B
$B%9%Q%$%&%(%"Ho32!"Ls#1@iK|1_$K!!>pJs$r30It$KIT@5Aw?.(B
(asahi.com, 7/12)
$B!U(B
UPnPScanner (cqure.net)
$B!U(B
$B!V%W%m%^%M;D9sJ*8l!W$r=*$o$i$;$k$?$a$K(B
($BF|7P(B IT Pro, 7/12)$B!#(B
$B!U(B
$B%d%U! ($BKhF|(B, 7/12)$B!"(B
$B%d%U!5==PIJ$NHo32=w@-$K@@Ls=qMW5a(B
($BKhF|(B, 7/12)$B!#$$$d$O$d!"$9$4$$BP1~$G$9$J$"!#(B
$B!U(B
$B>pJs%;%-%e%j%F%#?M:`0i@.(B $B8x3+9V:B!&>pJs%;%-%e%j%F%#3NJ]$N$?$a$N(B PDC ($BCf1{Bg3X(B)$B!#(B2005.08.26$B!A(B31$B!"El5~ETJ85~6h!"L5NA(B ($B@hCe(B 150 $B?M(B)$B!#(B
$B!VA4(B24$B9V5A$N$&$A(B80$B!s0J>e$K=P@J$7!";XDj$N2]Bj>.O@J8$rDs=P$9$k$3$H$,I,MW!W$@$=$&$G$9!#=8Cf9V5D(B 1 $B=54V!"$H$$$&46$8(B?
$B$R$?$9$i:B3X$N$h$&$K8+$($k$N$G!"$1$C$3$&?I$$$+$b!#(B
$B:,DE$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
$B%5!<%P!<4IM}
(cbook24.com)$B!#$J$+$J$+$*$b$7$m$=$&$@$J$"!#(B
$B!U(B
75 Years of IRS Criminal Investigation History
(The Memory Hole)$B!#(B
$B!U(B
IMSS 5.11 / 5.1: $B=$@5%b%8%e!<%k!'%&%$%k%98!=P;~$NDLCN%a!<%k$K%*%j%8%J%k%a!<%k$,E:IU$5$l$J$$(B
($B%H%l%s%I%^%$%/%m(B)$B!#%5%]!<%H$K8@$&$H(B fix $B$b$i$($k$=$&$G$9!#(B
$B!U(B
WSDigger (Foundstone)
is a free open source tool designed by Foundstone to automate
black-box web services security testing (also known as penetration testing)
$B$@$=$&$G$9!#(B
$B!U(B
$B%/%m%9%5%$%H%j%/%(%9%H%U%)!<%8%'%j!J(BCSRF$B!KBP:v$,$$$^$$$A?J$^$J$+$C$?$N$O$J$<$+(B
($B9bLZ9@8w!w<+Bp$NF|5-(B, 7/3)$B!#(B7/10 $B$K2CI.$5$l$F$$$^$9!#(B
$B!U(B
$B5\>k8)$,%;%-%e%j%F%#%"%C%W%G!<%H$NCf;_$r?d>)Cf(B
($B9bLZ9@8w!w<+Bp$NF|5-(B, 7/11)$B!#$^$"$7$+$7!"FCDj(B ($B$N8E$$(B) $B%P!<%8%g%s(B / $B%j%S%8%g%s$N(B Java $B$G$7$+F0:n$rJ]>c$7$F$$$J$$!"$H$$$&>u67$O$=$3$i$8$e$&$K$"$k$h$&$J5$$,$7$^$9!#(B
$B$=$l$O7k6I!V%P!<%8%g%s%"%C%W6X;_!W$HF1$80UL#$J$o$1$G!#(B
$B!!(B$B5\>k8)$H7'K\8)$NEE;R?=@A%f!<%6$,8m$C$F
($B9bLZ9@8w!w<+Bp$NF|5-(B, 7/11)$B!#Nc$H$7$F;H$&%I%a%$%s$K$O(B example.com $B$H$+(B
example.jp $B$H$+(B example.co.jp $B$H$+$r;H$$$^$7$g$&$H$$$&$3$H$G!#(B
$B!U(B
BIGLOBE$B$,LBOG%a!<%kBP:v$r6/2=!$<+1D%5!<%P!<$+$i$NBgNL%a!<%kAw?.$rKI$0(B
($BF|7P(B IT Pro, 7/11)$B!#(B
$BF10l%f!<%6!@\Aw?.$r%V%m%C%/$9$k!J308~$-$N(B25$BHV%]!<%H$r$U$5$0!KM=Dj$O$J$$$H$$$&!#(B
$B!!$"$i!"40A4$K:I$0$o$1$G$O$J$$$s$G$9$M!#(B
BIGLOBE$B$+$iAw?.$5$l$kLBOG%a!<%k$N(B9$B3d:o8:$r
(NEC, 7/11) $B$+$i(B:
$B$3$N$?$S@\Aw?.$r0-MQ$7$?LBOG%a!<%kAw?.]$H$9$k$b$N$G$"$j!"F10l(BIP$B%"%I%l%9$+$iD>@\Aw?.$GBgNL$KAw?.$5$l$k%a!<%kAw?.Mh$NA4$F$ND>@\Aw?.$r%V%m%C%/$9$kJ}K!$G$O:$Fq$G$"$C$?!"BgNL%a!<%kAw?.]$H$7$?Aw?.BP:v$,2DG=$H$J$j$^$9!#(B
$B!U(B
$B%0%"%s%?%J%b4pCO$ND4::$K!X%&%#%-!Y$r3hMQ(B
(WIRED NEWS, 6/28)
$B!U(B
$BJF:G9b:[!"(BPtoP$B%Y%s%@!<$KCx:n8"?/32$N@UG$$,$"$k(B
($BF|7P(B IT Pro, 6/28)$B!"(B
$BO"K.:G9b:[!V0cK!%@%&%s%m!<%I$O(BP2P$B4k6H$K$b@UG$$"$j!W(B
(WIRED NEWS, 6/28)
$B!!(BIE $B%3%s%]!<%M%s%H$rMxMQ$7$?(B web $BI=<($r9T$C$F$$$k@=IJ$N$$$/$D$+$K$*$$$F!"(B
$BK\Mh%$%s%?!<%M%C%H%>!<%s8"8B$G9T$&$Y$-(B web $BI=<($r!"%^%$%3%s%T%e!<%?%>!<%s$J$I8"8B$N9b$$%>!<%s$G9T$C$F$7$^$C$F$$$k$=$&$@!#6qBNE*$K$O!"$=$N$h$&$J@=IJ$H$7$F0J2<$,L@$i$+$H$J$C$F$$$k!#(B
$B!!BP1~J}K!$H$7$F$O!"(Bfix $B$,$"$k$b$N$K$D$$$F$OE,MQ$9$l$P$h$$!#(B
$B$^$?3+H/$B%f%_%k%j%s%/$G$NBP1~(B$B$,0lNc$H$J$k$@$m$&!#(B
<$B?75,
* Web$B%Z!<%8$+$i(BHTML$B%U%!%$%k7A<0$b$7$/$O(BMHT$B%U%!%$%k7A<0$Gl9g!"Web$B$N%^!<%/(B$B!W!J(B"saved from url"$B!K%3%a%s%H$rDI2C$7$^$9!#(B
$B$3$N=hM}$K$h$C$F!"!<%s$G$O$J$/(B[$B%$%s%?!<%M%C%H(B]$B%>!<%s$K$*$$$FI=<($5$l$^$9!#(B
<$B4{B8(BHTML$B%U%!%$%k$X$NBP1~(B>
* $B4{B8(BHTML$B%U%!%$%k$NI=<(%>!<%s$r(B[$B%$%s%?!<%M%C%H(B]$B%>!<%s$X$HJQ49$9$k!V%;%-%e%j%F%#%>!<%sJQ495!G=!W$rEk:\$7$^$7$?!#(B
$BK\5!G=$r;HMQ$9$k$3$H$K$h$C$F!"G$0U$N4{B8(BHTML$B%U%!%$%k$NI=<(%>!<%s$r(B[$B%$%s%?!<%M%C%H(B]$B%>!<%s$XJQ49$9$k$3$H$,=PMh$^$9!J!V%;%-%e%j%F%#%>!<%sJQ495!G=!W$N;HMQJ}K!$O!"
