$B%;%-%e%j%F%#%[!<%k(B memo - 2006.11
Last modified: Wed Jul 25 15:53:04 2007
+0900 (JST)
$B!!$3$N%Z!<%8$N>pJs$rMxMQ$5$l$kA0$K!"(B$BCm0U=q$-(B$B$r$*FI$_$/$@$5$$!#(B
$B!U(B
$B!V0-A[%^%7%s$r2sHr$9$k!W!$>&MQ%D!<%k$rMxMQ$9$k%1!<%9$b(B
($BF|7P(B IT Pro, 11/20)$B!#(B
$B$3$l$r5UA[%^%7%s>e$G@83h$9$l$P!"$"$k
$B!!(BThemida
$B$G$9$+!#(B
$B!U(B
$B!V%;%-%e%"%7%9%F%`@_7W5;=Q
($B9)3X1!Bg3X(B)$B!#;n83$"$j!#pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
$B%&%$%k%9%P%9%?!<(B2007 - 15.x: Windows Vista$B$X$NBP1~$K$D$$$F(B
($B%H%l%s%I%^%$%/%m(B)$B!#8=:_$O$^$@BP1~$7$F$$$J$$$3$H$NU66J$JI=8=!#(B
$B!U(B
$B%;%-%e%a%b(BDown
($B$^$C$A$c$@$$$U$/$NF|5-(B, 11/30)$B!#$4$a$s!#(B
$B!U(B
Window Snyder$B;a$,8l$k!V(BMozilla$B$N%;%-%e%j%F%#!W(B
($BF|7P(B IT Pro, 11/29)
$B!U(B
$B%7%s%]%8%&%`!VF|JF%*%s%i%$%s:>5=$N8=>u$HBP:v!W(B- $BJF9q%9%Q%$%&%'%"BP:v$H7Y;!D#$N
$BOC(B:
$B!U(B
JASRAC $B%7%s%]%8%&%`(B 2006 $BOC(B:
$B!U(B
$BEl5~9q:]%;%-%e%j%F%#!&%+%s%U%!%l%s%9(B 2006 $BOC(B:
$B!U(B
SQL$B%$%s%8%'%/%7%g%s$NI|5l%3%9%H!"(B1$B2/1_D6$($k;vNc$b!A(BIPA$B$,Js9p=q!!(BWinny$BO31L$NBP1~%3%9%H$O(B1$B
(Internet Watch, 11/29)$B!#(B
$B!V4k6H$K$*$1$k>pJs%;%-%e%j%F%#;v>]Ho323[D4::!W5Z$S(B
$B!V9qFb$K$*$1$k%3%s%T%e!<%?%&%$%k%9Ho32>u67D4::!W(B[2005$BG/(B]
(IPA, 11/29)$B!#(Bpowered by $B;0I)Am8&$G$9$M!#(B
$B!U(B
$B<+E>$d4m81
($B;:7P(B, 11/30)
$B!U(B
$B!V%+!<%M%k%P%07n4V!W$N%O%C%+!<$,8l$k!"!V@H
(ITmedia, 11/29)
$B!U(B
The Week of Oracle Database Bugs
(argeniss)$B!#1d4|$@$=$&$G$9!#(B
$B!U(B
$B:#EY$O%,%$%@%k85Bh#1I{
$B!U(B
$B%j%H%S%M%s%3;aOC(B
$B!U(B
$B!Z(BSymposium/ITxpo$B![!V(BCIO$B$OM-;v$N;~$3$==EMW!W!"85$_$:$[6d9T>oL3$NM9@/8x
($BF|7P(B IT Pro, 11/29)
CIO$B$,(BIT$B%Y%s%@!<$K4|BT$9$k$3$H$H$7$F$O!"!V<+
$B!!$=$l$,
$B!U(B
$B!V(BP2P$B$N8w$H1F$rDI$&!W!]!]AmL3>J$G:n6HIt2q$,%9%?!<%H(B
($BF|7P(B IT Pro, 11/29)$B!#!V8w$H1F$rDI$&!W$G$9$+!#$[$s$H$O1F$rDI5Z$7$?$$$N$@$1$I!"$=$l$@$18@$&$HH?H/$,$"$k$H$-$K;H$&8@MU$@$h$M!#(B
$B!U(B
$B<+1RBbJ8=q!"%M%C%HN.=P!!KI1RD#3NG'$7$?$,8xI=$;$:(B
(asahi.com, 11/30)$B!#(B
$BL1J>:3J4XO"K!0F$K;?@.$9$k>r7o$N0l$D$H$7$F!V5!L)>pJs$NN.=PKI;_$J$I<+1RBb0w$N5,N'J];}!W$r7G$2$F$$$k!#F1K!0F$O#3#0F|$N=01!0BA4J]>c0Q0w2q$G:N7h$5$l$k8+DL$7!#F1D#Fb$G$O!VK!0F$,@.N)$9$k$+HyL/$J;~4|$G!"?7$?$JIT>M;v$d?&0w$NL5CGEO9RLdBj$N=hJ,$r$I$&$9$k$+$J$I!"D#$N%$%a!<%8$r0-$/$9$kOC$Kd/8}!J$+$s$3$&!KNa$,$7$+$l$F$$$k!W$H;XE&$9$k?&0w$b$$$k!#(B
$B!!(B$BKI1RD#%[!<%`%Z!<%8(B$B$K$O$b$A$m$s!"2?$b$"$j$^$;$s!#
$B!!4XO"(B:
$BKI1R>JK!0F!'=01!0BJ]0Q$G2D7h!"K\2q5D$G6[5^>eDx$X(B
($BKhF|(B, 11/30)$B!#%A%s%+%9$J8=>u$G;?@.$G$9$+(B > $BL1
$B!U(B
$B!V$R$h;R!WN)BN>&I8G'$a$:(B
$B!!N`;w2[;R%a!<%+!<>!AJ(B
($BEl5~?7J9(B, 11/29)$B!#$&!<$`!#$7$+$7!"$R$h$3$H8@$&$h$j$O!"(B
$BC]K\@t$N%^%s%,$K=P$F$/$k$d$D$K8+$($k$N$@$,!#(B
$B!U(B
IE7$B$K%*%s%i%$%s!&%9%H%l!<%8$d(BWeb$B%a!<%k$GF|K\8l%U%!%$%kL>$,2=$1$kIT6q9g(B
($BF|7P(B IT Pro, 11/29)
$BJ8;z2=$1$9$k%k!<%k$O!$J8;z%3!<%I$,!V(BXX5C$B!W!V(BXX7C$B!W$N$h$&$K!V(B5C$B!W!V(B7C$B!W$r4^$`(B2$B%P%$%HJ8;z$,$"$k$H!$!V(BXX5F$B!W$KJQ49$5$l$k$H$$$&$b$N!#M=;;$N!VM=!W$NJ8;z%3!<%I$O%7%U%H(BJIS$B$G!V(B975C$B!W$@$,!$!V(B975F$B!W$KJQ49$5$l!VM@!W$K$J$k!#!VM]!W$NJ8;z%3!<%I$O!V(B977C$B!W$@$,!$$d$O$j!V(B975F$B!W$KJQ49$5$l!VM@!W$K$J$k!#!V(BXX5C$B!W$NJ8;zNc$H$7$F$O!V1=3=5=7=9=;===?=A=C=E=G=I=K=M=O=!W$,$"$k!#!V(BXX7C$B!W$NJ8;zNc$H$7$F$O!V1]3]5]7]9];]=]?]A]C]E]G]I]K]M]!W$,$"$k!#(B
$B!!$D$^$j!"(B\ $B$H(B | $B$r(B _ $B$KJQ49$9$k%k!<%k$,(B SJIS $B$N(B 2 $B%P%$%HL\$K$bE,MQ$5$l$F$7$^$C$F$$$k!"$H$$$&$3$H$+!#(B
$B!U(B
Mark Shuttleworth$B;a$,(BopenSUSE$B3+H/
(Open Tech Press, 11/29)$B!#(BMark Shuttleworth $B$5$s$C$F!"GzCF$rEj$29~$`$N$,K\
$B!!(BWindows $BHG$N(B Adobe Reader / Acrobat / Acrobat Pro 7.0.0$B!A(B7.0.8 $B$K7g4Y!#(B
AcroPDF.dll ActiveX $B%3%s%H%m!<%k$K%a%b%jGK2u$,H/@8$9$k7g4Y$,$"$j!"96N,(B web $B%Z!<%8$r1\Mw$5$;$k$HG$0U$N%3!<%I$rCVE-2006-6027
$B!!=$@5HG$O$^$@$J$$!#0J2<$N$$$:$l$+$K$h$C$F2sHr$G$-$k!#(B
2006.12.01 $BDI5-(B:
$B!!4XO"(B: $B%"%I%S(B $B%7%9%F%`%:
($B7Y;!D#(B, 2006.11.30)
2006.12.05 $BDI5-(B:
$B!!(BAcroPDF.dll ActiveX $B%3%s%H%m!<%k$K$O!"$5$i$KJL$NLdBj$,$"$k$i$7$$(B:
CVE-2006-6236
2006.12.07 $BDI5-(B:
$B!!(BUpdate available for potential vulnerabilities in Adobe Reader and Adobe Acrobat 7
(Adobe) $BEP>l!#(BAdobe Reader $B$K$D$$$F$O(B Adobe Reader 8 $B$G=$@5$5$l$F$$$kLOMM!#(B
Acrobat 7.x $B$K$D$$$F$O!"(BAcrobat 8 $B$X$N99?7$G2r7h$5$l$k$H$O=q$+$l$F$$$J$$$J$"!#(B
$B!U(B
$B%&%$%k%9BP:v%=%U%H>h$j49$(0FFb(B
($BF|7P(B BP)$B!#"-$NOC$N5-;vA4J8!#(B
$B2?$N$?$a$K%P%C%/%J%s%P!orz
$B!U(B
$B$40U8+$r$$$?$@$$$?$N$G!"B3!&%&%$%k%94k2h$G$9(B
($BF#ED7{<#!V;(;o$E$/$j$NIqBfN"!W(B, 11/28)
$B!V8!=PN((B100$B!s!W$H$$$&CM$O!"8B$i$l$?HO0O$NCf$G
$B!!
$B!!$"$H!"$3$l$G$9$,!"(B
$B!V(B(2)$BL$CN$N%&%$%k%9$KBP$9$kKI8f:v!W$KBP$7$F$O!"$=$b$=$b8z2LE*$J%F%9%HJ}K!$rF3$-=P$9$3$H$,$G$-$^$;$s$G$7$?!#JI$H$7$FN)$A$O$@$+$C$?$N$O!"L$CN$N%&%$%k%9$r$I$&$d$C$FF~
$B$3$s$JJ}K!$O$I$&$G$7$g$&!#(B
- $B%Q%?!<%s%U%!%$%k$r:G?7$K$7!"EE8;(B OFF$B!#%M%C%H%o!<%/$r$R$C$3$L$/!#(B
- $BH>G/8e!"$=$N;~E@$N(B wildlist ItW $B$HFH<+%5%s%W%k$G!"%Q%?!<%s%U%!%$%k$r99?7$7$J$$$^$^;n$9!#(B
$B!!;~4V$,%M%C%/$G$9$1$I!#(B
$B!U(B
[AML 10762] 06/12/1 $BF1;V$B!#(B2006.12.01$B!"5~ETI\5~ET;T!"L5NA(B?
$B!U(B
[Full-disclosure] New Windows tool - PWDumpX v1.0
(link fixed: $B;07n$5$s46
$B!U(B
$B5$$K$7$F$$$^$9$+!)!!%*!<%W%s%=!<%9$N%=!<%9%3!<%I:.F~(B
($BF|7P(B IT Pro, 11/29)$B!#(BGPL $B1x@wOC!#(BGPL $B$O%d%P$$!"$O>o<1$J$o$1$G$9$,!"(B
$BNc$($P!$$"$k(BSI$B%Y%s%@!<(BA$B
$B!!(BBSD $B%i%$%;%s%9$@$H;W$C$F0B?4$7$F$$$k$H8e$+$i;I$5$l$+$M$J$$$3$H$b$"$kLOMM!#(B
$B!U(B
$BJF%G%8%?%kCx:n8"K!$KNc305,Dj(B--$B8&5fL\E*$N%3%T!
(CNET, 11/29)
$B!!JF9q$K$*$$$F$O8=CO;~4V(B11$B7n(B27$BF|$h$j!"7HBSEEOC$N;v6Hl9g$O!"C
$B!U(B
$B6&KE:aJ}LL%Q!<%H(B 2
$B!U(B
$B6&KE:aJ}LL(B
$B!U(B
$BJ?>BlbIW0l?M$rCK$K$7$?M9@/B$H?5D0w$NI|E^LdBj(B
($BN)2VN4$N!V%a%G%#%"%=%7%*(B-$B%]%j%F%#%/%9!W(B, 11/28)$B!#0BG\
$B!U(B
$B%+!<%M%.!<%a%m%sBg3XF|K\9;!&>pJs%;%-%e%j%F%#%;%_%J!$B!#(B
2006.12.04$B!"J<8K8)?@8M;T!"L5NA!#(B
$B!U(B
$B%o!<%-%s%0%W%"(B II $B!AEXNO$,Js$o$l$k!K(B
(NHK $B%9%Z%7%c%k(B)
$B!U(B
$B%&%$%k%9%P%9%?!<(B $B%3!<%]%l!<%H%(%G%#%7%g%s(B 7.3 Patch 1 $B8x3+$N$*CN$i$;(B
($B%H%l%s%I%^%$%/%m(B)$B!#(B12/6 $B$K8x3+M=Dj!#(B
$B!U(B
$B%&%$%k%9%P%9%?!<(B $B%S%8%M%9%;%-%e%j%F%#(B 3.0 $BMQ(BIA64/x64 Security Patch(Build_1180)$B$N35MW$*$h$SE,MQJ}K!(B
($B%H%l%s%I%^%$%/%m(B)
$B!U(B
New and Improved Honeynet Tools availability
(SANS ISC, 11/28)$B!#(BIt's time to update your Honeynet technologies toolbelt!
$B$@$=$&$G$9!#(B
$B!U(B
$B%+%k%S!<$N:R32BP:v%5%$%H$r2-Fl$K9=C[(B
(hp, 11/29)$B!#%G%#%6%9%?!&%j%+%P%jOC!#(B
$B!U(B
$B%;%-%e%j%F%#$X$N7|G0$,EE;R>&
(ITmedia, 11/28)
$B!U(B
$B2HEE%_%K%l%S%e!<(B
$B%J%7%g%J%k!VEECS$,$I$l$G$b%i%$%H(B BF-104F$B!W(B
($B2HEE(B Watch, 11/29)$B!#JXMx$J$s$@$+ITJX$J$s$@$+$h$/$o$+$i$s@=IJ$@$J!D!D!#(B
$BB?K$Ec@o
$B!U(B
$B%"%$!&%*!W7b@-G=$N30IU$1(B1$B%$%s%A(BHDD
(PC Watch, 11/28)$B!#(B12$B7nCf=\!A2<=\H/Gd$@$=$&$G!#(B
8GB = $BDj2A!o(B15,700 $B$@$=$&$G!#(B
$B$A$J$_$K!"F1$8$/(B IO DATA $B$N(B 8GB USB $B%a%b%j(B
ToteBag TB-BH8G/B
$B$O(B
$B$B!D!D$,!"(B$BIt:`D4C#$NCY1d$K$h$j(B2007$BG/(B1$B7nCf=\$X$H=P2Y3+;O$,CY$l$k8+9~$_$H$J$j!"0l;~$B$@$=$&$@!#(B
$B!U(B
$BCN:b@oN,K\It$N%3%s%F%s%DD4::2q!"Cx:n8"K!$dJ|AwK!$N@0Hw$J$I$r8!F$(B
(Internet Watch, 11/28)
$B!U(B
Winny$B>e$NCx:n8"?/32%U%!%$%k!"Ho323[$O(B100$B2/1_AjEv!A(BACCS$B$H(BJASRAC$B$,;n;;(B
(Internet Watch, 11/28)
$B!U(B
$B%l%36($d(BJASRAC$B$i(B7$BCDBN!"IT@5%"%C%W%m!<%IKI;_%-%c%s%Z!<%s!V2;3Z0cH?!W(B (Internet Watch, 11/28)
$B!U(B
Mac$B$N(BCM$B$r8+$F;W$&(B
($BF|7P(B IT Pro, 11/29)
$B!!(BMac OS X 10.3.9 / 10.4.8 $BMQ%;%-%e%j%F%#(B patch$B!#(B
$B!!(BProFTPD
1.3.0 $B0JA0$KCVE-2006-5815
$B!!(BProFTPD 1.3.0a $B$G=$@5$5$l$F$$$k!#$7$+$7(B ProFTPD 1.3.0a $B$K$OB>$K$b%P%0$,$"$k$i$7$$!#(B
2006.12.01 $BDI5-(B:
$B!!",$N(B mod_tls $BOC$O(B
CVE-2006-6170
$B$H$7$FJ,N`$5$l$?$_$?$$!#$3$l$H$OJL$K!"(BCVE-2006-6171
$B$H$$$&$b$N$b$"$k$=$&$@!#$G$b$h$/$h$/8+$k$H!"(BCVE-2006-6171 $B$O(B DISPUTED $B07$$$G$9$M!#(B
fix / patch:
$B!U(B
Microsoft$B$N(BOffice$B$,4Z9q$GHNGdDd;_$N4m5!(!(!FC5vAJ>YGTAJ$G(B
(Open Tech Press, 11/28)$B!#;EJ}$J$$$N$GGd$j$^$;$s!"$G!"$$$$$s$8$c$J$$$N(B?
$B!U(B
$B!V$\$/$H(BH$B$7$F!W$O(BNG -- $B%M%C%H7G<(HD$N:o=|%,%$%I%i%$%s:vDj(B
(ITmedia, 11/27)$B!"(B
$B!X%$%s%?!<%M%C%H>e$N0cK!$J>pJs$X$NBP1~$K4X$9$k%,%$%I%i%$%s!YEy$N8xI=$K$D$$$F(B
($B%F%l%56((B, 11/27)
$B!U(B
$B$5$i$K?<$^$k%3%_%e%K%F%#$N5?G0!"(BNovell$B$,%*!<%W%s%=!<%9$rJx2u$5$;$k!)(B
(Enterprise Watch, 11/27)
$B!U(B
$BFbItE}@)
($B%H!<%^%D(B, 11/22)
$B!U(B
$B!V$$$8$a$r$J$/$=$&!W%9%m!<%,%s6X;_(B($BB@EDAmM}(B)$B$K$D$$$F(B
($BJ]:dE8?M$N$I$3$I$3F|5-(B, 11/23)
$B!U(B
$B%3%m%s%S%"(B:$B@55A5\EB!J:G9b:[!K@j5r;v7o$N??Aj(B
(JANJAN, 11/25)
$B!U(B
$B7PO)GzH/$,5/$3$k$H$J$<:$$k$N$+(B?
($BF|7P(B IT Pro, 11/27)
$B!U(B
$B%7%^%s%F%C%/@=IJ$N@H
($BF|7P(B IT Pro, 11/28)
$B!U(B
Cain & Abel v4.1 released (tessy$B$NF|5-(B, 11/27)$B!#$5$C$=$/
$B!U(B
DDoS$B967b$rGd$j9~$`%9%Q%`!$!V(B2$B%5%$%HJ,$NNA6b$G(B3$B%5%$%H$r967b$7$^$9!W(B
($BF|7P(B IT Pro, 11/27)$B!#2A3JGK2u?J9TCf!#(B
IM $B$G@kEA$7$F$k$N$+!D!D!#(B
$B!U(B
$B4Z9q!"%\!<%$%s%0
(technobahn, 11/25)$B!#$U$%$s!#(B
737 AEW&C Wedgetail Airborne Early Warning and Control Aircraft, USA
(airforce-technology.com)
$B!U(B
$B!V967b
($BF|7P(B IT Pro, 11/27)
$B!U(B
[$B;qNA(B]$B650i2~3W(BTM$B!"6C$-$N!V$d$i$;6=6H!WBgNLF00w$H7PHq(B
($BJ]:dE8?M$N$I$3$I$3F|5-(B, 11/27)
$B!U(B
$B6&KE:a!"!VL@F|?35DF~$j6/9T!W$NF0$-(B
($BJ]:dE8?M$N$I$3$I$3F|5-(B, 11/27)$B!#$3$N!VL@F|!W$C$F:#F|$8$c$s(B!
