$B%;%-%e%j%F%#%[!<%k(B memo - 2006.05
Last modified: Sun Jul 30 22:11:19 2006
+0900 (JST)
$B!!$3$N%Z!<%8$N>pJs$rMxMQ$5$l$kA0$K!"(B$BCm0U=q$-(B$B$r$*FI$_$/$@$5$$!#(B
$B!U(B
$B%G!<%?%;%s%?!<$+$i(BHDD 30$BBf$,>C$($?;v7o$G!"4IM}2q (Internet Watch, 5/30)
$B!U(B
NTT$B@>F|K\OB2N;3;YE9!"8w2s@~9);v$r?=$79~$s$@8\5R>pJs$,!V(BShare$B!W$GN.=P(B
(Internet Watch, 5/31)$B!#$"$$$+$o$i$:$G$9$+!#(B
$B!U(B
$B$D$V$5$l$k#C#I#A(B (tanakanews.com, 5/30)
$B!U(B
$BIT@5%"%/%;%9!V@55A46$G!W$H<`NL!!9b9;65M!H=7h$G:[H=41(B
(asahi.com, 5/30)$B!#Ho9p$,
$B!U(B
$B$3$l(Bdo$BBf(BMASTER$B!'(BKD25/35MA
($B%;%s%A%e%j!<(B)$B!#$$$D$N$^$K$+!"$3$s$J$K5!G=$,A}$($F$$$?$s$G$9$M!#(B
$B"!(B PC$BL5$7$G(BHDD$B$N%3%T!<:n@.$d!"%G!<%?>C5n$,2DG=(B!! PC$B$K@\B3$7$F30IU(BHDD$B$H$7$F;HMQ2DG=(B!!
$B"!(B $B?75!G=DI2C$G!"(B8$B$D$N%b!<%I(B!!2.5"HDD$B!"(B3.5"HDD$B$K2C$(!"$=$l$>$l$N(BSATA HDD$B$b;HMQ2DG=(B!!
$B"!(B $B?75!G=!X%Q!<%F%#%7%g%s%3%T!
$B"!(B LCD$B%Q%M%k$GA`:n>u67$,0lL\$GJ,$+$k(B!!$B!!%(%i!<%9%-%C%W5!G=IU$-(B!!
$B!U(B
$BF|K\H/$G@$3&=i!"%*!<%W%s%=!<%9$N1?MQ4IM}%D!<%k$,K\3JN%N&(B
($BF|7P(B IT Pro, 5/30)
$B!U(B
14$B:P>/G/$,;H$C$?%U%#%C%7%s%0:>5=$NpJs$r:q
($BF|7P(B IT Pro, 5/30)$B!#(B
$B#1#4:P!"%U%#%C%7%s%0MF5?$G=qN`Aw8!!!L$@.G/
(asahi.com, 5/30) $B$NOC!#(B$B%O%s%2!<%`(B$B$G$9$+!#(B
$B!!4XO"(B: NHN Japan$B!"L$@.G/
(Internet Watch, 5/30)
$B$J$*!"(BNHN Japan$B$G$O;v7oD>8e!"1?1D%9%?%C%U$N%"%P%?!<%Q!<%D$rIT@5$KI=<($G$-$kLdBj$r=$@5$7$?!#(B
$B!U(B
$B%7%9%F%`JQ99$N!HI>2A!I$,2DG=$K(B---Tripwire Enterprise$B$,9qFb=i=P2Y(B
($BF|7P(B IT Pro, 5/31)
$B!U(B
$B%5%$%l%C%/%9!&%F%/%N%m%8!uBV$K:81&$5$l$J$$;XLfG'>ZAuCV$r=P2Y(B
($BF|7P(B IT Pro, 5/31)$B!#%0%_;X$O(B?
$B!U(B
$BFC=8!'!ZK\Ev$K$"$C$?I]$$OC![?.Mj$O0l=V$K$7$FJx$l$k!JBh#12s!K(B
($BF|7P(B BP, 5/30)$B!#(B
$BEl2#%$%s$NGd>e$2$C$F!"
$B!U(B
$B%H%l%s%I%^%$%/%m(B InterScan Messaging Security Suite$B!"(B
5.11 patch4 $B$,=P$F$$$?$s$G$9$M!#8+F($7$F$$$?!D!D(B orz
$B!U(B
ICMPScan
$B$H$$$&%D!<%k$,$"$k$=$&$G!#(B
$B!U(B
$B6&KE:aJ}LL(B
$B!U(B
$B!V9qL17r9/J]81D#!W$rL>>h$kIT?3$JFDB%>u$K$4Cm0U$/$@$5$$(B
($B8|@8O+F/>J(B, 5/30)$B!#(BSEAWorks $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
Ikeda $B$5$s$+$i(B ($B>pJs$"$j$,$H$&$4$6$$$^$9(B)
Windows XP Home Edition $B$G$O%;%-%e%j%F%#5!G=$,$J$$$H$$$&$N$O4V0c$$$G$9!#(B
$B8=\:Y$J%Q!<%_%C%7%g%s$rJQ99$9$k$C$F!"(BCACLS $B$J$I$N%3%^%s%I%i%$%s$+$i$NJQ99$J$I$O0MA3M-8z$G$9!#$?$@!"(BCACLS $B$G$O
$B!!$&!<$s!D!D!#$J$K$7$m(B XP Home $B$J$N$G$9$+$i!"5;=QE*$K$O!VI8=`$N(B GUI $B$+$i%U%!%$%k$N>\:Y$J%Q!<%_%C%7%g%s$rJQ99$9$k
$B!U(B
$B4Z9q!"FHEg6a3$$N3$DlCOL>EPO?$r:FEY?d?J$X(B
($BD+A/F|Js(B, 5/30)$B!#3$>eJ]0BD#!"C]EgA0?J=`Hw$;$h(B?!
$B!U(B
$B$J$<%U%#%C%7%s%0$K$@$^$5$l$k$N$+!)(B
($BF|7P(B IT Pro, 5/31)$B!#@8>pJs$r1#JC$7$h$&$H$9$k$+$i$@$H;W$&$1$I$J$"!#(B
$B@8>pJs$r1#JC$7$h$&$H$9$l$P$9$k$[$I!"%@%^$5$l$d$9$/$J$k!#(B
$B!U(B
$BJF9q$X$NN95R5!8D?M>pJs$NDs6!$O0cK!!"#E#U;JK!:[(B
(CNN, 5/30)
$B!U(B
$B:k6L$j$=$J6d9T!"IT@5=P6bHo32$r3NG'(B--$B%9%Q%$%&%(%"$,860x$+!)(B
($BF|7P(B IT Pro, 5/30)
$B!U(B
A Windows Server 2003 SP1-based computer rejects incoming network connections when the computer experiences heavy network traffic
(Microsoft)$B!#(BThis problem usually occurs when the computer experiences more than 1 gigabyte (GB) of network traffic
$B$@$=$&$G!#M-=~%5%]!<%H$+$i(B patch $B$,=P$F$$$^$9!#(B
$B!U(B
You cannot install software update 898461 in Windows XP
(Microsoft)$B!#(B%windir%:\Windows\System32\Spupdsvc.exe $B$KLdBj$,$"$k$H$=$&$$$&$3$H$K$J$kLOMM!#(B%windir%:\Windows\System32\Spupdsvc.exe $B$r%j%M!<%`$9$k$H2r7h$9$k$=$&$J!#(Bsoftware update 898461 $B$K$D$$$F$O!"(BKB898461 $B$r;2>H!#(B
$B!U(B
$B%"%`%M%9%F%#$,%M%C%H8!1\$KH?BP$9$k%-%c%s%Z!<%s$r3+;O(B
(slashdot.jp, 5/30)
$B!U(B
$BCf9qEE5$DL?.K!Na(B: $B!V>&MQ0E9f4IM}>rNc!W!J>6Lu!K(B
(NTT Com)$B!#(Byasu $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!!Bh(B15$B>r!!6-30AH?%$^$?$O8D?M$,Cf9q9qFb$G;HMQ$9$k0E9f@=IJ$^$?$O0E9f5;=Q$r4^$`@_Hw$r;HMQ$9$k>l9g$O!"I,$:9q2H0E9f4IM}5!9=$NHc=Z$r7P$J$1$l$P$J$i$J$$!#$?$@$7!"309qCsCf308rBeI=5!9=!"NN;v5!9=$K$D$$$F$OK\>r$+$i=|30$9$k!#(B
($BCfN,(B)
$B!!Bh(B24$B>r!!6-30!J(B=$B309q!KAH?%$^$?$O8D?M$,Hc=Z$r7P$:$K>!l9g$O!"9q2H0E9f4IM}5!9=$,8x0B5!4X$H$H$b$K7Y9p$rM?$(!"2~$a$k$h$&L?Na$9$k$H$H$b$K!"$=$N0E9f@=IJ$^$?$O0E9f5;=Q$r4^$`@_Hw$rKW<}$9$k$3$H$,$G$-$k!#(B
$B!U(B
$B%;%-%e%j%F%#%-%c%s%W(B 2006$B!#(B2006.08.08$B!A(B12$B!"El5~ETB-N)6h!"L5NA(B ($BG/Np@)8BEy$"$j(B)$B!#(B
$BN6BgE*$K$O=8Cf9V5D$K$R$C$+$+$k$s$@$h$M!#(B
$B!U(B
$B!Z(BCRYPTO-GRAM$BF|K\8lHG![!V%*%U!W$,EE8;%*%U$r0UL#$7$J$$(B
($BF|7P(B IT Pro, 5/30)$B!#(BWii $BOC!#(B
$B!U(B
$B;DN1G@Lt!"M"F~?)IJ$b5,@)6/2=!!Cf9qLn:Z$K1F6A$+(B
($B;:7P(B, 5/30)
$B!!:rF|$N(B NEWS23 $B$GCf9qLn:Z$M$?$d$C$F$^$7$?$M!#(B
$B:#$d(B$BM"F~Ln:Z$NH>J,$OCf9q$+$i(B$B$@$=$&$G!#(B
$BG@LtK|:P7O$N@8;:$BCf9q$NLn:Z$O4m$J$$$+(B ($BF|7P(B BP, 2005.07.26) $B$H$+;2>H!#(B
$B!!$"$i$?$a$FCf9qLn:Z$O4m$J$$$+$H$$$&Ld$$$K$O!"!V$=$&$+$b$7$l$J$$$,!"F|K\$NLn:Z$bF1$8$h$&$J$b$N$@!W$HEz$($k$7$+$J$$!#$=$7$FCf9q$+$i$NM"F~Ln:Z$N0BA4@-$r
$B!!$0$0$C$F$$$F!"$3$s$J%5%$%H$r8+$D$1$^$7$?!#(B
$B!U(B
$B!V>.A,2T$2$H8@$o$l$?!W!!56@i1_;%;HMQ!"#2?MBaJa(B
($B;:7P(B, 5/30)
$B!U(B
$B%&%#%K!<8xH=(B
$B5~ETCO:[!!#77n#3F|5a7:(B
($B5~ET?7J9!"(B5/30)
$B!U(B
$B4D6-Gr=q!'@aEE$d!V$b$C$?$$$J$$IwO$I_!WAJ$($k(B
($BKhF|(B, 5/30)$B!#(B
$B$3$s$J5-;v$b(B: $B>.NS00$5$s!'!V$b$C$?$$$J$$2;F,!WG.>'!!#67nH/Gd$X(B ($BKhF|(B, 5/29)$B!#%"%-%i$G$9$+!D!D!#(B
$B!U(B
$B2-FlCN;v!":_F|JF73:FJT$N3U5D7hDj$K!V6K$a$F0d48!W(B
($BFIGd(B, 5/30)
$B!U(B
$BFC=8%o!<%k%I!&$A$g$C$HBT$C$?!*!'%a%?%\%j%C%/%7%s%I%m!<%`(B ($BKhF|(B, 5/29)
$B!!!V%&%(%9%H#8#5%;%s%A!W$O!"#4#0!A#6#9:P$NF|K\?MCK@-$NJ?6Q!J#8#4!%;%s%A!K$H$[$\F1$8!#I8=`HO0O$N??$sCf$G$9!#;d$K8@$o$;$l$P$`$7$m%Y%9%H%5%$%:$G$9$h!#0lJ}!"=w@-$NJ?6Q$OCK@-$h$jLs#5%;%s%A>.$5$$#7#9!%;%s%A!#$H$3$m$,%a%?%\%j%C%/%7%s%I%m!<%`$N4p=`$O#9#0%;%s%A$H!"CK@-$h$j5U$K#5%;%s%A$bBg$-$$!#
$B!!3F9q$N%a%?%\%j%C%/%7%s%I%m!<%`$N4p=`$O!"JF9q$G$OCK@-#1#0#3%;%s%A!"=w@-#8#9%;%s%A!"Cf9q$OCK@-#9#0%;%s%A!"=w@-#8#0%;%s%A!#=w@-$N4p=`CM$,CK@-$r>e2s$k$N$OF|K\$@$1$G$9!#3F9q$N4p=`$r8!>Z$7$?:G6a$NO@J8$K$O!V4qL/$J7k2L$,=P$k$N$G!"F|K\$N%&%(%9%H4p=`$O;H$o$J$$$3$H$r?d>)$9$k!W$H$^$G=q$+$l$F$$$^$9!#(B
($BCfN,(B)
$B!!%a%?%\%j%C%/%7%s%I%m!<%`$N4p=`$K0l4n0lM+$9$k$N$OL50UL#$G$9!#Nc$($P!"?46Z9<:I!J$3$&$=$/!K$H$N0x2L4X78$,0lHV$O$C$-$j$7$F$$$k!V0-6L%3%l%9%F%m!<%k!W$H$b8F$P$l$k#L#D#L%3%l%9%F%m!<%kCM$,!":#2s$N4p=`$K$O4^$^$l$F$$$^$;$s!#$3$N>I8u72$N35G0$OK\Mh!"?46Z9<:I$dE|G"IB$J$I$NM=KI$d?GCG$K;H$($k$b$N$G$O$"$j$^$;$s!##2#5F|$NF|K\E|G"IB3X2q$N9q:]%7%s%]%8%&%`$G$b!"1Q9q$N8&5f$7$d1?F0$J$I!"@83h2~A1$r;O$a$kL\0B$H$7$F;H$o$l$k$Y$-$b$N$J$N$G$9!#(B
$B!U(B
$B#1#4:P!"%U%#%C%7%s%0MF5?$G=qN`Aw8!!!L$@.G/
(asahi.com, 5/30)$B!#$3$l$O7Y;kD#!#!V%2!<%`2q
$BL$@.G/
$B!!$I$C$A$b!V$I$3$+$,=iJ*!W$K$J$k$h$&$K!";~4|$HH/I=FbMF$rD4@0$7$?$C$F$3$H$J$s$G$9$+$M!#(B
$B!!4XO"(B: $B%U%#%C%7%s%0$GCf#3CK;R$r=qN`Aw8!(B
(TBS, 5/30)
$B!!CK;R@8EL$O!"=w;R;yF8$d=w;RCf3X@8#7#2?M$r4^$`#9#4?MJ,$N#I#D$J$I$rF~/=w#1#0?t?M$K$o$$$;$D$J
$B!!!D!D!#(B
$B!U(B
$B%U%#%C%7%s%0:>5=!'El5~$NAH?%%a%s%P!
($BKhF|(B, 5/30)$B!#$3$l$O5~ET!"7'K\!"@E2,$N#3I\8)7Y!#%K%;(B Yahoo! $B%Z!<%8$G(B ID $B$r%2%C%H$7!"$=$N(B ID $B$G2M6u%*!<%/%7%g%s$G$9$+!#(B
$B%U%#%C%7%s%0:>5=AH?%$N8!5s$O9qFb=i$H$$$&!#(B
$B!U(B
$B%;%-%e%j%F%#!H3J:9
($BF|7P(B IT Pro, 5/29)
$B!U(B
$B4m5!$KIN$9$k(BIT$B6H3&$N!V%b%i%k!W(B
($BF|7P(B IT Pro, 5/29)
- $B$$$m$$$m(B (2006.05.24)
$B!!(B[SA20231] PostgreSQL Encoding-Based SQL Injection Vulnerability
$B$NF|K\8l2r@b5-;v$,EP>l(B:
$B!!4XO"(B: PHP $BMxMQ;~$K(B Shift_JIS $B$G(B addslashes() $B$K$h$k%(%9%1!<%W=hM}$K!!(BSQL $B%$%s%8%'%/%7%g%s2DG=$J7j(B
- Opera$B$K$*$1$k%"%I%l%9%P!<$"$k$$$O%9%F!<%?%9%P!<56Au2DG=$N%]%F%s%7%c%j%F%#!<(B
-
$B!!$b$H5-;v$G$"$k!"(BOpera$B$K$*$1$k%"%I%l%9%P!<$"$k$$$O%9%F!<%?%9%P!<56Au2DG=$N%]%F%s%7%c%j%F%#!<(B
$B$,2~D{$5$l$F$$$k!#(BOpera $B$N@_Dj%U%!%$%k(B opera6.ini (opera6.ini $B$N>l=j$K$D$$$F$O!"(BOpera $B$N(B [$B%X%k%W(B] $B%a%K%e!<$+$i(B [Opera $B$K$D$$$F(B] $B$r;2>H(B) $B$K$O(B IDNA White List
$B$H$$$&@_Dj9`L\$,$"$k$N$@$,!"(BOpera 8.0 Beta 3 $B0J9_!"$J$<$+(B
- IDNA White List $B$NCM$,6u(B (IDNA White List=)
$B$J$H$-$O!"(BIDN $B$KBP1~$7$J$$(B
- IDNA White List $B$K2?$i$+$NCM$,F~$C$F$$$k$H!"A4$F$N%I%a%$%s$KBP$7$F(B IDN $B$,M-8z(B
$B$H$$$&IT;W5D$Jorz$B!#(B
$B$5$C$=$/3NG'$7$F$_$k$H!"