$B!!4XO"(B:
2005.07.14 $BDI5-(B:
$B!!(B$BIY;NDL$N(B JVN#257C6F28 $B$X$NBP1~(B (JVN) $B$K;2>H%j%s%/$,L@5-$5$l$?$N$G!"IY;NDL$N9`$r=q$-D>$7$?!#(B
$B!!4XO"(B: $B$H$7$F(B JVN#257C6F28
(JVN) $B$rDI2C$7$?!#(B
2005.07.20 $BDI5-(B:
$B!!4XO"$H$7$F!"(BWebBrowser Control $B$r;H$&(B MUA $B$KFCBg$N%;%-%e%j%F%#!<%[!<%k(B $B$rDI2C(B ($B;2>H(B: [memo:8609])
2005.09.13 $BDI5-(B:
$B!!IY;NDL$N(B SIMPLIA/TF-WebTest $B$K$b$3$N7g4Y$,$"$C$?$=$&$@(B:
WEB$B%"%W%j%1!<%7%g%s%F%9%H;Y1g%D!<%k!V(BSIMPLIA/TF-WebTest$B!W$N(B
$B%;%-%e%j%F%#$N@H
($BIY;NDL(B, 2005.09.09)
$B!!85$M$?(B:
JP1/$BHkJ84D6-$K(BSymantec AntiVirus Corporate Edition 10.0$B$r%$%s%9%H!<%k$9$k$H!"0E9f%U%!%$%k$,07$($J$/$J$kLdBj(B
($BF|N)(B)$B!#8=;~E@$G$O!VHkJ8%U%)!<%^%C%H:Q$_$N%I%i%$%V!"$^$?$O!"6&M-5!L)%U%)%k%@Fb$N0E9f%U%!%$%k$rA`:n$7$J$$!W$+!V(BSymantec AntiVirus Corporate Edition 10.0 $B$N%"%s%$%s%9%H!<%k!W$7$+2sHrJ}K!$,$J$$LOMM!#(B
$B!!(BSAVCE9 $B$G$b2?$+$"$C$?$h$&$J!D!D$3$l$+(B: $B!Z=EMW![HkJ8(BAdvanced Edition$B$H(BSymantec AntiVirus Corporate Edition 9.0 $BF15o;~$KH/@8$9$kLdBj$K4X$7$F(B($BB3Js(B) ($BF|N)%=%U%H(B)$B!#(B
SymEvent $B%3%s%]!<%M%s%H(B 11.6.0.24 $B0J9_$N%P!<%8%g%s$K99?7$9$k$3$H$G2~A1(B ($B%7%^%s%F%C%/(B) $B$5$l$k$=$&$G!#(B
SAVCE10 $B$r%"%s%$%s%9%H!<%k$7$F(B SAVCE9 + $B!V(BSymEvent $B%3%s%]!<%M%s%H(B 11.6.0.24 $B0J9_!W$K%@%&%s%0%l!<%I$9$k$N$,$$$$$s$G$9$+$M$(!#(B
2005.07.14 $BDI5-(B:
$B!!(B$B!Z=EMW![HkJ8%7%j!<%:(B
Symantec AntiVirus Corporate Edition 10.0$B$r%$%s%9%H!<%k$9$k$H!"0E9f%U%!%$%k$,07$($J$/$J$kLdBj$K$D$$$F$N$*CN$i$;(B($BB3Js(B) ($BF|N)%=%U%H(B)
$B$K$h$k$H!"F1MM$NLdBj$,(B Symantec Client Security 3.0 $B$G$bH/@8$9$k$=$&$@!#(B
$BHkJ8$G0E9f2=$7$?%U%!%$%k$r3+$1$J$$(B ($B%7%^%s%F%C%/(B) $B$K$h$k$H!"(B
- Symantec AntiVirus Corporate Edition (SAVCE) 10.0 $B$d(B Symantec Client Security (SCS) 3.0 $B$GH/@8(B
- SAVCE 9.x $B$d(B SCS 2.x $B$G$OH/@8$7$J$$(B
$B$=$&$@!#(B
2005.07.26 $BDI5-(B:
$B!!%7%^%s%F%C%/$+$i2sHr%D!<%k$,8x3+$5$l$^$7$?(B:
$BHkJ8$G0E9f2=$7$?%U%!%$%k$r3+$1$J$$(B ($B%7%^%s%F%C%/(B)$B!#(B
$B0J2<$N%3%^%s%I$r
* SAVCE $B%/%i%$%"%s%H$N>l9g(B:
C:\Program Files\Symantec AntiVirus\SAVRTICFG.exe ICFG:OpenScanningMode 0
* SCS $B%/%i%$%"%s%H$N>l9g(B:
C:\Program Files\Symantec Client Security\Symantec AntiVirus\SAVRTICFG.exe ICFG:OpenScanningMode 0
$B!!$J$s$@$+(B SAVCE $B$d(B SCS $B$N5!G=$N0lIt$rL58z2=$7$F$$$k46$8$G$9$M!D!D!#(B
SAVRTICFG.exe $B$r;H$&$H!"$b$C$H$$$m$$$m@_Dj$G$-$k$N$+$J$"!#(B
2005.08.06 $BDI5-(B:
$B!!%7%^%s%F%C%/$NJ8=q(B
http://service1.symantec.com/support/INTER/entsecurityjapanesekb.nsf/jp_docid/20050712145310949?OpenDocument&dtype=corp ($B%7%^%s%F%C%/(B)
$B$N%?%$%H%k$,!"!VHkJ8$G0E9f2=$7$?%U%!%$%k$r3+$1$J$$!W$+$i!V%G!<%?0E9f2=%W%m%0%i%`$G0E9f2=$7$?%U%!%$%k$r3+$1$J$$!W$KJQ2=$7$F$$$^$9!#$^$?$=$NBP>]$H$7$F!"HkJ8$K2C$($F(B
$B!U(B
Process Stalker
(iDEFENSE Labs) $B$,=P$F$$$^$9!#(B
IDA Pro $B$N(B plug-in $B$@$=$&$G$9!#(B
$B!U(B
FTimes
3.5.0 $B$,=P$F$$$^$9!#(B
$B!U(B
Sophos Anti-Virus for Windows NT/2000/XP/2003: problems when upgrading from version 3.93 to 3.94 (Sophos)$B!#(B
Sophos AntiVirus $B$H$$$&$N$OKh7n%"%C%W%0%l!<%I$9$k$b$N$J$N$G$9$,!"(B
NT $B7O(B OS $B$G$N(B Sophos AntiVirus $B$N(B 3.93 $B"*(B 3.94 $B$X$N%"%C%W%0%l!<%I$G%"%l$J>u67$,H/@8$7$F$$$?$=$&$G!#(B3.95 S037 $B$G=$@5$5$l$?$=$&$G!#(B
$BF?L>4uK>$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!!
$B!U(B
BIGLOBE$B$,(B25$BHV%]!<%H$+$i$N%a!<%kAw?.$r@)8f!"LBOG%a!<%k$N(B9$B3d$K8z2L(B (Internet Watch, 7/11)$B!#(BBIGLOBE $B$,(B outbound port 25 blocking $B$KBP1~$@$=$&$G$9!#(B
$B!U(B
Debian$B%;%-%e%j%F%#%A!<%`$,?M:`ITB-(B
(slashdot.jp, 7/10)$B!#(BDebian $B$G$J$/$H$b?M:`ITB-$O?<9o$J$N$G$9$1$I$M!#(B
$B!U(B
$B6&KE:a(B$B4XO"(B
- Microsoft Security Advisory (903144):
A COM Object (Javaprxy.dll) Could Cause Internet Explorer to Unexpectedly Exit
$B!!(B$BF|K\8l>pJs$NK]Lu%?%$%_%s%0(B ($BF|K\$N%;%-%e%j%F%#%A!<%`$N(B Blog, 2005.07.11)$B!#(B
$BEv=i$3$N%"%I%P%$%6%j$r8x3+$9$k:]$K2sHr:v$,$$$/$D$+8x3+$5$l$?$N$G$9$,!"@HpJs$NDs6!$r$=$l$i$N%D!<%k$,$G$-$"$,$k$^$G8+9g$o$;$F$*$j$^$7$?!#(B($BCfN,(B)
$B$H$$$&$3$H$G!"$$$^$@$K>pJs$,3NDj$7$F$+$iF|K\8l2=$9$Y$-$+!">o$KF|K\8l>pJs$r%?%$%`%j!<$K=P$9$+$NH=CG$,$D$$$F$$$^$;$s!#(B
$B!!8D?ME*$K$O!V%?%$%`%j!l$J$N$G!"$J$+$J$+$`$D$+$7$$$G$9$h$M$(!#(B
- CAN-2005-2096: zlib 1.2.x buffer overflow
$B!!4XO"(B:
- JCE 1.2.1 $B$N>ZL@=q4|8B@Z$l$K4X$9$kCm0U4-5/(B
-
$B!U(B
$B>pJs%;%-%e%j%F%#Aa4|7Y2|%Q!<%H%J!<%7%C%W%,%$%I%i%$%s$N2~D{$K$D$$$F(B
(IPA, 7/8)
$B!U(B
$B>pJs%7%9%F%`Ey$N@HpJs$N (IPA) $B$N%Z!<%8$K!VJs9p=q(B ($B35MWHG(B)$B!W$,7G:\$5$l$F$$$^$9!#(B
$B!U(B
from JPRS:
$B!U(B
$B>>2
(PC Watch, 7/8)$B!#(B
$B!V(BTPM (Trusted Platform Module) $B%;%-%e%j%F%#%A%C%W!W(B
$B$r;H$C$F$$$kB>$N(B PC $B$G$bF1MM$J$N$+!"$=$l$H$b(B Let'snote $B8GM-$NLdBj$J$N$+!#(B
$B!U(B
Microsoft Security Bulletin Advance Notification (Microsoft)$B!#(B
7 $B7n$N(B Windows Update $B$NF|$O(B 7/13 $B$G$9!#(B
- OS $B$N=$@5$,(B 2 $B$DM=Dj$5$l$F$$$F!":GBg?<9oEY$O!V6[5^!W$@$=$&$G$9!#(B
- Office $B$N=$@5$,(B 1 $B$DM=Dj$5$l$F$$$F!"?<9oEY$O!V6[5^!W$@$=$&$G$9!#(B
$B!!$^$?!"%;%-%e%j%F%#4XO"$G$O$J$$$,M%@hEY$N9b$$(B Office $B$N=$@5$,(B 1 $B$DM=Dj$5$l$F$$$k$=$&$G$9!#(BMicrosoft Update $B$H(B WSUS $B$GG[I[$5$l$k$=$&$G$9!#(B
$B!!!D!DF|K\8lHG=P$^$7$?(B: $B%^%$%/%m%=%U%H(B $B%;%-%e%j%F%#>pJs$N;vA0DLCN(B (Microsoft)$B!#(B
$B!U(B
$B!HMn$A$k!I$N$O(BOS$B$@$1$8$c$J$$(!(!%M%C%H%o!<%/;~Be$KA}Bg$9$kMk%j%9%/(B (ITmedia, 7/8)$B!#:rF|$NMk$G$O(B 2 $B2s$[$I=VCG$7$?$C$]$$!#(B
$B!U(B
$B9bIB86@-D;%$%s%U%k%(%s%6$K4X$9$kA49q0l@F%5!<%Y%$%i%s%9$N
($BG@NS?e;:>J(B, 7/8)$B!#J!Eg!&0q>k!&FJLZ!&72GO!&:k6L!&@iMU8)$K$D$$$F$O(B 6 $B3d!"B>$O(B 3 $B3d$r%+%P!]G@>l$OL5:n0YCj=P!#(B
$B!U(B
$B>pJsN.=P!'B?=E:DL3=qN`$J$I(B1$BK|7o0J>e!!>CHq ($BKhF|(B, 7/7)$B!#H?1~(B: $B=EMW$J$*CN$i$;(B ($B%/%l%G%#%"(B, 7/7)$B!#(B
$BH?1~$G$"$C$F85$M$?$G$O$J$$!"$H$$$&$H$3$m$,$J$s$H$b!#(B
$B!U(B
$B7Y;!D#!'%M%C%HM-32>pJs$X$NBP1~6(5D!]!]M-<1
($BKhF|(B, 7/7)$B!#%m%0$O$^$@$J$$$_$?$$!#(B
$B!U(B
$B%m%s%I%sF1;~%F%m!'JF9q$K$b>W7b!!%F%m7Y2|%l%Y%k0z$->e$2(B ($BKhF|(B, 7/8)$B!#(B
Homeland Security Advisory System:
Current Threat Level (US DHS) $B$K$h$k$H(B
July 7, 2005 (11:45 EDT) - The United States government is raising the threat level from Code Yellow --or Elevated-- to Code Orange--or High--for the mass transit portion of the transportation sector. This only includes regional and inter-city passenger rail, subways and metropolitan bus systems.