$B<+L1E^M};v$O!"L1l9g$K9qL1$OIT0UBG$A$r$/$i$&$3$H$K$J$k!#(B
$B!!4XO"(B: $B6&KE:a!"J?2,=(IW5D0w$N
($BJ]:dE8?M$N$I$3$I$3F|5-(B, 11/26)
$B!U(B
$B$3$s$J$K$"$k!*1Q8l7w$G$ODL$8$J$$!HOB@=1Q8l!I(B
($BF|7P(B IT Pro, 11/27)$B!#G'>Z$M$?$"$j!#(B
authentication $B$O!"(Bauthorization $B$H$N6hJL$,$D$+$J$$Nc$b$"$k$h$J$"!#(B
SSH $BK\$G$N$=$N
$B!U(B
$B%;%-%e%"(BLinux$B$B!#(B
2006.12.05$B!"El5~ETIJ@n6h!"L5NA!#LL$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
2006.11.30 $BDI5-(B:
$B!!4XO"(B: [USN-385-1] tar vulnerability$B!#(BCVE-2006-6097 $BOC!#(Bpatch $B$"$j!#(B
CVE-2006-5456$B!#(BGraphicsMagick < 1.1.7 $B$*$h$S(B ImageMagick 6.0.7 $B$KJ#?t$N(B buffer overflow$B!"$H=q$+$l$F$$$k$,!"(BImageMagick $B$N(B ChangeLog $B$r8+$k8B$j$G$O!"=$@5$5$l$F$$$k$N$O(B
ImageMagick 6.3.0-3 $B0J9_$N$h$&$@!#(B
$BB3$$$F(B ImageMagick 6.3.0-4 $B$G$O(B
buffer overflow in PNG coder
$B$N=$@5$b9T$o$l$F$$$k!#(B
CVE-2006-5793$B!#(Blibpng 1.0.6 $B!A(B 1.2.12 $B$N(B png_set_sPLT $B4X?t$K7g4Y$,$"$j!"(BDoS $B$,H/@8!#(B
libpng 1.2.13 $B$G=$@5$5$l$F$$$k!#(B
$B!!(B(<ul>$B%?%0JD$8$o$9$l=$@5(B - $B9b66$5$s46
$B!U(B
DSP$BHG(BVista$B%"%C%W%0%l!<%I?=$79~$_%5%$%H$G>c32(B
$B!A%^%$%/%m%=%U%H$OBP1~=`HwCf(B
(PC Watch, 11/24)
11$B7n(B24$BF|8=:_!"(BWindows Vista$B$X$NM%BT%"%C%W%0%l!<%I8"$,IUB0$7$?(BWindows XP DSP(OEM)$BHG$N%"%C%W%0%l!<%I?=$79~$_%5%$%H$K>c32$,H/@8$7$F$$$k!#(B
($BCfN,(B)
$B5;=QE*$J%(%i!<$,H/@8$7$F$*$j!"8=:_BP:vCf$G!"(B12$B7n(B4$BF|0J9_$K?=$79~$_$,=PMh$k$h$&BP1~Cf$@$H$$$&!#(B
$B!!$^$k$^$k(B 2 $B=54V$+$+$k$N(B!?
$BEz$($F$M$C$H$8$c$"$k$^$$$7!D!D!#(B
$B!!$=$N(B$BEz$($F$M$C$H(B$B$G$9$,!"(B
11 $B7n(B 25 $BF|$h$j!"5YF|$b$4MxMQ$$$?$@$1$k$h$&%5!<%S%9MxMQF|$r3HBg$$$?$7$^$9!#KhF|(B 9 $B;~!A?
$B$@$=$&$G$9!#:#$@$K(B 24 $B;~4V1D6H$K$O$J$C$F$$$J$$$s$G$9$M!#(B
$B:#D+$b>c32$,H/@8$7$F$$$?(B$B$h$&$G$9$,!"$@$$$8$g$&$V$G$7$g$&$+!#(B
$B!U(B
2008$BG/$O!"CO?L$HBfIw$HDEGH$,0l5$$K=1$C$FMh$=$&$@!#(B
(The Casuarina Tree, 11/24)
$B!U(B
$B1Q9q$NCx:nNY@\8"1dD9H?BP=pL>$K6(NO$7$h$&(B
(The Casuarina Tree)$B!#$I$3$b$+$7$3$bCx:n(Bxx$B8"1dD9OC$G$9$+!#6b$NNO$O0NBg$G$9$J$"!#(B
$B!U(B
$BF|K\$N$3$l$+$i(B: $B%M%C%H (NHK)
$B!U(B
$B$b$&0e(B)
(NHK $B%9%Z%7%c%k(B)$B!#>.@t2~3W$G$9$+$i!#(B
$B!U(B
$B%$%i%/!'4uK>$r<:$o$;$k%Y%/%F%k
(JANJAN, 11/24)
$B!U(B
$B%*!<%^%$%K%e!<%9OC(B
$B!!(BFWD $B$N:G8e$N$3$m$r;W$$=P$7$?!#(B
$B!U(B
$B!V%/%m!<%s7HBS$r3NG'!W$O8mJs(B -- $B%I%3%b$,%3%a%s%H(B
(ITmedia, 11/24)$B!#%I%3%b$,2?$H8@$*$&$,!"%f!<%6$+$i8+$?$i!V%/%m!<%s7HBS!W$@$C$?$o$1$G!#(B
$B!U(B
$B:o=|$7$?%U%!%$%k$r(Blsof$B$GI|85$9$k(B
(Open Tech Press, 11/23)
$B!U(B
pacsec.jp$B!"$$$h$$$hMh=5$G$9(B
($B9T$1$^$;$s(B orz)$B!#(Blayer9 $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
100$B%I%k%N!<%H(BPC$B!!:G=i$N(B1000$BBf$r@=B$40N;!"Mh2F$KNL;:$X(B
($BKhF|(B, 11/22)
$B!U(B
MBSA 2.0.1 $B%j%j!<%9(B
(Microsoft)$B!#$=$&$$$($P!"$3$3$K=q$$$F$^$;$s$G$7$?$M!#(BSUZUKI $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
MBSA 2.0.1 $B$r%@%&%s%m!<%I$7$J$$>l9g$O$I$&$J$j$^$9$+(B?
MBSA 2.0 $B$r%*%s%i%$%s(B $B%b!<%I$N$_$Gl9g$O!"(BMBSA 2.0.1 $B$K99?7$9$kI,MW$O$"$j$^$;$s!#(B
$B%*%U%i%$%s(B $B%b!<%I$G(B MBSA 2.0 $B$r;HMQ$7$F$$$k>l9g!"(BMBSA 2.0 $B$O(B 2007 $BG/(B 3 $B7n$^$G5!G=$7$^$9!#$7$+$7!"(BWindows Update $B$N%*%U%i%$%s(B $B%9%-%c%s(B $B%U%!%$%k(B (wsusscan.cab) $B$O!"?7$7$$99?7%W%m%0%i%`MQ$N%9%Z!<%9$N$?$a!"8E$$99?7%W%m%0%i%`$,=y!9$K:o=|$5$l$kM=Dj$G$9!#(B
$B!!K:$l$J$$$&$A$K99?7$7$F$*$-$^$7$g$&!#(B
$B!U(B
Poderosa
4.1.0 $B$,=P$F$$$^$9!#(B
$B!U(B
[connect24h:11228] FYI? $B<+Bp$N(BBB$B%k!<%?$G(Bsnmp$B$,30It$K8x3+$5$l$F$$$?(B$B!#(B
$B?M@8$$$m$$$m!"(BBB $B%k!<%?$b$$$m$$$m!#(B
$B!U(B
$B!ZB.Js![F|K\HG(BSOX$BK!!V
($BF|7P(B IT Pro, 11/21)
$B!U(B
$B!Z(BIT Service Forum$BB.Js![!V4F::$N$?$a$NFbItE}@)$G$O$J$$!W!"F|K\Bg3X>&3XIt$NKY9>@5G765
($BF|7P(B IT Pro, 11/21)
$BKY9>65&IJe$G!"KAF,$G5s$2$?!V6HL3$NE,@52=$H8zN(2=!W$N6qBN:v$r9M$($F$$$/I,MW$,$"$k!#(B
$B!U(B
$B!Z(BIT Service Forum$BB.Js![!V%7%9%F%`$N?.Mj@-8~>e$K$O2D;k2=$,=EMW!W!$7P;:>J$,?7%,%$%I%i%$%s$r2r@b(B
($BF|7P(B IT Pro, 11/21)
$B!U(B
$B!Z%$%s%?!<%J%7%g%J%k(BGPLv3$B%+%s%U%!%l%s%9![!V2f!9$O%*!<%W%s%=!<%9$H$O0c$&!W!$(BFSF$BAO@_
($BF|7P(B IT Pro, 11/22)
$B$J$*!$(BLinux$B$N@8$_$N?F$G$"$k(BLinus Torvalds$B;a$O(BGPLv3$B$KBP$7$FHcH=E*$G$"$k$3$H$GCN$i$l$F$$$k!J(B$B;29M%j%s%/(B1$B!$(B$B;29M%j%s%/(B2$B!$(B$B;29M%j%s%/(B3$B!K!#$=$3$G!VH`$O(BGPLv3$B$r8m2r$7$F$$$k$N$+!W$Hl$@!#2f!9$O0c$&!W$H8l$C$?!#(B
$B!U(B
$B%&%$%k%9BP:v%=%U%H%&%(%"$N@-G=Hf3S5-;v$K$b$N?=$9!*!JA0JT!K(B
($BB"=P$7%;%-%e%j%F%#(B, 11/22)$B!#L$CN%&%$%k%9$X$NBQ@-$r8!>Z$9$kB3JT$r$d$C$F$[$7$$!"$HF|7P%Q%=%3%s$K%j%/%(%9%H$7$^$;$&!#(B
$B$"$H!"(B2006$BG/(B11$B7n(B13$BF|9fFC=8(B2$B!V%&%$%k%9BP:v%=%U%H>h$j49$(0FFb!W$ND{@5!J(B11$B7n(B21$BF|!K(B
($BF|7P(B BP) $B$,=P$F$^$7$?!#(B
$B!U(B
[AML 10672] $B<+1RBbM"Aw5!$r$a$0$kLdBj(B$B!#(B
$B6u<+$N%$%i%/Bp5^JX$NOC$J$I!#(B
$B!V6u<+#C#X(B----$B#C(B-130$B$r$7$N$0#C!]#1M"Aw!&8e7Q5!!W$J$s$F=q$$$F$k$1$I!"(B
$B$=$b$=$b(B C-1 $B$,CfESH>C<$J$@$1$J$N$G$M$(!#(B
$B!U(B
$B=q$-49$(2DG=$J%O!<%I%&%'%"$K$h$k9bB.%&%$%k%9%A%'%C%/%7%9%F%`$N3+H/(B
($B;:Am8&(B, 11/22)$B!#$3$N$"$?$j$,?7$7$$$N$+$J$"!#(B
$B%&%$%k%9$N>pJs$r=8$a$?%G!<%?%Y!<%9$r4F;k$7$F!"?7pJs$,EPO?$5$l$?$i!"$=$l$r85$K(BFPGA$BMQ$N%G%8%?%k2sO)$r@8@.$7$F!"%&%$%k%9%A%'%C%/$r9T$C$F$$$k(BFPGA$B%A%C%W$N5!G=$rJQ99$9$k$^$G$r<+F0$G9T$$$^$9!#(B($BCfN,(B)
$B$3$NZ%7%9%F%`$rMQ$$$F!"5?;w%&%$%k%9$r4^$`%G!<%?$N$_$r=|5n$9$k$3$H$H!"%&%$%k%9>pJs$N%G!<%?%Y!<%9$N99?7$K9g$o$;$F(BFPGA$B$N99?7$^$G$,<+F0$G9T$o$l$k$3$H$r3NG'$7$^$7$?!#(B
$B!!K\%7%9%F%`$G$O;THN$N9bB.$J(BFPGA$B$r;HMQ$7$F$*$j!"$=$N>e$G5!G=$9$k%&%$%k%9%A%'%C%/2sO)$O(B10Gbps$B0J>e$N=hM}@-G=$r;}$C$F$$$k$3$H$r3NG'$7$F$$$^$9!#(B
$B!!!V%7%0%M%A%c$=$N$b$N$r<+F0$G%O!<%I$KAH$_9~$`!W%$%a!<%8(B?
$B!U(B
SOC$B>pJsJ,@O;MH>4|%l%]!<%H(B
(ISSKK)$B!#!V(B2006$BG/Bh(B3$B;MH>4|!W$,?7$?$K8x3+$5$l$F$$$^$9!#pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
Software Design
2006$BG/(B12$B7n9f$GCN$C$?$N$G$9$,!"(BGigaPcap
$B$H$$$&$b$N$,$"$k$N$G$9$M!#(B
160$BK|1_(B($B@GJL(B) $B$G$9$+!D!D!#(B
$B!U(B
RFC4716: The Secure Shell (SSH) Public Key File Format (IETF) (info from $BMU$C$QF|5-(B)$B!#(B
$B!V(BSECSH $B8x3+80%U%!%$%k7A<0!W$,(B RFC $B$K$J$C$?$h$&$G$9!#(B
OpenSSH $B$bBP1~$7$F$/$l$J$$$+$J$"!#(B
$B!U(B
snort
2.6.1.1 $B$,=P$?$=$&$G$9!#(B
$B!U(B
Wikipedia $B$O9-9p$N0Y$N>l=j$G$O$"$j$^$;$s(B
(slashdot.jp, 11/23)
$B!U(B
$B<1JLHV9fF1$8!V%/%m!<%s7HBS!WIT@5;HMQ$r%I%3%b=i3NG'(B
($BFIGd(B, 11/23)$B!#(B
$B!V%/%m!<%s7HBS!W=i3NG'!#(BFOMA$B%+!<%I$N:FMxMQ$K7j(B
(slashdot.jp, 11/23)
$B$N(B
1063319
$B$G>R2p$5$l$F$$$k!"(B
$B%/%m!<%s7HBS$OET;TEA@b$G=*$o$C$?LdBj$J$N$+!)(B
(jip.or.jp) $B$,$=$N$b$N%:%P%j$J$h$&$G$9$M!#(B
$B!!(B$BFIGd5-;v(B$B$h$j(B:
$B!!%I%3%b$O:#G/#27n!"?t2/1_$r$+$1$F9qFb%7%9%F%`$r2~=$$7$?$H$7$F$$$k!#$^$?2rLs$5$l$?#I#C%+!<%I$N<1JLHV9f$O:FMxMQ$;$:!V;H$$
$B!!$3$N=q$-J}$@$H!":#$O$^$@;H$$$^$o$7$F$$$k46$8$@$J$"!#(B
$B!U(B
Windows$B$K$*$1$k%P%C%U%!%*!<%P!<%U%m!<(B(3)
(IT$B%;%-%e%j%F%#$N%"%i%$=P$7(B, 11/22)
$B!U(B
iAdware
(F-Secure blog, 11/23)$B!#(B
Alert on MOKB-20-11-2006: Being exploited in the wild?
(Kernel Fun, 11/22)
$B$HF1$8OC(B?
$B!U(B
Warezov List
(F-Secure blog, 11/22)$B!#(BWarezov $B%&%$%k%9$N%@%&%s%m!<%I$K;H$o$l$F$$$k%I%a%$%s$N%j%9%H!#(B
$B!U(B
If IE Suddenly Says "Se Habla Espanol" ...
(SANS ISC, 11/23)$B!#(B
WSUS $B$+$i(B IE7 $B1Q8lHG$r%$%s%9%H!<%k$7$?$i!"$J$<$+%9%Z%$%s8lHG$,%$%s%9%H!<%k$5$l$?!"$H$$$&OC$,$"$C$?$h$&$G!#(B
$B!U(B
Common Management Agent$B$H(BInternet Explorer7.0$B$K$*$1$k(BPSAPI.DLL$B$N%(%i!<(B
($B%^%+%U%#!<(B)$B!#(BCMA 3.6.0 $B$G=$@5M=Dj$@$=$&$G$9!#(B
$B!U(B
$BFCHV(B: Vista$B$N?7J8;z%;%C%H$,0z$-5/$3$9%H%i%V%k(B
($BF|7P(B IT Pro)
$B!U(B
$BLnE^%?%&%s%_!<%F%#%s%0D4::%A!<%`H/B-$X(B
($BJ]:dE8?M$N$I$3$I$3F|5-(B, 11/22)
$B!!(B$B%?%&%s%_!<%F%#%s%0!"CmL\$NO@E@$O2?$+(B
($BJ]:dE8?M$N$I$3$I$3F|5-(B, 11/22)
$B!U(B
[connect24h:11232] $BBh#82s%;%-%e%j%F%#$b$_$8%;%_%J!!?%i%$%H%K%s%0%H!<%/!!8^O"H/!W(B$B!#(B
2006.12.09$B!"9-Eg8)9-Eg;T!"0lHL(B 2500 $B1_!#$?$N$7$=$&$@$J$"!#(B
$B!!(BFirefox 2 $B$N%Q%9%o!<%I%^%M!<%8%c$K7g4Y!#$"$k%I%a%$%sFb$N$"$k%Z!<%8(B ($B%m%0%$%s%Z!<%8$J$I(B) $B$K$*$$$FJ]B8$7$?%f!<%6L>(B/$B%Q%9%o!<%I$,!"F1$8%I%a%$%sFb$NJL$N%Z!<%8$K$*$$$F$b<+F0E*$KE,MQ$5$l$F$7$^$&!#$=$N7k2L!"(Bstyle="display: none;" $B$J$I$r;H$C$?1#$7%m%0%$%s%U%)!<%`$r;H$C$F%f!<%6L>(B/$B%Q%9%o!<%I$rH4$-$B%G%b%Z!<%8(B$B$r;2>H(B)$B!#(B
Bugzilla Bug 360493
$B$K$h$k$H!"Js9p[SA23046] Firefox Password Manager Information Disclosure
$B$K$h$k$H!"(BFirefox 1.x $B$K$bF1MM$N7g4Y$,$"$k$H$$$&!#(B
$B!!(Bpatch $B$O$^$@$J$$!#(BFirefox 2.0.0.1 $B$^$?$O(B 2.0.0.2 $B$G$N=$@5$rL\;X$7$F:n6HCf!#(B
$B%Q%9%o!<%I%^%M!<%8%c$rL58z$K$9$l$P2sHr$G$-$k!#(B
- [$B%D!<%k(B] $B%a%K%e!<$N(B [$B%*%W%7%g%s(B] $B$rA*Br$7!"!V%*%W%7%g%s!W%&%#%s%I%&$rI=<($5$;$k!#(B
- $B!V%*%W%7%g%s!W%&%#%s%I%&$N(B [$B%;%-%e%j%F%#(B] $B%?%V$rA*Br$7!"!V%5%$%H$N%Q%9%o!<%I$r5-21$9$k!W$N%A%'%C%/$r30$9!#(B
$B!!4XO"(B:
2007.07.25 $BDI5-(B:
$B!!;w$?$h$&$JOC(B: Firefox 2.0.0.5$B$K%Q%9%o!<%I$,Ep$^$l$k@H
$B!!(BMOKB-20-11-2006: Mac OS X Apple UDIF Disk Image Kernel Memory Corruption (1)
$B$NOC!#(B
Mac OS X 10.4.8 $B0JA0$K$*$1$k(B .dmg $B%U%!%$%k$N=hM}$K7g4Y$,$"$j!":Y9)$5$l$?(B
.dmg $B%U%!%$%k$K$h$C$F%a%b%jGK2u$,H/@8!"%+!<%M%k%b!<%I$K$*$$$FG$0U$N%3!<%I$r
$B!!(Bpatch $B$O$^$@$J$$!#(B
$B$H$j$"$($:!"(BSafari $B$N4D6-@_Dj$K$*$$$F!V%@%&%s%m!<%I8e!"!H0BA4$J!I%U%!%$%k$r3+$/!W$rL58z$K$9$l$P!"%@%&%s%m!<%I$7$?(B .dmg $B%U%!%$%k$K$h$C$F$$$-$J$j967b$5$l$k!"$H$$$&>u67$OKI$2$k!#$=$N>e$G!"0BA4@-$r3NG'$G$-$J$$%5%$%H$+$i$O(B .dmg $B%U%!%$%k$r%@%&%s%m!<%I$7$J$$$h$&$K$9$k!#(B.dmg $B%U%!%$%k<+BN$N@5Ev@-$r3NG'$9$kJ}K!$O!D!DEE;R=pL>$H$+$,JLESMQ0U$5$l$F$$$J$$8B$j$O!"$J$$$s$8$c$J$$$+$J$"!#(B
$B!!4XO">pJs(B:
- Microsoft XML $B%3%"%5!<%S%9$N@H
-
$B!!(BMS06-071 Available Through SUS 1.0
(MSRC blog, 2006.11.22)$B!#(BSUS 1.0 $B$G$b$h$&$d$/G[I[$5$l$?$=$&$G$9!#(B
$B!!(BNorton AntiVirus 2007$B!"(BNorton Internet Security 2007$B!"%&%#%k%9%P%9%?!<(B 2007 $B$O!"%9%/%j!<%s%j!<%@!<(B ($BFI$_>e$2%=%U%H(B) $B$H$NJ;MQ$,:$Fq$G$"$k!"$H$$$&OC!#(B
$B6qBNE*$K$O!">/$J$/$H$b(B
PC-Talker XP
$B$H(B
JAWS for Windows 7.1
$B$K$*$$$FMxMQ$,:$Fq$G$"$kLOMM!#(Bitochan $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!!(B2006 $B%P!<%8%g%s$G$O(B Norton $B$b%&%#%k%9%P%9%?!<$bFC$KLdBj$O$J$+$C$?$N$@$=$&$@!#(B
$B%9%/%j!<%s%j!<%@!