$B!!$H$j$"$($:!"(BIDNA White List= $B$G1?MQ$9$k$7$+$J$5$=$&$@!#(B
$B!!%i%C%/:n@.$N$^$H$a;qNA!#$3$&$$$&$N$O=u$+$j$^$9!#(B
$B!!$U$%$`!D!D(B
$B!!$^$?!$O"Mm$7$F$b!VA4$/H?1~$,$J$$%1!<%9$b$"$k!W!J(BJPCERT/CC$B!K!#H?1~$,$J$$M}M3$H$7$F(BJPCERT/CC$B$G$O!$G'CNEY$NDc$5$rM}M3$N0l$D$K5s$2$k!#!V!XAa4|7Y2|%Q!<%H%J!<%7%C%W!Y$O$b$A$m$s!$(BJPCERT/CC$B$K$D$$$F$bCN$i$J$$3+H//$J$/$J$$$h$&$@!W!J(BJPCERT/CC$B!K!#$=$3$G:#2s!$(BFSIJ$B$H6(NO$7$?$3$H$rH/I=$7!$Aa4|7Y2|%Q!<%H%J!<%7%C%W$d(BJPCERT/CC$B$NG'CNEY8~>e$r?^$k!#3+H/
$B!!%*!<%W%s%=!<%93+H/FSIJ $B$NG'CNEY$O!"(BJPCERT/CC $B$N$=$l$h$j$b==J,$K9b$$$N$@$m$&$+!#(B
$B!!%W%l%9%j%j!<%9(B: JPCERT/CC$B!"(BFSIJ $B$N(B 2$BAH?%$,%*!<%W%s%=!<%9%=%U%H%&%'%"$*$h$S%U%j!<%=%U%H%&%'%"$N%;%-%e%j%F%#BP:v6/2=$rL\E*$H$7$?6(NOBN@)$r9=C[(B (JPCERT/CC)
$B!U(B
$B%2!<%`%5!<%P$+$i(BHDD30$BBfJ6<:!":GBg(B6$BK|(B4200$B?MJ,$N>pJsN.=P$N62$l(B
(ITmedia, 5/29)$B!"(B
$B%M%C%H%2!<%`$N8D?M>pJsF~$j(BHDD$B$,%G!<%?%;%s%?!<$G!HJ6<:!I(B
(slashdot.jp, 5/29)
$B!U(B
$B!Z$d$8$&$^(BPC Watch$B![(B
$B>>2HL@(B
(PC Watch, 5/29)
$B!U(B
$B%=!<%9%M%/%9%H!"!V%&%$%k%9%;%-%e%j%F%#!W$NG/4V99?7NA$r(B0$B1_$K(B
(Internet Watch, 5/29)$B!#$=$l$G>&Gd@.N)$9$k$N(B?
$B!U(B
$B%=%U%H3+H/h$k$3$H$,$G$-$J$$(B--$B%*%i%/%k44It$,%Q%C%AJP=E$rHcH=(B (CNET, 5/29)$B!#(BOracle $B$K$@$1$O8@$C$F$[$7$/$J$$%;%j%U$@$h$M!#(B
$B!U(B
$BJF2<1!;JK!0Q0w2q!"!V%M%C%HCfN)@-!W4XO"K!0F$r2D7h(B
(CNET, 5/26)
$B!U(B
$B%"%C%W%k!"BP%V%m%,!<:[H=$GGTKL(B--$B%V%m%,!<$b!V%8%c!<%J%j%9%H!W$H:[H==j(B
(CNET, 5/29)
$B!U(B
$B@1Ln7/$N(BWeb$B%"%W%j$[$N$\$N2~B$7W2h!J(B7$B!K8x3+Cf$N(BHTML$B%U%!%$%k$,$4$C$=$j>C<:!*!)(B
(@IT, 5/27)
$B!U(B
$B%P!<%/%l!<%:6d9T$,(BF-Secure$B%"%s%A%&%#%k%9$NF3F~$r7hDj(B
- $B%*%s%i%$%s!&%P%s%-%s%0(B160$BK|%f!<%6$KL5=~Ds6!(B -
(F-Secure, 5/29)$B!#$3$l$,%`!<%_%s$NNO$@$H$$$&$N$+(B?! ($BB?J,4X78$J$$(B)
$B!U(B
$BAH$_9~$_%7%9%F%`$N%;%-%e%j%F%#!A967b$N6<0R$HKI1R:v!A(B
($BF|7P(B IT Pro) $B$,407k$7$F$$$?$s$G$9$M(B (1 $B$+7n$bA0$K(B orz)$B!#(B
$B!U(B
$BCf9q$+$iF|K\$N%a!<%k%5!<%P!
(Internet Watch, 5/29)$B!#%A%c%$%J%j%9%/$G$9$+!#(B
$B!!$^$?%l%s%?%k%5!<%P!<$d<+A0$N%a!<%k%5!<%P!<$N>l9g$O!"!V(BSquirrelMail$B!W$d!V%&%'%V%a!<%i!
$B!!(BSquirrelMail $BF~$l$k$/$i$$$J$i!"(Bstone $B$H$+$r;H$C$FJL%]!<%H$KE>Aw$9$k$H$+!"(Bssh $B$G(B port forwarding $B$9$k$H$+!"(BVPN $B$b$N$rF~$l$k$H$+$NJ}$,$h$/$J$$$G$9$+(B?
$B$=$l$H$b!"$=$&$$$&$b$N$b(B block $B$5$l$F$$$k$N$+$J!#(B
$B!U(B
BIGLOBE$B$,%\%C%H$K$h$kLBOG%a!<%kBP:v$r
(NEC, 5/29)$B!#$9$P$i$7$$!#(B
$BBgNL$N%a!<%k$rAw?.$7$F$$$kMxMQu67$r3NG'$7!"BP:v$,40N;$9$k$^$G%5%]!<%H!#(B
$B!!$3$N%5%]!<%H:n6H$O$?$$$X$s$@$m$&$1$I!#(B
$B$"$H!"!VBgNL$N%a!<%k$rAw?.$7$F$$!W$J$$>l9g$OBP>]$K$J$i$J$$$H$$$&$3$H$+$J!#(B
$B!!(B$BF|7P$N5-;v(B$B$K$O!V2q0w$N%a!<%kMxMQ$r$$$C$?$s6/@)E*$KDd;_!W$H$"$k$1$I!"(BNEC $B$N%W%l%9%j%j!<%9$G$O!V8D?M2q0w$K$D$$$F!"(B1$BF|$"$?$j$KAw?.2DG=$J%a!<%k08@h?t$r@)8f!W$H$J$C$F$$$^$9$M!#$^$"!"(B0 $B$K$9$k$N$b!V@)8f!W$@$m$&$1$I!#(B
$B!U(B
$BL5@~(BLAN$B$NEE<'GH$r5[<}$9$k%,%i%9(B
(slashdot.jp, 5/28)$B!#EEGHFC@-8x3+$7$F$/$l$J$$$H!"H=CG$G$-$J$$$8$c$s!D!D!#(B
$B!U(B
$B%$%s%?!<%M%C%H5D7h8"9T;H%7%9%F%`$G>c32OC(B
$B!U(B
$B3HD%;R56Au%&%#%k%9$r
(Yoshiyuki$BDb(B BLOGs, 5/28$B!#(Binfo from $B$^$C$A$c$5$s$A(B)$B!#$$$A$P$sLdBj$J$N$O!"$3$3$+$J$"!#(B
XP Home$B$ODL>o$O%U%)%k%@$N%W%m%Q%F%#$K%;%-%e%j%F%#%?%V$,L5$$$,!"%;!<%U%b!<%I$G5/F0$7$?$i%;%-%e%j%F%#%?%V$,8=$l$F(BPro$B$HF1MM$KA`:n$G$-$k!#(B
$B!!(BMicrosoft $B$O!"I8=`$G$O(B Home $B%f!<%6$K%;%-%e%j%F%#5!G=$rDs6!$7$J$$$h$&$K$7$F$$$k!"$H!#(BVista $B$G$O!"$=$&$$$&$3$H$O$J$/$J$k$s$G$9$+$M$(!#(B
$B!U(B
$B%f!<%6!<$r$"$6$`$/!V%9%Q%$%&%(%"BP:v%=%U%H$N1"KE!W(B
($BF|7P(B IT Pro, 5/29)$B!#$K$;%"%s%A%9%Q%$%&%'%"OC!#(B
$B!!$K$;$D$J$,$j(B: Free Online Translator$B$KI=<($5$l$k2hA|(B
($B%$%s%U%i4IM}
$B!U(B
$BN"$G$O8=pJs4m5!4IM}%3%s%F%9%H(B
($BF|7P(B IT Pro, 5/29)$B!#$?$N$7$=$&$@$J$"!#(B
$B!V%3%s%F%9%H$G$O<+J,$,4IM}l$G$O4IM}
$B!U(B
$B!V7Y;!$rI8E*$K$7$?%9%T%"7?%U%#%C%7%s%0!&%a!<%k$,A}2C!W(B---$B7Y;!D#(B $B:dL@;a(B
($BF|7P(B IT Pro, 5/29)
$B!U(B
$BLs(B85$B!s$N<+<#BN$,(BWinny$BBP:v$r
($BF|7P(B IT Pro, 5/29)
$BD4::$G$O!VFC$KBP:v$O
$B!!$J$<
$B!U(B
[AML 7367] $B6&KE:a!&@/I\!&M?E^$N9q2qEzJ[$N!V13!W$HL7=b(B
$B!U(B
$B;`7:<99TJ}K!$r$a$0$kJF9q:[H==j$N?3M}(B
(MoMo Journal, 5/27)
$B!U(B
Microsoft cumulative updates may not be installed correctly if you change the location of the Program Files folder
(Microsoft)$B!#(BProgram Files $B%U%)%k%@$N0LCV$rJQ99$7$F$$$k$H!"(Bpatch $B$r$&$^$/E,MQ$G$-$J$$>l9g$,$"$k$=$&$J!#(B
$B2sHrJ}K!$,>R2p$5$l$F$$$k!#(B
$B!U(B
Authentication fails when you use Outlook or Outlook Express to try to log on to a HTTP-based mail server if you use Internet Explorer version 7.0
(Microsoft)$B!#(Bpatch $B=P$F$^$9!#(B
$B!U(B
Sophos AntiVirus
$B$,!"(B2006$BG/(B 6$B7nHG$G(B
Linux(AMD64), FreeBSD(AMD64), OpenBSD(AMD64)$B!"(BOpenBSD(i386)
$B$KBP1~$7$F$^$9$M!#(B
$B!U(B
$B>pJs<}=81R@1!'(B9$B7n$K(B3$B4pL\BG$A>e$2!!@/I\J}?K(B
($BKhF|(B, 5/26)
$B!U(B
$BAw?.pJs56$j!"(B5300$BK|DLAw$C$?2q
($BKhF|(B, 5/26)
$B!U(B
$BBh(B08$B2s$^$C$A$c#1#3#9JY6/2q(B$B$N(B
$B;qNA(B
$B$H(B
$B%l%]!<%H(B
$B$H(B
$B%"%s%1!<%H(B
$B$,8x3+$5$l$F$$$^$9!#$^$C$A$c$@$$$U$/$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
$B!HFC5v967b!I$GCf9q(BDVD$B;:6H$,2uLG$X(B $B%F%l%S$d2;3Z%W%l!<%d!<$X$NGH5Z$bI,;j(B
($BF|7P(B BP, 5/26)
$B!U(B
$BCf9q5yA%$NITK!A`6H$KF,G:$^$94Z9q$N5yL1(B
($BD+A/F|Js(B, 5/28)
$B!U(B
$BEl%F%#%b!<%kA{Mp7c2=!"9k$J$I#4%+9q$K73GI8/MW@A(B
(asahi.com, 5/25)$B!"(B
$BEl%F%#%b!<%k!"IpAu=8CD$NA{Mp$G:.LB?<$^$k(B
(CNN, 5/28)$B!#(B
$B!U(B
$B%8%c%oEgJ}LL(B
$B!U(B
$B7YHw6/2=$NLp@h!"KIHH%;%s%5!<5!G=$;$:!!:e5^$NBgNLEpFq(B
(asahi.com, 5/28)
$B!!A>:,:j=p$OKIHH%+%a%i$N1GA|$NJ,@O$J$I$r?J$a$F$$$k$,!"F1E9$N
$B!!$I$3$+$K%G%+$$7j$,$"$k$N$+$J$"!#(B
$B!U(B
FreeBSD/SSP
(Jeremie Le Hen)$B!#(BFreeBSD CURRENT / RELENG_6 $B$K(B ProPolice
$BBP1~5!G=$rDI2C$9$k(B patch$B!#(B
$B!!(BSymantec Client Security 3.0 / 3.1$B!"(B
Symantec AntiVirus Corporate Edition 10.0 / 10.1 $B$K(B stack buffer overflow $B$9$k7g4Y$,$"$j!"(Bremote $B$+$iG$0U$N%3!<%I$rUpcoming Advisories: EEYEB-20060524
(eEye, 2005.05.24) $B$NOC$H;W$o$l!#(Bpatch $B$,=P$F$$$k!#(B
$B!!F|K\8lHG$N>pJs$b$=$N$&$A=P$k$G$7$g$&!#!D!D=P$^$7$?(B:
$B!!>pJs$@$1$G!"(Bpatch $B$O$^$@$"$j$^$;$s!#(B
2006.06.03 $BDI5-(B:
$B!!(B$B%7%^%s%F%C%/(B $B%"%s%A%&%#%k%9(B $B$H(B $B%/%i%$%"%s%H(B $B%;%-%e%j%F%#$N(B $B%P%C%U%!%*!<%P!<%U%m!<(B
(ISSKK)$B!#(BISS $B$G$b:F8=$K@.8y$7$F$*$j!"(BProventia $BEy$GBP1~$7$F$$$k$=$&$G$9!#(B
2006.06.06 $BDI5-(B:
$B!!(BSymantec Client Security 3.1.0.394 $BF|K\8lHG!"$*$h$S(B
Symantec Antivirus
Corporate Edition 10.1.0.394 $BF|K\8lHGMQ$N(B patch $B$,MQ0U$5$l$?$=$&$G$9!#(B
20060529145254961 - SYM06-010$B!'(B $B@H ($B%7%^%s%F%C%/(B) $B$r;2>H!#(B
Nakata $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
Symantec Client Security
3.0.2.2020 $BF|K\8lHG!"$*$h$S(B
Symantec Antivirus
Corporate Edition 10.0.2.2020 $BF|K\8lHGMQ$N(B patch $B$O$^$@$G$-$F$^$;$s!#(B
2006.06.13 $BDI5-(B:
$B!!(BeEye $B$+$i%"%I%P%$%6%j8x3+(B ($B9b66$5$s>pJs$"$j$,$H$&$4$6$$$^$9(B):
$B!!$^$?!"(BSymantec Client Security
3.0.2.2020 $BF|K\8lHG!"$*$h$S(B
Symantec Antivirus
Corporate Edition 10.0.2.2020 $BF|K\8lHGMQ$N(B patch $B$b8x3+$5$l$^$7$?!#(B
$B!!$9$G$K=P$F$$$?!"(BSymantec Client Security 3.1.0.394 $BF|K\8lHG!"$*$h$S(B
Symantec Antivirus
Corporate Edition 10.1.0.394 $BF|K\8lHGMQ$N(B patch $B$O$3$A$i(B:
- Targeted attack: Word exploit - Update
-
$B!!(BSourcefire VRT Advisory: 2006-05-26 (snort.org)$B!#(B
Ginwui.B $B%&%$%k%9$r8!=P$9$k%k!<%k$H!"(BWord $B%I%-%e%a%s%H$K(B SmartTag $B%G!<%?9=B$$,B8:_$9$k$+$I$&$+$r8!::$9$k%D!<%k(B DocCheck $B$,8x3+$5$l$F$$$^$9!#(B
$B!U(B
Microsoft $B%;%-%e%j%F%#(B $B%K%e!<%9%l%?!<(B
$B$N(B 5 $B7nHG$,=P$F$^$9$M!#(B
$B!U(B
$BG/6bIT@5LH=|!!2~$^$i$L1#JCBN
(asahi.com, 5/26)$B!"(B
$BG/6bJ]81NA$NIT@5LH=|!"ETFb$G$b!!
(asahi.com, 5/26)$B!"(B
$B
($BKhF|(B, 5/26)
$B!U(B
$B>.3X(B 6 $BG/@8$N0&9q?4$r!}!;"$$GI>2A$7$F$$$^$9(B ($B8=:_?J9T7A(B)
$B!U(B
3$BJ,$N(B1$B$N4k6H$,(BLinux$B%5!<%P!<$K%&%$%k%9BP:v$rL$F3F~!"%H%l%s%I%^%$%/%m(B
(Internet Watch, 5/26)$B!#8D?ME*$K$O$`$7$m!";D$j(B3$BJ,$N(B2$B$K$OF~$C$F$$$k$3$H$NJ}$,6C$-$J$N$@$,!#$I$&$$$&$b$N$,F~$C$F$$$k$N$+!"$K$D$$$F$O%"%s%1!<%H$r
$B!!(B$B$^$C$A$c$@$$$U$/$5$s$N?dB,(B:
$BB?J,2q
$B!!$J$k$[$I(B!
$B!U(B
$B9q@/D4::Hq!"
