$B%;%-%e%j%F%#%[!<%k(B memo - 2006.09
Last modified: Fri Jul 20 11:55:20 2007
+0900 (JST)
$B!!$3$N%Z!<%8$N>pJs$rMxMQ$5$l$kA0$K!"(B$BCm0U=q$-(B$B$r$*FI$_$/$@$5$$!#(B
$B!U(B
$B%"%$%9%i%s%I!'JF734pCOJD:?!!7Y;!$J$I$G6[5^;vBV$KHw$($k(B
($BKhF|(B, 9/30)
$B!U(B
$BF|N)!'3$MN1x@w$N856'!V%P%i%9%H?e!W>t2=AuCV$r3+H/(B
($BKhF|(B, 9/30)$B!"(B
$B%P%i%9%H?eGS=P$K$h$k<~JU3$0h$N@8BV7OGK2u$rM^@)$9$k>t2=%7%9%F%`$r3+H/!!(B
$BEl5~OQ$G%P%i%9%H?e>t2=AuCV$NZ
($BF|N)(B, 9/25)
$B$J$*!"K\Z
$B!U(B
$B$,$sBP:v>pJs%;%s%?!pJsDs6!(B
($BKhF|(B, 9/30)
$B!U(B
$BD9Ln?6$j9~$a:>5=!'!V#P#C%&%$%k%9!W$H?7
($BKhF|(B, 9/30)$B!#?6$j$3$a:>5=$N%M%?$K$^$G;H$o$l$k$[$I0lHL$K?;F)$7$?$h$&$G$9(Bl$B!#(B
$B!U(B
$B5pBg%9%Q%$AH?%!)!!0cK!EpD05?OG$K%$%?%j%"BgMI$l(B
(asahi.com, 9/30)
$B%$%?%j%"$G!"9qFb:GBge$7$?!#$3$&$7$FF@$i$l$?>pJs$r$b$H$K!"@/:b%9%]!<%D3&$NCxL>?M$i$,623e$5$l$F$$$?2DG=@-$,$"$k!#7Y;!$dK!Ab3&$K$b6(NOpJs5!4X$r>e2s$k<}=8NO$r;}$C$F$$$?!"$H$b?dB,$5$l!"@/3&$r4,$-9~$s$@A{$.$H$J$C$F$$$k!#(B
$B!!$9$4$$OC$@$J!D!D!#F|K\$OBg>fIW$J$s$G$9$+$M!#(B
$B!!$=$&$$$($P!"$3$3$K=q$/$N$r$9$C$+$jK:$l$F$$$?$N$G!"<+J,<+?H$N$?$a$K=q$$$F$*$-$^$9!#(B
$B!!$"$H!"%;%-%e%j%F%#$8$c$J$$$1$I$3$s$J$N$,(B:
2006.10.06 $BDI5-(B:
$B!!(BMS06-053 $B4XO"(B:
$B!!(BMS06-053
$B$N2sHr:v$K$J$<$+(B
Internet Explorer $B$N%Z!<%8$N%(%s%3!<%I$N<+F08!=P$rL58z$K$9$k(B
Internet Explorer $B$N%Z!<%8$N%(%s%3!<%I$N<+F08!=P$rL58z$K$9$k$H!"$3$N@H
$B$J$s$F=q$+$l$F$$$k;v!"$=$7$F(B
Microsoft Internet Information Services UTF-7 XSS Vulnerability
(PTRS) $B$K$h$C$FL@$i$+$K$5$l$?K\Ev$NLdBj!#(B
$B$=$l$O$b$A$m$s!"(BIE $B$N!V5!G=!W$J$N$G$"$C$?!D!D!#(B
$B!U(B
$B%^%+%U%#!<$M$?(B
$B!!$$$:$l$b!V
$B!U(B
$B#N#A#T#O!"%"%U%,%s$GJF73#1K|#2@i?M$r;X4x2<$K(B
(asahi.com, 9/29)
$B!U(B
$B?.9f5!4o$K%P%C%/%"%C%W$J$7!":.Mp$KGo
(asahi.com, 9/28)$B!#(BJR $B$O?M4VNO$,$I$s$I$sDc2<$7$F$$$k$s$@$m$&$+!#(B
$B!U(B
$B9qL1J]8n71N}!'Bg5,LO%F%m$J$IA[Dj!!0q>k8)El3$B<$J$I$G(B
($BKhF|(B, 9/29)$B!#HrFq71N}!#(B
$B!U(B
$B0BG\
($BKhF|(B, 9/29)$B!#H~$7$$%&%h$N9q!"F|K\!#(B
$B$^$"!"%5%h$J$i$$$$$C$F$o$1$G$b$J$$$s$@$1$I$M!D!D!#(B
$B!U(B
$BFH%j%K%";v8N!'H/@8$+$i#1=54V!!8=>l$N0BA4BP:vDs0F$rL5;k(B
($BKhF|(B, 9/29)
$B!U(B
$BA\::Hq$NF|IU!";Y=P3[3+<($;$h!!9bCN8)7Y$KL?Na!!9b:[(B
(asahi.com, 9/29)$B!#(B
$BGO^e$G!"A\::#12]$K8B$C$FA\::0w$NLr?&L>$dKh2s$N;Y=P3[$N3+<($rL?$8$?0l?3!&9bCNCO:[H=7h$rJQ99$7!"A\::#12]!"F1#22]!"K=NOCDBP:v2]$NA\::0w$NLr?&L>$dA\::Hq$NKh2s$N;Y=P3[!";Y=PG/7nF|$r3+<($9$k$h$&L?$8$?!#(B
$B!U(B
ISTR X - Everything is vulnerable
(Symantec blog, 9/27)
$B!U(B
$B=w;y$NFqIB0\?"Jg6b$a$0$j#2$A$c$s$G!V:W$j!W(B
($B;:7P?7J9%$%6(B, 9/27)$B!#F?L>4uK>$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
$B!V;R$I$b$N7HBSEEOC$O%M%C%H@\B3$G$-$J$$$b$N$r!W7Y;!D#$N8&5f2q$,Ds8@(B
(Internet Watch, 9/28)
$B!U(B
$B3ZE7!"(B28$BF|H/Gd$N!V=54)?7D,!W$N5-;v$KH?O@!A6aF|Cf$KDsAJ$X(B
(Internet Watch, 9/28)
$B!U(B
HP$BDLOC5-O?F~Z8@$b5qH](B
(CNET, 9/29)
$B!U(B
FSF$B$Kmd0W$9$k(BLinus Torvalds$B;a(B
(Open Tech Press, 9/29)
$B!U(B
IPA $B0E9f%U%)!<%i%`(B 2006$B!#(B
2006.10.05$B!"El5~ET@iBeED6h!"L5NA!#(B
- $B$^$?$b$d!V0lB@O:!W$N%;%-%e%j%F%#!&%[!<%k$rA@$&%<%m%G%$967b(B
-
$B!!(B$B0lB@O:$N@H
($B%8%c%9%H%7%9%F%`(B) $B$,2~D{$5$l$F$$$^$7$?!#(B
$BBP>]$H$J$k$N$O!"0lB@O:(B 2006 / 2005 / $BJ8i:(B / 2004 / 13 / 12 / 11 / 10 / 9 $B$H(B FormLiner $B$N$h$&$G$9!#(B
$B=$@5%W%m%0%i%`$,8x3+$5$l$^$7$?!#(B
$B%@%&%s%m!<%I%Z!<%8(B$B$+$iF~
$B!!A0%9%l(B:
$B!!(BIBM / Lenovo $B$,<+
$B!!$^$?!"K\F|(B SONY $B$+$iH/I=$5$l$?>pJs$K$h$k$H!"B>$N%Y%s%@!<$K$D$$$F$b!"<+
$B!!:#8e$J$5$l$k$G$"$m$&!"3F%Y%s%@!<$+$i$N0FFb$KCm0U$7$^$7$g$&!#(B
2006.10.02 $BDI5-(B:
$B!!(BSONY $B$NH/I=$r
$B%=%K!<3t<02q
($BIY;NDL(B, 2006.09.29)
$BBP>]5!
FMV-BIBLO LOOX P$B%7%j!<%:(B P70R, P70S
FMV-BIBLO LOOX T$B%7%j!<%:(B T50M, T50R, T50RN, T50S, T50SN,
T70M, T70M/T, T70MN, T70R, T70R/T, T70RN, T70S, T70S/V, T70SN
$B%=%K!<3t<02q
($BEl
$BBP>]5!
* dynabook SS LX$B!"(BL10$B!"(BL11$B!"(BM10$B!"(BM11$B!"(BM35$B!"(BMX$B!"(BMXW
* dynabook R10
* dynabook TX/2$B!"(BTX/3$B!"(BTX/4
* Qosmio G30$B!"(BF30
* Satellite T10$B!"(BT11$B!"(BT12$B!"(BT20
* TECRA M3$B!"(BM4$B!"(BM5$B!"(BM7$B!"(BS3
* PORTEGE S100$B!"(BM300$B!"(BM400$B!"(BM500
* Satellite A50
$B%=%K!<@=%Q!<%=%J%k%3%s%T%e!<%?!<(B VAIO $B$N%P%C%F%j!<$N0BA4@-$K$D$$$F(B
(SONY, 2006.09.29)$B!#(B
$B5!pJs$J$7(B ($B6l>P(B)$B!#(B
2006.10.03 $BDI5-(B:
$B!!(B$B!V(BHP$B$OBg>fIW!W!"%=%K!<$N%P%C%F%j!
(ITmedia, 2006.10.03)
2006.10.11 $BDI5-(B:
$B!!F|N)$+$i$bM=9p=P$F$^$9(B:
$B!!$"$H!"El
$B!!>e5-%Z!<%8$G!VH=Dj%W%m%0%i%`!W$,G[I[$5$l$F$$$^$9$,!"!VBP1~5!
$B!!Eldynabook AX/8$B!"(Bdynabook CX/8$B!"(Bdynabook TX/8$B!"(Bdynabook VX/7$B!"(B
Satellite CW1$B!"(BSatellite AW4$B!"(BSatellite AW5$B!"(BSatellite A100$B%7%j!<%:$N(B
$B%P%C%F%j%Q%C%/$K4X$9$k=EMW$J$*CN$i$;!J$*OM$S$H$*4j$$!K(B
($BEl
2006.10.20 $BDI5-(B:
2006.10.27 $BDI5-(B:
$B!!(B$B%=%K!<@=EECS!"IY;NDL%Q%=%3%s$G$bH/2P(B
(asahi.com, 2006.10.27)
2006.11.08 $BDI5-(B:
$B!!(BSONY $B$H%7%c!<%W$,8r49:n6H$r3+;O$7$^$7$?(B:
$B!!$"$H!"(BIEEE$B!"%N!<%H(BPC$BMQ%P%C%F%j!<5,3J$r2~Dj$X(B
(ITmedia, 2006.11.08) $B$@$=$&$G$9!#(B
2006.11.13 $BDI5-(B:
$B!!(BEPSON $B$,8r49:n6H$r3+;O$7$^$7$?(B:
2007.01.31 $BDI5-(B:
$B!!(B$B%=%K!<3t<02q
($BIY;NDL(B, 2007.01.30)
$BEv/$J$$>u67$K$"$j$^$9(I!$B$=$N$?$a!"Ev=i$O?=$79~$_4|4V$r(B2007$BG/(B1$B7nKvF|$^$G$H$7$F$*$j$^$7$?$,!"(B2007$BG/(B7$B7nKvF|$^$G1dD9$7$^$9!#(B
2007.02.08 $BDI5-(B:
$B!!(B$B%=%K!<@=EECS$NIY;NDL%N!<%H!"(B12$B7nKv$K3$30$GH/1l!&H/2P;v8N(B
($BF|7P(B IT Pro, 2007.01.30)
2007.05.16 $BDI5-(B:
$B!!4XO"(B:
$B%=%K!<@=EECSEk:\$NEl
($BF|7P(B IT Pro, 2007.05.10)$B!"(B$B%N!<%H#P#CMQ%=%K!<3t<02q
($BEl
$BEv]$N%P%C%F%j%Q%C%/$GH/2P;v8N$,H/@8$$$?$7$^$7$?!#(B
$B!!0J2<$K!"3F
$B!!$J$*!"(BHP $B$O%=%K!<@=%P%C%F%j$r;HMQ$7$F$$$k$b$N$N!"2s<}!&8r49$9$kI,MW$O$J$$$HH/I=$7$F$$$^$9!#(B
$B!!(BOpenSSL $B$K?7$?$J(B 4 $B$D$N7g4Y$,$"$j!"(BOpenSSL 0.9.8d / 0.9.7l $B$G=$@5$5$l$?$=$&$J!#$&$%!"$R$5$S$5$N$?$F$D$E$1$G$9$M!D!D!#4XO"(B:
$B!U(B
Windows Update$B$K$h$kEE;R@/I\%7%9%F%`8~$1%k!<%H>ZL@=q$NG[?.$r3+;O(B
$B!AF|K\$K$*$1$kEE;R@/I\?d?J7W2h$r;Y1g$9$k
(Microsoft, 9/28)$B!#$3$l$G$h$&$d$/!"(BWindows $B$G$O!V$d!A$$%*%l%*%l!W$H$+8@$o$l$J$/$F$b$h$/$J$k$h$&$G$9(B (XP / Server 2003 $B$O(B 9/1 $B$+$ipJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
NDR$B<+BN$K%(%i!<%a!<%kK\BN$rF~$l$J$$MQ$K$9$k@_Dj!w(Bsendmail
($B$^$C$A$c$@$$$U$/$NF|5-(B, 9/27)
$B!!!D!DG_K\$5$s$+$i(B ($B>pJs$"$j$,$H$&$4$6$$$^$9(B)
$B!!(Bhttp://d.hatena.ne.jp/ripjyr/20060927/1159391672 $B$G$O!"(BSendMimeErrors $B$r(B False $B$K$7$F$$$^$9$,!"$3$l$O!"(BDSN $B$rL58z$K$9$k@_Dj$G$"$C$F!"%a!<%kK\BN$rF~$l$k$N$K(B MIME $B$r;H$o$J$$$h$&$K$9$k$@$1$G$"$C$F!"I=Bj$N$h$&$K%(%i!<%a!<%kK\BN$rF~$l$J$$$h$&$K$9$k$o$1$G$O$J$$$H;W$$$^$9!#(B
$B!!:r:#!"%P%&%s%9%a!<%kA@$$$N(B SPAM $B$,=P$F$-$F$*$j!"$3$l$KBP93$9$k$?$a%P%&%s%9%a!<%k$K85%a!<%k$,4^$^$l$J$$$h$&$K$7$?$$$H$$$&MW5a$,$"$k$3$H$OG'<1$7$F$$$^$9!#$7$+$7!"$3$N@_Dj$G$O(B MIME $B$r;H$o$J$/$J$k$@$1$G!"85%a!<%k$,4^$^$l$k$3$H$K$OJQ$o$j$"$j$^$;$s!#(B
$B!!(BDSN $B<+BN$K%;%-%e%j%F%#E*LdBj$,$"$k$H$+$b$C$HJL$NM}M3$,$"$k$N$G$7$g$&$+(B?
$B!!%P%&%s%9%a!<%k$K85%a!<%k$,4^$^$l$J$$$h$&$K$7$?$$$H$$$&$3$H$G$"$l$P!"(B
PrivacyFlags $B$K(B nobodyreturn $B$r2C$($l$PNI$$$G$9!#(Bnobodyreturn $B$O(B
goaway $B$K$O4^$^$l$J$$$N$G!"(Bgoaway $B$r;XDj$7$F$$$F$bJLES;XDj$9$kI,MW$,$"$j$^$9!#(B
define(`confPRIVACY_FLAGS', `goaway,nobodyreturn')
$B!!$^$C$A$c$5$s$O(B DSN $B4XO"$G(B SpamCop $B$H$R$H$b$s$A$c$/$"$C$?$i$7$$(B
(SpamCop $B$O(B Microsoft Exchange $B$,EG$/(B UTF-7 $BF|K\8l$J(B DSN $B$,$*7y$$$i$7$$(B) $B$N$G!"(B
DSN $B$rL58z$K$9$kJ}K!$rCN$C$F$*$-$?$$$N$@$m$&$H;W$$$^$9!#(B
$B!U(B
$B!H
($BF|7P(B IT Pro, 9/28)$B!#%?%$%H%k$HCf?H$,0c$&$h$&$J5$$,!#!V!H
$B!U(B
$B$R$+$jEEOC%H%i%V%k!$IT?.$r>7$$$?(B7$BF|4V(B
($BF|7P(B IT Pro, 9/28)
$B!U(B
$B:eBg65
(asahi.com, 9/22)$B!#(B9/22 $B0J9_!"!V?yLnL@M:65A0$,=P$k$h$&$K$J$C$?$N$+$J!#(B
$B!U(B
$BBfIw#1#39f$NN54,Ho32$O9qFb:GBg5i!!F|Cf$G?ME*Ho323HBg(B
(asahi.com, 9/28)
$BF|K\Iw9)3X2q$O:#G/#47n!"1)1[@~$N;v8N$r
$B!U(B
$B%*%s%i%$%s%2!<%`Fb:>5=$K=i$N:>5=:aE,MQ(B
(slashdot.jp, 9/27)$B!#(B$B855-;v(B$B$b%?%l%3%_u67$r$-$A$s$HM}2r$7$F$$$J$$$h$&$J$N$GCm0U!#$?$H$($P(B 1027482
$B$d(B
1027613
$B$r;2>H!#(B
$B!U(B
Linus Torvalds$B;a$,(BGPLv3$B:vDj%W%m%;%9$K;22C$7$J$$M}M3(B
(Open Tech Press, 9/28)
Torvalds$B;a$O8=9T$N(BGPL$B!J(BGPLv2$B!K$K$D$$$F!"!V%U%j!<%=%U%H%&%'%"GI$H%*!<%W%s%=!<%9GI$NAPJ}$,!"Hs>o$K9%$^$7$$7A$G@^$j9g$($kB8:_$G$9!#?M!9$,CV$+$l$?>u67$dM}A[$H$9$k?.G0$OMM!9$G$"$j!"$^$?$=$&$7$?