$B!!(BBLPC $B$K$D$$$F$O!"(B$B%V%i%$%s%I%Q%=%3%s%5%]!<%H(B(BLPC)$B%[!<%`%Z!<%8(B
$B$r;2>H!#(B
$B!U(B
$B!V%N!<%H%s!&%$%s%?!<%M%C%H%;%-%e%j%F%#(B 2006$B!W$H!V%N!<%H%s!&%"%s%A%&%$%k%9(B 2006$B!W%f!<%6!<8~$1(B 2007 $BHG:G?75!G=$N%"%C%W%0%l!<%I$K$D$$$F(B
($B%7%^%s%F%C%/(B, 11/22)$B!#(B2006 $B"*(B 2007 $B$XL5NA%"%C%W%0%l!<%I$G$-$k$=$&$G!#(B
$B!U(B
$B!V(B12$B7nBh(B1$B=5$K(BOracle$B@=IJ$N%;%-%e%j%F%#!&%[!<%k$rKhF|8xI=$9$k!W!$8&5f
($BF|7P(B IT Pro, 11/22)$B!#!V(B12$B7nBh(B1$B=5!W$K$O(B 12/1 $B$H(B 12/2 $B$7$+$J$$$h$&$K8+$($k$N$G$9$,!"$=$l$G$$$$$N$G$7$g$&$+!#(B
The Week of Oracle Database Bugs
(argeniss.com) $B$K$h$k$H(B
What is the WoODB about?
An Oracle Database 0day will be released every day for a week on December.
$B$J$N$G!"!V(B12$B7nBh(B1$B=5!W$G$O$J$/$F!V(B12 $B7n$N$H$"$k=5!W$J$N$+$J$"!#$=$l$H$b!"(B12/1 $B$+$i(B 7 $BF|4V$H$+$+$J$"!#$^$"!"$J$s$K$;$h$=$&$$$&$3$H$r$d$k$N$G$7$g$&$,!#(B
$B!U(B
$B!VAw?.%I%a%$%sG'>Z!X(BDKIM$B!Y$NI8=`2=$O=gD4!$MhG/H>$P$K$O(BRFC$B$K!W(B---Eric Allman$B;a(B
($BF|7P(B IT Pro, 11/22)
$B!U(B
Captcha
$B$C$]$$2hA|$D$-$N2hA|(B spam $B$,Mh$?$h!D!D!#(B$B$3$s$J$N(B$B!#(BOCR $B$r;H$C$?(B spam $B%U%#%k%?$r8+;v$KDL$jH4$1$F$k$7!#$&!<$`!#(B
$B!!$d$C$Q!"6b$NNO$O$9$4$$$J$"!#4XO"(B:
$B!U(B
$B%"%a%j%+$GM-L>%V%m%,!<$,<}4F$N8+DL$7!"5-;v$NCfN)@-$r4S$/$?$a$K:[H=$G>Z8@5qH](B
(technobahn, 11/21)
$B!U(B
$B!V2?$b$7$J$$!W$H$$$&%;%-%e%j%F%#BP:v(B
($BF|7P(B IT Pro, 11/22)
$B$@$C$?$i9bEY$JBP:v$r9V$8$J$1$l$P6<0R$N?J2=$b;_$^$k$N$G$O$J$$$+!$$H$$$&9M$($G$9!#(B
$B!!$b$O$d;_$^$i$J$$$G$7$g$&!#$@$C$F!"6b$K$J$k$b$s!#(B
$B!U(B
mixi$B$N%3%_%e$X$N7G:\FbMF$r5vBz$J$7$G=q@R2=$9$k7W2h$GBgYf$a(B
(slashdot.jp, 11/22)$B!#$*6b$,$+$i$`$H$M$'!D!D!#(B
$B$"$H!"%[%F%k!&%8%c%s%-!<%:;v7o$K$D$$$F$O9b:[H=7h$b%j%s%/$7$?J}$,$$$$$s$8$c$J$$$G$9$+$M$(!#(B
$B!!(B $B%[%F%k!&%8%c%s%-!<%:;v7o$N2r@b(B:
$B!U(B
$B$49%I>$K$D$-;vA0EPO?1dD9!*(B 11$B7n(B30$BF|(B($BLZ(B) 18:00 $BKx(B
(Internet Watch)$B!#=85R$,0-$$$N$G1dD9$7$F$_$k%F%9%H!"$+$7$i!#(B
C2 : DNS DAY $B!A(BDNS$B$K$*$1$k%;%-%e%j%F%#:F9M!A(B
$B$N$3$N$"$?$j$H$+6=L#?<$2$G$9!#(B
[$B8eH>(B] DNS$B$K$*$1$k%;%-%e%j%F%#:F9M(B
($BCfN,(B)
$B!!(B2. DNS$B%W%m%H%3%k$NMn$H$77j(B
$B!!!!(B o DNS reflector attack
$B!!!!!!!!!!!!!!!!!!!!!!!!>>:j(B $B5H?-(B [$B3t<02q
$B!!(B$B%;%-%e%j%F%#%[!<%k(B memo BoF ($B%Z!<%8$h$&$d$/$D$/$C$?(B orz) $B$NH/I=$[$IJg=8Cf!#(B
_o_
$B!!$H$3$m$G!"(BInternet Week $B$N
$B!U(B
$B!V%9%T%"7?967b!W$OF|K\FH<+$NI=8=!)(B
($BIpED7=;K(B, 7/19)
$B!V%9%T%"!&%U%#%C%7%s%0!W$d!V%9%T%"!&%U%#%C%7%s%0!&%"%?%C%/!W$H$$$&MQ8l$O3$30$G9-$/MQ$$$i$F$$$k$,!"!V%9%T%"7?967b(B(Spear Attack?)$B!W$H$$$&I=8=$O$"$^$jL\$K$9$k$3$H$,$J$$$h$&$K;W$&!#(B
$B!!@hF|K?=j$G$3$NOC$,=P$F$$$?$N$G$9$,!"0lHLI=8=$H$7$F$O!V(BTargeted Attack$B!W$H!V(BSpear Phishing$B!W$7$+B8:_$7$J$$$h$&$G!#(BTargeted Attack
$B$N(B phishing $BJ}LLFC
$B!U(B
$B!Z(BIT Service Forum$BB.Js![!VK|0l$KHw$($F!$4k6H$K$b%;%-%e%j%F%#BP1~%A!<%`$r!W(B---JPCERT/CC$B$,Ds8@(B
($BF|7P(B IT Pro, 11/21)
$B!U(B
$B0E9f%b%8%e!<%k;n835Z$SG'>Z@)EY(B(JCMVP)
(IPA ISEC) $B$H$$$&$b$N$,$"$k$N$G$9$M!#(B
CMVP: Cryptographic Module Validation Program (NIST) $B$NF|K\HG$@$=$&$G$9!#(B
$B0E9f%b%8%e!<%kI>2A$N4pACCN<1(B
(@IT) $B$H$$$&5-;v$,$"$C$?$N$M!#2?G/$bA0$K!#(Borz
$B!!(BWindows Rights Management Services $B$K4X$7$F$h$/4s$;$i$l$k
(Microsoft) $B$K!V(BFIPS $B$H$N8_49@-$K$D$$$F65$($F$/$@$5$$!#(B $B6qBNE*$K$O2?$,G'Dj$5$l!"$I$N%l%Y%k$N(B FIPS $BG'Dj$^$G$,G'Dj$5$l$k$N$G$9$+(B?$B!W$H$$$&(B Q. $B$,$"$j$^$9!#(B
$B!U(B
Internet Explorer 7.0$B$X$N(BMcAfee$B@=IJ$NBP1~(B
($B%^%+%U%#!<(B, 11/20)$B!#4IM}(B UI $B7O$,$3$H$4$H$/$@$a$J$N$+$J!#(B
$B!U(B
$B6&KE:a!"!VJF9qN1J]!W$K30L3>J$ON)1}@8(B($B5D;vO?IU$-(B)
($BJ]:dE8?M$N$I$3$I$3F|5-(B, 11/21)
$B!U(B
$B2#IM$NCK@-$,688$IBH/>I!!!VHf$G8$$K$+$^$l$?!W(B
(asahi.com, 11/22)$B!#(B
$B@hF|$N!V5~ET;T$NCK@-!W$NOC$O!"(B
$B%U%#%j%T%s$+$i$N5"9q8e$K688$IB$rH/>I$7$?45 ($B8|@8O+F/>J(B, 11/16)$B!"(B
$B%U%#%j%T%s$+$i$N5"9q8e$K688$IB$rH/>I$7$?45INc!K$K$D$$$F(B
$B!JB3Js!K(B
($B8|@8O+F/>J(B, 11/17)$B!#(B
$B688$IB(B ($B3$30EO9RIM=KI(B) $B$OH/>IA0$K<#NE$7$J$$$H3N
$BF|K\?M$O%$%L$d%M%3$r$_$k$HL5KIHw$K$U$l$h$&$H$7$,$A$G$9$,!"Ln8$$dLn@8F0J*$K$O$`$d$_$K
$BK|0l688$IB$,H]Dj$G$-$J$$8$$J$I$KR{$^$l$?;~$K$O!"=}8}$N@v>t>CFG8e!"0eNE5!4X$G688$IB%o%/%A%s$r@\
$B!U(B
$B!ZI|5l$N$*CN$i$;![#E#Z!!#W#I#N%3!<%9$N#E%a!<%kAwu67$K$D$$$F(B
(KDDI, 11/21)$B!#(B11/19 $B$K$D$E$$$F!"(B11/20 $B$K$b%H%i%V$C$F$$$?$s$G$9$M!#(B
$B$3$A$i$O!V1F6A
$B!!$"$H!"(B11/19 $B$NOC$G$"$k(B
$B!ZI|5l$N$*CN$i$;![#E#Z!!#W#I#N%3!<%9$N#E#Z#w#e#b@\B3$*$h$S#E%a!<%kAwu67$K$D$$$F(B
(KDDI, 11/20) $B$b!"!V1F6A
$B!!$=$l$K$7$F$b!"3F%"%J%&%s%9(B web $B%Z!<%8$N(B <title> $B$,(B
$B!V(BKDDI au: au$B$+$i$N$*CN$i$;0lMw!W$J$N$O$J$"!#$3$N
$B!!$5$i$K!"(B11/19 $B$N%H%i%V%k;~$KI=<($5$l$?%(%i!<%3!<%I$,!V(B110$B!W$@$C$?$?$a$K!"(B110 $BHV(B (= $B7Y;!(B) $B$KBgNL$NLd$$$"$o$;$,$+$+$C$F$7$^$C$?$i$7$$!#(B
$B!U(B
$B$*OM$S(B
(KDDI, 11/19)
$B#1#17n#1#9F|!JF|!K#1#9;~#5#5J,!A#2#3;~#4#3J,$^$G$N4V!"#E#Z!!#W#I#N%3!<%9$N0lIt$N$*5RMM$K$F!"#E#Z#w#e#b$N@\B3$*$h$S#E%a!<%k$NAwu67$K$J$C$F$*$j$^$7$?$,!"8=:_$OI|5l$7$F$*$j$^$9!#(B
$B!!$J$s$@$+AG5$$J$$$G$9$,!"(B$B#a#u!V#E#Z#w#e#b!W$K>c32!!#2#8#0K|2s@~$K1F6A(B
(asahi.com, 11/20) $B$H8@$o$l$k$H$9$4$$1F6A$N$h$&$KJ9$3$($^$9!#(B
$B!V#E#Z!!#W#I#N%3!<%9$N0lIt$N$*5RMM!W$,(B 280 $BK|2s@~$J$N(B?
$B!U(B
$B%?%&%s%_!<%F%#%s%0!&%5%]!<%?!<$NOC(B
$B!U(B
$B0EL[E*$K7A@.$9$k;v
($B9bLZ9@8w!w<+Bp$NF|5-(B, 11/15)
$B!U(B
$B$O$F%V$r;H$&$3$H$K$7$?(B
($B9bLZ9@8w!w<+Bp$NF|5-(B, 11/18)
$B!U(B
$B?tI4?M$,!V?M4V$N=b!W!!%$%9%i%(%k73!"%,%66uGzCf;_(B
(asahi.com, 11/20)
$B!U(B
H18$BG/EY%&%'%V%"%W%j%1!<%7%g%s3+H/
(IPA ISEC)$B!#(B2006.12.13$B!"El5~ETJ85~6h!"L5NA!#(B
$B!U(B
11/22$B!!(BP2P$B%M%C%H%M%C%H%o!<%/$NDI@W$H>Z5r3NJ](B
(B-) $B$NFH$j8@(B, 11/20)$B!#(B
2006.11.22 $BEl5~ET?7=I6h!"(B2006.12.08 $BBg:eI\Bg:e;T!"L5NA!#(B
WINNY $B%M%C%H%o!<%/7O$NDI@W4X78$H!"(BEnCase&KingDEMI $B$N5M$a9g$o$;%;%C%H$K4X$9$k$*OC$K$J$j$^$9!#$C$F$$$&$+!"<+J,$N<:GT;vNc$N$4>R2p$,%a%$%s$@$C$?$j$7$F!J>P!K(B
$B!!%N%&%O%&$$$C$Q$$5M$C$F$$$=$&$@$J$"!D!D!#(B
$B!U(B
Taking a Look at the FreeVideo Player Trojan
(SANS ISC, 11/20)$B!#:#EY$O(B Video Player $B$G$9$+!#$$$m$$$m9M$($^$9$M!#(B
The main purpose of the FreeVideo Player, in its current state, seems to be redirection of web search results and DNS queries for non-existent domains to ad-hosting websites.
$B!!4XO"(B: $BL5=~$N%W%l!<%d!&%=%U%H$K8+$;$+$1$?!V%H%m%$$NLZGO!W$KCm0U(B
($BF|7P(B IT Pro, 11/20)
$B!U(B
IceSword 1.20 English Version
(tessy$B$NF|5-(B, 11/19)
$B!!(BDEFCON 14 Media Archive$B!"(BPDF $B$r8+$h$&$H$9$k$H$3$H$4$H$/(B 404 $B?)$i$&$N$O$J$<$@$m$&!D!D!#(B
$B!U(B
$B%H%l%s%I%^%$%/%m!"8!1V%M%C%H%o!<%/$r
(Enterprise Watch, 11/20)
$B!U(B
$B=)MU86$K$bKIHH%+%a%i@_CV$X(B
(slashdot.jp, 11/19)$B!#(B
#1061052
$B$G!"(B$B=FK$Ea7uN`=j;}Ey
$B$r;XE&$7$F$$$k?M$,$$$^$9$M!#$0$0$C$F$_$k$H!"$?$H$($P$3$s$J$N$,(B hit $B$7$^$7$?(B:
- $B=)MU86$G7Y;!$KJa$^$j$^$7$?(B
($B??35L45:8@(B, 2005.12.01)$B!"(B$B>!AJ!*!*!D!D$G$O$J$$!J7ZHH:aK!0cH?7kKv!K(B
($B??35L45:8@(B, 2/8)
- $B!V%a%$%I
($B?@@;%^%k%A2&9q(B, 10/23)$B!#%3%a%s%HMw$K0-
$B!U(B
F-117A$B!V%J%$%H%[!<%/!W@oF.5!$,8=Lr0zB`!"(B1982$BG/$+$iLs(B25$BG/4V$KEO$C$F3hLv(B (technobahn, 11/20)$B!#(B
F-117
$B$O!V%9%F%k%9@oF.5!!W$H8F$P$l$F$$$k$N$@$1$I!"6u@oG=NO$O3'L5$J$s$@$h$M!#(B
$B$0$0$C$F$_$k$H!"(B
US Plans to Retire B-52s, C-21s, F-117 & U-2 for more F-22s
(Defense Industry Daily, 01/12)
$B$,(B hit$B!#(BF-22 $B$GBeBX$5$l$k$_$?$$!#(B
$B!!4XO"(B: F-117$BHo7bDF$N$=$N8e!D(B (masdf.com)
$B!U(B
$B%W!<%A%s@/8"HcH=$NK4L?%m%7%"?MFG;&L$?k!"1Q9q$GA\::(B
($BFIGd(B, 11/19)$B!"(B Russian ex-spy 'poisoned' in London
(CNN / AP, 11/19)$B!#%]%j%H%3%U%9%+%d=w;K$,$i$_(B?
$B!U(B
$BY$r9|H4$-$K(B
(asahi.com, 11/20)$B!#$$$d$O$d!#(B
$B!U(B
$B3t$N8mH/Cm(B $BC$7%k!<%kF3F~(B
(JCAST, 11/20)
$B!U(B
$B4Z9q$,JF9q2qCL$G(B
(CNN, 11/18)$B!#(B
$B3H;6$KBP$9$k0BA4J]>c9=A[!J(BPSI$B!K(B
($B30L3>J(B)
$B!U(B
$B9b9;@8;`K4$N%7
($BFIGd(B, 11/20)$B!#$h$&$d$/(B 1 $B4p!#(B
$B4XO"(B:
$B!U(B
F-Secure Mobile Security
(F-Secure)$B!#%9%^!<%H%U%)%s(B (Symbian OS) $BMQ$N%Q!<%=%J%k%U%!%$%"%&%)!<%k(B / $B%"%s%A%&%$%k%9$@$=$&$G!#(B
$B!U(B
$B@H ($B?eL57n$P$1$i$N$($SF|5-(B, 11/18)$B!#(BACCS $B;v7o$N>l9g!"!V%5%$%H$N@H
$B!U(B
$B:4O$4V$NN54,!"860x$OD>7B#3#0%-%m$N5pBg@QMp1@(B
($BFIGd(B, 11/17)
$B!U(B
$BEpFqKI;_AuCV$D$-
($BFIGd(B, 11/17)$B!#%$%b%S%i%$%6!<$N2sHrJ}K!$C$F(B well known $B$@$H;W$&$N$@$1$I!"B;J]$C$F$$$^$@$K;YJ'5qH]$7$F$k$N$+!#(B
$B!U(B
$B%&%$%k%9%P%9%?!<(B $B%3!<%]%l!<%H%(%G%#%7%g%s(B 7.0 $BHG(B Security Patch(Build_1309)$B$N35MW$*$h$SE,MQJ}K!(B
($B%H%l%s%I%^%$%/%m(B)
$B!U(B
JUST Kaspersky $B%]!<%?%k(B ($B%8%c%9%H%7%9%F%`(B)$B!#(B
30 $BF|;nMQHG$r%@%&%s%m!<%I$G$-$^$9!#(B
$B!U(B
Implementing and Detecting a PCI
Rootkit
(ngssoftware)
$B!U(B
$B%?%_%U%kI~MQ$GCm0U4-5/$X!!(B
$BJF?)IJ0eLtIJ6I(B
($BF|7P(B Medical Online, 11/14)$B!"(B
$BJFEv6I!"%?%_%U%k$NCm0U=q$-2~D{!!0[>o9TF0$X$N4F;k6/2=(B
(asahi.com, 11/17)
$B!U(B
$B8D?M>pJs!!N.=P;vNc$N(B5$B3d$O@/I\5!4X!!JFD4::(B
($BKhF|(B, 11/16)
$B!U(B
$B%H%i%C%/1?$A$c$s;D9sJ*8l!'0{
(JANJAN, 11/15)
$B!U(B
Symantec$B$N:>5=BP:v%3%_%e%K%F%#!"8D?M$+$i$b:>5=%5%$%H>pJs$rJg=8(B
(Internet Watch, 11/16)
$B!U(B
$B%(%M%k%.!