(asahi.com, 5/25)$B!#9qL1$N7l@G$G0{$`$+$7;]$$$N$G$7$g$&$M!#(B
$B4XO"(B: $B=01!?&0w!"D#Hq$G0{?)!!#0#3G/EY$O#1@iK|1_(B
(asahi.com, 5/27)
$B!U(B
$B!Z$d$8$&$^(BPC Watch$B![(B
$B>>2<$NApDE;v6H=j$+$i!"!V$F$s$W$iL}%H%i%C%/!W$,H/?J(B
(PC Watch, 5/26)
$B!U(B
$B%H%l%s%I%^%$%/%m!"(BSELinux$B$r%5%]!<%H$7$?(BLinux$B4D6-8~$1%&%$%k%9BP:v%=%U%H?7HG(B
(Enterprise Watch, 5/26)
$B!U(B
$BJF;JK!>J!"!V(B419$B;v7o!W$N5=;U(B565$B?M$rBaJa(B
(Internet Watch, 5/25)$B!#(B$B%J%$%8%'%j%":>5=(B$B$G$9$+!#(B
$B$3$N$B%$%0!&%N!<%Y%k>^$r^(B$B$7$F$$$?$s$G$9$M!#(B
$BJ83X>^$@$=$&$G$9(B (^^;)$B!#(B
$B!U(B
Key Portions of Critical Documents Unsealed in AT&T Surveillance Case
(EFF, 5/25)$B!#(BNSA $BOC!#9uEI$j$@$i$1$G$9$M$(!#(B
$B!U(B
MS SMB zero-day?
(SANS ISC, 5/25)$B!#(BMicrosoft $B$N8+2r(B: Incorrect reports of a new Windows 2000 SMB vulnerability (MSRC Blog, 5/25)
$B!!$@$=$&$G$9!#%H%l%s%I%^%$%/8}(B.jp $B$H$+%f%K%/8}(B.jp $B$H$+$b$$$1$k$N$+$J!#(B
2006.06.02 $BDI5-(B:
$B!!0J2<$N(B web $B%Z!<%8$,2~D{$5$l$F$$$^$9!#(BSuzuki $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!!$J$s$H!"9qFb$N(B open proxy $B$N(B3$BJ,$N(B2$B$O!V%3%j%c1QOB!*(B / LogoVista$B!W%7%j!<%:$G!"(B2 $BHV
2006.06.06 $BDI5-(B:
$B!!(BDrupal $BOC$N(B SA:
$B!U(B
$B$3$30l=54V$N$"$$$@$K99?7!J$"$k$$$O?77G:\!K$5$l$?(BQ & A
($B%^%+%U%#!<(B) $B$N!V(BHIP$B%/%i%$%"%s%H$r%m!<%+%k%3%s%T%e!<%?$G%"%s%$%s%9%H!<%k$9$kJ}K!(B$B!W!"$J$<$+F|IU$,!V(B2006/6/22$B!W$H!"L$Mh$+$iMh$?%5%]!<%H(B Q&A$B$K$J$C$F$$$k!#(B
$B!U(B
Fiddler
$B$H$$$&%D!<%k$,$"$k$N$G$9$+!#(B
$B!U(B
Metasploit Framework 2.6 Released
(SANS ISC, 5/23)$B!#(B
$B%j%j!<%9%N!<%H(B
$B!U(B
10$BG/L\$r7^$($?%3%s%T%e!<%?HH:aGrIM%7%s%]%8%&%`(B
($BF|7P(B IT Pro, 5/20)
$B!U(B
$BL1]$G>yJb;Q@*!!M?E^$H$N=$@56(5D$G(B
($BKhF|(B, 5/24)
$B!U(B
$B%"%W%j%1!<%7%g%s3+H/$+$i;O$^$k%;%-%e%j%F%#BP:v(B
($BF|7P(B IT Pro Special)$B!#9qJ,!_1v7n!_5HED$N(B 3 $B;a$K$h$kBPCL(B (Vol.1)$B!#(B
1 $B$+7n$*$-$K99?7$H$$$&$N$O!"$$$5$5$+CY2a$.$k$N$G$O!#(B
$B!U(B
MBSD$B$,?/F~KI;_%7%9%F%`$N?7HG$rH/Gd!$!V%H%i%U%#%C%/$NJQ2=$+$i0[>o$r8!=P!W(B
($BF|7P(B IT Pro, 5/24)
$B!U(B
$B!V$o$l$o$l$N6/$_$O%O%C%+!<$NF08~$r4Q;!$7$F$$$k$3$H!W(B---iDEFENSE
($BF|7P(B IT Pro, 5/22)
---$BF|K\$G$O(BP2P$B%=%U%HMxMQpJsO3$($$$,LdBj$K$J$j$^$7$?!#(B
Watia$B;a!!$3$l$OF|K\$@$1$NLdBj$@$m$&!#JF9q$J$I$G$O(BP2P$B%=%U%H$NG[I[<+BN$,6bA,L\E*$K$J$C$F$$$k!#$D$^$j!$%$%s%?!<%M%C%H$KN.DL$7$F$$$k(BP2P$B%=%U%H$K$O!$BgDq%"%I%&%(%"$d%9%Q%$%&%(%"$,%P%s%I%k$5$l$F$$$F!$%f!<%6!<$N>pJs<}=8$K;H$o$l$F$$$k!#$=$s$J$3$H$b$"$j!V(BP2P$B%=%U%H$O4m81!W$H$$$&G'<1$OHs>o$K9b$$!#MM!9$JAX$N%f!<%6!<$,(BP2P$B%=%U%H$r;H$C$F$$$kF|K\$N8=>u$NJ}$,!$@$3&E*$K$O5)$J$N$G$O$J$$$@$m$&$+!#(B
$B!U(B
Office $B@=IJ$N%i%$%s%;%s%9G'>Z$K4X$9$k%H%i%V%k$K$D$$$F(B(Microsoft)$B!#!VB~:#!"(BOffice $B@=IJ(B(Office XP, Office 2003) $B$NEEOC$K$h$k%i%$%;%s%9G'>Z$,9T$($J$$%H%i%V%k$,H/@8$7$F$$$^$9!#(B
$BI|5l$K8~$1D4::!&BP1~Cf$G$9!W$@$=$&$G$9!#(B
$B!D!DD>$C$?$=$&$G$9!#(B
$B!U(B
ISS$B$,(BLinux$BMQ?/F~KI8f%=%U%H$N?7HG!$L$CN$N%P%C%U%!!&%*!<%P!<%U%m!<967b$bKI$0(B
($BF|7P(B IT Pro, 5/24)$B!#(BRHES 3 $B$@$1!#(BRHES 4 $B$K$OBP1~$7$F$$$J$$!#(B
$B!U(B
$B8D?M>pJs$r4^$`<+F0
($BLnBpJs$r0B0W$K%F%9%H$K;H$C$F$7$^$C$?$H$$$&$3$H(B?
$B!U(B
$B9b%;%-%e%j%F%#5!G=$r
($BFb3U41K<>pJs%;%-%e%j%F%#%;%s%?!<(B, 5/23)$B!#BN@)$,$:$$$V$sJ#;($_$?$$$G$9$1$I!"$3$l$G$$$1$k$s$G$7$g$&$+!#(B
$B!U(B
$B!X6&KE!Y$N35G04{$K3HBg(B
$BAjCL$J$7$G$bE&H/(B
($BEl5~?7J9(B, 5/24)
$B!!$H$3$m$G!"A\::8=>l$O6&KE:a$rI,MW$H$7$F$$$k$N$+!#%*%&%`;v7oA\::$J$I$rpJs$,$J$+$C$?$+$i$@!#5U$K>pJs$5$($"$l$P6&KE:a$J$7$G$bKI$2$?!#65CD;\@_$X$N7zC[4p=`K!0cH?:aE,MQ$J$I
$B!!!V8=:_$G$b!">pJs$5$($"$l$P!"HH:al9g!"$=$NEvH]$O$H$b$+$/!"%[%F%k$K56L>$G=IGq$7$?!"LH5v>Z$K5u56$,=q$+$l$F$$$k$J$I!"$5$^$6$^$JM}M3$r8+$D$1$FJ8=q56B$:a!"LH>uITp$O$J$$!W!#Mn9g;a$OCG8@$9$k!#!VAH?%HH:a$OHkL)N"$KF0$/$+$i!"6&KE:a$,$G$-$F$b6&KE:a$GJa$^$k$3$H$O$J$$$@$m$&!#$`$7$m!"#N#G#O$dO+AH$J$I$K;H$$$d$9$$$H;W$&!W(B
$B!!!V$`$7$m!"#N#G#O$dO+AH$J$I$K;H$$$d$9$$!W!#$3$l$3$=$,A@$$L\$J$N$G$7$g$&$M!#(B
$B!!!V6&KE:a$O6&KE$@$1$G@.N)$9$k$+$i!"$"$k0UL#!"I]$$$3$H$@!W$HMn9g;a!#!VAj
$B!U(B
$B%I%$%D$G(BeDonkey$B%f!<%6!<(B3500$B?M$r0l@FE&H/(B
(ITmedia, 5/24)$B!#(B
$B!U(B
$B4Z9q8x
(ITmedia, 5/24)
$B!U(B
ssh $B$KBP$9$k(B brute force attack $B$KBP93$9$k$?$a$N%D!<%k$,$$$/$D$+$"$k$h$&$G$9!#(B (info from [FreeBSD-users-jp 89567] 6.1 $B$G(B ssh $B@\B3(B $B$N%9%l%C%I(B)
$B!!%]!<%HHV9f$rJQ$($?$j$7$?J}$,4JC1$J$N$G$9$,!"JQ$($i$l$J$$;v>p$b$"$k$o$1$G!D!D!#$H$$$&$o$1$G!"$H$j$"$($:(B maxlogins $B$rF~$l$F$_$?!#(B
$B!D!D$,!";H$$$b$N$K$J$i$J$$$3$H$,H=L@$7$?$N$G!"(BBruteForceBlocker $B$K(B maxlogins $B$N5!G=$rAH$_9~$s$G!"$5$i$K2~NI$7$?$b$N$r2TF/$5$;$F$_$F$$$k!#(B
$B!!%&%$%k%9%P%9%?!<(B $B%3!<%]%l!<%H%(%G%#%7%g%s(B 5.58 / 6.5 / 7.0 / 7.3$B!"(B
Trend Micro $B%&%$%k%9%P%9%?!<(B $B%S%8%M%9%;%-%e%j%F%#(B 3.0$B!"(BTrend Micro Client/Server Security 2.0
$B$N(B
CGI $B%W%m%0%i%`$K(B 2 $B$D$N7g4Y!#0J27.0 $BMQ$N(B patch $B$N(B README $B$+$i0zMQ(B:
$B%&%$%k%9%P%9%?!<(B Corp. CGI$B%W%m%0%i%`$r5/F0$5$;$k(BHTTP GET/POST$B%j%/%(%9%H$K$h$C$F%&%$%k%9%P%9%?!<(B Corp.$B%/%i%$%"%s%H$r:o=|$G$-$kLdBj(B
$B$3$N@H
$B%&%$%k%9%P%9%?!<(B Corp. CGI$B%W%m%0%i%`$r5/F0$5$;$k(BHTTP GET/POST$B%j%/%(%9%H$K$h$C$F%U%!%$%k$r:o=|$G$-$kLdBj(B
$B$3$N@H
$B!!(Bpatch $B$G99?7$5$l$k$N$O!"(BcgiGetDomain.exe, cgiGetClient.exe, cgiRecvFile.exe, jdkNotify.exe, VerConn.exe (VerConn.exe $B$O(B 5.58 $B$N$_(B) $B$J$N$G!"$3$l$i$K$=$&$$$&7g4Y$,$"$k$N$@$m$&!#(B
$B!!>\:Y$K$D$$$F$O0J2<$r;2>H(B:
$B!!(BOpera 8.54 $B$K$*$$$F!"(B
http://www.xn--gmail-bgd.com/
$B$r$?$I$k$H(B http://www.gmail.com $B$H$N6hJL$,(B ($B8+$?L\>e(B) $B$D$+$J$$$H$$$&OC!#(B
http://mct.verisign-grs.com/conversiontool/convertServlet?input=www.xn--gmail-bgd.com&type=PUNYCODE
$B$r8+$k$H!"(Bi $B$H(B l $B$N4V$K(B U+0307 $B$H$$$&J8;z$,F~$j9~$s$G$$$k!#(B
$B:rG/$N(B
$B!V(B$B9q:]2=%I%a%$%sL>BP1~%V%i%&%6$K(BURL$B$,!H56Au!I$5$l$kLdBj!"(BIE$B$O1F6A$J$7(B$B!W(B
$B$N$H$-$K!"(BOpera $B$O(B
Opera has added a whitelist of top-level domains that are trusted to enforce a safe policy on domain names. Several top-level registrars have strict rules for domain names. Opera for Windows, Mac and UNIX will check for an updated list of trusted TLDs on a regular basis. Opera now only accepts Latin 1 characters in domain names from top-level domains that are not on the whitelist. This covers Western European languages without introducing any convincing homographs.
$B$H$$$&J}?K$K$J$C$?(B ($B;2>H(B$B!">e5-0zMQ$N2<@~$O>.Eg(B) $B$O$:$@$,!"
$B!!(BOpera $B$N8@$&(B Latin 1 characters $B$H$$$&$N$O$I$NHO0O$J$N$@$m$&!#(B
Latin Extended $B$r4^$`$H$9$k$H!"$=$l$i$KJq@]$5$l$kI=8=$r(B U+0307 $B$J$I$r;H$C$F:n@.$G$-$k$N$G!">u67$K@09g$9$k$h$&$J5$$,$7$J$$$G$b$J$$!#(B
$B!!:#2s$N;v>]<+?H$O!V(BOpera $B$N(B Latin 1 $BH=Dj
Opera now only accepts Latin 1 characters in domain names from top-level domains that are not on the whitelist.
$B$K$D$$$F$b8+D>$7$?J}$,$h$5$2$J5$$,!#(BLatin 1 $B$H$$$&Nc30$OGQ;_$7$?J}$,$9$C$-$j$7$=$&!#(B
$B!!4XO"(B:
2006.05.30 $BDI5-(B:
$B!!$b$H5-;v$G$"$k!"(BOpera$B$K$*$1$k%"%I%l%9%P!<$"$k$$$O%9%F!<%?%9%P!<56Au2DG=$N%]%F%s%7%c%j%F%#!<(B
$B$,2~D{$5$l$F$$$k!#(BOpera $B$N@_Dj%U%!%$%k(B opera6.ini (opera6.ini $B$N>l=j$K$D$$$F$O!"(BOpera $B$N(B [$B%X%k%W(B] $B%a%K%e!<$+$i(B [Opera $B$K$D$$$F(B] $B$r;2>H(B) $B$K$O(B IDNA White List
$B$H$$$&@_Dj9`L\$,$"$k$N$@$,!"(BOpera 8.0 Beta 3 $B0J9_!"$J$<$+(B
- IDNA White List $B$NCM$,6u(B (IDNA White List=)
$B$J$H$-$O!"(BIDN $B$KBP1~$7$J$$(B
- IDNA White List $B$K2?$i$+$NCM$,F~$C$F$$$k$H!"A4$F$N%I%a%$%s$KBP$7$F(B IDN $B$,M-8z(B
$B$H$$$&IT;W5D$Jorz$B!#(B
$B$5$C$=$/3NG'$7$F$_$k$H!"
