$B%;%-%e%j%F%#%[!<%k(B memo - 2006.04
Last modified: Wed Jun 21 20:22:14 2006
+0900 (JST)
$B!!$3$N%Z!<%8$N>pJs$rMxMQ$5$l$kA0$K!"(B$BCm0U=q$-(B$B$r$*FI$_$/$@$5$$!#(B
$B!U(B
$BF|K\86G3$N3$MN$X$NJ|
($BH~IM$N2q(B, 4/29) ($B2<@~$O>.Eg(B)
$B!!F|K\86G3$O$D$$$K3$$KJ|7B#7!%#5#c#m$NJ|=P8}$+$iKhICLs#6#m$NB.EY$GJ|=P$7$?$3$H$K$J$k!#Ls#6#0#0#m#3$NGQ1UCf$K!"%H%j%A%&%`$OG/4VJ|=PNL$N#12/J,$N#1DxEY$,4^$^$l$F$$$?$H$$$&!#$9$J$o$ALs#12/#8@iK|%Y%/%l%k$N%H%j%A%&%`$,GQ1U#6#0#0#m#3Cf$K4^$^$l$F$$$?$3$H$K$J$k!#J|
($BCfN,(B)
$B!!$b$7K\3JA`6H$K$J$k$H!"#2F|$K#12s$OGQ1U#6#0#0#m#3$rJ|=P$9$k$3$H$K$J$k$H$$$&!#$9$J$o$AG/$KLs#1#8#32sJ|=P$9$k!#G/$KJ|=P$9$k%H%j%A%&%`$O#1!%#8!_(B $B#1#0$N#1#6>h%Y%/%l%k!J#12/$N#1!%#82/G\%Y%/%l%k!K$@$+$i!"#12sJ|=PJ,$NGQ1U#6#0#0#m#3Cf$KLs#1#7#0#02/%Y%/%l%k$N%H%j%A%&%`$,4^$^$l$k$3$H$K$J$j!"G;EY$K$9$l$P#1#c#m#3Ev$?$j#1#7K|%Y%/%l%k$H$J$k!#(B$B$3$l$O86;RNO;\@_$KE,MQ$5$l$F$$$kG;EY8BEY$G$"$k#1#c#m#3Ev$?$j#6#0%Y%/%l%k$N#2#8#0#0G\$K$bAjEv$9$k(B$B!#$b$786;RNO;\@_0lHL$KE,MQ$5$l$F$$$kG;EY5,@)$,O;%v=j:F=hM}9)>l$+$i$N3$MNJ|=P$K$bE,MQ$5$l$k$J$i$P!"G/4VM=Dj;HMQ:Q$_3KG3NA#8#0#0%H%s$N#2#8#0#0J,$N#1DxEY$7$+:F=hM}$G$-$J$$$3$H$K$J$j!";ve:F=hM}$OIT2DG=$K$J$k!#$=$N$?$a$K(B$B:F=hM}9)>l$K$D$$$F$O!"#2#0#0#0G/(B($BJ?@.#1#2G/(B)$B2J5;D#9p<(Bh#1#39f$G!"G;EY5,@)$r$B!#(B
$B!!$3$&$$$&$N$r%@%V%k!&%9%?%s%@!<%I$H$$$&$N$G$7$g$&$M!#(B
$B!U(B
$B85(BNHK$B?&0w$,#2$A$c$s$M$k$K%9%l$rN)$FFbIt9pH/(B
($BN"#2$A$c$s$M$k(B, 4/16)$B!#3N$+$K$9$4$$!D!D(B
$B!!(B[SA19738] Internet Explorer "mhtml:" Redirection Disclosure of Sensitive Information
$B$NOC!#>\:Y$O(B hoshikuzu $B$5$s$N2r@b$r;2>H!#(B
$B!!%W%m%H%3%k%O%s%I%i$NL58z2=$K$D$$$F$O!"$?$H$($P(B
VU#323070
($B$3$l<+BN$O(B MS04-013 $B$G=$@5$5$l$?OC(B) $B$N(B III. Solution $B$N(B Disable ITS and MHTML protocol handlers $B$r;2>H!#(B
$B:#2s$N7o$G$O(B mhtml $B$NL58z2=$@$1$G(B ok $B$J$h$&$G$9!#(B
- IE$B!"(BSafari$B!"(BFirefox$B$K%Q%C%AL$8x3+$N?7$?$J@H
-
$B!!(B[Full-disclosure] MSIE Nested Object Vulnerability Is Exploitable$B!#(BSecunia $B$NCf$N?M$K$h$k(B post$B!#(BSecunia $B$NFbIt$G$O96N,%3!<%I$N:n@.$K@.8y$7$F$*$j!"(BMicrosoft $B$K$b(B 2006.04.26 $B$KAwIU:Q$@$=$&$@!#(B
The advisory rating of "Highly critical" and "System access" impact is
therefore fully justified.
$B!!$H$$$&$o$1$G!"(BMSIE (mshtml.dll) OBJECT tag vulnerability
$B$NOC(B ([SA19762] Internet Explorer "object" Tag Memory Corruption Code Execution, CVE: CVE-2006-1992)
$B$O$9$3$V$k4m81$JLOMM!#(B
$B!U(B
$BF~Lg(B PHP$B%;%-%e%j%F%#(B
($B%*%i%$%j!<(B) $B$J$s$FK\$,=P$k$s$G$9$M!#$$$1$F$kFbMF$J$s$@$m$&$+!#(B
$B$=$&$$$($P!"(BWindows$B%5!<%P!<%/%C%/%V%C%/(B ($B%*%i%$%j!<(B) $B$H$$$&K\$b=P$k$=$&$G!#(B
$B!!(B$B5;=Q=qK]Lu $B$J$s$FOC$b$"$k$=$&$G!#(B
$B!U(B
$BBQ?L56Au!&Bh(B2$B%i%&%s%I!"BQ?L4p=`$O%@%V%k%9%?%s%@!<%I$J$N$+(B
($BF|7P(B BP, 4/26)
Q$B!!$9$k$H!"$I$&$J$k$N$+!#(B
A$B!!8B3&BQNO7W;;$K$O4m$&$$LL$,$"$k$N$@$,!"K!N'0cH?$G$O$J$$$?$a$K!"3NG'?3::$,7A<0E*$K9T$o$l$F$$$k8B$j!"7h$7$F8+$H$,$a$i$l$k$3$H$O$J$$!#7k2L$H$7$F!"9gK!E*$KBgCO?L$K
Q$B!!(BJSCA$B$O8B3&BQNO7W;;$KH?BP$7$F$$$k$N$+!#(B
A$B!!$$$d!"$=$&$G$O$J$$!#7W;;K!<+BN$KLdBj$,$"$k$o$1$G$O$J$/!"CO?LNO$NBg$-$5$H;HMQ$N;EJ}$KLdBj$,$"$k$H;XE&$7$F$$$k!#(B
$B!!IU$12C$($k$H!"F|K\7zC[3X2q$NBQ?L@_7W>.0Q0w2q$G$O8=:_!"!V7zC[J*$N=*6IBQ?L@-G=I>2Au$H2]Bj(!8B3&BQNO7W;;!&%(%M%k%.!
Q$B!!(BJSCA$B$O6qBNE*$K$I$&$7$m$H8@$C$F$$$k$N$+!#(B
A$B!!8B3&BQNO7W;;$d%(%M%k%.!
$B!!4XO"(B: $B!V9=B$7W;;=q56B$;v7o!W!!4XO">pJs(B (JSCA)
$B!!$7$+$7!"(BPSE $B$H$$$$$3$l$H$$$$!"Lr?M$N;kLn$N69$5$,L\N)$C$F$-$F$$$k5$$,!#(B
$B!U(B
$BFC=8!'!Z(BWinny$BBN83![(BWinny$B$GO3$i$7$F$7$^$$$^$7$?(B
($BF|7P(B BP, 4/28)
$B!U(B
$B%&%#%K!pJsN.=P$G7:L341$r8:5k=hJ,!!K!L3>J(B
($BKhF|(B, 4/28)$B!#8:5k(B 1/5$B!"(B6 $B$+7n!#(B
$B!U(B
IPAX2006 $B%W%l%<%s%F!<%7%g%sOH$,3NDj(B
($B?eL57n$P$1$i$N$($SF|5-(B, 4/26)
$B!U(B
$BF|K\$N>pJs<}=83hF0$O$I$3$,H4$1$F$$$k$N$+(B($BA0JT(B)
($BF|7P(B BP, 4/24)
$B!U(B
$B:rF|$N:#F|$J$N$G$9$,!"(B
http://www.mainichi-msn.co.jp/
$B$K$O1F$b7A$b$"$j$^$;$s$M!#(B
http://www.mainichi.co.jp/
$B$K$O$A$c$s$H(B top $B$K$"$k$N$G$9$,!#(B
$B!!(B$BKhF|3+H/%;%s%?!<(B
$B$N%[!<%`%Z!<%8$O(B
MY AREA NET
$B$H$$$&$3$H$K$J$C$F$$$k$1$I!"$3$3$b!"(B
$BKhF|%U%l%s%I(B
$B$K%"%/%;%9$7$J$$$H>pJs$,F@$i$l$J$$$7!D!D!#(B
$B!!$=$l$K$7$F$b!"8D?M>pJs$,N.=P$7$F$b(B 500 $B1_$9$iJ'$o$:OM$S$k$@$1$K$J$C$?$N$C$F!"$$$D$4$m$+$i$G$7$?$C$1!#$7$+$b(B Winny $B$d(B Share $B$N>l9g!"N.=P>pJs$N2s<}(B / $B:,@d$O:$Fq$J$o$1$G$9$,!"$=$&$$$C$?B&LL$O@5$7$/@bL@$5$l$F$$$k$s$G$9$+$M!#(B
$B!!!D!D(Bikegami $B$5$s$+$i(B ($B$"$j$,$H$&$4$6$$$^$9(B)
2005$BG/(B10$B7n$N!V%m%^%s%9%+!
http://www.d-cue.com/program/info/data.info/1292_2724476_.pdf
$B!!:G6a$G$b(B 500 $B1_G[$C$?Nc$,$"$C$?$s$G$9$M!#5U$K8@$&$H!"$3$l$/$i$$$7$+$J$$(B?
- $B$$$m$$$m(B (2006.04.26)
-
$B!!(BSYM06-008:
Symantec Scan Engine Multiple Vulnerabilities
$B$NF|K\8lHG(B advisory $B=P$^$7$?(B:
SYM06-008:
Symantec Scan Engine $B$KJ#?t$N@H
($B%7%^%s%F%C%/(B)$B!#(B
Symantec Scan Engine 5.0 $B$K4X$7$F$O!"F|K\$G$OHNGd$r$7$F$*$j$^$;$s!#(B
Symantec Scan Engine $B%"%C%W%0%l!<%I$O!"%W%i%A%J%`%5%]!<%H7@Ls$N$*5RMM$O(B Platinum Support Web Site $B$+$i!"$^$?%i%$%;%s%97@Ls$N$9$Y$F$N$*5RMM$O(B FileConnect $B$N%=%U%H%&%'%"$N%@%&%s%m!<%I!&%5%$%H$+$iF~
$B!U(B
$B!T(B ESPIO! $B!U@.N)L\A0!*$=$l$G$b#T#V$,6&KE:a$re$2$J$$M}M3(B
(4/27)
$B!U(B
$B#C#I#A5!$N0cK!Ht9T!"2$=#0hFb$G#1#0#0#02sD6(B
($BFIGd(B, 4/26)
$B!U(B
$B!V%M%C%H$NCfN)@-!WLdBj!'JF2<1!!"L1
(CNET, 4/27)
$B!U(B
$B!V(BF-Secure$B%$%s%?!<%M%C%H%;%-%e%j%F%#(B2006$B!WM%BT%Q%C%1!<%8$rH/Gd(B
($B%(%U!&%;%-%e%"(B, 4/27)$B!#%`!<%_%sM%BTHG!#(B5/1 $B$+$i!#(B
$B$^$:$O(B
$BBN83HG(B
$B$r;n$7$^$7$g$&!#(B
$B!U(B
913800 - FIX: Windows Media Digital Rights Manager protected files may not correctly play back
on Windows XP Media Center Edition 2005-based computers that have Update Rollup 2
installed
(Microsoft)$B!"(B
patch $B$,=P$F$^$9$M!#(B
$B!U(B
900485 - Error message in Windows XP Service Pack 2: "Stop 0x7E"
(Microsoft) $B$N(B patch $B$,<+F099?7$KN.$l$F$-$F$$$k$h$&$G$9$M!#(B
$B!U(B
916106 - Internet Security and Acceleration Server 2004 Service Pack 2 $B$N(B HTTP $BLdBj$KBP$9$k99?7(B
(Microsoft)$B!"(Bpatch $B$,=P$F$^$9$M!#(B
$B!U(B
$BKhF|?7J9$NFIpJsLs(B65,000$B?MJ,$,N.=P(B
(slashdot.jp, 4/27)$B!#$&$o!D!D!#(B
Re:$B#6K|#5#5#3#6?MJ,(B (slashdot.jp, 4/27)$B!#$&!<$`!#(B
$BKhF|?7J9!"Bg<:BV!DFIpJsN.=P(B (ZAKZAK, 4/27) $B$h$j(B:
$B!!M<4)%U%8$,F~
$B!!N.=P$5$;$??MJ*$ODL>N!V%7%c%l%?%^!W$H8F$P$l$k%&%#%K!<$N%&%$%k%9$H$h$/;w$?K=O*%&%$%k%9$K46@w$7!"%U%m%C%T!<%G%#%9%/Ls#3#5KgJ,$N%G!<%?$rN.=P$5$;$?!#(B
$B!!4XO"(B:
$B!U(B
The Empire Hacks Back Challenge: Test Your Windows Command-Line Kung Fu
(SANS ISC, 4/26)$B!#7/$N%+%s!&%U!<$G%_%l%K%"%`!&%U%!%k%3%s$r5_$((B!
($B$=!<$+!(^^;))
$B!U(B
$B!V@H
(Internet Watch, 4/26)$B!#(B
$BJs9p=q$O(B
$B>pJs%;%-%e%j%F%#$K4X$9$k?7$?$J6<0R$KBP$9$k0U<1D4::(B
(IPA ISEC) $B$r!#A4BN$H$7$F$?$$$X$s6=L#?<$$!#(B
$B!V(B10 $BBe!W$O!"$l(B 1000 $B?M$r1[$($F$$$k$N$KHf$Y$k$H!"!V(B10 $BBe!W$O?M?t$,>/$J$$5$$,!#(B10 $BBe$H$$$C$F$b!"(B15 $B:P$H(B 19 $B:P$H$G$O>u67$O$9$4$/0c$&$@$m$&$7$J$"!#!V(B10 $BBe!W$H$$$&@Z$jJ}$,E,@Z$J$N$+$I$&$+!#(B
($B3t(B)$B%^%/%m%_%k$N%j%5!<%A%b%K%?$rBP>]$K%/%m!<%:%I7?%&%'%V%"%s%1!<%H$ro;~%b%K%?2q0w$rJg=8!"$^$?!"Dj4|E*$K%b%K%?!<$N%/%j!<%K%s%0$r
$B!!$U$`$s!D!D!#(B
$B!!M}2rEY3NG'%F%9%H(B ($BJs9p=q(B$B$N(B p.22 $B0J9_$H!"(Bp.98 $B0J9_(B) $B$O$$$m$$$m$H%D%C%3%_$I$3$m$,$"$k$h$&$J5$$,$9$k$7!#(B
$B!U(B
$B@/I\!"%&%#%K!
(asahi.com, 4/26)$B!#F|K\@/I\@=$N(B
Virtual Machine-based Rootkit (VMBR)
$B$G$7$g$&$+(B?
$B!U(B
$B!V%M%C%H:>5=$O!X%o%s%/%j%C%/!Y$+$i!X%D!<%/%j%C%/!Y$X!W!$%;%-%e%"%V%l%$%s@1_7;a(B
($BF|7P(B IT Pro, 4/26)
$B!U(B
$B!V%\%C%H%M%C%H$r!H;t$C$F!I$_$^$7$?!W!$(BTelecom-ISAC Japan
($BF|7P(B IT Pro, 4/26)$B!#6=L#?<$$!#(B
$B!V(BOS$B$,%G%P%C%0!&%b!<%I$K$J$C$F$$$?$j!$(BVMware$B$,5/F0$7$F$$$?$j$9$k$H!$%\%C%H!&%W%m%0%i%`$O<+F0=*N;$7$?!W!J>.;3;a!K$H$$$&!#(BVMware$B$KH?1~$9$k$N$O!$%\%C%H$ND4::MQ$K@_$1$i$l$?f+$G$"$k!V%O%K!<%]%C%H!W$K$*$$$F(BVMware$B$,;H$o$l$F$$$k%1!<%9$,B?$$$?$a$G$"$k!#$D$^$j%\%C%H$O!$<+$i$KBP$9$kD4::$r!H5q$`!I5!G=$rHw$($F$$$k!#(B
$B!!5U$K8@$&$H!"IaCJ$b(B VMware $B>e$G@83h$7$F$$$l$P!"(Bbot $B$NJ}$G>!