$B$@$=$&$G!"(BUS $BA4EZ(B ($BA4(B Sector) $B$,(B Code Orange $B$K$J$C$F$$$k$o$1$G$O$"$j$^$;$s!#$I$s$J(B Sector $B$,$"$k$+$K$D$$$F$O!"$?$H$($P(B
DHS/IAIP Daily Open Source Infrastructure Report $B$r;2>H$9$k$H$o$+$k$h$&$G$9(B
($B$b$C$H$$$$;qNA$J$$$G$9$+$M(B)$B!#$I$N(B Sector $B$,$I$N?'$+$,0lMw$G$-$k%Z!<%8$H$+!"$J$$$N$+$J$"!#(B
$B!!(B $B%m%s%I%sF1;~%F%m!'8rDL5!G==*F|%^%R!!7b(B ($BKhF|(B, 7/8)$B!#CO2
$B!!(B$B1Q$N%F%mG'<1$K8m;;!"7Y2|%l%Y%k0z$-2<$2$F$$$?!D1Q;f(B ($BFIGd(B, 7/8)$B!#L}CG$G$9$+!#(B
$B!!FC=8%Z!<%8(B: $BFIGd(B$B!"(B$BD+F|(B$B!"(B$BKhF|(B$B!#(B
$B!U(B
CSR: Exploitation Challenge$B!#(B
$B!U(B
Windows HotFix Briefings
$B!J(B2005$BG/(B7$B7n(B8$BF|HG!K(B
(@IT, 7/8)
$B!U(B
$B%7%s!&%/%i%$%"%s%H$NA`:n$b4F;k$G$-$k%D!<%k!$(BMBSD$B$,(B7$B7n(B20$BF|$K=P2Y(B
($BF|7P(B IT Pro, 7/7)
$B!U(B
891861: Windows 2000 Service Pack 4 $BBP1~$N99?7%W%m%0%i%`(B $B%m!<%k%"%C%W(B 1
(Microsoft)$B!#8D?ME*$JCmL\E@(B:
$B$3$N99?7%W%m%0%i%`(B $B%m!<%k%"%C%W$K$O!"(BWindows 2000 SP4 $B$N%j%j!<%9F|$+$i(B 2005 $BG/(B 4 $B7n(B 30 $BF|$^$G$K(B Windows 2000 $BMQ$K:n@.$5$l$?%;%-%e%j%F%#4XO"$N99?7%W%m%0%i%`$,4^$^$l$F$$$^$9!#(B2005 $BG/(B 4 $B7n(B 30 $BF|$O!"99?7%W%m%0%i%`(B $B%m!<%k%"%C%W(B 1 $B$NFbMF$,!"%^%$%/%m%=%U%H!"30It%Y!<%?(B $B%F%9%H(B $B%5%$%H!"$*$h$S%+%9%?%^(B $B%5%$%H$K$h$k:G=*%F%9%H$N$?$a$K%m%C%/%@%&%s$5$l$?F|IU$G$9!#(B
$B!!;~4|E*$K$O!"(BMS05-023 $B$^$G$G$9$M!#(B
Q4 : Windows 2000 SP4 $BBP1~$N99?7%W%m%0%i%`(B $B%m!<%k%"%C%W(B 1 $B$O<+F099?7$GG[I[$5$l$^$9$+!#(B
A4 : $B=i4|$NCJ3,$G$O!"$3$N99?7%W%m%0%i%`(B $B%m!<%k%"%C%W$O<+F099?7$G$OG[I[$5$l$^$;$s!#$3$l$O!"(B2005 $BG/(B 7 $B7n$KM=Dj$5$l$F$$$k!"(BWindows Update v4 $B$+$i(B v6 $B$X$N%$%s%U%i%9%H%i%/%A%c$N0\9T$N$?$a$G$9!#$3$N99?7%W%m%0%i%`(B $B%m!<%k%"%C%W$O!"(Bv4 $B$N%$%s%U%i%9%H%i%/%A%c$G$O$J$/!"(Bv6 $B$N%$%s%U%i%9%H%i%/%A%c$r;HMQ$7$F<+F099?7$HO"7H$9$k$h$&$K@_7W$5$l$F$$$^$9!#(B2005 $BG/(B 7 $B7n>e=\$KM=Dj$5$l$F$$$k!"(Bv6 $B$N%$%s%U%i%9%H%i%/%A%c$X$N0\9T$,40N;$9$k$H!"$3$N99?7%W%m%0%i%`%m!<%k%"%C%W$,<+F099?7$GG[I[$5$l$k$h$&$K$J$j$^$9!#(B
$B!!(B(7/8 $B2~D{(B): $B$5$-$[$I3NG'$7$?$i!"4{$K(B Windows Update $B$K$b>e$,$C$F$^$7$?!#(B
Windows 2000 SP4 $BBP1~$N99?7%W%m%0%i%`(B $B%m!<%k%"%C%W(B 1 $B$G$O!"%F%l%U%)%K!<(B $B%5!<%P!<$*$h$S%/%i%$%"%s%H(B $B%3%s%T%e!<%?$G$N(B TAPI (Telephony Application Programming Interface) $B$r;HMQ$7$?DL?.J}K!$,JQ99$5$l$^$9!#(B
$B!!$U$%$s!#(B
Windows 2000 SP4 $BBP1~$N99?7%W%m%0%i%`(B $B%m!<%k%"%C%W(B 1 $B$N%$%s%9%H!<%k;~$KH/@8$9$k2DG=@-$N$"$k4{CN$NLdBj$N>\:Y$r;2>H$9$k$K$O!"0J2<$N!V%5%]!<%H5;=Q>pJs!W(B (Microsoft Knowledge Base) $B$r%/%j%C%/$7$F$/$@$5$$!#(B
901159 $B%;%-%e%j%F%#99?7%W%m%0%i%`(B MS05-019 $B$N2~D{HG$r(B Windows 2000 $B%Y!<%9$N%3%s%T%e!<%?$K%$%s%9%H!<%k$7$?8e!"0lIt$N(B Internet Security Systems $B@=IJ$,F0:n$rDd;_$9$k(B
$B!!(BISS $B@=IJMQ$N(B patch $B$,=P$F$$$k$N$G!"3:Ev
$B!!4XO"(B: 900345: Problems that are fixed in the Update Rollup 1 for Microsoft Windows 2000 Service Pack 4 that is dated June 28, 2005
(Microsoft)$B!#(BUpdate Rollup 1 $B$G$NHs%;%-%e%j%F%#(B fix $B$N0lMw!#(B
$B!!$=$l$K$7$F$b!"!V99?7%W%m%0%i%`(B $B%m!<%k%"%C%W!W$H$$$&C18l$O$I$&$K$+$J$i$J$$$N$+!#8@$$$K$/$9$.!#(B
$B!U(B
$B2$=#5D2q$,%=%U%H%&%'%"FC5v$rH]7h(B (japan.linux.com, 7/6)$B!"(B
$B2$=#%=%U%H%&%'%"FC5v$r=d$k68A{(B ($BH,ED(B $B??9T;a(B / japan.linux.com, 7/8)$B!#(B
95% $B$,H?BP!"$G$9$+!D!D!#(B
$B!!(BJCE 1.2.1 $B$N>ZL@=q4|8B@Z$l(B
$B$K$h$C$F!"(BCosminexus Web Contents Generator 01-02 ($B$=$N
$B!!BP1~$H$7$F(B Java Cryptography Extension (JCE) 1.2.2
$B$X$N%"%C%W%0%l!<%I$,;X<($5$l$F$$$k!#(B
$B!!(BSun $B$N(B Java Cryptography Extension (JCE) $B$N(B 1.2.1 $BHG$K4^$^$l$k>ZL@=q$,(B
2005.07.28 06:43 $B$K4|8B@Z$l$K$J$kOC!D!D$H$$$&$H!"(B$B=EMW(B: PowerChute Business Edition v6.x.x $B=$@5BP1~$N$40FFb(B $B$G$9$J!#(B
$B!!BP1~$H$7$F$O(B 2 $B
$B$3$N7g4Y$,=$@5$5$l$?(B Java Cryptography Extension (JCE) 1.2.2 $B$K%"%C%W%0%l!<%I$9$k!#(B
$B$7$+$7(B JCE 1.2.2 $B$O(B 2006 $BG/(B 3 $B7nKv$G%5%]!<%H=*N;(B (EOL) $B$J$N$@$=$&$G!"(B1 $BG/
$BBP1~:Q$N(B JCE $B$,I8=`$G4^$^$l$k(B J2SE 1.4.2 / 1.5.0 $B$K0\9T$9$k!#(B
2005.07.11 $BDI5-(B:
2005.07.14 $BDI5-(B:
$B!!(BJVN#93926203:
Java Cryptography Extension 1.2.1$B!J(BJCE 1.2.1$B!K$N>ZL@=q$N4|8B@Z$l$G(B 2005/07/28 $B0J9_%=%U%H%&%(%"$,@5>o$KF0:n$7$J$/$J$kLdBj(B
(JVN) $B$KB?$/$N>pJs$,=8@Q$5$l$F$$$^$9$N$G!"0lFI$r$*$9$9$a$7$^$9!#$^$C$A$c$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
2005.07.20 $BDI5-(B:
$B!!(BIntruShield$B$G!"(BJCE 1.2.1$B$N>ZL@=q$N4|8B@Z$l$NLdBj$K$D$$$F(B
($B%^%+%U%#!<(B)$B!#(BIntruShield v1.8$B!"(Bv1.9$B!"(Bv2.1 $B$G(B JCE 1.2.1 $B$r;H$C$F$*$j!"(B
JCE 1.2.2 $B$X0\9T$9$k(B patch $B$,(B 2005.07.21 $B$KDs6!$5$l$kM=Dj$@$=$&$@!#(B
2005.07.21 $BDI5-(B:
$B!!(BJCE1.2.1$B$N(BHotFix$B$K$D$$$F$N(BQA
($B%^%+%U%#!<(B)$B!#(BIntruShield $BMQ(B patch $B=P$^$7$?!#(B
2005.11.29 $BDI5-(B:
$B!!(BIBM JCE 1.2.1 $B>ZL@=qM-8z4|8B@Z$l$KH<$&(BTivoli$B@=IJ$X$N1F6A$K$D$$$F(B (Tivoli-05-064)
(IBM, 2005.11.25)$B!#(B
$B!V(B2006$BG/(B3$B7n:"!W$H$+!V(B2006$BG/(B6$B7n:"!W$H$+$$$&J8;zNs$,$"$C$F!"$J$+$J$+$"$l$G$9!#(B
$B!!(B891861: Windows 2000 Service Pack 4 $BBP1~$N99?7%W%m%0%i%`(B $B%m!<%k%"%C%W(B 1
(Microsoft) $B$r%$%s%9%H!<%k$9$k$H!"%V%k!<2hLL$K$J$k$J$I(B Windows 2000 $B$,IT0BDj$K$J$k;vNc$,;68+$5$l$k$h$&$G$9!#(Bskitazawa $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!!$J$s$@$+(B SCSI / RAID $B$^$o$j$NIT6q9g$,B?$$5$$,!#(B
$B!!IT6q9g$,=P$?>l9g$O(B$B$3$3$K$"$k$h$&$J$B$G(B Update Rollup 1 $B$r%"%s%$%s%9%H!<%k$9$l$P$h$$$h$&$G$9!#(B
$B2sI|%3%s%=!<%k$K$D$$$F$O(B KB 229716 $B$r;2>H!#(B
2005.07.10 $BDI5-(B:
$B!!(B904130: Windows 2000 SP4 $BBP1~$N99?7%W%m%0%i%`(B $B%m!<%k%"%C%W(B 1 (KB891861) $B$NE,MQ8e$K(B Excel $B$d(B Word $B$G%U%m%C%T!<%G%#%9%/$K%"%/%;%9$9$k$H1~Ez$rDd;_$9$k>l9g$,$"$k(B
(Microsoft)$B!#$J$s$8$c$=$l!