$B!!$H$j$"$($:!"(BIDNA White List= $B$G1?MQ$9$k$7$+$J$5$=$&$@!#(B
2006.06.20 $BDI5-(B:
$B!!(BIDNA White List= $B$G1?MQ$7$h$&$H$7$F$b!"$$$D$N$^$K$+$J$<$+85$KLa$C$F$7$^$&LOMM!#(B
$B!!$=$3$G!"$U$H<+J,$N(B opera6.ini $B$r8+$F$_$k$H!D!D$,$,!<$s!"$3$l$bLa$C$F$k(B orz$B!#$J$s$8$c$3$j$c!<(B
$B!!(BMediaWiki 1.6.x $B$K(B XSS $B7g4Y$,$"$j!"(B1.6.6 $B$G=$@5$5$l$?$=$&$G$9!#(B
MediaWiki 1.5.x $B0JA0$K$O$3$N7g4Y$O$"$j$^$;$s!#(B
$B!!4XO"(B: [SA20189] MediaWiki Script Insertion Vulnerabilities
$B!U(B
$B%&%$%k%9%Q%?!<%s%U%!%$%k(B 3.445.00 $B$K$*$1$k8m7Y9p>pJs(B
($B%H%l%s%I%^%$%/%m(B, 5/23)
$B!U(B
$B?@8M@=9]J}LL(B
$B!U(B
High Performance SSH/SCP - HPN-SSH
(psc.edu)$B!#:G?7HG(B HPN-12 $B$G$O!"(BOpenSSH $B$N9bB.2=$H(B None Cipher $B$N%5%]!<%H$N(B patch $B$,E}9g$5$l$F$$$^$9!#$?$@$78eHigh Performance Enabled SSH/SCP Papers
$B$b;2>H$+$J!#4D6-$r@0$($J$$$H9bB.2=8z2L$J$5$2!#(B
$B!U(B
IPA$B$N@H
(Internet Watch, 5/23)$B!#(B
$B>pJs%7%9%F%`Ey$N@HpJs$N
(IPA, 5/18) $B$NOC$@$=$&$G$9!#(B
$B!!4XO"(B: $B>pJs%7%9%F%`Ey$N@HpJs$N
($B?eL57n$P$1$i$N$($SF|5-(B, 5/23)
$B!U(B
$B?yB$B!#(B
eargray $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
Computer Security Incident Handling: Step-by-Step
(NRI $B%;%-%e%"%F%/%N%m%8!<%:(B)$B!"(BPDF $BHG$rF~pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B%7%j!<%:0lMw$O$3$A$i(B$B!#(B
$BCmJ8=q(B$B$G$O$"$$$+$o$i$:!VIJ@Z$lCf!W$K$J$C$F$$$^$9$,!"5$$K$7$J$/$F$$$$$N$+$J!#(B
$B!U(B
$B!V$3$H$N$O!WLdBj$r9M$($k(B
(CNET, 5/22)
$B!U(B
$B$d$O$j;EAH$^$l$F$$$?#9#1#1!J#1!K(B
(tanakanews.com, 5/16)
$B!!7k6I!"%"%a%j%+!"%I%$%D!"%9%Z%$%s$N$$$:$l$N:[H=$G$b!"Ho9p$,%"%k%+%$%@$N4X78pZ$G$-$F$b!"#9#1#1$N7W2h$K4XM?$7$F$$$?$3$H$ON)>Z$G$-$J$+$C$?!#(B
$B!U(B
Weekly SOC Report
(ISSKK, 5/16)$B!#$=$&$$$&$N8!CN$9$k$s$@!#$*$b$7$m$$$G$9$M!#(B
$B!U(B
$BLdBj9TF0!';yF8!"=P@JDd;_$b!D873J2=$XJs9p=q!!J82J>J$J$I(B
($BKhF|(B, 5/22)
$B!U(B
$B6HL3Dd;_#1%+7nL?Na$X(B
$BB;J]%8%c%Q%s$K6bM;D#(B
($B5~ET?7J9(B, 5/23)
$B!U(B
$B:F=$@50F$J$1$l$P6&KE:a!V:N7h$r!W!!?y1:K!Aj(B
(asahi.com, 5/23)$B!#Cf?H$N%H%s%G%b$5$r9M$($l$P!"$?$C$?(B 40 $B;~4V!"$@$H;W$&$1$I!#(B
$B!U(B
Nessus
3.0.3 / 2.2.8 $B$,=P$?$=$&$G$9!#(B
$B!U(B
$B%;%C%7%g%s%O%$%8%c%C%/967b$O(B1$B9fIT@5%"%/%;%99T0Y$+!"$=$l$H$b(B2$B9f$J$$$7(B3$B9f$+(B
($B9bLZ9@8w!w<+Bp$NF|5-(B, 5/20)
$B!U(B
YKK AP$B!"$*%5%$%U%1!<%?%$$,8<4X$N80$K$J$kEE5$>{%7%9%F%`!V%1!<%?%$%-! (CNET, 5/23)
$B!U(B
$BJF9q$,(BICANN$B$KITEv2pF~(B -- $B!V(B.xxx$B!W5Q2<$G%I%a%$%s?=@A6H
(ITmedia, 5/23)
$B!U(B
SONY BMG$B$N(Brootkit CD$BAJ>Y!"OB2r$r:G=*>5G'(B
(ITmedia, 5/23)
$B!U(B
$BJF73$,(BSlashdot$B$H(BSourceForge.net$B$N1\Mw$r5,@)(B
(japan.linux.com, 5/22)
$B!U(B
$B>pJs%;%-%e%j%F%#8~>e$N$?$a$NJF9q$N
(IPA ISEC, 5/16)
$B!U(B
$BO31H$b$N(B
$B!U(B
$BBh#62s(B $B%;%-%e%j%F%#$b$_$8(B $B%;%_%J!<(B$B!#(B
2006.06.03$B!"9-Eg8)9-Eg;T!"(B2500$B1_!#(B
- JP1/$BHkJ8!!%7%^%s%F%C%/
-
$B!!Bh(B 2 $BJs=P$^$7$?(B:
$B!!(BSymEvent $B%U%!%$%k$r(B 12.0.3.1 $B$K99?7$9$l$P$h$$$=$&$G$9!#(B
- Targeted attack: Word exploit - Update
-
$B!!(BMicrosoft Security Advisory $B=P$^$7$?!#(B
$B!!$3$l$K$h$k$H!"(BWord $B$r%;!<%U%b!<%I$G5/F0$9$l$P!":#2s$N7g4Y$r2sHr$G$-$k$=$&$G$9!#(B
$B!!(BAdvisory $B$G$O!"%;!<%U%b!<%I5/F0MQ$N%7%g!<%H%+%C%H$rMQ0U$7$?$j!"%0%k!<%W%]%j%7!<$r;H$C$F6/@)$7$?$j$9$kNc$,7G:\$5$l$F$$$^$9!#(B
$B$J$*!"%;!<%U%b!<%I$G5/F0$9$k$H!"0J2<$N5!G=$,;H$($^$;$s!#(B
- $B%F%s%W%l!<%H$rJ]B8$G$-$^$;$s!#(B
- Office $B%"%7%9%?%s%H$,<+F0E*$KI=<($5$l$^$;$s!#(B
- $B%D!<%k(B $B%P!<$^$?$O%3%^%s%I(B $B%P!<$N%f!<%6!<@_Dj$,FI$_9~$^$l$^$;$s!#$^$?%f!<%6!<@_Dj$rJ]B8$G$-$^$;$s!#(B
- $B%*!<%H%3%l%/%H$N0lMw$,FI$_9~$^$l$^$;$s!#$^$?!"JQ99FbMF$rJ]B8$G$-$^$;$s!#(B
- $B=$I|$7$?J8=q$O<+F0E*$K3+$+$l$^$;$s!#(B
- $B%9%^!<%H(B $B%?%0$,FI$_9~$^$l$^$;$s!#$^$?!"?75,$N%9%^!<%H(B $B%?%0$rJ]B8$G$-$^$;$s!#(B
- "/a" $B$*$h$S(B "/n" $B0J30$N%3%^%s%I(B $B%i%$%s(B $B%*%W%7%g%s$,$9$Y$FL5;k$5$l$^$9!#(B
- XLSTART $BBeBX%U%)%k%@$K%U%!%$%k$rJ]B8$G$-$^$;$s!#(B(Word 2003 $B$N$_(B)
- $B%f!<%6!<@_Dj$rJ]B8$G$-$^$;$s!#(B
- $BDI2C5!G=$HDI2C%W%m%0%i%`$,<+F0E*$KFI$_9~$^$l$^$;$s!#(B
- $B%"%/%;%95v2D$,@)8B$5$l$F$$$kJ8=q$r:n@.$9$k$3$H$d3+$/$3$H$,$G$-$^$;$s!#(B(Word 2003 $B$N$_(B)
$B!!7g4Y$O!">e5-$N5!G=$N$I$l$+$K@x$s$G$$$k!"$H$$$&$3$H$G$9$+$M!#(B
$B!!(BeEye $B$+$i$b=P$F$$$^$9(B:
$B!!IY;NDL;M9q%7%9%F%`%:$N%0%k!<%W%&%'%"(B
MyWeb $B%7%j!<%:$K(B
SQL $B%$%s%8%'%/%7%g%s$,2DG=$H$J$k7g4Y$,B8:_$9$k!#(B
$BBP1~J}K!$K$D$$$F$O!"@lMQ%5%]!<%H%5%$%H$K$7$+7G:\$5$l$F$$$J$$$N$G$h$/$o$+$i$J$$!#(B
$B4XO"(B:
$B!!%m%8%F%C%/$N30IU$1(B MO $B%I%i%$%V!"(BLMO-FB1354FU2 $B$^$?$O(B LMO-FB654FU2 $B$r!"(BMac OS 9.1$B!A(B9.2.2 $B$K(B
FireWire $B@\B3$9$k>l9g$K!"(B
B'sCrew$B4XO"$N(BFireWire$B%I%i%$%P!J(BB'sCrew mini$B!"(BB'sCrew FW$BEy!K$,%$%s%9%H!<%k$5$l$F$$$k$H!"(BMO$B%a%G%#%"$rA^F~$7$F$b%"%/%;%9%i%s%W$,E@Et$7$?$^$^%^%&%s%H$5$l$J$$$H$$$&$h$&$JIT6q9g$,H/@8$7$^$9!#(B
$B:G0-$N>l9g!"(BMO$B%a%G%#%"$,2u$l$k$3$H$,$"$j$^$9!#(B
$B!!$3$NIT6q9g$O(B USB $B@\B3$N>l9g!"$^$?$O(B Mac OS X $B$r;HMQ$9$k>l9g$K$*$$$F$OH/@8$7$J$$!#(B
$B!!(BB'sCrew $B4XO"$N(B FireWire $B%I%i%$%P$r;HMQ$7$J$$$3$H$K$h$C$F2sHr$G$-$k!#$^$?!"%m%8%F%C%/$K(B MO $B%I%i%$%V$rAwIU$7!"%U%!!<%`%&%'%"$r99?7$7$F$b$i$&$3$H$GBP1~$G$-$k(B ($BAwNA$O%m%8%F%C%/$,IiC4$7$F$/$l$k(B)$B!#(B
$B!U(B
$B%0!<%0%k8!:w(B $B!VCN!W7k=8$G2ACMI>2A$7BgLv?J$b;v
($BKhF|(B, 5/22)
$B!U(B
$B0BA4$G$J$$!V%;!<%U%F%#%V%i%&%6!W$K7Y9p(B
(ITmedia, 5/22)
$B!U(B
Apache HTTP Server 1.3.36 Released
(apache.org)$B!#(BApache 1.3.35 $B$G(B Include $B%G%#%l%/%F%#%V$X$N%o%$%k%I%+!<%I;XDj$,F0$+$J$/$J$C$?$N$rD>$7$?!"$H$$$&$3$H$+$J!#(Biida $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
$B1Q9q(BSOCA e-Crime$B$H$N0U?^I=L@J8=q$N=pL>$K$D$$$F(B
(@police, 5/16)
$B!U(B
[memo:9028] $B!V%;%-%e%"(BOS$B$K4X$9$kK\2;(BBOF$B!W$N$*CN$i$;(B$B!#(B
2006.06.02$B!"El5~ET9>El6h!"L5NA!#(B
$B!U(B
Vodafone $B7HBSEEOCEpD0OC(B (ESPIO)
$B!U(B
$B6&KE:a4XO"(B
$B!U(B
$B!V(BGoogle$B$,3$B1%=%U%H$r?dA&!W!=!=%Y%k%.!<4k6H$,DsAJ(B
(ITmedia, 5/20)
$B!U(B
74$BK|1_$rEj$8$F66$N@_7W%_%9$rH/8+(B
($BF|7P(B KEN-Plats, 5/18)
$B!U(B
$B8!:w%5%$%H$N!H2x8=>]!I(B---MS$B$N>pJs$r8!:w$9$k$H!$L54X78$J%5%$%H$,>e0L$K(B
($BF|7P(B IT Pro, 5/16) $B$N4XO">pJs$H$7$F!"0J2<$,$"$k$H65$($F$$$?$@$-$^$7$?!#(B
Luca $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
$B%5%$%P!
($B7Y;!D#(B)$B!#(B$B%$%s%?!<%M%C%H$N0BA4!&0B?4%,%$%I(B
$B$H(B
$B4k6H$N$?$a$N!*>pJs%;%-%e%j%F%#(B
$B$,EP>l$7$F$$$^$9!#0BED$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
$B>pJs%;%-%e%j%F%#BP:v%S%G%*(B
($B7Y;!D#(B)$B!#!V%5%$%P!l$7$F$$$^$9!#(B
$B0BED$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
Hacker's Challenge 3
(mcgraw-hill.com)$B!#(B
$B%_%/%i%9(B
$BfF1K$B!"$?$N$`$>(B!
($B4XO"(B: $BA02s$^$G$N(B Hacker's Challenge)
$B!!OC$OJQ$o$j$^$9$,!"(B$BIu0u:nIJ$NFf(B$B$H$$$&K\$,$"$k$s$G$9$M!#(B
$B!U(B
Icesword 1.16 English & Darkspy 1.0.4 (1.0.2 English)
(tech-security.com, info from tessy$B$NF|5-(B)$B!#(B
$BOCBj$N%I%a%$%s(B 3322.org $B$GG[I[$5$l$F$$$?$j$9$k$o$1$G$9!#(B
$B!U(B
$BJFO"K.CO:[!"(BNSA$B4F;k%W%m%0%i%`$K4X$9$k?3M}$NHs8x3+$r5a$a$k(BAT&T$B$NMW5a$r5Q2<(B
(CNET, 5/19)
$B!U(B
$B%5%&%s%I%G%b$J$
($BEl5~?7J9(B, 5/22)$B!#7Y;!$N;X<($K=>$&$HBaJa$5$l$k!"$H!#(B
$B!!(BWindows $BHG$N(B Skype 2.0.*.104 $B0JA0(B /
2.5.*.78 $B0JA0$K7g4Y!#(B
Skype $BFH<+$N(B URI $B%O%s%I%i$N$N%U%!%$%k$,B>$N(B Skype $B%f!<%6$KE>Aw$5$l$F$7$^$&!#(B
Mac OS X $BHG(B / Linux $BHG$K$O$3$N7g4Y$O$J$$!#(B
$B!!(BWindows $BHG$N(B Skype 2.0.*.105 / 2.5.*.79 $B0J9_$G=$@5$5$l$F$$$k!#$5$-$[$I(B Skype $B$N%@%&%s%m!<%I%Z!<%8$r3NG'$7$?$H$3$m!"(B2.0.0.105 / 2.5.0.82 $B$,G[I[$5$l$F$$$?!#(B
$B!!4XO"(B:
$B!!(BMicrosoft Infotech Storage System Library (itss.dll)
$B$K(B heap overflow $B$9$k7g4Y$,$"$j!"96N,(B CHM / ITS $B%U%!%$%k$r;H$C$FG$0U$N%3!<%I$rCVE-2006-2297
$B!!35MW$K$D$$$F$O!"!V(BWord$B$N@H$B!W(B(ITmedia, 2006.05.20) $B$r;2>H!#$3$s$J46$8$_$?$$(B:
Microsoft Word $BE:IU%U%!%$%k$D$-EE;R%a!<%k$,$d$C$F$/$k(B
$BE:IU%U%!%$%k$r3+$/$H!"(BMicrosoft Word 2002 / 2003 $B$NL$CN$N7g4Y$r96N,$5$l!"%P%C%/%I%"$r@_CV$5$l$k!#(B
$B$3$N7g4Y$O(B word viewer $B$K$OB8:_$7$J$$!#(B
$B%P%C%/%I%"$O(B rootkit $B5;=Q$rMQ$$$F1#JC$5$l$k!#(B
$B%P%C%/%I%"$,5/F0$5$l!"%3%s%H%m!<%k%5%$%H$K@\B3$5$l$k!#(B
$B%3%s%H%m!<%k%5%$%H$+$i$N;XNa$K$h$j!"(B
$B$"$s$J$3$H$d$3$s$J$3$H$r$5$l$^$/$k!#(B
$B!!=$@5%W%m%0%i%`$O8=:_3+H/Cf!#%"%s%A%&%$%k%9%Y%s%@!<3F
$B!!4XO"(B:
$B!!0l;~4|!V%9%T%"7?!W$H$$$&8@MU$,EP>l$7$F$$$^$7$?$,!":#$G$O(B Targeted attack
$B$H8F$P$l$k$h$&$G$9!#(B
2006.05.22 $BDI5-(B:
$B!!4XO"(B:
2006.05.23 $BDI5-(B:
$B!!(BMicrosoft Security Advisory $B=P$^$7$?!#(B
$B!!$3$l$K$h$k$H!"(BWord $B$r%;!<%U%b!<%I$G5/F0$9$l$P!":#2s$N7g4Y$r2sHr$G$-$k$=$&$G$9!#(B
$B!!(BAdvisory $B$G$O!"%;!<%U%b!<%I5/F0MQ$N%7%g!<%H%+%C%H$rMQ0U$7$?$j!"%0%k!<%W%]%j%7!<$r;H$C$F6/@)$7$?$j$9$kNc$,7G:\$5$l$F$$$^$9!#(B
$B$J$*!"%;!<%U%b!<%I$G5/F0$9$k$H!"0J2<$N5!G=$,;H$($J$^$;$s!#(B
- $B%F%s%W%l!<%H$rJ]B8$G$-$^$;$s!#(B
- Office $B%"%7%9%?%s%H$,<+F0E*$KI=<($5$l$^$;$s!#(B
- $B%D!<%k(B $B%P!<$^$?$O%3%^%s%I(B $B%P!<$N%f!<%6!<@_Dj$,FI$_9~$^$l$^$;$s!#$^$?%f!<%6!<@_Dj$rJ]B8$G$-$^$;$s!#(B
- $B%*!<%H%3%l%/%H$N0lMw$,FI$_9~$^$l$^$;$s!#$^$?!"JQ99FbMF$rJ]B8$G$-$^$;$s!#(B
- $B=$I|$7$?J8=q$O<+F0E*$K3+$+$l$^$;$s!#(B
- $B%9%^!<%H(B $B%?%0$,FI$_9~$^$l$^$;$s!#$^$?!"?75,$N%9%^!<%H(B $B%?%0$rJ]B8$G$-$^$;$s!#(B
- "/a" $B$*$h$S(B "/n" $B0J30$N%3%^%s%I(B $B%i%$%s(B $B%*%W%7%g%s$,$9$Y$FL5;k$5$l$^$9!#(B
- XLSTART $BBeBX%U%)%k%@$K%U%!%$%k$rJ]B8$G$-$^$;$s!#(B(Word 2003 $B$N$_(B)
- $B%f!<%6!<@_Dj$rJ]B8$G$-$^$;$s!#(B
- $BDI2C5!G=$HDI2C%W%m%0%i%`$,<+F0E*$KFI$_9~$^$l$^$;$s!#(B
- $B%"%/%;%95v2D$,@)8B$5$l$F$$$kJ8=q$r:n@.$9$k$3$H$d3+$/$3$H$,$G$-$^$;$s!#(B(Word 2003 $B$N$_(B)
$B!!7g4Y$O!">e5-$N5!G=$N$I$l$+$K@x$s$G$$$k!"$H$$$&$3$H$G$9$+$M!#(B
$B!!(BeEye $B$+$i$b=P$F$$$^$9(B:
2006.05.27 $BDI5-(B:
$B!!(BSourcefire VRT Advisory: 2006-05-26 (snort.org)$B!#(B
Ginwui.B $B%&%$%k%9$r8!=P$9$k%k!<%k$H!"(BWord $B%I%-%e%a%s%H$K(B SmartTag $B%G!<%?9=B$$,B8:_$9$k$+$I$&$+$r8!::$9$k%D!<%k(B DocCheck $B$,8x3+$5$l$F$$$^$9!#(B
2006.06.02 $BDI5-(B:
$B!!(B$B!V(BWord$B$N%<%m%G%$967b$r
($BF|7P(B IT Pro, 2006.06.01)
2006.06.13 $BDI5-(B:
$B!!(BDocCheck $B$N?7HG$,EP>l$7$F$$$^$9(B: New version of DocCheck tool available
(snort.org)
2006.06.14 $BDI5-(B:
$B!!=$@5%W%m%0%i%`=P$^$7$?(B: Microsoft Word $B$N@H (Microsoft)
$B!U(B
$B
(asahi.com, 5/17)
$B!U(B
$B%"%s%A%&%$%k%9%Y%s%@!<$,(BWinny$B$N(BCache$B%U%)%k%@Fb$N%&%$%k%9$r6n=|$7$J$$M}M3(B
($B9bLZ9@8w!w<+Bp$NF|5-(B, 5/16)
$B0lHL$K%"%s%A%&%$%k%9%=%U%H$O!"05=L!&%"!<%+%$%V%U%!%$%kFb$N%&%$%k%9%U%!%$%k$b8!=P$7$F:o=|$9$k!#B?=E$K05=L!&%"!<%+%$%V$5$l$?%U%!%$%k$G$b8!CN$G$-$k$H$5$l$F$$$k!#(B
$B"#3F?75!G=$N$4@bL@(B
$B!&(BUnpacker $B%Q%?!<%s(B
$BMM!9$J05=L7A<0$rE83+$9$k$?$a$NE83+%Q%?!<%s$r%&%$%k%9%Q%?!<%s%U%!%$%kFb$KEk:\$9$k$3$H$G!"8!:w%(%s%8%s>e$G$N05=L%U%!%$%k$NE83+$r2DG=$H$7!"05=L7A<0$,0[$J$k0J30$OF10l$N%&%$%k%9$r#1$D$N%&%$%k%9%Q%?!<%s$K$F8!=P2DG=$H$J$j$^$9!#$3$l$K$h$j!":#$^$GJ#?t$N0!