$B!U(B
$B%$%s%I!'%Q%F%s%H:[H=!"@$3&E*LdBj$K(B
(JANJAN, 11/12)$B!#%/%9%jJ}LL!#(B
$B!U(B
VIVA! USA
$B!U(B
$B:G0-$J;v7o$NJsF;$K:G9b$N>^(B
(JANJAN, 11/13)
$B!U(B
$B%0%m!<%P%j%:%`$N6<0RAJ$(!A1G2h!V%@!<%&%#%s$N0-L4!W(B
(JANJAN, 11/16)
$B!U(B
$B%$!<%[!<%`%:$N5U=1(B
$B!U(B
snort
2.6.1 $B$,=P$?$=$&$G$9!#(B
$B!U(B
$B<{MWL5;k$N!HFb>p!I$rO*Dh$7$?!V(BYouTube $BBP(B $B%F%l%S6I!W(B
(CNET, 11/17)
$B!U(B
$B%^%$%/%m%=%U%H!"(BVista$B$N%i%$%;%s%9(B/$B%"%/%F%#%Y!<%7%g%s$K$D$$$F2r@b(B
(PC Watch, 11/16)
$B!!$^$:!"%i%$%;%s%9$@$,!"$3$l$O8=:_JF9q$N%5%$%H$G8x3+$5$l$F$$$k$b$N$,!"$=$N$^$^9qFb$G$bE,MQ$5$l$k$3$H$H$J$C$?!#(B
($BCfN,(B)
$B$J$*!"F|K\8l$N%i%$%;%s%9$K$D$$$F$O!"(B1$B7n(B30$BF|$NH/GdF|0JA0$K!"(BWeb$B$G8x3+$9$kM=Dj$O$J$$$H$$$&!#(B
$B!!$=$N!VF|K\8l!W$NK]Lu$N
$B!!4XO"(B:
$B!U(B
$B=i4|@_Dj$G(BDEP$B$,M-8z$K$J$C$F$$$k%W%m%;%9(B
(Eiji James Yoshida$B$N5-O?(B, 11/16)$B!#(B
$BEvA3M-8z$K$9$Y$-BP>]$,L58z$K$J$C$F$$$k$o$1$G!"$3$l$O$D$^$j!D!D(B
DEP $B$rM-8z$K$9$k$H(B IE $B$OMn$A$^$/$k!"$H$$$&>ZL@$J$s$8$c$J$$$+$7$i!#(B
$B!U(B
Error message when when you try to clear or to back up the Security log on a Windows XP-based computer: "Stop 0xC0000244 (STATUS_AUDIT_FAILED)"
(Microsoft)$B!#(Bpatch $B$,$"$k$=$&$G$9!#(B
$B!U(B
$B!V%\%C%H%M%C%H$O!HL\N)$?$J$$!I$h$&$K9)IW$r6E$i$9!W(B---IIJ$B$Nc7F#;a(B
($BF|7P(B IT Pro, 11/16)$B!#!VL\N)$D$J!W$O@o>l$N4pK\!#(B
$B!U(B
$B%$%s%?!<%M%C%H$OJ?OB$K$J$C$?$+!)(B
($BF|7P(B IT Pro, 11/14)$B!#J?OB$K$J$C$?$N$J$i!"(BWindows Vista $B$G!V%;%-%e%j%F%#$r6/2=!W$7$?$j$7$J$$!#(B
$B!U(B
$B650i2~3W#T#M(B@$BBgJ,$G$O!"(B107$B?M$,M-5k%9%?%C%U(B
($BJ]:dE8?M$N$I$3$I$3F|5-(B, 11/16)$B!#$$$d$O$d!#(B
$B!U(B
$B5W4VKI1RD#D941!'3KEk:\JF4OA%$NNN3$DL2aG'$a$k!)H/8@(B
($BKhF|(B, 11/17)$B!#Hs3K(B 3 $B86B'%r9|%L%-%K%;%h!"$H$$$&$H$3$m$G$7$g$&$+!#$^$"!"!V;}$A9~$^$;$:!W$OB>$N(B 2 $B$D$H$O0[
$B!U(B
$BCm0UJs2r=|8e$KDEGH!V>pJs$N=P$7J}8!F$!W!D5$>]D#D941(B
($BFIGd(B, 11/16)$B!#Fq$7$$$J$"!#(B
$B!U(B
$B$^$@I]$$%7%s%I%i!
($BFIGd(B, 11/16)$B!#$^$@$^$@=*$j$^$;$s!#(B
$B!U(B
$B%&%$%k%9:nl=j$rFM$-;_$a$k(B
($BF|7P(B IT Pro, 11/16)$B!#$$$m$$$m9M$($k$J$"!#(B
$B!U(B
$B!X(BBinary Hacks$B!YA}:~8fNi(B
($B%*%i%$%j!<(B, 11/14)$B!#4{$K(B 3 $B:~$KF~$C$?$H$$$&OC$,!D!D!#(B
$B!U(B
$B!V(BVector$B!W$N%&%$%k%946@w;v8N$G:FH/KI;_:v$,40N;!"
(Internet Watch, 11/16)
$B!U(B
Symantec delivers Mac OS X security report
(securityfocus, 11/14)$B!#(B7 $B7n$K=P$?J8=q$N2~D{HG!#(Bitochan $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
IT$B%;%-%e%j%F%#$N%"%i%$=P$7(B $BBh(B16$B2s!!(B
Windows$B$K$*$1$k%P%C%U%!%*!<%P!<%U%m!<(B(2)
(MYCOM $B%8%c!<%J%k(B, 11/16)
$B!U(B
$B!V>pJs8e?J9q$KE>Mn$7$+$M$J$$!W!"9b9;$NL$Mz=$LdBj$K>pJs=hM}3X2q$,6l8@(B
($BF|7P(B IT Pro, 11/15)
$B!U(B
$B$^$?(B Google$BH,J,$+(B?
$B$N7o$G$9$,!":#$0$0$C$F$_$k$H!"$A$c$s$H=P$F$-$^$9$M!#(B
$B$"$H!"(B
$BF|K\$N(BGoogle$B$K$b!"8!:w7k2L$K%U%#%k%?!<$,$+$+$C$F$$$k(B
$B$NOC$J$N$G$O!"$H(B Lain $B$5$s$K8@$o$l$F5$$,$D$$$?$N$G$9$,!"(B
9/27 $B$K%U%#%k%?$7$J$$$h$&$K@_Dj$7$?$O$:$J$N$K!"$5$C$-8+$?$i$^$?(B
Use moderate filtering (Filter explicit images only - default behavior)
$B$KLa$C$F$$$?!#$&!<$_$e!#(B
$B!U(B
Windows Vista$B!]!]!VCm0U$;$h!$A0J}$K0-O)$"$j!W(B
($BF|7P(B IT Pro, 11/15)
$B$5$F!$(BWindows Vista$B$K%"%C%W%0%l!<%I$9$kM}M3$O2?$@$m$&$+!#(B($BCfN,(B) $BI./$J$/$H$b%Q%C%A!&%,!<%I5!G=$,Ek:\$5$l$F$$$k(B64$B%S%C%H$N(BWindows Vista$B$J$i%k!<%H%-%C%H$K4X$9$k?4G[$,8:$k$3$H$G$"$k$H9M$($F$$$k(B
$B!!$=$&$J$k$H$$$$$G$9$M!#(B
$B!U(B
[connect24h:11211] $B%*%U%#%9%=%j%e!<%7%g%s%U%'%"(B2006 $B$G9V1i(B$B!#(B2006.11.17$B!"9-Eg8)9-Eg;T!"L5NA!#(B
$B!Z?=9~Dy@ZF|(B11$B7n(B10$BF|![(B$B$H=q$+$l$F$$$^$9$,!":#$+$i(B mail $B$7$F$b(B ok $B$@$=$&$G$9(B
[connect24h:11216]$B!#(B
$B!U(B
$B%"%I%S!"0[$J$k7A<0$N%U%!%$%k$r$^$H$a$F(BPDF$B2=$G$-$k!V(BAcrobat 8$B!WH/Gd(B (Internet Watch, 11/16)$B!#(B
$B1#$7$?$$ItJ,$N>pJs$N$_$r9uEI$j$7$F:o=|$G$-$k!VKO>C$75!G=!W$J$I$rDI2C(B(Professional$B$N$_(B)$B$7$?!#(B
$B!U(B
$B!V@H
(IPA ISEC, 11/8)$B!#(B11/24 $BDy@Z$@$=$&$G!#(B
$B!U(B
ADMX Migrator
($B%&%#%s%I%&%:3+H/E}3gIt(B, 11/15) ($B$^$C$A$c$5$s$A7PM3(B)
$B%+%9%?%`(B adm $B%U%!%$%k$r6n;H$7$F%0%k!<%W%]%j%7!<$r4IM}$7$F$$$k4IM}R2p$5$;$FD:$-$^$7$?!#BgJQ%7%s%W%k$G;H$$$d$9$$%D!<%k$G$9$N$G!"$<$R0lEY$*;n$7$/$@$5$$!#(B
$B!U(B
Detection and deployment guidance for the November 2006 security release
(Microsoft)$B!#$3$&$$$&$N$O!"F|K\8lHG$,$[$7$$$J$"!#(B
$B!U(B
Some security policies are displayed as "Not Defined" in the RSoP snap-in on a Windows Server 2003-based domain controller
(Microsoft)
$B!U(B
The heavy use of Winsock programs may exhaust the system's non-paged pool memory in Windows Server 2003
(Microsoft)$B!#(Bpatch $B$,$"$k$=$&$G$9!#(B
$B!!(Bnon-paged pool $B$D$J$,$j(B:
Event ID 2021 is logged even though lots of non-paged pool memory is available in Windows Server 2003
(Microsoft)
- APSB06-18: Update available for HTTP Header Injection Vulnerabilities in Adobe Flash Player
-
$B!!$i$`$8$#(B $B$5$s$+$i(B ($B>pJs$"$j$,$H$&$4$6$$$^$9(B):
http://labs.adobe.com/downloads/flashplayer9.html
$B$r8+$k8B$j!"LdBj$N(BLinux$BHG$O(B9.0.21.55$B$,(BSA$B$HF1$8(B2006/10/18$B$K8x3+$5$l$F$$$k$h$&$G$9!#(BSecurity Bulletin$B$G$O(B9.0.20$B0J>e$K$7$m!"$H$"$k$o$1$G$9$7!"(BSA$B$H(BPlayer$B$N8x3+F|IU$,0lCW$7$F$$$k$3$H$+$i9M$($k$HF1%P!<%8%g%s$G$OBP1~:Q$_$J$N$G$O$J$$$G$7$g$&$+!)(B
$B!!4XO"(B: Beta Refresh on Adobe Labs: Flash Player 9 for Linux beta now available (Emmy Huang, 2006.10.18)$B!#$=$N8e!"(BWindows / Mac OS X $BHG$K$D$$$F$O&B$,FAQ $B$r8+$k$H!"(BFlash Player 9 for Linux $B@5<0HG$OMhG/$K$J$i$J$$$H=P$J$$$h$&$G!#(B
- Workstation $B%5!<%S%9$N@H
-
$B!!4XO"(B: Workstation Service NetpManageIPCConnect Buffer Overflow
(eEye)
$B!!(BSANS TOP 20 $B:G?7HG(B Version 7.0$B!#(BCross-Platform Applications
$B$,F2!9$?$kCOJb$rC[$$$F$*$j!"(B
Security Policy and Personnel $B$d!"(B
Special Section $B$H$7$F(B
Zero Day Attacks and Prevention Strategies
$B$J$s$F9`L\$b$"$k!#(B
$B!U(B
$BB3!&8F$SL>$GJ,$+$k!'0UL#$,0c$&!*JT!!$$$-$J$j!&$7$s$1$s!&$($i$$!D!H$H$F$b!IK-IY(B
($BKhF|(B, 11/15)$B!#$$$m$$$m$d$d$3$7$$$G$9!#(B
$B!U(B
$B$$$D$N;~Be$b!"??
($BF#ED7{<#!V;(;o$E$/$j$NIqBfN"!W(B, 11/14)$B!#(B$BF|7P%Q%=%3%s(B
2006$BG/(B11$B7n(B13$BF|9f$N!VFC=8(B2: $Bh$j49$(0FFb!W$NOC!#(B
$B:#$+$iLs(B5$BG/A0$N(B2001$BG/Kv!"F1MM$N4k2h$r9M$(!"5-;v$r<9I.$7$?$3$H$,$"$C$?$N$G$9!#(B
$B!!:#$OK4$-!VF|7P%M%C%H%o!<%/%;%-%e%j%F%#!W$G$9$M!D!D!#(B
$B!!;W$$=P$7$?8@MU(B: $B!V(BNot even justice, I want to get truth. $B??
$B!U(B
$B
($B$^$k$A$c$s$N>pJs%;%-%e%j%F%#5$$^$0$lF|5-(B, 11/15)
$B!U(B
$BH,2&;R%F%l%a%G%#%"!"(BCATV$B%M%C%H$N2CF~pJs(B18,639$B7o$,(BShare$BN.=P(B
(Internet Watch, 11/15)
$B!U(B
$BEE5$%9%H!<%V#65!
($BFIGd(B, 11/15)
$B!U(B
$BFCDjEE;R%a!<%kEy$K$h$kEE;R%a!<%k$NAwe$N;Y>c$NKI;_$K;q$9$k5;=Q$N8&5f3+H/5Z$SEE;R%a!<%k$K78$kLrL3$rDs6!$9$kEE5$DL?.;v6Hu67(B
($BAmL3>J(B, 11/14)
$BAmL3>J$5$s$+$$(B? $BD9$$!"D9$$$h(B!
$B!!$J$*!":#G/$N%H%T%C%/!J>\:Y$OJL;f(B(PDF)$B;2>H!K$H$7$F$O
1) $B!!EE5$DL?.;v6H
2) $B!!$3$l$r
3) $B!!6aG/9q6-$r1[$($kLBOG%a!<%k$,@$3&E*$KLdBj$H$J$C$F$$$k$3$H$rJ$G$O9q:]6(D4$r@Q6KE*$K?d?J$7$F$$$^$9!#(B
$B!U(B
Windows PowerShell 1.0 localized installation package for Windows Server 2003 with Service Pack 1 and for Windows XP with Service Pack 2
(Microsoft)$B!#F|K\8lHG$b$b$A$m$s$"$j$^$9!#(B
Windows PowerShell 1.0 Multilingual User Interface (MUI) Language Pack for Windows Server 2003 with Service Pack 1 and for Windows XP with Service Pack 2
(Microsoft) $B$H$$$&$N$b=P$F$^$9!#(B
$B!U(B
$B650i4pK\K!$H!V@$O@56Au$N%?%&%s%_!<%F%#%s%0!W(B($BD{@5$"$j(B)
($BJ]:dE8?M$N$I$3$I$3F|5-(B, 11/14)$B!#(B5,000 $B1_$b$i$C$F%?%&%s%_!<%F%#%s%0$K9T$3$&!#$$$d!
$B!!4XO"(B: $B%5%/%iH/8@
(asahi.com, 11/15)
$B1v:j41K
$B!!;W$$=P$7$?8@MU(B: $B!V%"%8$N3+$-$J$*$j!W(B(C) $B3{@n$D$P$a(B
$B!!!D!D$d$C$F$7$^$C$?$h$&$G$9$M(B: $B650i4pK\K!!'2~@50F$r=01!FCJL0Q$,2D7h!!M?E^C1FH$G(B
($BKhF|(B, 11/15)$B!#3+$-$J$*$k$o$1$@!#(B
$B!U(B
November 2006 Monthly Security Bulletin Release
(MSRC blog, 11/14) $B$K$h$k$H!"(B
On final bit of SUS information: we had announced that SUS 1.0 would be retired on December 6, 2006. In response to customer feedback, and to provide customers with additional time to migrate off Software Update Services (SUS) 1.0, we've gone ahead and announced an extension to the end of support date to Tuesday, July 10, 2007. So we want to encourage anyone still running SUS 1.0 to migrated to Windows Server Update Services, (WSUS) before July 2007.
$B$H$$$&$o$1$G!"(BSUS 1.0 $B$O(B 2007.07.10 $B$^$G0];}$5$l$k$=$&$G$9!#(B
$BM5$,$G$-$k$N$O$&$l$7$$8B$j$G$O$"$j$^$9!#(B
$B!!$"$H!"(B11 $B7n$N%;%-%e%j%F%#(B $B%j%j!<%9(B ($BF|K\$N%;%-%e%j%F%#%A!<%`$N(B Blog, 11/15) $B$K$b$"$k$h$&$K!"(B
MS06-071 (XML) $B$K$D$$$F$O!"(BSUS $B$G$NG[?.$,8=;~E@$G$O9T$($^$;$s!#K\Mh$O!"BP1~$9$kA4$F$NG[?.%7%9%F%`$G99?7%W%m%0%i%`$rF1;~$KDs6!$9$k$N$G$9$,!":#2s$N$_CY$l$F$NDs6!$H$J$C$F$7$^$$$^$7$?!#Ds6!$5$l
$B$J$N$GCm0U$7$^$;$&!#(B
$B!!$A$J$_$K!";~Be$O4{$K(B WSUS 3.0 Beta 2
$B$N$h$&$G$9!D!D!#(B
$B!!(BMicrosoft XML $B%3%"%5!<%S%9(B 4.0 / 6.0 $B$K7g4Y!#(BXML $B%3%"%5!<%S%9Fb$N(B XMLHTTP ActiveX $B%3%s%H%m!<%k$K7g4Y$,$"$j!"96N,(B web $B%Z!<%8$rDL$8$FG$0U$N%3!<%I$r$B%^%$%/%m%=%U%H(B $B%;%-%e%j%F%#(B $B%"%I%P%$%6%j(B (927892)
XML $B%3%"%5!<%S%9$N@H
$B$NOC!#(B
CVE: CVE-2006-5745
$B!!(Bpatch $B$,$"$k$N$GE,MQ$9$l$P$h$$!#$J$*!"(B927892 $B$K=>$C$F(B kill bit $B$r@_Dj$7$?$"$C$?>l9g!"(Bpatch $B$r%$%s%9%H!<%k$7$F$b<+F0E*$K$O2r=|$5$l$J$$$N$GCm0U!#(B
MS06-071 $B$K!"(Bkill bit $B@_DjMQ$*$h$S2r=|MQ$N(B .reg $B%U%!%$%k$N$D$/$j$+$?$,5-$5$l$F$$$k!#(B
2006.11.24 $BDI5-(B:
$B!!(BMS06-071 Available Through SUS 1.0
(MSRC blog, 2006.11.22)$B!#(BSUS 1.0 $B$G$b$h$&$d$/G[I[$5$l$?$=$&$G$9!#(B
$B!!(BWindows 2000 / XP (32bit) $B$K7g4Y!#(BWorkstation $B%5!<%S%9$K(B buffer overflow $B$9$k7g4Y$,$"$j!"(Bremote $B$+$iG$0U$N%3!<%I$rl9g$OF?L>%f!<%6$K$h$k967b$,2DG=$J$?$a!"4m81EY$,9b$$!#(B
CVE: CVE-2006-4691
$B!!(Bpatch $B$,$"$k$N$GE,MQ$9$l$P$h$$!#$^$?!"(B139/tcp $B$H(B 445/tcp $B$r%U%#%k%?$9$k$3$H$G2sHr$G$-$k!#(B
2006.11.16 $BDI5-(B:
$B!!4XO"(B: Workstation Service NetpManageIPCConnect Buffer Overflow
(eEye)
2006.11.17 $BDI5-(B:
$B!!4XO"(B:
2006.11.21 $BDI5-(B:
$B!!4XO"(B:
2006.12.01 $BDI5-(B:
$B!!4XO"(B: Workstation$B%5!<%S%9(B NetpManagerIPCConnect $B%P%C%U%!%*!<%P!<%U%m!<@H
($B=;>&>pJs%7%9%F%`(B / eEye)$B!#9b66$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!!(BWindows 2000 / XP / Server 2003 $B$K7g4Y!#(B
Microsoft $B%(!<%8%'%s%H$N(B ActiveX $B%3%s%H%m!<%k$K7g4Y$,$"$j!"(Bbuffer overflow $B$,H/@8!"96N,(B .ACF $B%U%!%$%k$K$h$C$FG$0U$N%3!<%I$rCVE-2006-3445
$B!!(Bpatch $B$,$"$k$N$GE,MQ$9$l$P$h$$!#$J$*!"(BWindows Vista $B$K$3$N7g4Y$O$J$$!#(B
$B!!(BIE 5.01 / 6 $B$K7g4Y!#(B
$B!!(Bpatch $B$,$"$k$N$GE,MQ$9$l$P$h$$!#$^$?!"$$$:$l$N7g4Y$b(B IE 7 $B$K$OB8:_$7$J$$!#(B
$B$J$*!"(BDirectAnimation $B$K$D$$$F$O!"=$@5%b%8%e!<%k$GCV$-49$($k$N$G$O$J$/!"4XO"$9$k(B CLSID $B$X$N(B kill bit $B$N@_Dj$,9T$o$l$k!#(B
$B!!(Bpatch $B$rE,MQ$9$k$H!">e5-$N=$@5$K2C$(!"(BWinZip 10.0 $B$N(B ActiveX $B%3%s%H%m!<%k$KBP$7$F(B kill bit $B$r@_Dj$9$k!#(BCLSID $B$O0J2<$N$H$*$j(B:
- {A09AE68F-B14D-43ED-B713-BA413F034904}
- {F3834A2B-19CF-4A90-BE1D-ECC410D9DA09}
$B!!(BWinZip 10.0 $B$N7g4Y$K$D$$$F$O!"(B
WinZip 10.0 Build 7245
$B$r;2>H!#(B
$B!!(BWinZip 10.0 $B$K4^$^$l$k(B ActiveX $B%3%s%H%m!<%k$K7g4Y!#96N,(B web $B%Z!<%8$K$h$C$FG$0U$N%3!<%I$r
2006.11.16 $BDI5-(B:
$B!!(BZDI-06-040: WinZip FileView ActiveX Control Unsafe Method Exposure
Vulnerability
$B!!(BWindows 2000 / XP (32bit) / Server 2003 (32bit) $B$K7g4Y!#(BNetware $B4X78$N7g4Y$,(B 2 $BE@B8:_$9$k!#(B
- Microsoft NetWare $BMQ$N%/%i%$%"%s%H(B $B%5!<%S%9$N%a%b%j$NGKB;$N@HCVE-2006-4688
- NetWare $B%I%i%$%P$N%5!<%S%95qH]$N@HCVE-2006-4689
$B!!(Bpatch $B$,$"$k$N$GE,MQ$9$l$P$h$$!#$J$*!"(B64bit $BHG$N(B Windows XP / Server 2003$B!"$*$h$S(B Windows Vista $B$K$3$N7g4Y$O$J$$!#(B
$B!!(BAPSA06-01: HTTP header injection vulnerabilities in Adobe Flash Player
$B$N7o!#(B
Flash Player 9.0.28.0 $B$G=$@5$5$l$F$$$k!#(B
$B$G$b(B Windows / Mac OS X $BHG$7$+$J$$$7!#(BLinux $B$H$+$N?M$O$I!<$9$s$N(B?