$B!!4XO"(B: $B$"$J$?$N%Q%=%3%s$K?/F~$7$F$$$k$+$b$7$l$J$$!]%\%C%H$N6C$/$Y$- ($BF|7P(B IT Pro, 4/26)
$B!U(B
Re:$B$=$b$=$b(B (slashdot.jp, 4/27, $BEE5$%7%g%C%+!$B%9%l$+$i(B)$B!#$I$R$c!A!A!#%.%kBgHK?#$N$*$*$b$H$,!V$d$s$4$H$J$-J}!W$@$C$?@b(B ($BF?L>4uK>$5$s$+$i$N$40U8+$r;29M$K!"5-=R$r=$@5(B)$B!#(B
$B%V%k!<%.%k(B
($B>C$($f$/F|K\$NC8?e5{$?$A(B) $B$+$i(B:
$B!ZJ,I[![(B
$B#1#9#6#0G/$KF|JF=$9%#1#0#0<~G/$r5-G0$7$F!"K,JF$7$?Ev;~$N9DB@;R$K!";vA0$KCmJ8$7$F$$$?#4
$B$=$N$&$A$N#1
$B%V%k!<%.%k$,4^$^$l$F$$$?$N$O6vA3$G$O$J$/!"9DB@;R<+$i$,!VHs>o$KD`$j$d$9$$5{$J$N$G!"ET2qCO$G;R$I$bC#$,D`$j$r3Z$7$`$N$K9%E,$J
($BCfN,(B)
$B!J(B*1$B!K!!#1#9#6#0G/#1#07n#5F|!!D+F|?7J9D+4)!!$h$j0zMQ(B
$B!J(B*2$B!K!!C8?e5{Bh#39f!!!J#1#9#7#7!K!!!VFCJL4s9F!!!XC8?e5{$K$D$$$F!YEl5\8f=j$G;G$C$?$3$H!W!!LZB<1QB$!!$h$j0zMQ(B
$B!!%7%g%C%/$H$$$($P$d$C$Q$j(B$B$3$l(B$B$+$J$"!#$$$d!"@hF|!"(B$B$3$s$J(B CD $B$rGc$C$?$j$7$?$N$G!#(B
$B!U(B
$B$W$i$i$N(BWinny$B
($BF|7P(B IT Pro, 4/24)
$B!!%H%l%s%I%^%$%/%m$N(B VSAPI 8.000 $B0J>e(B + 2006.05.09 $B0J9_$N%Q%?!<%s$K$*$$$F!"(B
- Generic$B%Q%?!<%s(B
- Unpacker$B%Q%?!<%s(B
$B$H$$$&?7$7$$%Q%?!<%s$,DI2C$5$l$k$N$@$=$&$@!#Cf;3$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!!$3$N$&$A(B Generic $B%Q%?!<%s$K$D$$$F$O!"!V%H%l%s%I%^%$%/%m$N?d>)=hM}!W$K$*$1$k0l;~=hCV$,!VJ|CV(B(DoNothing)$B!W$H$J$k$N$GCm0U!#(B
$B!!(BGeneric $B%Q%?!<%s$N>l9g$O8m8!=P$b$"$jF@$k$N$G$3$&$J$C$F$$$k$N$@$=$&$@!#(B
Generic $B%Q%?!<%s$G$R$C$+$+$C$?$b$N$O!"8!BN$H$7$FDs=P$7$F$/$@$5$$!#$H!#(B
$B;n$7$K(B virustotal
$B$d(B
Jotti's malware scan
$B$K%"%C%W%m!<%I$7$F$_$k$N$b5H$G$7$g$&!#(B
- 2006 $BG/(B 4 $B7n$N%;%-%e%j%F%#>pJs(B
-
$B!!(BMS06-016 $B$rE,MQ$9$k$H(B unable to open address book. Address book may not be installed correctly
$B$H8@$o$l$?$j$9$kOC$,$"$k$=$&$G!"(BKB $B$,=P$^$7$?(B:
$B!!860x$N$[$H$s$I$O!"%"%I%l%9D"$,!"(Bpatch $BE,MQA0$N(B OE $B$G$O8!=P$7$J$$$h$&$J7A$G2u$l$F$$$k$?$a$@$=$&$@!#2r7hJ}K!$H$7$F$O!"(BMS06-016 patch (911567) $B$N%"%s%$%s%9%H!<%k$,<($5$l$F$$$k!#(B($B%"%I%l%9D"$O=$I|$G$-$J$$$H$$$&$3$H(B?)
$B!!(BDDoS $B$N$B$G!"(BIIJ $B$Nc7F#$5$s$,!"$B$3$N$"$?$j(B$B$K%U%)%m!<$5$l$F$$$k$h$&$G$9!#(B
$B!!(B$BF0E*$J%;%-%e%j%F%#J]8n(B: IE7 $B$N%;%-%e%j%F%#6/2=$N8!>Z(B$B$G$9$+!#$d$C$Q$j(B
IE 7 $BF~$l$F$_$k$+$J$"!#(B
$B!!(BMVP $BJ}LL$G$O!"(B$B$O$J$:$-$s$5$s(B$B$,>R2p$5$l$F$$$k!#(B
$B!!(BJuniper Networks $B$N(B SSL-VPN $B%/%i%$%"%s%H$K7g4Y!#(B
JuniperSetup.ocx ActiveX $B%3%s%H%m!<%k$+$iFI$_9~$^$l$k(B
JuniperSetupDLL.dll $B$K(B buffer overflow $B$9$k7g4Y$,$"$k$?$a!"96N,(B web $B%Z!<%8$+$iG$0U$N%3!<%I$rpJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!!(BJuniper $B$+$i$b(B Advisory $B$,=P$F$$$k(B:
$B!!=$@5HG$,$"$k$N$G%"%C%W%0%l!<%I$9$l$P$h$$LOMM!#(B
Recommended Actions:
Upgrade the IVE software to any of the following fixed versions:
* 5.3r2.1
* 5.2r4.1
* 5.1r8
* 5.0r6.1
* 4.2r8.1
2006.04.29 $BDI5-(B:
$B!!(Bsnort signature $B=P$F$^$9(B:
and little flaws in IVE
(SANS ISC)
$B!!B?J,$3$NOC(B:
2006.04.30 $BDI5-(B:
$B!!(B[Full-disclosure] MSIE Nested Object Vulnerability Is Exploitable$B!#(BSecunia $B$NCf$N?M$K$h$k(B post$B!#(BSecunia $B$NFbIt$G$O96N,%3!<%I$N:n@.$K@.8y$7$F$*$j!"(BMicrosoft $B$K$b(B 2006.04.26 $B$KAwIU:Q$@$=$&$@!#(B
The advisory rating of "Highly critical" and "System access" impact is
therefore fully justified.
$B!!$H$$$&$o$1$G!"(BMSIE (mshtml.dll) OBJECT tag vulnerability
$B$NOC(B ([SA19762] Internet Explorer "object" Tag Memory Corruption Code Execution, CVE: CVE-2006-1992
)
$B$O$9$3$V$k4m81$JLOMM!#(B
2006.05.03 $BDI5-(B:
$B!!(BFirefox 1.5.0.3 $B$,EP>l$7$^$7$?!#(B
Firefox Remote Code Execution and DoS 1.5.0.2
(CVE: CVE-2006-1993)
$B$,=$@5$5$l$F$$$^$9!#(B
$B!!(BFirefox $BMxMQ
2006.06.09 $BDI5-(B:
$B!!(BCVE-2006-2218
$B$b!"$@$=$&$G$9!#(B
2006.04.28 $BDI5-(B:
$B!!(BSYM06-008:
Symantec Scan Engine Multiple Vulnerabilities
$B$NF|K\8lHG(B advisory $B=P$^$7$?(B:
SYM06-008:
Symantec Scan Engine $B$KJ#?t$N@H
($B%7%^%s%F%C%/(B)$B!#(B
Symantec Scan Engine 5.0 $B$K4X$7$F$O!"F|K\$G$OHNGd$r$7$F$*$j$^$;$s!#(B
Symantec Scan Engine $B%"%C%W%0%l!<%I$O!"%W%i%A%J%`%5%]!<%H7@Ls$N$*5RMM$O(B Platinum Support Web Site $B$+$i!"$^$?%i%$%;%s%97@Ls$N$9$Y$F$N$*5RMM$O(B FileConnect $B$N%=%U%H%&%'%"$N%@%&%s%m!<%I!&%5%$%H$+$iF~
$B!!J#?t$N(B DNS $B
$B!!0J2
DeleGate -
9.0.5 / 8.11.5 $B0JA0$K7g4Y$,$"$j!"(BDoS $B967b$rl9g$K$O!"G$0U$N%3!<%I$N
ISC - BIND $B$K7g4Y$,$"$j!"(BDoS $B967b$rTSIG $B$r;H$C$?%>!<%sE>Aw$K$*$$$F!"(B
- $B:G=i$N%a%C%;!<%8$G$O@5$7$$(B TSIG
- 2 $BHVL\0J9_$N%a%C%;!<%8$G$O2u$l$?(B TSIG
$B$,6!5k$5$l$k$H!"(Bnamed $B$,0[>o=*N;$7$F$7$^$&!#(BBIND $B$N>-Mh$N%P!<%8%g%s$G=$@5$5$l$kM=Dj!#(B
Juniper Networks - JUNOSe $B$K7g4Y$,$"$j!"(B
5-3-5p0-2, 6-0-3p0-6, 6-0-4, 6-1-3p0-1, 7-0-1p0-7, 7-0-2, 7-1-0p0-1, 7-1-1 $B$G=$@5$5$l$F$$$k!#(BJUNOS, ScreenOS $B$K$O7g4Y$O$J$$!#(B
$B8E2OEE5$9)6H(B - DNS$B$K4X$9$k@H
pdnsd
- 1.2.4 $B$G=$@5$5$l$F$$$k!#(B
MyDNS -
1.1.0 $B$G=$@5$5$l$F$$$k!#(BFixed a critical denial-of-service vulnerability
$B$@$=$&$@(B (from ChangeLog)
2006.05.03 $BDI5-(B:
$B!!(BDNS$B$K4X$9$k@H
($BIY;NDL(B)$B!#(BNetShelter/FW $B%7%j!<%:$K7g4Y$,$"$k$=$&$G$9!#(B
- 2006 $BG/(B 4 $B7n$N%;%-%e%j%F%#>pJs(B
-
$B!!(BMS06-015 $B$N?7(B patch $B=P$F$^$9!#(B
$B!!(Bpatch $BK\BN$K$OJQ2=$O$J$/!"(BHP $B@=IJ$d(B nVidia $B@=IJ$G$NIT6q9g$r2sHr$9$k$?$a$K!V(Bexception list$B!W$N%l%8%9%H%j$r<+F0E*$K@_Dj$9$k$h$&$K$J$C$?$@$1!#(BKB918165 $B$K$O(B nVidia $B$K4X$9$k%l%8%9%H%j@_Dj$b5-:\$5$l$F$$$k!#(B
$B!U(B
$B%5%$%\%&%:!"%i%$%V%I%"$+$i%M%C%H%"%s%I%;%-%e%j%F%#Am8&$rGc<}(B
(ITmedia, 4/24)$B!#$*$)!A(B?!
$B!U(B
Password checker (Microsoft)
$B$NF|K\8lHG$@$H$$$&(B
$B%Q%9%o!<%I%A%'%C%+!<(B (Microsoft) $B$G$9$,!"!V(BBEST$B!W$KBP1~$9$kF|K\8l$,I=<($5$l$J$$%P%0$,$"$k$h$&$J5$$,!#1Q8lHG$G$O(B 4 $B$D$"$k%^%9$,!"F|K\8lHG$G$O(B 3 $B$D$7$+I=<($5$l$J$$$>(B?!
id="idSMT4"
$B$KBP1~$9$k%b%N$,$J$$$h$&$G$9$M!#(B
$B!!%i%s%@%`%Q%9%o!<%I@8@.%W%m%0%i%`$G$F$-$H$&$K$D$/$C$?%Q%9%o!<%I$rF~$l$F$_$?$i!"$3$&$J$C$?!#(B
- 7 $BJ8;z0J2<(B - WEAK
- 8 $B!A(B 13 $BJ8;z(B - STRONG
- 14 $BJ8;z0J>e(B - BEST
$B!!$($C(B 14? 15 $B$8$c$J$/$F(B?
$B!!$"$H!"<+J,$,;H$C$F$$$k%[%s%b%N$N%Q%9%o!<%I$G;n$7$F$_$?$$J}$O!"G0$N$?$a(B https $B$J%Z!<%8$G;n$7$?J}$,$$$$$G$7$g$&!#(B
$B$3$l<+BN$O!V>pJs$r<}=8!"J]B8$9$k$3$H$O(B $B$"$j$^$;$s!W$@$=$&$G$9$,(B ($B%d%^%,%?$5$s>pJs$"$j$,$H$&$4$6$$$^$9(B)$B!"$d$C$Q$jG0$N$?$a!#(B
$B$J$*!"%Q%9%o!<%I8!::%3!<%I$N
$B!!(BMicrosoft helps you choose $B!H(Bgood passwords$B!I(B. (SANS ISC) $B$b;2>H(B?
$B!!4XO"(B: The Great Debates: Pass Phrases vs. Passwords. Part 2 of 3
(Microsoft)
As an additional argument for longer passwords, it is often cited that passwords longer than 14 characters do not generate LM hashes.
$B!!F|K\8lHG(B: $B%Q%9%U%l!<%:(B vs. $B%Q%9%o!<%I(B Part 2
(Microsoft)
$B$h$jD9$$%Q%9%o!<%I$K$D$$$F$NDI2C$NO@E@$H$7$F!"(B14 $BJ8;z0J>e$N%Q%9%o!<%I$O(B LM $B%O%C%7%eCM$r@8@.$7$J$$$3$H$,IQHK$K0z$-9g$$$K=P$5$l$^$9!#(B
$B!!(BMicrosoft $B$O!"(B14 $BJ8;z0J>e$J$N$+(B 15 $BJ8;z0J>e$J$N$+!"$O$C$-$j$7$F$/$@$5$$!#(B
$B!U(B
from IPA ISEC
- JVN#74294680:
Winny $B$K$*$1$k%P%C%U%!%*!<%P!<%U%m!<$N@H
-
$B!!(BeEye Advisory $BF|K\8lHG=P$^$7$?(B ($B9b66$5$s>pJs$"$j$,$H$&$4$6$$$^$9(B):
$B!!(Bexploit $B$,=P$F$$$k$h$&$G$9!#$^$?!"(BWinnyp v2.0b7.27 $B$G$O=$@5$5$l$F$$$k$h$&$G$9!#(B
$B!!!D!D1-;t$5$s<+?H$K$h$k7hDjHGE*5-;v$,=P$F$$$^$9(B:
$B!!$?$H$($P$3$N$"$?$j(B:
$B!!(BWinny$B$N%j%5!<%A$r3+;O$7$F(B2$BF|8e$K$3$N@Ho$K4JC1$KH/8+$G$-$k$b$N$G$"$j!"$$$DLdBj$,I=LL2=$7$F$b$*$+$7$/$J$$>u67$G$"$k$H;W$$$^$7$?!#(B
$B!!$7$+$b!"6b5o$,(B1$BF|$G(BWinny$B%N!<%I$N<}=8MQ%W%m%0%i%`$r$[$\40@.$5$;!"?t;~4V$G$[$\$9$Y$F$N%N!<%I>pJs$ro$KC;4|4V$G
$B!!3+H/p$G=$@5HG$rG[I[$G$-$J$$2DG=@-$,$"$k$K$b$+$+$o$i$:!"8=:_$b?t==K|$N@Hu67$O!"$^$5$K4m5!E*$G$"$k$H46$8$^$7$?!#(B
$B!!$D$^$j!"$=$N5$$K$5$($J$l$P!"$?$H$($P?t==K|Bf5,LO$N(B botnet $B$r$+$s$?$s$K$D$/$l$k!"$H!#(B
eEye$B$G$O!"Fb5,$K$h$jpJsDs6!$rB3$1$?$$$H;W$$$^$9!#(B
$B!!$=$&$$$&$3$H$G$7$?$+!D!D!#(BIPA $B$K:F8=G=NO$,$J$$$H$$$&0UL#$G$OF1$8$J$s$@$m$&$1$I!#(B
$B!!K\@HpJsN.=P;v7o$,H/@8$9$k2DG=@-$,$"$k$H9M$(!"K\@H
$B!!$7$+$7!"%Q%C%A$N0lHLDs6!$O!"
$B!!$J$K$7$m!"%=%U%H%&%'%"3+H/
- $B%a!<%k!&%=%U%H!V(BThunderbird$B!W$N?7HG$,%j%j!<%9!$%;%-%e%j%F%#!&%[!<%k$r=$@5(B
-
$B!!(BThunderbird 1.0.8 $B1Q8lHG$,=P$^$7$?!#F|K\8lHG$O$^$@$G$9!#(B
- Known Vulnerabilities in Mozilla Products: Fixed in Firefox 1.5.0.2
-
$B!!(BFirefox 1.0.8$B!"(BThunderbird 1.5.0.2 / 1.0.8$B!"(BMozilla 1.7.13 $B=P$F$^$9!#(B
$B!!(BFirefox 1.0.8 $B$H(B Thunderbird 1.5.0.2 $B$OF|K\8lHG$b=P$F$^$9!#(B
Thunderbird 1.0.8 $B$O$^$@$G$9$,!"F|K\8lHG$bEP>l$9$kM=Dj$N$h$&$G$9!#(B
Mozilla 1.7.13 $B$K$D$$$F$b(B$BF|K\8lHG$N:n6H$,?J$a$i$l$F$$$k$=$&$G$9(B
($B%"%$%t%!!<%s$5$s>pJs$"$j$,$H$&$4$6$$$^$9(B)
$B!!(BThunderbird $B$K$D$$$F$O(B $B$3$A$i$N5-;v$b;2>H(B$B!#(B
- JVN#74294680:
Winny $B$K$*$1$k%P%C%U%!%*!<%P!<%U%m!<$N@H
-
$B!!(BeEye $B$+$i(B Advisory $B=P$^$7$?(B:
$B!!$I$l$I$l!D!D(B
We can pass a long string argument with some commands into a heap buffer. There is no checking of the length of this input. Depending on the input, this strcpy() will cause one of the following exploitable conditions:
(1) 0052290A mov dword ptr [edx],eax ; We can control both of EDX and EAX
(2) 00406011 call dword ptr [ebx+0ch] ; We can control EBX
In both cases, we confirmed the ability to execute our own code. This is a common heap overflow vulnerability and can be exploited easily.
$B!!$J!"$J$s$@$C$F!can be exploited easily $B$@$=$&$G$9$h1|$5$s(B!
$B0lHLO@$I$3$m$NOC$8$c$J$$!#(B
4/11/2006: IPA responds to our notice. The author of Winny insists that code execution is impossible. We choose to continue to work with the IPA and send additional detailed information about this heap overflow and how heap overflows are exploited.
$B!!(BIPA $B$d(B JVN $B$O>\:Y$rCN$C$F$$$k$K$b$+$+$o$i$:8mJs$rN.$7$F$k$C$F$3$H$J$N$+(B?