$B$3$l$HBP>HE*$J$N$O(BTorvalds$B;a$K$h$k(BGPLv3$B$N
$B!U(B
$B%U%!%$%k%@%&%s%m!<%I%5!<%S%90lItDd;_$N$*CN$i$;(B
(Vector, 9/28)$B!#>\:Y>pJs$,8x3+$5$l$F$$$^$9!#(B
$B!!(BWebViewFolderIcon ActiveX $B%3%s%H%m!<%k(B (webvw.dll) $B$K(B integer overflow $B$9$k7g4Y$,$"$j!"96N,(B web $B%Z!<%8$J$I$rDL$8$FG$0U$N%3!<%I$rCVE-2006-3730$B!#(BUS-CERT Metric: 51.03
$B!!=$@5%W%m%0%i%`$O$^$@B8:_$7$J$$!#(BCLSID {844F4806-E8A8-11d2-9652-00C04FC30871} $B$*$h$S(B/$B$^$?$O(B {E5DF9D10-3B52-11D1-83E8-00A0C90DC849} $B$K(B kill bit $B$r@_Dj(B$B$7$?$j!"(B$B%9%/%j%W%H(B ActiveX $B%3%s%H%m!<%k$rL58z$K$7$?$j$9$k$3$H$G2sHr$G$-$k!#(B
(CLSID $BA}$($^$7$?(B)
$B!!!D!D(B $B$3$l$G$9$,!"(BMoBB #18 $B$NOC$J$N$@$=$&$G$9!#(B
2006.10.01 $BDI5-(B:
$B!!4XO"(B:
2006.10.02 $BDI5-(B:
$B!!(BMS Internet Explorer WebViewFolderIcon setSlice() (Multiple Exploits)
(securiteam)
2006.10.11 $BDI5-(B:
$B!!(BWindows Explorer $B$N@H
(Microsoft)
$B$G=$@5$5$l$^$7$?!#(B
$B!!(BFirefox $B$O$=$&$$$&;EMM$J$N$@$=$&$G$9!#(Bnutsec $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B:#;n$9$H!"!V%/%8%g$?$$$5$/J*8l(B $BBh(B 1 $BOC!W$KHt$V$h$&$G$9!#(B
$B!!!D!D(B$BMU$C$QF|5-(B
$B$KBP1~J}K!$,5-:\$5$l$F$$$^$9!#(B
- $B!Z=EMW![(B Movable Type $B?7%P!<%8%g%s$H%Q%C%A$NDs6!$K$D$$$F(B
$B!!4XO"(B: JVN#68295640:
Movable Type $B$N8!:w5!G=$K$*$1$k%/%m%9%5%$%H%9%/%j%W%F%#%s%0$N@H
(JVN)
- [SA22091] OpenSSH Identical Blocks Denial of Service Vulnerability
-
$B!!(BOpenSSH 4.4 $B$,EP>l$7$^$7$?!#$3$N7g4Y$,=$@5$5$l$F$$$^$9!#(Biida $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!!(Bhttp://www.openssh.org/txt/release-4.4
$B$K$h$k$H!"$3$N7g4Y$NB>$K$b!"0J2<$N7g4Y$,=$@5$5$l$F$$$k$=$&$G$9!#(B
* Fix an unsafe signal hander reported by Mark Dowd. The signal
handler was vulnerable to a race condition that could be exploited
to perform a pre-authentication denial of service. On portable
OpenSSH, this vulnerability could theoretically lead to
pre-authentication remote code execution if GSSAPI authentication
is enabled, but the likelihood of successful exploitation appears
remote.
* On portable OpenSSH, fix a GSSAPI authentication abort that could
be used to determine the validity of usernames on some platforms.
$B!!(BOpenSSH 4.4$B%j%j!<%9(B
(slashdot.jp) $B$b;2>H!#(B
- Another Day, Another 0-day (PowerPoint 0-day)
-
$B!!%"%I%P%$%6%j=P$^$7$?(B:
$B!!(BPowerPoint 2000 / 2002 (XP) / 2003 $B$NB>!"(BPowerPoint 2004 for Mac$B!"(B
PowerPoint v. X for Mac $B$K$b1F6A$9$k$=$&$G$9!#(BPowerPoint Viewer 2003
$B$K$O1F6A$7$J$$$=$&$G$9!#$3$N$?$a!"(BPowerPoint Viewer 2003 $B$G1\Mw$7$F2sHr$9$kJ}K!$,>R2p$5$l$F$$$^$9!#(B
$B!U(B
Indexes to NSA Publications Declassified and Online
(Schneier on Security, 9/26)
$B!U(B
Microsoft Exchange$B$N(BNon-delivery report$B$r!VG[?.ITG=!W$+$i1Q8l2=$9$k(BKnowlege Base
($B$^$C$A$c$@$$$U$/$NF|5-(B, 9/27)
$B!U(B
$B%G%U%!%/%H%9%?%s%@!<%I0E9f5;=Q$NBg0\9T(B $B:G=*2s(B: $B%7%9%F%`$NMxMQ4|4V$K8+9g$C$?0E9f5;=Q$NA*Br$X8~$1$F(B
(@IT, 9/27)
$B!U(B
$B99?7%W%m%0%i%`4IM}(B
(Microsoft)
$B!U(B
Security Day 2006 $B$"$J$?$N=PHV$G$9!*(B $B!A;TL18"$rF@$?%;%-%e%j%F%#BP:v!A(B
(Internet Week 2006)$B!#(B
$B!V;TL18"$rF@$?$($;%;%-%e%j%F%#BP:v!W$H6uL\$7$?(B orz$B!#(B
$B%N!<%,!<%I@oK!(B! $B%+%+%/%a%=%C%I(B!
$B$K$;%;%-%e%j%F%#%=%U%H(B!
$B!U(B
[openmya:036090] mixi$B$N%W%i%$%P%7!<%]%j%7!<2~D{(B$B!"(B
mixi$B$N9TF0%?!<%2%F%#%s%0MQ$N%/%C%-!
($B$&$5$.J83XF|5-(B, 9/27)$B!#(B
$B!!(Bmixi $B$K%m%0%$%s$9$k$H!"%Z!<%8>eIt$K!V1?1D$B2hA|(B)$B!#(B
$B%W%i%$%P%7!<%]%j%7!<$r2~D{$9$k$H$$$&6K$a$F=EMW$JFbMF$K$b$+$+$o$i$:!"!V1?1D
$B!!$G$O!"$H;W$C$F(B [$B>\:Y$r8+$k(B] $B$r%/%j%C%/$7$F$_$k$H(B:
- $BF|5-5Z$S(Bmixi$B%b%P%$%k5!G=2~A1$N$*CN$i$;(B: 2006.09.26
- $B%W%i%$%P%7!<%]%j%7!<2~D{$N$*CN$i$;(B: 2006.09.25
$B!!!V1?1DpJs$r
$B!!$3$l$O%"%+%s$d$m!#2~D{8e$K!V2~D{$7$^$7$?!W$,$7$P$i$/I=<($5$lB3$1$k$k$N$G$"$l$P!"$^$@$o$+$i$s$G$b$J$$$,!"$5$F!D!D!#(B
$B!!!D!D!V1?1D$B2hA|(B)$B!#$h$+$C$?$h$+$C$?!#(B
$B!U(B
MS$B!"$^$?$b$dCxL>%;%-%e%j%F%#@lLg2H$r0z$-H4$-(B
(ITmedia, 9/26)$B!#(BChengi Jimmy Kuo $B;a$@$=$&$G!#(B
$B!U(B
$B%i%$%V%i%j!J%@%&%s%m!<%I!K0l;~Dd;_$N$*CN$i$;(B
(Vector, 9/27)
$BJ@
$B!!$$$^$$$A0UL#ITL@$JJ8$@$J$"!#$?$H$($P!V(BVector $BFbIt$N:n6HMQ(B PC $B$K$*$$$F?77?%&%$%k%9$,H/8+$5$l$?!W$H$$$&$3$H$J$N$@$m$&$+!#$=$l$H$b!"$?$H$($P!V%i%$%V%i%jCf$N%U%!%$%k$r:F8!::$9$k2aDx$G?77?%&%$%k%9$,H/8+$5$l$?!W$N$@$m$&$+!#(B
$B!!!D!DA0$B!V(BVector$B!W$,%=%U%H$N%@%&%s%m!<%I0l;~Dd;_!"%&%$%k%946@w$NM-L5$rD4::Cf(B
(Internet Watch, 9/27)$B!#(B
$B%Y%/%?!
($BAk$NEN(B, 9/27) $B$K$h$k$H!"H/8+$5$l$?$N$O(B
PE_LOOKED.DA
$B!D!D$8$c$J$/$F(B
PE_LOOKED.FQ
$B$@$=$&$G$9!#(B
$B!U(B
$BFC5vE}0l!'F|JF2$49(B
($BKhF|(B, 9/26)$B!#(B
$BFC5v$r=P4jM%@h$KE}0l!!#4#1%+9q9g0U!">rLs:NBr$X(B
(excite / $B6&F1(B, 9/26) $B$K$O(B
$B!X#2#5F|$^$G%8%e%M!<%V$G3+$$$?!VFC5v@)EYD4OB$K4X$9$k@h?J9q2q9g!W$G3NG'$7$?!Y$H$"$k$J$"!#!VFC5v@)EYD4OB$K4X$9$k@h?J9q2q9g!W$G$0$0$k$H!"(B
$BFC5v@)EYD4OB$K4X$9$k@h?J9qA4BN2q9g$N7k2L35MW(B
($BFC5vD#(B) $B$r8+$D$1$?!#$3$l$O(B 2005 $BG/$N!VFC5v@)EYD4OB$K4X$9$k@h?J9qA4BN2q9g!W$NOC!#(B2005.09.25 $B$K3+:E!"(B2005.10.13 $B$K8x3+$N$h$&$J$N$G!":#G/$N$b$N$bF1;~4|$/$i$$$K8x3+$5$l$k$N$+$J!#(B
$B!!$G!":#!"(B
WIPO General Assembly : Thirty-Third (16th Extraordinary) Session
(WIPO)
$B$H$$$&$N$r$d$C$F$k$_$?$$$G$9!#(B
$B!!(B$B@$3&CNE*=jM-8"5!4X!J#W#I#P#O!KF|K\;vL3=j$N3+@_(B
($BFC5vD#(B, 9/11) $B$J$s$FOC$b$"$C$?$s$G$9$M!#(B
$B!!4XO"(B: $BFC5v!"@h4jrLs:n$j$G9g0U(B
(asahi.com, 9/27)
$B!U(B
Windows XP ($B%*%j%8%J%k%P!<%8%g%s(B) $B$G(BUserInit.Exe$B$,8!=P$5$l$kLdBj(B
(CA, 9/16)$B!#8m8!=POC!#LnED$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
($B%?%$%H%k=$@5(B: $B;07n$5$s46
$B!U(B
$B%5%$%P!
($BKL3$F;?7J9(B, 9/27)
$B!U(B
$B6/NO$J9-Js@oN,BN@)$rI_$$$?0BG\Fb3U(B
(JANJAN, 9/26)
$B!U(B
924840 - A test version of the 2007 global time zone update for Windows is available
(Microsoft)$B!#(B2007 $BG/$+$i!"(BUS $B$N(B$B2F;~4V(B$B$,JQ$o$k$N$G$9$+!#(B
Daylight saving time: United States
(Wikipedia)
$B!U(B
$BDjNc30%j%j!<%9(B
($BF|K\$N%;%-%e%j%F%#%A!<%`$N(B Blog, 9/27)
$B!U(B
$B%"%U%,%K%9%?%s!'p'O)$KVH$j$D$D$"$kO"9g73(B
(JANJAN, 9/26)
$B!!(BPowerPoint 2000 / 2002 (XP) / 2003 $B$K?7$?$J(B 0-day $B7j$,$"$k$i$7$$!D!D!#(B
2006.09.28 $BDI5-(B:
$B!!%"%I%P%$%6%j=P$^$7$?(B:
$B!!(BPowerPoint 2000 / 2002 (XP) / 2003 $B$NB>!"(BPowerPoint 2004 for Mac$B!"(B
PowerPoint v. X for Mac $B$K$b1F6A$9$k$=$&$G$9!#(BPowerPoint Viewer 2003
$B$K$O1F6A$7$J$$$=$&$G$9!#$3$N$?$a!"(BPowerPoint Viewer 2003 $B$G1\Mw$7$F2sHr$9$kJ}K!$,>R2p$5$l$F$$$^$9!#(B
2006.10.11 $BDI5-(B:
$B!!(BMicrosoft PowerPoint $B$N@H
(Microsoft)
$B$G=$@5$5$l$^$7$?!#(B
- Microsoft Internet Explorer $B$G$N(B Vector Markup Language $B0-MQ$K4X$9$k%"%i!<%H(B
-
$B!!=$@5%W%m%0%i%`=P$^$7$?!#(BACL $B@_Dj$K$h$C$F2sHr$7$F$$$k>l9g$O!"(BACL $B$rLa$7$F$+$iE,MQ$7$^$7$g$&!#(B
$B!!$"$H!"(Bmetasploit $B$J96N,%b%8%e!<%k$b(B:
$B!!$"$H!"(BISA $B$G
- 2006 $BG/(B 8 $B7n$N%;%-%e%j%F%#>pJs(B (Microsoft)
-
$B!!(BMS06-049 $B=$@5%W%m%0%i%`$N2~D{HG!"=P$^$7$?!#(B
$B!!$G$b!"2u$l$?%U%!%$%k$r=jM-$7$F$$$k>l9g$O!"E,MQA0$K!"(BFreeBSD $B$H$+$+$iFI$s$G%P%C%/%"%C%W$7$F$*$$$?J}$,$$$$$H;W$&$7!#(B
$B!!$X$'!D!D!#(BSafeSearch filtering
(google)
$B$+$i(B:
You can choose from among three SafeSearch settings:
- Moderate filtering excludes most explicit images from Google Image Search results
but doesn’t filter ordinary web search results. This is your default SafeSearch setting; you’ll
receive moderate filtering unless you change it.
- Strict filtering applies SafeSearch filtering to all your search results (i.e., both
image search and ordinary web search).
And finally…
- No Filtering, as you’ve probably figured out, turns off SafeSearch filtering
completely.
$B!!%G%U%)%k%H$G$O(BGoogle Image Search $B$@$1$@$C$F(B?!
$B8!:w8l6g$K$h$C$F$O!"(B
Yahoo! $B$H0[>o$K0[$J$k8!:w7k2L$,=P$?$j$9$k$s$@$1$I$M$'!D!D!#(B
2006.11.16 $BDI5-(B:
$B!!1Q8l$J(B google $B$O(B http://www.google.com/webhp?hl=en $B$K%"%/%;%9$9$l$P$$$$$h$&$G$9!#(B
$B$D!<$+!"(Bhttp://www.google.co.jp/preferences?hl=en
$B$r8+$l$P$$$$$_$?$$!#(B
$B!!(BOpenSSH 3.x / 4.x $B$K7g4Y!#(BSSH $B%Q%1%C%H$K$*$1$kJ#?t$N(B identical block $B$N07$$$K7g4Y$,$"$j!"(BSSH $B%W%m%H%3%k%P!<%8%g%s(B 1 $B$,M-8z$J>l9g$K(B DoS $B967b$r
$B!!3+H/HG$G$O=$@5$5$l$F$$$k!#(B
2006.09.28 $BDI5-(B:
$B!!(BOpenSSH 4.4/4.4p1 $B$,EP>l$7$^$7$?!#$3$N7g4Y$,=$@5$5$l$F$$$^$9!#(Biida $B$5$s!"8M0f$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!!(Bhttp://www.openssh.org/txt/release-4.4
$B$K$h$k$H!"$3$N7g4Y$NB>$K$b!"0J2<$N7g4Y$,=$@5$5$l$F$$$k$=$&$G$9!#(B
* Fix an unsafe signal hander reported by Mark Dowd. The signal
handler was vulnerable to a race condition that could be exploited
to perform a pre-authentication denial of service. On portable
OpenSSH, this vulnerability could theoretically lead to
pre-authentication remote code execution if GSSAPI authentication
is enabled, but the likelihood of successful exploitation appears
remote.