2006.11.16 $BDI5-(B:
$B!!$i$`$8$#(B $B$5$s$+$i(B ($B>pJs$"$j$,$H$&$4$6$$$^$9(B):
http://labs.adobe.com/downloads/flashplayer9.html
$B$r8+$k8B$j!"LdBj$N(BLinux$BHG$O(B9.0.21.55$B$,(BSA$B$HF1$8(B2006/10/18$B$K8x3+$5$l$F$$$k$h$&$G$9!#(BSecurity Bulletin$B$G$O(B9.0.20$B0J>e$K$7$m!"$H$"$k$o$1$G$9$7!"(BSA$B$H(BPlayer$B$N8x3+F|IU$,0lCW$7$F$$$k$3$H$+$i9M$($k$HF1%P!<%8%g%s$G$OBP1~:Q$_$J$N$G$O$J$$$G$7$g$&$+!)(B
$B!!4XO"(B: Beta Refresh on Adobe Labs: Flash Player 9 for Linux beta now available (Emmy Huang, 2006.10.18)$B!#$=$N8e!"(BWindows / Mac OS X $BHG$K$D$$$F$O&B$,FAQ $B$r8+$k$H!"(BFlash Player 9 for Linux $B@5<0HG$OMhG/$K$J$i$J$$$H=P$J$$$h$&$G!#(B
2006.11.22 $BDI5-(B:
$B!!(BFlash Player 9 for Linux 9.0.21.78
$B$,=P$?$h$&$G$9(B: Linux Beta 2 on Adobe Labs
(Emmy Huang, 2006.11.20)
2007.01.18 $BDI5-(B:
$B!!(BFlash Player 9 for Linux $B@5<0HG$,=P$?$h$&$G$9(B:
Adobe Flash Player 9 for Linux now available on adobe.com
(Emmy Huang, 2007.01.16)
$B!!(Btrac 0.10.2 $BEP>l(B$B!#(B0.10.1 $B$G$N(B CSRF $B@H
$B!!(BNVD: CVE-2006-5878
$B!!(BAdobe software $B$H$$$C$F$b$$$m$$$m$"$k$+$i$J$"!D!D!#(B
$B!!(BNucleus 3.23 $B0JA0$K(B XSS $B7g4Y$,$"$j!"(B3.24 $B$G=$@5$5$l$?LOMM!#(B
$B$7$+$7!"(BNucleus $BF|K\8lHG(B
$B$O$^$@(B 3.23 $B$J$s$@$h$M!#(B
2007.01.16 $BDI5-(B:
$B!!(BCVE-2006-6920$B!#(BNucleus 3.24 $BF|K\8lHG%j%j!<%9(B (Kimitake's blog, 2006.11.17)$B!#(B
$B!U(B
$B%&%$%k%9$H%9%Q%`$N!HL)@\$J4X78!I$,%I%a%$%sL>$GL@$i$+$K(B
($BF|7P(B IT Pro, 11/13)$B!#(B
$B85$M$?$N(B
Connecting the Warezov domain dots
(F-Secure blog, 11/11) $B$r8+$?J}$,$o$+$j$d$9$$$+$b$7$l$^$;$s!#(B
$B!U(B
$B!V(BXSS$B@H
($BF|7P(B IT Pro, 11/13)$B!#(Boffice $B$5$s$O2?G/$bA0$K;XE&$7$F$$$?$h$J$"!#(B
$B!U(B
$B$^$?(B Google$BH,J,$+(B?
($B?eL57n$P$1$i$N$($SF|5-(B, 11/13)$B!#$_$?$$$G$9$M!#(B
Yahoo! $B$G$0$0$k(B$B$H$A$c$s$H=P$F$-$^$9$7!#(B
$B!U(B
$B6aL$MhDL?.!!AmL3>J$,Js9pL?Na!!(BIP$BEEOC;v6H!VITF)L@!W(B
($BKhF|(B, 11/13)$B!#$d$C$Q$j$G$9$+!#(B
$B!U(B
$BJF9qKIAm>J!"(B2008$BG/M=;;$GDL>oCFF,7?(BICBM$B$N3+H/M=;;?=@A!&CO5e$N$I$3$G$b(B1$B;~4V0JFb$K967b2DG=(B
(technobahn, 11/12)
$B!U(B
$BJF73$,?t(B100$BK|%I%k$rEj$8$F3+H/$7$?EE;RK]Lu5!!"%$%i%/CsN1J<;N$NI>2A$O!V(B100$B!s;H$$J*$K$J$i$J$$!W(B
(technobahn, 11/10)$B!#@$$NCf87$7$$!#(B
$B%U%l!<%:%l!<%?!<$N3+H/$K$"$?$C$F$O%"%i%S%"8l$KBP$7$F%$%i%/$G;H$o$l$F$$$kJ}8@$N%$%s%H%M!<%7%g%s$rIU$1$k$J$I$N9)IW$,
$B$=$N$?$a!"0l8+!"@5$7$$%"%i%S%"8l$,H/2;$5$l$?$h$&$K;W$($F$b%$%i%/$N8=CO?M$K$O$^$C$?$/M}2r$G$-$J$$2;@<$H$J$C$F$$$?$H$$$&!#?^$i$:$bJF9q$K$O%"%i%S%"$N8@8l$K@:DL$7$?8&5f
$B!!!V%?%b%j$N%a%A%c%/%A%cCf9q8l!W$rC}$kCf9q8lK]Lu5!!"$_$?$$$J$b$N$+!D!D(B?
$B!U(B
$BJF6u73$NE7J84QB,=j!)BP1R@1%l!<%6!<%S!<%`J<4o!V%9%?!<%U%!%$%d!
(technobahn, 9/7)
$B!U(B
$B1`EDF;IW!VB"=P$7%;%-%e%j%F%#!W(B: $B%M%C%H:>5=$N6<$7$J$s$F
($BF|7P(B BP, 11/8)
$B!U(B
E6 on WindowsXPsp2 $B%9%/%j%W%H$G%]%C%W%"%C%W$5$l$?%"%I%l%9%P!<$N$J$$(Bwindow$B$N%?%$%H%k%P!<$N(BURL$BI=<($r?.MQ$7$F$O$$$1$J$$(B (hoshikuzu | star_dust $B$N=q:X(B, 11/10)$B!"(B
$B:rF|=q$$$?(BIE6$B$N%?%$%H%k%P!<$&$s$L$s(B
(hoshikuzu | star_dust $B$N=q:X(B, 11/12)$B!#;EMM$@$=$&$G$9!#(B
$B!U(B
$B$D$$$K8x3+$5$l$?!V
($BF|7P(B IT Pro, 11/13)
$B!U(B
$B!XCf9q$,@$3&$r%a%A%c%/%A%c$K$9$k!Y$NCx
($BF|7P(B BP, 11/13)
$B!U(B
PGP$B!"6&M-%U%!%$%k$N0E9f2=@=IJ$J$I4k6H8~$1@=IJ$NF|K\8lHG$rH/I=(B
(Internet Watch, 11/13)
$B!U(B
$B%^%$%/%m%=%U%H!"%9%Q%$%&%(%"BP:v%=%U%H$r@5<08x3+(B
($BF|7P(B BP, 11/10)
$B$J$*!"(B11$B7n(B10$BF|$N8a8e(B4$B;~;~E@$G%$%s%9%H!<%i!V(Bwindowsdefender.msi$B!W$NH/9T85$,!VITL@$JH/9T85!W$H$J$C$F$$$k!#$3$NE@$K$D$$$F$O!"!V(B11$B7n(B10$BF|Cf$K$OH/9T85$r=$@5$7$?$b$N$r%"%C%W%m!<%I$9$k!W!J%^%$%/%m%=%U%H!K!#$[$\LdBj$O$J$+$m$&$,!"H/9T85$,%^%$%/%m%=%U%H$G$"$k$3$H$r3NG'$G$-$k$h$&$K$J$C$F$+$i%$%s%9%H!<%k$7$?J}$,L5Fq$@$m$&!#(B
$B!!$"$A$c!pJs$"$j$,$H$&$4$6$$$^$9!#$5$-$[$I%@%&%s%m!<%I$7$F$_$?$i!"(B2006/11/10 13:30:32 $B$K=pL>$5$l$F$^$7$?!#(B
$B!U(B
Windows Vista$B$N%;%-%e%j%F%#%,%$%I8x3+(B
(ITmedia, 11/11)
$B!U(B
mixi$B!"MxMQ$NCm0U$r99?7!#!V(Bmixi$B$r0BA4$K;H$&$?$a$K!W$N9`$r?7@_(B
(Internet Watch, 11/10)$B!#$X$'!#(B
$B!U(B
$B%;%-%e%j%F%#>c32>pJs$r<+<#BN4V$G6&M-$9$k!V<+<#BN(BISAC$B!WZ
(Internet Watch, 11/13)$B!#$X$'!#(B
$B!U(B
eEye$B;qNA%@%&%s%m!<%I(B
($B=;>&>pJs%7%9%F%`(B) $B$+$i!"(BeEye Security Forum $B$N;qNA$r%@%&%s%m!<%I$G$-$k$h$&$K$J$C$F$$$^$9!#(B
$B!U(B
Spam Killer $B$K$*$1$k%9%3%"%l%Y%k!JDc(B/$BCf(B/$B9b!K$NJ,N`$*$h$S%F%9%H%9%Q%`%a!<%k$K$D$$$F(B
($B%^%+%U%#!<(B)$B!#(B
GTUBE (Generic Test for Unsolicited Bulk Email)
$B$H$$$&!"(Beicar.com $B$_$?$$$J$b$N$,$"$k$N$@$=$&$G!#(B
$B!!4XO"(B: $B%9%Q%`%a!<%k5Z$S%U%#%C%7%s%0%a!<%k$N%F%9%H%9%H%j%s%0(B ($B%^%+%U%#!<(B)$B!#(BGTphish
$B$H$$$&$b$N$b$"$k$N$@$=$&$G!#(B
$B!U(B
$B%a!<%+!<@=%Q%=%3%s$GI=<($5$l$k9-9p$O!"0-
(Semplice, 11/13)$B!#$&!<$`!D!D!#(B
$B!U(B
$BEE;REjI<(B $B;21!A*$NF3F~8+Aw$j(B
($B$^$k$A$c$s$N>pJs%;%-%e%j%F%#5$$^$0$lF|5-(B, 11/12)$B!#8-L@$JH=CG$@$H;W$$$^$9!#(B
$B!U(B
$B%&%$%k%9$NG:$_$r2r>C(B
(apple)$B!#8=C$5$l$k$H;W$$$^$9!#$7$+$7!"$@$+$i$H8@$C$F?/F~$5$l$?$j96N,$5$l$?$j$7$J$$$o$1$G$O$"$j$^$;$s!#(B
$B!!(BApple $B$K$O!"$3$&$$$&$3$H$r8@$&A0$K!"<+/$J$$$N$O!"C1$K(B Mac $B$,%^%$%J!<$J$@$1$@$H;W$$$^$9$7!#(B
$B!U(B
$BBh(B 1 $B2s(B Admintech.jp $B%3%_%e%K%F%#@_N)5-G0JY6/2q(B (admintech.jp)$B!#(B
2006.12.02$B!"El5~ET=BC+6h!"L5NA!#(B
$B!U(B
$BK\Ev$KI]$$!V%Q%9%o!<%IGK$j!W(B
$B!A%O%K!<%]%C%H$K$h$kD4::7k2L$+$i!A(B
($BF|7P(B IT Pro, 11/13)
- SONY $B@=%P%C%F%jJ}LL(B
-
$B!!(BEPSON $B$,8r49:n6H$r3+;O$7$^$7$?(B:
- $B%^%$%/%m%=%U%H(B $B%;%-%e%j%F%#(B $B%"%I%P%$%6%j(B (927892)
XML $B%3%"%5!<%S%9$N@H
-
$B!!96N,%3!<%I(B (milw0rm):
- 2006 $BG/(B 10 $B7n$N%;%-%e%j%F%#%j%j!<%9(B
-
$B!!(B[$B%;%-%e%j%F%#?GCG(B]$B$r
($B%H%l%s%I%^%$%/%m(B)
$BJ@]$,2sHr$5$l$k$3$H$r3NG'$7$F$$$^$9!#(B
[MS06-061] Microsoft XML $B%3%"(B $B%5!<%S%9(B 6.0 $BMQ$N%;%-%e%j%F%#99?7%W%m%0%i%`(B
[MS06-061] Microsoft XML $B%3%"(B $B%5!<%S%9(B 4.0 SP2 $BMQ$N%;%-%e%j%F%#99?7%W%m%0%i%`(B
$B!!$&!<$s!D!D!#(BMS06-061
$B$N!V$3$N%;%-%e%j%F%#99?7%W%m%0%i%`$K4X$9$k$h$/4s$;$i$l$k
- PowerPoint$B$K?7$?$J@HZ%3!<%I$b4{$K8x3+(B
-
$B!!$3$l$G$9$,!"G$0U$N%3!<%I$r
$B!U(B
$BJFCf4VA*5s!!N>?X1D$,LBOG%a!<%k9g@o!!%;%-%e%j%F%#!<2q
($BKhF|(B, 11/10)$B!#$&$o!"(BUSA $B$G$O(B spam $BA*5s1?F0$O9gK!$J$N$+!#(B
Politicans add to the spam problem in run-up to US elections
(Sophos, 11/9)
$B!U(B
Windows Defender $BF|K\8lHG(B
(Microsoft)$B!"@5<0HG$,=P$?$=$&$G$9!#(B
$B!V%@%&%s%m!<%IHG$N(B Windows Defender $B$K4X$7$F$NLd$$9g$o$;$,$G$-$k!"L5NA$N%5%]!<%H(B $B%$%s%7%G%s%H(B 2 $B2sJ,$,IU$$$F$$!W$k$=$&$G$9!#(B
$B!U(B
$BL5=~$N%9%Q%$%&%'%"BP:v$@$1$GK\Ev$K0B?4$J$N$+(B
(ZDNet, 11/9)$B!#!VM-=~$N%9%Q%$%&%'%"BP:v$@$1$GK\Ev$K0B?4$J$N$+!W(B
$B$H$+!"!VM-=~$HL5=~$N%9%Q%$%&%'%"BP:v%=%U%H$r%$%s%9%H!<%k$7$?$,!"$3$l$GK\Ev$K0B?4$J$N$+!W$H$+$$$&5-;v$b=q$+$l$k$Y$-$@$h$M!#(B
$B!U(B
JNSA$B%;%-%e%j%F%#@=IJ%P%$%d!<%:%,%$%I(B
$B$H$$$&%5%$%H$,$G$-$?$=$&$G$9!#(B
$B!U(B
Firefox 1.5$B$N%5%]!<%H$O(B4$B7n(B24$BF|$^$G(B
(ITmedia, 11/10)
$B!U(B
$BJF735!$KJ|
($B2-Fl%?%$%`%9(B, 11/8)$B!#%P%i%s%9%&%(%$%H$NOC!#(B
$BL14V9R6u5!$G$O%?%s%0%9%F%s$X$N8r49$,?J$s$G$$$k$h$&$G$9$,!"73MQ5!$G$O$^$@$^$@$J$s$G$9$+$M!#$^$!!"K$CF$K$^$G;H$&9q$@$+$i!"%P%i%s%9%&%(%$%H$0$i$$$O$<$s$<$sL5LdBj$J$s$@$m$&$J$"!#(B
coyote $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B4XO"(B:
$B!U(B
$B%*!<%9%H%i%j%"$N43$P$D!"2a5n(B1000$BG/$G:G0-$K$J$k2DG=@-!a@/I\Ev6I
(infoseek, 11/7)$B!#(Bcoyote $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B43$P$D$O4{$K#5G/0J>eB3$$$F$*$j!"%*!<%9%H%i%j%"$NG@CO$NH>J,0J>e$KHo32$,=P$F$$$k!#(B
$B!U(B
$BJ82JAj$K<+;&M=9p!V9b9;FsG/$N=w$G$9!W(B
($B%K%C%+%s%9%]!<%D(B, 11/10)
$B$7$+$7!"#2DLL\$Nu$@!#(B
$B!U(B
$B$d$i$;
($BKhF|(B, 11/10)
$B!U(B
DirectX $B4XO"$N=$@5%W%m%0%i%`$rE,MQ$9$k$?$a$N%,%$%I(B
(updatecorp.co.jp, 11/10)
$B!U(B
SSH$BK\$r;}$C$F%;%-%e%a%b(BBoF$B$K9T$/$H!D(B
($B%*%i%$%j!<(B, 11/10)$B!#%5%s%W%k%Z!<%8$b8x3+$5$l$F$$$^$9!#(B
$BIUO?(B G $B$O(B JPCERT/CC $B$N>.5\;3$5$s$K$h$k4s9F$G$9!#(B
$B!U(B
Mac OS X$B$r%;%-%e%"$K$9$k!V(BSEDarwin$B!W$N%=!<%9%3!<%I$,8x3+(B
(MYCOM $B%8%c!<%J%k(B, 11/10)
$B!U(B
DNS$B%5!<%P$X$N967b$rB`$1$k(BPHREL
(Open Tech Press, 11/10)$B!#%l!<%H$@$1$r8+$F$$$k$h$&$J$N$GCm0U!#(B
$B!U(B
$B9b66E/:H;a0U8+DD=R(B($B654pFCL>8E20COJ}8xD02q(B)
($BJ]:dE8?M$N$I$3$I$3F|5-(B, 11/9)
$B0BG\
($BCfN,(B)
$BFn86HK$O!"El5~Dk9qBg3X$N:G8e$NAmD9!"?7@)El5~Bg3X$N=iBe$NAmD9$G$"$j!"Ev;~5.B21!5D0w$r7sL3$7!"!V650i:~?70Q0w2q!W0Q0wD9$H$7$F650i4pK\K!0F:nDj$NCf?4?MJ*$G$"$j$^$7$?!#Fn86$O$3$NJ8>O$G!"650i4pK\K!$,!V%"%a%j%+$N6/MW$K$h$C$F$D$/$i$l$?$b$N$G$"$k$H$$$&22@b!W$,N.I[$5$l$F$*$j!"!V0lIt$N?M$?$A$N4V$K$O!"F|K\$,FHN)$7$?:#F|!"$o$l$o$l$N
$B!U(B
$B%+!<%M%k8&5f
(ITmedia, 11/9)$B!#(B
Process Monitor (Microsoft)
$B$NOC$J$N$@$1$I!">R2p$N;EJ}$,JP$C$F$k!#BP>]$,%^%k%&%'%"$G$"$kI,MW$OA4$/$J$$$7!#(B
$B!U(B
blog $B$H(B CM
$B!U(B
$B;~Be$O%P%$%J%j!)Dc%l%$%d!