IPA $B$K$O!"(B$B@HpJsN.DLBN@)(B$B$K$*$$$F
$B!U(B
$B%"%C%W%k(Bvs$B%V%m%,!<:[H=!"?3M}3+;O$X(B--$B%M%C%H%8%c!<%J%j%9%H$N8"Mx$O$I$&$J$k!)(B
(CNET, 4/21)
$B!U(B
$B%&%'%V%"%W%j%1!<%7%g%s3+H/
(IPA)$B!#3+:E$O4{$K=*N;$7$F$$$^$9$,!"9V1i;qNA$,8x3+$5$l$F$$$^$9!#(B
$B!U(B
$B3$<+$N%$%s%IMNGI8/!"H>G/1dD9$r3U5D7hDj(B
($BFIGd(B, 4/21)$B!#(B
$B$@$i$@$i$H1dD9Cf!#(B
$B!U(B
$B6&KE:aAO@_$NK!0F?35DF~$j!"@/I\!&M?E^@.N)L\;X$9(B
($BFIGd(B, 4/21)$B!#$=$7$F$D$$$K!"$=$NF|$,$d$C$F$^$$$j$^$9(B ($B@<(B: $B>>J?%"%J(B)
$B!D!D$H$$$&$3$H$K$J$k$N$+!#(B
$B!U(B
PSE $BK!J}LL(B
$B!U(B
Army Report on ESP in Animals
(The Memory Hole)$B!#(BESP $B$G$9$+!D!D!#(B
$B!U(B
$B!V(BWinny$BLdBj!W$K$D$$$F0U8+8r49$7$^$;$s$+(B
($BF|7P(B IT Pro, 4/19)$B!#(B
$BF?L>(BP2P$B%M%C%H%o!<%/$K$*$1$k>pJsO31LBP:v$r9M$($k2q5D(B$B$NOC!#(B
$B!U(B
$B%$%i%s$O3K967b$5$l$k!)(B ($BEDCf1'$N9q:]%K%e!<%92r@b(B, 4/18)$B!#3K%P%s%+!<%P%9%?!<$G$9$+!D!D!#(B
$B!U(B
$B!V(BYahoo!$B$OCf9q$G$NH?BN@)3hF02HCF05$K4XM?!W!$8@O@$N<+M3$NMJ8nCDBN$,JsF;(B
($BF|7P(B IT Pro, 4/20)$B!#(B$B9q6-$J$-5-$B$M$?!#(B
$B!U(B
$B!V=PD%$7$F(BWinny$B8!=P$7$^$9!W!";00fJ*;:%;%-%e%"%G%#%l%/%7%g%s$,%5!<%S%9Ds6!(B
($BF|7P(B IT Pro, 4/20)
$B!U(B
OCN$B%5!<%S%9$K$*$1$kLBOG%a!<%kBP:v(B
$B$*$h$S%;%-%e%j%F%#BP:v$N6/2=$K$D$$$F(B
(NTT Com, 4/5)
ISP$B$N%a!<%k%5!<%P$r7PM3$7$J$$Ey$N$$$o$f$kF0E*(BIP$B%"%I%l%9(B^*1$B!W$+$i(BOCN$B2q0w!J(Bocn.ne.jp$B%I%a%$%sMxMQ
$B!!$^$?!"IT@5$JDL?.$rZ$9$k(BuRPF$B!J(Bunicast Reverse Path Forwarding$B!K(B^*4$B$K$D$$$FA4(BOCN$B%5!<%S%9$rBP>]$KJ?@.(B18$BG/(B4$B7n(B5$BF|$h$j=g
$B!U(B
$B6u<+$N6[5^H/?J!"#0#5G/EY$O#63dA}!!BPCf9q5!$O#8G\$K(B
(asahi.com, 4/20)
$B!!(BWinny 2.0 b7.1 $B0JA0$K7g4Y!#96N,%Q%1%C%H$K$h$C$F(B buffer overflow $B$,H/@8$9$k$?$a!"(Bremote $B$+$i(B Winny $B$r0[>o=*N;$5$;$k$3$H$,2DG=!#Js9p
$B#W#i#n#n#y$N@):n
$B;d<+?H$O!"=tHL$NET9g$K$h$j!"#W#i#n#n#y$N%"%C%W%G!<%H$*$h$S(B
$B@HZ$,:$Fq$J>u67$K$"$j$^$9!#(B
$B!!$H$$$&$o$1$G(B patch $B$O:#$N$H$3$mB8:_$7$J$$!#(B
$B8x8"NO$K$h$C$F%;%-%e%j%F%#@H
$B!!$H$3$m$G!"(BJVN $BE*$K$O$"$/$^$G!V0[>o=*N;!W$K;_$^$C$F$$$k$N$G$9$,!"(BIPA ISEC $B$O!"(B
$B!V(BWinny$B!J%&%#%K!e$NLdBj2U=j!J@H$B!W$K$*$$$F(B
$B0lHLE*$K!"%P%C%U%!%*!<%P!<%U%m!<$N@Ho$JF0:nDd;_$d!"%&%$%k%9$N46@w9TF0!"%9%Q%$%&%'%"$d%\%C%H$H$$$C$?IT@5%W%m%0%i%`$N%$%s%9%H!<%k$J$I$,9T$o$l$k2DG=@-$,$"$j$^$9!#(B
$B$HHt$P$7$^$/$j$G$9!#$*$^$1$K!"(B
$B3+H/
$B!!0lJ}$G3+H/$rCf;_$5$;$F$*$-$J$,$i!"$b$&0lJ}$G!V3+H/
2006.04.23 $BDI5-(B:
$B!!(BeEye $B$+$i(B Advisory $B=P$^$7$?(B:
$B!!$I$l$I$l!D!D(B
We can pass a long string argument with some commands into a heap buffer. There is no checking of the length of this input. Depending on the input, this strcpy() will cause one of the following exploitable conditions:
(1) 0052290A mov dword ptr [edx],eax ; We can control both of EDX and EAX
(2) 00406011 call dword ptr [ebx+0ch] ; We can control EBX
In both cases, we confirmed the ability to execute our own code. This is a common heap overflow vulnerability and can be exploited easily.
$B!!$J!"$J$s$@$C$F!can be exploited easily $B$@$=$&$G$9$h1|$5$s(B!
$B0lHLO@$I$3$m$NOC$8$c$J$$!#(B
4/11/2006: IPA responds to our notice. The author of Winny insists that code execution is impossible. We choose to continue to work with the IPA and send additional detailed information about this heap overflow and how heap overflows are exploited.
$B!!(BIPA $B$d(B JVN $B$OCN$C$F$$$k$K$b$+$+$o$i$:8mJs$rN.$7$F$k$C$F$3$H$J$N$+(B?
IPA $B$K$O!"(B$B@HpJsN.DLBN@)(B$B$K$*$$$F
2006.04.24 $BDI5-(B:
$B!!(BeEye Advisory $BF|K\8lHG=P$^$7$?(B ($B9b66$5$s>pJs$"$j$,$H$&$4$6$$$^$9(B):
$B!!(Bexploit $B$,=P$F$$$k$h$&$G$9!#$^$?!"(BWinnyp v2.0b7.27 $B$G$O=$@5$5$l$F$$$k$h$&$G$9!#(B
$B!!1-;t$5$s<+?H$K$h$k7hDjHGE*5-;v$,=P$F$$$^$9(B:
$B!!$?$H$($P$3$N$"$?$j(B:
$B!!(BWinny$B$N%j%5!<%A$r3+;O$7$F(B2$BF|8e$K$3$N@Ho$K4JC1$KH/8+$G$-$k$b$N$G$"$j!"$$$DLdBj$,I=LL2=$7$F$b$*$+$7$/$J$$>u67$G$"$k$H;W$$$^$7$?!#(B
$B!!$7$+$b!"6b5o$,(B1$BF|$G(BWinny$B%N!<%I$N<}=8MQ%W%m%0%i%`$r$[$\40@.$5$;!"?t;~4V$G$[$\$9$Y$F$N%N!<%I>pJs$ro$KC;4|4V$G
$B!!3+H/p$G=$@5HG$rG[I[$G$-$J$$2DG=@-$,$"$k$K$b$+$+$o$i$:!"8=:_$b?t==K|$N@Hu67$O!"$^$5$K4m5!E*$G$"$k$H46$8$^$7$?!#(B
$B!!$D$^$j!"$=$N5$$K$5$($J$l$P!"$?$H$($P?t==K|Bf5,LO$N(B botnet $B$r$+$s$?$s$K$D$/$l$k!"$H!#(B
eEye$B$G$O!"Fb5,$K$h$jpJsDs6!$rB3$1$?$$$H;W$$$^$9!#(B
$B!!$=$&$$$&$3$H$G$7$?$+!D!D!#(BIPA $B$K:F8=G=NO$,$J$$$H$$$&0UL#$G$OF1$8$J$s$@$m$&$1$I!#(B
$B!!K\@HpJsN.=P;v7o$,H/@8$9$k2DG=@-$,$"$k$H9M$(!"K\@H
$B!!$7$+$7!"%Q%C%A$N0lHLDs6!$O!"
$B!!$J$K$7$m!"%=%U%H%&%'%"3+H/
- Oracle Critical Patch Update - April 2006
$B!!F|K\8lHG=P$^$7$?!#(Bhttp://otn.oracle.co.jp/security/ $B$r;2>H!#(B
- $B$$$m$$$m(B (2006.02.25)
$B!!(BSquirrelMail $BOC4XO"(B: JVN#83263796:
SquirrelMail $B$K$*$1$k%/%m%9%5%$%H%9%/%j%W%F%#%s%0$N@H
(JVN)
- 2006 $BG/(B 4 $B7n$N%;%-%e%j%F%#>pJs(B
-
$B!!(BMS06-015 $B$N7o!"(BMSRC blog $B$KB3Js$,=P$F$$$^$9(B:
More information on the MS06-015 issue
(MSRC blog, 2006.04.21)
Up until now there have been several solutions: Upgrade to the newest version of the affected software, a manual registry key fix, uninstall the third party software (NVIDIA Drivers versions 61.94 and prior or the Hewlett Packard Share-to-web software) or uninstall the update.
$BIT6q9g$N=P$k(B nVidia $B%I%i%$%P!<$O(B 61.94 $B0JA0$@$=$&$G$9!#(B
So what we have done is re-engineered the MS06-015 update to avoid the conflict altogether with the older Hewlett Packard and NVIDIA software. We're going to run a test pass on it and we will release this new update on Tuesday, April 25th. What the new update essentially does is simply add the affected third party software to an "exception list" so that the problem does not occur. The revised update automates the manual registry key fix.
4/25 $B$K(B patch $B$N?7HG$,=P$k$=$&$G$9!#LdBj$NH/@8$9$k(B 3rd party $B%=%U%H$K$D$$$F$O!V(Bexception list$B!W$KEPO?$9$k!"$G$9$+!#(B
exception list $B$H$$$&8@MU$O(B
KB918165
$B$K$O$J$$$N$G$9$,!D!D!#(B
$B!D!D(B MS06-015 $B$,2~D{$5$l$F$^$7$?!#(B
$B99?7$5$l$?%;%-%e%j%F%#99?7%W%m%0%i%`$K$O:G=i$N%;%-%e%j%F%#99?7%W%m%0%i%`$K4^$^$l$F$$$?%P%$%J%j$KBP$9$kJQ99$O$"$j$^$;$s!#99?7$5$l$?%;%-%e%j%F%#99?7%W%m%0%i%`$O%^%$%/%m%=%U%H(B $B%5%]!<%H5;=Q>pJs(B 918165 $BF1MM$K!"0J2<$N0lMw$N%(%s%H%j$rDI2C$7$^$9!#(B
HP Share-to-Web
{A4DF5659-0801-4A60-96071C48695EFDA9}
NVIDIA $B%0%i%U%#%C%/(B $B%I%i%$%P(B
{1E9B04FB-F9E5-4718-997B-B8DA88302A47}
{1E9B04FB-F9E5-4718-997B-B8DA88302A48}
{1CDB2949-8F65-4355-8456-263E7C208A5D}
KB918165
$B$N%l%8%9%H%j@_Dj$,!V(Bexception list$B!W$@$H$$$&$3$H$+!#(B
$B!U(B
$B$k$k$V$M$?(B
$B!!(BInternet Watch
$B$N5-;v$K%j%s%/$,=P$F$?$+$i$o$+$C$?$1$I!"(B
$B$k$k$V(B.com $B$N(B top $B%Z!<%8(B$B$K$O$J$K$b$J$$$s$G$9$M!#(B$B$k$k$V(B.com$B$+$i$N$*$7$i$;(B$B$K$b$J$$$7$J$"!#(B
$B!U(B
$B%=%K!
(PC Watch, 4/20)$B!"(B
$B%=%K!<@=%a%b%j!<%9%F%#%C%/$NLOJoIJ$,;T>l$K=P2s$k(B
(slashdot.jp, 4/21)
$B!U(B
$B%^%+%U%#!
(Enterprise Watch, 4/20)$B!#(BMcAfee Host Intrusion Prevention 6.0 $B$NOC!#(B
$B$7$+$7!"(BWAP $B$h$j$O0B$$!"$H8@$o$l$F$b$J$"!#(B
$B!U(B
BitTorrent$B$d%&%#%8%'%C%H$r
(Internet Watch, 4/20)
$B!U(B
$B<~GH?t2r@OK!$GEPO?5qH]N((B0$B!s!"(BDDS$B$,(BUSB$B%a%b%j7?;XLfG'>Z%f%K%C%H(B
(Internet Watch, 4/20)
$B!U(B
$B;_$a$k$>!*>pJsO3$($$%;%_%J!<(B
(ascii-business.co)$B!#(B2006.05.02$B!"El5~ET@iBeED6h!"(B5,250$B1_!#(B
$B!U(B
$B!V2>A[%^%7%s!&%Y!<%9$N%k!<%H%-%C%H!W$K4X$9$k%l%]!<%H$,8x3+(B
($BF|7P(B IT Pro, 4/17)
$B!U(B
AccessChk
(sysinternals)
1.0 $B$@$=$&$G$9!#(B
(info from $BMU$C$QF|5-(B)
$B!U(B
$B%7%^%s%F%C%/!"@H
(Enterprise Watch, 4/19)$B!#(B
Symantec Enterprise Security Manager 6.5 $B$@$=$&$G$9!#(B
$B!U(B
$B86H/BQ?L8!F$!'0Q0w$N2aH>?t$,6H3&CDBN0Q0w!!0BA40QJ,2J2q(B
($BKhF|(B, 4/20)
$B!U(B
$B%$!<%[!<%`%:J}LL(B
$B!!$I$&$7$F$b%$!<%[!<%`%:$r0-
$B!U(B
$BC]EgJ}LL(B
$B!U(B
$B!V%W!<%kG.!WBgN.9T$NC{$7!!9qN)46@w>I8&5f=jD4$Y(B
(asahi.com, 4/20)
$B!U(B
IE 7 $B$M$?(B
$B!!$=$m$=$m$$$8$C$F$_$k$Y$-$J$N$+$J$"!#(B
$B!U(B
$B7Y;!$N;dJ*%Q%=%3%s#1#6#6Bf$K%&%#%K!pJs$bJ]B8(B
(asahi.com, 4/20)
$B!U(B
$B!V(BHP Compaq nx4800 Notebook PC$B!WIUB0(B
$B%P%C%F%j%Q%C%/IT6q9g$K$h$k2s<}$HL5=~8r49$K$D$$$F(B
- $BF|K\$GL$H/Gd$N5! (HP, 4/20)
$B!U(B
NTT$B%I%3%b!"(BFOMA$B!V(BP702i$B!W$r0l;~HNGdDd;_(B--$B%=%U%HIT6q9g$GEE8;$,F~$i$J$/$J$k62$l(B
(CNET, 4/19)
- $B%a!<%k!&%=%U%H!V(BThunderbird$B!W$N?7HG$,%j%j!<%9!$%;%-%e%j%F%#!&%[!<%k$r=$@5(B
$B!!(B1.5.0.2 $BEP>l$7$F$$$^$9(B: ftp.osuosl.org$B!#(B
1.5 $BF|K\8lHG$G!V%=%U%H%&%'%"$N99?7!W$r;n$7$F$_$?$i!"!V@\B3$,%?%$%`%"%&%H$7$^$7$?!W$H8@$o$l$F$7$^$C$?!#(B
- $B$$$m$$$m(B (2006.04.19)
-
$B!!(BFreeBSD $B$N(B AMD $BOC(B (FreeBSD-SA-06:14.fpu) $B$N$D$E$-!#(B
$B!U(B
[AML 6711] $B6&KE:a$$$h$$$h?35DF~$j(B
$B!U(B
[tomoyo-users 60] TOMOYO Linux 1.1 $B8x3+$7$^$7$?(B$B$=$&$G$9!#(B$B%@%&%s%m!<%I(B$B!#(B
$B4XO"(B:
$B!U(B
$B%&%#%K!
($BKhF|(B, 4/18)
$BBP:v%=%U%H$O!"%Q%=%3%s$+$i>pJs$,N.=P$9$k2DG=@-$r;vA0$K;!CN$7!"LdBj%=%U%H$rDd;_$5$;$k;EAH$_!#%&%#%s%I%&%:$d%j%J%C%/%9$J$I4pK\%=%U%H!J#O#S!K$K4X78$J$/;H$($k$h$&$K$9$k!#(B
$B!!$3$l$@$1$G$O$h$/$o$+$i$s$J$"!#!D!D?y86$5$s$K!"(B4/17 $B$NF|7PM<4)$K$b$&$A$g$C$H>\$7$$5-;v$,=P$F$$$?$H65$($F$$$?$@$-$^$7$?(B ($B$"$j$,$H$&$4$6$$$^$9(B)$B!#(B
$B!D!D$&$o!"(B1 $BLL%H%C%W$G$9$M!#(B
$BFI$s$G$_$^$7$?$,!D!D$d$C$Q$j$h$/$o$+$i$J$$$G$9$M!#(B
$B!U(B
[memo:9008] [ANN] SELinux$BJY6/2q(B:Russell$B!#(B
SELinux $B$N%-!<%^%s$N0l?M(B
Russell Coker $B;a(B$B$K$h$k9V1i$H5DO@!#(B
2006.04.27$B!"El5~ET9A6h!"L5NA!#%(%$%4%G%-%J%/%F%b(B ok $B%G%9%+(B?
$B!!$3$s$JOC$b$"$k$h$&$G$9(B: [selinux-users:01528] Russell Coker$B;a$K(BTOMOYO Linux$B$r>R2p$9$k2q!)(B
$B!U(B
IPAX 2006$B!#(B
$B$3$l$b(B 2006.05.17$B!A(B19 $B$@$h!#$D$/$E$/$3$N=5$J$N$M!#(B5/19 $B$O!"(B
$BFCJL9V1i(B$B$KH*B<@h@8$N!V<:GT3X$N$9$9$a!W$,$"$C$?$j!"(BIPA $B$NCf$N?M$K$h$kO"B3%;%-%e%j%F%#OC$,$"$C$?$j$9$k$_$?$$!#(B
$B=PE8$B$G$b!"(B
$B%7%c!<%W$N!V%G%8%?%kJ#9g5!$N%;%-%e%j%F%#I>2A!J2>Bj!K!W$H$$$&$N$,$J$s$H$J$/$*$b$7$m$=$&!#(B
$B!!4XO"(B: IPAX2006 $B^ ($B?eL57n$P$1$i$N$($SF|5-(B, 4/18)$B!#(B
$B!U(B
$B@$EDC+$N%O%HBgNL;`!";`0x$OG@Lt!!:.$<$?1BM?$($k!)(B
($B;:7P(B, 4/19)
$B!U(B
$B%+%J%@$G#5NcL\$N#B#S#E46@w5m$r3NG'(B
(CNN, 4/17)
$B!U(B
$B@D>/G/$N7rA4$J0i@.$N$?$a$N%3%s%F%s%DN.DL8&5f2qJs9p=q$K$D$$$F(B
($B7P;:>J(B, 4/18)
$B!U(B
$B%4!<%k%G%s%&%#!<%/$K$*$1$k%F%mBP:v$NE0Dl$K$D$$$F(B
($B9qEZ8rDL>J(B, 4/17)
$B!U(B
$B$f$j$+$b$aJ!"#9
($BKhF|(B, 4/18)$B!"(B
$B0FFb50>r<0E4F;$N1?9T$K78$k0BA43NJ]$K$D$$$F(B
($B9qEZ8rDL>J(B, 4/17)
$B!U(B
$B9bB.A%;v8NJ}LL(B
$B!U(B
$BJD$89~$a;v8NKI;_!'%(%l%Y!<%?!<$K#PGHDd;_AuCV$r5AL32=$X(B
($BKhF|(B, 4/18)$B!"(B
$B%(%l%Y!<%?!<$NCO?LKI:RBP:v$N?d?J$K$D$$$F(B
$B!!!J
($B9qEZ8rDL>J(B, 4/18)
$B!U(B
$BC]EgJ}LL(B
$B!U(B
$B%5%$%P!<967bKI8f$G6(NO!"F|JFN>@/I\$,8r498xJ8Dy7k(B
($BFIGd(B, 4/19)
$B6qBNE*FbMF$rDj$a$kN;2r3P=q!J#M#O#U!K$K$h$k$H!"%&%$%k%9BP:v$d8_$$$N%;%-%e%j%F%#!<$NLdBjE@$J$I$K4X$7!"0BA4J]>c>e$N4QE@$+$i!"F|K\B&$OE}9gKkN=4FIt$,!"JFB&$OJFB@J?MN73;JNaIt$,Ak8}$H$J$j!":_F|JF737PM3$G>pJs8r49$9$k!#$3$&$7$?>pJs$O!"B>9q$J$I$KEA$($k:]$K$O=qLL$K$h$k;vA0F10U$rI,MW$H$9$k!#(B
$B!!$H$$$&$o$1$G!"$*$b$$$C$-$j73;vOC!#(B
$B!U(B
$B=;4p%M%C%H$N%W%i%$%P%7!8E209b:[(B
($BFIGd(B, 4/19)
$B!U(B
$B#N#Y86L}!"=i$N#7#1%I%kBf!!%$%i%s3KLdBj$r7|G0(B
(asahi.com, 4/19)$B!#;_$^$j$^$;$s$M!D!D!#(B
$B!U(B
$B7Y;!!";dJ*%Q%=%3%s$r0lA]$X(B:
$B%&%#%K!<>pJsN.=PBP:v!!#2G/4V$G@Z$jBX$((B
($BCfF|(B, 4/19)
$B!U(B
$BF?L>(BP2P$B%M%C%H%o!<%/$K$*$1$k>pJsO31LBP:v$r9M$($k2q5D(B$B!#(B
2006.05.15$B!"El5~ET@iBeED6h!"0lHL(B 5,000$B1_(B / 2006.05.17$B!"J<8K8)?@8M;T!"0lHL(B 2,000$B1_!#!D!D$D$/$E$/$3$N=5$J$N$M!D!D!#(B
$B!U(B
Open Source Revolution!