2005.07.14 $BDI5-(B:
$B!!(B904392 - Windows Update $B$d(B Microsoft Update $B%5%$%H$K%"%/%;%9$9$k$H(B 0x800700C1 $B%(%i!<$,I=<($5$l$k(B
(Microsoft)$B!#$$$/$D$+$N7G<(HDEy$G;vNc$,<($5$l$F$$$?!"(BUpdate Rollup 1 $B$rE,MQ$9$k$H(B msxml3.dll $B$H(B msxml3r.dll $B$,(B 0 $B%P%$%H$K$5$l$F$7$^$&OC!#$3$&$J$C$?>l9g$NBP1~$H$7$F$O!"0J2<$N$$$:$l$+$@$=$&$@!#(B
msxml3.dll $B$H(B msxml3r.dll $B$NL>A0$rJQ99$9$k!#(B
$BJQ99$9$k$H!"(BSystem File Protection $B5!G=(B $B$,(B msxml3.dll $B$H(B msxml3r.dll $B$r:F@8@.$7$F$/$l$k$N$@$m$&!#(B
Update Rollup 1 $B$G$O(B msxml3.dll $B$H(B msxml3r.dll $B$O(B System File Protection $B5!G=$NBP>]$K$J$C$F$$$k!#(B
XML Parser (MSXML) 3.0 SP5 $B$r8DJL$K%$%s%9%H!<%k$9$k!#(B
$B!!$A$J$_$K!"(BWindows 2000 SP4 $B%m!<%k%"%C%W(B 1$BIT6q9g>pJs(B (HotFix Report BBS) $B$K$h$k$H!"(BMSXML 3.0 SP7 $B$,%$%s%9%H!<%k$5$l$?4D6-$K(B
Update Rollup 1 $B$rE,MQ$9$k$H!"(BMSXML 3.0 SP5 $B$KL[$C$F%@%&%s%0%l!<%I$5$l$F$7$^$&$3$H$,$"$k!"$HJs9p$5$l$F$$$k!#(B
2005.07.17 $BDI5-(B:
$B!!(BWindows 2000 Service Pack 4 $BBP1~$N99?7%W%m%0%i%`(B $B%m!<%k%"%C%W(B 1 $B$rE,MQ$9$k$H(B Outlook $B$+$i%Q%9%o!<%IJQ99$,=PMh$J$/$J$k(B
(Microsoft)
$B$3$l$O99?7%W%m%0%i%`(B $B%m!<%k%"%C%W(B1 $B$rE,MQ$9$k$3$H$K$h$j!"(BWindows 2000 Server $B$,G'>Z$K;HMQ$9$k%"%k%4%j%:%`$,JQ99$5$l$k$?$a$G$9!#(B
2005.08.05 $BDI5-(B:
$B!!(BUpdate Rollup 1 for Windows 2000 SP4 $B$N:F%j%j!<%9$,7W2h$5$l$F$$$k$=$&$G$9!#(B
KB891861: Update Rollup 1 for Windows 2000 SP4 and known issues
(Microsoft) Revision:10.0 $B$h$j(B:
Known issues
After the release of Update Rollup 1 for Windows 2000 SP4, we identified several issues that may occur when you install this update rollup. These issues are isolated, and affect few customers. These issues are described in this article. This article also explains how to resolve these issues. If you are affected by these issues, we suggest that you do not install Update Rollup 1 for Windows 2000 SP4 until the corresponding hotfix is available. We plan to reissue Update Rollup 1 for Windows 2000 SP4 soon. Several hotfixes will be integrated into the new version of Update Rollup 1 for Windows 2000 SP4.
$B!!$U$D$&$N?M$O!":F%j%j!<%9HG$rBT$C$?J}$,$h$5$=$&$G$9$M!#(B
2005.09.14 $BDI5-(B:
$B!!(B891861: Update Rollup 1 for Windows 2000 SP4 and known issues
(Microsoft) $B$,2~D{$5$l$F(B revision 18.0 $B$K$J$C$F$$$^$9!#(B
$B:#F|!"(BUpdate Rollup 1 $B$N?7HG(B (v2) $B$,%j%j!<%9$5$l$?$h$&$G$9!#(B
v1 $B$K$"$C$?LdBj$N$&$A!"
- $B
- MSXML3.DLL $B%U%!%$%k$,8+$D$+$j$^$;$s(B
- $B%(%i!$B%(%i!
- $B%(%i!<%a%C%;!<%8(B "Stop 0x000001E" $B$,I=<($5$l$k(B
- $B%@%$%J%_%C%/%G%#%9%/$r;HMQ$9$k%3%s%T%e!<%?$K%$%s%9%H!<%k$9$k$H!"%7%9%F%`(B $B%I%i%$%V$,(B 2 $B$DI=<($5$l$k$3$H$,$"$k(B
- Microsoft Office $B%W%m%0%i%`$+$i%U%m%C%T!<(B $B%G%#%9%/$K%U%!%$%k$rD>@\J]B8$G$-$J$$(B
$B!U(B
$BpJs%;%-%e%j%F%#@/:v#2#0#0#5!W$NDs8@(B
($BAmL3>J(B, 7/7)
$B!U(B
$BD;%$%s%U%k%(%s%6!"Cf9q$NEO$jD;HK?#CO$GBgNL;`(B
($BFIGd(B, 7/7)$B!#$&!<$`!#(B
$B!U(B
$B#N#Y%?%$%`%:5-O3$($$LdBj$G(B (CNN, 7/7)$B!#(B
$B!U(B
$B%m%s%I%s$NCO2pJs$b(B
(asahi.com, 7/7)$B!"(B$B%m%s%I%sF1;~%F%m!'CO2e$+(B ($BKhF|(B, 7/8)$B!#$&$R$c$"!#(B
$BF?L>4uK>$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B$H$$$&$+!"%*%j%s%T%C%/$G$-$k$N(B?