($BF|7P(B IT Pro, 11/10)
$B!U(B
$B%^%$%/%m%=%U%H$,(BVista/Office 2007$B$N40@.$r>G$C$?M}M3(B
($BF|7P(B IT Pro, 11/10)$B!#(BSA! SA!
$B!!M=9p=P$^$7$?!#(B
- XML $B%3%"%5!<%S%9(B: 1$B!#:GBg?<9oEY$O!V6[5^!W(B
- Windows: 5$B!#:GBg?<9oEY$O!V6[5^!W(B
- $B0-0U$N$"$k%=%U%H%&%'%"$N:o=|%D!<%k$N99?7(B
- $B%;%-%e%j%F%#0J30$NM%@hEY$N9b$$99?7%W%m%0%i%`(B
- WU / SUS: $B$J$7(B
- MU / WSUS: 2
$B!!(BOffice $B$H$+(B Exchange $B$H$+$N(B patch $B$O$J$$LOMM!#(B
$B!!4XO"(B: 11 $B7n$N%j%j!<%9M=Dj(B ($BF|K\$N%;%-%e%j%F%#%A!<%`$N(B Blog, 2006.11.10)
$B!U(B
$B!VCx:n8"J]8n4|4V$N1dD9!"5DO@$r?T$/$;!W(B -- $B%/%j%(%$%?!<$dJ[8n;N$,CDBNH/B-(B
(ITmedia, 11/8)
$B!U(B
$BCf9q@/I\!"!V%$%s%?!<%M%C%H$NE(!WG'Dj$KH?O@(B
(ITmedia, 11/9)$B!#(B
$B9q6-$J$-5-
(ITmedia, 11/8) $B$X$NH?1~$i$7$$!#$^!"Cf9q$@$7!#(B
$B!U(B
$B9q;:M#0l$N
(NTT, 11/8)$B!#(BOpenSSL 0.9.8c $B0J9_$K(B Camellia $B$,4^$^$l$F$$$k$=$&$G!#(B
$B$?$@$7!"%G%U%)%k%H$G$O%3%s%Q%$%k$5$l$J$$!#(Bopenssl-0.9.8c $B$N(B Configure $B$r8+$F$_$k$H!"(B
my %disabled = ( # "what" => "comment"
"camellia" => "default",
"gmp" => "default",
"mdc2" => "default",
"rc5" => "default",
"shared" => "default",
"zlib" => "default",
"zlib-dynamic" => "default"
);
$B!!(B./Configure enable-camellia $B$H$+$9$kI,MW$,$"$k$N$+$J!#(B
$B!U(B
PacSec.JP
($BF|K\$N%;%-%e%j%F%#%A!<%`$N(B Blog, 11/9)$B!#(B
http://pacsec.jp/
$B$r$_$k$H!"$3$s$J$N$,(B:
$B%W%l%<%s%F!<%7%g%s%j%9%H(B
($BCfN,(B)
MSKK$B$N%;%-%e%j%F%#4pK\(B - TBA, Microsoft
$B!U(B
$B%G!<%?%Y!<%9!&%;%-%e%j%F%#$G6H3&CDBN$,%,%$%I%i%$%s8x3+(B
($BF|7P(B IT Pro, 11/8)
$B!U(B
$B%=%U%H%P%s%/B9
($BF|7P(B IT Pro, 11/8)$B!#(B
$B!V(BSIM Lock$B$r2r=|$7$?7HBSEEOC$,=P2s$C$?$j$7$?$i!"%*%l%*%l:>5=$,A}$($k$8$c$J$$$+!W(B
$B$H8@$o$l$?$j$7$J$$$3$H$r5'$j$^$9!#(B
SIM$B%m%C%/$,2r=|$5$l$k$H!"$3$&$7$?%$%s%;%s%F%#%V$rA0Ds$K$7$?;v6H%b%G%k$,:,K\$+$iJ$$k2DG=@-$,$"$k!#FC$K(BNTT$B%I%3%b$O!":GBg$K%=%U%H%P%s%/%b%P%$%k$,(BSIM$B%m%C%/2r=|$KF'$_@Z$l$P!"$=$N1F6A$r:G$b6/$/
$B!!6H3&$,$b$&$A$g$C$H$*$b$7$m$/$J$k(B?
$B!U(B
DNSRBL $BOC(B
$B!U(B
$B$$$8$a!'@8EL$NHo322hA|$,%M%C%H$K!!;%KZ$N9b9;$K935D;&E~(B
($BKhF|(B, 11/9)
$B!U(B
$BJF9qKID941$r99E3!!BgE}NN$OGTKL@k8@!!JFCf4VA*5s(B
(asahi.com, 11/9)$B!#%i%`%:%U%'%k%I$5$s$5$h$&$J$i!#(B
$BJF9qKID94199E3!'?7G$$N%2!<%D;a$O$3$s$J?M(B
($BKhF|(B, 11/9)
$B!!4XO"(B: $BJF2<1!5DD9!'%Z%m%7=w;K$O%V%C%7%eBgE}NN$N!VE7E(!W(B ($BKhF|(B, 11/9)
$B$Z%m%7;a$OA*5s@o$GL1l9g!"#0#7G/#17n$NO"K.5D2q3+2q8e!V#1#0#0;~4V!W$G:GDcDB6b$NCM>e$2$dJFF1;~B?H/%F%mJs9p=q$N40A4
$B!U(B
NHK$BJ|AwL?Na!!EE4F?3$,!VE,Ev!W$HEz?=(B
($BKhF|(B, 11/8)$B!#(BNHK $B$b!"%F%-%H!<$K$d$C$H$1$P!<(B?
$B!U(B
$B%"%I%&%'%"Bg
(internet.com, 11/6)$B!#(Bcoyote $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
$B:GE,2=%&%$%k%9%Q%?!<%s%U%!%$%k%j%j!<%9$N$*CN$i$;(B
($B%H%l%s%I%^%$%/%m(B)
$B"#%j%j!<%93+;OM=DjF|;~(B
2006/11/15$B!!(B13:00$B:"(B
($BCfN,(B)
*2 VSAPI 7.51$B0JA0$N8!:w%(%s%8%s$G$O!":GE,2=%&%$%k%9%Q%?!<%s%U%!%$%k$rG'<1$G$-$:!"%&%$%k%98!:w$,IT2DG=$K$J$j$^$9!#(B($B>.EgCm(B: VSAPI 8.000$B0J>e$X$N(B) $BAa5^$J%"%C%W%G!<%H$r$*4j$$$$$?$7$^$9!#(B
$B!U(B
IIS/6.0$B$N(B"DisableServerHeader"$B$O4|BTDL$j$KF0$+$J$$(B
(Eiji James Yoshida$B$N5-O?(B, 11/8)$B!#(B
IIS 6 $B$N%5!<%P!<(B $B%P%J!<$N:o=|(B (Microsoft)
$B$r8+$k$H(B DisableServerHeader $B$,7G:\$5$l$F$$$^$9$,!"(B
$B%*%j%8%J%k1Q8lHG$G$"$k(B
Removing the Server Banner in IIS 6
(Microsoft) $B$r8+$k$H!"(BDisableServerHeader $B$O7G:\$5$l$F$$$^$;$s!#(B
Having said that, you can use URLScan to remove the banner with the RemoveServerHeader setting in the URLScan.ini file (for both IIS 5 and IIS 6).
$B!!$H$$$&$o$1$G!"(BDisableServerHeader $B$,8z$+$J$$$N$O;EMM$J$s$8$c$J$$$+$7$i!#(B
$B4XO"(B:
$B!U(B
Li$B%$%*%s(B2$Be$N%P%C%/%"%C%W;~4V$b2DG=$K(B
($BF|7P(B Tech On, 11/7)$B!#MxE@$r0zMQ(B:
- $B1tC_EECS$rMxMQ$9$k4{B8$N(BUPS$B$KHf$Y$F!$BN@Q$OLs(B66%$B$K!$$B1tC_EECS$r;H$o$J$$$?$a!$EECS%;%k$r4^$a$?(BUPS$B@=IJA4BN$r2$=#$NM-32J*$B1tC_EECS$G$O(B5$BG/$K(B1$B2s$N%a%s%F%J%s%9$,I,MW$@$C$?$,!$(B8$BG/$K(B1$B2s$G:Q$`(B
$B!!0lJ}$G!"(B$B%j%A%&%`%$%*%sEECS(B$B$O(B$B$=$b$=$bG3$($k$b$N(B$B$J$o$1$G$9$,(B ($B"v$b!"$(!"$"!"$,!"$l!A(B)$B!"!V$H$K$+$/0BA4BP:v$K;~4V$r$+$1$?!W$N$@$=$&$G$9!#(B
$B$^$?!"(B
$B2A3J$O!$(BDL9126-1200JW$B$,(B35$BK|1_!$(BDL9127-1500JW$B$,(B45$BK|1_$G$"$k!#(B
$B$H!"$+$J$j$*9b$$@=IJ$J$N$G!"!V$I$&$7$F$b!W$H$$$&>l9g$G$J$$$HF3F~$7$K$/$=$&!#(B
$B!!4XO"(B: $B6H3&=i!"%j%A%&%`%$%*%sEECSEk:\>.7?(BUPS$B!X(BDL9126-1200JW$B!"(BDL9126-1500JW$B!Y$r=P2Y3+;O(B ($B%G%s%;%$!&%i%`%@(B, 11/7)
$B!U(B
$B%&%$%k%9%P%9%?!<(B2007 - 15.x: Windows$B$N%m%0%*%U$KD9$$;~4V$,$+$+$k(B
($B%H%l%s%I%^%$%/%m(B, 11/8)$B!#(BWindows $B$N$;$$$@$=$&$G$9!#(B
$B!U(B
Windows$B$K$*$1$k%P%C%U%!%*!<%P!<%U%m!<(B(1)
(IT$B%;%-%e%j%F%#$N%"%i%$=P$7(B, 11/8)$B!#(B
$B$3$N$H$3$m(B web $B%"%W%j$N7g4YJs9p$,GzH/E*$KA}$($F$^$9$+$i!"B>$N$b$N$OAjBPE*$K$O8:$C$F$^$9$h$M!#(B
$B$$$^$I$-!V(Bweb $B%"%W%j$G(B buffer overflow$B!W$O$"$jF@$^$;$s$+$i!D!D!#(B
$B!U(B
$B7P:Q;:6H>J(B $B%Q%V%3%a(B $B>pJs%;%-%e%j%F%#@/:v$K78$k4pK\E*!&M%@hE*$J2]BjEy(B
($B$^$k$A$c$s$N>pJs%;%-%e%j%F%#5$$^$0$lF|5-(B, 11/9)$B!#(B
$B2]Bj$r<($;$P$$$$$N$+$J!#(B
$B!!%&%$%k%9%P%9%?!<(B $B%3!<%]%l!<%H%(%G%#%7%g%s(B 6.5 / 7 / 7.3$B!"%&%$%k%9%P%9%?!<(B $B%S%8%M%9%;%-%e%j%F%#(B 3.0$B!"(BTrend Micro Client/Server Security 2.0 $B$K7g4Y!#(B
$B%7%9%F%`;~9o$,(B1996$BG/$+$i(B2037$BG/$^$G$N4V$K@_Dj$5$l$F$$$J$$>l9g$K!"=i4|2=$K<:GT$9$k!#EECS@Z$l$H$+$G%7%9%F%`;~9o$,(B 1970 $BG/$H$+$K$J$C$F$7$^$C$F$$$k$H!"(B
OS $B5/F0(B $B"*(B VB $B5/F0<:GT(B $B"*(B $B$=$N8e(B NTP $B$H$+$G;~9o$r9g$o$;$F$b(B VB $B$O;`$s$@$^$^!"$H$$$&$3$H$K$J$k$N$+$J!#;~9oF14|$7$F$$$k$H%H%i%V%k%7%e!<%H$K
$B!!(Bpatch $B$,$"$k$N$GE,MQ$7$F$*$-$^$7$g$&!#(B
$B!!4XO"(B: $B%&%$%k%9%P%9%?!<(B $B%3!<%]%l!<%H%(%G%#%7%g%s(B 6.5 $BHG(B Security Patch(Build_1439)$B$N35MW$*$h$SE,MQJ}K!(B [Solution ID 2060870]
($B%H%l%s%I%^%$%/%m(B)
$B!U(B
AMERICA VOTE 2006
(CNN)$B!#M=A[$5$l$F$$$?$H$O8@$&$b$N$N!"9k2w$J7k2L$G$9$M!#(B
$B!U(B
$BN54,5>@7
(asahi.com, 11/7)$B!#5-O?E*$J5,LO$@$C$?$h$&$G$9!#(B
$B!U(B
$B!V3KJ]M-!W5DO@$9$i%@%a$O9T$-2a$.!D
($BFIGd(B, 11/8)
$B!U(B
$BLBOG%a!<%kAw?.HH$O!H2/!I$NMx1W$rF@$F$$$?(B
($BF|7P(B BP, 11/6)
$B!U(B
Wizard Bible vol.29 (2006,11,7)
(wizardbible.org)$B!#6=L#?<$$FbMF$,$?$/$5$s!#(B
$B!!1QLu$O2??M$+$N=w@-$,8rBe$G9T$C$F$$$k!#%$%d%[%s$J$N$GK]Lu
$B!!6=L#?<$$$C$F$=$3$+$h(B! > $B26(B
$B!U(B
$BEl>Z!"GdGc%7%9%F%`$NCmJ8=hM}G=NO$r(B1$BF|Ev$?$j(B1400$BK|7o$KA}6/(B
($BF|7P(B IT Pro, 11/6)
$B!U(B
$BF|K\HG(BSOX$BK!!Vl!"(BIT$BE}@)$K4X$7$FNc<((B
($BF|7P(B IT Pro, 11/6)
$B!U(B
$B;3C+9d;K$N%^%s%9%j!
(Internet Watch, 11/8)
$B!U(B
$B!V%5%V%^%j%s!WFb3U$,Ib>e$7$?$H$-F|K\$K2?$,5/$-$k(B
($BF|7P(B BP, 11/6)
$B!U(B
Power Mac G5 $B$NEE8;%f%K%C%H$NLdBj$K4X$9$k%j%Z%"%(%/%9%F%s%7%g%s%W%m%0%i%`(B
(Apple)
$B!U(B
Trend Micro Control Manager - 3.x: $BLdBjH/@8;~$ND4::$KI,MW$J>pJs0lMw(B
($B%H%l%s%I%^%$%/%m(B)
$B!U(B
$B;W$$9~$_$GI>2A$7$F$$$^$;$s$+!)(B
($BF|7P(B IT Pro, 11/7)
$B!!$?$@$7!$F1$87n4)%"%9%-!<$NJL$N5-;v$G!$7HBSEEOC$N(BSIM$B%+!<%I%m%C%/$r2r=|$7$FHNGd$7$F$$$?6H2A$G$-$k!#Bg$KM}M3$,$"$C$?$N$@$m$&$+!J;2>H!'!V(BJASJAR$B9u?'3WL?O?(B$B!W!K!#(B
$B!!$*!$B>\:YJs9p(B$B!W(B(JASJAR$B9u?'3WL?O?(B, 9/14) $B$rFI$s$G$_$k$H!"(B
$BN&$5$s$r
$B!V$*$^$($O<+J,$,$J$5=$,A}$($k$8$c$J$$$+!W(B
$B$(!P$o$J$$$G$/$@$5$$!#$3$l!"Bg$^$8$a$K8@$C$?$=$&$G$9!#(B
$B;d$O7Y;kD#AH?%HH:aBP:v0l2]$NCN<1?e=`$NDc$5$K!">P$$$rDL$j1[$7$F!"4(5$$,$7$^$7$?!#(BSIM Lock$B$r2r=|$7$?EEOC$O=jM-A0$G$b=q$$$F$$$J$1$l$P!"=jM-e$G$N7@Ls$rH<$$$^$9!#C
$B!U(B
DNS $B%=%U%H%&%'%"%"%C%W%G!<%H>pJs(B
(JPRS, 11/7)$B!#(BBIND 9.2.6-P2 / 9.3.2-P2 $B$,=P$F$$$^$9!#(B
$B!U(B
Improving SSL: Extended Validation (EV) SSL Certificates Coming in January
(IEBlog, 11/7)$B!#(BExtended Validation (EV) SSL Certificates $B$H$O2?$J$N$+!"$,$5$C$Q$j$o$+$i$J$$J8>O$G$9$,!"(BComodo EV SSL Certificates
(enterprisessl.com) $B$K$h$k$H!"(B
Q: Terms like "High Assurance", "Extended Validation", "Domain only", "Low Assurance" and "Enhanced Validation" are all being used in describing different types of SSL certificates. What's the difference between these SSL certificates?
A: The main difference between all these certificates is the level of identity verification as follows:
- "Domain only" certificates, also known as "low assurance" certificates, only verify domain ownership. These are certificates most often sold by GeoTrust and GoDaddy. Unfortunately, these certificates provide virtually no identity assurance whatsoever since domain purchasing requires no identity verification.
- "High Assurance" certificates refer to certificates that include identity validation from a Certification Authority using currently established and accepted vetting processes. These SSL certificates are seen as significantly superior to domain only SSL certificates because users can trust that an objective third party - a certification authority, has verified the identity of the website.
- "Extended Validation" (EV) SSL certificates are the newest option for eMerchants as these SSL certificates require the most stringent verification processes as outlined in the guidelines developed by CA/B Forum. The advantage of these the next generation high assurance SSL certificates is that these certificates work with the new security browsers to include a new visual indicator that confirm the site's identity.
$B!!$3$l$i$,6hJL$5$l$F07$o$l$k$h$&$K$J$k$H$$$&$3$H$+$7$i(B?
$B!U(B
$B%=%U%)%9!":G?7$N!V%9%Q%`Aw?.9q%o!<%9%H(B12$B!W$rH/I=(B
(Sophos, 11/6)$B!#6b%a%@%k$*$a$G$H$&(B! > USA
$B$=$NB>$NBg$-$JF0$-$H$7$F$O!"Cf9q$+$i$NAw?.HfN($NBgI}8:>/$,$"$2$i$l$^$9!#Cf9q$OBh#2;MH>4|$K$O%9%Q%`A4BN$N(B20.0$B!s$H#4J,$N#1$KGw$k@*$$$G$7$?$,!"Bh#3;MH>4|$K$O(B13.4%$B$H!"#7(B%$B6a$/HfN($r2<$2$^$7$?!#(B
$B!!$X$'!A!#(B
$B!!4XO"(B: Stats > October 2006
(phishtank.com)$B!#$3$A$i$O(B phishing $B%5%$%H$K8B$C$?E}7W!#4Z9q$,(B 14% $B$G$9$+!D!D!#(B
$B!U(B
New! Sysinternals TechCenter
(Sysinternals Site Discussion, 11/6)$B!#$$$m$$$m99?7$5$l$F$^$9!#(B
$B!!(BThunderbird 1.5.0.8 $B=P$^$7$?!#(B$B%;%-%e%j%F%#=$@5$,(B 3 $B7o4^$^$l$F$$$^$9(B$B!#6b;R$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!!(BFirefox 1.5.0.8 $B$H(B
SeaMonkey 1.0.6 $B$b=P$F$^$9!#(B
- SONY $B@=%P%C%F%jJ}LL(B
-
$B!!(BSONY $B$H%7%c!<%W$,8r49:n6H$r3+;O$7$^$7$?(B:
$B!!$"$H!"(BIEEE$B!"%N!<%H(BPC$BMQ%P%C%F%j!<5,3J$r2~Dj$X(B
(ITmedia, 2006.11.08) $B$@$=$&$G$9!#(B
- APSA06-01: HTTP header injection vulnerabilities in Adobe Flash Player
-
$B!!$$$m$s$J>l=j$GDI;n$5$l$F$$$^$9!#(B
$B!!(BOpenSSH 4.5 $B$,=P$^$7$?!#%;%-%e%j%F%#=$@5$,4^$^$l$F$$$^$9!#(B
Fix a bug in the sshd privilege separation monitor that weakened its
verification of successful authentication. This bug is not known to
be exploitable in the absence of additional vulnerabilities.