($BF|7P(B BP)$B!#(B2006.05.15$B!"El5~ET9A6h!"L5NA!#(B
$B!X%;%-%e%j%F%#6/2=(BLinux$B!V(BTOMOYO Linux$B!W$N>&MQ%7%9%F%`F3F~;vNc>R2p!Y(B
$B$H$$$&OC$,$"$k$=$&$G$9!#(B
$B!D!D$D$/$E$/$3$N=5$J$N$M!D!D!#(B
$B!U(B
$B%^!<%A%s!&%t%!%s!&%/%l%t%'%k%H(B
$B!VJd5k@o!A%J%]%l%*%s$+$i%Q%C%H%s>-73$^$G!A!W(B
$B$,!"(B
$B!V(B$BJd5k@o!A2?$,>!GT$r7hDj$9$k$N$+!A(B$B!W(B
$B$H$7$FI|4)$5$l$k$=$&$G$9!#$d$C$?$!!#(B
$B!U(B
$B1x$5$l$?BgCO$G(B
$B!A%A%'%k%N%V%$%j(B $B#2#0G/8e$N??
(NHK $B%9%Z%7%c%k(B)$B!#%A%'%k%N%V%$%j;v8N$,;E3]$1$?;~8BGzCF$,$$$h$$$h_ZNv$7;O$a$F$*$j!"==J,$JD4::$H]$r;}$C$?$N$@$,!"(BIAEA $B$H$$$&AH?%$O!"?M:R$r$5$i$K9-$2$F$$$k$h$&$G$9$M!#(B
$B4XO"(B:
FreeBSD-SA-06:14.fpu - FPU information disclosure$B!#(B
FreeBSD 4.x / 5.x / 6.x $B$G:G6a$N(B AMD $B@=(B CPU
(Athlon, Duron, Athlon MP, Athlon XP, Athlon64, Athlon64
FX, Opteron, Turion, Sempron) $B$r;H$C$F$$$k>l9g$N7g4Y!#(Bpatch $B$"$j!#(B
CVE: CVE-2006-1056
J2SE 5.0 Release 4 $B$N%;%-%e%j%F%#%3%s%F%s%D$K$D$$$F(B (apple)$B!#(B
Sun Alert 102170$B!"(B
Sun Alert 102171
$B$N7o$K2C$(!"!V(BJava $B%$%s%W%C%H%a%=%C%I$N%^%$%J!<$J%;%-%e%j%F%#4XO"$N=$@5!W$,2C$($i$l$F$$$k$=$&$J!#(B
[SA19683] avast! Insecure Temporary File Creation$B!#(B
Avast Linux Home Edition (vulnerability on a temporary folder creation) $B$NOC!#(B
Cyrus SASL DIGEST-MD5 Pre-Authentication Denial of Service$B!#(BCyrus SASL Library 2.1.21 $B$G=$@5$5$l$F$$$k$=$&$J!#(B
[SA19709] Linux Kernel "ip_route_input()" Denial of Service Vulnerability$B!#(B
Linux 2.6.16.8 $B$GD>$C$F$$$k$=$&$J!#(B
[SA19599] PHP "phpinfo()" Cross-Site Scripting and Security Bypass
$B!#(Bphpinfo() $B$K(B XSS $B7g4Y$,$"$kOC$J$I!#(B
PHP 4.x / 5.x $B$K1F6A!#(BCVS $BHG$G$OD>$C$F$$$k!#(B
CVS:
CVE-2006-0996
CVE-2006-1494
CVE-2006-1608
2006.04.20 $BDI5-(B:
$B!!(BFreeBSD $B$N(B AMD $BOC(B (FreeBSD-SA-06:14.fpu) $B$N$D$E$-!#(B
2006.05.15 $BDI5-(B:
$B!!(B[SA19599] PHP "phpinfo()" Cross-Site Scripting and Security Bypass
$B$O(B PHP 5.1.3 $B0J9_$GD>$C$F$$$^$9!#(B
$B!!(BRelease notes $B$@$1FI$s$G=q$$$F$7$^$$$^$7$?7O$N5-;v!#(B
$B!Z(B4$B7n(B19$BF|DI5-![(BMozilla Japan$B$K$h$k$H!$!V(BThunderbird release notes$B!W$K$O!V(BRelease Date: April 18, 2006$B!W$H5-:\$5$l$F$$$k$b$N$N!$%j%j!<%9F|;~$OJF9q;~4V(B4$B7n(B19$BF|Ck!JF|K\;~4V(B4$B7n(B20$BF|D+!K$K1d4|$5$l$?$H$$$&!#$3$N$?$a!$%P!<%8%g%s(B 1.5.0.2$B$O8=;~E@!JF|K\;~4V(B4$B7n(B19$BF|!K$G$OL$8x3+!#JF9q;~4V(B4$B7n(B19$BF|Ck!JF|K\;~4V(B4$B7n(B20$BF|D+!K$K$O!$1Q8lHG$HF1;~$KF|K\8lHG$J$I$b8x3+$5$l$kM=Dj$G$"$k!#!Z0J>e!$(B4$B7n(B19$BF|DI5-![(B
$B!!$H$$$&$o$1$G!"L@F|=P$k$h$&$G$9!#(B
2006.04.20 $BDI5-(B:
$B!!(B1.5.0.2 $BEP>l$7$F$$$^$9(B:
ftp.osuosl.org$B!#(B
1.5 $BF|K\8lHG$G!V%=%U%H%&%'%"$N99?7!W$r;n$7$F$_$?$i!"!V@\B3$,%?%$%`%"%&%H$7$^$7$?!W$H8@$o$l$F$7$^$C$?!#(B
2006.04.24 $BDI5-(B:
$B!!(BThunderbird 1.0.8 $B1Q8lHG$,=P$^$7$?!#F|K\8lHG$O$^$@$G$9!#(B
$B!!(BSymEvent $B%U%!%$%k$N%P!<%8%g%s(B$B$,(B 12.0.0.21 $B$N$H$-$K!"LdBj$,H/@8$9$k$=$&$@!#(B
(b) LiveUpdate$B$r
Norton AntiVirus 2006
Norton Internet Security 2006
Norton SystemWorks 2006
Norton Personal Firewall 2006
$B!!$3$&$$$&$N$O$d$C$+$$$@$J$"!D!D!#(B
2006.05.23 $BDI5-(B:
$B!!Bh(B 2 $BJs=P$^$7$?(B:
$B!!(BSymEvent $B%U%!%$%k$r(B 12.0.3.1 $B$K99?7$9$l$P$h$$$=$&$G$9!#(B
$B!!(B2006 $BG/(B 4 $B7nHG(B Oracle patch $B=P$^$7$?!#(B
$B!!(BSANS ISC $B$N5-;v(B
$B$K(B Of interest is the updated version of password checking utility (Oracle Default Password Scanner) that was originally released in January
$B$H=q$+$l$F$$$k$N$G(B
Oracle Critical Patch Update - April 2006 $B$r$h$/8+$F$_$k$H!"$3$l$G$9$+!#(B
Default Account and Password Checking Utility
The password checking utility announced in the January 2006 Critical Patch Update has been significantly updated and renamed. The Oracle Default Password Scanner assists customers with securing Oracle-provided default database schema accounts that use default passwords. The MetaLink article titled Frequently Asked Questions about Oracle Default Password Scanner (MetaLink Note 361482.1) provides detailed information for this utility, including instructions for downloading the utility and its accompanying documentation, the Oracle Default Password Scanner User's Guide.
2006.04.21 $BDI5-(B:
$B!!F|K\8lHG=P$^$7$?!#(Bhttp://otn.oracle.co.jp/security/ $B$r;2>H!#(B
$B!U(B
$B!T(B ESPIO! $B!U8x0BD4::41$N:_30GI8/>u67!J30L3>J>pJs8x3+;qNA!K(B
$B!U(B
2006/04/14 15:22 - http://www.chial.jp
(Zone-H.org)$B!#(B$B8D?M>pJsO31L$N%;%-%e%j%F%#BP:v$O%A%"%k%"%s%I%"%=%7%(%$%D(B$B$@$=$&$G$9$,!D!D!#(B
$B$*$*$+$o$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
$BCf9qD4::6H3&N"OC(B
$BBh(B 15 $B2s(B: $B
($BF|7P(B BP, 4/13)
$B!!2xJ8=q$d0-$$1=$K@\$7$?$H$-$O!"$=$3$G8l$i$l$kFbMF$N??56$rD4$Y$k$3$H$h$j$b!"$=$NGX7J$K$"$kLdBj$r=hM}$9$k$3$H$,Bg@Z$G$9!#4V0c$C$F$b!"$=$l$i$NFbMF$rF,$+$i?.$89~$s$G$O$$$1$^$;$s!#(B
($BCfN,(B)
$B!!;d8D?M$H$7$F$O!"2xJ8=q$d0-$$1=$N%?!<%2%C%H$K$J$C$??MJ*$G$"$C$F$b!"$=$N?MJ*$,
$B!U(B
Winny $B$M$?(B
$B!U(B
$B$&$C$+$j$@$^$5$l$F$7$^$&(B8$B$D$N
(ITmedia, 4/17)
$B!U(B
Symantec$B!"4k6H8~$1%a!<%k%;%-%e%j%F%#%=%U%HH/I=(B
(ITmedia, 4/18)$B!#(B
Symantec Mail Security for SMTP 5.0 Protects Against Risk of E-mail Threats and Spam
(Symantec) $B$NOC!#(B
$B!U(B
$B?J2=$9$k(Brootkit$B!"!V%*!<%W%s%=!<%94D6-!W$r@0$($k0- (CNET, 4/18)$B!#(B
$B$3$l$NOC(B:
$B!!(Brootkit 3 $BIt:n$N(B part 1 $B$@$=$&$G$9!#(B
AVERT Technical White Papers
(McAfee) $B$K$O!"(BVirus Bulletin $B$H$+MQ$K=q$+$l$?J8=q$H$+$b7G:\$5$l$F$$$k$s$G$9$M!#(B
$B!U(B
NISC NEWS
($BFb3U41K<>pJs%;%-%e%j%F%#%;%s%?!<(B)
$B$J$s$G$9$1$I!"(B
- $B3NG'2hLL$G%a!<%k%"%I%l%9$rI=<($7$J$$$N$O!"$J$$B=54)$($_$#(BSHOW $BIw(B)
- $B$$$^$I$-(B confirm $B$7$J$$$N$O!"$J$
$B!U(B
$B>pJs=hM};n83$G(BNUL$BJ8;z967b$NLdBj$J$I(B
($B?eL57n$P$1$i$N$($SF|5-(B, 4/17)
$B!U(B
...and one giant step for PHP security
(securiteam blog, 4/17)$B!#(BPHP 6 $B$G$9$+!D!D!#(B
$B!U(B
2.4.4 Binaries and 2.6.0RC1 Available
(snort.org, 4/17)
$B!U(B
SpywareGuard$B$K$h$k%9%Q%$%&%'%"46@w$NKI8f(B
($B%"%@%k%H%5%$%HHo32BP:v$NIt20(B) $B$,(B 4/18 $BIU$G!VF3F~Hs?d>)!W$KJQ99$5$l$F$$$^$9!#(B
$B!U(B
$B!V56%5%$%H$X$O!H56!I$N2hA|$rAw?.$7$F%U%#%C%7%s%0BP:v$K!W!$(BF-Secure
($BF|7P(B IT Pro, 4/17)$B!#$G$b(B Referer $B$O(B$B!V%;%-%e%j%F%#%=%U%H!W$,$V$A@Z$C$F$k(B$B%3%H$b$"$C$?$j$9$k$7!#%5%]%;%s$,;`$L5$$G$,$s$P$k3P8g$,$J$$$H$G$-$J$$$h$J$"!#(B
$B!U(B
$B>pJs2r@O%D!<%k!J(BMcAfeeMinimumEscalationResouceTool)
($B%$%s%U%i4IM}McAfee Minimum Escalation Resouce Tool (MERTool)
$B$,Js9p$9$k%U%!%$%k$NCf?H$NOC!#(B
$B!U(B
Perl Winny Scanner
(shag $B$NF|5-(B, 4/13)
- DHTML $BJT=8%3%s%]!<%M%s%H$N(B Active X $B%3%s%H%m!<%k$N@H
$B!!$3$N(B patch $B$rE,MQ$9$k$H!"(BWindows XP / Server 2003 $B$GI{:nMQ$,H/@8$9$k$3$H$,$"$kLOMM(B:
$B!!(BKB896180 $B1Q8lHG(B
$B$K$h$k$H!"M-=~%5%]!<%H$+$i$5$i$J$k=$@5%W%m%0%i%`$rF~
- 2006 $BG/(B 4 $B7n$N%;%-%e%j%F%#>pJs(B
-
$B!!(BMS06-015 patch $B$H(B nVidia $B%I%i%$%P!<$N7o!"(BMSRC blog $B$K5-:\$5$l$F$$$^$9!#(B
Update to the MS06-015 issue. (MSRC blog, 2006.04.18)
Turns out that under certain circumstances, changes introduced in MS06-015 could cause an application to stop responding during specific interactions with older versions of Hewlett Packard's $B!H(BShare-to-web$B!I(B software utility, or older NVIDIA video card drivers. In the case of the Hewlett Packard software, their new version known as $B!H(BHP Image Zone Version 5$B!I(B is not affected. Neither are the most recent NVIDIA graphics card drivers.