* On portable OpenSSH, fix a GSSAPI authentication abort that could
be used to determine the validity of usernames on some platforms.
$B!!(BOpenSSH 4.4$B%j%j!<%9(B
(slashdot.jp) $B$b;2>H!#(B
$B!!(BMovable Type 3.2 $B0J9_!"$*$h$S(B
Movable Type Enterprise $B$K7g4Y!#(B
$B4IM}2hLL!"8!:w5!G=!"%3%a%s%H5!G=$K(B XSS $B7g4Y$,$"$k$=$&$G!#(B
Movable Type 3.33 $B$G=$@5$5$l$F$$$kB>!"(B
Movable Type 3.2-ja-2 $BMQ$N(B patch $B$,MQ0U$5$l$F$$$k!#(B
2006.09.28 $BDI5-(B:
$B!!4XO"(B: JVN#68295640:
Movable Type $B$N8!:w5!G=$K$*$1$k%/%m%9%5%$%H%9%/%j%W%F%#%s%0$N@H
(JVN)
$B!!(BIE6 $B$K$O!"%?%$%H%k%P!<$r56Au$G$-$k7g4Y$,$"$k$=$&$G$9!#(B
$B>\:Y$OL$8x3+!"8=;~E@$G$OL$=$@5!#(B
$B$^$?(B IE7 $B$K$O$3$N7g4Y$O$J$$$=$&$G$9!#(B
$B!!8=>lE*$K$O%F%s%W%l$N(B 1 $B$D$b$J$$$H;E;v$K$J$i$J$$$N$@$m$&$1$I!"$$$d$O$d!D!D!#(B
$B!!$7$+$78D?ME*$K$O!"$3$NItJ,$NJ}$,$b$C$H5$$K$J$k(B:
$B$3$N%&%'%V%5%$%H$N$4MxMQ$K:]$7!"
($BCfN,(B)
$B!&(B $B1D6H3hF0$^$?$O1DMx$rL\E*$H$9$k9T0Y!"$^$?$O$=$N=`Hw$rL\E*$H$9$k9T0Y!#(B
$B!!6HL3$N$?$a$K(B
$BEl$B$N(B web $B%Z!<%8$K%"%/%;%9$9$k$N$O6X;_$5$l$F$$$k!"$H$$$&$3$H$J$N$@$m$&$+!#(B
$BEl$B$K$O$=$&$$$C$?5-=R$O$J$$$h$&$@$,!D!D!#(B
$B!U(B
$B$R$+$jEEOC$O$J$<;_$^$C$?$N$+!)(B
($BF|7P(B IT Pro, 9/22)$B!#(B
$B!VK7$d$@$+$i$5!W(B?
$B$3$&=q$$$F$$$/$H!$(BIP$BEEOC$O2CF~EEOC$KNt$k$h$&$K8+$($k$+$b$7$l$J$$$,!$$=$&$G$O$J$$!#%=%U%H%&%(%"$N%P%0$dDLOC@)8B$N5!G=$J$I$O!$:#8e2~A1$5$l$F$$$/$@$m$&$7!$1?MQ%N%&%O%&$bCy$^$C$F$$$/!#(B
$B!!5U$K8@$&$H!":#$O%P%0$C$F$k$75!G=$bDc$$$71?MQ%N%&%O%&$bCy$^$C$F$$$J$$!"$H!#(B
$B$J$s$+$3$&$$$&$U$&$KJ9$3$($k$s$G$9$1$I(B: $B!V$3$&=q$$$F$$$/$H!"(BMicrosoft Windows 1.0 $B$O(B Macintosh $B$KNt$k$h$&$K8+$($k$+$b$7$l$J$$$,!$$=$&$G$O$J$$!#%=%U%H%&%(%"$N%P%0$d%?%$%j%s%0%&%#%s%I%&$J$I$O!":#8e2~A1$5$l$F$$$/$@$m$&$7!"1?MQ%N%&%O%&$bCy$^$C$F$$$/!W!#$^$"!"2~A1$O$5$l$k$s$G$7$g$&$1$I!"6bJ'$C$F8x3+&BIJ
$B!U(B
$B%$%i%/@oAh$G%F%m6<0R3HBg!!JF5!L)Js9p=q(B
(CNN, 9/25)$B!#?HFb$bG'$a$k5U8z2L!#(B
$B!U(B
$B7*El;T$N5/:D:9$7;_$a(B
$B?744@~?71XAJ>Y$GBgDECO:[H=7h(B
($BCfF|(B, 9/25)$B!#CN;v$K$ODI$$Iw$@$J$"!#(B
$B8)!VE`7k$XDI$$Iw!W!!?d?JGI$OEvOG(B$B!"(B
$B!c2r@b!d(B $B0B0W$J5/:D$rHcH=(B
($BFIGd(B, 9/26)$B!"(B
$B7*El;T!"95AJ$7$J$$$G!D869p$,?=$7F~$l(B
($BFIGd(B, 9/27)
$B!U(B
$BF|6d#H#P@\B3ITG=!"3$30$+$i$N%5%$%P!<967b$,860x(B
($BFIGd(B, 9/25)$B!#(BDoS $B$@$=$&$G$9!#(B
$BF|K\6d9T%[!<%`%Z!<%8$N@\B3>c32$K$D$$$F!JB3Js!K(B
($BF|K\6d9T(B, 925)
$B!U(B
pwdump6 1.4.0
$B$,=P$?$=$&$G$9!#(B
$B!U(B
$B8rDL0cH?$NH?B'6bJd=~$NJ]81!"=g
($BFIGd(B, 9/24)
$B!U(B
$B%j%"%k%?%$%`9b66%a%=%C%I(B
($BMU$C$QF|5-(B, 9/25)$B!#$9$4$/%&%1$?$N$G$9$,!"%W%l%<%s;qNA$O$d$C$Q$j;vA0$K=`Hw$7$?J}$,$$$$$H;W$$$^$9(B ($B%M%?$K%^%8%l%9(B)$B!#$"$H!"(B
$B$3$l$r;H$$$D$D%P%$%J%j%(%G%#%?$G%a!<%k$NJ8;z%3!<%I$r=q$-49$($k$H$$$&%W%l%<%s$r$7$F$$$k$H!"2q>l$NCf$N?M$K!V$3$s$J%W%l%<%s$"$jF@$J$$!W$H$+8@$o$l$A$c$$$^$9$?!#!J!(!-'%!.!K(B
$B!!$@$C$F!"$$$-$J$j%P%$%J%j%(%G%#%?N)$A>e$2$F!"$=$N>l$G(B 16 $B?J?t7W;;$9$k%W%l%<%s$J$s$@$b$s!D!D(B(^^;)$B!#$*$^$1$K!"$=$N$?$a$K(B JavaScript $B$J%9%/%j%W%H$r$D$/$C$F!"$o$6$o$6(B IE $B$G7W;;$9$k$C$F!D!D(B(^^;;)$B!#(BWindows $B$N!VEEBn!W%"%W%j$N4X?tEEBn%b!<%I$,ITXb$GITXb$G(B ($B13(B)$B!#(B
$B!!$U$D$&$N%W%l%<%s$@$C$?$i!"$^$:$O!VJ8;z%3!<%I$H$O2?$+!W$r%Q%o%](B 2 $BKg$/$i$$$G4JC1$K@bL@$7$F!"MQ0U$7$F$*$$$?!V(B8bit $BL\$,N)$C$F$J$$%a!<%k!W$H!V(B8bit $BL\$,N)$C$?%a!<%k!W$r$U$D$&$N%(%G%#%?$H$+$G8+$;$F$+$i!"!V$G$b(B Outlook Express $B$G8+$k$H%[%iF1$8!"AGE($G$9$M!A!"$G$9$+$i!D!D!W(B
$B$H$+$d$k$H;W$$$^$9(B ($B%M%?$K%^%8%l%9(B)$B!#(B
$B!!$"$H!"(Bslashdot.jp $B$K$O(B
$B%^%8%l%9%^%s(B
$B$H$$$&J}$,$$$i$C$7$c$k$N$G$9$M!#(B(^^;)
$B!U(B
$B%9%T%"967b$HF.$&(B
($BF|7P(B IT Pro, 9/25)
- LA$B6u9A$G%i%C%W%H%C%WH/2P;v7oH/@8(B--$B1j>e$7$?$N$O!V(BThinkPad$B!W(B
-
$B!!4XO">pJs(B:
$B!!!V%=%K!<@=!W$H$O=q$$$F$"$k$1$I!V=c@5!W$H$O=q$+$l$F$$$J$$$J$"!#(B
$BCf?H$,!V%=%K!<@=!W$N(B 3rd party $BIJ!"$H$$$&2DG=@-$O$"$k$s$@$m$&$+!#(B
$B!!$"$H!"$3$A$i"-$O(B 3rd party $B@=%P%C%F%j$G$NH/2P!#(B
$B!U(B
$B$^$?!"!V$"$k$"$k!W$K%@%^$5$l$?!#(B
$B$H$$$&=q@R$,$"$k$N$@$=$&$G!#(B
$B!U(B
$B650i4pK\K!2~@5K!0F$K$D$$$F$N0U8+(B
($BF|K\J[8n;NO"9g2q(B, 9/15)
$B!U(B
$B6&KE:a?7@_$K4X$9$k0U8+=q(B
($BF|K\J[8n;NO"9g2q(B, 9/14)
$B!U(B
$B8D?M>pJsJ]8nK!!!8+D>$7$X$N8!F$2]Bj!!Fb3UI\It2q$^$H$a$k(B
($BKhF|(B, 9/21)
$B!U(B
$B!Z3$30GIJ<915WK!0F![$NBh#2>r$NBh#39`$NBhFs9f$rFI$`(B
($B4XAHD9$NEl5~!&1JEDD.%m%S!<3hF0F|5-#b#l#o#gHG(B, 9/24)
$B$3$N!VBhFs9f!W$,6C$-$NFbMF!#(B
$B!!A09f$K7G$2$k7h5DKt$OMW@A$,!J!a9qO"4X78$+$i!K$J$$>l9g$K$*$1$k
$B$H$7$F!"(B
$B!!!|(B $BIpNOJ6Ah$NEv;v
$B!!!|(B $B9q:]O"9g2CLA9q$=$NB>$N9q$NMW@A(B
$B!!!|(B $B9q:]$NJ?OB5Z$S0BA4$r0];}$9$k$?$a2f$,9q$H$7$F9q:]E*6(D4$N2<$K3hF0$r9T$&$3$H$,FC$KI,MW$G$"$k$HG'$a$k;vBV(B
$B$H=q$+$l$F$$$k!#9qO"7h5D$,>o$K@5$7$$$H$b;W$o$J$$$,9qO"7h5D$9$iL5;k$7$h$&$H$$$&$3$NK!0F!#(B
$B!U(B
$B2=>QIJ!V#S#K!=#2!WHNGdDd;_!"Cf9q3FCO$GJVIJA{$.(B
($BFIGd(B, 9/23)
$B!U(B
$BCf8E2HEE!"=$M}$;$:$H$bES>e9q$G?M5$!=!=%b%C%?%$%J%$@:?@$O$I$3$X!)(B
(JANJAN, 9/22)
$B!U(B
$B!X%H%h%?$N@5BN!Y$rFI$s$G(B
(JANJAN, 9/22)
- gzip 5 $BO"H/(B
-
$B!!4XO">pJs(B:
- 2006 $BG/(B 8 $B7n$N%;%-%e%j%F%#>pJs(B (Microsoft)
-
$B!!(BMS06-049 $BOC$@$,!"(B$B"#""(BNTFS$B$G$9$J!)$$$^$@$K(BFAT$B$G$9$+!)"""#(B
(2ch.net) $B$,$9$4$$$3$H$K$J$C$F$$$k!#(B
$B$J$s$H!"!V2u$l$?!W%U%!%$%k$rFI$_=P$9J}K!$,$_$D$+$C$?$=$&$J$N$@!#(B
$B$5$i$K!"$=$l$r85$K$7$F%P%0$N860x$r2r@O$7$F$7$^$C$F$$$k!#(B
hyou $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!!$9$2$'!#$^$H$a$k$H!"0J2<$NJ}K!$G2u$l$?%U%!%$%k$r=$I|$G$-$k$i$7$$(B:
- FreeBSD 6.1-RELEASE $B$G(B mount $B$7!"FI$_=P$9!#(B
NetBSD 3.0.1 $B$G$bFI$_=P$;$?$H$N(B$BJs9p(B$B$,$"$k!#(B
- ntfstools
$B$K(B
599
(2ch.net)
$B$H(B
611
(2ch.net)
$B$N(B patch $B$r$"$F$F:n@.$7$?(B
ntfscat
$B$r;H$C$FFI$_=P$9!#(B
- [SECURITY] OpenSSL 0.9.8c and 0.9.7k released
-
$B!!(BOera 9.0.2 $B=P$^$7$?!#$3$N7g4Y$,=$@5$5$l$F$$$k$=$&$G$9!#(B
$B!!(BMac OS X $B$N(B AirPort $BL5@~(B LAN $B%I%i%$%P$K(B 3 $B$D$N7g4Y!#$$$:$l$b!"967b
- CVE-2006-3507$B!#(BAirPort $BL5@~(B LAN $B%I%i%$%P$G(B stack overflow$B!#(BPowerPC $B%Y!<%9$N(B Mac $B$N$_!#(B
- CVE-2006-3508$B!#(BAirPort $BL5@~(B LAN $B%I%i%$%P$G(B heap overflow$B!#(BIntel $B%Y!<%9$N(B Mac OS X 10.4.x $B$N$_!#(B
- CVE-2006-3509$B!#(B
3rd party $B8~$1$N(B AirPort $BL5@~(B LAN $B%I%i%$%P(B API $B$K(B
integer overflow$B!#(B
$B1F6A$N>\:Y$O(B 3rd party $B%"%W%j$K0MB8$9$k!#(B
Intel $B%Y!<%9$N(B Mac OS X 10.4.x $B$N$_!#(B
$B!!Nc$N!V(B$BL5@~(B LAN $B%I%i%$%P$N7g4Y(B$B!WOC$H;W$o$l!#(B
$B!!1j>e$G$O$J$/$FGzH/(B (explode) $B$G$9$+!D!D!#(B
$B!U(B
$B>pJs=hM}?d?J5!9=!'%;%-%e%j%F%#%;%s%?!