$B%&%$%k%9%Q%?!<%s%U%!%$%k$N?75!G=$N$*CN$i$;(B, $B%H%l%s%I%^%$%/%m(B, 2006$BG/(B4$B7n(B27$BF|(B
$B!!$3$3$G0zMQ$5$l$F$$$k!V(BUnpacker $B%Q%?!<%s!W$O!"(BUPX
$B$N$h$&$J!V
$B$=$l$HF1MM$K!"(BWinny$B$N(BCache$B%U%)%k%@Fb$N%U%!%$%k$b!J05=L$r2r=|$9$k$N$HF1MM$K!K%G%3!<%I(B*3$B$7$F!"$5$i$KB?=E$K=hM}$5$l$?05=L!&%"!<%+%$%V$bE83+$7$F8!::$9$k$3$H$O!"5;=QE*$K2DG=$G$"$k$O$:$@!#$=$7$F!"8!=P$5$l$?%&%$%k%9$r4^$`(BCache$B%U%!%$%k$O!"C1=c$K:o=|$7$F$7$^$C$F:9$7;Y$($J$$$O$:$@!#(B
$B!!%&%$%k%9$r4^$`%"!<%+%$%V%U%!%$%kA4BN$r$$$-$J$j:o=|$9$k%"%s%A%&%$%k%9%=%U%H$C$F!"/$J$/$H$b!"%G%U%)%k%HF0:n$,$=$l$G$O$^$:$$$G$7$g$&!#(B
$B!!$=$l$O$H$b$+$/$H$7$F!"%G%U%)%k%H$G$O%*%s%"%/%;%9%9%-%c%s$K$*$$$F%"!<%+%$%V%U%!%$%k$r8!::$7$J$$%"%s%A%&%$%k%9%=%U%H$OJ#?tB8:_$7$^$9$7!"%G%U%)%k%H$G$O%9%1%8%e!<%k%9%-%c%s$,@_Dj$5$l$F$$$J$$%"%s%A%&%$%k%9%=%U%H$bJ#?tB8:_$7$^$9!#(B
$B!!$H$3$m$G!"(B
$B%&%$%k%9%Q%?!<%s%U%!%$%k$N?75!G=$N$*CN$i$;(B
($B%H%l%s%I%^%$%/%m(B) $B$K$"$k!V(BGeneric$B%Q%?!<%s!W!V(BUnpacker$B%Q%?!<%s!W$NBP1~F|;~$O!"$:$$$V$s$3$m$3$mJQ99$5$l$?$s$G$9$M!#(B
$B!U(B
$BO31L>pJs$NFbMF$r>\:Y$K2r@b$9$kJsF;$K2?$N0UL#$,$"$k$N$+!)(B
($BIpED7=;K(B, 5/17)$B!#$3$s$J$K$R$I$$$3$H$K$J$C$F$$$^$9!"$3$H$r9qL1$K9-$/CN$i$7$a$k0UL#$,$"$k$N$G$O!#(B
$BEv3:$N5-;v$O(B
$B!V(B$B%M%C%HN.=P!"3$<+J8=q7W#3@iE@!!M-;v1i=,7W2h$b(B$B!W(B
(asahi.com, 5/17)
$B$G$9$,!"(B
$BC1$K!V=P$^$7$?!W$@$1$G$J$/!"$=$N8e$NBP1~>u67$r$-$A$s$H%U%)%m!<$7$?5-;v$K$J$C$F$$$k$H;W$$$^$9!#(B
$B!!$`$7$m!"8@$o$l$F$b$$$J$$$N$K>!\:Y!W$@$H$b;W$$$^$;$s$7!#(B
$B!U(B
$B;0$?$SJF;:5mFy$K9|!!9a9A!!3:Ev;\@_$+$iM"F~Dd;_(B
($B@>F|K\?7J9(B, 5/17)
$B!U(B
$B9qFb#3#72P;3!'%O%6!<%I%^%C%W!"#1#8F|$+$i%M%C%H$G8x3+(B
($BKhF|(B, 5/17)
$B!U(B
copSSH
$B$H$$$&!"(Byet another packaging of portable openssh, cygwin, some popular utilites, plus implementation of some best practices regarding security
$B$J%Q%C%1!<%8$,$"$k$s$G$9$M!#F|K\8l(B Windows $B>e$G$b$-$A$s$HF0$-$^$9!#(B
$B$+$J$j$h$5$2!#F~$C$F$$$k$b$N$O$3$s$J46$8(B:
$ ls /bin
activate-user-auto.sh cygpath.exe ln.exe sftp.exe
activate-user.sh cygpcre-0.dll ls.exe sort.exe
bash.exe cygpcre.dll mkdir.exe ssh-add.exe
cat.exe cygreadline6.dll mkgroup.exe ssh-agent.exe
chmod.exe cygrunsrv.exe mkpasswd.exe ssh-keygen.exe
chown.exe cygwin1.dll mount.exe ssh-keyscan.exe
cp.exe cygz.dll ntrights.exe ssh-keysign.exe
cygcheck.exe date.exe ps.exe ssh.exe
cygcrypt-0.dll deactivate-user.sh pwdgen.exe sshd.exe
cygcrypto-0.9.8.dll diff.exe rebase-copssh.cmd subinacl.exe
cygiconv-2.dll dumpel.exe rebase.exe tail.exe
cygintl-1.dll false.exe rm.exe tar.exe
cygintl-2.dll grep.exe scp.exe touch.exe
cygintl-3.dll gzip.exe sed.exe umount.exe
cygminires.dll less.exe setx.exe wc.exe
cygncurses-8.dll listacc.exe sftp-server.exe xcacls.exe
$B!U(B
SSH$B$N(BRFC$B2=$G2?$,!)!!8=(BTeraTerm$B3+H/
(ITmedia, 2/17)$B!#$3$s$J5-;v$,$"$C$?$N$+!#(BRFC $B2=$N$$$A$P$s$NMxE@$O!"!V(BRFC $B$K$J$C$?$3$H$G$9$7!"(BWindows $B$KI8=`AuHw$7$^$7$g$&$h(B Microsoft $B$5$s!"$$$^$5$i(B telnet $B$N;~Be$8$c$J$$$C$9$h!W$H8@$($k$3$H$+$J!#(B
$B!U(B
Security Management - May 2006:
Ten Principles of Microsoft Patch Management
(Microsoft)
6. Issues with Security Updates are documented in the Security Bulletin Master Knowledge Base Article
$B!!@N$O!"$=$NpJs$O(B Advisory $B$N(B FAQ $B%;%/%7%g%s$K=q$+$l$F$$$?$H5-21$7$F$$$k$N$@$1$I!":G6a$OJLN)$F$N(B KB $B$KJ,$1$k$h$&$K$J$C$F$$$k$_$?$$$G$9$M!#(B
$B@N$NJJ$,H4$1$J$/$F8+F($9$3$H$,$7$P$7$P!D!D(B orz
$B!U(B
IE 7$B$N%;%-%e%j%F%#2~A1$rBfL5$7$K$9$k(BIE 7 Beta2$BF|K\8lHG(B
($B9bLZ9@8w!w<+Bp$NF|5-(B, 5/13)$B!#(B
$B$J$s$@$3$N!V!J%;%-%e%j%F%#$GJ]8n$5$l$F$$$J$$!K!W$H$$$&$N$O!#(BSSL$B$,;H$o$l$F$$$J$$$H$G$b8@$$$?$$$N$+!)(B
$B%^%$%/%m%=%U%H$NF|K\8l2=78$N?M$O!"!V0BA4$G$J$$(B (not secure)$B!W$H$$$&8@MU$r$I$&$7$F$b;H$$$?$/$J$$$N$@$m$&$+!#(B*2
$B!!(Bsecure $B$H(B protected $B$H$O0c$&C18l$J$s$G$9$1$I$M$((B ($B$h$/:.F1$5$l$k$1$I(B)$B!#(B
Microosft $B$b$5$s$6$s%;%-%e%j%F%#%;%-%e%j%F%#8@$C$F$k$s$@$+$i!"(B
$B!V%;%-%e%"$G$J$$!W$G$($($s$A$c$&(B?
$B$3$l$K8B$i$:!"(BMicrosoft $B$^$o$j$K$OJQ$JF|K\8l$,$?$/$5$s$"$k$N$G!"(B
$BK]Lu%A!<%`$NCf$N?M$O$,$s$P$C$F$/$@$5$$!#(B
$B;~Be>u67$,JQ2=$7$F$$$k$s$@$+$i!"(B5 $BG/A0$HF1$8$h$&$KLu$9I,MW$J$s$F$J$$$s$G$9!#(B
$B!!$"!"$=$&$=$&!#86J8$G1$$rF'$s$G$$$k$H$3$m$O!"F|K\8l$G$b$-$A$s$H1$$rF'$s$GLu$7$F$/$@$5$$$M!#(B
$B!U(B
How's your poker face?
(F-Secure blog, 5/15)$B!#(Bcheckraised.com $B$GG[I[$5$l$F$$$?(B RBCalc.exe $B$O%H%m%$$NLZGO$G!"$7$+$b(B rootkit $B5;=Q$r;H$C$F$$$k$H$$$&OC!#(B
$B$=$3$+$i!"(BF-Secure Online Scanner Next Generation Beta (F-Secure)
$B$G$O(B rootkit $B$KBP1~$7$F$$$^$9$H$$$&@kEA$KB3$$$F$^$9(B (^^;)$B!#(B
$B!!$5$i$K$D$E$-(B: More about the "Poker Rootkit" (F-Secure blog, 5/17)
$B!U(B
$B%5!<%P$N=8@Q2=$K@x$`!X;`3Q!Y!"H/G.NL$NGzH/E*$JA}Bg$X$NBP:v$r(B
($BF|7P(B IT Pro Special)$B!#(BAPC $B$N(B
InfraStruXure InRow RC $B$N@kEA%Z!<%8!#(BAPC $B$N%b%N$O!"(B
APC$BNd5Q%=%j%e!<%7%g%s$N(B4$B$D$N%+%F%4%j(B (APC)
$B$K$^$H$^$C$F$$$k!#(BInRow RC $B$O!V%*!<%W%s2A3J!W$@$=$&$@$,!"
$B!U(B
[AML 7181] $B6&KE:a!&6/9T:N7h$N>l9g$N6[5^9TF0!J#1#9F|!K(B$B!#(B
$Bl$O6bMKF|$N$h$&$G$9!#(B
$B!U(B
$B6&KE:aH?BP(B THE INCIDENTS $B$H$$$&%5%$%H$,$"$k$s$G$9$M!#(B
$B6&KE:a#T#V!J%F%#!<%V%$!K(B
$B$d(B
$B6&KE:a#M#O#V#I#E!J%`!<%S!
$B$H$$$C$?!"6=L#?<$$%3%s%F%s%D$,7G:\$5$l$F$$$^$9!#(B
$B!U(B
Windows PE 2.0 for Windows Vista $B$N35MW(B
(Microsoft)
$B!U(B
$B8!:w%5%$%H$N!H2x8=>]!I(B---MS$B$N>pJs$r8!:w$9$k$H!$L54X78$J%5%$%H$,>e0L$K(B
($BF|7P(B IT Pro, 5/16)$B!#(BHTTP/1.0 $B$J%/%i%$%"%s%H$+$i$b8+$l$k$h$&$K$9$k$?$a$K$O;EJ}$J$$$H$$$&$3$H$+!D!D!#(B
$B!U(B
$BBh(B4$B2s(B $B%;%-%e%"(BOS$B%+%s%U%!%l%s%9(B$B!#(B
2006.06.15$B!"El5~ET9A6h!"L5NA!#(B
$B!U(B
$B%A%'%A%'%s%K%e!<%9(B Vol.06 No.10 2006.05.16
- $B6&KE:a!':#F|!"9q2q$K9T$3$&!*(B
- $B
$B!!CfF|?7J9!"9VFI$7$h$&$+$7$i$s!#(B
- Security flaw in RealVNC 4.1.1
-
$B!!$H$j$"$($:!"(BReal VNC 4.1.1 + RealVNC Ver.4.1.1 $BF|K\8lHG(B patch + $B>e5-%;%-%e%j%F%#(B patch
$B$G%P%$%J%j$r$D$/$C$F$_$?!#(B$B$3$N$X$s(B$B!#$&$^$/$$$C$F$$$k$+$I$&$+3NG'$7$F$J$$$N$G(B at your own risk $B$G!#(B
$B!!$"$H!"(BJPCERT/CC $B$+$iCm0U4-5/$,=P$F$^$9(B:
RealVNC $B%5!<%P$NG'>Z$,2sHr$5$l$k@H
(JPCERT/CC, 2006.05.17)
$B!!(BNagios 1.x / 2.x $B$K7g4Y!#(B
CGI $B%W%m%0%i%`$K$*$$$F!"(B
HTTP content_length $B%X%C%@$NCVE-2006-2489
$B!!(BNagios 2.3.1 $B$*$h$S(B 1.4.1 $B$G=$@5$5$l$F$$$k!#(B
$B!U(B
ISP$B$,LBOG%a!<%k$rJ$N:#@t;a$i$,9V1i(B
(Internet Watch, 5/16)
$B!U(B
$BF|7P(B IT Pro $B$K$b=P$F$^$7$?(B:
$B!!$"$H!"(BWinny$B$NDL?.2rFI$KD)@o!*(B ($BF|7P(B IT Pro, 5/15)
$B$H$$$&5-;v$,=P$F$^$7$?!#(B
$B!U(B
$B$D$$$K@5BN$r8=$7$?B<>e%U%!%s%I(B
$B!A3t
($BF|7P(B BP, 5/15)
$B!U(B
$B!V?7J99-9p$G<($5$l$?J|
($BH~IM$N2q(B, 5/11)$B!#(B
$B$B$N2sEz$K$J$C$F$J$$$7!D!D!#(B
$B!U(B
[AML 7135] Re: $B%5%s%W%m6&KE:aFC=8(B $B46A[#2JS(B
$B!U(B
$B>.@t
($BCf9q?7J9(B, 5/16)
$B!U(B
$B2+:=!'Cf9q!";k3&ITNI!!El5~ET$NH>J,!"#1G/$G:=Gy2=(B
($BKhF|(B, 5/16)
$B!U(B
$B$O$7$+!'45
($BKhF|(B, 5/16)
$B!U(B
$B9R6u4I@);Y1g%7%9%F%`$K>c32!!9q8r>J$,8!::;X<((B
(asahi.com, 5/16)
$B9q8r>J$O>c32$,@8$8$?%7%9%F%`$N%a!<%+!<#2Z$r;X<($7$?!#(B
$B!U(B
GPL$B$N=eu$HLdBjE@(B
(ITmedia, 5/15)$B!#(BGPL Violation FAQ
(gpl-violations.org) $B$H$$$&$b$N$,$"$k$s$G$9$M!#(B
$B!U(B
$B<+;&BP:vK!0F!"D6E^GI5D0w$GBg9K(B
(asahi.com, 5/15)
$B!U(B
Winny$B$X$N>pJsO31L$bAa4|$G$"$l$PBP=h2DG=!"%M%C%H%(!<%8%'%s%H?y1:;a9V1i(B
(Internet Watch, 5/15)
$B?y1:;a$O!V0lEY(BWinny$B%M%C%H%o!<%/$KO31L$7$?>pJs$O@dBP$K>C$($J$$$H$$$&$N$O13$@!W$H8l$k!#J,DxEY$O(B2$B=54V0JFb$KEv3:%U%!%$%k$,(BWinny$B%M%C%H%o!<%/>e$+$i>C$($F$$$k$3$H$,3NG'$G$-$?$H$$$&!#$3$l$O!"$[$H$s$I$N(BWinny$B%f!<%6!<$O%@%&%s%m!<%I$7$?O31L%U%!%$%k$r%"%C%W%m!<%I%U%)%k%@$K$OF~$l$:!"%-%c%C%7%e$b
$B!!8eH>$N!V(BWinny $B>pJsO31H%$%s%7%G%s%H%l%9%]%s%9!WOC$b$?$$$X$s6=L#?<$$!#(B
$B%N%&%O%&5M$^$C$F$k!#$5$9$,$G$9!#(B
$B!U(B
Winny$BO31L$K$O!V?N5A$J$-%-%s%?%^!W4^$`%U%!%$%kL>$G$N%]%$%>%K%s%0$,M-8z(B (Internet Watch, 5/15)$B!#$_$s$J%-%s%?%^8@$&$h$&$K$J$C$F$7$^$$$^$7$?$M!#(B
$B!U(B
$B?7$?$J%7%9%F%`6<0R$N2DG=@-$H(BWinny$B$N@H
(Internet Watch, 5/15)$B!#%V%m!<%I%P%s%I%k!<%?$d%$!<%5%M%C%H%+!<%I$N%U%!!<%`%&%'%"$r967b$7$F(B rootkit $B$r@_CV$7$F$7$^$&OC!#(B
- Security flaw in RealVNC 4.1.1
-
$B!!4XO"(B:
$B!!LdBj$N(B fix $B$O!"(B$B$3$&$$$&$3$H(B$B$G$$$$$s$G$9$+$M!#(B
$B!U(B
$B%l%8%9%H%j!&%l%8%9%H%j%O%$%V%U%!%$%k$NFbIt9=B$!!Bh0lHG(B
($B%"%@%k%H%5%$%HHo32BP:v$NIt20(B, 5/10)
$B!U(B
[AML 7109] $B?o0U7@Ls(B $BE72<$j@h$H>JD#(B $B#0#5G/EY$N#1G/4V$G#1C{#3#8#0#02/1_(B
$B!U(B
[AML 7107] NSA$B$N0cK!DL?.5-O?<}=8$O6&KE:a$HL51o$G$O$J$$(B
$B!U(B
[AML 7105] $B!V@V$B!#(B
$B1G2h!V(B$B%0%C%I%J%$%H(B&$B%0%C%I%i%C%/(B$B!W$N>R2p!#(B
$B!U(B
$B!V>pJs%;%-%e%j%F%#I88l(B2006$B!W$NF~A*:nIJ7hDj(B
(IPA ISEC, 5/12)
$B!U(B
[AML 7101] Fw: $BE>:\4?7^!cL@F|$N6/9T:N7h$OHr$1$i$l$?!"$7$+$7Mh=5$N$3$H$O$o$+$i$J$$!!#5!%#1#2$N
(5/12)
$B!U(B
$B!V:>5=%5%$%H$,;E3]$1$k%o%s%/%j%&%(%"$Nf+$KCm0U!W!$%;%-%e%"%V%l%$%s@1_7;a(B
($BF|7P(B IT Pro, 5/11)
$B!U(B
$B1Q9q!VEE;R%a!<%kGzCF!WAJ>Y!'L5:aH=7h$r:9$7La$7!":F?3$X(B
(CNET, 5/12)
$B!U(B
$B8!:w%(%s%8%s$O4m81$J%j%s%/$G$$$C$Q$$(B -- McAfee$B$,D4::Js9p(B
(ITmedia, 5/13)$B!#(B
$B85$M$?(B: The Safety of Internet Search Engines (siteadvisor.com)$B!#(B
SiteAdvisor $B$O!"(B
IE $BMQ(B$B$NB>$K(B
Firefox $BMQ(B$B$bMQ0U$5$l$F$$$^$9!#(B
$B$^$"!"(BSiteAdvisor $B$N(B advice $B$,>o$K@5$7$$$o$1$G$O$J$$$N$G$9$1$I$M!#(B
Dangerous sites soared to as much as 72% of results for certain risky keywords. Particularly dangerous keywords include "free screensavers", "bearshare", "kazaa", "download music", and "free games."