$B8E$$(B nVidia $B%I%i%$%P!<$O$@$a$J$3$H$,$"$k$h$&$G$9$M!#(B
nVidia $B$b(B HP $B$N$b!":G?7$O$@$$$8$g$&$V!#(B
nVidia$B!"$I$N$/$i$$8E$$$H$@$a$J$N$+$,$$$^$$$AITL@$G$9$,!D!D!#(B
- SAVCE 10.0.2 MR2 MP1$B!"(BSCS 3.0.2 MR2 MP1 $B8x3+Cf;_$N$*CN$i$;(B
-
$B!!(B4/14 $BIU$G?7HG$,8x3+$5$l$?$h$&$G$9(B: SAVCE 10.0.2 MR2 MP1$B!"(BSCS 3.0.2 MR2 MP1 $B8x3+Cf;_$N$*CN$i$;!J(B2006$BG/(B4$B7n(B14$BF|99?7!K(B $B$h$j(B:
$B%7%^%s%F%C%/$O!"$3$NLdBj$r=$@5$7$?(B MR2 MP1/MR2 MP2 $B$r%j%j!<%9$7$^$7$?!#:G?7HG$N%7%^%s%F%C%/%(%s%?!<%W%i%$%:@=IJ$NF~H$/$@$5$$!#(B
$B%7%^%s%F%C%/(B $B%(%s%?!<%W%i%$%:@=IJ$N:G?7%P!<%8%g%s$NF~
$B!U(B
$B%&%#%K!<(B $BF~;%=d$k9q2q5D0w$X$N!V8}Mx$-0MMjJ8!WN.=P(B ($BKhF|(B, 4/17)
$B!U(B
Winny$B%M%C%H%o!<%/Jx2u$X$N:G=*%7%J%j%*(B
($B9bLZ9@8w!w<+Bp$NF|5-(B, 4/16)$B!#(B
Winny.exe $BC1BN$NOC$r$7$F$$$k$N$+%&%#%K!<%M%C%H%o!<%/$NOC$r$7$F$$$k$N$+!#(B
$B9bLZ$5$s$O%&%#%K!<%M%C%H%o!<%/$N4m81@-$NOC$r$7$F$$$k$h$&$K;d$K$O8+$($k$1$I!"(B
Winny$B$,;D$7$?$b$N(B
($B%"%s%+%F(B(Uncategorizable Blog)) $B$O(B Winny.exe $BC1BN(B ($B$"$k$$$O(B Winny.exe $BG[I[%Q%C%1!<%8(B) $B$NOC$r$7$F$$$k$h$&$K;d$K$O8+$($k!#(B
$B!!(BWinny.exe $B$=$l<+BN$O%^%k%&%'%"$G$O$J$$!"$H$$$&$N$O!"8=;~E@$G$N$4$/0lHLE*$J8+2r!#$@$+$i$3$=!"F|K\@/I\$b;u@Z$l$N0-$$!V8F$S$+$1!W!V$*4j$$!W$G$*Cc$rBy$9$7$+$J$$$o$1$G!#(B
$B!!$=$l$O$H$b$+$/$H$7$F!"(B
$B$^$:!"8D?M>pJs$rN.=P$5$;$?pJs$N
$BCx:n8"4IM}CDBN$d@/I\5!4X$,$3$l$r9T$&$N$,4pK\$+$J$"!#(B
$B!U(B
McAfee VirusScan Enterprise 8.5i Beta Refresh
(McAfee)$B!#$J$s$@$+%Y!<%?%F%9%H$7$F$k$C$]$$$G$9!#(BCynos$B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
$B%V%i%C%/%&%)!<%`$N7Y9p!&(BWinAntiSpyware$B$H(BWinAntiVirusPro$B$O(B
winfixer.com$B$N?7>&K!(B (Semplice, 4/17)$B!#(BLuca $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
IAjapan $BBh(B3$B2s(B $BLBOG%a!<%kBP:v%+%s%U%!%l%s%9(B
(IAjapan)$B!#(B2006.05.16$B!"El5~ET9A6h!"(B2000$B1_!#%m!<%=%s%A%1%C%H$GHNGd!#(B
$B$7$+$7$J$
$B!U(B
$BBh(B08$B2s$NJg=83+;O(B
($B$^$C$A$c$@$$$U$/$NF|5-(B, 4/17)$B!#(B2006.05.20$B!"5~ETI\5~ET;T!"(B2000$B1_!#(B
$B>\:Y(B: [openmya:033912] FYI$B!'Bh#0#82s$^$C$A$c#1#3#9JY6/2q$N$40FFb(B
$B!U(B
$BCs ($BKhF|(B, 4/17)
$B!U(B
$B!V30L3>J$,7|G0$rDLCN!W!"Cf9q$N9R9T6X;_DL9pLdBj(B
(asahi.com, 4/17)$B!#$&!<$`!#8e
$B!U(B
$B#N#Y86L}!"#7%+7nH>$V$j#7#0%I%kBf!!%$%i%s>p@*$J$I7|G0(B
(asahi.com, 4/17)$B!"(B$B%,%=%j%s$,:G9bCM99?7!D@=L}=j;v8NAj ($BFIGd(B, 4/17)$B!#$&!<$`!#(B
$B!U(B
$B$R$^$o$j#69f$,;Q@*$K0[>o!"4QB,5Y;_(B
(asahi.com, 4/17)$B!#$&!<$`!#(B
$B!D!D(B$B$R$^$o$j#69f!"2hA|Aw?.$r:F3+!!4QB,Dd;_$OLs#2#0;~4V$K(B (asahi.com, 4/17)$B!#(B
$B!U(B
IP$B%5!<%S%9$G>c32B3H/$N(BNTT$B@>F|K\!$%U%l%C%D!&%*%U%#%9$G$^$?%H%i%V%k(B
($BF|7P(B IT Pro, 4/16)
$B!U(B
Windows$B$,;H$($k$b$&(B1$B$D$N(BMac$B4D6-(B
$B!V(BParallels Workstation$B!W(B
(PC Watch, 4/17)$B!#(B
VM $BJ}LL$G$O(B
Xen 3.0.2 released
(slashdot.jp, 4/16) $B$H$$$&OC$b$"$k$=$&$G!#(B
$B!U(B
$B%^%$%/%m%=%U%H!"BG$A4V0c$($?(BURL$B$N0-MQ$rKI;_$9$k%D!<%k$rH/I=(B
(CNET, 4/14)$B!#(BStrider URL Tracer with Typo-Patrol (Microsoft Research) $B$@$=$&$G$9!#(B
$B!U(B
$B>pJs=hM};n83(B
(tessy$B$NF|5-(B, 4/16)$B!#$=$&$$$($P$d$C$F$?$s$G$9$M!D!D(B
$B!U(B
Win9x$B7O$N%5%]!<%H$O(B7/11$B$G=*N;(B (slashdot.jp, 4/15)$B!#(B
$B$"$H!"(B
Debian$B$N(B2.2$B7O!u(B2.4$B7O0BDj%j%j!<%9$@$C$?(B 'woody' $B$O!"(B5$B7n$G%5%]!<%H$,@Z$l(B$B$k$=$&$G$9!#(B
$B!U(B
$B%8%'%M%j%C%/0eLtIJ$K@Z$jBX$($?>l9g$NLtIJL>!&2A3J(B($B:o8:8z2L(B)$B$,(B
$B0lL\$GJ,$+$k!X%8%'%M%j%C%/0eLtIJB%?JDLCN=q!YDs6!%5!<%S%9$r3+;O(B
(NTT $B%G!<%?(B, 4/5)
$B!!(BFreeStyleWiki
3.5.10 $B0JA0$K(B XSS $B7g4Y$,$"$j!"(BWiki $B$KG$0U$N%9%/%j%W%H$rKd$a9~$a$k!#(B
FreeStyle Wiki 3.5.11 $B$G=$@5$5$l$F$$$k!#(B
- KB912945: Internet Explorer ActiveX update
-
$B!!(BMS06-013 $B=P$^$7$?!#(B
$B!!$"$H!"(BWeb $B%5%$%HB&$NBP1~$K4X$9$k%j%=!<%9(B:
- Internet Explorer $BMQ$NN_@QE*$J%;%-%e%j%F%#99?7%W%m%0%i%`(B (912812) (MS06-013)
$B!!I{:nMQJ}LL(B:
- 2006 $BG/(B 4 $B7n$N%;%-%e%j%F%#>pJs(B
-
$B!!(BMS06-015 $BI{:nMQ$N7o!"(BKB $B=P$^$7$?(B:
$B!!(BHP $B$b$N$NB>!"(BKerio Personal Firewall $B$G$bLdBj$,H/@8$9$k$=$&$G!#(B
- 2006 $BG/(B 4 $B7n$N%;%-%e%j%F%#>pJs(B
-
$B!!(BMicrosoft Update$B$7$?$H$-$K(Bage$B$k%9%l(B 24$B$+$i$?$I$C$?%Z!<%8$K!"(BMS06-015 patch $B$H(B HP $B$N(B hpgs2wnd.exe $B$d(B
hpgs2wnf.exe $B$GIT6q9g$K$J$kOC$,(B:
$B!!>e5-(B 2ch.net $B%9%l$K$O(B nVidia $B%I%i%$%P!<$H$$$&OC$b=P$F$/$k$,!"$$$^$$$AN"$,
$B!!$"$H!"(BMDAC $B$N%;%-%e%j%F%#=$@5$K$D$$$F$h$/$^$H$^$C$?>pJs$,=P$F$^$9(B:
$B!!(BFirefox 1.5.0.2 $BEP>l(B ($B%@%&%s%m!<%I(B)$B!#(BFirefox 1.5 $B0J9_$J$i!"(B[$B%X%k%W(B] $B%a%K%e!<$N(B [$B%=%U%H%&%'%"$N99?7$r3NG'(B...] $B$+$i99?7$G$-$k!#(B
8 $B
$B!!(BFirefox 1.0.8
$B$H(B
Seamonkey 1.0.1
$B$bEP>l$7$F$$$k$h$&$@(B (ana-log $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9(B)$B!#(BThunderbird 1.5.0.2 / 1.0.8 $B$O$^$@=P$F$$$J$$$HM}2r$7$F$$$$$N$+$J!#(B
$B!!$J$*!"(BFirefox 1.0.x, Thunderbird 1.0.x, Mozilla 1.7.x $B$OBG$A$I$a$@$=$&$G$9!#(B
ana-log $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
2006.04.24 $BDI5-(B:
$B!!(BFirefox 1.0.8$B!"(BThunderbird 1.5.0.2 / 1.0.8$B!"(BMozilla 1.7.13 $B=P$F$^$9!#(B
$B!!(BFirefox 1.0.8 $B$H(B Thunderbird 1.5.0.2 $B$OF|K\8lHG$b=P$F$^$9!#(B
Thunderbird 1.0.8 $B$O$^$@$G$9$,!"F|K\8lHG$bEP>l$9$kM=Dj$N$h$&$G$9!#(B
Mozilla 1.7.13 $B$K$D$$$F$b(B$BF|K\8lHG$N:n6H$,?J$a$i$l$F$$$k$=$&$G$9(B
($B%"%$%t%!!<%s$5$s>pJs$"$j$,$H$&$4$6$$$^$9(B)
$B!!(BThunderbird $B$K$D$$$F$O(B $B$3$A$i$N5-;v$b;2>H(B$B!#(B
$B!U(B
Winny $B$M$?(B
$B!U(B
$BF|K\8l%"%@%k%H%5%$%H$X$NBe6b?69~$r6/MW$9$k%H%m%$$NLZGO!V(BHachilem.B$B!W(B
(Internet Watch, 4/13)$B!#$3!<$f!<%O%G$JE[$O9V=,MQ$N%G%b$H$+$K;H$($=$&$@$J$"!#$I$3$+$KE>$,$C$F$J$$$+$J!#(B
($B;H$&>l9g$O!"L\N)$C$?JQ2=$,H/@8$7$J$$$h$&$J%G%b$b8+$;$^$7$g$&(B)
$B!U(B
$B!N(BWSJ$B!O(B $B%/%l%8%C%H%+!<%I$r!V%l%s%8$G%A%s!W$9$k?M$?$A(B
(ITmedia, 4/13)$B!#(BRFID $B$M$?!#(B
$B!U(B
$B%*%s%i%$%s(BDVD$B%l%s%?%k$N!V$]$9$l$s!W$,2;3Z(BCD$B$N
(Internet Watch, 4/11) $B$N!V$]$9$l$s!W$,!"%j%K%e!<%"%k8e$N%7%9%F%`$G%H%i%V$C$F$$$k$h$&$G$9!#(BPAPA $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B3t<02q ($B$]$9$l$s(B, 4/13) $B$h$j(B:
[$B:#8e$NJ}?K$K$D$$$F(B]
$B8=:_!"%j%K%e!<%"%kA0$N%7%9%F%`$KLa$9J}?K$GBP1~$7$F$*$j$^$9!#%5!<%S%9$N:F3+F|Dx$O8=:_D4@0Cf$G$9!#K\F|Cf$K3NDj$N>e$G$40FFb$5$;$F$$$?$@$-$^$9!#(B
$B!U(B
$B$@$^$9?M$N;kE@(B -- $B!V<+J,$O$@$^$5$l$J$$!W$,DLMQ$9$k!)(B
(ITmedia, 4/13)
(typo fixed: SEAWorks $B$5$s46
$B!U(B
[AML 6653] Fwd: TAKE ACTION $B!*%$%9%i%(%k!?@jNNCO0h!'%,%6CO6h$K$*$1$k?M8"?/32$rKI$0$?$a!"6[5^$N9TF0$,I,MW(B$B!#(Bfrom $B%"%`%M%9%F%#!#(B
$B!U(B
$B$W$i$i$N!V(BWinny$B
($BF|7P(B IT Pro, 4/12)$B!#3WL?$M$'!D!D!#(B
- Internet Explorer $BMQ$NN_@QE*$J%;%-%e%j%F%#99?7%W%m%0%i%`(B (912812) (MS06-013)
$B!!:GBg?<9oEY(B : $B6[5^(B
$B!!(BCVE:
CVE-2006-1359
CVE-2006-1245
CVE-2006-1388
CVE-2006-1185
CAN-2006-1186
CVE-2006-1188
CVE-2006-1189
CVE-2006-1190
CVE-2006-1191
CVE-2006-1192
- Microsoft Data Access Components (MDAC) $B$N5!G=$N@H
$B!!:GBg?<9oEY(B : $B6[5^(B
$B!!(BCVE: CVE-2006-0003
- Windows $B%(%/%9%W%m!<%i$N@H
$B!!:GBg?<9oEY(B : $B6[5^(B
$B!!(BCVE: CVE-2006-0012
- Outlook Express $BMQ$NN_@QE*$J%;%-%e%j%F%#99?7%W%m%0%i%`(B (911567) (MS06-016)
$B!!:GBg?<9oEY(B : $B=EMW(B
$B!!(BCVE: CVE-2006-0014
- Microsoft FrontPage Server Extensions $B$N@H
$B!!:GBg?<9oEY(B : $B7Y9p(B
$B!!(BCVE: CVE-2006-0015
$B!!(B2ch.net $B$r8+$k$H!"(BMS06-015
$B$K4X$9$kIT6q9g$,;68+$5$l$k$h$&$@!#(B
$BAj@-$N0-$$(B 3rd party $B%W%m%0%i%`$,$"$k$N$+$J!#(B
2006.04.15 $BDI5-(B:
$B!!(BMicrosoft Update$B$7$?$H$-$K(Bage$B$k%9%l(B 24$B$+$i$?$I$C$?%Z!<%8$K!"(BMS06-015 patch $B$H(B HP $B$N(B hpgs2wnd.exe $B$d(B
hpgs2wnf.exe $B$GIT6q9g$K$J$kOC$,(B:
$B!!>e5-(B 2ch.net $B%9%l$K$O(B nVidia $B%I%i%$%P!<$H$$$&OC$b=P$F$/$k$,!"$$$^$$$AN"$,
$B!!$"$H!"(BMDAC $B$N%;%-%e%j%F%#=$@5$K$D$$$F$h$/$^$H$^$C$?>pJs$,=P$F$^$9(B:
2006.04.17 $BDI5-(B:
$B!!(BMS06-015 $BI{:nMQ$N7o!"(BKB $B=P$^$7$?(B:
$B!!(BHP $B$b$N$NB>!"(BKerio Personal Firewall $B$G$bLdBj$,H/@8$9$k$=$&$G!#(B
2006.04.18 $BDI5-(B:
$B!!(BMS06-015 patch $B$H(B nVidia $B%I%i%$%P!<$N7o!"(BMSRC blog $B$K5-:\$5$l$F$$$^$9!#(B
Update to the MS06-015 issue. (MSRC blog, 2006.04.18)
Turns out that under certain circumstances, changes introduced in MS06-015 could cause an application to stop responding during specific interactions with older versions of Hewlett Packard's $B!H(BShare-to-web$B!I(B software utility, or older NVIDIA video card drivers. In the case of the Hewlett Packard software, their new version known as $B!H(BHP Image Zone Version 5$B!I(B is not affected. Neither are the most recent NVIDIA graphics card drivers.
$B8E$$(B nVidia $B%I%i%$%P!<$O$@$a$J$3$H$,$"$k$h$&$G$9$M!#(B
nVidia $B$b(B HP $B$N$b!":G?7$O$@$$$8$g$&$V!#(B
nVidia$B!"$I$N$/$i$$8E$$$H$@$a$J$N$+$,$$$^$$$AITL@$G$9$,!D!D!#(B
2006.04.21 $BDI5-(B:
$B!!(BMS06-015 $B$N7o!"(BMSRC blog $B$KB3Js$,=P$F$$$^$9(B:
More information on the MS06-015 issue
(MSRC blog, 2006.04.21)
Up until now there have been several solutions: Upgrade to the newest version of the affected software, a manual registry key fix, uninstall the third party software (NVIDIA Drivers versions 61.94 and prior or the Hewlett Packard Share-to-web software) or uninstall the update.
$BIT6q9g$N=P$k(B nVidia $B%I%i%$%P!<$O(B 61.94 $B0JA0$@$=$&$G$9!#(B
So what we have done is re-engineered the MS06-015 update to avoid the conflict altogether with the older Hewlett Packard and NVIDIA software. We're going to run a test pass on it and we will release this new update on Tuesday, April 25th. What the new update essentially does is simply add the affected third party software to an "exception list" so that the problem does not occur. The revised update automates the manual registry key fix.
4/25 $B$K(B patch $B$N?7HG$,=P$k$=$&$G$9!#LdBj$NH/@8$9$k(B 3rd party $B%=%U%H$K$D$$$F$O!V(Bexception list$B!W$KEPO?$9$k!"$G$9$+!#(Bexception list $B$H$$$&8@MU$O(B
KB918165
$B$K$O$J$$$N$G$9$,!D!D!#(B
$B!D!D(B MS06-015 $B$,2~D{$5$l$F$^$7$?!#(B
$B99?7$5$l$?%;%-%e%j%F%#99?7%W%m%0%i%`$K$O:G=i$N%;%-%e%j%F%#99?7%W%m%0%i%`$K4^$^$l$F$$$?%P%$%J%j$KBP$9$kJQ99$O$"$j$^$;$s!#99?7$5$l$?%;%-%e%j%F%#99?7%W%m%0%i%`$O%^%$%/%m%=%U%H(B $B%5%]!<%H5;=Q>pJs(B 918165 $BF1MM$K!"0J2<$N0lMw$N%(%s%H%j$rDI2C$7$^$9!#(B
HP Share-to-Web
{A4DF5659-0801-4A60-96071C48695EFDA9}
NVIDIA $B%0%i%U%#%C%/(B $B%I%i%$%P(B
{1E9B04FB-F9E5-4718-997B-B8DA88302A47}
{1E9B04FB-F9E5-4718-997B-B8DA88302A48}
{1CDB2949-8F65-4355-8456-263E7C208A5D}
KB918165
$B$N%l%8%9%H%j@_Dj$,!V(Bexception list$B!W$@$H$$$&$3$H$+!#(B
2006.04.26 $BDI5-(B:
$B!!(BMS06-015 $B$N?7(B patch $B=P$F$^$9!#(B
$B!!(Bpatch $BK\BN$K$OJQ2=$O$J$/!"(BHP $B@=IJ$d(B nVidia $B@=IJ$G$NIT6q9g$r2sHr$9$k$?$a$K!V(Bexception list$B!W$N%l%8%9%H%j$r<+F0E*$K@_Dj$9$k$h$&$K$J$C$?$@$1!#(BKB918165 $B$K$O(B nVidia $B$K4X$9$k%l%8%9%H%j@_Dj$b5-:\$5$l$F$$$k!#(B
2006.04.27 $BDI5-(B:
$B!!(BMS06-016 $B$rE,MQ$9$k$H(B unable to open address book. Address book may not be installed correctly
$B$H8@$o$l$?$j$9$kOC$,$"$k$=$&$G!"(BKB $B$,=P$^$7$?(B:
$B!!860x$N$[$H$s$I$O!"%"%I%l%9D"$,!"(Bpatch $BE,MQA0$N(B OE $B$G$O8!=P$7$J$$$h$&$J7A$G2u$l$F$$$k$?$a$@$=$&$@!#2r7hJ}K!$H$7$F$O!"(BMS06-016 patch (911567) $B$N%"%s%$%s%9%H!<%k$,<($5$l$F$$$k!#(B($B%"%I%l%9D"$O=$I|$G$-$J$$$H$$$&$3$H(B?)
2006.06.09 $BDI5-(B:
$B!!(BWindows MDAC$B$N@H (ITmedia, 2006.06.09)$B!#(B
MS06-014 $B$N96N,%3!<%I$@$=$&$G!#(B
2006.06.09 $BDI5-(B:
$B!!7k6I!"(BWindows $B%(%/%9%W%m!<%i$N@H $B$N(B Windows 9x / Me $BMQ(B patch $B$ODs6!$5$l$J$$!D!D$H$$$&$+!"Ds6!$G$-$J$$$N$@$=$&$G!#(B
Microsoft Windows 98$B!"(BMicrosoft Windows 98 Second Edition (SE) $B$*$h$S(B Microsoft Windows Millennium Edition (ME) $B$,1F6A$r
Windows 2000 $B$N3+H/$N:]$K!"(BWindows $B%(%/%9%W%m!<%i$N4pK\$N%"!<%-%F%/%A%c$KBP$7$FCx$7$$6/2=$,9T$J$o$l$^$7$?!#(BMicrosoft Windows 98$B!"(BMicrosoft Windows 98 Second Edition (SE) $B$*$h$S(B Microsoft Windows Millennium Edition (ME) $B$N(B Windows $B%(%/%9%W%m!<%i$N%"!<%-%F%/%A%c$O:G?7$N(B Windows $B$N%"!<%-%F%/%A%c$KHf$Y$F6/8G$J$b$N$G$O$"$j$^$;$s!#$3$N4pK\E*$JAj0c$N$?$a$K!"%^%$%/%m%=%U%H$,I}9-$$D4::$r9T$C$?$H$3$m!"(BMicrosoft Windows 98$B!"(BMicrosoft Windows 98 Second Edition (SE) $B$*$h$S(B Microsoft Windows Millennium Edition (ME) $B>e$N(B Windows $B%(%/%9%W%m!<%i$KI,MW$JJQ99$r$5$i$K9T$J$&$3$H$,$7$NEXNO$r9T$J$C$?8e!"$3$l$i$N%W%i%C%H%U%)!<%`$GZ$,$"$j$^$;$s!#(B
$B!!(B2 $B$+7n$b7P$C$F$+$i!"$=$s$J$3$H8@$o$l$F$b$J$"!#:G=i$+$i$o$+$C$?>e$GL[$C$F$?$s$8$c$J$$$N(B?