($BMU$C$QF|5-(B, 9/20)$B!#>C$5$l$kA0$K8+$F$7$^$C$?$N$G$9$,!"!V@$$NCf$K$O8+$F$O$J$i$J$$$b$N$,$"$k!W$H$$$&$+!"!V(B$B;`Nn$NK_MY$j(B$B!W5i$H$$$&$+!"!D!D(B
($B;`Nn$NK_MY$j!"(BDVD $B=P$F$?$s$G$9$M!D!D$D!<$+%G%i%C%/%9HG$C$F2?!D!D(B)$B!#(B
$B!U(B
$B4Z9q!'=d9R%_%5%$%k3+H/40N;!!KLD+A/A40h$N@:L)967b2DG=$K(B
($BKhF|(B, 9/21)$B!#4Z9q$N>l9g!"$=$&$$$&%b%N$N
$B!U(B
$B!ZB3Js![(BNTT$BEl$,$R$+$jEEOC$N>c32>u67$r6[5^Js9p!$!V860x$OA4NO$G5fL@Cf!W(B ($BF|7P(B IT Pro, 9/20)$B!#(BBenjamin $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!!$G!":#F|$O;vA0@)8f$@$=$&$G$9(B: $B!V$R$+$jEEOC!W$N0BDjDs6!$K8~$1$?(B
$BDLOC$N;vA0@)8f$N (NTT $BElF|K\(B, 9/21)
$B!!$*$^$1$K!"$?$C$?$N(B 30 $BJ,$G$5$i$K5,@)BP>]$rA}$d$7$F$BBh#2Js!J#9;~#5#0J,8=:_!K(B (NTT $BElF|K\(B, 9/21)$B!#$3$l$O$D$^$j!"Ii2Y$rH>J,$K8:$i$5$J$$$HBQ$($i$l$J$$$C$F$3$H$G$9$+(B?$B!!1D6H$+$i8+$l$P!"!V7@Ls
$B!!(B11:10 $B8=:_!"(Bhttp://www.ntt-east.co.jp/release/0609/060921c.html $B$OB8:_$7$^$;$s!#(B
$B!D!D(B$BBh#3Js!J#1#5;~#2#0J,8=:_!K(B $B=P$F$^$7$?!#$+$J$jMn$A$D$$$F$-$F$O$$$k$N$G$7$g$&$+!#(B
17:10 $B8=:_!"(Bhttp://www.ntt-east.co.jp/release/0609/060921d.html
$B$OB8:_$7$^$;$s!#(B
$B!D!D(B$B:G=*Js!J#1#7;~#1#0J,8=:_!K(B$B=P$^$7$?!#(B16:53 $B$K@)8f$r2r=|$7$?$=$&$G$9!#(B
$B!!$5$FL@F|$G$9$,!"(B$B!ZB3Js![(BNTT$BEl$,$R$+$jEEOC$N5,@)$r2r=|!$L@F|(B22$BF|$N5,@)$N2DG=@-$OH]Dj$;$:(B
($BF|7P(B IT Pro, 9/21) $B$@$=$&$G$9!#(B
$B!!F1F|$h$jAa$$;~4VBS$GDLOC5,@)$r2r=|$G$-$?$H8+$i$l$k!#(B
$B!!$H$j$"$($:$d$l$k$3$H$r$d$C$F$$$k$N$+$J!#(B
$B!!$?$@$7!$:,K\E*$J860x$O$J$*!$!VA4NO$r5s$2$F5fL@Cf!W!J(BNTT$BElF|K\!K!#L@F|(B22$BF|$bDLOCNL$r5,@)$9$k2DG=@-$OH]Dj$G$-$J$$$H$7$F$$$k!#(B
$B!U(B
$B%$%s%?!<%M%C%H0BA465<<$^$D$j(B
(JNSA)$B!#(B2006.10.15, $BEl5~ET9A6h(B, $BL5NA!#(B
$B!U(B
WindowsXP$B$N%Q%9%o!<%I$r%P%$%Q%9$9$k!V(BDreamPackPL$B!W$KCm0U!*(B
($B$&$5$.J83XF|5-(B, 9/20)
$B!U(B
$B?7A/$GNI
($B%5%$%H(B$B$OMn$H$7$F$"$k$C$]$$$N$G(B google cache)
$B!!$*JF$N(B DNA $B4UDj$r$9$k$H!"=P<+$,$?$A$I$3$m$K$o$+$k$s$G$9$M!#(B
$B!U(B
$B9q4z9q2N!'ET650Q$N!V6/@)$O0c7{!WEl5~CO:[$,H=7h!!(B
($BKhF|(B, 9/21)
$B!U(B
3 $BBg%Y%s%@!<(B $B?7@=IJ(B
$B!U(B
$BO@J8IT@5!":eBg65
($BFIGd(B, 9/21)
$B!U(B
$BETFb$G%T%C%-%s%0Ho325^A}!"J#?t$N309q?M@`EpCD0ELv$+(B
($BFIGd(B, 9/21)
$B!U(B
$BEl5~EENO$N
(Internet Watch, 9/21)$B!#(B
$B!V(BWinny$B!W$K$h$k8D?M>pJs$*$h$S6HL34XO">pJs$NN.=P$K$D$$$F(B
($B2-%&%#%s%F%C%/(B, 9/20)
$B!U(B
$B
($BKhF|(B, 9/21)
$B@iMU8)7Y$O(B ($BCfN,(B)
$B!V8N0U@-!W$NN)>Z$,I,MW$J4oJ*B;2uMF5?$dEE5$;v6HK!$NE,MQ$O:$Fq$HH=CG$7$?!#(B
$B!!$d$C$Q$j%N!<%,!<%I$,0lHV$C$F$3$H$G$9$+(B?!
$B!U(B
@police$B%H%T%C%/%9Ey$N(BRSS$BG[?.$N3+;O$K$D$$$F(B
(@police, 9/20)
$B!U(B
$B!ZB.Js![%\!<%@%U%)%s$GDL?.>c32!$J#?t$N%5!<%S%9$,ElF|K\$G%9%H%C%W(B
($BF|7P(B IT Pro, 9/20)$B!#(B4 $Bc32$G$9$+!#(B
$B!U(B
Poderosa 4.0.2
$B$,=P$F$$$^$7$?!#(B
$B!!(BNote PC $B1j>e$M$?!"$J$+$J$+<}$^$j$^$;$s$M!D!D!#(B
BGM $B$O$d$C$Q$j!VfF$Y!*%,%s%@%`!W(B($B:n;l(B: $B0f2.(B $BN[(B) $B$G$9$+$M!#(B
$B$b!"$(!"$"!"$,!"$l!A(B
$B$b$($"$,$l!A(B
$BG3$(>e$,$l!A%,%s%@%`!A(B
2006.09.25 $BDI5-(B:
$B!!4XO">pJs(B:
$B!!!V%=%K!<@=!W$H$O=q$$$F$"$k$1$I!V=c@5!W$H$O=q$+$l$F$$$J$$$J$"!#(B
$BCf?H$,!V%=%K!<@=!W$N(B 3rd party $BIJ!"$H$$$&2DG=@-$O$"$k$s$@$m$&$+!#(B
$B!!$"$H!"$3$A$i"-$O(B 3rd party $B@=%P%C%F%j$G$NH/2P!#(B
2006.09.26 $BDI5-(B:
$B!!(BLenovo$B!"%N!<%H(BPC$B$NH/2PLdBj$rD4::(B -- $B%j%3!<%k$OIT2DHr$H$N@<$b(B
(ITmedia, 2006.09.25)
- [SECURITY] OpenSSL 0.9.8c and 0.9.7k released
-
$B!!(BGnuTLS $B$K$bF1MM$N7g4Y$,$"$C$?$=$&$G!"(B1.4.3 $B0J9_$G=$@5$5$l$F$$$k(B
($B:G?7$O(B 1.4.4)
$B!!$^$?!"(BOpera 9 $B$K$O(B OpenSSL 0.9.8 $B$,4^$^$l$F$$$k$?$a!"$3$N7g4Y$N1F6A$r
$B!U(B
$B%&%$%k%98!:w%(%s%8%s(B VSAPI 8.310/8.320(Windows/Linux/Solaris$BHG(B) $B8x3+$N$*CN$i$;(B
($B%H%l%s%I%^%$%/%m(B, 9/20)$B!#=$@5HGMh$^$7$?!#(B
$B$?$@$7!"%&%$%k%9%P%9%?!<$K$D$$$F$O!VD4@0Cf!W$K$J$C$F$$$^$9!#(B
$B!U(B
Updated Tools
(eEye research blog, 9/19)$B!#(B
DLLInject $B$H(B Duster $B$,99?7$5$l$?$=$&$G$9!#(B
$B!U(B
$B%U%)%k%@!]%"%/%;%98"%^%C%W%D!<%k!JL5=~!K(B
(Microsoft)
$B!U(B
WORM_STRATION
($B%H%l%s%I%^%$%/%m(B) $B$,N.9T$C$F$k$C$]$$$G$9$M!#(B
Panda $B$rDL2a$7$F$-$?(B Stration $B$,
$B!U(B
IT$B%;%-%e%j%F%#$N%"%i%$=P$7(B
$BBh(B9$B2s(B:
$BI8E*7?967b$K4X$9$k0l9M;!(B(6) - $B@H
(MYCOM $B%8%c!<%J%k(B, 9/20)
$B!U(B
$B!V$R$+$jEEOC!W$N$D$J$,$j$K$/$$>u67$K$D$$$F(B
(NTT $BElF|K\(B, 9/20)$B!#:#F|$b$D$J$,$i$J$$$=$&$G$9!#(B
$BBh#2Js!J#1#6;~#0#0J,8=:_!K(B
$B$G$bD>$C$F$^$;$s$M!D!D!#(B22:10 $B8=:_!"(Bhttp://www.ntt-east.co.jp/release/0609/060920c.html $B$OB8:_$7$^$;$s!#(B
$B!D!D(B$B:G=*Js!J#2#2;~#3#0J,8=:_!K(B
$B=P$F$^$7$?!#(B
$B!U(B
$B9CFnBg3X!"Mz=$pJs(B506$B7o$,!V(BShare$B!W$GN.=P(B
(Internet Watch, 9/20)
$B!U(B
$B%8%'%C%H%P%9$G=w;y$,;v8N!"Bg%,%9;R2q
(asahi.com, 9/19)$B!#$$$^$@$KD>$7$F$b$i$C$F$J$$?M$,$$$k$H$$$&OC!#(B
$BBP>]$O#0#0G/$^$G$K@=B$$5$l$?#3#8#8#3Bf$G!"#1#5#4#8Bf$NItIJ8r49$,$^$@=*$o$C$F$$$J$$!#(B
$B!!4XO"(B: $B%8%'%C%HJ.N.%P%9$r$40&MQ$N$*5R$5$^$X(B
$B!J;v8NKI;_$K$D$$$F$N$*4j$$$H$*CN$i$;!K(B ($BBg:e%,%9=;Bp@_Hw(B, 9/19)
$B!U(B
NoScript
(addons.mozilla.org) $B$H$$$&(B Firefox $B$N(B add-on $B$rF~$l$F$_$?$N$G$9$,!"$3$l$O$J$+$J$+$$$$$G$9$M!#(B
$B!U(B
$B%?%$$G%/!<%G%?!<(B
- $B%?%$$G%/!<%G%?!<$+!"o;vBV@k8@H/Na(B
(asahi.com, 9/20)
- $B:.LB@/6I$K732pF~!!H?%?%/%7%sGI$,6/9T(B
(asahi.com, 9/20)
- $B8=9T7{K!$rDd;_!"A4EZ$K2|87Na!!%?%$N&73$,H/I=(B
(asahi.com, 9/20)
- $B9q2&$NF0$->GE@!!73!" (asahi.com, 9/20)
- $B%?%$$G%/!<%G%?!80.$HH/I=(B ($BFIGd(B, 9/20)
- $B%/!<%G%?!<$N%?%$N&73$,8=9T7{K!Dd;_!"A4EZ$K2|87Na$b(B ($BFIGd(B, 9/20)
- $Be$K@o
($BFIGd(B, 9/20)
- $B%?%$!&%/!<%G%?!
($BKhF|(B, 9/20)
$B!!$^$@(B M41
$B;H$C$F$k$s$@!D!D!#(B
$B%?%$2&9qN&73(B ($B%&%#%-%Z%G%#%"(B) $B$r8+$k$H!"(B
M41: 200 $BN>(B
$B$H=q$+$l$F$k$J$"!#2TF/N($O$I$l$/$i$$$J$s$@$m$&!#(B
$B!!K\Ev$K?75,$NOC$J$N$+$I$&$+!"$$$^$$$AITL@$JLOMM!#(Bnodoame $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!!!D!D(BMicrosoft PowerPoint Vulnerability FAQ - September 2006, CVE-2006-4854
(securiteam) $B$,99?7$5$l$F$$$^$7$?!#(B
UPDATE #2: MS has informed that this vulnerability was addressed in Routing Slip issue
www.microsoft.com/technet/security/Bulletin/MS06-012.mspx,
i.e. this issue is not a 0-day issue. Related CVE document is CVE-2006-0009.
$B$H$$$&$o$1$G!"?75,$NOC$G$O$J$$$=$&$G$9!#(B
$B!!(BAcrobat Reader / Adobe Reader $B$K
$B!!(BAcrobat Reader / Adobe Reader $B$N@_Dj$G(B
JavaScript $B$rL58z$K$9$k$H!"$H$j$"$($:!VL57Y9p$G!W$H$$$&ItJ,$O$J$s$H$+$J$k$N$+$J!#(Bexample 1 $B$r1\Mw$9$k$H!"(B$B$3$s$J7Y9p$,=P$k(B (Adobe Reader 7.0.8 on Windows)
- 2006 $BG/(B 8 $B7n$N%;%-%e%j%F%#>pJs(B (Microsoft)
-
$B!!(BMS06-049 patch $B$N(B hotfix $B$,!"0lHL$K%@%&%s%m!<%I$G$-$k$h$&$K$J$C$F$$$^$9!#(B
$B%U%m!<%H$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!!2C$($F!"(B923996 - $B%+%9%?%`%]%C%W%"%C%W%*%V%8%'%/%H$r;HMQ$9$k(B Web $B%Z!<%8$K%"%/%;%9$9$k$H!"(BInternet Explorer 6 $B$,FMA3=*N;$9$k(B
(Microsoft) $B$N(B hotfix $B$b0lHL$K%@%&%s%m!<%I$G$-$k$h$&$K$J$C$F$$$^$9!#(B
$B%U%m!<%H$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!!(Bgzip $B$K7j$,(B 5 $B$D$"$k$=$&$G$9!#G$0U$N%3!<%I$N
$B!!(Bofficial fix $B$O$^$@$"$j$^$;$s$,!"J#?t$N%Y%s%@$+$i(B patch $B$,=P$F$$$^$9!#(B
2006.09.24 $BDI5-(B:
$B!!4XO">pJs(B:
2006.10.27 $BDI5-(B:
$B!!4XO">pJs(B:
2006.11.29 $BDI5-(B:
$B!!(B[ GLSA 200611-24 ] LHa: Multiple vulnerabilities
$B!!$?$7$+$K%d%P$$$G$9$M!#(BPOST $B$b(B ok $B$@$=$&$G!#ElpJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!!(BIE 6 $B0JA0$K?7$?$J7g4Y!#(BVector Markup Language (VML) $B$r=hM}$9$k(B
%ProgramFiles%\CommonFiles\Microsoft Shared\VGX\vgx.dll $B$K(B stack overflow $B$9$k7g4Y$,$"$j!"(B
$B96N,(B web $B%Z!<%8$r;H$C$FG$0U$N%3!<%I$rCVE-2006-3866
$B!!=$@5%W%m%0%i%`$O$^$@8x3+$5$l$F$$$J$$$,!"3+H/$O4{$K=*N;$7$F$*$j!"8=:_%F%9%HCf!#(B
2006 $BG/(B 10 $B7n$N(B Windows Update $B$NF|(B (2006.10.11)$B!"$b$7$/$O$=$l0JA0$K8x3+$5$l$kM=Dj!#$7$+$7!"4{$K0-MQ;vNc$,J#?t$"$k$=$&$J$N$G$9$,!D!D!#(B
$B!!(BIE7 $B$G$I$&$J$N$+$OITL@!#(B
$B!!J#?t$N2sHrJ}K!$,$"$k!#(B
vgx.dll $B$rEPO?2r=|$9$k!#(B
$B%3%^%s%I(B:
regsvr32 -u "%ProgramFiles%\Common Files\Microsoft Shared\VGX\vgx.dll"
IE $B$N@_Dj$G!"(BBinary and Script Behaviors ($B%P%$%J%j%S%X%$%S%"$H%9%/%j%W%H%S%X%$%S%"(B) $B$r(B Disable ($BL58z(B) $B$K@_Dj$9$k!#(B
vgx.dll $B$K(B ACL $B$r@_Dj$7$F%"%/%;%9$r5qH]$9$k!#(B
$B!!4XO">pJs(B:
2006.09.24 $BDI5-(B:
$B!!4XO">pJs(B:
2006.09.27 $BDI5-(B:
$B!!=$@5%W%m%0%i%`=P$^$7$?!#(BACL $B@_Dj$K$h$C$F2sHr$7$F$$$k>l9g$O!"(BACL $B$rLa$7$F$+$iE,MQ$7$^$7$g$&!#(B
$B!!$"$H!"(Bmetasploit $B$J96N,%b%8%e!<%k$b(B:
$B!!$"$H!"(BISA $B$G
$B!U(B
$B!V$R$+$jEEOC!W$N$D$J$,$j$K$/$$>u67$K$D$$$F(B
(NTT $BElF|K\(B, 9/19)$B!#(B20:30 $B8=:_!"Bh(B2$BJs$O$J$$$_$?$$$G$9$1$I!"(B09:01 AM $B$+$i$:!<$C$HB3$$$F$$$k$C$F$3$H(B?