$B!U(B
$B%+%+%/%3%`$N%5%$%H967b!"Cf9q$+$i$b(B
(asahi.com, 7/7)$B!#@hF|$N!V%,%$%"$NLkL@$1!W$G$O!V$J$<$3$s$J$3$H$K$J$C$F$7$^$C$?$N$+!W$K$D$$$F$O0l@Z8l$i$l$F$$$J$+$C$?$o$1$G$9$,!"(B
$B!!N99T2q
$B!!(B($BCfN,(B)
$B!!0lJ}!"Cf9q?MN13X@8$N0j2ZMF5?/$J$/$H$b$3$N;~E@$G$OF1
$B!V:G9b%l%Y%k$N%;%-%e%j%F%#!W$Nu67$@$C$?$H$$$&$3$H$J$s$G$9$+$M$(!#$7$+$7!"$3$l$,N)7o$G$-$J$/$F!"(BASKACCS $B;v7o$ON)7o$G$-$k!"$H$$$&$N$OM}2r$7$E$i$$$N$G$9$,!#(B
$B!U(B
OpenSSL 0.9.8 $B%j%j!<%9(B
(slashdot.jp, 7/7) $B$@$=$&$G$9!#(B
$B!U(B
$B%&%$%k%9%P%9%?!<(B $B%3!<%]%l!<%H%(%G%#%7%g%s(B: $B%&%$%k%98!=P;~$N=hCV$,@_Dj$7$?FbMF$H0[$J$k!J%7%9%F%`NN0h46@w7?%&%$%k%9$N=hM}K!$K$D$$$F!K(B
($B%H%l%s%I%^%$%/%m(B)$B!#J|CV%W%l%$$G$9$+!#(B
$B!U(B
$BIT@5%"%/%;%9MQ%W%m%0%i%`!"Cf9q8l%5%$%H$K$O$s$i$s(B
($BF|7P(B, 7/7)$B!#$A$g$C$H$0$0$C$F$_$?$N$G$9$,!"(Bhttp://www.hack58.com/ $B$_$?$$$J%5%$%H$,$$$C$Q$$=P$F$-$^$9$M!#(B
$B$J$s$@$+3d$l$b$N$C$]$$$b$N$b$"$k$N$GCm0U!#CmF~9)6q$O$?$H$($P(B$B$3$N$X$s(B$B!#(B
$B!!4XO"(B: $BIT@5%"%/%;%9(B $B56Au (NHK, 7/7)
$B!U(B
$B%"%@%k%H%5%$%H$rK,Ld$7$?$i%G%9%/%H%C%W>e$K!V$4@A5a=q(B.txt$B!W$,=P8=(B
$B!A9qL1@83h%;%s%?!5=$N
(Internet Watch, 7/6)
$B!U(B
Critical Patch Updates and Security Alerts
(Oracle)$B!#
$B!!?7$7$$967bu67!#(B
$B:Y9)$7$?!"(BKeep-Alive $B$,M-8z$J(B HTTP 1.1 $B%j%/%(%9%H$rAw$C$?>l9g$K!"Cf4V5!4o(B (cache/proxy $B%5!<%P$d%U%!%$%"%&%)!<%k(B) $B$H=*C<5!4o(B (web $B%5!<%P(B) $B$H$G$=$N2rHTTP Response Splitting $B$H$O;w$FHs$J$kOC$@$=$&$@!#(B
CVE-2005-2090
$B!!$3$l$rMxMQ$9$k$H!"(Bcache/proxy $B%5!<%P$N(B cache $B1x@w!"%U%!%$%"%&%)!<%k>e$NKI1R5!9=$NL58z2=!"%;%C%7%g%s%O%$%8%c%C%/$d(B XSS $B967b$,2DG=$K$J$k$H$$$&!#(B
$BCf4V5!4o$H=*C<5!4o$H$NAH$_$"$o$;$GLdBj$,H/@8$7$?$j$7$J$+$C$?$j$9$k$,!"(BApache $B$O!"(BApache $B<+?H$,Cf4V5!4o$G$J$$8B$j$O0BA4$@$H$5$l$F$$$k!#(B
$B!!O@J8Cf$G$O!"(Bsquid $B$O(B 2.5.STABLE9 $B$G(B ($B:G?7$O(B 2.5.STABLE10)$B!"(BCheckPoint FW-1 $B$O(B R55W $B$G=$@5$5$l$F$$$k$H2r@b$5$l$F$$$k!#$^$?(B DeleGate $B$K$D$$$F$O!"(B8.11.5-pre1 / 9.0.3-pre28 $B$G=$@5$5$l$F$$$k(B [DeleGate:13051]$B!#$=$NB>$NEP>l?MJ*(B -- IIS 5.0 / 6.0, ISA 2000, WebLogic 8.1 SP1, Apache 2.0.45 / 1.3.29, WebSphere 5.0 / 5.1, Oracle9iAS web server 9.0.2, SunONE web server 6.1 SP4, SunONE proxy server 3.6 SP4, Tomcat 5.0.19 / 4.1.24, $BF?L>$N(B cache $B%"%W%i%$%"%s%9(B -- $B$K$D$$$F$O>u67ITL@!#(B
2005.07.08 $BDI5-(B:
$B!!(BDeleGate 8.11.5 $B$,%j%j!<%9$5$l$^$7$?!#(B
DeleGate $BMxMQ
2005.07.27 $BDI5-(B:
$B!!(B[SA14530] Apache HTTP Request Smuggling Vulnerability
(secunia)$B!#(BApache 2.0.55 $B$G=$@5$5$l$kM=Dj$@$=$&$G$9!#(B
2007.04.10 $BDI5-(B:
$B!!(BTomcat$B$N%;%-%e%j%F%#%"%C%W%G!<%H$,%j%j!<%9$K(B - 4$B7O%f!<%6$O99?7$r(B
($B%^%$%3%_%8%c!<%J%k(B, 2007.04.09)$B!#(BTomcat 4.1.36 $B$G=$@5$5$l$?$=$&$G$9!#(B
$B!!(BNet-SNMP 5.x $B$K7g4Y!#(B
TCP $B$N$h$&$J%9%H%j!<%`%Y!<%9%W%m%H%3%k$rMxMQ$7$F$$$k>l9g(B ($B%G%U%)%k%H$G$O;HMQ$7$J$$(B) $B$K!"(BDoS $B967b$r
2005.09.29 $BDI5-(B:
$B!!(BCVE: CAN-2005-2177
$B!!(B1.2.2 $B0JA0$N(B zlib 1.2.x $B$K7g4Y!#(B
$B2u$l$?05=L%G!<%?%9%H%j!<%`$N07$$$K$*$$$F(B buffer overflow $B$9$k7g4Y$,$"$j!"(B
$B=hM}$,Dd;_$7$?$jG$0U$N%3!<%I$r
fix / patch:
2005.07.08 $BDI5-(B:
$B!!(BFedora Core 3 / 4, Turbolinux, VineLinux, OpenBSD $B$K$D$$$FDI5-!#(B
2005.07.12 $BDI5-(B:
$B!!4XO"(B:
2005.07.12 $BDI5-(B:
$B!!(BNetBSD $B$N>u67$rDI5-!#(B
2005.07.13 $BDI5-(B:
$B!!(BTurbolinux $B$N>u67$rDI5-!#(B
$B!!(BDiscovering copies of zlib (enyo.de)$B!#(Bzlib $BMxMQ%"%W%j$r(B ClamAV $B$rMxMQ$7$F8!=P$9$kJ}K!!#(B
2005.07.23 $BDI5-(B:
$B!!$3$N7g4Y$,=$@5$5$l$?(B zlib
1.2.3 $B$,=P$F$$$^$7$?!#(B
$B!U(B
$B!Z%G%9%/0B0f@23$$,1S$`!*![(B
$B$d$C$H=P$?!!H/HV56Au$N!!BP1~:v!!$G$bHs8x3+!!$=$l$G0UL#$"$k!)(B
($BF|7P(B IT Pro, 7/6)$B!#8x3+$9$k$H2sHr$5$l$F$7$^$&(B ($B2sHr$9$k
$B!U(B
$B$J$<6&KE:a$KH?BP$9$k$N$+(B
(jca.apc.org)$B!#?35DF~$j$7$?$i$7$$$G$9!#(B
$B!U(B
$B%=%U%H3+H/2q5=$GA49q=i(B
($BF|7P(B, 7/6)
$B!U(B
$BL55v2DA`6H (TBS, 7/6)$B!#4XO"(B: $B3$>eJ]0BD#5Z$S?e;:D#$K$h$k309q5yA% ($B3$>eJ]0BD#(B, 7/5)
$B!U(B
$B=;4p%M%C%HAJ>Y$GEl5~!&9qN);TD9$,=PDn!!=;L1B&>Z?M$K(B (asahi.com, 7/6)
$B!U(B
$B!V%^%k%&%'%":n@.$O$^$9$^$9!XHH:a$N%W%m!Y$N;E;v$K!W!'1Q%;%-%e%j%F%#2q
(CNET, 7/6)$B!#85%M%?$H$*$\$7$-!V(B$B%=%U%)%9!"!X(B2005$BG/>eH>4|%&%$%k%9%A%c!<%H!Y$rH/I=(B$B!W(B (sophos)
($B1Q8l86J8(B)
$B$K$O!VDlCN$l$:L5CN$JBg=0!W(B(the great unwashed public) $B$H$$$&8@MU$O$J$$$_$?$$$J$s$@$1$I!D!D!#(B
$B!U(B
$B%9%Q%$%&%(%"Ho323HBg!"J#?t6d9T$GIT@5?6$j9~$_(B
(asahi.com, 7/6)
$B!U(B
$B?<9o2=$9$k%\%C%HBP:v$KAmL3>J$H7P;:>J$,K\9x(B
($BF|7P(B BP, 7/6)$B!#(B
Telecom-ISAC Japan $B%Y!<%9$G%O%K!<%]%C%H$r1?MQ$7$F(B bot $B8!BN$r<}=8$7!"L14V%;%-%e%j%F%#%Y%s%@!<$G6n=|%D!<%k$r3+H/!"$H$$$&%9%H!<%j!<$NLOMM!#(B
$B!U(B
$BIT@5?/F~MF5?$GN13X@8BaJa(B
($BIpED7=;K$5$s(B, 7/6)$B!"(B$BN99T2q
($BF|7P(B, 7/6)$B!#$I$&$$$&
$B!!4XO"(B:
$B!U(B
$B%,%$%"$NLkL@$1(B ($BIpED7=;K$5$s(B, 7/5)$B!#!V:G9b%l%Y%k$N%;%-%e%j%F%#!W$N(T_T))
- Microsoft Security Advisory (903144):
A COM Object (Javaprxy.dll) Could Cause Internet Explorer to Unexpectedly Exit
$B!!(BISS $B$,G$0U$N%3!<%I$NMicrosoft Java Virtual Machine $B$K$*$1$k%j%b!<%H$+$i$N%;%-%e%j%F%#?/32(B (ISSKK, 2005.07.06)$B!#(B
$B$7$+$7!D!D(B
Buffer Overflow Exploit Prevention (BOEP) $B$r$*;H$$$N>l9g$O!"$3$NLdBj$+$iJ]8n$5$l$F$$$^$9!#$3$N5;=Q$O(B Proventia Desktop ($BF|K\9qFbL$%j%j!<%9(B)$B!"(BServer Sensor SR 4.2($BF|K\9qFbL$%j%j!<%9(B) $B$*$h$S(B 4.3 ($BF|K\9qFbL$%j%j!<%9(B) $B$KHw$o$C$F$$$^$9!#(B
$B!!(B$B%$%s%?!<%M%C%H(B $B%;%-%e%j%F%#(B $B%7%9%F%`%:!"%"%s%A%&%#%k%9%=%U%H$N(B
$B%7%0%M%A%c$d%Q%?!<%s%U%!%$%k99?7$NA0$K4{CN!&L$CN$N%&%#%k%9$r(B
$B6n=|$9$k
(ISSKK, 2004.12.15)
$B$K$h$k$H!"(BProventia Desktop $B$O(B 2005.03.01 $B$KHNGd3+;O$5$l$k$3$H$K$J$C$F$$$k$N$G$9$,!"