2006.06.12 $BDI5-(B:
$B!!(BMS06-015 Fiasco, Chapter Three (securiteam blog, 2006.06.11)
2006.06.21 $BDI5-(B:
$B!!(B917783 - FIX: Internet Explorer does not enable ActiveX controls that are dynamically inserted into an HTML page by a binary behavior after you install security update MS06-013 (Microsoft)$B!#(BMS06-013 patch $B$K(B binary behavior $B$,$i$_$NIT6q9g$,$"$C$?$h$&$G!"(Bhotfix $B$,$"$k$=$&$G$9!#$G$b!"(B
Internet Explorer $BMQ$NN_@QE*$J%;%-%e%j%F%#99?7%W%m%0%i%`(B (916281) (MS06-021) $B$N(B patch $B$NJ}$,%P!<%8%g%s$,>e$J$N$G!"$=$A$i$rF~$l$l$P$$$$$s$8$c$J$$$N$+$J$"!#(B
$B!!(BCVE $B0lMw(B:
- CVE-2006-1359:
DHTML $B%a%=%C%I%3!<%k$N%a%b%j$NGKB;$N@HCVE-2006-1245:
$B%^%k%A%W%k%$%Y%s%H%O%s%I%i$N%a%b%j$NGKB;$N@HCVE-2006-1388:
HTA $B$NCVE-2006-1185:
HTML $B2r@O$N@HCAN-2006-1186:
COM $B%*%V%8%'%/%H$N%$%s%9%?%s%92=$N%a%b%jGKB;$N@HCVE-2006-1188:
HTML $B%?%0$N%a%b%j$NGKB;$N@HCVE-2006-1189:
2 $B%P%$%HJ8;z$N2r@O$N%a%b%jGKB;$N@HCVE-2006-1190:
$B%9%/%j%W%H$NCVE-2006-1191:
$B%/%m%9%I%a%$%s$N>pJs$NO3$($$$N@HCVE-2006-1192:
$B%"%I%l%9%P!<$N56Au$N@H
$B!!$=$NB>(B:
$BNc$NFC5vBP1~OC$K$h$k(B ActiveX $B$^$o$j$N;EMMJQ99$,E,1~$5$l$k$N$O!"(B
- Windows XP SP2
- Windows XP Professional x64 Edition
- Windows Server 2003 SP1
- Windows Server 2003 x64 Edition
- Windows Server 2003 SP1 for Itanium-based Systems
$B$N$_!#(BKB912812
$B$KL@5-$5$l$F$$$k!#(B
Windows 2000 Professional / Server $B$G$O(B ActiveX $B$^$o$j$OJQ99$5$l$J$$(B$B!#(B
ActiveX $B$^$o$j$N;EMM$r85$KLa$9(B
$B!V8_49@-=$@5%W%m%0%i%`!W$,I,MW$J>l9g$O!"(B
KB917425
$B$r;2>H!#(B
$B!V$$$o$f$k(B CSSXSS $B@H
$B$7$+$7I{:nMQ$,$"$k$=$&$G(B:
$B%5%$%H(BA$B$N@5Ev$J%3%s%F%s%D4IM}~$N0Y$K!"%5%$%H(BB$B$KJ];}$5$l$?%9%?%$%k%7!<%H$rMxMQ$7$?$H$7$^$9!#(B $B$3$N;~$K!"4|BTDL$j%9%?%$%k$OE,MQ$5$l$^$9!#(B
$B$7$+$7$J$,$i!">e$N>l9g$G!"(BcssText$B$r;H$C$F!"@5Ev$KFI$_9~$^$l$?%9%?%$%k%7!<%H$NFbMF$r%"%/%;%9$7$h$&$H$7$F$b!"=PMh$J$/$J$j$^$7$?!#=>Mh=PMh$F$$$?$b$N$G$9!#(B
2006.04.14 $BDI5-(B:
$B!!!V$$$o$f$k(B CSSXSS $B@H
$B!!$"$H!"I{:nMQJ}LL(B:
2006.04.17 $BDI5-(B:
$B!!I{:nMQJ}LL(B:
2006.05.02 $BDI5-(B:
$B!!(BQ629610334571: Easy-WebPrint$B$G0u:~;~$K!V%9%/%j%W%H%(%i!
($B%-%d%N%s(B) $B$,2~D{$5$l$F$$$^$9!#(B
Easy-WebPrint $B$N7o!"(Bversion 2.6.3 $B$G=$@5$5$l$?$=$&$G$9!#(B
$B!!$"$H!"(BWindows Update KB912945$B$rE,MQ$7$?>l9g$N(BHOD$B$X$N1F6A$K$D$$$F(B (HostInteg-06-005)
(IBM, 2006.04.21) $B$H$$$&$N$,=P$F$^$7$?!#(B
2006.05.08 $BDI5-(B:
$B!!(BMS06-013 $B$KH<$&(B IE (ActiveX) $B;EMMJQ99$NI{:nMQ$,(B Exchange $B$GH/@8$9$k$=$&$G!"(BExchange 2003 $B$K$D$$$F$O(B patch $B$,L5=~8x3+$5$l$F$$$^$9!#(B
$B!!e5-$,$I$A$i$J$N$+$O$h$/$o$+$j$^$;$s!#(B
$B!!(BExchange 2000 $B$K$D$$$F$O!"M-=~%5%]!<%H$+$iF~
2006.05.29 $BDI5-(B:
$B!!(B[BuHa-Security] MS06-013: HTML Tag Memory Corruption
Vulnerability in MS IE 6 SP2
2006.06.12 $BDI5-(B:
$B!!(BCVE $B>pJs$r$h$&$d$/DI2C!#(B
$B!!%M%C%H%o!<%/%W%j%s%?$G$G$-$k!"$"$s$J$3$H$d$3$s$J$3$H$N2r@b!#(B
Media $B%;%/%7%g%s(B$B$K$O!"(BNotacon 2006 $B$G$N%W%l%<%s%S%G%*$d%9%i%$%I$J$I$b$"$k!#(B
$B!!FI$_$b$NIw$N$b$N$,$[$7$$8~$-$K$O!"(B$B%9%F%#!<%j%s%0!&%6!&%M%C%H%o!<%/(B
$B$NBh(B 4 $B>O!VIT;W5D$J%M%C%H%o!<%/$N9q$N(Bh3X$B!W$,$$$$$+$b!#$J$K$7$m(B FX $B;a$,=q$$$F$$$^$9$7!#(B
$B!U(B
MPS$B!"1Q9q:GBg5,LO$N3$B19T0Y8=>l$rE&H/(B--$B3$B1HG(BDVD$B$r(B1$BF|:GBg(B64,800$BKg@=B$(B
(MYCOM PC WEB, 4/11)$B!#2HFb@)
$B8=>l$+$i$O!"(B50$BBf$N(BDVD$B%G%e%W%j%1!<%?!<$,2!<}$5$l!"3F(BDVD$B%G%e%W%j%1!<%?!<$O!"(BPC$B$K@\B3$;$:$KMxMQ$G$-$k%9%?%s%I%"%m!<%sJ}<0$H$J$C$F$*$j!"Ls(B10$BJ,4V$G(B9$BKg$N(BDVD$B$rJ#@=$9$k@-G=$rM-$7$F$$$?$H$5$l$k!#(BMPS$B$O!"$3$NHH9T8=>l$@$1$G(B1$B;~4V$K(B2,700$BKg$N3$B1HG(BDVD$B$r0cK!@=B$$9$k$3$H$,$G$-$?$H$7$F$*$j!"(B
$B!!F~$l$+$(;~4V$O(B? $B!VLs(B10$BJ,4V!W$K4^$^$l$F$$$k$N$+$J$"!#(B
24$B;~4V%U%k2TF/$5$;$?$J$i$P!"M}O@>e$OKhF|(B64,800$BKg$N3$B1HG(BDVD$B$,@=B$$5$l$F$$$?$3$H$K$J$k$@$m$&$HI>$7$F$$$k!#(B
$B!!$"$d$7$2$J(B if $B$@$J$"!#(B
$B!U(B
CSRF$BBP:v$K!V%o%s%?%$%`%H!<%/%s!WJ}<0$r?d>)$7$J$$M}M3(B
($B9bLZ9@8w!w<+Bp$NF|5-(B, 4/9)
$B!U(B
$B4k6H$rG:$^$;$k(BIM$B$N%;%-%e%j%F%#BP:v$K>h$j=P$9(BSymantec
(ITmedia, 4/11)
$B!U(B
$B!V(BWinny$B>&K!!W$K$4MQ?4(B
($BF|7P(B IT Pro, 4/6)
$B!U(B
$B=;>&>pJs%7%9%F%`$O!"JF(B eEye Digital Security $B@=L5=~(B Winny $B8!=P!&DL?. ($B=;>&>pJs%7%9%F%`(B, 4/11)$B!#(BeEye $B%-%?!
$B!U(B
eEye Security Forum / Spring 2006
$B!A9qFb30$K$*$1$k?7$?$J%;%-%e%j%F%#6<0R$H(BWinny$B$N2r@O!A(B ($B=;>&>pJs%7%9%F%`(B)$B!#(B
2006.05.12$B!"El5~ET9A6h!"L5NA(B ($BDj0w(B 200 $B?M(B)$B!#(B
$B9T$-$?$$?M$O$*$*$$$=$.$GEPO?$7$^$;$&!#$/$%!"9T$-$?$$$1$I!"(B5 $B7n$O!D!D(B(T_T)
$B!U(B
$B0&I28)7Y!"#G#P#S>pJsC
(asahi.com, 4/11)$B!#$$$m$$$mL@$k$_$K=P$F6=L#?<$$$G$9$M!#(B
$B!U(B
$B%P!<%A%c%k$NJ@32$r8&5f!!7Y;!D#(B
(asahi.com, 4/11)$B!#(B
$B$O$8$a$K7kO@$"$j$-7O(B?
$B!U(B
$B$b$7%Y%s%@!<$N%5%]!<%H$,FMA3BG$A@Z$i$l$?$i(B---$BJF(BBorland$B$N(BIDE$BItLgGd5Q$K;W$&(B
($BF|7P(B IT Pro, 4/5)$B!#(B
$B%*!<%W%s$JI8=`$5$($"$l$P!$%Y%s%@!<$X$N0MB8@-$,$J$/$J$k$o$1$G$O$J$$$3$H$K$bCm0U$,I,MW$@!#$?$H$(I8=`2=$5$l$F$$$F$b!$$=$N%Y%s%@!<$,%5%]!<%H$rCf;_$7$?$H$-$K!$Be$o$j$H$J$k%D!<%k(B/$B4D6-$,$J$1$l$P0UL#$,$J$$!#$3$NE@$G!$(BECMA$B$K;O$^$C$F(BISO/IEC$B!$(BJIS$B$^$GI8=`2=$,$J$5$l$?$H$O$$$(!$K\2H(BMicrosoft$B0J30$N%3%s%Q%$%i$,
$B!U(B
$B9bB.A%;v8N!!$1$,?M$O#1#0#4?M$K!!A%Dl$,Bg$-$/B;=}(B
(asahi.com, 4/10)
$B1&B&$N:G8eHx$K:B$C$F$$$?CK@-!J#4#7!K$O!";v8N$N=V4V!"9x$N%Y%k%H$r<4$H$7$F!"BN$,Fs$D$K@^$l6J$,$C$?!#%Y%k%H$,9x$K?)$$9~$_!"2$KCe$/$[$IBN$,A06~!#9xDG!J$h$&$D$$!K$HO>9|!J$m$C$3$D!K$N9|@^$H?GCG$5$l$?!#
$B!!(B80km/h $B$G(B 2 $BE@<0%7!<%H%Y%k%H$G$O$M$(!#(B
Oracle read-only user can insert/update/delete data via specially crafted views$B!#(B
4 $B7n$N(B Oracle patch $B$G=$@5$5$l$kM=Dj$NLOMM!#(B
IE6 Crash$B!"(B
Re: IE6 Crash$B!#(Bmetasploit.com$B!"$J$s$@$+$D$J$,$i$J$$$J$"!#(B
[SECURITY] [DSA 1030-1] New moodle packages fix several vulnerabilities$B!#(Bmoodle $B$KF1:-$5$l$F$$$k(B ADOdb Database Abstraction Library for PHP (and Python) $B$K(B
CVE-2006-0146
CVE-2006-0147
CVE-2006-0410
CVE-2006-0806
$B$H$$$&7g4Y$,$"$j!"(B
Debian $B$N(B moodle $B%Q%C%1!<%8$G=$@5$5$l$?$=$&$@!#(B
CVE-2006-0146
CVE-2006-0147 $B$O(B ADOdb 4.70 $B$G=$@5(B$B!"(B
CVE-2006-0410 $B$O(B ADOdb 4.71 $B$G=$@5(B$B!"(B
CVE-2006-0806 $B$O(B ADOdb 4.72 $B$G=$@5(B$B$5$l$F$$$k$_$?$$!#(B
ADOdb $B$N:G?7HG$O(B 4.80$B!#(B
ADOdb $B$O(B ACID, Mantis, PostNuke, Moodle, Cacti, Xaraya, Mambo, eGroupWare $B$J$I!"$$$m$s$J$H$3$m$G;H$o$l$F$$$k$h$&$J$N$GCm0U!#(B
[Overflow.pl] Clam AntiVirus Win32-UPX Heap Overflow (not
default configuration)$B!#(B
ClamAV 0.88.1 $B$G=$@5$5$l$?7o$N$R$H$D!#(BCVE-2006-1614?
PoC $B%3!<%I$"$j!#(B
$B$J$*!"(BClamAV 0.88.1
$B$G=$@5$5$l$?7o$K$D$$$F$O!"(B
CVE-2006-1614
CVE-2006-1615
CVE-2006-1630
$B$,3:Ev$9$k$=$&$@!#(B
[Full-disclosure] Microsoft Internet Explorer Content-Disposition HTML File Handling Flaw$B!#(BIE $B$K$*$1$k(B Content-Disposition $B$N=hM}$K$*$$$F!"(BHTML $B%U%!%$%k$r$&$^$/07$($J$$$H$$$&OC!#(BPoC $B%3!<%I$"$j!#(B
$B4XO"(B:
$B4XO"5-;v$NJ}$,6=L#?<$$$h$&$J5$$,!D!D(B
$B!U(B
kArp, the Kernel ARP hijacking patch for Linux$B!#(B
linux-2.6.16-rc6 / linux-2.6.16 $B$KBP1~$7$F$$$k$=$&$J!#(B
$B!U(B
$B9qL1@83h%;%s%?!<$,%9%Q%`Aw?.(B
($B$=$l$,@$$NCf$C$F$b$N$@$+$i!D(B, 3/20)$B!#7k6I:#$@$K!"(B$B9qL1@83h%;%s%?!<(B$B$K$b(B$B@83h%K%e!<%M%C%H%^%,%8%s(B$B$K$b2?$b$"$j$^$;$s$M!#(B
$B$^$D$@$5$s!"1sF#$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
EFF$B!$!VJF(BAT$B!u(BT$B$NJF@/I\EpD0%W%m%0%i%`$X$N4XM?$rN"IU$1$k>Z5r$rDs=P!W(B
($BF|7P(B IT Pro, 4/10)
$B!U(B
$B%U%!%$%k6&M-%=%U%H$G46@w$r9-$2$k!V(BAlcan.B$B!W!$JF(BMS$B$N%D!<%k$G(B25$BK|7o6n=|(B
($BF|7P(B IT Pro, 4/10)$B!#(B
Antinny $B$K=iBP1~$7$?$H$-$O(B
11 $BK|Bf$N(B PC $B$+$i(B 20 $BK|0J>e$N0!$B$7$?$h$&$J$N$G!"$=$NG\0J>e$J$N$G$9$M!#(B
$B!U(B
$B%"%V%i%d%7!'!V4D6-$K$d$5$7$$!W$O8m2r@8$`!"JQ995a$a$k(B
($BKhF|(B, 4/10)$B!#(B$B!V%Q!<%`L}$O4D6-$K$d$5$7$$!W$H8@$o$J$$$G(B:
$B%i%$%*%s!V?7%H%C%W!W$N(BCM$B$K4X$9$kMW@A=q$rDs=P(B
($BCO5e!&?M4V4D6-%U%)!<%i%`(B, 4/7) $B$N$3$H$N$h$&$G$9!#(B
$B;}B32DG=$J86:`NAD4C#$K4X$9$kD4::Cf4VJs9p2q(B
($BCO5e!&?M4V4D6-%U%)!<%i%`(B, 2005.11, 12) $B$b4XO"$+$J!#(B
$B!V%"%V%i%d%7(B $B4D6-!W$G$0$0$k(B$B$@$1$G$b!"$$$m$$$m=P$F$-$^$9$M!#(B
$B!U(B
$BCT4A$($s:a(B (?) $BOC(B
$B!!EE
$B!U(B
$B9bB.A%;v8NOC(B
$B9bB.A%$,%/%8%i$H>WFM!)!!#9#3?M$,=E7Z=}!!
(asahi.com, 4/10)
$B9bB.A%$r1?9R$7$F$$$k&A%!Jh0w!&>h5R#1#1#4?M$N$&$A#9#3?M$,$1$,!">/$J$/$H$b#1#2?M$,4i$N9|$,@^$l$k$J$I$N=E=}$rIi$$!"#3#6?M$,F~1!$7$?!#(B
$B9bB.A%;v8N!'%/%8%i$H>WFM!)!!#9#3?M$1$,!! ($BKhF|(B, 4/10)
$B&A%$K$h$k$H!"9bB.A%$O;v8NEv;~!";~B.Ls#8#0%-%m$G9R9TCf$@$C$?!#(B
$B!!$$$^$I$-$NA%$C$F$=$s$J$KB.$$$N$+!#(B
$B$3$N2hA|(B$B$K$h$k$H!"$U$D$&$K(B 43 $B%N%C%H$N$h$&$@!#(B
$B9bB.A%;v8N!'B??t$N$1$,?M!"h5R$iA%Fb$N:.Mp8l$k(B ($BKhF|(B, 4/10)
$B;E;v$N$?$a
$B!!$&!<$`!#>WFM;~$N>W7b2r@O$H$+!"$5$l$F$$$k$s$@$m$&$+!#(B
$B1?M"6I(B $B%7!]%H%Y%k%HCeMQDLC#(B
(NHK, 4/10)$B!#$H$$$C$F$b!"$=$N%7!<%H%Y%k%H$O(B 3 $BE@<0$K$J$C$F$$$k$s$@$m$&$+!#%7!<%H4V5wN%$O==J,$"$k$s$@$m$&$+!#%A%c%$%k%I%7!<%H$O(B?