$B!!!D!D(B20:00 $BIU$G:G=*Js$,=P$F$^$7$?(B$B!#(BBenjamin $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B$G$b!">e5-$r=q$$$?$H$-$K$O(B http://www.ntt-east.co.jp/release/0609/060919b.html $B$O(B not found $B$@$C$?$s$@$h$M!D!D!#(B
$B!U(B
$B$J$J#H#P$K%"%/%;%9=8Cf!"8+$K$/$$>uBV$K(B
($BFIGd(B, 9/19)
$B!U(B
[AML 9375] $B!V?7?FF|GI!W$N8bA12V;a$OF|K\?M(B
$B!U(B
$B%9%Q%`BP:v$K4X$9$kF|1Q6&F1@k8@$N=pL>(B
($BAmL3>J(B, 9/13)
$B!U(B
$BK:5Q$N(B9.11 ($B%P%$%J%U<+M3DL?.(B, 9/16)$B!#(B1973.09.11$B!"%A%j!#(B
$B!U(B
YouTube$B!"%3%s%F%s%D$N<+F0G'<1!&Js9p5;=Q$rG/Fb$KF3F~M=Dj!!(B
Warner$B$,2;3Z%3%s%F%s%D$NDs6!$G9g0U!"Ej9F$9$kF02hFb$G$N;HMQ$r5v2D(B
(Internet Watch, 9/19)$B!#(BYouTube $B$O@8$-$N$S$k$3$H$,$G$-$k$+!#(B
$B!U(B
$B%&%$%k%9%P%9%?!<(B 2007 $BJ}LL(B
$B!U(B
$B%8%'%M%j%C%/0eLtIJ!"0e;U$N#73d$,?.Mj@-$K!V!)!W(B
(asahi.com, 9/19)
$B!U(B
$B%m!<%^K!2&!"!VHs>o$K;DG0!W(B
(asahi.com, 9/17)
$BK!2&K\?M$,H/8@$K$D$$$F8eF|
$B!!H/8@A4BN$rFI$s$G$_$?$$$N$@$,!"$I$3$K9T$1$PFI$a$k$N$@$m$&!#(B
$B!D!D$3$l$+(B: $B659D%Y%M%G%#%/%H==O;@$$N%l!<%2%s%9%V%k%/Bg3X$G$N9V1i(B
($B%+%H%j%C%/Cf1{6(5D2q(B, 9/19)$B!#(B
$B659D%Y%M%G%#%/%H==O;@$$N(B2006$BG/(B9$B7n(B17$BF|$N!V$*9p$2$N5'$j!W$N$3$H$P(B
($B%+%H%j%C%/Cf1{6(5D2q(B, 9/18) $B$b;2>H!#(B
$B!!A4BN$N%3%s%F%-%9%H$rL5;k$7$F$=$3$@$1R2p$N;EJ}$,$F$s$G%P%i%P%i$@$C$?$N$G!"!VK\Ev$O2?$H8@$C$?$N$+!W$H5?Ld$r;}$F$?$N$@$1$I!#(B
$B!U(B
dynabook AX/8$B!"(Bdynabook CX/8$B!"(Bdynabook TX/8$B!"(Bdynabook VX/7$B!"(B
Satellite CW1$B!"(BSatellite AW4$B!"(BSatellite AW5$B!"(BSatellite A100$B%7%j!<%:$N(B
$B%P%C%F%j%Q%C%/$K4X$9$k=EMW$J$*CN$i$;!J$*OM$S$H$*4j$$!K(B
(dynabook.com, 9/19)
$B$J$*K\8=>]$O!"=
$B!U(B
$BBgMFNL2=$9$k(BiPod -- $B!V%]%C%I%9%i!<%T%s%0!W$+$i4k6H%G!<%?$r
(ITmedia, 9/15)$B!#(BiPod $B$@$1$,$I$&$3$&$H$$$&$o$1$G$O$J$$$O$:$G$9$,!"(B
$B%&%1A@$$$G$=$&8F$S$?$$$N$G$7$g$&$+!#(B
$B!U(B
Virgin Atlantic$B!"%P%C%F%j!
(ITmedia, 9/16)
$B!U(B
$B%"%I%S!"A`:n@-$dO"7H5!G=$J$I$r6/2=$7$?!V(BAcrobat 8$B!W(B
(Internet Watch, 9/19)
$B1#$7$?$$ItJ,$N>pJs$N$_$r9uEI$j$7$F:o=|$G$-$k!VKO>C$75!G=!W$rDI2C(B(Professional$B!"(B3D Version$B$N$_(B)$B!#(B
$B!!4V0c$C$F(B$B!V7V8w%Z%s$GKOEI$j!W(B$B$7$J$$$h$&$K5$$r$D$1$^$7$g$&!#(B
$B!U(B
snort 2.6.0.2
$B$,=P$?$=$&$G$9!#(B
$B!U(B
$B!Z6&KE:a$NK!0F![
($B4XAHD9$NEl5~!&1JEDD.%m%S!<3hF0F|5-#b#l#o#gHG(B, 9/18)$B!#(B
$B6&KE:a$OL2$C$F$$$k$@$1$G!";`$s$@$o$1$G$O$"$j$^$;$s!#(B
$B$=$7$F!"$b$&$9$0L2$j$+$i@C$a$^$9!#(B
$B!U(B
$BEE;REjI<$M$?(B
$B!U(B
$B9bEY>pJs
($B?eL57n$P$1$i$N$($SF|5-(B, 9/18)
$B!U(B
Internet Explorer 6 $B$G$N%>!<%s$NDI2C(B
($BMU$C$QF|5-(B, 9/19)$B!#%>!<%s$H8@$($P$d$C$Q$j(B$B%9%H!<%+!<(B$B$G$9$M(B ($BL25$$KCm0U(B)$B!#(B
$B?2$F$7$^$C$??M$b$=$&$G$J$$?M$b!"(B$B86:n(B$B$bFI$_$^$7$g$&!#Cf?H$<$s$<$s0c$&$7!#(B
- Microsoft Internet Explorer $B$G$N(B Direct Animation Path Control $B$K4X$9$k%"%i!<%H(B
$B!!(BIE7 $B$K$O$3$N7g4Y$O$J$$$=$&$G$9!#(B
$B!!(BSANS ISC $B$+$i!"(Bkill bit $B@_DjMQ$N%"%W%j$,8x3+$5$l$F$$$^$9!#(B
- 2006 $BG/(B 8 $B7n$N%;%-%e%j%F%#>pJs(B (Microsoft)
-
$B!!(BMS06-049 $BOC!"(B$B%5%]!<%H(B$B$+$i(B Hotfix $B$rF~
$B!!(B925308
$B$K$O(B
Therefore, if you are not severely affected by this problem, we recommend that you wait for the next version of security update 920958 that contains this hotfix.
$B$H$"$j$^$9$N$G!"$b$&$7$P$i$/$9$k$H(B 920958 $B$N?7HG$bEP>l$9$k$O$:$G$9!#(B
$B4XO"(B: Known Issue Documented for MS06-049
(MSRC blog, 2006.9.15)
$B!U(B
InterScan VirusWall $B%9%?%s%@!<%I%(%G%#%7%g%s(B Windows$BHG(B - 6.x: $B=$@5%W%m%0%i%`(B: POP3$B$,IT40A4$J%a%C%;!<%8$r3VN%$7$F$7$^$&(B
($B%H%l%s%I%^%$%/%m(B, 9/15 $B99?7(B)$B!#(Bpatch $B$,$"$k$=$&$G$9!#(B
$B!U(B
$B>pJs=hM}?d?J5!9=!'%;%-%e%j%F%#%;%s%?!
($BMU$C$QF|5-(B, 9/15)
$B$J$s$G$b%^%s%,$K$9$l$P$$$$$H$$$&$o$1$8$c$J$$$7!#$*$b$7$m$/$b2?$H$b$J$$!
$B!!%^%s%,$G$b$$$$$H;W$&$1$I!"3N$+$K$*$b$7$m$/$J$$$G$9$J!#(B
4 $B%3%^$@$C$?$i!"$A$c$s$H5/>5E>7k$7$F$/$l%J%$%H!#(B
$B$Y$D$K(B 4 $B%3%^$G$"$kI,MW$b$J$$$H;W$&$7!#(B
$B$I$&$;(B Dr.$B%;%-$r=P$9$N$J$i!"(B$B%Q%$%m%C%H$N(B CM $B$N$h$&$JJ}8~$H$+!"$$$m$$$m$d$jJ}$O$"$C$?$H;W$&$N$@$,!D!D!#(B
$B!U(B
$B!V$b$&%0!<%0%k$G$J$/$F$b$$$$$s$8$c$J$$$+!)!W$H$$$&8+J}(B
(CNET, 9/15)$B!#(Bask.com $B$O;H$C$?$3$H$,$J$$$J$"!#(Byahoo $B$H(B google $B$N8!:w$r$/$i$Y$k$H!"$$$$0-$$$O$H$b$+$/!"$1$C$3$&0c$&$H$O;W$&!#(Byahoo $B$H(B yahoo japan $B$H$G$b$^$?0c$&$7!#(B
$B!!;n$7$K(B FairUse4WM
$B$r8!:w$7$F$_$k$H!"(Bgoogle $B$O$[$H$s$I2?$b=P$F$-$^$;$s$,!"(Byahoo $B$@$H$$$m$$$m=P$F$-$^$9$M!#(B
$B!U(B
Xerox$B!"J8=q56B$KI;_MQ$NHy:Y%U%)%s%H$r3+H/(B
(ITmedia, 9/15)
$B!U(B
$B!VJsF;$N<+M3$K0-1F6A!W(B---HP$B$K%8%c!<%J%j%9%HCDBN$,E\$j$N%3%a%s%H(B
($BF|7P(B IT Pro, 9/15)
$B!U(B
$B%&%$%k%9:n
(ITmedia, 9/14)$B!#:ne$GAw$C$F$$$k$N$G$9$+$i!"!V$S$C$/$j!W$O$J$$$H;W$$$^$9!#(B
$B!U(B
$BJF9qEZ0BA4J]>c>J$,!"!V%5%$%P!<%9%H!<%`!W$NJs9p=q$rH/I=(B
(ITmedia, 9/15)$B!"(B
DHS Releases Cyber Storm Public Exercise Report
(DHS, 9/13)
$B!U(B
$BH~IM$N2q%K%e!<%9!!#N#o!%#8#8(B: $B!V86;RNON)9q7W2h!W$KH?BP$7$h$&(B
($BH~IM$N2q(B, 9/14)
$B!U(B
$B!X%O%C%+!<%:!!$=$N?/F~$N
($B%$%s%W%l%9(B) $B$r$d$C$F$$$k$=$&$G$9!#(B5 $B>O$^$G8x3+$5$l$F$k$s$G$9$M!#(B
$B!!$3$&$$$&$N$r!V%O%k%R%a%=%C%I!W$H8@$&$s$G$9$+$M(B ($B0c(B)$B!#(B
$B!U(B
NTLM $BG'>Z%W%m%H%3%k$H%;%-%e%j%F%#%5%]!<%H%W%m%P%$%@(B
(monyo.com)$B!#$b$H$N$V@h@8$K$h$kK]Lu!#(B
$B$b$H$N$V@h@8$NLu6H$N$9$P$i$7$5$r
$B!U(B
$B3[2lKI1RD#D941!'%F%]%I%s#29f!V6uCfJ,2r$7$?!W$HG'$a$k(B
($BKhF|(B, 9/15)
$BKI1RD#$OEv=i!"D4::Js9p=q$r=P$97W2h$@$C$?$,!"8xI=$NHO0O$r$a$0$C$FJF9q$H$ND4@0$,$D$+$:!"5-
$B!U(B
922461 - Description of the feature changes and the functionality changes in Windows XP Home Edition KN and in Windows XP Professional KN
(Microsoft)$B!#4Z9q8lHG(B Windows XP $B$N;EMMJQ99$NOC!#(B
$B!U(B
923737 - How to use Reset Internet Explorer Settings (RIES)
(Microsoft)$B!#(BIE 7 $B$K$O$=$&$$$&5!G=$,$"$k$N$@$=$&$G$9!#(B
$B!U(B
925109 - Detection and deployment guidance for the September 2006 security release
(Microsoft)$B!#$*!
$B!U(B
918689 - A memory leak occurs when you use WinHTTP to access a Web server over an SSL connection
(Microsoft)$B!#(BWindows Server 2003 $BOC!#(B
$B!U(B
923200 - When you try to receive TCP data in Microsoft Windows Server 2003, the TCP connection may be reset before all the data can be processed
(Microsoft)$B!#(BFIN_WAIT_2 $BOC!#(B
$B!U(B
$B%;%-%e%j%F%#CDBN(BTCG$B!$7HBSEEOC5!%;%-%e%j%F%#;EMM$N%I%i%U%H$rH/I=(B
($BF|7P(B IT Pro, 9/14)$B!#!V%1!<%?%$$rD4$Y$FIb5$$7$F$$$J$$$+3NG'$9$k967b!W$X$NBQ@-$,$D$$$?$j$9$k$s$@$m$&$+!#(B(^^;)
$B!U(B
$B%&%$%k%9%P%9%?!<(B2006 - 14.x, $B%&%$%k%9%P%9%?!<(B2005 - 12.x: $B%M%C%H%o!<%/%I%i%$%V>e$N%G!<%?$KBP$9$k>e=q$-J]B8$,<:GT$9$k8=>]$K$D$$$F(B
($B%H%l%s%I%^%$%/%m(B, 9/14)$B!#(BVSAPI 8.310 $BOC!#(B
$B8x3+:F3+$^$G$O!"$b$&$7$P$i$/$+$+$j$=$&!#(B
(fixed: nodoame $B$5$s46
$B!U(B
1$B?M>h$j%9%/!<%?!V%;%0%&%'%$!W$,<+$9$k62$l(B
($BF|7P(B IT Pro, 9/15)
$B!U(B
InterScan WebManager 5.0 SecurityPatch ($B%S%k%I(B 0531) $B8x3+$N$*CN$i$;(B
($B%H%l%s%I%^%$%/%m(B, 9/14)
$B!U(B
EU$B$,!V(BWindows Vista$B!W$N%;%-%e%j%F%#5!G=$K6/9E;Q@*(B
($BF|7P(B IT Pro, 9/14)$B!#(B
$B!V%;%-%e%j%F%#!&%=%U%H%&%(%";T>l$G4{B8%i%$%P%k4k6H$NDy$a=P$7$r(BMicrosoft$B$K5v$7$F$7$^$&$H!$!JMM!9$J%;%-%e%j%F%#4k6H$NDs6!$9$k3W?7E*$J@=IJ$,!K4m81$K$5$i$5$l$k!#B?MM@-$H3W?7@-$,Dc2<$9$k7k2L!$>CHq
$B!!$J$s$8$c$=$j$c!D!D!#(BVista $B$N%;%-%e%j%F%#5!G=$@$1$GEO$l$k$[$I@$$NCf$O4E$/$J$$(B
($B$h$&$K(B Microsoft $B$O(B Vista $B$r0U?^$7$F9=@.$7$F$$$k(B) $B$N$K!#(B
Microsoft $B$,$d$m$&$H;W$($P$G$-$k$3$H$H!"
$B!!(BEU $B$N?M$C$F!"(B10 $BG/A0$H8=:_$N0c$$$rG'<1$G$-$J$$$N$+$J!#(B
$B!!(BFairUse4WM $B$H$$$&%W%m%0%i%`$,$"$k$N$@$=$&$G$9!#:G?7HG$O(B 1.2 fix $B$H$$$&$b$N$N$h$&$G$9!#(B
$B!!(B$B%G%8%?%k%_%l%K%"%`Cx:n8"K!(B$BJ}LL$O$@$$$8$g$&$V$J$s$@$m$&$+!#(B
Microsoft$B$O(B8$B7n(B28$BF|$K:G=i$N%U%#%C%/%9$r%j%j!<%9$7$?!#$3$N%O%C%+!<$O$9$0$KJL$N%P!<%8%g%s$N%W%m%0%i%`$r%j%j!<%9$7!"$3$l$r%$%s%?!<%M%C%H$N7G<(HD$G!"9XF~$7$?%G%8%?%k%a%G%#%"%U%!%$%k$N!V8x@5;HMQ!W$r2DG=$K$9$kJ}K!$@$H@kEA$7$?!#(B
($BCfN,(B)
Windows$B$J$I$rC4Ev$9$kItLg$N>e5i%W%m%@%/%H%^%M%8%c!