2006.11.09 $BDI5-(B:
$B!!4XO"(B:
$B!!(BcopSSH $B$O(B Cygwin $B$+$i(B OpenSSH $B$@$1
$B!U(B
$B!V(Bmixi$B$NN"5;!W$G%Q%K%C%/!!%P%00-MQ$G%G%^=P2s$k(B
(ITmedia, 11/6)$B!#$X$'!A!#(B
$B!U(B
$BKL3$F;$GN54,!"#9?M;`K4!!#1?M?4GYDd;_(B
($BCf9q?7J9(B, 11/7)$B!"(B
$BN54,!'KL3$F;:4O$4VD.$GH/@8!!;`
($BKhF|(B, 11/7)$B!#:#8e$O!"$3$&$$$&6/NO$JN54,$,$b$C$HA}$($k$N$G$7$g$&$M!#(B
$B!D!D$H!":rHU:FJ|Aw$7$F$$$?!V(B$B5$8uBg0[JQ(B $BBh#12s!!0[>o5$>]!!CO5e%7%_%e%l!<%?$N7Y9p(B$B!W(B(NHK $B%9%Z%7%c%k(B) $B$r;W$$=P$7$J$,$i;W$C$?$j!#(B
$B!!:#HU$O!"!V(B$BBh#22s!!4D6-$NJx2u$,;_$^$i$J$$(B$B!W$N:FJ|Aw$,$"$j$^$9!#(B
$B!U(B
$B<#0B$O2sI|!)0-2=!)!!HH:aGr=q$H3X
(asahi.com, 11/7)
$B!U(B
$B!V$d$i$;!W%?%&%s%_!<%F%#%s%0!"Fb3UI\$,0MMjG'$aDD
($BFIGd(B, 11/7)$B!"(B
$BFb3UI\!V$d$i$;
($BJ]:dE8?M$N$I$3$I$3F|5-(B, 11/7)
$B!U(B
$B3KO@5DHt$S2P$K<+L1<99TIt$T$j$T$j!!8xL@$OIT2w46$"$i$o(B
(asahi.com, 11/7)$B!#(B
$B<+L1E^!"K=AvCf!#(B
$B!U(B
$B
($B9bB4G'Dj(B($B?7Bg8!(B)$BpJs%;%s%?!<(B)$B!#9q8l!"COM}Nr;K!"8xL1!"?t3X!"M}2J!"309q8l!D!D!#$"$l$'(B? $B!V>pJs!W$,$"$j$^$;$s$h(B?!
$BBg8!$K$9$l$P!"!V>pJs!W$O$$$i$J$$$s$@(B!
$B%0%l%$%H(B!!
$B!U(B
$B9R6u%A%1%C%H%5%$%H$K%;%-%e%j%F%#!<%[!<%k$r8+$D$1$??MJ*$,(BFBI$B$+$i6/@)A\::(B
(slashdot.jp, 11/6)
$B!U(B
$B?7&K!!V<'5$!WF~$j!"
(JANJAN, 11/7)
$B!U(B
$B!V?M$O8+$?L\$,#93d!W$H$$$&%&%=(B
(JANJAN, 11/7)
$B!U(B
$B%$%i%/!'<#0B$r0-2=$5$;$k!X;`$NItBb(B - death squads$B!Y(B
(JANJAN, 11/6)
$B!U(B
$B
$B$G$9$,!"%*%i%$%j!<$+$iGc$&>l9g$O(B
$B$@$=$&$G$9!#$"$H!"(BInternetWeek 2006 $B$N%*%i%$%j!
$B!U(B
$B3+H/ (jumperz.net) $B$,(B version 2.2 $B$K$J$C$F$$$^$9!#(B
Forging HTTP request headers with Flash
$B$d(B
Rapid7 Advisory R7-0026:
HTTP Header Injection Vulnerabilities in the Flash Player Plugin
$B$K$"$o$;$F!"!V%j%U%!%i!<$O(BCSRF$BBP:v$G$O;HMQ$9$k$Y$-$G$J$$!W$H$5$l$F$$$^$9!#(B
$B!U(B
$B!V%U%!%$%k46@w7?%&%$%k%9$,!HI|3h!I!W(B---Symantec$B$N%G%#%l%/%?(B
($BF|7P(B IT Pro, 11/6)
$B%&%$%k%9$N%5%$%:$,>.$5$$$3$H$bH/3P$7$K$/$$M}M3$N0l$D$H$7$F5s$2$k!#46@w$7$F$b!$85$N%U%!%$%k$N%5%$%:$OBg$-$/$OJQ2=$7$J$$!#$H$$$&$N$b!$:G6a$N%U%!%$%k46@w7?$NB?$/$O!VJL$N%^%k%&%(%"$r%@%&%s%m!<%I$7$F@\0-$5$r$7$J$$!W!JF1;a!K!#e$N%5%$%H$KCV$+$l!$IQHK$K!H%P!<%8%g%s%"%C%W!I$5$l$F$$$k$H$$$&!#(B
$B!!$d$C$Q$j(B file integrity checker $B$O=EMW!"$H$$$&$3$H$G!#(B
$B!U(B
$BLV$S$C$7$j%/%i%2$N!HJI!I!!Bg=1Mh$K6lG:$N5y;U(B
($BJsF;%9%F!<%7%g%s(B, 10/31)$B!#KLD+A/$h$j%(%A%<%s%/%i%2$NJ}$,$h$C$]$I6<0R$J$s$@$h$J!D!D!#$3$N$^$^$@$HF|K\$N1h4_5y6H$O2uLG$9$k$h!#(B
$B!!$=$&$$$($P!"(B$B5!L)J8=q$,L@$+$9??
($BJsF;%9%F!<%7%g%s(B, 10/20) $B$H$$$&$N$b$"$j$^$7$?$M!#(B
$B!U(B
$B
($BEl1|F|Js(B, 11/5)
$B!!$H$3$m$,!"(BPTA$B2qD9$O5^MQ$J$I$G%?%&%s%_!<%F%#%s%0$K;22C$7$J$+$C$?!#A[Dj
$B!!$N(B PTA $B$,$d$i$;$BJsF;%9%F!<%7%g%s(B$B$,%9%/!<%W$7$F$^$7$?$M!#(B
$B!U(B
$B86:`NA$KMqI=<($;$:!!;3:j@=%Q%s!"#3K|#8@i%Q%C%/2s<}(B
(asahi.com, 11/7)$B!"(B
$B$*OM$S$H2s<}$N$*CN$i$;(B
($B;3:j@=%Q%s(B, 11/7)$B!#!V%i%s%A%Q%C%/%U%m%^!<%8%e%/%j!<%`!J%+%k%7%&%`F~$j!K!W$@$=$&$G$9!#?7@=IJ$J$N$+!"(B
$B%i%s%A%Q%C%/(B
$B$N%Z!<%8$K$O:\$C$F$J$$$J$"!#(B
$B%$%H!<%h!<%+F2(B $BD>9>DEE9$H%(%k%^!<%k@lLgE9(B: 2006.11 $B$N(B 11/4 $B$N%H%3$K
$B!U(B
ServerProtect for Linux 2.5:
MIRACLE LINUX V4.0(Asianux 2.0) $BBP1~$N$*CN$i$;(B
($B%H%l%s%I%^%$%/%m(B)
$B!U(B
$B$$$8$a<+;&!'J82JAj$"$F$KM=9p.Cf3X@8$NCK;R$+(B
($BKhF|(B, 11/7)$B!#$3$N
$B!!(B$B$$$8$aD4::!'$d$kJ}$,!V0-$$!W$OH>?t0J2
($BKhF|(B, 11/7)$B!#MW$O!"?M4V$J$s$F%P%+$P$C$+$C$F$3$H$@!#(B
$B$G$b!"$=$s$J%P%+6&$N$?$a$K;`$L$N$O$b$C$?$$$J$$$h!#(B
$B!U(B
$B!V%;%k%7%*!W%I%";v8N#1#87o!"Jd=uAuCV:nF0$G;X9|@^$b(B
($BFIGd(B, 11/7)$B!#!V%$!<%8!<%/%m!<%6!u67$rGD0.$G$-$F$$$J$$$@$1(B?
$B%$!<%8!<%/%m!<%6!<$O
$B!!$=$l$C$F!"(B$B%7%e%l%C%@!<;v8N(B$B$HF1:,$J$s$8$c$J$$$N(B?
$B;R6!$rA4$/A[Dj$G$-$F$$$J$$$H$$$&!D!D(B
$B!U(B
$B%7
($BFIGd(B, 11/7)$B!#(BBenjamin $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B;v8N5!$NNY$N%(%l%Y!<%?!<$,:#7n#2!A#5F|$N#4F|4V$K!"CJ:9$N$"$k>uBV$N$^$^Hb$,3+$/$J$I#1#17o$N%H%i%V%k$r5/$3$7$F$$$?$3$H$,$o$+$C$?!#(B ($BCfN,(B) $BF1c$O$J$$!W$H2TF/$r:F3+$7$F$$$k!#(B
$B!!!V860x$,FM$-;_$a$i$l$:!W$C$F!"$=$l$O$$$A$P$s%^%:$$$s$8$c$J$$$N$+!D!D!#(B
$B!U(B
ClamAV
0.88.6 $B$,=P$?$=$&$G$9!#(B
$B!U(B
$B=hJ,$N%a%b(B
($B6K3Z$;$-$e$"F|5-(B, 11/5)
$B!U(B
XSS$B$N
(webappsec.jp)$B!#$$$m$$$m$"$k$s$G$9$M!#(B
$B!U(B
sinFP-2.04 release
(SANS ISC, 11/6)$B!#(BOS fingerprinting tool $B$@$=$&$G$9!#(B
$B!U(B
$B
$B$,(B 2006$BG/(B11$B7n(B22$BF|$KH/Gd$5$l$k$i$7$$$N$G%P%J!<$rE=$C$F$_$k%F%9%H!#(B
$B!U(B
$BHkJ8%7%j!<%:(B:
$B%^%+%U%#!
($BF|N)(B, 11/6)$B!#%^%+%U%#!<$N(B 2007 $B%7%j!<%:$G$@$a$K$J$kLOMM!#(B
$B!U(B
Poderosa
4.10 Beta1 $B$,(B$B=P$F$$$^$9(B$B!#(BOpenSSH $B$N(B Agent Forwarding $B$KBP1~$7$?$=$&$G$9!#(B
$B!U(B
$B#O#P#2#5#B$X$NBP1~$K$D$$$F(B...
(almail.com, info from $BMU$C$QF|5-(B)$B!#(BSMTP $BG'>Z$G!"(BCLAM-MD5 $B$NB>$K(B PLAIN $B$H(B LOGIN $B$KBP1~$7$F$$$k!"(BAL-Mail32 Version 1.13b $B$H$$$&%P!<%8%g%s$,$"$kLOMM!#(B
$B$?$@$7(B AlMail $B$O(B SSL $B$K$OBP1~$7$F$$$J$$$O$:$J$N$G!"(BPLAIN $B$H$+(B LOGIN $B$r;H$&>l9g$O(B
wstone $B$J$I$rJ;MQ$7$^$7$g$&!#(B
$B!U(B
$B@=IJA4LL2s<}!"4k6H$K4XLg(B
($BF|7P(B BP, 11/6)
$B!!$3$s$J%1!<%9$b$"$k!#%8%'%C%H%P%9$NItIJ$r8r49$9$k%N!<%j%D!#(B8$B7n$KF1
$B!!(B2000$BG/$KF1MM$N;v8N$,5/$-!";R2ql$^$G$OIk$$$?$,!"2H$NCf$K$OF~$l$F$b$i$($:!"C4Ev
$B!!$&$%$`!D!D87$7$$!D!D(B
$B!U(B
Trendmicro$B$5$s$,A08~$-$KBP1~(B
($B$^$C$A$c$@$$$U$/$NF|5-(B, 11/6)$B!#$[$)$[$)(B ($B@<(B: $B%/%l%h%s$7$s$A$c$s(B)$B!#(B
$B!U(B
$B%$%i%/!'@PL}Mx8"$r$a$0$kLdBj$,I=LL2=(B
(JANJAN, 11/5)
$B!U(B
$B%"%8%"$N$4$_LdBj$r9M$($k2q5D3+:E(B
(JANJAN, 11/5)
$B!U(B
FBI$B$NA\::$G%U%#%C%7%s%0MF5?
(ITmedia, 11/4)
$B!U(B
$B%"%W%j%1!<%7%g%s%3%s%H%m!<%k5!G=(B
(Sophos)$B!#(BSophos AntiVirus 6 $B$K$O$=$&$$$&5!G=$,$"$k$=$&$G!#(B
$B!U(B
$B3$B1HGKPLG$KK\5$$+!)Cf9q@/I\!"3$B1HG%3%s%F%s%D$J$I$K%a%9(B
(CNET, 11/2)
$B!U(B
$B1!Fb46@wBP:v%-!<%\!<%I!"1Q9q$NIB1!$G:NMQ(B
(ITmedia, 11/4)
$B!U(B
Microsoft$B!"(BVista$B%j%F!<%kHG$N%i%$%;%s%9$r2~D{(B
$B!A:F%$%s%9%H!<%k$N@)8B$r4KOB(B
(PC Watch, 11/4)
$B!U(B
Microsoft$B$H(BNovell$B$,Ds7H!"(BLinux$B$H(BWindows$B$NAj8_1?MQ@-$r
(Enterprise Watch, 11/6)$B!#(BMicrosoft $B$O(B SUSE Linux $B$r(B OEM $B$7$F(B XENIX 2007 $B$H$7$FHNGd$7$^$9!D!D$H$$$&OC$G$O$J$$LOMM!#$3$l$b!VE($K$G$-$J$$$N$J$iL#J}$K$7$F$7$^$(!W$H$$$&E[$J$N$+!"(BSCO $B$NWhat Microsoft + Novell Means Going Forward
(betanews.com)$B!#(B
$B!U(B
OpenSSH LDAP Public key patch
(opendarwin.org) $B$H$$$&$b$N$,$"$k$N$G$9$M!#(B
ports/security/openssh-portable/Makefile
$B$K$h$k$H!"(B
High Performance Enabled SSH/SCP
(psc.edu) $B$N(B patch $B$H$O$^$<$i$l$J$$$=$&$G$9!#(B
$B!!(BIE $B$@$1$G$J$/(B Firefox $B$b$G$9$+!D!D!#@$$NCf!"M;DL8z$+$;$F$k$s$G$9$M!#(B
$B%[%o%$%H%j%9%HJ}<0$8$c$J$$$H$@$a$J$s$G$9$M!#(B
$B!!(BXMLHTTP4.0 ActiveX $B%3%s%H%m!<%k$K(B 0-day $B7g4Y!#96N,(B web $B%Z!<%8$r1\Mw$9$k$H!"G$0U$N%3!<%I$,uBV$K$"$kLOMM!#(B
itochan $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!!2sHrJ}K!(B:
XMLHTTP 4.0 ActiveX $B%3%s%H%m!<%k$K(B kill bit $B$r@_Dj$9$k!#(B
$B6qBNE*$K$O!"(BCLSID {88d969c5-f192-11d4-a65f-0040963251e5} $B$KBP$7$F(B kill bit $B$r@_Dj$9$k!#(B
SA 927892 $B$K@_DjMQ$N(B .reg $B%U%!%$%k$N:n@.J}K!$,5-:\$5$l$F$$$k!#(B
$B%"%/%F%#%V%9%/%j%W%H$rL58z$K$9$k(B
ActiveX $B%3%s%H%m!<%k$rL58z$K$9$k(B
ActiveX $B%3%s%H%m!<%k$H$OL51o$N%=%U%H%&%'%"(B (Firefox, Thunderbird, Opera, ...) $B$rMxMQ$9$k!#$?$@$7!"$=$&$$$&%=%U%H$G(B
Plug-in For Hosting ActiveX Controls
$B$N$h$&$J$b$N$r%$%s%9%H!<%k$7$F$$$J$$$3$H$,>r7o!#(B
Netscape 7.1 / 7.2 $B$G$O%G%U%)%k%H$G%$%s%9%H!<%k$5$l$F$$$k$=$&$@!#(B
Windows $B$r;H$o$J$$!#(B
$B!!4XO"(B:
2006.11.09 $BDI5-(B:
$B!!4XO"(B:
2006.11.11 $BDI5-(B:
$B!!96N,%3!<%I(B (milw0rm):
$B!U(B
$BF|K\$NL5Gc%G!<(B
2006/11/25 ($BEZ(B)$B!#:#G/$b(B Buy Nothing Day $B$,6a$E$$$F$^$$$j$^$7$?!#(B
$B!U(B
$B$$$8$a<+;&!'#1#67o$"$C$?!!J82J>J!V%<%m!WH/I=$N#7G/4V$K(B
($BKhF|(B, 11/4)
$B!U(B
$B%/%i%9%?!
($BKhF|(B, 11/4)
$B!U(B
$B%V%C%7%eJFBgE}NN!'6bAm=q5-$h$j4m81!"J?OB$N6<0R!!1QD4::(B
($BKhF|(B, 11/4)
$B!U(B
$B%=%U%H%P%s%/$N?7!o(B0 TV CM$B!"$h$&$d$/FI$a$kBg$-$5$K$J$j$^$7$?$M!#I=<(;~4VFb$KFI$a$k$+$I$&$+$O$H$b$+$/!#(B
$B!U(B
$BJF6u73!"%M%C%H$G@o$&!V%5%$%P!<%9%Z!<%9;JNaIt!W@_CV$X(B
(CNN, 11/4)
$B!U(B
$B864D5!9=$N9b%l%Y%kJ|A0$,>e$,$C$?CO0h(B
($B;TL1%M%C%H!&4tIl(B)$B!#(B$B<"2l8)M>8bD.(B$B$@$C$F(B?!