$B!!!V(Bfree screensavers$B!W$H$+$G8!:w$9$k$H!"$=$N7k2L$NLsH>J,$O$^$C$+$C$+$G!"2+?'$b2C$($k$H:GBg(B 72% ($B$3$l$O(B Yahoo! $B$N?tCM(B) $B$,%j%9%/%5%$%H$@$C$?$=$&$G!#(B
$B:rF|$N(B IE $B$N?M$NOC(B$B$O!"$3$N$"$?$j$N%3%H$H$+$r8@$$$?$+$C$?$N$+$7$i!#(B
$B!!!V9-9p%5%$%HMs$NJ}$,@V$,$$$C$Q$$!WOC$b=P$F$$$^$9!#(BGoogle$B$N9-9p$K@x$`!"%^%k%&%'%"G[I[$B$b;2>H!#(B
$B!!OC$OJQ$o$j$^$9$,!"(BFirefox $B$N%7%'%"$O(B 10% $B$r1[$($F$$$k(B (ITmedia) $B$h$&$G$9$M!#(B
$B!U(B
IPv4$B%"%I%l%98O3i$KHw$($k!J(B1$B!K%"%I%l%98O3i$O$I$3$^$G8=
(@IT, 5/13)
$B!!(BRealVNC
4.1.1 $B$K7g4Y!#(BVNC $B%5!<%P$X$N@\B3$K$*$$$F!"G'>Z$r2sHr$9$kJ}K!$,B8:_$9$k!#(B
$B$3$N7g4Y$O(B TightVNC $B$d(B UltraVNC $B$K$OB8:_$7$J$$!#$^$?(B RealVNC 4.0 $B$K$bB8:_$7$J$$!#(B
$B!!(BRealVNC 4.1.2 $B$G=$@5$5$l$F$$$k!#(B
$B%j%j!<%9%N!<%H(B$B!#(B
2006.05.16 $BDI5-(B:
$B!!4XO"(B:
$B!!LdBj$N(B fix $B$O!"(B$B$3$&$$$&$3$H(B$B$G$$$$$s$G$9$+$M!#(B
2006.05.17 $BDI5-(B:
$B!!$H$j$"$($:!"(BReal VNC 4.1.1 + RealVNC Ver.4.1.1 $BF|K\8lHG(B patch + $B>e5-%;%-%e%j%F%#(B patch
$B$G%P%$%J%j$r$D$/$C$F$_$?!#(B$B$3$N$X$s(B$B!#$&$^$/$$$C$F$$$k$+$I$&$+3NG'$7$F$J$$$N$G(B at your own risk $B$G!#(B
$B!!$"$H!"(BJPCERT/CC $B$+$iCm0U4-5/$,=P$F$^$9(B:
RealVNC $B%5!<%P$NG'>Z$,2sHr$5$l$k@H
(JPCERT/CC, 2006.05.17)
$B!!4XO"(B:
2006.05.29 $BDI5-(B:
$B!!(BRealVNC Free Edition Ver.4.1.2 $BF|K\8lHG(B ([$B$"(B] UnderDone($B$"$s$G$k$I$s(B), 2006.05.29)$B!#$D$$$K=P$^$7$?!#(B
$B!V4A;z%-!
2006.06.24 $BDI5-(B:
$B!!(BCisco Security Response: RealVNC Remote Authentication Bypass Vulnerability
(Cisco)$B!#(BCisco CallManager $B$K%P%s%I%k$5$l$F$$$k(B RealVNC $B$K$b$3$NLdBj$,$"$j!"99?7HG$,MQ0U$5$l$F$$$k$=$&$@!#(B
$B!U(B
$B@dBP$KEpD0$5$l$J$$5f6K$N0E9f%7%9%F%`!HNL;R0E9f!I$O!"(B5$BG/0JFb$K
(ascii24.com, 5/12)
$B!U(B
$B%^%s%7%g%s#1#57o!"6/EYITB-$N62$l(B
(asahi.com, 5/12)$B!#H4$-$H$j8!::(B 103 $B7oCf$N(B 15 $B7o!"(B14%$B!#(B
$B!U(B
$BCf1{@D;34F::K!?M!'FbIt4IM}$NITHwO*Dh!!9q9-J[8n;N$KJ9$/(B
($BKhF|(B, 5/12)
$B!!$?$@!"4k6HB&$NH?1~$r8+$k$H!"K\Ev$K2~3W$K8~$+$&$N$+IT0B$b$"$k!#4F::@)EYA4BN$NLdBj$H$7$F$H$i$($k$h$j$b!VCf1{@D;3$,0-$$$N$G!"2rLs$7$F$7$^$($P$$$$!W$H$$$&%P%C%7%s%0$KN.$l$F$$$k!#(B
$B!!$7$+$7!"$h$j9b$$?e=`$N4F::$r$9$k$K$O4k6HB&$NEXNO$bI,MW$G!"J#?t$N4F::K!?M$r6%$o$;$F$G$-$k$@$14F::Js=7$r0B$/>e$2$h$&$H$7$F$$$F$O!"e$OFq$7$$!#(B
$B!U(B
$B@$EDC+6h#4?M;&32!'7Y;kD#7YItJd$,5u56$NA\::Js9p=q(B
($BKhF|(B, 5/13)
$B7Y;kD#$O!VA\::$X$N1F6A$O$J$+$C$?!W$H$7$F$$$k(B ($BCfN,(B) $B!#7YItJd$O@.>k=p@83h0BA42]0w$H$7$FF1=p$K@_CV$5$l$?!V5\Bt$_$-$*$5$s!J#0#0G/#1#27n$NH/@8Ev;~#4#4:P!K0l2H#4?M;&32;v7o!W$NA\::K\It$K=jB0$7$F$$$?#0#1G/#57n!A#0#4G/#67n!"5u56$NA\::Js9p=q#3#5DL$rA\::K\It$KDs=P$7$?5?$$!#(B
$B!!IaCJ$+$iC/$bFI$s$G$J$$$N$G!VA\::$X$N1F6A$O$J$+$C$?!W$C$F$3$H$J$s$G$9$+$M!#(B
$B!U(B
$BCN$C$F$$$^$9$+!)1lAp$K$h$k2=3XJ*I(B
(fc2web.com, $B?eL57n$P$1$i$N$($SF|5-(B$B7PM3(B)$B!#(B
$B%"%l%k%.!<$H$h$/;w$F$$$^$9$,JLJ*$G!">I>u$N860x$H$J$k2=3XJ*I>u$r0z$-5/$3$9$N$,!"2=3XJ*I$G$9!#(B
$B!!(B$B2=3XJ*I$H$O(B ($B2=3XJ*I;Y1g%;%s%?!<(B) $B$b;2>H$+$J!#2=3XJ*I<+?H$O!"1lAp$@$1$,BP>]$H$J$k$o$1$G$OA4$/$J$$$N$GCm0U!#(B
$B;d$?$A$,$*4j$$$7$?$$$3$H$O!"#2E@$N$_$G$9!#(B
$B!!"(!!Jb$-%?%P%3$r$J$/$7$FM_$7$$(B
$B!!"(!!7zJ*$N40A4J,1l2=(B
$B!!40A4J,1l$O!"$^$@$^$@?J$s$G$^$;$s$M!#(B
$B!!$A$J$_$K!"L@F|(B 5/13 $B$K!"(B$B$-$i$C$H$$$-$k!V<#$k4uK>$r$D$+$_$?$$!A2=3XJ*I!&8EB
(NHK) $B$H$$$&HVAH$,J|Aw$5$l$k$=$&$G$9!#(B
$B!U(B
$B7k6I!V(BIE$B!W$O0BA4$K$J$C$?$+!)(B
($BF|7P(B IT Pro, 5/11)
$BI.l9g$K0-MQ$5$l$F$$$k$N$O!$
$B!!!V
$B!U(B
$B%A%'%A%'%s%K%e!<%9(B Vol.06 No.09 2006.05.11$B!#(B
$B!V$b$&;O$^$C$F$$$kCF05!W$NItJ,$K$D$$$F$O!"$?$H$($P(B
[AML 6991] $B!Z:FAw![!VCDBN$K$h$kHH:a!W!)!A%U%j!<%?!u67(B
$B$b;2>H!#(B
$B$J$*!"(B$BBaJa$N:G8e$N0l?M$O(B 5/11 $B$K$B$=$&$G$9(B ($BBaJa$5$l$?$N$O(B 4/30 $B$J$N$G!"(B2 $B=54V6a$/94B+$5$l$F$$$?$3$H$K$J$k(B)$B!#(B
$B!!$A$J$_$K:#F|$N6&KE:a$O(B:
$B!!$A$J$_$K6&KE:a$@$1$,L\N)$C$F$^$9$,(B ($BL\N)$C$FEvA3$NFbMF$@$+$i;EJ}$J$$$N$G$9$,(B)$B!"!VHH:a$N9q:]2=5Z$SAH?%2=JB$S$K>pJs=hM}$N9bEY2=$KBP=h$9$k$?$a$N7:K!Ey$N0lIt$r2~@5$9$kK!N'0F!W$K$O%5%$%P!
- $B5D0F?35D7P2a>pJs(B: $B3UK!(B 22$B9f(B
($B=05D1!(B)
- $B5D0FK\J8>pJs0lMw(B: $B3UK!(B 22$B9f(B ($B=05D1!(B)
- $B6&KE:a!&%5%$%P!
($BL1
$B!U(B
2006$BG/(B 5$B7n(B27$BF|(B($BEZ(B) $BBh(B23$B2s4XElJY6/2q(B$B!#El5~ETJ85~6h!"0lHL(B 1000 $B1_!#(BSOX $BK!$M$?$"$j!#(B
$B!U(B
BitTorrent$B!"3$B1$+$i(B Warner $B$X>h$j49$((B
(japan.internet.com, 5/10)
$B!U(B
$BJF@/I\$NDLOC5-O?<}=8$K%W%i%$%P%7!
(ITmedia, 5/12)
$B!U(B
$BN&>e<+1RBb$N%_%5%$%k>pJs$,!V(BShare$B!W$GN.=P!";`K4$7$?Bb0w$N(BPC$B$+$i(B
(Internet Watch, 5/12)
$B!U(B
$B!Z%G%8%?%k$B!#(B
2006.06.27$B!"El5~ET=BC+6h!"L5NA!#(B
$B!U(B
Different strokes for different folks, spyware and browsers
(SANS ISC, 5/12)$B!#%$%s%A%-%=%U%H!"$"$N
$B!U(B
Macromedia Flash - Memory Use
(mozillazine.org)
Version 8.0.24.0 of the Flash plugin has a bug that can cause it to continually consume memory while you sit on a page that has Flash content on it. [6] Until a new version of the plugin is available, workarounds are to remove the Flash plugin, block Flash content, or navigate away from pages with Flash manually.
$B!!(B[6]
$B$r8+$k$H!"(B
This bug is now fixed in Flash Player 9 beta 3:
http://labs.adobe.com/technologies/flashplayer9/
$B$H=q$+$l$F$$$k!#$U$%$`!#(B
$B!!7k6I!"8=>u$G$O(B Flash Player 7.0.63.0 $B$rF~$l$F$*$/$N$,$$$A$P$s$$$$$N$+$J$"!#$=$&$7$?$$>l9g$K!"4{$K(B Flash Player 8 $B$,F~$C$F$$$?$H$-$O!"(B$B%"%s%$%s%9%H!<%i(B$B$r;H$C$F:o=|$7!"2~$a$F(B Flash Player 7.0.63.0 $B$r%$%s%9%H!<%k$9$k$H$h$$$h$&$G$9!#(B
$B!U(B
$B%*!<%9%H%i%j%"!'L5:a
($BKhF|(B, 5/11)$B!#(B14 $BG/$O$"$^$j$K$bD9$$!D!D!#(B
$B!!(BMac OS X 10.3.9 / 10.4.6 $BMQ$N%;%-%e%j%F%#=$@5%Q%C%1!<%8!#G$0U$N%3!<%I$N
$B!!(BQuickTime 7.0.x $B0JA0$KJ#?t$N=EBg$J7g4Y!#96N,2hA|!&1GA|%U%!%$%k$r;H$C$F!"G$0U$N%3!<%I$r
$B!!(BQuickTime 7.1 $B$G=$@5$5$l$F$$$k!#(BQuickTime 7.1 $B$O(B
QuickTime Player $B%9%?%s%I%"%m%sHG$N%@%&%s%m!<%I(B (Apple)
$B$+$i%@%&%s%m!<%I$G$-$k!#(B
$B!U(B
$B%P!<%A%c%k
($B7Y;!D#(B, 5/1)
$B!U(B
$B0u;z<0%"%k%3!<%k8!CN4o$N;v0FBP1~(B
($B7Y;!D#(B, 4/27)$B!#1?MQ$GBP1~$9$k$s$@$=$&$G$9!#(B
$BCH5$1?E>$,==J,$J$5$l$F$$$k$+H]$+$O$I$&$d$C$FH=CG$9$k$s$G$7$g$&!#(B
$B!U(B
$B%RAG1x@w!'0f8M?e0{MQCf;_8e$bG>$N3hF0NLDc2
($BKhF|(B, 5/11)
$B!U(B
$B
($BKhF|(B, 5/11)
$B!U(B
HEADS UP: FreeBSD 4.10 EoL
(freebsd-security ML)$B!#(BRELENG_4_10 $B$O(B 7/1 $B$G%*%o%j!#(B
RELENG_5_4 $B$bF1;~$K=*$k$O$:$@$C$?$N$@$1$I!"(B5.5-RELEASE $B$N%j%j!<%9$,CY$l$F$$$k$N$G(B 10/31 $B$^$G1dD9!#(B
$B!!(BRELENG_6_1 $B$O(B Extented $B07$$$G(B 2008.05.31 $B$^$G%5%]!<%H$5$l$k$=$&$G!#(B
RELENG_4_11 $B$O(B 2007.01.31 $B$^$G!#:#G/Cf$K(B 4.11 $B$+$i(B 6.x $B$K0\9T$7$J$-$c$J$i$s$J$"!#(B
$B!U(B
$B!V:bL3=tI=$h$j!"(BPC$B$rD4$Y$?J}$,H/8+$G$-$kIT@5$OB?$$!W(B
($BF|7P(B IT Pro, 5/11)
$B!U(B
ePO$B%5!<%P$b$7$/$O%j%b!<%H%3%s%=!<%k$K$F(BDcom$B%(%i!<(B 10021$B$,H/@8$7$^$9!#(B
($B%^%+%U%#!<(B, 5/10)
$B!U(B
Managing the WSUS Automatic Updates Client Download, Install, and Reboot Behavior with Group Policy
(Microsoft)$B!#F|K\8lHG$,$[$7$$$J$"!#(B
$B!U(B
$BBg:eI\N)Bg$N=u65pJs4^$`(BHDD$B$rCV$-K:$l(B
(Internet Watch, 5/11)
$B!U(B
$B!V(BWeb$B%Z!<%8$NFbMF$GH=CG!W!$%*%s%i%$%s:>5=BP:v%=%U%H$r%;%-%e%"%V%l%$%s$,H/I=(B ($BF|7P(B IT Pro, 5/11)
$B!U(B
Theo de Raadt, OpenBSD 3.9 $B$r8l$k(B
(slashdot.jp, 5/11)
$B!U(B
$B!V8r49=$M}$7$?8E$$%O!<%I%G%#%9%/$b$*EO$7$7$^$9!W(B---$B%G%k$,?7%5!<%S%9(B
($BF|7P(B IT Pro, 5/10)$B!#(B
$B%G%k!"8r49$7$?%O!<%I%G%#%9%/$NJV5Q$,ITMW$H$J$kJ] (dell.com) $B$NOC!#(B
HDD$BJV5QITMW%5!<%S%9!W$O!">/3[$NJ]>N!"(B5$B7n2<=\3+;OM=Dj!K!W$rAH$_9g$o$;$k$3$H$G!"$*5RMM@h$G(BHDD$B$r;HMQIT2DG=$J>uBV$K$9$k$?$a!"(BHDD$B$+$i%G!<%?FI$_=P$7$rIT2DG=$K$7$^$9!#(B
$B!U(B
$B!V9q;:%;%-%e%"(BOS$B$N(BTOMOYO Linux$B$O(BSELinux$B$h$j4JC1!W(B---NTT$B%G!<%?(B $B%*!<%W%s%=!<%93+H/%;%s%?(B $B4dED9@;a(B
($BF|7P(B IT Pro, 5/10)
$B!U(B
$B9R6u8rDL4IM}%;%s%?!