$B!!3N?.HH$JJ}$N$h$&$G$9$M!D!D!#(B
$B!!4XO"(B: Microsoft and FairUse4WM
(schneier.com, 2006.09.07)
$B!!(BIE 6 $B0JA0$K?7$?$J7g4Y!#(BDirect Animation ActiveX $B%3%s%H%m!<%k(B daxctle.ocx $B$K(B heap overflow $B$9$k7g4Y$,$"$j!"96N,(B web $B%Z!<%8$r1\Mw$9$k$HG$0U$N%3!<%I$rCVE-2006-4777$B!#4{$K(B$B96N,%3!<%I$,8x3+(B$B$5$l$F$$$k!#(B
DirectAnimation.PathControl $B$G$9$+!#(B
$B!!=$@5%W%m%0%i%`$O$^$@B8:_$7$J$$!#(Bdaxctle.ocx $B$K(B kill bit $B$r@_Dj$9$k$3$H$G2sHr$G$-$k$O$:$@$1$I!"(Bdaxctle.ocx $B$rI,MW$H$9$k%5%$%H$O$b$A$m$sF0$+$J$/$J$k!#(B
$B!!(BCLSID $B$O(B {D7A7D7C3-D47F-11D0-89D3-00A0C90833E6} $B$G$$$$$N$+$J!#(B
$B!!!D!D%;%-%e%j%F%#(B $B%"%I%P%$%6%j=P$^$7$?(B:
$B!!2sHrJ}K!$H$7$F$O!"(Bkill bit $B$N@_Dj$NB>!"(B%windir%\system32\Daxctle.ocx $B$K(B everyone:$B5qH](B $B$J(B ACL $B$r$D$1$k!"%"%/%F%#%V%9%/%j%W%H$rL58z$K$9$k!"$J$I$,>R2p$5$l$F$$$k!#(B
2006.09.19 $BDI5-(B:
$B!!(BIE7 $B$K$O$3$N7g4Y$O$J$$$=$&$G$9!#(B
$B!!(BSANS ISC $B$+$i!"(Bkill bit $B@_DjMQ$N%"%W%j$,8x3+$5$l$F$$$^$9!#(B
2006.11.15 $BDI5-(B:
$B!!(BInternet Explorer $BMQ$NN_@QE*$J%;%-%e%j%F%#99?7%W%m%0%i%`(B (922760) (MS06-067)
$B$G=$@5$5$l$^$7$?!#(B
$B!!(BFirefox 1.5.0.7 $BEP>l!#(B7 $BpJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!!$"$o$;$F!"(BThunderbird 1.5.0.7$B!"(BSeaMonkey 1.0.5
$B$b=P$F$$$k!#(B
$B!U(B
$B!V(BDION$B!W8D?M>pJsN.=P!"0QBw@h$N85
(ITmedia, 9/13)$B!"(B
$B$*5RMM>pJsN.=P$ND4::7k2L5Z$S
(KDDI, 9/13)$B!#(B
$B$*5RMM>pJs$NN.=P$K4X$9$k$*CN$i$;(B
(KDDI, 6/13) $B$N$D$E$-!#(B
$B!U(B
P2P$B%M%C%H%o!<%/$N(BeDonkey$B$,JD:?(B
(ITmedia, 9/13)
$B!U(B
Video - FSIS 2007 Beta Demo
(F-Secure blog, 9/13)$B!#(BF-Secure Internet Security 2007 $B$K$O!"(Bdeep guard $B$H$$$&$U$k$^$$8!=P5!G=$,$D$$$F$$$k!"$H$$$&$3$H$G$9$+!#(B
$B!U(B
$B;00f=;M'6d9T!"!V1+$d$I$j!W!V$*IwO$$"$,$j!W$G8!:w$N%F%l%S9-9p$GJX>h%U%#%C%7%s%0$N4m5!!JHo32KI;_MQ%(%s%H%j!K(B
($B9bLZ9@8w!w<+Bp$NF|5-(B, 9/13)$B!#(B
$B4XO"(B: $B!VCODl?M$NHkL)!W$N%;%-%e%j%F%#@H
($B9bLZ9@8w!w<+Bp$NF|5-(B, 6/5)
$B!!(Bsmbc.co.jp $B$H$$$&%I%a%$%sL>$,
$B!!(BJPRS$B$,@/I\5!4XMQ$KM=Ls$5$l$?F|K\8l(BJP$B%I%a%$%sL>$N%j%9%H$r99?7$7!"Ev3:@/I\5!4X$+$i$NEPO?$N$N0B?4$JMxMQ$rB%?J(B $B!](B
(JPRS, 9/5) $B$H$$$&OC$b$"$C$?$h$&$G!#(B
$B!U(B
Windows XP Home Edition $B$N%5%]!<%H(B $B%i%$%U%5%$%/%k(B
(Microsoft, 8/8 $B2~D{(B)$B!#>.Ln$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B8=:_!J(B2006 $BG/(B 8 $B7n;~E@!K
- 2006 $BG/(B 8 $B7n$N%;%-%e%j%F%#>pJs(B (Microsoft)
-
$B!!(BMS06-049 $BI{:nMQOC!"$h$&$d$/(B official $B>pJs$,=P$^$7$?!#$$$^$N$H$3$m$O!">pJs9pCN$@$1$G$9!#(B
$B!!(B$B$^$H$a%Z!<%8(B$B$b99?7$7$F$*$-$^$7$?!#(B
$B!!(BMS06-042 patch $B$,:F$S2~D{$5$l$^$7$?!#(B
Internet Explorer $BMQ$NN_@QE*$J%;%-%e%j%F%#99?7%W%m%0%i%`(B (918899) (MS06-042)
2006 $BG/(B 9 $B7n(B 13 $BF|!"!VD9$$(B URL $B$N%P%C%U%!(B $B%*!<%P!<%U%m!CVE-2006-3873 $B$G@bL@$5$l$F$$$k@HpJs$*$h$S(B Internet Explorer 6 Service Pack 1$B!"(BInternet Explorer 5.01 Service Pack 4 $B$*$h$S(B Windows Server 2003 $BMQ(B $B$N(B Internet Explorer 6 $B$N%;%-%e%j%F%#99?7%W%m%0%i%`$r99?7$7$^$7$?!#(BInternet Explorer $B$N$3$l$i$N%P!<%8%g%s$r$4;HMQ$N$*5RMM$O!"?7$7$$99?7%W%m%0%i%`$rD>$A$KE,MQ$7$F$/$@$5$$!#(B
CVE-2006-3873 $B$h$j0zMQ(B:
Heap-based buffer overflow in URLMON.DLL in Microsoft Internet Explorer 6 SP1 on Windows 2000 and XP SP1, with versions the MS06-042 patch before 20060912, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long URL on a website that uses HTTP 1.1 compression, due to an incomplete fix for CVE-2006-3869.
CVE-2006-3869
$B$N=$@5$,IT40A4$@$C$?$N$G$9$M!#(B
$B4XO"(B: [EEYEB-20080824] Internet Explorer Compressed Content URL
Heap Overflow Vulnerability #2
$B!!(BMS06-040 patch $B$,2~D{$5$l$^$7$?!#(B
Server $B%5!<%S%9$N@H
2006/09/13: $B$3$N%;%-%e%j%F%#>pJs%Z!<%8$r99?7$7!"%5%]!<%H5;=Q>pJs(B 924054 $B$K5-=R$5$l$F$$$k(B Microsoft Windows Server 2003 Service Pack 1 $B$*$h$S(B Microsoft Windows XP Professional x64 Edition $B$K1F6A$r5Z$\$9LdBj$r2r7h$9$k$?$a$N2~D{HG$N%;%-%e%j%F%#99?7%W%m%0%i%`$r%j%j!<%9$7$?$3$H$r$*CN$i$;$7$^$7$?!#(B
$B!!(BQuickTime 7.1.3 $BEP>l!#(B7.1.2 $B0JA0$KB8:_$9$k!"(B7 $B
$B!!(BQuickTime 7.1.3 $B$O0J2<$+$iF~
2007.05.16 $BDI5-(B:
$B!!$$$D$N$^$K$+!"(B
About the security content of QuickTime 7.1.3 $B$N1Q8lHG(B$B$K$@$1(B
CVE-2007-0754 $B$,DI2C$5$l$F$$$k!#(B
TPTI-07-07: Apple QuickTime STSD Parsing Heap Overflow Vulnerability $B$N7o!#(B
$B!!(BFlash Player 8.0.24.0 $B0JA0$K!"?7$?$K(B 5 $B$D$N7g4Y!#(B
$BG$0U$N%3!<%I$,CVE-2006-3311, CVE-2006-3587, CVE-2006-3588)
$B$NB>!"(B
allowScriptAccess $B$K4X$9$k7g4Y(B (CVE-2006-4640)$B!"(B
ActiveX $B%3%s%H%m!<%k$N5sF0$K4X$9$k7g4Y(B (CVE-2006-3014)$B!#(B
$B!!(BFlash Player 8.0.33.0, 7.0.68.0, 7.0.66.0 $B$G=$@5$5$l$F$$$k!#(B
$B$^$?(B Flash Player 9.0.16.0 $B$K$O$3$N7g4Y$O$J$$!#(B
$B!!4XO"(B: $B%^%$%/%m%=%U%H(B $B%;%-%e%j%F%#(B $B%"%I%P%$%6%j(B (925143)
Adobe $B%;%-%e%j%F%#B.Js(B: APSB06-11: Flash Player $B$N@H
(Microsoft)
2006.11.16 $BDI5-(B:
$B!!(BWindows XP SP2 $B$K4^$^$l$k(B Flash Player $BMQ$N99?7%W%m%0%i%`$,(B Microsoft
$B$+$i8x3+$5$l$^$7$?(B:
Adobe $B$N(B Macromedia Flash Player $B$N@H
2006.10.11 $BDI5-(B:
$B!!F|K\8lHG$,=P$F$^$7$?!#(B
$B!U(B
$B%7%e%o%k%D%'%M%C%,!
(ITmedia, 9/12)
$B!U(B
CISSP $B;q3J
($B9)3X1!Bg3X(B)$B!#(Bana-log $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#3N$+$K$$$$$*CMCJ$G$9$M!#(B
$B!U(B
DNS Amp$B$N6<0R(B
($BF|7P(B IT Pro, 9/7)
$B!U(B
$BHH:aH/@8%^%C%W!!(B7$B
($BKhF|(B, 9/6)
$B!U(B
$B%V%l!<%-<+F0:nF0!";v8NKI;_$N:G?75;=Q(B
$B$N$H$3$m$G%J%$%H%i%$%@!<$N(B CD $B$NOC$r$7$?$N$G$9$,!"4dK\$5$s$+$i$3$s$J>pJs$r$$$?$@$-$^$7$?(B ($B$"$j$,$H$&$4$6$$$^$9(B)
$B7oL>$N#87n#2#5F|$N5-;v$K=q$+$l$F$$$?!V%J%$%H%i%$%@!
http://www.screenarchives.com/title_detail.cfm?ID=4473
$B;d$b0JA0$K$3$N%5%$%H$+$iGc$C$F$$$^$9!#(B
$BF|K\$K$bLdBj$J$/Aw$C$F$b$i$($^$9!#(B
$BCMCJ$b(B19.55$B%I%k$H!"(Bamazon$B$GGc$&$h$j$b0B$$CMCJ$G$9!#(B
$B!JJLESAwNA$,3]$+$j$^$9$,!K(B
$B!!$5$C$=$/H/Cm!#(B
$B!U(B
OSSEC HIDS
0.9-1a $B$,=P$F$$$^$9!#;3K\$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
$B9q;:(BPerl$B%U%l!<%`%o!<%/(BTripletaiL
($B$&$5$.J83XF|5-(B, 9/12)
$B!U(B
$B%(%K%0%^2rFI5!$rJ#@=!"8x3+$X(B
($B;:7P(B, 9/12)$B!#$9$2$'!#(B
$B!!:#0l=V!"!V0E9f@oBb%(%K%0%^%s!W$H$$$&%"%$%G%"$,!D!D(B orz
$B!U(B
RSS Feed $B$X$N%9%/%j%W%H$N:.F~(B
($BMU$C$QF|5-(B, 9/12)
$B!U(B
$BO31H$M$?(B
$B!U(B
MSI K9N mobos suffer random shutdowns
(the Inquirer, 9/7)$B!#(B
MSI $B$N(B K9N Ultra / K9N Platinum
$B%^%6!<%\!<%I$G$b(B random shutdown $B$7$F$7$^$&$h$&$G$9!#(B
$B0p_7$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
AFTER ASUS and its teetering problems with several AMD based motherboards, Foxconn's 30-minute BIOS reset affair, it seems that MSI also suffered from some headaches in relation to nForce5 chipset.
$B!!(BASUS $B$N(B teetering problems $B$d(B
Foxconn $B$N(B 30-minute BIOS reset $B$H$$$&$N$,$I$s$JOC$J$N$+!"$h$/$o$+$j$^$;$s$,!D!D!#(B
$B!U(B
$B@55,IJ$N!V$*$^$1!W$H$7$F3$B1HG(BPC$B%=%U%H$rHNGd!"9-Eg;T$NBg3X9V;U$rBaJa(B
(Internet Watch, 9/11)$B!"(B
$BCf9q?MHs>o6P9V;U$rBaJa!a!V0lB@O:!WJ#@=$r%M%C%HHNGd!]9-Eg8)7Y(B ($B;~;v(B, 9/11)$B!#(B
$B9-Eg=$F;Bg7P:Q2J3XIt$G$9$+!D!D!#$($.$g$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
$B=5Fb$K8!::3+;O!!%+%\%A%c;DN1G@Lt$G%[%/%l%s(B
($BKL3$F;?7J9(B, 9/12)
$BH!4[;T55EDG@6($,=P2Y$7$?%+%\%A%c$+$i9q$N;DN14p=`CM$rD6$($kG@Lt!V%X%W%?%/%m%k!W$,8!=P$5$l$?(B ($BCfN,(B)$B!#(B
$B%[%/%l%s$K$h$k$H!"(B ($BCfN,(B) $B;0==0lG/A0$K;HMQ6X;_$H$J$C$?%X%W%?%/%m%k$OBP>]$+$i30$7$F$$$?!#(B
$B!!(B30 $BG/$bA0$K;HMQ6X;_$K$J$C$?Lt:^$,!"
$B!U(B
$BHVAH%M%C%HG[?.$N2;3ZCx:n8"!"#1#07n$+$i=8Cf4IM}(B
(asahi.com, 9/12)
$B!U(B
$B%*!<%W%s%=!<%9(B:NetBSD$B$N>-Mh(B
(Open Tech Press, 9/11)
$B!U(B
9.11 $BJ}LL(B
$B!U(B
$B>pJsO3$($$LdBj$KMI$l$k(BHP--M$B!&%O!<%I(BCEO$B!"=>6H0w$K%a%b$rAwIU(B
(CNET, 9/11)
$B!U(B
$B%5!<%P!<$NG.BP:v$,!V@E$+$J;T>l!W$r@Z$j3+$/(B
($BF|7P(B IT Pro, 9/11)
$B!U(B
[AML 9252] $B%5%i6b$N9b6bMx0];}$KJFCDBN$N05NO$+(B
- 2006 $BG/(B 8 $B7n$N%;%-%e%j%F%#>pJs(B (Microsoft)
-
$B!!(BMS06-051 patch (917422) $B$K$D$$$F$b!"J#?t$NIT6q9g;vNc$,$"$k$h$&$@!#(B
$B!!$"$H!"(BMS06-049 $BOC$K$D$$$F$O(B
$B$3$A$i(B$B$K$^$H$a$F$*$$$?!#(B
$B!U(B
$BMhG/$h$j1?E>LH5v>Z$,Hs@\?(7?(BIC$B%+!<%I$K@ZBX$(3+;O(B
(slashdot.jp, 9/9)$B!#$X$'!#(B
$B!U(B
$B0{=hJ,5^A}#9#6?M!"!V86B'LH?&!W$O#98);T$@$1(B ($BFIGd(B, 9/10)$B!"(B$B0{LH?&!"!H8:7:!I$N<+<#BN$b!DFIGdD4::(B
($BFIGd(B, 9/10)
$B!U(B
$BH|GJ8P!'?
($BKhF|(B, 9/10)
$B!U(B
$B#S#P%3!<%I!'4n$V;k3P>c32/4|BT(B
($BKhF|(B, 9/10)
$B!U(B
$BM>$k%/%8%iFy!"?e;:D#$,Gd$j9~$_I,;`!!$G$b2A3J$O9b$/(B
(asahi.com, 9/10)$B!#3N$+$K9b$$$7$J$"!#(B
$B!U(B
$B#S#I#M%m%C%/2r=|!'Cf9q?M@`EpCD$+$iEpIJ$N7HBSEEOC;EF~$l(B
($BKhF|(B, 9/9)
$B!U(B
$B%(%l%Y!<%?!<;v8N!'9b#2;`K4$N8=>l!"
($BKhF|(B, 9/9)
$B!U(B
$B!FNr;K@oAh!G$K#2#0#02/%&%)%s;Y1g!D!VKLEl%"%8%":bCD!WMhG/M=;;:vDj(B
($BCf1{F|Js(B, 9/9)
$B!U(B
$BL@F|$O(B 9.11
$B!U(B
$BCf9q!"2O@n$N#63d!H?<9o$J1x@w!I!!Ev6IFbIt;qNAN.=P(B
($B;:7P(B, 9/9)
$B;:6HGQ4~J*$K$h$k?<9o$J1x@w$OCf9qA4EZ$N2O@n$H8P$N#63d$K$*$h$S!";D$j$N2O@n$b$^$@7ZEY$J$,$i1x@w$,?J$s$G$$$k!#$5$i$KG@;:J*$K1F6A$N$"$kA44C^t!J$+$s$,$$!KMQ?e$N#23d$,5,@)4p=`$rBgI}$K>e2s$k?e6d$K1x@w$5$l$F$$$k!#?eINc$OA4<@IB$N#83d!"IB;`$N#3J,$N#1$K$N$\$j!"#2#0#0#4G/0J9_!"MD;y$NF,$,5pBg2=$9$k4qIB$,1x@wCO0h$G
$B!U(B
$BEz$($F$M$C$H(B
$B$K$D$$$F$J$K$2$K$0$0$C$F$$$?$i!"0J2<$r$_$D$1$^$7$?!#(B
$B!U(B
$B8M@R>pJsN.=P!'<+<#BND#
($BKhF|(B, 9/8)
$B!U(B
JRE 5 Update 8
(F-Secure blog, 9/6)
$B!U(B
$BEl>Z!"$_$:$[>Z$N;YJ'$$MW5a5qH]!!%8%'%$%3%`3t;v7o(B
($B;:7P(B, 9/8)$B!#K!Dn$G7kCe$r$D$1$^$7$g$&%b!<%I!#(B
$B!U(B
[Full-disclosure] release uhooker v1.2
The Universal Hooker is a tool to intercept execution of programs. It
enables the user to intercept calls to API calls inside DLLs, and also
arbitrary addresses within the executable file in memory.