$B9bB.A%%H%C%T!<(B ($B&A%(B)$B!#(B
$BA%Fb!&@_Hw0FFb(B$B$r8+$F$b!"$I$s$J:B@J$J$N$+!"%7!<%H%Y%k%H$O$I$&$J$C$F$$$k$N$+!"$O$h$/$o$+$i$J$$$J$"!#(B
$B$0$0$C$F$_$k$H!"(B
$B%8%'%C%H%U%)%$%k!&9bB.A%%H%C%T!<(B (buttobi.net) $B$K2hA|$rH/8+!#(B3 $BE@<0$G$O$J$$$G$9$M!#%7!<%H4V5wN%$O$=$l$J$j$K$"$j$=$&(B?
$B$G$b!V=w@-$N@J$H$=$NA0@J!W$H!V=w@-$N@J$H$=$N8e@J!W$H$G$O!":B@J4V5wN%$,$:$$$V$s0c$&$h$&$J5$$,$7$J$$$G$b$J$$!#(B
$B!!$3$NOC(B:
$B!!(Bpatch $B$,$"$k$N$GE,MQ$9$l$P$h$$!#(B
$B!U(B
$B#B#S#EJ$,860xD4::7k2L$r8xI=(B
(asahi.com, 4/7)
$B!U(B
$B#9!#1$N#2G/8e!"@84Tc32(B
(asahi.com, 4/8)
$B!U(B
$B%m%0%$%C%H$,(BSnort$B%Y!<%9$N%;%-%e%j%F%#AuCV!$!V(BWinny$B%H%i%U%#%C%/$b8!CN!W(B
($BF|7P(B IT Pro, 4/5)
$B!U(B
$B%A%'%A%'%s%K%e!<%9(B Vol.06 No.07 2006.04.07
($B%A%'%A%'%s%K%e!<%9(B, 4/7)$B!#%W!<%A%sGn;NO@J8$M$DB$OC!"(B$B?M4V$N0BA4J]>c4p6b$K$h$k!V%A%'%A%'%s$N;yF8!&65;U$KBP$9$kE}9gE*%j%O%S%j$K78$k%-%c%Q%7%F%#! ($B30L3>J(B, 3/28) $BOC$J$I!#(B
$B!!$=$&$$$($P!"(B$BBgE}NN$N%+%&%s%H%@%&%s(B$B$H$$$&%m%7%"1G2h$,8x3+$5$l$F$$$k$N$@$=$&$G!#%9%H!<%j!<%P%C%/%0%i%&%s%I$,$*$b$$$C$-$j%A%'%A%'%s$M$?!#$J$K$7$m%m%7%"1G2h$J$N$GEvA3$J$,$i%A%'%A%'%s$O0-Lr!"F,$,DK$$!#(B
$B%m%7%"1G2h$J$i!"(B$B%J%$%H!&%&%)%C%A(B$B$r4Q$kJ}$,$$$$$+$b!#(B
eiga.com $B$N5-;v(B$B$b;2>H!#(B
$B!U(B
Keynote video from HITBSecConf2005
(F-Secure blog, 4/7)
$B!U(B
Cross platform virus PoC
(SANS ISC, 4/7)$B!#(BWindows / Linux $BN>BP1~$@$=$&$G!#(B
$B!U(B
phpBB 2.0.20 upgrade time
(SANS ISC, 4/7) $B$@$=$&$G$9!#(BphpBB $BMxMQ
$B!U(B
$B!T(B ESPIO! $B!U%&%#%K!$B!#(B
$B3N$+$K6=L#?<$$$G$9$M!#(B
$B!!:n@.;~4|$OITL@!#??
$B!!FC$K!VA\::4X78;v9`>H2q=q!W$N$_$G>H2q$KEz$($F$$$k%1!<%9$,CmL\$5$l$k!#$3$l$O!"Na>u$K$h$i$:!"7Y;!$,;ve<+M3$K>pJs<}=8$,9T$($k$3$H$r0UL#$7$F$$$k!#(B
$B!!(BOCN, DION, IIJ, hi-ho, interQ, YAHOO! Japan, $B!D!D$G$9$+!D!D!#(B
$B!VDL?.5-O?Ey$NJ]B84|4V!W$N9`$b6=L#?<$$$J$"!#(B
$B!U(B
$BF|K\!@(B($B!0(Bo$B!0(B)$B!?%*%o%?(B$B!#(BWinny $B$M$?!#$"!<$k$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
$B%i%$%U%+!<%I(BTV-CM $B!V%9%-%_%s%0$K5$$r$D$1$F!*!WJS(B 2006$BG/(B4$B7n(B2$BF|$h$jA49q$G%*%s%(%"3+;O(B
($B%i%$%U(B, 3/31) $B$@$=$&$G$9!#(Bwww.lifecard-safety.com
$B$b$I$&$>!#(B
$B!U(B
$BBh(B 15 $B2s%;%-%e%j%F%#2r@b(B (@police)$B!#1|E7;U>"H/8+!#(B
$B!U(B
Hilarious: 32 Farts are Better than One!
(securiteam blog, 4/7)$B!#(BNOD32 $B$G$9$+!D!D!#(B
$B!U(B
$BD;%$%s%U%k!'M\7\>l852qD9$r:FBaJa$X!!M[@-H?1~FO$1=P$:(B ($BKhF|(B, 4/7)
$B!U(B
$B#C#I#AMF5?.7?5!!"Bg:e$KHtMh!)(B
($BKhF|(B, 4/7)
$B!U(B
$B%$%s%IN&73;JNa41!"!V%0!<%0%k!&%"!<%9!W$rHsFq(B
(CNN, 4/4)
$B!U(B
$B2HC\DI@WD4::%7%9%F%`!"JF$,#0#9G/$N40@.L\;X$9(B
($BFIGd(B, 4/7)
$B!U(B
$B2_J*A%$K3$B1!"F|K\?MA%D9$iG{$j6/Ep!!%$%s%I%M%7%"2-(B
(asahi.com, 4/6)
$B!U(B
$B!V%9%H%C%W!"K=Av<+E>
(asahi.com, 4/6)
$B!U(B
$B%$%i%/@oAhJ}LL(B
$B!U(B
$B?M8"MJ8nK!0F!'BgI}=$@5$7MhG/:FDs=P$X!!K!Aj$,8!F$%A!<%`(B
($BKhF|(B, 4/7)$B!"(B
$B?M8"MJ8nK!0F!":#9q2qDs=PCGG0!&?y1:K!Aj(B
($BF|7P(B, 4/7)
$B!U(B
$B8D?M>pJsJ]8nK!!'8+D>$75a$a0U8+=qDs=P!!F|K\?7J96(2q(B
($BKhF|(B, 4/7)
$B!!(BWindows x 4 ($B:GBg(B: $B6[5^(B) + Windows / Office x 1 ($B:GBg(B: $B7Y9p(B)$B!#(B
$B:#7n$O!"4{Js$NDL$j!"%;%-%e%j%F%#%"%I%P%$%6%j(B 917077 $B$G8@5Z$7$F$$$k(B "CreateTextRange" $B$N@H
$B$^$?!"$3$N(B Internet Explorer $B$N99?7$K$O!"(BKB 912945 $B$G@bL@$7$F$$$k(B ActiveX $B$K4X$9$k@Hl9g$O!"(BCompatibility Patch $B$r%@%&%s%m!<%I%;%s%?!<$+$iF~l9g$O!"I,$:%;%-%e%j%F%#>pJs$N7Y9pMs$KL\$rDL$7$F$+$iE83+$9$k$3$H$r$*4+$a$7$^$9!#(B
$B!!$H$$$&$3$H$G!"(B
- security only $B$J>l9g$G$b(B IE ActiveX $B$,$i$_OC$OE,MQ$5$l$k(B
- $B$b$&$A$g$C$HM1M=$,$[$7$$?M$O(B Compatibility Patch $B$rE,MQ$9$k(B
$B$H$$$&$3$H$_$?$$$G$9$M!#(B
$B!!(BVeriSign $B$J?M$,$3$&8@$C$F$$$k$=$&$G$9(B:
VeriSign reports that many public-facing Web sites continue to implement an older and less secure version of VeriSign's popular security mark. Because the old VeriSign site seals were created and distributed prior to the rise of phishing, they did not contain the full set of anti-spoofing measures available in the newest version of the VeriSign Secured Seal.
$B!!$3$NOC$+(B: $B%Y%j%5%$%s(B $B%;%-%e%"%7!<%k$K$D$$$F(B (estore.co.jp $BAG:`%@%&%s%m!<%I(B)
2004$BG/(B11$B7n(B9$BF|$h$j!"%Y%j%5%$%s>N$b?7$?$K!V%Y%j%5%$%s(B $B%;%-%e%"%7!<%k!W$H$7$F%G%6%$%s$H5!G=$,JQ99$5$l$^$7$?!#(B
($BCfN,(B)
$B8m$C$?;HMQ$rKI;_$9$k$?$a!"%7!<%k$r7G:\$7$F$$$k%5%$%H$N%I%a%$%sL>$r%A%'%C%/$9$k5!G=$,F3F~$5$l$^$7$?!#$3$N5!G=$K$h$j!"!V%Y%j%5%$%s(B $B%;%-%e%"%7!<%k!W$N7G:\$,2DG=$J%Z!<%8$O!"%Y%j%5%$%s$N(BID$B$r
$B$3$NJQ99$K$H$b$J$$!"0JA0$N%Y%j%5%$%sr7o$H7G:\J}K!$r$*FI$_$$$?$@$-!"Aa$a$K?7$7$$!V%Y%j%5%$%s(B $B%;%-%e%"%7!<%k!W$XD%$jBX$($k$3$H$r$*4+$a$$$?$7$^$9!#(B
$B!!%7!<%kMQ%9%/%j%W%H$O!"(B
VeriSign Secured Seal Program
(VeriSign)
$B$d(B
$B%Y%j%5%$%s(B $B%;%-%e%"%7!<%k(B ($BF|K\%Y%j%5%$%s(B)
$B$G$D$/$l$^$9!#(B
$B!U(B
$BJF86H/G[4I$K%I%j%k7j!D8N0U$+2a<:$+!"#F#B#ID4::(B
($BFIGd(B, 4/5)$B!#9k2w$@$J$"!#(B
$B!U(B
$B!V%3%3%m%0!WIT6q9g!"
(ITmedia, 4/4)
$B!U(B
$B%t%$%(%`%&%'%"!"2>A[%^%7%sMQ%G%#%9%/%U%)!<%^%C%H$r%*!<%W%s2=(B
(Enterprise Watch, 4/4)$B!#(B
$B!U(B
$B%^%$%/%m%=%U%H44It!"!V%^%k%&%'%"46@w$+$i$NI|5l$OIT2DG=$K$J$j$D$D$"$k!W(B (ITmedia, 4/5)$B!#(B
$BDA$7$$$3$H$K!"(BMicrosoft$B$,(BWindows$B%^%k%&%'%"$,0z$-5/$3$9LdBj$N4m81@-$K$D$$$F8}$r3+$$$?!#F1uBV$+$iI|5l$9$k8=
($BCfN,(B)
$B!!!V8!CN$O:$Fq$@$7!"I|5l$K;j$C$F$OIT2DG=$J>l9g$,$^$^$"$k!W$H!"F1;a$OCG8@$7$F$$$k!#$^$?!"!V%^%k%&%'%"$,%7%9%F%`$r%/%i%C%7%e$5$;$?$j!"%U%j!<%:$5$;$?$j$7$J$$$H$9$l$P!"$=$NB8:_$r$I$&$d$C$FGD0.$7$?$i$h$$$N$@$m$&$+!#$3$l$K$O!"GD0.$7$h$&$,$J$$$H$$$&Ez$($7$+=P$;$J$$!#B?$/$N>l9g!"46@w$,5/$3$k=V4V$rL\7b$9$k$3$H$O$J$$$7!"%^%k%&%'%"$N:/@W$r3NG'$7$?$j!"%P%C%/%0%i%&%s%I$GF0:n$7$F$$$k$N$rL\$K$7$?$j$9$k$3$H$b$J$$!W$H$$$&!#(B
$B!U(B
$B!V;3ED%*%k%?%M%$%F%#%V!W$NF0:n$rCN$k(B
(ITmedia, 4/4)$B!#L>A0$K$3$@$o$C$F$^$9$M!#(B
$B!U(B
$B3$30>pJs%;%-%e%j%F%#4XO"J8=q$NK]Lu!&D4::8&5f!J(BNIST$BJ8=q$J$I!K(B
(IPA ISEC) $B$G(B NIST SP 800-53 Annex1$B!A(B3 $B$NK]LuJ8=q$,8x3+$5$l$F$$$^$9!#(B
$B!U(B
$B$3$l$G$$$$$N$+!)(B $B%V%m%0@$3&$NM}IT?T$JL$@.=O$5(B
($BF|7P(B BP, 4/4)$B!#%9%?!<%8%g%s$NK!B'$,@.N)$7$F$$$k$@$1$J$N$G$O!#%V%m%0$K:,5r$N$J$$4|BT$r$9$kJ}$,4V0c$C$F$k$7!#(B
$B!U(B
$B!V>pJs%7%9%F%`$N?.Mj@-8~>e$K4X$9$k%,%$%I%i%$%s!J0F!K!W$KBP$9$k0U8+Jg=8$K$D$$$F(B
($B7P:Q;:6H>J(B, 4/4)$B!#F?L>4uK>$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!!%$%s%9%H!<%k$9$k$HIT9,$K$J$k$3$H$,$"$k$h$&$G$9!#(B
SAVCE 10.0.2 MR2 MP1$B!"(BSCS 3.0.2 MR2 MP1 $B$r%$%s%9%H!<%k$9$k$H!"0J2<$N%(%i!<$,H/@8$7$F0lIt$N4D6-$G%5!<%P!<%0%k!<%W$K%"%/%;%9$9$k$3$H$,$G$-$^$;$s!#(B
($BCfN,(B)
$B$9$G$K(B SAVCE 10.0.2 MR2 MP1$B!"(BSCS 3.0.2 MR2 MP1 $B$r%$%s%9%H!<%k$7$FK\>c32$,H/@8$7$F$$$k$*5RMM$O!"$3$NLdBj$r2r7h$9$k$?$a$K$47@Ls$N%5%]!<%H%;%s%?!<$^$G$4O"Mm$/$@$5$$!#(B
($BCfN,(B)
$B%7%^%s%F%C%/$O!"(BSAVCE 10.0.2 MR2 MP1$B!"(BSCS 3.0.2 MR2 MP1 $B$N=$@59`L\$r4^$s$@(B SAVCE 10.0.2 MR2 MP2$B!"(BSCS 3.0.2 MR2 MP2 $B$r!!(B2006$BG/(B4$B7n>e=\:"$K%j%j!<%9$9$kM=Dj$G$9!#(B
2006.04.18 $BDI5-(B:
$B!!(B4/14 $BIU$G?7HG$,8x3+$5$l$?$h$&$G$9(B: SAVCE 10.0.2 MR2 MP1$B!"(BSCS 3.0.2 MR2 MP1 $B8x3+Cf;_$N$*CN$i$;!J(B2006$BG/(B4$B7n(B14$BF|99?7!K(B $B$h$j(B:
$B%7%^%s%F%C%/$O!"$3$NLdBj$r=$@5$7$?(B MR2 MP1/MR2 MP2 $B$r%j%j!<%9$7$^$7$?!#:G?7HG$N%7%^%s%F%C%/%(%s%?!<%W%i%$%:@=IJ$NF~H$/$@$5$$!#(B
$B%7%^%s%F%C%/(B $B%(%s%?!<%W%i%$%:@=IJ$N:G?7%P!<%8%g%s$NF~
$B!U(B
$BElBg!"Bh0l
(Internet Watch, 4/4)$B!#$[$)$)!#(B
$B!U(B
$B%Q%:%k!&%Q%l%9(B ($B>e(B)$B!#(B
$B$I$3$+$G8+$?$h$&$JCx$@$H;W$C$?$i!"%@!&%t%#%s%A!&%3!<%I$N?M$G$9$M!#(B
$B%Q%:%k!&%Q%l%9(B -- $BD6%9%Q%$5!4X(BNSA$B$NA4KF(B
$B$H$OJL$NK\$J$N$GCm0U(B ($B%V%i%&%sK\$N86Bj$O(B DIGITAL FORTRESS $B$@$7!D!D(B)$B!#%P%`%U%)!<%IK\$rGc$&>l9g$O!"(B
$B$9$Y$F$OK5c6I$N@5BN(B
$B$NJ}$,FbMF$,?7$7$$$G$9!#(B
$B!!(B$BI>H=$h$/$J$$$J$"(B > DIGITAL FORTRESS$B!#(B
$B!U(B
$B%^%9%3%_$H>pJs<}=82H$,0-2=$5$;$k!V(BWinny$BLdBj!W(B
($BF|7P(B IT Pro, 4/3)$B!#$3$l$@$1JsF;$5$l$l$P!"$U$D$&$OF0$+$7$?$/$J$j$^$9$h$M$(!#(B
Winny$B%&%$%k%9$K$D$$$F$O!$$=$NHo32$r>\$7$/Js$8$l$PJs$8$k$[$I!$?7$?$JHo32
$B!!%a%C%;!<%8$,0-$$$s$8$c$J$$$N$+$J$"!#!V$I$&$7$F$b(B Winny $B$r;H$$$?$$$N$J$i!"(BWinny $B@lMQ$N(B PC $B$rMQ0U$7$^$7$g$&!W$H$+$NJ}$,$$$$$N$G$O!#(B
$B?N5A$J$-%-%s%?%^!&%r%A%D!<%k(B ($B?N5A$J$-%V%m%0(B)
$B$NJ}$,$b$C$H>\$7$$$G$9$1$I!#(B
$B!U(B
$B%"!<%/%s!"Ls(B80$B
(Internet Watch, 4/4)
$B!U(B
Winny $B7PM3>pJsN.=P4XO"(B
$BKL3$F;IpB"=w;RC;4|Bg3XJ}LL(B:
$B30It$K=P$9%F%9%H%G!<%?$K0B0W$KK\J*$r;H$&$N$O$d$a$^$7$g$&!#(B
$B0&I28)7Y$,2M6uA\::Js9p=q!!%&%#%K!<$GN.=P(B
(asahi.com, 4/4)
$B!!0&I28)7YA\::#12]$NCK@-7YIt!J#4#2!K$N;dM-%Q%=%3%s$+$i%U%!%$%k8r49%=%U%H!V%&%#%K!pJs$J$I$,%$%s%?!<%M%C%H>e$KN.$l$?LdBj$G!"N.=P$7$?A\::Js9p=q$NCf$G#0#2G/$KL$2r7h;&?M;v7o$N>pJs$rDs6!$7$Fp$r$^$C$?$/D0$+$l$F$$$J$+$C$?$3$H$,#3F|!"4X78Z8@$GJ,$+$C$?!#A\::Js9p=qDL$j$KA\::Js=~Hq$,;YJ'$o$l$F$$$l$P!"