$B!!$^$?(B Microsoft Security Advisory (903144)
$B$,2~D{$5$l!"(Bjavaprxy.dll $B$rL58z2=(B (kill bit $B$r@_Dj(B) $B$9$k%W%m%0%i%`$,G[I[$5$l$F$$$^$9!#(BWorkarounds $B$N(B Disable the Javaprxy.dll COM object from running in Internet Explorer $B$r;2>H!#?9ED$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
$B$?$^$K!V9-9p$r:\$;$F$_$^$;$s$+!W$H8@$C$F$/$k?M$,$$$k$N$G$9$,!"(B
$B$3$3$O(B .ac.jp $B%I%a%$%s$J$N$GL5M}$G$9!#(B
$B$b$A$m$s%"%U%#%j%(%$%H$bL5M}$G$9!#(B
$B!U(B
$BAa$/2~D{$7$F$[$7$$!V(BWindows XP$B$N
($BF|7P(B IT Pro, 7/4)$B!#$"$l$C(B? $B$H;W$C$?$N$G$9$,!"(B
Windows $B%G%9%/%H%C%W@=IJ$N%i%$%U%5%$%/%k(B
(Microsoft) $B$K$h$k$H!"%a%$%s%9%H%j!<%`(B $B%U%'!<%:$O3N$+$K(B
- Windows $B%S%8%M%9@=IJ(B: $B@=IJH/Gd$+$i(B5$BG/$b$7$/$O!"Windows $B%3%s%7%e!<%^@=IJ(B: $B@=IJH/Gd$+$i(B 5 $BG/4V(B
$B$H$J$C$F$^$9$M!#$U$`$s!#(B
$B!U(B
$B@EL.G'>Z$b0B?4$G$-$J$$(B? $BBg:,$G:n$C$?56B$;X$GG'>Z$K@.8y(B
($BF|7P(B IT Pro, 7/1)$B!#Bg:,;X$K$h$k@EL.G'>Z(B ($BF|N)%=%U%H$N(B$B@ELf(B) $B$X$NEPO?$HG'>Z$,2DG=!"$H$$$&OC!#(B
$BBg:,;X$,G$0U$NC/$+$N;X$N$+$o$j$K$J$k$o$1$G$O(B ($B:#$N$H$3$m$O(B)
$B$J$$$,!"@EL.G'>Z%G%P%$%9$K$*$1$k!V@8BN8!CN5!G=!W(B($B@8$-$F$$$k;X$+$=$&$G$J$$$+$NH=JL(B) $B$O(B ($BC1BN$G$O(B) $B==J,$G$O$J$$$H8@$($k!#(B
$B!!>\:Y(B: $B6bM;Z$K$D$$$F(B ($B>>K\JY0Q0w@bL@;qNA(B)
($B6bM;D#(B$B!&(B$B56B$%-%c%C%7%e%+!<%ILdBj$K4X$9$k%9%?%G%#%0%k!<%W(B$B!"(B$BBh#92s(B (17.4.15$B3+:E(B))$B!#(B$B56B$%-%c%C%7%e%+!<%ILdBj$K4X$9$k%9%?%G%#%0%k!<%W(B$B!"6=L#?<$$$J$"!#(B
$B!U(B
ACCS$B$NIT@5%"%/%;%9:[H=$GM-:aH=7h$,3NDj!"855~Bg8&5f0w$,95AJ (Internet Watch, 7/5)$B!#3NDj$G$9$+!D!D!#(B
$B!U(B
MBSA 2.0
$B$r
$B!U(B
$B%b%P%$%k(BPC$B$N4IM}%k!<%k!"8D?M>pJsJ]8nK!;\9T$G$b?JE8$J$7(B
($BF|7P(B BP, 7/5)
$B!U(B
$BIM2,86H/!'3NG'A0$K!VJ|pJsN.$9(B
($BKhF|(B, 7/5)$B!#CfItEENO$5$9$,$G$9!#(B
$B!U(B
$BO@J8%G!<%?$NYTB$$dEpMQ!"#1#1#33X2q$G!!3X=Q2q5DD4::(B
(asahi.com, 7/4)
$B!U(B
Smitfraud meets Nsag: return of the file infector
(Analyst's Diary, 2005.07.04)$B!#%U%!%$%k46@w7?$N%"%I%&%'%"$NOC!#(B
$B!U(B
$B3+$+$l$?7Y;!(B
($BIpED7=;K$5$s(B, 7/4)
$B!V:G6a$NE%K@$O6'K=$@$7!"7YHw0w$@$1$G$O2?$b$G$-$J$$$+$i$M!#!W$H?F@Z$J$*=d$j$5$s!#(B
$B!!%;%3%`$NCf$N?M$b!"(B
ADVANCED TASER M26 $B$_$?$$$J$N$rAuCe$9$kF|$,$/$k$N$+$J$"!#(B
$B!U(B
$BF|7P%9%Z%7%c%k!V%,%$%"$NLkL@$1!W!!#77n#5F|J|Aw!!Bh#1#6#82s(B
$B%5%$%P!<967b$H$NF.$$(B
$B!A#I#THH:a$+$i2q
(TV $BEl5~(B)$B!#!V:G9b%l%Y%k$N%;%-%e%j%F%#!W$N
$B!!(BMac OS $BHG(B Acrobat / Adobe Reader 7.0, 7.0.1 $B$K7g4Y!#(B
PDF $B%U%!%$%k$K;E3]$1$?96N,(B JavaScript $B$K$h$C$F!"4{CN%Q%9!&%"%W%j%1!<%7%g%sL>$N%"%W%j%1!<%7%g%s$r5/F0$5$;$k$3$H$,2DG=$H$J$k!#(B
$B!!(BMac OS $BHG(B Acrobat / Adobe Reader 7.0.2 $B$G=$@5$5$l$F$$$k!#(B7.0.2 $B$X$N%"%C%W%G!<%?$,8x3+$5$l$F$$$k$N$GE,MQ$9$l$P$h$$!#(B
$B!!(BFreeBSD $B$K(B 3 $B$D$N(B SA (5 $B$D$N7g4Y(B)
- XML $B30It%(%s%F%#%F%#$K4X$9$k%;%-%e%j%F%#>pJs!J(BAdobe Reader/Acrobat 7.0-7.0.1$B!K(B
$B!!(BMac OS $BHG(B Acrobat 7.0.2 / Adobe Reader 7.0.2 $B%"%C%W%G!<%H$,EP>l!#(B
XML $B30It%(%s%F%#%F%#$K4X$9$k%;%-%e%j%F%#>pJs!J(BAdobe Reader/Acrobat 7.0-7.0.1$B!K(B (Adobe)
$B$b2~D{$5$l!"(BMac OS $BHG%"%C%W%G!<%H%U%!%$%k$X$N%j%s%/$,7G:\$5$l$F$$$k!#(B
- Vocal Cancel$B$,%&%$%k%9$J7o$K$D$$$F!#(B
$B!!8EED;a$K$h$k%3!<%I$,=|5n$5$l$?(B SoftEther VPN 2.0 Beta 3.2
$B$,EP>l$7$^$7$?!#;2>H(B: SoftEther VPN 2.0 $B%W%m%0%i%`$+$i$N?.Mj$G$-$J$$%3!<%I$N=|5n$K$D$$$F(B
(softether.com, 2005.07.04)$B!#$J$*!"(BBeta 3.2 $B$K$O$=$NB>$K$b$$$m$$$m$J5!G=8~>e$,$J$5$l$F$$$^$9!#(B
- Vocal Cancel$B$,%&%$%k%9$J7o$K$D$$$F!#(B
$B!!(BVocal Cancel$B$,%&%$%k%9$J7o$K$D$$$F!#(B$B$,2~D{$5$l$F$$$k!#8EED;a$+$i!V%9%Q%$%&%'%"$O@5<0$J%7%j%"%k%J%s%P!pJs$O0J2<$@$=$&$@!#(B
$BMxMQ%7%j%"%k%J%s%P!
$B%f!<%6!<%"%+%&%s%H$N>pJs(B(SID$BEy(B)
$B%a!<%k%"%+%&%s%H$N>pJs(B
$B%"%I%l%9D"(B
$B%@%$%d%k%"%C%W%"%+%&%s%H$N>pJs(B
$B!!(BVocal Cancel 5.05 $B$N(B README.TXT $B$K$O$3$s$J5-=R$,$"$k!#(B
$B!&IT@5;HMQ$K$D$$$F(B
$BIT@5;HMQ$K$O87$7$/BP=h$5$;$F$$$?$@$-$^$9!#(B
$B$3$NJ8=q$G$O!VIT@5;HMQ!W$H$O!"%Q%9%o!<%I$rIT@5$J
$B$3$NJ8=q$G$O!VL55v2DG[I[!W$H$O!":n
$BIT@5;HMQ$N$*$h$S%Q%9%o!<%I$NL55v2DG[I[$N:]$O!"8D?M>pJs$K$D$$$FD4::$5$;$F$$$?$@$/>l9g$,$4$6$$$^$9!#(B
$BIT@5;HMQ$N:]$O!"EPO?NA6b$N==G\0J2<$ND4::HqMQ$r@A5a$5$;$F$$$?$@$/>l9g$,$4$6$$$^$9!#(B
$B$^$?!"%Q%9%o!<%I$NL55v2DG[I[$N:]$K$O!":GBgB;323[$r@A5a$5$;$F$$$?$@$/>l9g$,$4$6$$$^$9!#(B
$B0-pJs$rBh;0l9g$,$4$6$$$^$9!#(B
$B!!$3$NJ8LL$@$H!"!V%"%I%l%9D"!W$N<}=8$K$D$$$F$OHO0O$r1[$($F$$$k$h$&$K;W$($k$J$"!#(B
$B!!F|N)%=%U%H$N(B$BHkJ8%7%j!<%:(B$B$K(B 2 $B$D$N7g4Y!#(B
$B!!$$$:$l$K$D$$$F$bBP:vHG$,$"$k$N$G%"%C%W%0%l!<%I$9$l$P$h$$!#(B
$B$J$*HkJ8%S%e!<%"$K$D$$$F$O!VK\BP:v$G0lItHkJ8%S%e!<%"$NF0:n$,JQ99$K$J$C$F!W$$$k$=$&$J$N$GCm0U!#(B
$B!!(B
$BF|N)%;%-%e%j%F%#>pJs(B$B$K$3$NOC$,$J$$$N$O!"!VF|N)%=%U%H$OJL2q
($BF|N)%;%-%e%j%F%#>pJs(B$B$K$b$A$c$s$H$"$j$^$7$?!#>.=P$5$s>pJs$"$j$,$H$&$4$6$$$^$9(B)
$B!!(BInternet Explorer (IE) 5.01 SP[34] / 5.5 SP2 / 6 SP[12] $B$K1F6A$9$k7g4Y!#(B
IE $B$K$*$$$F!"(BMicrosoft Java VM $B$K4^$^$l$k(B javaprxy.dll COM $B%*%V%8%'%/%H$N%$%s%9%?%s%9$r:n@.$9$k$3$H$K$h$j!"%a%b%jGK2u$,H/@8!#(B
$B$3$l$rMxMQ$9$k$H!"96N,(B web $B%Z!<%8$d(B HTML $B%a!<%k$+$iG$0U$N%3!<%I$r
$B!!=$@5%W%m%0%i%`$O$^$@$J$$!#2sHr$9$k$K$O!"4IM}$r;XDj$7$Fregsvr32 /u javaprxy.dll
$B$r\:Y$O(B
Microsoft Security Advisory (903144)
$B$r;2>H!#(B
$B!!$9$G$K(B exploit $B$,8x3+$5$l$F$*$j!"$9$3$V$k4m81!#:#$9$0BP1~$5$l$?$$!#4XO"(B:
$B!!(BSEC-CONSULT SA-20050629-0
$B$K$O$3$s$J5-=R$b(B:
on the
contrary, we found that at least 20 of the objects available on an
average XP system either lead to an instant crash or an exception after
a few reloads.