$B!U(B
$BIT@5%"%/%;%9!'%Q%9%o!<%IEp$_IT@5%"%/%;%9!"Cf(B1$B=w@8EL$rJdF3!!5\>k(B ($BKhF|(B, 9/7)$B!#$G$-$k(B! $B%U%#%C%7%s%0!#(B
($B$G$-$k$1$I$d$C$A$c$@$a$G$9(B)
$B!U(B
$B%;%,!'(BPSU$BIT6q9gLdBj!"%5!<%S%9$r:F3+!!860x$O%"%/%;%9=8Cf$+(B
($BKhF|(B, 9/6)$B!#%"%/%;%9=8Cf$O%H%j%,$G$"$C$F860x$8$c$J$$$G$7$g$&!#(B
$B%M%C%H%o!<%/%b!<%I$NIT6q9g$K$*$1$k!"BP1~>u67$K$D$$$F(B (phantasystaruniverse.jp)
$B$d(B
$B%"%C%W%G!<%H!?%a%s%F%J%s%9>pJs(B (phantasystaruniverse.jp)
$B$r8+$k8B$j$G$O!"@o$$$O$D$E$$$F$$$k$h$&$G$9$,!#(B
$B!U(B
$BBh<72s%;%-%e$=$PJY6/2q!!!ACf?.!J>e?[K,!&1v?,!K!A(B$B!#(B2006.10.21$B!A(B22$B!"D9Ln8)1v?,;T!"!V=IGqHq(B($BLs(B1$BK|1_(B)$B!\2q>lBe(B($BLs(B200$B1_(B)$B!\?)Hq(B($BLs(B5000$B1_DxEY!!8D?M:9$H$C$F$bM-(B)$B!\2q>l$+$i=I$^$G$N8rDLHq!J1}I|#8#0#01_!K!a#1K|#6@i1_Dx$G(BOK$B$+$H!W!#(B
$B!U(B
$BIT?3pJs!WDs6!5qH]!!@>5\=w;yM62}(B
($B;:7P(B, 9/8)$B!#!V8=>l6a$/$NI42_E9!W$C$F2?(B?
$B!D!D(B$B:e?@I42_E9(B$B$G$7$g$&$+!#?yK\$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
$B>eN.9)Dx(BAtoZ ($BF|7P(B IT Pro)
$B!U(B
$B%M%C%H%o!<%/!&%;%-%e%j%F%#!&%o!<%/%7%g%C%W(B in $B1[8eErBt(B$B!#(B
2006.10.05$B!A(B07$B!"1[8eErBt29@t(B ($B?73c8)(B)$B!"Aa4|3d0z(B 12,000$B1_!#0BED$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
$B1UBNN`;}$A9~$_!"A4LL6X;_$+!!Mh7n$+$i2$=#9R6uO)@~$G(B
(asahi.com, 9/8)
$B!U(B
$B$b$&$$$/$D?2$k$H!"(B9.11
- $B#9!#1%F%m71N}$N1GA|!"%"%k!&%8%c%8!<%i$,J|Aw(B
($BFIGd(B, 9/8)
- Al-Qaeda video takes credit for 9/11
($B%"%k%8%c%8!<%i(B, 9/8)
- $B@$3&$rFI$`!'#9!#1$+$i#5G/!?#1!!=P8}8+$($LBP%F%m@oAh(B
($BKhF|(B, 9/8)
- $BJFF1;~%F%m$N%I%i%^$K935D!!A0@/8"44It$i(B
(CNN, 9/8)
- $B%$%i%/!&%"%k%+%$%@5!9=!"!VJF9q?M$N;&32!W$r;X<((B
(CNN, 9/8)
- $BJFBgE}NN!"#C#I#A$N6KHk<}MF;\@_$NB8:_=i$a$FG'$a$k(B ($BFIGd(B, 9/7)
- $BJFBgE}NN!"#C#I#AHkL)<}MF;\@_$NB8:_G'$a$k(B (asahi.com, 9/7)
- $B#C#I#AHkL);\@_!"0[Nc$N5!L)2r=|!!9qFb30$NHcH=$+$o$9(B (asahi.com, 9/7)
- $B%V%l%"B`?X!'1Q9qL1$KIT?.!V%F%m$N4m81$K$5$i$7$?!W(B
($BKhF|(B, 9/8)
$B!U(B
$B%P%9%+%a%i!'%J%s%P!<>H2q$77Y9p!!%9%`!<%:1?9T$K!V0lLr!W(B
($BKhF|(B, 9/8)
$B!U(B
$B%O!<%^%s%W%m!"ErJ($+$74o$NIT@52~B$$J$$$H5u56Js9p(B
($BFIGd(B, 9/8)$B!#(B
$BH>L)JD<0%,%9=V4VEr$o$+$74o$N<+ ($B%O!<%^%s(B, 8/4) $B$+$i$NOC!#$d$^$6$-$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#%O!<%^%sJ}LL$OB>$K$b$$$/$D$+=P$F$^$9$M(B:
$B!U(B
$B;00f=;M'%+!<%I!"(B2007$BG/$h$j(BiD$B$r%/%l%8%C%H%+!<%I$KI8=`Ek:\(B
(MYCOM $B%8%c!<%J%k(B, 9/7)
$B!U(B
$BBg4Z9R6u!"%N!<%H(BPC$B$N5!Fb;}$A9~$_$r@)8B$X(B
(slashdot.jp, 9/8)$B!#!V4Z9q!W!VBg4Z9R6u!W$K$@$1H?1~$7$F$$$k0U8+$,;68+$5$l$F%"%l$G$9$,!D!D!#(B
- $B5!Fb$G$N%N!<%H%Q%=%3%s$4MxMQ$K4X$9$k@)8B$N$40FFb(B
($BBg4Z9R6u(B, 8/30)$B!#(BDELL $BA4It$H(B iBook$B!"(BPowerbook $B$O6X;_!#(B
- Can I use my Dell laptop computer inflight?
(QANTAS, 8/22)$B!#(B
$B%P%C%F%j$@$1$GF0$+$9$+!"(BAC $B$@$1$GF0$+$9(B ($B%P%C%F%j$O30$9(B) $B$N$G$"$l$P%j%3!<%kBP>]IJ$G$b(B ok$B!#(B
- #1014392 (slashdot.jp, 9/8)
$BEECSFbIt$N%7%g!<%H$,??
$B$G$9$,!"EE8;$H$7$F%P%C%F%j!<$r;HMQCf$K%P%C%F%j!
$B9qFb$N(BDELL,Apple$B$N7o$O$I$A$i$b(BAC$B%"%@%W%?@\B3Cf$@$C$?$H$*$b$$$^$9!#(B
$B$^$:$$$N$O%7%g!<%H$7$F$$$k$K$b$+$+$o$i$:$=$l$r8!=P$;$:$K=
$B!!Bg4Z9R6u$NH?1~$O(B overkill $B5$L#$+!#(B
$B!U(B
$B%^%$%/%m%=%U%H(B $B%;%-%e%j%F%#>pJs$N;vA0DLCN(B$B!"(B
2006.09 $BHG$,=P$F$$$^$9!#(B
$B4XO"(B:
$B!!(BOpenSSL 0.9.8b $B0JA0(B / 0.9.7j $B0JA0$KBP$7$F!"(B
PKCS #1 v1.5 $B=pL>$KBP$9$k967b!"(B
RSA Signature Forgery
(CVE-2006-4339) $B$,2DG=!#(B
$B$J$*!"967b$NBP>]$H$J$k$N$O(B exponent 3 $B$N$D$$$?(B RSA $B80$r;HMQ$9$k>l9g!#(B
$B!!(BOpenSSL 0.9.8c / 0.9.7k $B$G=$@5$5$l$F$$$k!#(B
$B$^$?!"(BOpenSSL 0.9.6 $B!A(B 0.9.9 $B7ONs$KE,MQ$G$-$k(B
patch
$B$,8x3+$5$l$F$$$k!#(B
$B!!4XO"(B: OpenSSL Security Advisory [5th September 2006] ($B$=$N(B1)
($B$*$*$$$o$N$3$a$s$H(B, 2006.09.05)
2006.09.21 $BDI5-(B:
$B!!(BGnuTLS $B$K$bF1MM$N7g4Y$,$"$C$?$=$&$G!"(B1.4.3 $B0J9_$G=$@5$5$l$F$$$k(B
($B:G?7$O(B 1.4.4)
$B!!$^$?!"(BOpera 9 $B$K$O(B OpenSSL 0.9.8 $B$,4^$^$l$F$$$k$?$a!"$3$N7g4Y$N1F6A$r
2006.09.22 $BDI5-(B:
$B!!(BOera 9.0.2 $B=P$^$7$?!#$3$N7g4Y$,=$@5$5$l$F$$$k$=$&$G$9!#(B
$B!U(B
Winny$B$d(BYouTube$B$K$*$1$kCx:n8"?/32!"(BACCS$B5WJ]ED@lL3M};v$,9M$($kBP93ZCf(B
(Internet Watch, 9/6)
$B!U(B
$B!V%W%j%F%-%9%F%#%s%0!W$,;H$o$l$?(B--$B>pJsO3$($$$a$0$k(BHP$B$N
(CNET, 9/7)
$B!U(B
$B%k!<%H%-%C%H:o=|%D!<%k!$(B13$BK\$r0l5$$K>R2p(B
($BF|7P(B IT Pro, 9/5)$B!#$$$m$$$m$"$k$s$G$9$M!#(B
$B!U(B
$B!V%G%9%N!<%H!W:n
($BKL3$F;?7J9(B, 9/7)
$B>.H*MF5?e$N?OJ*$N7HBS$r6X$8$F$$$kF1K!0cH?$KEv$?$k$HH=CG$7$?!#(B
$B!!(B$B=FK$Ea7uN`=j;}Ey ($BCCLj20%H%h%/%K(B)
$B#3!%!V?OJ*!W(B
$B!V2??M$b6HL3$=$NB>@5Ev$JM}M3$K$h$k>l9g$r=|$$$F$O?OBN$ND9$5$,#6%;%s%A$rD6$($k?OJ*$r7HBS$7$F$O$J$i$J$$!#!W0cH?$O#1G/0J2<$ND(Lr$^$?$O#3K|1_0J2<$NH36b$K=h$;$i$l$^$9!#!V?OJ*!W$H$O?M$r;&=}$9$kG=NO$N$"$kJR?O$^$?$ON>?O$N9]
$BF|>o@83h$G$=$NMQES$,G'$a$i$l$F$$$k$b$N$G$"$C$F$b$9$Y$F$,!V?OJ*!W$H$J$j$^$9!#(B
$B#6#c#m0J>e$N!V?OJ*!W$b=j;}$O6X;_$5$l$F$$$^$;$s!#(B
$B$^$?@5Ev$JM}M3$,$"$l$P!V7HBS!W$7$F$b$h$$$N$G$9$,!"5?$$!JMF5?!K$r$+$1$i$l$J$$$h$&$K!";HMQ$7$J$$$H$-$O87=E$K:-Jq$7!"$`$-$@$7$G%Y%k%H$K$D$1$?$j!"Mg$N$^$^%]%1%C%H$KF~$l$?$j$7$J$$$G$/$@$5$$!#(B
($BCfN,(B)
$B!V@5Ev$JM}M3!W$H$O!)(B
$B!VDL>o?M$N>o<1$GM}2r$G$-$k@5$7$$M}M3!W$H$$$&0UL#$G$9!#Gc$C$?%J%$%U$r<+Bp$K;}$A5"$k!"=$M}$N$?$a%a!<%+!<$dHNGdE9$K;}$C$F$$$/!$D`$d%-%c%s%W$G;H$&$?$a$N1}O)!"I|O)$J$I$O@5Ev$JM}M3$H9M$($i$l$^$9!#$7$+$7!V8n?H$N$?$a!W$O!V2C32$N$?$a!W$HF1$80UL#$K$H$i$l$^$9!#L5L\E*$K;}$AJb$/$N$b@5Ev$JM}M3$H$O$J$j$^$;$s!#Kt@5Ev$JM}M3$,$"$k>l9g$G$bD`$d%-%c%s%W$K;HMQ$9$k$N$J$i8=>l$K$D$$$F$+$i?H$KIU$1$k$Y$-$G!"$=$l$^$G$O87=E$K:-Jq$7$F0\F0$7$F$/$@$5$$!#(B
$B!U(B
$BJQ$o$k5_L?K!!"?M9)8F5[$h$j2?EY$b?4B!%^%C%5!<%8(B
(asahi.com, 9/7)
$B!U(B
$B@o$&4IM}
(ITmedia, 9/6)$B!#!V%-%?!
$B!U(B
$BJ]
(Open Tech Press, 9/6)
$B!U(B
GNU GPLv3 Discussion Draft 1 $BF|K\8lLu(B
(Open Tech Press, 9/5)
$B!U(B
$B;3C+9d;K$N%^%s%9%j!
(Internet Watch, 9/7)
$B!U(B
$BEz$($F$M$C$H(B
$B$N(B top $B%Z!<%8$,99?7$5$l$F$$$^$7$?!#(B
2006 $BG/(B 9 $B7n(B 4 $BF|(B $B99?7(B
$BK\HV%5!<%P!<$K6a$$4D6-$G$N%F%9%H$r40N;$7!":#2s$N%5!<%S%9$NDd;_$N860x$K$J$C$?%7%9%F%`9bIi2Y$G$N>c32$,2~A1$5$l$?;v$r3NG'$7$^$7$?!#(B
$B$?$@!"%5!<%S%9:F3+$N;~4|$O8=;~E@$G$^$@7hDj$7$F$*$j$^$;$s!#(B
$B8=:_!"%7%9%F%`A4BN$NIJ
$B%5!<%S%9:F3+$N;~4|$K4X$7$F$O!"$3$l$i$N%W%i%s$,8G$^$j
$B%f!<%6!<$N3'MM$,0B?4$7$FMxMQ$G$-$k$h$&$K!"BN@)$HBP:v$rK|A4$K$7$?8e!"%5!<%S%9$r:F3+$9$kM=Dj$G$9!#(B
$B!!$J$s$@$+$9$C$-$j$7$J$$=q$+$lJ}$G$9$M!#(B
$B4XO"(B (?): $BM=B,(B: Microsoft$B$N!VEz$($F$M$C$H!W$O!V(BOKWave$B!W$K(B?
(slashdot.jp, 9/6)
$B!U(B
$B%U%k%5%$%:$N%&%$%k%9%Q%?!<%s%U%!%$%k$,G[?.$5$l$kLdBj$K4X$9$kD4::7k2L$H:#8e$NBP:v$K$D$$$F(B
($B%H%l%s%I%^%$%/%m(B, 9/6)
$B!U(B
Protecting against EFS based attacks.
(McAfee Avert Labs Blog, 9/5)
$B!U(B
The Sleuth Kit (TSK) for Windows released
(SANS ISC, 9/5)
$B!U(B
IIJ$B%;%-%e%j%F%#%;%_%J!<(B
$B!A%M%C%H%o!<%/$KBP$9$k6<0R$N8=>u$H(BIIJ$B%;%-%e%j%F%#%5!<%S%9$N>R2p!A(B
(IIJ)$B!#(Bana-log $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(BDDoS $BOC$,$"$k$J$"!#(B
$B!U(B
$B>pJs%;%-%e%j%F%#%;%_%J!<(B2006$B3+:E$N$40FFb(B
(IPA ISEC)$B!#(B
$B9V1i;qNA$,8x3+$5$l$F$$$k$N$G!"9T$1$J$$?M$K$b;29M$K$J$k$+$H!#(B
$B!U(B
$B9qO"%l%P%N%s;CDjItBb!"B?9q@R$H$$$&$h$j2$=#ItBbCf?4$+(B
(JANJAN, 9/6)
$B!U(B
$B!X@oN,Gz7b$N;WA[!Y$rFI$s$G(B
(JANJAN, 9/6)$B!"(B
$B?7D{HG!!@oN,Gz7b$N;WA[(B ($BHG85%I%C%H%3%`(B)
$B!U(B
$B<"2l8)$G$N4D6-J]A4$KG[N8$7$?$*JF:n$j(B
(JANJAN, 9/6)
$B!U(B
$B??Yu$J2J3X
(JANJAN, 9/6)
$B!U(B
$B@oAh%W%m%Q%,%s%@(B--$BF02h6&M-%5%$%H$,Ii$o$5$l$k?7$7$$Lr3d(B
(CNET, 9/5)$B!#(Bhttp://www.ogrish.com/
$B$H$$$&%5%$%H$,$"$k$N$G$9$+!#(B
$B!U(B
$B!V$3$l$OJXMx!W$J(BVista$B$N!V%Q%o%]%b!<%I!W(B
(ITmedia, 9/5)
$B!U(B
$B%S%8%M%9%Q!<%=%s$N8D?M>pJsJ]8n$K(B -- $B%O%5%_7?%7%e%l%C%@!<(B
(ITmedia, 9/5)$B!#(B
$B%7%e%l%C%@!<$O$5$_(B
($B%5%s%9%?!