$B!U(B
FIX: Error message when you configure Internet Explorer to use a .pac file and you try to access a Web site that requires Kerberos authentication: "HTTP Error 401"
(Microsoft)$B!#%5%]!<%H$+$i(B patch $B$rF~
$B!U(B
Support WebCast: IEEE 802.11 Wireless LAN Security with Microsoft Windows
(Microsoft)
$B!U(B
Error message when you view Web pages in Internet Explorer 7 that were created by using the Visio 2003 Save As Web feature: "Internet Explorer cannot open the Internet site"
(Microsoft)$B!#2sHr:v$"$j!#(B
$B!U(B
Detailed information for developers who use the Windows Update offline scan file
(Microsoft)
$B!U(B
Windows 9x $B7O(B OS $B$K(B SDAT $B$^$?$O(B XDAT $B$rE,MQ$7$h$&$H$9$k$H!V%(%i!<(B: $B@55,$N(B McAfee $B@=IJ$,8+$D$+$j$^$;$s!W$H%a%C%;!<%8$,I=<($5$l!"(BDAT, Engine $B$,E,MQ$5$l$^$;$s(B
($B%^%+%U%#!<(B, 11/2)$B!#(B5100 $B%(%s%8%s$OBP1~$7$F$^$;$s$+$i!#(B
$B!U(B
$BI42J;vE5!V(BWikipedia$B!W$r0-MQ!$56>pJs$G%&%$%k%9$r%$%s%9%H!<%k$5$;$k(B
($BF|7P(B IT Pro, 11/4)
$B!U(B
$BA@$o$l$k!V(B10$B7n8x3+$N%;%-%e%j%F%#!&%[!<%k!W!$967b%D!<%k$NBP>]$K(B
($BF|7P(B IT Pro, 11/4)$B!#(B
Webattacker
$B$H$$$&%D!<%k$K(B MS06-057 $B96N,5!G=$,DI2C$5$l$?$i$7$$$=$&$G!#(B
$B!!4XO"(B: Bleeding: sigs/WEB/WEB_Webattacker_Kit
(Bleeding Snort)
$B!U(B
$BAmL3>J$N0BA4!&?.Mj@-:n6HHI!$%1%$!&%*%W%F%#%3%`$d(BJ:COM$B$J$I$,8=>u@bL@(B
($BF|7P(B IT Pro, 11/1)
$B!U(B
IPA$B!"1?MQ?&$7$?!V(BIT$B%9%-%kI8=`!W$N2~D{HG$rH/I=(B
($BF|7P(B IT Pro, 11/1)
$B!U(B
$B!V(B2$B
($BF|7P(B IT Pro, 11/1)
$B!U(B
FIX: Internet Explorer 6 may unexpectedly close when you try to use digest proxy authentication to connect to secure (HTTPS) Web sites
(Microsoft)$B!#(BIE 7 $B$G$OD>$C$F$$$k$=$&$G$9!#%5%]!<%H$+$i(B patch $B$rF~
$B!U(B
$B!ZKI1RD#$r>J$K![>:3J$5$;$kKI1RD#@_CVK!$N0lIt$r2~@5$9$kK!0F(B
($B4XAHD9$NEl5~!&1JEDD.%m%S!<3hF0F|5-#b#l#o#gHG(B, 11/2)
$B!U(B
Mac OS X$B$K46@w$9$k?7$?$J%&%$%k%9!$(BMac$B%f!<%6!<$b%;%-%e%j%F%#BP:v$r(B
($BF|7P(B IT Pro, 11/3)
- PHP 5.2.0$B$,%j%j!<%9!$!V(B200$B7o$rD6$($k%P%0$r=$@5!$Aa5^$K%"%C%W%0%l!<%I$r!W(B
-
$B!!(BAdvisory 13/2006: PHP HTML Entity Encoder Heap Overflow
Vulnerability
(Hardened-PHP Project)$B!#(BCVE: CVE-2006-5465$B!#(B
PHP 5.2.0 $B$G=$@5$5$l$F$$$k!#$^$?(B PHP 4 $BMQ$N(B
patch $B$,$"$k!#(B
$B!!$3$s$J5-=R$b(B:
As usual we very strongly recommend that you install Suhosin-Patch
and the Suhosin Extension, because once again this advisory proved
that remotely triggerable overflows in PHP still exist. It is
therefore highly recommended by us to use Suhosin-Patch. It's
canary protection will detect overflows and stop execution to
make exploitation very hard or impossible.
FreeBSD and OpenBSD's PHP ports already come with Suhosin-Patch
activated by default.
Grab your copy and more information at:
http://www.hardened-php.net/suhosin/index.html
$B!!%;%-%e%j%F%#%[!<%k$J$N$+$I$&$+$h$/$o$+$j$^$;$s$,!"(Bexpression $B$C$F$9$4$$%Q%o!<$G$9$M!D!D!#(B$B$?$@$G$5$(=|5n$7$E$i$$$=$&$G$9$7(B$B!#(B
$B!U(B
$B3$;:J*!"#4#0G/8e$K$J$/$J$k!)!!9q:]8&5f%A!<%`$,7Y>b(B
(asahi.com, 11/3)
$B!U(B
$B<+L1!&Cf@n@/D42qD9!"!V3KJ]M-5DO@!WH/8@$r;ve=$@5(B
(asahi.com, 11/3)
$B<+L1E^$NCf@n><0l@/D42qD9$O#3F|!":42l;TFb$G9V1i$7!"!V;d$O3KJ]M-$N5DO@$r$7$m$H8@$C$F$$$k$N$G$O$J$$!W$H=R$Y$?!#$=$N$&$($G!"KLD+A/$,F|K\$N86;RNOH/EE=j$r3K%_%5%$%k$G967b$9$k>l9g$J$I$rNc<($7$F!V7b$?$l$J$$$h$&$K$9$k$K$O$I$&$7$?$i$$$$$N$+$H$$$&5DO@$r$J$<$7$J$$$N$+!W$H8l$j!"3K967b$KBP$9$kKI1RO@$NI,MW@-$r6/D4$7$?!#(B
$B!!$=$s$J5DO@$O(B MD $BF3F~$NA0$K:Q$^$;$F$*$/$N$,6Z$C$F$3$H$K$J$<5$$E$+$J$$$N$@$m$&!#86H/$r967b$9$k$N$K3KCFF,$G$"$kI,MW$J$s$FA4A3$J$$$7!#;~:9$"$j$9$.!#(B
$B!U(B
$BFb3UI\$B!#(B
$B$d$i$;$NFbMF$,$^$?!":#OCBj$N650i4pK\K!!V2~3W!W4XO"$H$$$&$9$P$i$7$5!#(B
- $B650i4pK\K!8+D>$7H/8@M6F3(B
$B@/I\$,!V$d$i$;!W(B
$B%?%&%s%_!<%F%#%s%0@D?98)$K0MMjJ8=q(B $BFb3UI\G'$a$k(B
$B@P0f5D0w$,DI5Z(B
($B$7$s$V$s@V4z(B, 11/2)$B!#Ev3:(B FAX $B2hA|(B ($B$N0lIt(B) $B$"$j!#(B
- $B%?%&%s%_!<%F%#%s%0(B $B@/I\!V$d$i$;!W(B
$BLnE^!"0lCW$7$FDI5Z(B
($B$7$s$V$s@V4z(B, 11/3)
- $B$d$i$;$N!V650i4pK\K!2~@5;?@.!W$N@<$rYTB$$7$?Fb3UI\(B
($BJ]:dE8?M$N$I$3$I$3F|5-(B, 11/2)
$B;d$?$A$,N1
8$BF|(B($B2P(B)$B$O!"L$3NDj$@$,8aA0Cf$NC;$$;~4V$G650i4pK\K!FCJL0Q0w2q$,!V$$$8$a!WLdBj$rCf?4$K3+:E$5$l$k8+DL$7!#:#F|$NCk!"LnE^(B4$BE^$GBP:v2q5D$r9T$$!V8xD02q!W$O!V$b$&0lF|F|Dx$rF~$l$k!W$3$H$r3NG'$7$?!#=>$C$F!"$$$h$$$h4m$J$$$N$O(B14$BF|(B($B2P(B)$B$H$$$&$3$H$K$J$k!#:#D+$N(BNHK$B%K%e!<%9$G$b!V650i4pK\K!2~@50F$O!"CY$/$H$b(B14$BF|$^$G$NDL2a$rL\;X$7$F$$$k!W$HJ|Aw$5$l$?!#$^$5$K!"EZI6:]$NF.$$$H$J$C$F$-$?!#(B
- $BFb3UI\!V$d$i$;#F#A#X!W$NA4J8$rFI$`(B
($BJ]:dE8?M$N$I$3$I$3F|5-(B, 11/3)$B!#A4J8$"$j!#$$$d$O$d!"
$B41N=$,:nJ8$r=q$$$F!"3X9;D9$,(BPTA$B$NLr0w$K0MMj$7$F!"Fb3UI\$+$iH/8@FbMF$HBVEY$K$D$$$F;XF3$,$"$k!#$3$l$C$F!"A4BN
$B!U(B
$BElBg@8$K$bL"1d!*Mz=$O3$lLdBj!V$f$H$j650i!W$,9q$rLG$\$9(B
($BN)2VN4$N!V%a%G%#%"(B $B%=%7%*(B-$B%]%j%F%#%/%9!W(B, 11/1) (info from Okumura's Blog)
$B!!$@$,!"$3$N;v7o$,L@$i$+$K$7$?$3$H$O!"@$3&;K$rI,=$$K$7$F$b!"B?$/$N9b9;@8$,!"@$3&;K$N4pACCN<1$r7gG!$5$;$?$^$^!"Bg3X@8$K$J$j!"$=$N$^$^Bg3X$rB46H$7$F
$B!!F|K\$NJ?6QE*Bg3XB46H@8$O!":#8e$H$b!"%0%m!<%P%k!&%9%?%s%@!<%I$+$i$$$C$F!"@$3&$NNr;K$r2?$bCN$i$J$$%l%Y%k$NHs>o<1?M$@$H$$$&$3$H$J$N$@!#(B
$B!!LdBj$O!"$=$l$,@$3&;K$NNN0h$@$1$G5/$-$F$$$k$N$G$O$J$$$H$$$&$3$H$G$"$k!#(B
$B!!4XO"(B: $BI,=$2JL\:o8:O@$K$J$i$J$1$l$P$$$$$,(B
(Okumura's Blog, 11/2)
$B!U(B
zen.spamhaus.org$B!#(B
sbl-xbl.spamhaus.org $B$K$+$o$C$F(B zen.spamhaus.org $B$,$*LrL\$r2L$?$9$=$&$G$9!#(B
sbl-xbl.spamhaus.org $B$r8+$F$$$k>l9g$OJQ99$7$^$;$&!#(B
$B$?$^$A$c$s$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
$BBh#1(B6$B2s!Z>pJs%;%-%e%j%F%#%;%_%J!pJsJ]8nK!BP:v!"(BJIS$B2~@5%W%i%$%P%7!<%^!<%/$N?d?J!A(B
(INSI)$B!#(B
$B%W%i%$%P%7!<%^!<%/OC!#(B
2006.11.21$B!"El5~ET@iBeED6h!"L5NA!#(B
$B!!(BIE 6 $B$K(B with minimal user interaction $B$GG$0U$N%3!<%I$r
$B!!(BBluetooth $B$rMxMQ$7$F4k6HFb%M%C%H%o!<%/$KD>@\?/F~$9$kOC!#(B
$B$$$m$$$m$JF;6q$b>R2p$5$l$F$$$k!#(B
$B!!$H$j$"$($:!"(BBluetooth $B$r;H$o$J$$$N$G$"$l$P!"(BBluetooth $B$rL58z$K$7$^$7$g$&!#(B
2006.11.05 $BDI5-(B:
$B!!4XO"(B: $B%Q%C%AL$AuHw$N(B Mac $B$K(B Bluetooth $B$N(B root $B@H
(tidbits)
2006.11.06 $BDI5-(B:
$B!!(BNVD:
CVE-2006-5465
CVE-2006-5706
$B!!%;%-%e%j%F%#!&%[!<%k$N=$@5$b4^$^$l$F$$$k$=$&$G$9!#(B
PHP 5.2.0 Release Announcement (php.net) $B$h$j(B:
Security Enhancements and Fixes in PHP 5.2.0:
- Made PostgreSQL escaping functions in PostgreSQL and PDO extension keep track of character set encoding whenever possible.
- Added allow_url_include, set to Off by default to disallow use of URLs for include and require.
- Disable realpath cache when open_basedir and safe_mode are being used.
- Improved safe_mode enforcement for error_log() function.
- Fixed a possible buffer overflow in the underlying code responsible for htmlspecialchars() and htmlentities() functions.
- Added missing safe_mode and open_basedir checks for the cURL extension.
- Fixed overflow is str_repeat() & wordwrap() functions on 64bit machines.
- Fixed handling of long paths inside the tempnam() function.
- Fixed safe_mode/open_basedir checks for session.save_path, allowing them to account for extra parameters.
- Fixed ini setting overload in the ini_restore() function.
$B!!4XO"(B: PHP 5.2.0
(Okumura's Blog, 2006.11.03)
$B$5$C$=$/%$%s%9%H!<%k$7$F$_$?$,!$(BDrupal$B$K%m%0%$%s$7$F$buBV$KLa$C$F$7$^$&!#$^$?(B5.1.6$B$KLa$7$F$7$^$C$?!#2?$,JQ$o$C$?$N$@$m$&!)(B
$B!!(BPHP $B$N3+H/85$,;W$C$F$$$k$[$I$K$O@$$NCf$O4E$/$J$$$h$&$G!#(B
2006.11.04 $BDI5-(B:
$B!!(BAdvisory 13/2006: PHP HTML Entity Encoder Heap Overflow
Vulnerability
(Hardened-PHP Project)$B!#(BCVE: CVE-2006-5465$B!#(B
PHP 5.2.0 $B$G=$@5$5$l$F$$$k!#$^$?(B PHP 4 $BMQ$N(B
patch $B$,$"$k!#(B
$B!!$3$s$J5-=R$b(B:
As usual we very strongly recommend that you install Suhosin-Patch
and the Suhosin Extension, because once again this advisory proved
that remotely triggerable overflows in PHP still exist. It is
therefore highly recommended by us to use Suhosin-Patch. It's
canary protection will detect overflows and stop execution to
make exploitation very hard or impossible.
FreeBSD and OpenBSD's PHP ports already come with Suhosin-Patch
activated by default.
Grab your copy and more information at:
http://www.hardened-php.net/suhosin/index.html
$B!U(B
PDF$B=PNO;~$N0E9f2=$KBP1~$7$?!V(BOpenOffice.org$B!W(Bv2.0.4 $BF|K\8lHG$,8x3+(B
($BAk$NEN(B, 11/2)
$B!U(B
$B:#LkJ,$+$k(BSQL$B%$%s%8%'%/%7%g%sBP:v(B
(@IT, 11/2)
$B!U(B
$B
($BFIGd(B, 11/2)
$B!U(B
$B%9%Q%$%&%'%"8!:w%Q%?!<%s%U%!%$%k(B 0.421.00 $B$K$*$1$k8m7Y9p>pJs(B
($B%H%l%s%I%^%$%/%m(B, 11/2)
$B!U(B
$BFb3UI\
$B!U(B
$BYGCWLdBj$N!VL?NaJ|Aw!W!"DL?.!&J|Aw>.0Q$,;veN;>5(B
($BFIGd(B, 11/2)$B!#$_$J$5$^$N9q1DJ|Aw!"(BNHK$B!#(B
$B!U(B
$B4A8!(B2$B5i$N2rEz$,;n83F|A0F|$K!V(B2$B$A$c$s$M$k!W$XN.=P(B
(Internet Watch, 11/2)
$B!U(B
$BCf9qEENO!"%G!<%?2~$6$s$GBP1~%^%K%e%"%k!!0cK!@-G'<1$+(B
(asahi.com, 11/2)
$B!U(B
$B$R$+$jEEOC$N%k!<%?!<#1#2K|Bf$KIT6q9g!!#N#T#TEl@>(B
(asahi.com, 11/2)$B!"(B
$B$R$+$jEEOCBP1~%k!<%?!V#R#T!]#2#0#0#K#I!W$NIT6q9g5Z$S(B
$B:#8e$NBP1~$K$D$$$F(B
(NTT $BElF|K\(B, 11/2)$B!#B3$-$^$9$M!D!D!#(B
$B!U(B
$B1d4|$5$l$F$$$?%O%C%5%s!&%P%$%(%U0e;U$NK,F|$,$D$$$K ($BGo$B%O%C%5%s!&%P%$%(%U$r8F$V2q(B$B$r;2>H!#(B
$B!!(B$B%m%7%"$G9q:](BNGO$B$N(B80$B!s$,3hF0Dd;_$K!*(B
($B%P%$%J%U<+M3DL?.(B, 10/23)$B!"(B
$B%h!<%m%C%Q(B : $B%m%7%"O"K.!'?7(BNGO$BK!$K$h$j%m%7%"!&%A%'%A%'%sM'9%6(2q$KJD:?L?Na(B
($B%"%`%M%9%F%#(B, 10/25)$B!#%m%7%"$O$[$s$H$&$K$a$A$c$/$A$c$_$?$$!#(B
$BL@F|$NF|K\!"$H$$$&5$$b$7$^$9$,!#(B
$B!U(B
Windows$B$G(BLinux$B%Q!<%F%#%7%g%s$rFI$_=q$-$9$k$K$O!J(BExt2Fsd$BJT!K(B
(@IT, 11/2)
$B!U(B
$B%7%^%s%F%C%/!"6bM;5!4X8~$1$N%;%-%e%j%F%#!&%5!<%S%9$rH/I=(B
($BF|7P(B IT Pro, 11/1)$B!#%U%!%$%J%s%9$G%-%e%"%-%e%"!#(B
$B!U(B
$BCf9q$N%M%C%H8!1\LdBj$H!"$"$kF|K\4k6H$N4X78(B
($B:j;3?-IW$N(BBlog, 11/2)
$B!U(B
$B%=%K!
($BF|7P(B BP, 11/1)
$BEECS$NAG:`$r6!5k$7$F$$$k$"$k%a!<%+!<$N5;=Qe>:$r;_$a$k$?$a$N0BA4J[$d%;%Q%l!<%?!<$J$I(B4$B=E!"(B5$B=E$N0BA4AuCV$,AH$_9~$^$l$F$$$k!#$=$N$9$Y$F$,5!G=$7$J$$;vBV$J$IDL>o$G$O$"$jF@$J$$!W$H$$$&!#(B
$B!!%^!<%U%#!<$NK!B'$rCN$i$J$$$N$+!D!D!#(B
$B!!4XO"(B: $B!V%V%i%C%/%\%C%/%9!W$KJD$89~$a$k$J(B
($BF|7P(B Tech On, 11/1)
$B!U(B
$B%=%U%H%P%s%/$O!H%b%s%4%kDk9q73!I$@(B
($BF|7P(B BP, 11/1)
$B!U(B
[Clamav-announce] announcing ClamAV 0.90rc2$B!#(B
0.90 $B$G$O$$$m$$$m$HJQ2=$,$"$k$h$&$G!#(B
$B!U(B
CORE FORCE R0.95 released!
(Core Security Technologies, 10/18) $B$@$=$&$G$9!#(B
$B!!(BVisual Studio 2005 $B$N(B WmiScriptUtils.dll $B$K4^$^$l$F$$$k(B WMI Object Broker ActiveX $B%3%s%H%m!<%k$K7g4Y$,$"$j!"96N,(B web $B%Z!<%8$r1\Mw$9$k$3$H$GG$0U$N%3!<%I$rCVE-2006-4704
$B!!(Bpatch $B$O$^$@$J$$!#Ev3:(B ActiveX $B%3%s%H%m!<%k$K(B
kill bit $B$r@_Dj$9$k$3$H$G2sHr$G$-$k!#(B
$B%"%I%P%$%6%j$K$O!"(Bkill bit $B$r@_Dj$9$k$?$a$N(B
.reg $B%U%!%$%k$N:n@.J}K!$,7G:\$5$l$F$$$k!#(B
$B!!4XO"(B:
2006.11.06 $BDI5-(B:
$B!!4XO"(B:
2006.11.09 $BDI5-(B:
$B!!4XO"(B:
2006.12.15 $BDI5-(B:
$B!!(BVisual Studio 2005 $B$N@H
$B$G=$@5$5$l$?!#(B
$B!!4XO"(B: ZDI-06-047: Microsoft Visual Studio WmiScriptUtils.dll Cross-Zone Scripting Vulnerability (Zero Day Initiative)
$B!!(B[SA22628] Internet Explorer 7 Window Injection Vulnerability $B$NOC!#(B
$B%G%b%Z!<%8(B$B$,MQ0U$5$l$F$$$k!#(B
Firefox $B$J$I$G%"%/%;%9$9$k$H%j%s%/@h$O$U$D$&$K3+$+$l$k$,!"(BIE $B$@$H(B
secunia $B$N%5%$%H$,=P$F$/$k!#(B
$B!!(BMSRC blog $B$K$h$k$H!"(B
In this case, we did look at the scenario in question and asked ourselves what we could do to help improve our anti-phishing and anti-spoofing features so that customers can better protect themselves. We decided that one thing we could do was to add a feature to IE 7 where it always shows the actual URL of the web page, even in pop-up windows. So we added a pop-up window address bar, enabling users to more accurately make a trust decision.
$B!!(BMicrosoft $BE*$K$O!"(BIE 7 $B$G$O%]%C%W%"%C%W%&%#%s%I%&$K(B URL $B$,>o$KI=<($5$l$k$h$&$K$7$?$+$iH=JL$G$-$k$h$M!"$NLOMM!#$3$l0J>e$N$3$H$r$9$k$D$b$j$O$J$$$_$?$$!#(B
$B$^$"!"$3$l$,5$$KF~$i$J$$?M$O!"$H$C$H$H(B Firefox $B$d(B Opera $B$J$I$K>h$j$+$($?J}$,$h$m$7$$$+$H!#(B
$B!!4XO"(B:
![[$B%;%-%e%j%F%#%[!<%k(B memo]](/%7Ekjm/security/memo/sechole-memo.gif)
$B;d$K$D$$$F(B