$B!!LdBj$N%H%j%,$O(B javaprxy.dll $B$K;_$^$i$J$$2DG=@-$,$"$k!#(B
2005.07.06 $BDI5-(B:
$B!!(BISS $B$,G$0U$N%3!<%I$NMicrosoft Java Virtual Machine $B$K$*$1$k%j%b!<%H$+$i$N%;%-%e%j%F%#?/32(B (ISSKK, 2005.07.06)$B!#(B
$B$7$+$7!D!D(B
Buffer Overflow Exploit Prevention (BOEP) $B$r$*;H$$$N>l9g$O!"$3$NLdBj$+$iJ]8n$5$l$F$$$^$9!#$3$N5;=Q$O(B Proventia Desktop ($BF|K\9qFbL$%j%j!<%9(B)$B!"(BServer Sensor SR 4.2($BF|K\9qFbL$%j%j!<%9(B) $B$*$h$S(B 4.3 ($BF|K\9qFbL$%j%j!<%9(B) $B$KHw$o$C$F$$$^$9!#(B
$B!!(B$B%$%s%?!<%M%C%H(B $B%;%-%e%j%F%#(B $B%7%9%F%`%:!"%"%s%A%&%#%k%9%=%U%H$N(B
$B%7%0%M%A%c$d%Q%?!<%s%U%!%$%k99?7$NA0$K4{CN!&L$CN$N%&%#%k%9$r(B
$B6n=|$9$k
(ISSKK, 2004.12.15)
$B$K$h$k$H!"(BProventia Desktop $B$O(B 2005.03.01 $B$KHNGd3+;O$5$l$k$3$H$K$J$C$F$$$k$N$G$9$,!"
$B!!$^$?(B Microsoft Security Advisory (903144)
$B$,2~D{$5$l!"(Bjavaprxy.dll $B$rL58z2=(B (kill bit $B$r@_Dj(B) $B$9$k%W%m%0%i%`$,G[I[$5$l$F$$$^$9!#(BWorkarounds $B$N(B Disable the Javaprxy.dll COM object from running in Internet Explorer $B$r;2>H!#?9ED$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
2005.07.08 $BDI5-(B:
$B!!F|K\8lHG=P$?(B: $B%^%$%/%m%=%U%H(B $B%;%-%e%j%F%#(B $B%"%I%P%$%6%j(B (903144):
COM $B%*%V%8%'%/%H(B (Javaprxy.dll) $B$K$h$j!"(BInternet Explorer $B$,0[>o=*N;$9$k(B
(Microsoft)
2005.07.12 $BDI5-(B:
$B!!(B$BF|K\8l>pJs$NK]Lu%?%$%_%s%0(B ($BF|K\$N%;%-%e%j%F%#%A!<%`$N(B Blog, 2005.07.11)$B!#(B
$BEv=i$3$N%"%I%P%$%6%j$r8x3+$9$k:]$K2sHr:v$,$$$/$D$+8x3+$5$l$?$N$G$9$,!"@HpJs$NDs6!$r$=$l$i$N%D!<%k$,$G$-$"$,$k$^$G8+9g$o$;$F$*$j$^$7$?!#(B($BCfN,(B)
$B$H$$$&$3$H$G!"$$$^$@$K>pJs$,3NDj$7$F$+$iF|K\8l2=$9$Y$-$+!">o$KF|K\8l>pJs$r%?%$%`%j!<$K=P$9$+$NH=CG$,$D$$$F$$$^$;$s!#(B
$B!!8D?ME*$K$O!V%?%$%`%j!l$J$N$G!"$J$+$J$+$`$D$+$7$$$G$9$h$M$(!#(B
2005.07.12 $BDI5-(B:
$B!!(BJView $B%W%m%U%!%$%i$N@H $B=P$^$7$?!#=$@5FbMF$O!"(BAdvisory $B$G<($5$l$F$$$?$N$HF1$8!"(BView $B%W%m%U%!%$%i(B (Javaprxy.dll) COM $B%*%V%8%'%/%H(B (CID: 03D9F3F2-B0E3-11D2-B081-006008039BF0) $B$KBP$9$k(B Kill Bit $B$N@_Dj!#(B
2005.08.12 $BDI5-(B:
$B!!(BInternet Explorer $BMQ$NN_@QE*$J%;%-%e%j%F%#99?7%W%m%0%i%`(B (896727) (MS05-038)
$B$N!V(BCOM $B%*%V%8%'%/%H$N%$%s%9%?%s%92=$N%a%b%jGKB;$N@HCAN-2005-1990$B!W(B
$B$G!"B>$NLdBj4^$_$N(B .dll $B$K$D$$$F$bBP1~$5$l$?$h$&$G$9!#(B
$B!!96N,%W%m%0%i%`(B ($B40A4HG(B): http://www.frsirt.com/exploits/20050809.MS05-038.pl.php
$B!!(B$B8EEDBYBg;a(B$B:n$N%7%'%"%&%'%"(B Vocal Cancel
($B$G$NG[I[$OCf;_$5$l$F$$$k$,(B http://hp.vector.co.jp/authors/VA013315/SOFTWARE.HTM
$B$+$iF~TROJ_HIROFU.A
$B$H$7$F8!=P$9$k$H$$$&!#(B
$B!!8EED;a$,(B SoftEther $B$K$b4X78(B$B$7$F$$$k4X78$G$+!"(B
SoftEther VPN 2.0 $B$N%5%]!<%H$*$h$S%P%0Js9p$K$D$$$F(B (softether.com)
$B$K$O$3$s$J5-=R$,(B:
Yasuhiro Furuta $BLdBj$K$D$$$F(B
$B$$$o$f$k(B Yasuhiro Furuta $BLdBj$K$D$-$^$7$F$O!"%=%U%H%$!<%53t<02q
$B!!!D!DD4::7k2LB.Js=P$^$7$?(B: SoftEther VPN 2.0 $B%Y!<%?HG%W%m%0%i%`$N0BA4@-$K$D$$$F(B($BB.Js(B)
(softether.com, 2005.07.03)$B!#(BSoftEther $B$KAH$_9~$^$l$?%3!<%I$KLdBj$O$J$$$b$N$N!":#8e$b$=$N%3!<%I$r;H$$B3$1$k$+$I$&$+$K$D$$$F$O8!F$Cf$@$=$&$G$9!#(B
2005.07.04 $BDI5-(B:
$B!!(BVocal Cancel$B$,%&%$%k%9$J7o$K$D$$$F!#(B$B$,2~D{$5$l$F$$$k!#8EED;a$+$i!V%9%Q%$%&%'%"$O@5<0$J%7%j%"%k%J%s%P!pJs$O0J2<$@$=$&$@!#(B
$BMxMQ%7%j%"%k%J%s%P!
$B%f!<%6!<%"%+%&%s%H$N>pJs(B(SID$BEy(B)
$B%a!<%k%"%+%&%s%H$N>pJs(B
$B%"%I%l%9D"(B
$B%@%$%d%k%"%C%W%"%+%&%s%H$N>pJs(B
$B!!(BVocal Cancel 5.05 $B$N(B README.TXT $B$K$O$3$s$J5-=R$,$"$k!#(B
$B!&IT@5;HMQ$K$D$$$F(B
$BIT@5;HMQ$K$O87$7$/BP=h$5$;$F$$$?$@$-$^$9!#(B
$B$3$NJ8=q$G$O!VIT@5;HMQ!W$H$O!"%Q%9%o!<%I$rIT@5$J
$B$3$NJ8=q$G$O!VL55v2DG[I[!W$H$O!":n
$BIT@5;HMQ$N$*$h$S%Q%9%o!<%I$NL55v2DG[I[$N:]$O!"8D?M>pJs$K$D$$$FD4::$5$;$F$$$?$@$/>l9g$,$4$6$$$^$9!#(B
$BIT@5;HMQ$N:]$O!"EPO?NA6b$N==G\0J2<$ND4::HqMQ$r@A5a$5$;$F$$$?$@$/>l9g$,$4$6$$$^$9!#(B
$B$^$?!"%Q%9%o!<%I$NL55v2DG[I[$N:]$K$O!":GBgB;323[$r@A5a$5$;$F$$$?$@$/>l9g$,$4$6$$$^$9!#(B
$B0-pJs$rBh;0l9g$,$4$6$$$^$9!#(B
$B!!$3$NJ8LL$@$H!"!V%"%I%l%9D"!W$N<}=8$K$D$$$F$OHO0O$r1[$($F$$$k$h$&$K;W$($k$J$"!#(B
2005.07.04 $BDI5-(B ($B$=$N(B 2):
$B!!8EED;a$K$h$k%3!<%I$,=|5n$5$l$?(B SoftEther VPN 2.0 Beta 3.2
$B$,EP>l$7$^$7$?!#;2>H(B: SoftEther VPN 2.0 $B%W%m%0%i%`$+$i$N?.Mj$G$-$J$$%3!<%I$N=|5n$K$D$$$F(B
(softether.com, 2005.07.04)$B!#$J$*!"(BBeta 3.2 $B$K$O$=$NB>$K$b$$$m$$$m$J5!G=8~>e$,$J$5$l$F$$$^$9!#(B
$B!U(B
$B=;L14pK\BfD"!"?yJB6h$,BgNL1\Mw6X;_(B
(TBS, 7/1)$B!#(B
$B9-Js$9$.$J$_(B7$B7n(B1$BF|9f(BNO.1724$B!J(BPDF$BHG!K(B ($B?yJB6h(B) $B$N(B 8 $B%Z!<%8L\$b;2>H!#(B
$B!U(B
$B>pDLIt!V#1#07n$^$G%$%s%?!<%M%C%H@)0F$^$H$a$k!W(B
($BCf1{F|Js(B, 7/1)$B!#4Z9q$NOC!#(B
$B!U(B
Spybot-S&D 1.4$B@5<0%j%j!<%9(B
($B%"%@Ho$NIt20(B, 6/1)$B!#$5$-$[$I$h$&$d$/$^$8$a$K8+$F$_$?$N$G$9$,!"(B
First native multi-installation scanner
On PE boot CDs as well as on any system with multiple installations of Windows 2000 or later, Spybot-S&D 1.4 is able to scan the other installations as well, including the registry. From what we know, Spybot-S&D is the first anti-spyware solution that offers inactive registry scanning as a native feature.