$B!U(B
$B4Z9q$G8D?M>pJs#7#7#1K|?MJ,N.=P!"%M%C%H2CF~$N#63d6/(B
($BFIGd(B, 4/3)
$B!U(B
$B3+H/ ($B6b>2$5$s(B)
$B$N8x3+$,Cf;_$5$l$F$7$^$C$?!#$=$NM}M3$H$$$&$N$,!"(B
$B$3$N%3%a%s%H(B$B$J$N$@$=$&$@!#(B
$B$O$!!D!D!#(B
$B!!$H$3$m$G!"!V%T%C%-!<$J?M!W$C$F$I$&$$$&?M(B?
$B!U(B
Yahoo! JAPAN$B!"JF%/%i%j%"!"%=%U%H%P%s%/$N(B3$B (Yahoo, 4/3)$B!#(B
$B!c(BCLARIA CORPORATION$B!J%/%i%j%"%3!<%]%l!<%7%g%s!K!d!!(Bhttp://www.claria.com/
1998$BG/@_N)$N%/%i%j%"$O%*%s%i%$%s9TF0%^!<%1%F%#%s%0$*$h$S%&%'%V$N%Q!<%=%J%k2=5;=Q$N%j!<%@!<5Z$S%Q%$%*%K%"E*$JB8:_$G$9!#%/%i%j%"$NFCM-5;=Q$G$"$k9TF0%^!<%1%F%#%s%0%W%i%C%H%U%)!<%`$O!">CHqe$G$NSO9%$K=`$8$F%+%9%?%^%$%:$5$l$?%[!<%`%Z!<%8$r<+F0E*$K@):n!&4IM}$9$k!V(BPersonalWeb$B!W%5!<%S%9$N4p$H$b$J$C$F$$$^$9!#%/%i%j%"$OJF9q%+%j%U%)%k%K%"=#%l%C%I%&%C%I$rK\
$B!!(BCLARIA CORPORATION $B$C$F!D!D(B Gator $B$G$9$h1|$5$s(B!
$B$@$$$8$g$&$V$J$N$+(B Yahoo! JAPAN$B!#(B
$B!U(B
au$BEEOC(B [W41H ($BF|N)@=(B)] $B$r$4MxMQCf$N$*5RMM$X$N$*OM$S$H$*4j$$(B
(KDDI, 4/4)$B!#%^%$%J!<%H%i%V%k$,H/@8$7$F$$$k$h$&$G!#(B
$B!U(B
Kaspersky$B!"!V(BWinny$B!W$r%j%9%/%&%'%"$H$7$F8!CN(B
(japan.internet.com, 3/29)$B!#@>H*$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!!%^%+%U%#!<$N(B Extra.dat $B$b$=$&$$$&$b$N$N$h$&$G$9(B:
Winny$BBP:vMQ(BExtra.dat$B$K$D$$$F$N(BQ&A
($B%^%+%U%#!<(B) $B$K$h$k$H!"$5$s$6$s@_Dj$7$?>e$G!VIT@5$J2DG=@-$N$"$k%W%m%0%i%`!W$H$7$F8!=P$5$l$k$h$&$G$9!#(B
$B!U(B
$BF|K\%Y%j%5%$%s!$%;%-%e%j%F%#>pJs$NG[?.%5!<%S%9$rDs6!3+;O(B
($BF|7P(B IT Pro, 4/3)$B!#(BiDefense $B%Y!<%9$N$h$&$G$9!#(B
$B!U(B
$B%^%$%/%m%=%U%H!$!V(BVirtual Server 2005 R2$B!W$rL5=~$K(B
($BF|7P(B IT Pro, 4/3)$B!#$-$F$^$9$M$(!#(B
$B!U(B
[Announce] GnuPG 1.4.3 released
(gnupg.org)$B!#(Biida $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#$$$m$$$m5!G=$,A}$($?$j$7$F$$$k$h$&$G$9$,!"8D?ME*$K$O$3$l$+$J(B:
Added "gpg-zip", a program to create encrypted archives that can
interoperate with PGP Zip.
$B!!(BMac OS X 10.4.6 $B$,EP>l!#(BIntel Mac $B$K$*$$$F!"%U%!!<%`%&%'%"%Q%9%o!<%I$,2sHr$5$l$k7g4Y$,=$@5$5$l$F$$$k$=$&$G$9!#(B
CVE: CVE-2006-0401
$B!!$3$s$JJ8;zNs$,!D!D(B
Version 1.4.7 - CVS
-------------------
- Security: Possible cookie theft in src/redirect.php if
register_globals is enabled, and malicous site is running
in same domain.
$B!!(BBarracuda Spam Firewall
$B$K$*$1$k!"(Bzoo / lha $B%"!<%+%$%V$N07$$$K7g4Y!#(B
$B!!(Bzoo $B$O$H$b$+$/!"(Blha $B$O(B 2 $BG/A0$NOC$@$+$i$J$!!D!D(B
$B!!$I$A$i$bBP:vHG$,=P$F$$$^$9$N$G!"E,MQ$9$l$P$h$$$G$9!#(B
$B!U(B
$B%W%i%$%P%7!<%^!<%/@)EY$K$*$1$k7g3J@-$NH=CG4p=`$N@_Dj$H1?MQ$K$D$$$F(B
(JIPDEC $B%W%i%$%P%7!<%^!<%/;vL36I(B, 3/31)$B!#(B
$B7g3J%l%Y%k$,(B 5 $B0J>e$K$J$k$H!VG'DjC$7!W$@$=$&$G$9!#(B
$B!U(B
Winny$B0-MQ%&%$%k%9@lMQ6n=|%D!<%k(B
($B%H%l%s%I%^%$%/%m(B) $B$,8x3+$5$l$F$$$^$9!#(B
$B!U(B
$BBh(B 10 $B2s(B $B%3%s%T%e!<%?HH:a$K4X$9$kGrIM%7%s%]%8%&%`(B$B!#(B
2006.05.25$B!A(B27$B!"OB2N;38)EDJU;T!"%7%s%]%8%&%`;22CHq(B 10,000 $B1_!#(B
$B0BED$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
$BJs9p=q!V(BIPv4$B%"%I%l%98O3i$K8~$1$?Ds8@!W8x3+$K$"$?$C$F(B
(JPNIC, 4/3)$B!#$$$h$$$h8=
$B!U(B
$BN/$C$F$$$?%a!<%k$rFI$s$G$$$k$H$3$m$J$N$@$,!"(B
Microsoft MVP $BJ}LL$N!"$H$F$b6=L#?<$$0F7o$N%a!<%k$rFI$_F($7$F$$$?$3$H$rH/8+!#$7$+$bDy@Z2a$.$F$k$7!#(Borz
$B!U(B
$BB3!&?<9o$J%7%9%F%`$N0z$-7Q$.LdBj(B
($BF|7P(B IT Pro, 3/27)$B!#(B
$B%I%-%e%a%s%H$O=EMW$J$N$G$9$,!"K;$7$/$J$k$H$^$::o$i$l$k$N$,%I%-%e%a%s%H$N$?$a$N;~4V$J$s$@$h$J$"!#(B
$B!U(B
Winny ($B%&%#%K!<(B)$B$O;H$o$J$$!*;H$o$;$J$$!*(B
($B%;%-%e%j%F%#%m%0(B)$B!#(BAntinny / Winny $BBP:v%D!<%k$N$^$H$a!#@>H*$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#$?$@$7!"A4$F$,4^$^$l$F$$$k$o$1$G$O$J$$$N$GCm0U!#(B
$B!U(B
ISP $B5,@)>pJs(B Wiki
(oshietekun.net)$B!#(BWinny $B$KBP$9$k5,@)>u67$N$^$H$a!#(B
$B%H%i%U%#%C%/$K$D$$$F$O4{$K$$$m$s$J$H$3$m$G9J$C$F$k$H$$$&$3$H$J$N$+$J!#(B
$B!!(BWinny $B$K$D$$$F$O!"$^$:$O!VCx:n8"K!$K0cH?$7$F$$$kMxMQ$K8!5s!W$9$k$N$,6Z$@$H;W$&$s$G$9$1$I$J$"!#D4$Y$i$l$J$$$o$1$G$O$J$$$s$G$9$h$M(B?
$B!U(B
$B%U%#%C%7%s%0LdBj$OI=LL2=$7$F$$$J$$$@$1(B -- $B%;%-%e%"%V%l%$%s@1_7;a(B
(ITmedia, 3/31)
$B!U(B
$BB>?M;v$G$O$J$$!)!!!V%o%s%/%j%C%/%&%'%"!W$N
(ITmedia, 3/31)
$B!!:y0fJ[8n;N$O!"%o%s%/%j%C%/:>5=$K$D$$$F!VHs9gK!$J$b$N$r8+$;$F;YJ'$$$r@A5a$7$F$b7@Ls$O@.N)$7$J$$!#K!$GJ]8n$5$l$k$Y$-:D8"$OH/@8$7$J$$!W$H!"$3$&$7$?@A5a$OHs9gK!$G$"$k$H;XE&!#$5$i$K%9%Q%$%&%'%"$K$D$$$F$O!V$b$N$NK\Mh$NMQK!$rB;$J$o$;$k$H$$$&0UL#$G4oJ*B;2u$KEv$?$j!"==J,]$K$J$k!#$^$?!"$3$l$rMQ$$$F$*6b$r:>5=:a$KEv$?$k!W$H=R$Y$?!#(B
$B!!$7$+$7!":#$N$H$3$m==J,$J/$J$/!"$+$DAj$rD4$Y$k$N$,LLE]$@$+$i!W$H:y0f;a$O8@$&!#$7$+$7!"!V@$4V$G!X$3$&$7$?LdBj$O
$B!!(BAN HTTPD
1.42n $B0JA0$K7g4Y!#30It$+$i%9%/%j%W%H%U%!%$%k$N%=!<%9$r
- $B!V(BRFID$B%?%0$b%&%$%k%9$K46@w$9$k2DG=@-$"$j!W!$%*%i%s%@$N8&5f
-
$B!!:j;3$5$s$+$i(B ($B>pJs$"$j$,$H$&$4$6$$$^$9(B: $B>R2p$,CY$/$F$9$$$^$;$s(B)
Cambridge$BBg(BCSG$B%V%m%0$K(BFrank Stajano $B$5$s$,=q$$$F$$$k$H$3$m$K$h$k$H(B
http://www.lightbluetouchpaper.org/2006/03/16/cat-with-computer-virus/
$B^$7$?$N$O(B "best paper for high impact$B!I(B (RFID Virus $B$N%Z!<%8$@$H(B
"the Best Paper Award for Most Impact" )$B$H$$$&!"$3$NO@J8$NH?6A$r4U$_$FB(@J$G:n$i$l$?>^$G!"(BPerCom $B$N;vA0$KM=Dj$5$l$F$$$?(B Best Paper $B>^(B $B$KAjEv$9$k(B
"Mark Weiser award" $B$O!"JL$NO@J8$KBP$7$FB#$i$l$?!"$H$$$&$3$H$N$h$&$G$9!#(B
$B!!>e5-$K$"$o$;$F5-=R$r=$@5$7$^$7$?!#(B_o_
$B!U(B
$B7Y;!D#!!;&?M0MMj$d=F4oGdGc!D0cK!!&M-32%5%$%H!"!V%[%C%H%i%$%s!W$G4F;k(B
($BKhF|(B, 3/30)
$B!U(B
Virtual Machine-based Rootkits
(WindowsIT Pro, 3/22)$B!"(BSubVirt: Implementing malware with virtual machines
(umich.edu)
$B!U(B
$B>pJs%;%-%e%j%F%#4IM}$N?74p=`!V(BISO27001$B!W$NG'>Z$r
$B$N7o$J$N$G$9$,!"(B
- ISMS 2.0
$B$O(B BS7799-2:2002$B!J1QJ8!K$r%Y!<%9$H$7!"(BJIS X 5080:2002 $B$NMQ8l$rMQ$$$FI=8=$7$?$b$N!#(BJIS X 5080:2002 $B$O(B ISO17799:2000 $B$KBP1~$9$k!#(B
- ISO27001:2005 $B$O(B BS7799-2:2005 $B$G$"$j!"(BISO17799:2005 $B$KBP1~$9$k!#(B
- ISMS 2.0 $B$O(B JIS Q 27001 (ISO27001) $B$K$h$kG'>Z$K0\9T$9$k(B:
$BG'>Z4p=`$N(BISO/JIS$B2=$KH<$&BP1~$K$D$$$F(B (JIPDEC, $B:G=*99?7(B 2006.04.01)
$B$H$$$&$3$H$_$?$$$G$9!#$^$C$A$c$@$$$U$/$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B4XO"(B: UKAS$B$,(BISO/IEC 27001:2005$B$N0\9T;X?K$rH/I=$7$^$7$?(B
(BSI $B%8%c%Q%s(B)
$B!U(B
$B%j!<%\%C%/1t$M$?(B$B!#(B
$B1t4^M-$N%V%l%9%l%C%H2s<};X<(!!JF9q$GMD;y$N;`K4Nc(B
$B$NOC!#(B
$B!!?y86$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
Systrace
1.6a $B$,=P$F$$$^$9!#(B
$B!U(B
$B%A%c%$%k%I%7!<%H6b6q!"?7
(asahi.com, 4/2)
$B!U(B
$B%3%3%m%0$N;EMM2~0-$K$_$k!"(B@nifty$B$K$h$k;k3P>c37
(hoshikuzu | star_dust $B$N=q:X(B, 4/1)$B!#(B
CAPTCHA $B$K$O=EBg$JI{:nMQ$,$"$k$o$1$G!#(B
$B!U(B
$B%$%s%?%S%e!
(japan.linux.com, 3/31)
$B$3$3$G4:$($F8@$o$;$F$b$i$$$^$9!#(BOpenSSH$B$K7g4Y$,8+$D$+$j!"$=$l$,(BSunSSH$B$K0z$-7Q$,$l$F$$$?$H$7$F$b!"(BSun$B$K$O65$($^$;$s!#$R$g$C$H$9$k$H!"$=$&$7$?7g4Y$,$9$G$K$"$k$+$b$7$l$^$;$s!#(B
$B!U(B
F-Secure first to make the Internet as safe as Moominvalley
(F-Secure, 3/31)$B!#%`!<%_%s(B UI$B!"1Q8lHG$b$A$c$s$H$"$k$h$&$G$9!#(B
"The world is a very exciting place", says Moominpappa, the modest patriarch of the Moomin family, "and it is good to go and explore it, and learn more about it. But you should be cautious, and remember that it is better to be safe than sorry." Good advise indeed, considering the increased activity around the internet, which is a bit like the electrical charge around Hattifatteners in a thunderstorm.
$B!U(B
$B%G%8%?%k(I%$B%U%)%l%s%8%C%/$K4X$9$k%o!<%/%7%g%C%W(B(2006.3.27$BEl5~!&%0%i%s%I%"!<%/H>B"Lg(B)
($B>e86E/B@O:(B, info from tessy$B$NF|5-(B)
$B!U(B
CSRF $BJ}LL(B
$B!!4XO"$7$F!"(BSea Surfers ML (freeml)
$B$,$G$-$F$$$^$9!#(B
$B!U(B
$B9q2H$,G'Dj$9$k%S%s%F!<%8IJ%j%9%H(B?
(slashdot.jp, 3/31) $B$+$i!"(B$B%j%9%H0J300l@Z$rG'$a$J$$Lu$G$O$J$$(B (slashdot.jp, 3/31)$B!#(B
$BFCJL>5G'@)EY!J$$$o$f$k%S%s%F!<%8$b$N$NFCJL>5G'!K(B ($B7P;:>J(B)
$B$O$D$^$j!"!V$H$K$+$/$I$s$I$s%j%9%H$K:\$;$k$N$G>pJs$A$g$&$@$$!W$H$$$&%9%-!<%`$J$N$+(B?
$B!!$^$?!"!V(B$B3Z4oEy0lMw(B$B!W$K7G:\$5$l$F$$$J$$EE5$3Z4oEy$K$D$$$F$b!"?=@A$N:]$KD:BW$7$?$40U8+$K4p$E$$$F!"=g$B3Z4oEy0lMw(B$B!W$KDI2C$7$F$^$$$j$^$9!#(B
$B!!$J$s$+$b$&!"(B$B5f6KL?Bj!V%P!<%?%j!$B$=$N$b$N$C$F$+$s$8!#(B
$B!!$"$H!"(Bhttp://pc8.2ch.net/test/read.cgi/dtm/1143199126/191 $B$+$i$^$k$^$k0zMQ(B:
191 $B!'L>L5$7%5%s%W%j%s%0!w(B48kHz$B!'(B2006/03/30($BLZ(B) 00:50:51 ID:DI+tw/+r
$B!J(BKKK$B$,=P$7$??7J99-9p$K!KEE5$MQIJ$NIT6q9g$,860x$G!"J?@.(B16$BG/$K$O(B
$B!VLs(B1000$B7o$N;v8N$,H/@8$7$F$$$^$9!#!W(B
$B$H=q$$$F$"$j$^$9!#(B
$B:#!"LdBj$K$J$C$F$$$k$N$OCf8E$NEE5$MQIJ$G$9$+$i!"$3$N(B1000$B7o$H$$$&?t;z$O!"(B
$BG!2?$K$bCf8E$K4X$o$k?t;z$N$h$&$K46$8$kLu$G$9$,!"$3$l$O!V$4$^$+$7$N?t;z!W$G$9!#(B
$B7P;:>J$,=PE5$K$7$F$$$kFHN)9T@/K!?M@=IJI>2A5;=Q4pHW5!9=$N!"J?@.(B16$BG/EY!V;v8N>pJs<}=8@)EYJs9p=q!W$rD4$Y$F$_$^$7$?!#(B
http://www.jiko.nite.go.jp/reports/H16/toukeiH16.html
$B2HDmMQEE5$@=IJ$NJ?@.(B16$BG/EY$N;v8NJs9p7o?t$O!"3N$+$K(B1,024$B7o$G$9!#(B
$B"-"-"-"-"-"-"-"-"-"-"-"-"-"-"-"-"-"-"-"-"-"-"-"-"-"-"-"-"-"-"-"-"-"-"-(B
$B$7$+$77PG/Nt2=$$$o$f$k!VCf8E!W$G$"$k$3$H$K5/0x$9$k;v8N$O!"(B
22$B7o$7$+$J$/!"$=$N$&$A99$K?ME*Ho32!J;`K4!&=E=}!&7Z=}!K$,H/@8$7$F$$$k;v8N$O(B0$B7o$G$9!#(B
$B",",",",",",",",",",",",",",",",",",",",",",",",",",",",",",",",",",",(B
$B$3$NJs9p$+$iJ,$+$k$3$H$O!"7PG/Nt2=$rM}M3$H$7$F(BPSE$B%^!<%/$rE=IU$9$k$3$H$r(B
$B6/@)$9$kN)K!;v
http://blog.goo.ne.jp/kawauchi-sori/e/4a41f1afaac539c5acea23aadb7168e5
$B!!(Bhttp://pc8.2ch.net/test/read.cgi/dtm/1143199126/192-193
$B$b6=L#?<$$!#(B
$B!U(B
$BL1
($BKhF|(B, 3/31)$B!#:G8e$^$G$I$?$P$?$@$J$"!#(B
![[$B%;%-%e%j%F%#%[!<%k(B memo]](/%7Ekjm/security/memo/sechole-memo.gif)
$B;d$K$D$$$F(B