($BKhF|(B, 5/10)
$B!U(B
$B9q2q#N#O#W!'6&KE:a$NBPN)9=?^!!%F%m$rKI$0$H$$$&$1$l$I(B
(JANJAN, 5/10)
$BA0=P$N;29M?M!&F#K\;a$O!V@-A1@b!W$KN)$D$Y$-$@$H$7$F!VA\::5!4X$r?.Mj$9$k!#$=$&$$$&A0Ds$GK!N'$r$D$/$k$b$N$@!W$H$$$&N)>l$rI=L@$7$?!#(B
$B!!!VNr;K$+$i3X$V!W$H$$$&H/A[$,$J$$J}$J$N$+$7$i$s!#(B
$B!U(B
$BCf1{@D;34F::K!?M!'>e>l4k6H7c?L!"7@Ls8+D>$9F0$-9-$,$k(B
($BKhF|(B, 5/10)
$B!U(B
$B=;4p%M%C%H!!!V;TL1A*BrJ}<0!W$rA40w;22CJ}<0$K!!2#IM;T(B
($BKhF|(B, 5/10)
- MSDTC $B$*$h$S(B COM+ $B$N@H
-
$B!!(BMicrosoft Distributed Transaction Coordinator$B%a%b%jJQ99@H
($B=;>&>pJs%7%9%F%`(B / eEye)
$B$H$OJL$N7g4Y$bB8:_$7$?$N$@$=$&$@!#(B
$B!!$3$N7g4Y$O4{$K(B MS05-051 patch $B$G=$@5$5$l$F$$$k$=$&$@!#(B
$B$7$+$7$3$N7g4Y$G$O(B Windows NT 4.0 $B$bBP>]$K$J$k$N$@$=$&$@!#(B
NT 4.0 patch $B$J$s$F$b$N$O$b$A$m$s$J$$!#(B
$B!U(B
$BAp9FAO:nBgBb(B
(maisov.oops.jp) $B$N!V$J$K$o$NAmE}0lBe5-!W!"$"$^$j$K$*$b$7$m$$$N$G0l5$FI$_$7$F$7$^$C$?!#(B
$B!V(B$BJd5k@o!A2?$,>!GT$r7hDj$9$k$N$+!A(B$B!W(B
$BI|4)5-G0$G(B
$B$J$K$2$K$0$0$C$?$i(B $B2$=#@o5-;qNA(B
$B$,$R$C$+$+$C$F!"$=$l$GFI$_$O$8$a$?$o$1$G$9$,!"$d$a$i$l$J$$;_$^$i$J$$!#(B
$B!!!D!D!V(B$BJd5k@o!A2?$,>!GT$r7hDj$9$k$N$+!A(B$B!W$O!V?=$7Lu$4$6$$$^$;$s$,!"8=:_$4CmJ8$$$?$@$1$^$;$s!W$K$J$C$F$^$9$M!D!D!#(B
$B!U(B
Apache HTTP Server 2.2.2 Released
(apache.org) $B$@$=$&$G$9!#(B1.3.35 / 2.0.58 $B$bEP>l$7$F$$$^$9!#(B
$BDEED$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
$BF|K\$N>pJs<}=83hF0$O$I$3$,H4$1$F$$$k$N$+!JBh(B3$B2s!K(B
($BF|7P(B BP, 5/8)
$B!U(B
Winny $B$M$?(B
$B!U(B
$B:R32;~$KLr$KN)$D!H%i%8%*!I!H7HBSEEOC$N=
(SONY, 5/10)$B!#$h$5$2$J46$8!#(B
$B!U(B
from IPA ISEC
$B!U(B
WILLCOM$B$,L>8E20;T8rDL6I$K935D(B
(slashdot.jp, 5/9)
$B!U(B
$B%Q%9%o!<%I%A%'%C%+!<(B (Microsoft)$B!"(B
$B=$@5$5$l$?$h$&$G$9!#E,@Z$J(B 14 $BJ8;z$G(B BEST ($B:G6/(B) $B$K$J$k$N$O;EMM$@$=$&$G$9!#(B
$B4XO"(B: $B!V$"$J$?$N%Q%9%o!<%I$O0BA4!)!W!$%^%$%/%m%=%U%H$,%A%'%C%/!&%D!<%k$r8x3+(B
($BF|7P(B IT Pro, 5/10)
$B!U(B
$B4Z9q$N=P@8N(!V#1(B.$B#0#8!W$N%7%g%C%/(B
($BEl0!F|Js(B, 5/9)
$B!U(B
$BKI1RD#!'JF73%_%5%$%k71N}$K!"3$<+%$!<%8%94O$,=i;22C$X(B
($BKhF|(B, 5/9)
$B!U(B
$BBQ?L56B$!'8x1D=;Bp$G$bH/3P!!@_7W2q
($BKhF|(B, 5/9)
$B!U(B
$B@i1_;%$K0u:~%_%9!"0lIt<+HN5!$G;H$($:(B
(TBS, 5/9)$B!"(B
$B<+F0HNGd5!Ey$KDL$j$K$/$$@i1_7t$K$D$$$F(B
($B9qN)0u:~6I(B, 5/9)
$B!U(B
$B!V6&KE:a!W=$@56(5D!"M?E^$,L1
($BFIGd(B, 5/9)$B!#Hy=$@5$M$'!D!D!#(B
$B!U(B
$B6[5^CO?LB.Js!'!V?LEY#7!W$O%W%m%0%i%`%_%9!!5$>]D#$,H/I=(B
($BKhF|(B, 5/9)
$B!U(B
$B2q7W;N4F::?3!'Cf1{@D;34F::K!?M$X$N6HL3Dd;_=hJ,$r>5G'(B
($BKhF|(B, 5/9)$B!"(B
$B002=@.!"4F::K!?M$rCf1{@D;3$+$iJQ99$b(B
($BFIGd(B, 5/9)
$B!U(B
$B%7%F%#%P%s%/!'Bg5,LO$J%7%9%F%`>c32!!=PF~6b%_%9#2#8K|7o(B
($BKhF|(B, 5/9)$B!"(B
$B8\5R8}:Bc32$NH/@8$K$D$$$F(B
(citibank, 5/9)
$B!U(B
$B#T#B#SHVAH$N%@%$%(%C%HK!!"EG$-5$$J$I$N6l>p#6#5#07o(B
(asahi.com, 5/9)$B!"(B
$BHVAH$G>R2p$7$?!VGr$$$s$2$sF&%@%$%(%C%HK!!W$K4X$9$k$*CN$i$;(B
(TBS, 5/9)
$BHVAH$G$O!"!VF&$O@8$G?)$Y$k$H$*J"$r$3$o$962$l$,$"$j$^$9!W!VF&$K%"%l%k%.!<$N$"$kJ}$d$*J"$r$3$o$9>uBV$,$D$E$$$?J}$O?)$Y$J$$$G2<$5$$!W!VE|G"IB$NJ}$O0e;U$KAjCL$7$F$+$i$K$7$F$/$@$5$$!WEy$NCm0U4-5/$r9T$$$^$7$?!#(B
$B$7$+$7!"J|Aw8e!"0lIt$NJ}!9$+$i!X7c$7$$SREG!Y!X5^7c$J2I>u$rAJ$($k6l>p$,!"$3$l$^$G(B30$B?t7o4s$;$i$l$F$*$j$^$9!#(B
($BCfN,(B)
$BJ#?t$N@lLg2H$K!":#2s$N>I>u$rAJ$($?J}!9$N>pJs$r=8Ls$78+2r$r5a$a$?$H$3$m!"8=;~E@$G$O!"@8F&$K4^$^$l$k%l%/%A%s$J$I$N@.J,$,!"2CG.IT==J,$N$?$a$K;D$j!"$3$l$,0_$dD2$NG4Kl$N1j>I$r0z$-5/$3$7!"SREG$d2I>u$K;j$C$?2DG=@-$,9b$$$3$H$,J,$+$j$^$7$?!#(B
$B!U(B
$BE4J4Kv:.F~%Z%C%H%\%H%k!"$5$i$K#1#8#0K|K\2s<}$X(B
(asahi.com, 5/9)$B!"(B
$B<"2l9)>l@=B$$N@=IJ$NDI2C<+
($BF|K\%3%+!&%3!<%i(B, 5/9)
$B!!(BExchange 2000 / 2003 $B$K7g4Y!#(BExchange $B$N(B
Collaboration Data Objects for Exchange (CDOEX) $B$*$h$S(B Exchange Collaboration Data Objects (EXCDO) $B5!G=$K$*$1$k!"%a!<%k$N(B
iCAL $B$*$h$S(B vCAL $B%W%m%Q%F%#$N=hM}$K7g4Y$,$"$j!"(BExchange $B%5!<%P>e$GG$0U$N%3!<%I$rCVE-2006-0027
$B!!(Bpatch $B$,$"$k$N$GE,MQ$9$l$P$h$$!#$?$@$7!"$3$N(B patch $B$K$O(B
KB912918 - Users cannot send e-mail messages from a mobile device or from a shared mailbox in Exchange 2000 Server and in Exchange Server 2003
(Microsoft) $B$NFbMF$,AH$_9~$^$l$F$$$k$?$a!"I{:nMQ$KCm0U$9$k$3$H!#(B
2006.05.18 $BDI5-(B:
$B!!4XO"5-;v(B: Exchange Server$B$N%"%/%;%98";EMMJQ99$G!$JF9q$N%7%9%F%`4IM}
($BF|7P(B IT Pro, 2006.05.17)$B!#I{:nMQ$NOC$,>\=R$5$l$F$$$k!#(B
- $B$$$m$$$m(B (2006.01.08)
$B!!(Bapache 1.3.35 / 2.0.58 $B$,EP>l$7$F$$$^$9!#(BCVE-2005-3357 $B$,=$@5$5$l$F$$$^$9!#(B
$BDEED$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
- Apache $B$N%5!<%P!<%5%$%I%$%a!<%8%^%C%W=hM}%b%8%e!<%k$N%/%m%9%5%$%H%9%/%j%W%F%#%s%0$N@H
-
$B!!(Bapache 1.3.35 / 2.0.58 $B$,EP>l$7$F$$$^$9!#$3$N7g4Y$,=$@5$5$l$F$$$^$9!#DEED$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!!(BDreamweaver 8 / MX2004 $B$K7g4Y!#(BDreamweaver $B%5!<%P%S%X%$%S%"$K$h$C$F@8@.$5$l$k%3!<%I$K(B SQL $B%$%s%8%'%/%7%g%s$,2DG=$J7g4Y$,B8:_$9$k!#(B
CVE: CVE-2006-2042
$B!!(BDreamweaver 8 $B$G$O(B Dreamweaver 8.0.2 $B$G=$@5$5$l$F$$$k!#(B
Dreamweaver MX 2004 $B$G$O!"@8@.$5$l$k%3!<%I$r!"(BProtecting ColdFusion server behaviors from SQL injection vulnerability (Adobe) $B$K=>$C$F=$@5$9$k$7$+$J$$!#(B
$B!!(BWindows 2000 / XP / Server 2003 $B$K7g4Y!#(B
Microsoft Distributed Transaction Coordinator (MSDTC) $B$K(B 2 $B$D$N(B
buffer overflow $B$9$k7g4Y$,$"$j!"(Bremote $B$+$i(B DoS $B967b$r
- MSDTC $B$NL58z$J%a%b%j(B $B%"%/%;%9$N@HCVE-2006-0034
- MSDTC $B$N%5!<%S%95qH]$N@HCVE-2006-1184
$B!!$3$N$&$A(B CVE-2006-1184 $B$O!"(BMS05-051
$B$K$*$1$k=$@5$,IT==J,$@$C$?$?$a$KH/@8$7$?$b$N$@$=$&$G$9!#(B
$B!!(Bpatch $B$,$"$k$N$GE,MQ$9$l$P$h$$!#(B
$B!!(BAPSB06-03 Flash Player Update to Address Security Vulnerabilities $B$H(B
Macromedia Flash Player$BIT@5%a%b%j%"%/%;%9@H
$B$NOC!#(B
CVE: CVE-2006-0024
CVE-2005-2628
$B!!(BMS06-020 patch (913433) $B$O(B IE $B$KF1:-$5$l$F$$$k(B Flash Player 5 / 6 $B$KBP1~!#(BFlash Player 7 $B0J9_$r%$%s%9%H!<%k$7$F$$$k?M$O!"(BAdobe $B$+$i:G?7$r(B get $B$9$k!#(BMS06-020 patch $B$O(B Flash Player $B$N%P!<%8%g%s$r8+$F$$$k$h$&$G!">/$J$/$H$bl9g$O(B MS06-020 patch (913433) $B$O8=$l$J$$$h$&$K8+$($k!#(B
$B!!(BFlash Player 7 $B0J9_$r%$%s%9%H!<%k$7$F$"$k$K$b$+$+$o$i$:(B
Windows Update $BEy$G(B MS06-020 patch (913433) $B$N%$%s%9%H!<%k$,9T$o$l$F$7$^$&(B
($B$=$7$FEvA3<:GT$7$F$7$^$&(B) $B>l9g$O!"(B
KB913433 - MS06-020: Vulnerabilities in Macromedia Flash Player from Adobe could allow remote code execution
(Microsoft) $B$K4p$E$$$F!"(BFlash Player 5 / 6 $B$r:o=|$7$F$7$^$($P$h$$$h$&$@!#(B
$B6qBNE*$K$O!"(B%windir%\system32\Macromed $B$K$"$k(B
Flash.ocx $B$*$h$S(B/$B$^$?$O(B Swflash.ocx $B$r:o=|$9$l$P$h$$!#(B
$B!!8=:_%$%s%9%H!<%k$7$F$$$k(B Flash Player $B$N%P!<%8%g%s$O!"(B$B$3$N%Z!<%8(B$B$G3NG'$G$-$k!#(B
$B$^$?!"(BMacromedia Flash Player $B$N%P!<%8%g%s%F%9%H(B
(adobe) $B$G$h$j>\:Y$J>pJs$,3NG'$G$-$k(B (hideck $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9(B)$B!#(B
$B!!$J$*!"(BFlash 7 / 8 $B$N>l9g$O!"(B7.0.63.0 $B$*$h$S(B 8.0.24.0 $B0J9_$G$J$$$H%;%-%e%j%F%#7g4Y$O=$@5$5$l$F$$$J$$$N$GCm0U!#$=$&$G$J$$>l9g$O(B
Player Download
Center $B$+$i:G?7$N(B Flash Player $B$rF~
2006.05.12 $BDI5-(B:
$B!!(B7.0.63.0 $B$rF~l9g$O!"(BFlash Player 8 $B$r%5%]!<%H$7$F$$$J$$%*%Z%l!<%F%#%s%0%7%9%F%`MQ$N(B Flash Player $B%"%C%W%0%l!<%IHG(B
(adobe) $B$r;2>H!#(B
$B!!(B2006 $BG/(B 4 $B7nHG0JA0$N(B Sophos AntiVirus $B$K7g4Y!#(BCAB $B%U%!%$%k$NZDI-06-012: Sophos Anti-Virus CAB Unpacking Code Execution Vulnerability
(zerodayinitiative.com)
$B!!:G?7(B (2006 $BG/(B 5 $B7nHG(B) $B$N(B Sophos AntiVirus $B$G=$@5$5$l$F$$$k!#(B
$B!U(B
$B?M$O$J$<%&%$%k%9%U%!%$%k$r3+$/$N$+(B
(ITmedia, 5/8)$B!#(B
$B!V$I$&$7$F$b$d$j$?$$?M$O(B Winny $B@lMQ(B PC $B$rMQ0U$7$^$7$g$&!W$H$$$&%a%C%;!<%8$KJQ99$9$Y$-$J$N$G$O!#(B
$B!U(B
$B>pJsN.=P!!F|N)
($BKhF|(B, 5/8)$B!"(B
$BEvpJsN.=P$K$D$$$F(B
($BF|N)(B, 5/2)
$B!U(B
$BJF(BMicrosoft$B!$%;%-%e%j%F%#!&%[!<%k$N>pJs3+<(ITB-$GHsFq$rMa$S$k(B
($BF|7P(B IT Pro, 5/1)
$B!U(B
OpenSSL
0.9.8b / 0.9.7j $B$,=P$F$$$^$9!#(Biida $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
$BJF(BMcAfee$B!$(BIntel Mac$B8~$1%"%s%A%&%$%k%9!&%=%U%H!V(BMcAfee VirusScan for Mactel$B!WH/I=(B
($BF|7P(B IT Pro, 5/8)$B!#$h$&$d$/$G$9$+!#(B
McAfee VirusScan for Mactel$B$O!$(BIntel$B%Y!<%9(BMac$B$N(BPowerPC$B%M%$%F%#%V!&%"%W%j%1!<%7%g%s!&%(%_%e%l!<%?!V(BRosetta$B!W>e$G:nF0$7!$(BMac$B$*$h$S(B Windows$B%Y!<%9$N%&%$%k%9$d%H%m%$$NLZGO$J$I$N%^%k%&%(%"$+$i(BMac$B$r
$B!!:#$4$m=P$F$-$?$/$;$K!"%M%$%F%#%V$8$c$J$$$C$F$+!D!D!#(B
$B!U(B
$BL)9p
($B%"%U%,%K%9%?%s%3%i%`(B, 5/6)
$B!U(B
[AML 7004] $B@8$-$k$,$?$a$KN"@Z$C$??M!9(B
$B!U(B
$B?J$^$J$$JFFC5vK!2~3W(B
$B!A@h4j
(PC Watch, 5/2)
$B!U(B
Winny$B3+H/pJsO3$($$BP:v$rDs0F(B
(Enterprise Watch, 5/8)
2$B$D$a$O!"30It%W%m%0%i%`$G$NBP1~J}K!$@!#(BUpfolder.txt$B$=$N$b$N$r=q$-49$($?$j!">!l9g$K7Y9p$rH/$9$k$H$$$&4F;k%W%m%0%i%`$rF3F~$9$k$H$$$&$b$N$@!#(B
$B!!(B$B!V%U%!%$%k(B $BJQ99(B $B4F;k!W$G$0$0$k(B
$B$H!"$$$m$$$m=P$F$-$^$9$M!#(B
- $B%U%)%k%@4F;k(B ($B?&>l$G;H$($k%=%U%H(B)$B!#DjHV%"%W%j!#(B
- $B%U%!%$%k4F;k%D!<%k(B(for Windows 2000/2003) ($BF|K\$N(BWEB$B2~cbHo32>u67(B)
- $BB>(BPC$B$+$i$N6&M-%U%)%k%@$X$N%"%/%;%9$r4F;k$70lMw!&%m%05-O?!V(BFAccLog Free$B!W(B
($BAk$NEN(B) ($B$O$J$:$-$s$5$s>pJs$"$j$,$H$&$4$6$$$^$9(B)
- .NET TIPS:
$B%U%!%$%k$d%G%#%l%/%H%j$N:n@.!?JQ99!?:o=|$r4F;k$9$k$K$O!)(B
(@IT)$B!#(B.NET Framework $B$r;H$&J}K!!#(B
- $B%U%)%k%@!"%U%!%$%k$NJQ99$r4F;k$9$k(B (dobon.net)$B!#(B.NET Framework $B$r;H$&J}K!!#(B
- $B%U%!%$%kJQ99$N4F;k(B
(Microsoft)$B!#(BVBScript + WMI $B$r;H$&J}K!!#(B
- $B%U%!%$%k$NJQ99$r4F;k$9$k%9%/%j%W%H(B ($B
$B!!(BVSE 8.0i $B$@$H!"%"%/%;%9J]8n$r;H$C$F$$$m$$$m@_Dj$G$-$^$9!#(B
$B!U(B
KB907747 - How to update the Intelligent Message Filter version 2 in Exchange Server 2003 SP2
(Microsoft)$B!#(Bpatch $B$,=P$F$$$^$9!#(B
$B!U(B
Longhorn Server$B%Y!<%9$N%Q%C%AG[I[%5!<%P$O2?$r3W?7$9$k$+!)(B
(ITmedia, 5/8)$B!#(BSMS 2003 R2 / SMS v4 $B$NOC!#(B
$B!U(B
$B%P!<%A%c%k%^%M!<$,%j%"%k%^%M!<$KN>BX$G$-$kF|$,Mh$?(B
(slashdot.jp, 5/7)$B!#$3$N%2!<%`$O:G=i$+$i(B RMT $B2DG=$J$h$&$K@_7W$5$l$F$$$kLOMM$G!"!V(BATM $B$,BP1~$7$?!W$H$$$&ItJ,(B$B$@$1(B$B$,%K%e!<%9$i$7$$!#(B$B%*%s%i%$%s(BRPG$B7P:Q$N:G@hC<(B
$B!V(BPROJECT ENTROPIA$B!W$rM7$V(B (MMORPC $BDL?.(B, 2005.12.05) $B$rFI$`8B$j$G$O!"8=e$N87$7$5$N$"$k@$3&$i$7$$!#(B
$B!U(B
$B!T(B ESPIO! $B!UED86Am0lO/!V$3$&$$$&5DO@$r$b$C$H9q2q$G$b$d$l$h!*!W(B$B!#(B
$B6&KE:a$M$?!#(B
$B7o$N%5%s%W%m8+$F$^$7$?$,!";22C
$B!U(B
$B?6$j9~$a:>5=!'El5~Ho32!"Bg:e$N#3#0G\!!ETL1$O$*?M$h$7!)(B
($BKhF|(B, 5/6)$B!#Nc$N!V(B$BBg:e$N%*%P%A%c%s$N(B CM$B!W!"El5~$G$bJ|Aw$9$l$P(B?