$B$H$$$&$"$?$j$,$&$l$7$$?M$O$I$N$/$i$$$$$k$N$+$J!#(B
$B!U(B
$B0-&K!!K$X$NBP:v$K$D$$$F(B
($B7P:Q;:6H>J(B, 7/1)
$B!U(B
Windows Server Update Services
$B!=(B $B5!G=$rBgI}$K6/2=$7$?4k6H8~$1L5=~%Q%C%A4IM}%=%U%H$N:G?7HG(B $B!=(B
(@IT, 6/30)
$B!U(B
$B%^%$%/%m%=%U%H!"%"%I%&%'%"%a!<%+!<$NGc<}$r8!F$$+(B
(CNET, 7/1)$B!#$J$s$H(B Gator $B$rGc$&OC$,$"$k$=$&$G!#$^$8$G$9$+(B?
$B!U(B
Note on History of TEMPEST
(cryptome.org, 6/30)
$B!U(B
@random presents: $B%^%$%/%m%=%U%H$NCf$N?M$H9M$($k!"(BWindows $B$N%;%-%e%j%F%#(B
($BMU$C$QF|5-(B, 6/26)$B!#$O$;$,$o$5$s$K$h$k%l%]!<%H!#(B
$B!U(B
$B%^%$%/%m%=%U%H$d(BLinux$B%Y%s%@!<$i$,!V(BOS$B$N%;%-%e%j%F%#E0DlF$O@!W(B
(Internet Watch, 7/1)
$B!U(B
$B%^%$%/%m%=%U%H!"(BWindows Update$B$N8zN(2=$rL\E*$H$7$?99?7%W%m%0%i%`$r8x3+(B
(Internet Watch, 6/30)
$B!U(B
$BF|K\A@$$Bg5,LO%O%C%+!<967b$r7W2h(B ($B%K%C%+%s%9%]!<%D(B, 7/1)$B!#(B
$B$"$i$i9H5R$5$s!"$^$?$>$mI|3h$7$F$$$?$s$G$9$+!#(B
$B?7(B web $B%Z!<%8$O(B
http://www.chinahonker.com/
$B$J$s$@$=$&$@!#(Bhttp://news.xinhuanet.com/newmedia/2005-04/21/content_2857269.htm $B$H$+!#(B
$B!!4XO"(B: $BCf9q%O%C%+!
($BKhF|(B, 7/1)
$B!U(B
$B%k!<%H%5!<%P$N;YG[8"$rN%$5$J$$JF9q(B
(ITmedia, 7/1)
$B!U(B
[FreeBSD-users-jp 85684] Re: FreeBSD $B3+H/$B!#(B
Interview: Looking at FreeBSD 6 and Beyond
(osnews.com) $B$NK.LuHG!#%;%-%e%j%F%#OC$b$$$m$$$m$"$j$^$9!#(B
$B!U(B
JPCERT/CC & Telecom-ISAC Japan $B%;%_%J!<(B
$B$H$$$&$N$,(B 2005.07.27 $B$K3+:E$5$l$k$h$&$J$N$@$,!"(B
JPCERT/CC
$B$K$b(B
Telecom-ISAC Japan
$B$K$b(B
e-side.co.jp
$B$K$b>pJs$,$J$$!#(B
$B!!!D!D!V$4>7BT$NJ}$N$_$N%;%_%J!
$B!U(B
$B%"%G%3OC(B
$B!U(B
891861 - Update Rollup 1 for Windows 2000 SP4
(Microsoft) $B$@$=$&$G$9!#(B
$B%@%&%s%m!<%I(B: Windows 2000 SP4 $BMQ$N99?7%W%m%0%i%`(B $B%m!<%k%"%C%W(B 1$B!#(B
$B!!(B$B%^%$%/%m%=%U%H(B $B%;%-%e%j%F%#(B $B%"%I%P%$%6%j(B (891861):
Windows 2000 Service Pack 4 (SP4) $BMQ99?7%W%m%0%i%`$N%m!<%k%"%C%W(B 1 $B$N%j%j!<%9(B
(Microsoft) $B$b=P$F$$$^$7$?!#(B
$B!U(B
IETF$B!'!V$I$A$i$K$b8*F~$l$7$J$$!W(B--Sender ID$B$H(BSPF$BN>5;=Q$N
(CNET, 6/30)$B!#(BExperimental $B07$$$@$=$&$G$9!#(B
$B!U(B
$B7Y;!D#$H%^%$%/%m%=%U%H!"5;=Q6(NO6(Dj$rDy7k(B
(Microsoft, 6/28)
$B!U(B
$B5\>k8)7Y$NJs=~HqDd;_!"7Y;!D#D941!V8@8lF;CG!W$HHcH=(B
(asahi.com, 6/30)$B!#(B
$B!U(B
$Bk>Js!'(B
$B1|:j8,;0$5$s#8#5:P!a!V$f$-$f$-$F!"?@73!W$K=P1i(B
($BKhF|(B, 6/26)
$B!U(B
$B%$%s%?!<%M%C%H>e$K$*$1$k0cK!!&M-32>pJsBP:v$K$D$$$F(B
(IT $B@oN,K\It(B IT $B0B?42q5D(B, 6/30)
$B!U(B
$B#i#P#o#d2]6b$G7kO@=P$:!!J82=?35D2q(B
(asahi.com, 6/30)$B!"(B
$B;dE*O?2;O?2hJd=~6b!"8+D>$75!1?9b$^$k$b?5=EO@$,BgH>(B
(ITmedia, 6/30)
$B!U(B
$BJF9q#B#S#E!'(B
$B#2F,L\$O=i$NJF9q;:!!!V0BA4!W$N:,5rJx$l$k(B
($BKhF|(B, 6/30)
$B!U(B
$B;M9q3i?e!'(B
$B>>;3;T$N#67n9_?eNL$O#1#8#9#0G/0JMh:G>/(B
($BKhF|(B, 6/30)$B!#0&CN$Nu67$N$h$&$G(B:
$BKRHx%@%`Cy?e1?MQ6J@~(B$B!#$A$g$C$H$@$1;}$AD>$7$?$N$+$J!#(B
$B!!H|GJ8P$O$3$N$X$s(B: $B:#F|$N?e0L(B$B!"(B$BH|GJ8P$N?e0LJQ2=(B$B!#(B
$B!U(B
$B8|O+>J!"%/%\%?D0
($B?@8M?7J9(B, 6/30)
$B!U(B
$B6bM;5!4X$N8\5R>pJsJ6<:#8#2K|7oD6(B
($B;:7P(B, 6/30)
$B!!(BVERITAS Backup Exec for NetWare 9.0, 9.1 /
Backup Exec for Windows Servers 10.0, 9.0, 9.1 $B$K7g4Y$$$C$Q$$$JOC!#(B
$B!!(Bpatch $B$,$"$k$N$GE,MQ$9$l$P$h$$!#(B
$B!!$3$N7g4Y$r%9%-%c%s$9$kF0$-$,$"$kLOMM(B:
$B!!(BBackup Exec $B$,30$+$i$^$k$_$($H$$$&%5%$%H$OB?$/$O$J$$$H;W$&$1$I!D!D!#(B
$B!!(BSerendipity
0.8.2 $B0JA0$K7g4Y!#(BSerendipity $B$,MxMQ$7$F$$$k(B PEAR XMLRPC $B$K$b(B
XML-RPC for PHP $B$HF1MM$N7g4Y(B$B$,$"$j!"(Bremote $B$+$i$N%3!<%ICAN-2005-1921
$B!!(BPEAR XMLRPC 1.3.1 $B$G=$@5$5$l$F$$$kLOMM!#(B
$B!!(BXML-RPC for PHP
1.1.0 $B0JA0$K7g4Y!#(Bremote $B$+$i$N%3!<%I$N
2005.11.06 $BDI5-(B:
$B!!(BCVE: CAN-2005-1921
$B!!9-$/MxMQ$5$l$F$$$k%3%s%F%s%D4IM}%7%9%F%`(B
XOOPS
2.0.11 $B0JA0$K!"(BXSS $B$d(B SQL $B%$%s%8%'%/%7%g%s$,2DG=$H$J$k7g4Y$,$"$k$=$&$@!#(B
$B>\:Y(B: XOOPS 2.0.11 & Earlier Multiple Vulnerabilities (gulftech.org)
$B!!BP1~$O0J2<$N$H$*$j(B:
$B!!(BphpBB 2.0.15 $B0JA0$K?7$?$J7g4Y$,H/8+$5$l!"(B2.0.16 $B$G=$@5$5$l$?$=$&$G$9!#(Bstr_replace('\\', '\\\\', $highlight_match)
$B$,(B str_replace('\\', '\\\\', addslashes($highlight_match)) $B$K$J$C$?$_$?$$!#(B
$B!!4XO"(B: Lucrezia$B$N%W%m%0%i%`%A%'%C%/(B phpBB$BJT(B (Lucrezia Borgia $B$N(B Room Cantarella, 2005.06.29)
![[$B%;%-%e%j%F%#%[!<%k(B memo]](/%7Ekjm/security/memo/sechole-memo.gif)
$B;d$K$D$$$F(B