$B!U(B
$B%M%C%HH/?.@-$J$ILdBj;k!&AmL3>J8!F$2q(B
($BF|7P(B, 9/6)$B!#(B
$B%f%S%-%?%9%M%C%H
($BAmL3>J(B) $B$N%Z!<%8$K$OJs9p=q$O$^$@$J$$$h$&$G$9!#(B
$B!D!D(B9/8 $B$K=P$?$h$&$G$9!#(B
$B!U(B
HGST$B
($BF|7P(B Tech On, 9/5)$B!#(B
Endurastar J4K50/N4K50
($BF|N)%0%m!<%P%k%9%H%l!<%8%F%/%N%m%8!<%:(B)$B!#(B
$B!!(Bbind 9.3.x / 9.4.x $B$K(B 2 $B$D$N7g4Y!#(B
$B!!(Bbind 9.3.2-P1 / 9.3.3rc2, 9.4.0b2 $B$G=$@5$5$l$F$$$k!#$^$?!"(B
bind 9.2.x $B$O$3$N7g4Y$N0-1F6A$O
$B!!(Bbind 9.3.2 $B$H(B bind 9.3.2-P1 $B$N(B diff $B$rbind-9.3.2-9.3.2-P1.diff
- $B%&%A$N%P%C%F%j$O$@$$$8$g$&$V$G$9$^$D$j(B
-
- eEye Advisories: IBM eGatherer ActiveX $B%3!<%I
-
$B!!$9$:$-$5$s$+$i(B ($B>pJs$"$j$,$H$&$4$6$$$^$9(B)
$B85!9%W%j%m!<%I$5$l$F$$$?$b$N(B ( C:\WINDOWS\system32\IbmEgath.dll ) $B$N%W%m%Q%F%#I=<($K$"$k8@8l$,!V1Q8l(B ($BJF9q(B)$B!W$@$C$?$N$G!"$^$s$^>e=q$-$7$F$7$^$$$^$7$?!#(B
2$B=54V$?$A$^$9$,:#$N$H$3$mLdBj$O=P$F$J$$$G$9!#(B
$B!U(B
$B!V7Y;!$K6(NOE*$9$.$?$N$,LdBj$@$C$?!W(BWinny$B:[H=$N7k?3$G6b;R;a$,%3%a%s%H(B
(Internet Watch, 9/5)
$B!U(B
$B56%;%-%e%j%F%#BP:v%=%U%H!V(BSystemDoctor 2006$B!W$KF|K\8lHG$,EP>l(B
(Internet Watch, 9/5)$B!#(B
$B$I$&$7$F$b;n$7$?$$$H$$$&?l68$JJ}$O!"(B
http:// jp.systemdoctor.com/download/2006/ $B$"$?$j$r;2>H!#(B
$B!U(B
$BJ?@.(B18$BG/EY>pJs%b%i%k7pJs%b%i%k$H
($B%O%$%Q!<%M%C%H%o!<%/86$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!!G/Fb$K>>;3$HL>8E20$G$b3+:EM=Dj$@$=$&$G$9!#(B
$B!U(B
$B%O%C%+!<%:!!$=$N?/F~$No<1$Ne$r9T$/(B
($B%$%s%W%l%9(B) $B$H$$$&K\$,=P$k$N$G$9$M!#(B
The Art of Intrusion: The Real Stories Behind the Exploits of Hackers, Intruders & Deceivers
(Wiley) $B$NK.Lu$N$h$&$G$9!#(B
$B!U(B
Symbian OS $B%W%i%C%H%U%)!<%`%;%-%e%j%F%#(B
$B$H$$$&K\$,=P$k$N$G$9$M!#(B
$B!U(B
$B!Z(BTechEd$B![%+%j%9%^9V;U$,65$($k!V$3$s$J%"%W%j%1!<%7%g%s$O(BVista$B$GF0$+$J$$!W(B
($BF|7P(B IT Pro, 9/1)$B!#2#E/$5$s$+$/8l$j$-!#(B
$B!U(B
BSA$B!"9qN)Bg3X$N0cK!%3%T!<%=%U%HE@8!$r;Y1g(B
(ITmedia, 9/4)$B!#9qN)Bg3X8BDj$_$?$$!#(B
$B!!(B $BBg:eCO:[!"@lLg3X9;$K>Z5rJ]A4$r
(BSA, 8/28) $B$J$s$FOC$b$"$C$?$s$G$9$M!#(B
$B!U(B
$BCf9q!'E70BLg;v7oIA$$$?1G2h4FFD$i=hJ,!!#5G/4V@=:n6X;_$K(B
($BKhF|(B, 9/5)$B!#Cf9q$G$9$+$i!#(B
$B!U(B
$B9qO"!"%$%9%i%(%kJ<$N2rJ|Cg2p$X(B
(TBS, 9/5)$B!#4X78$N$J$$?M$rBgNL$K;&32$7$?$"$2$/!"Ev=i$NL\E*$OA4$/C#@.$7$F$$$J$+$C$?$N$G$9$M!#(B
$B%R%:%\%i$N>!Mx(B
(tanakanews.com, 8/22) $B$H$$$&8+J}$b$"$k$h$&$G!#(B
$B!!(B$B%$%9%i%(%k4_$NItJ,E1B`0FC*>e$2I=L@(B
(asahi.com, 9/5) $B$@$=$&$J$N$G!"$^$@$^$@$o$+$j$^$;$s!#(B
$B!U(B
$B%&%$%k%98!:w%(%s%8%s(B VSAPI 8.310 (Windows 2003/XP/2000/NT$BHG(B) $B8x3+0l;~Cf;_$N$*CN$i$;(B
($B%H%l%s%I%^%$%/%m(B, 9/5)
$B%&%$%k%98!:w%(%s%8%s(B VSAPI 8.310 (Windows 2003/XP/2000/NT$BHG(B) $B$r;HMQ$7$F$$$kFCDj$N4D6-$K$*$$$F!"%M%C%H%o!<%/%I%i%$%V>e$N%G!<%?$KBP$7$F$N>e=q$-J]B8$,<:GT$9$k8=>]$,3NG'$5$l$^$7$?!#(B
* $B$J$*!"K\8=>]$N>\:Y$K$D$$$F$O!"8=:_D4::Cf$G$9!#(B
$B!!$&$o!D!D!#(B
$BJs9p$5$l$F$$$k8=>]$OFCDj$N4D6-$N$_$GH/@8$9$k8BDjE*$J8=>]$G$9!#$3$N$?$a!"8=>]$,H/@8$7$F$$$J$$4D6-$K$*$-$^$7$F$O!"7QB3$7$F%&%$%k%98!:w%(%s%8%s(B VSAPI 8.310 $B$r$4MxMQ$$$?$@$$$FLdBj$4$6$$$^$;$s!#(B
$B!!$H8@$o$l$F$b$M$'!D!D!#(B
$B!U(B
$B!VHcH=$,$"$l$P5-;v$r=q$$$F$[$7$$!W%*!<%^%$%K%e!<%9D;1[JT=8D9(B
(ITmedia, 9/4)$B!#(B$BEv3:%$%s%?%S%e!<(B$B$O(B 2 $B$+7nA0$N$b$N$J$N$G!"$=$N4V$KD;1[;a$N%j%F%i%7!<$b$"$kDxEY8~>e$7$?!"$HM}2r$9$l$P$h$m$7$$$N$G$O!#(B
$B!U(B
Winny$B3+H/
(Internet Watch, 9/4)$B!#(BWindows Update $B$NF|$@$J$"!#(B
$B!!0lJ}!"(B$B!V(BWinny$B%N!<%I?t$O8:>/798~!W$H%M%C%H%(!<%8%'%s%H(B (ITmedia, 9/4) $B$@$=$&$G!#(B
$B!V(BYouTube$B$KN.$l$?!)!W(B---Winny$B2TF/%^%7%s$N?t$,8:>/798~(B
($BF|7P(B IT Pro, 9/4)$B!#(B
$B!U(B
$BAmL3>J!"(BNHK$BHVAH%"!<%+%$%V$NG[?.$O(B2008$BG/$+$i!# (Internet Watch, 9/4)$B!#(B
$B!V(B$BL1B2>t2=!A%f!<%4!&>pJs@o$NFbKk!A(B$B!W(B
$B$d(B
$B!V(B$B0BA4$N;`3Q!A8!>Z!&2sE>%I%";v8N!A(B$B!W(B
$B$b!"%$%s%?!<%M%C%H7PM3$G8+$l$k$h$&$K$J$k$N$+$J!#(B
$B!!(B$B%I%"%W%m%8%'%/%H$K3X$V(B
$B!]8!>Z!!2sE>%I%";v8N!](B ($BF|4)9)6H?7J9(B) $B$H$$$&K\$,=P$?$N$G$9$M!#(B
$B!U(B
$B!T(BESPIO!$B!U(B $B!VF|K\$N>pJs5!4X!W9V1i2q$N$*CN$i$;(B$B!#(B
2006.09.11$B!"El5~ET9A6h!#(B
$B%+%l!<20$5$s(B?
$B!!(B$BHH:a$NB?3QE*8!F$(B$B!"$J$+$J$+$$$$CMCJ$G$9$M!D!D(B
$B!U(B
Security Solution 2006$B!#(B
2006.10.18$B!A(B20$B!"El5~%S%C%0%5%$%H!#(B
$BI~It$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
Network Security Forum 2006$B!#(B
2006.11.13$B!A(B14$B!"El5~ET@iBeED6h!#(B
$BI~It$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!!(BMailman 2.x $B$K7g4Y!#%K%;$N%m%0$rA^F~$G$-$k!"%X%C%@$N=hM}$G(B DoS $B$,H/@8!"%a!<%k>e$N(B JavaScript $B%3!<%I$,CVE-2006-2941$B!#(BCVSS Severity: 7.0 (High)
$B!!(BMailman 2.1.9rc1 $B$G=$@5$5$l$F$$$k!#(B
- $B%&%$%k%9%P%9%?!<(B2006$B$N%U%#%C%7%s%0:>5=BP:v%D!<%k%P!<$O%9%Q%$%&%'%"$+!)(B
$B!!(B$B%&%$%k%9%P%9%?!<(B2007 $B%U%!!<%9%H!&%$%s%W%l%C%7%g%s(B
(MYCOM $B%8%c!<%J%k(B, 2006.09.02)$B!#%&%$%k%9%P%9%?!<(B2007 $B$G$O!"$-$A$s$H@bL@$5$l$k$h$&$K$J$C$F$$$k$h$&$G$9!#(B
- $B$$$m$$$m(B (2006.08.16)
$B!!(BPHP 5.1.5 $B$M$?(B CVE:
CVE-2006-4481
CVE-2006-4482
CVE-2006-4483
CVE-2006-4484
CVE-2006-4485
- $B%5%$%\%&%:@=IJ$N@H
$B!!%5%$%\%&%:$N(B Advisory $B$,2~D{$5$l$F$$$^$9!#8x<0$K(B 3 $B$D$K$J$j$^$7$?!#(B
$B!!$G$b!"(B$B%5%$%\%&%:(B Office 6.6(1.3) $B$K$*$1$k2~=$FbMF(B
($B%5%$%\%&%:(B, 2006.08.25) $B$G$N07$$$O!"$"$$$+$o$:!VIT6q9g!W$N$^$^$G$9!#(B
- $B!V(BYour computer is infected!$B!W$N7Y9p$r=P$9%$%s%A%-%"%W%j$N:o=|K!(B
-
$B!!(BsmitRem $B$K$O!"$BIT?3$J%"%s%A%9%Q%$%&%'%"%=%U%H$H!"(BZlob$B$H(BCodec$B$N4X78(B (Semplice, 4/8) $B$NKvHx$N(B Appendix $B$r;2>H!#(B
Luca $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9(B ($B>R2p$,CY$/$F$9$$$^$;$s(B)$B!#(B
$B!!(B$B%*%j%8%J%k%5%$%H(B$B$r8+$F$_$k$H!"(BsmitRem $B$O%P!<%8%g%s(B 3.1 $B$K$J$C$F$^$9$M!#(B
$B!!(BIE 6 / 7 $B$K$*$$$F!"%9%?%$%k%7!<%HFb$G(B JavaScript $B$rF0:n$5$;$k$?$a$K5-=R$9$k!"(Bexpression $B$H$$$&J8;zNs$K$O$5$^$6$^$J=q$-J}$,$"$k$H$$$&OC!#(B
web $B%"%W%j20$5$s$O$?$$$X$s$G$9!#(B
$B!!(B[openmya:035822] $B0J2<$N%9%l%C%I$G!"%U%#%k%?%j%s%0J}K!$K$D$$$F9M;!$5$l$F$$$^$9!#(B
2006.12.05 $BDI5-(B:
$B!!4XO"(B: SquirrelMail: Cross site scripting in compose, draft & HTML mail viewing
$B!U(B
$B1?M"B?L\E*1R@1?7#19f$K$h$k9R6u1R@1DL?.%5!<%S%9$N(B
$B!!>c32I|5l:n6H$N?JD=>u67$K$D$$$F(B ($B9qEZ8rDL>J(B, 9/1)
$B!U(B
$BB.EYM^@)AuCV$NAuCe$K4X$9$k7P2aA ($B9qEZ8rDL>J(B, 9/1)
$B!U(B
$B9bB.A%>WFM;v8N$NHH?M!"N.LZ$G$7$?!D#1#04I$,CGDj(B
($BFIGd(B, 9/1)$B!#4XO"(B:
$B!U(B
$BGe=~L?Na$NEE5$%9%H!<%V!"<+
(asahi.com, 9/1)$B!"(B
$BEE5$%9%H!<%V$K4X$9$k$*OM$S$H$*CN$i$;(B
($B%$%H!<%h!<%+F2(B, 9/1)
$B!U(B
$B%Q%=%3%sITK!Ej4~!"%G!<%?I|3h$GH=L@!!?`;R;T5D=qN`Aw8!(B
(asahi.com, 9/1)$B!#C+8}$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B%U%!%$%k$O%;%-%e%"$K>C$7$^$7$g$&!#C$7!#(B
$B!!4XO"(B: $B?`;R;T5D2q%"%i%+%k%H(B (2) $B4X8}@5CK5D0w$O5D0w<-?&$7$^$;$s(B
($B$*$@$K(B $B$"$-$i(B $B%V%m%0(B, 8/31)
$B!U(B
TechED Community Party $B$K9T$C$F$-$?(B
($BF|K\$N%;%-%e%j%F%#%A!<%`$N(B Blog, 9/1)$B!#$$$$$J$!(B TechED$B!#(B
$B!U(B
$B!V(BMicrosoft(R) Internet Security & Acceleration Server 2006$B!WF|K\8lHG!"(B9$B7n(B1$BF|!J6b!K$h$jHNGd3+;O(B
(Microsoft) $B$@$=$&$G$9!#(B
$B!U(B
The NTLM Authentication Protocol and Security Support Provider
(davenport.sourceforge.net)$B!#(B
(info from $B$@$a$@$aF|5-(B)
$B!U(B
$B%F%]%I%s#2!"BG$A>e$2D>8e$K!VJ,2r!W!!F|JF$,J,@O(B
(asahi.com, 9/1)
$B!U(B
$B:4@n5^JX%H%i%C%/EpFq!"%J%$%-8\5R>pJs#4#4K|?MJ,$4$H(B
($BFIGd(B, 9/1)$B!#(Bnodoame $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
$B%"%9%Y%9%HHo32!"#2#3G/A0$KGD0.!!Bg:e!&@tFn(B
(asahi.com, 9/1)
$B!U(B
$BKI:R$NF|(B
$B!!!V2<7?!W$N%O%6!<%I%^%C%W$,$[$7$$$J$"!#(B
$B!U(B
IT$B%;%-%e%j%F%#$N%"%i%$=P$7(B
$BBh(B7$B2s(B
$BI8E*7?967b$K4X$9$k0l9M;!(B(4) - $B@H
(MYCOM $B%8%c!<%J%k(B, 8/30)
(typo fixed: $B>.Ln$5$s46
$B!U(B
$B%G%#%6%9%?%j%+%P%j$G6/$$4k6H$r:n$k!'(B
$B!V
(@IT, 8/30)
$B!!(BLet's note CF-W4G $B$K$*$$$F!VMn2<$J$I$G6/$$>W7b$,2C$o$C$?>l9g!W$K!V%P%C%F%j!<%Q%C%/$N%i%C%AItJ,$,GKB;$9$k2DG=@-!W$,$"$j!"$3$N$?$a$K!V%P%C%F%j!<%Q%C%/$KH/G.!&JQ7A$,@8$8$k>l9g!W$,$"$k$=$&$G$9!#(BLet's note CF-W4G $B%f!<%6$O3NG'$7$^$7$g$&!#(B
$B!!$J$*!"$3$N7o$O(B SONY $B$H$O4X78$J$$$=$&$G$9!#(B
![[$B%;%-%e%j%F%#%[!<%k(B memo]](/%7Ekjm/security/memo/sechole-memo.gif)
$B;d$K$D$$$F(B