($B8+$?$$J}$O$3$A$i(B)
$B!U(B
$B:#EY$OET;TIt$r<+F0AvGK(B $B!ABh(B3$B2s(B Darpa Grand Challenge $B3+:E7hDj(B
(slashdot.jp, 5/6)
$B!U(B
$B30L3
(FujiSankei Business i., 5/4)$B!#%A%'%A%'%s(B / $B%m%7%"$M$?!#(B
$B!U(B
Remove Toolbar$B$NBP=hK!(B
($B%"%@%k%H%5%$%HHo32BP:v$NIt20(B, 5/7)
$B!!(Brsync 2.6.7 $B0JA0$K7g4Y!#(Brsync $B$K4^$^$l$k(B patches/xattrs.diff $B$K7g4Y$,$"$j!"(B
receive_xattr() $B$K$*$$$F(B integer overflow $B$,H/@8!"30It$+$iG$0U$N%3!<%I$rCVE-2006-2083
$B!!(Brsync 2.6.8 $B$G=$@5$5$l$F$$$k!#(B
$B$^$?!"(Bxattrs.diff $B$rE,MQ$7$F$$$J$1$l$P$3$N7g4Y$O$J$$!#(B
$B!!(BNagios 1.x / 2.x $B$K7g4Y!#(B
CGI $B%W%m%0%i%`$K$*$$$F!"(B
$BIi$N(B HTTP content_length $B%X%C%@$NCVE-2006-2162
$B!!(BNagios 2.3 $B$*$h$S(B 1.4 $B$G=$@5$5$l$F$$$k!#(B
- Internet Explorer $BMQ$NN_@QE*$J%;%-%e%j%F%#99?7%W%m%0%i%`(B (912812) (MS06-013)
-
$B!!(BMS06-013 $B$KH<$&(B IE (ActiveX) $B;EMMJQ99$NI{:nMQ$,(B Exchange $B$GH/@8$9$k$=$&$G!"(BExchange 2003 $B$K$D$$$F$O(B patch $B$,L5=~8x3+$5$l$F$$$^$9!#(B
$B!!e5-$,$I$A$i$J$N$+$O$h$/$o$+$j$^$;$s!#(B
$B!!(BExchange 2000 $B$K$D$$$F$O!"M-=~%5%]!<%H$+$iF~
- $B%5!<%P!<(B $B%a%C%;!<%8(B $B%V%m%C%/$N@H
-
$B!!(BKB896427 - $B%;%-%e%j%F%#99?7%W%m%0%i%`(B 885250 (MS05-011) $B$N%$%s%9%H!<%k8e!"(BWindows XP $B$^$?$O(B Windows Server 2003 $B$G%M%C%H%o!<%/6&M-$N%5%V%U%)%k%@$NFbMF$,I=<($5$l$J$$$3$H$,$"$k(B
(Microsoft)$B!#(B8+3 $B%U%!%$%kL>$N@8@.$rL58z$K$7$F$$$k4D6-$K(B MS05-011 patch $B$r%$%s%9%H!<%k$9$k$H!"IT6q9g$,H/@8$9$kLOMM!#(B
patch $B$,=P$F$$$^$9!#(B
$B!U(B
$BK=O*%&%$%k%9!'9q;:%=%U%H!V#S#h#a#r#e!W$GHo32@i7oD6$9(B
($BKhF|(B, 5/7)
$B!U(B
$B8M@RF%K\@A5a!'J[8n;N$bM}M3L@<(!!IT@5KI;_$GK!@)?3It2q(B
($BKhF|(B, 5/7)
$B!U(B
$B%Y%C%-!<9pAJ$X!*CT4AQM:a;v7o$GHo32
($B%J%$%9%](B, 5/4)
$B!!(B $B$=$s$J62$m$7$$CT4AQM:a$K$b$+$+$o$i$:!"%Y%C%-!<$O7Z!9$7$/!"$3$s$JH/8@$r$7$F$$$?$H$$$&$N$@!#(B
$B!V%Y%C%-!<$O$+$D$F!"%F%l%S$G!VCT4A$r#5?MJa$^$($?$s$G$9!#$G$b$=$N$&$A$N#2?M$O4V0c$$$G$7$?!W$HGv$i>P$$$rIb$+$Y$D$D8@$$J|$C$?$N$G$9$+$i!"$R$I$9$.$kOC$G$9!#%Y%C%-!<$K!VCT4A!W$K$G$C$A>e$2$i$l$FJa$^$C$?!"$^$8$a$J%5%i%j!<%^%s$NCf$K$O!";E;v$O$b$A$m$s2HDm$b$a$A$c$/$A$c$K$J$C$?CK@-$bJ#?t$$$^$9!#%Y%C%-!<$,%F%l%S$G%X%i%X%i>P$$$J$,$iOC$7$F$$$k$N$r8+$k$H5v$;$J$$$HOC$7$F$$$k?M$bEvA3$$$^$9!W!JF1!K(B
$B!!$$$d$O$d!#(B
$B!!(B $B%Y%C%-!<$,%F%l%S$G!VCT4A7bB`<+K}!W$r7+$jJV$9EY$K!"$=$l$K1F6A$ru$b$"$k!#(B
$B!V%Y%C%-!<$,%F%l%S$GCT4ABaJa$NOC$r$7$F$$$?1F6A$G!"$&$A$i$b%`%7%c%/%7%c$9$k;~$OE,Ev$J%*%d%8$r!VCT4A$7$J$$$G$h!*!W$C$FJa$^$($F1X0w$KFM$-=P$7$?$j$7$F$k$h!W!JETFb$N=w;R9b@8!K(B
$B!!CK=w$rLd$o$:!"@$$NCf$K$O!VJ?5$$G13$r$D$/?M!W$H$$$&?M
$B!!$H$3$m$G%Y%C%-!<;a$H$$$&$H!"(B$B$3$&$$$&%]%9%?!<(B$B$,$"$j$^$7$?$M!#(B
- Windows - 2 $B7o!#:GBg?<9oEY(B: $B6[5^(B
- Exchange - 1 $B7o!#:GBg?<9oEY(B: $B6[5^(B
$B!!(BExchange $B$M$?$O$R$5$7$V$j$J5$$,!#(B
Exchange $B$M$?$K$D$$$F$O$5$i$K!"(BKB912918 - Users cannot send e-mail messages from a mobile device or from a shared mailbox in Exchange 2000 Server and in Exchange Server 2003
(Microsoft) $B$NFbMF$,AH$_9~$^$l$k$H$$$&I{:nMQ$,$"$k$=$&$G!#(B
$B!U(B
$B%^%$%/%m%=%U%H(B $B%;%-%e%j%F%#>pJs$N;vA0DLCN(B
(Microsoft)
5 $B7n$N!V%^%$%/%m%=%U%H%;%-%e%j%F%#>pJs$N;vA0DLCN!W$K$D$$$F$N$*CN$i$;(B :
$B;vA0DLCN$O!"Kh7n$NDj4|E*$J%;%-%e%j%F%#>pJs$N%j%j!<%9$N(B 3 $B1D6HF|A0$K8x3+$rM=Dj$7$F$*$j$^$9!#(B $B$3$l$OJF9q$N%+%l%s%@!<$K4p$E$$$F$$$^$9$N$G!"F|K\$G$O=KF|$G$O$4$6$$$^$9$,!"(B5 $B7n(B 5 $BF|$N8x3+$rM=Dj$7$F$*$j$^$9!#(B
$B!!:#7n$N(B Windows Update $B$NF|$O(B 5/10 $B$J$N$G!"=KF|$@$1$I(B 5/5 $B$K;vA0DLCN$,=P$^$9!"$H$$$&OC!#(B(MSKK $B$NCf$N?M$O5YF|=P6P$G$7$g$&$+!D!D(B)
$B!U(B
$B%3%s%T%e!<%?%&%$%k%9!&IT@5%"%/%;%9$NFO=P>u67(B[4$B7nJ,(B]$B$K$D$$$F(B
(IPA, 5/2)
$B:#7n$N8F$S$+$1!'(B
$B!V%;%-%e%j%F%#BP:v%=%U%H%&%'%"$N2!$7Gd$j$KCm0U!*!*!W(B
$B!=!=!=!!2x$7$2$J7Y9p$r??$K
$B!!(BIPA $B$O$O$C$-$j$H$O=q$$$F$J$$$1$I!"(BWinFixer $B$H$+(B WinAntiSpyware $B$H$+$KBeI=$5$l$k%$%s%A%-%=%U%H$NOC$G$9$M!#(B
$B!U(B
$BD9<~4|CO?LF0$rI|85(B:
$B#6#0G/A0$NElFn3$CO?L(B ($BCfF|(B, 5/2)
$B!U(B
$B7zC[2H$,@_7W$7$?66$GAj
($BF|7P(B BP, 4/26)
$B!U(B
$BHsJFF1LA$,%$%i%s$r5_$&!)(B
(tanakanews.com, 4/25)
$B!U(B
$B86H/@bL@2q!'J]0B1!B&
($BKhF|(B, 5/1)$B!#$h$[$I%^%9%a%G%#%"$KJ9$+$l$?$/$J$$$h$&$JFbMF$J$s$@$m$&$+!#(B
$B!U(B
$B%Q%l%9%A%J!'Dl$D$/0eLtIJ!"FO$+$L?MF;1g=u!!%,%6CO6h(B
($BKhF|(B, 5/1)
$B0lJ}!"%$%9%i%(%kEv6IuBV$O6K$a$F0-$$$,!"?MF;E*$J4m5!$O5/$-$F$$$J$$!W$H$N8+2r$@!#(B
$B!!@o
$B!U(B
$B%a!<%II~$N=w!'CO28E20(B
($BKhF|(B, 5/1)
$B!!D4$Y$G$O!"=w$O#3#0:P$/$i$$$G?HD9#1#6#0!A#1#7#0%;%s%A!#%T%s%/$N%a!<%II~$r?H$KCe$1$F$*$j!"Gr$N%O%$%=%C%/%9$H9u$N%(%J%a%k7$$rMz$$$F$$$?!#H1$OCc?'$@$C$?!#(B
$B!!Ja$^$C$?!"$H$O=q$+$l$F$$$J$$$N$G!"HH?M$O$I$&$d$iF(AvCf$N$h$&$G$9$M!#(B
$B!!4XO"(B: $B%a%$%II~$N=w!"L>8E20$NCO2
($BFIGd(B, 5/1)$B!#FIGd$O%a%$%I!"KhF|$O%a!<%I$J$s$G$9$M!#(B
($BFIGd$K(B 1 $BI
$B!U(B
$B%F%mBP:v$J$I$N!V4iG'>Z!W
(asahi.com, 5/1)
$B!!l9g$d!"%^%9%/$d%5%s%0%i%9$r$+$1$?>l9g$G$b6hJL$G$-$k$+$I$&$+$J$I$rD4$Y$k!#(B
$B!!(B30 $B?M$G%9%_%9$4$C$3(B?
$B!!#77n$r$a$I$K7k2L$r$^$H$a$k$,!"8xI=$O$7$J$$$H$$$&!#(B
$B!!$=$s$J$3$H$G$O!"M-8z@-$,8!>Z$G$-$J$$$8$c$J$$$+!#(B
$B!U(B
$BE4J4:.F~$G@6NC0{NA?e#5#7K|K\$r<+
(asahi.com, 5/1)$B!#$3$NOC(B: $B$*OM$S$H$*CN$i$;(B ($BF|K\%3%+!&%3!<%i(B, 5/1)
$B@=B$%i%$%sCf$K@_CV$5$l$F$$$kAuCV$NIT6q9g$K$h$j!"0lIt@=IJ$KE4$NHyJ4Kv$,HyNL$K:.F~$7$?$b$N$HH=L@$$$?$7$^$7$?!#Ev3:@=IJ$O0{MQ$5$l$F$b7r9/$K1F6A$O$"$j$^$;$s!#(B($BCfN,(B)
$B:.F~$N2DG=@-$N$"$k(B3$B7n(B26$BF|$+$i(B3$B7n(B30$BF|$K<"2l9)>l$G@=B$$5$l$?@=IJ$r<+
$B!!
$B!!(BClamAV 0.88.2 $BEP>l(B ($B%j%j!<%9%N!<%H(B)$B!#(BClamAV 0.80$B!A(B0.88.1 $B$K$O!"(B
freshclam $B$K$*$1$k(B
HTTP $B%l%9%]%s%9$NCVE-2006-1989$B!#(B
0.88.2 $B$G$O$3$l$,=$@5$5$l$F$$$k!#(B
![[$B%;%-%e%j%F%#%[!<%k(B memo]](/%7Ekjm/security/memo/sechole-memo.gif)
$B;d$K$D$$$F(B