$B%;%-%e%j%F%#%[!<%k(B memo - 2007.05
Last modified: Thu Aug 16 12:42:22 2007
+0900 (JST)
$B!!$3$N%Z!<%8$N>pJs$rMxMQ$5$l$kA0$K!"(B$BCm0U=q$-(B$B$r$*FI$_$/$@$5$$!#(B
$B!!!V(BThis release fixes some security bugs in libclamav$B!W$@$=$&$G$9!#(B
$B$"$H!"(BClamAV 0.91rc1
$B$b=P$F$^$9!#(B
2007.06.11 $BDI5-(B:
$B!!(BCVE:
2007.06.04 $BDI5-(B:
$B!!(BF-Secure Security Bulletin FSC-2007-4 $B$NF|K\8lHG=P$^$7$?!#(B
$B!!(BF-Secure Anti-Virus $B$K7g4Y!#FCDj$N%"!<%+%$%V%U%!%$%k$d(B pack $B$5$l$?%U%!%$%k$K$h$C$F(B DoS $B>uBV$K$J$k!#(B
CVE-2007-2967
$B!!<+F0E*$K99?7$5$l$F$$$k!#(B
2007.06.04 $BDI5-(B:
$B!!F|K\8lHG=P$^$7$?(B: $B%;%-%e%j%F%#4+9p(B FSC-2007-3$B$HBP:v(B:
F-Secure $B%"%s%A%&%#%k%9@=IJ$r$4MxMQ$N$*5RMM$X(B
($BF|K\%(%U!&%;%-%e%"(B)
$B!!(BWindows $BHG$N(B F-Secure Anti-Virus $B$K7g4Y!#%*%s%"%/%;%9%9%-%c%s$K7g4Y$,$"$j!"(Blocal user $B$,8"8B>e>:$G$-$kLOMM!#(B
CVE-2007-2965
$B!!(BF-Secure AntiVirus / Internet Security 2005 $B!A(B 2007 $B$d(B
F-Secure Protection Service for Consumers 5.00 $B!A(B 6.40
$B$K$*$$$F$O<+F0E*$K99?7$5$l$F$$$k!#(B
$B$=$NB>$K$D$$$F$b=$@5%W%m%0%i%`$,MQ0U$5$l$F$$$k$N$GE,MQ$9$l$P$h$$!#(B
2007.06.04 $BDI5-(B:
$B!!F|K\8lHG=P$^$7$?(B: $B%;%-%e%j%F%#4+9p(B FSC-2007-2$B$HBP:v(B:
F-Secure $B%"%s%A%&%#%k%9(B Windows$B@=IJ$r$4MxMQ$N$*5RMM$X(B
$B!=(B $B=$@5%b%8%e!<%kE,MQ$N$*4j$$(B $B!=(B ($BF|K\%(%U!&%;%-%e%"(B)
$B!!(BF-Secure Anti-Virus $B$K7g4Y!#(BLHA $B%"!<%+%$%V$N07$$$K7g4Y$,$"$j!"(B
$B96N,(B LHA $B%"!<%+%$%V$K$h$C$FG$0U$N%3!<%I$rgzip 5 $BO"H/(B
$B$N$&$A!"(BJVNVU#381508:
gzip $B$N(B make_table() $B$NG[Ns=hM}$K$*$1$k@H (JVN) $B$NOC$i$7$$!#(B
CVE-2007-2966
$B!!(BF-Secure AntiVirus / Internet Security 2005 $B!A(B 2007 $B$d(B
F-Secure Protection Service for Consumers 5.00 $B!A(B 6.40
$B$K$*$$$F$O<+F0E*$K99?7$5$l$F$$$k!#(B
$B$=$NB>$K$D$$$F$b=$@5%W%m%0%i%`$,MQ0U$5$l$F$$$k$N$GE,MQ$9$l$P$h$$!#(B
F-Secure Anti-Virus for Linux Servers $B$H$+$O!":G?7HG$GD>$C$F$$$k$H$$$&$3$H$J$N$+$J$"!#(B
2007.06.04 $BDI5-(B:
$B!!F|K\8lHG=P$^$7$?(B: $B%;%-%e%j%F%#4+9p(B FSC-2007-1$B$HBP:v(B:
F-Secure $B%"%s%A%&%#%k%9(B Windows$B@=IJ$r$4MxMQ$N$*5RMM$X(B
$B!=(B $B=$@5%b%8%e!<%kE,MQ$N$*4j$$(B $B!=(B ($BF|K\%(%U!&%;%-%e%"(B)$B!#(B
$BBP>]@=IJ$O(B Windows $BHG$@$1$G$O$J$$$N$G$9$,!D!DCf?HFI$s$G$^$9(B? > $BF|K\%(%U!&%;%-%e%"!#(B
$B!!(BFirefox 2.0.0.4 $BEP>l!#(B5 $B$D$N7g4Y$,=$@5$5$l$F$$$^$9!#6b;R$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
- Critical
- High
- Moderate: $B$J$7(B
- Low:
$B!!$"$o$;$F=P$F$$$^$9(B:
$B!!(BThunderbird 2.0.0.4 $B$O!"$^$@=P$F$$$J$$$h$&$G$9!#(B
$B!U(B
$B%0!<%0%k!"%^%k%&%'%"BP:v%=%U%H4k6H$N%0%j!<%s%\!<%@!<$rGc<}(B
(computerworld.jp, 5/30)
$B!U(B
$B!Z(BCRYPTO-GRAM$BF|K\8lHG![(B
$B%=!<%7%c%k!&%(%s%8%K%"%j%s%0$K$D$$$F(B
($BF|7P(B IT Pro, 5/30)
$B!U(B
Now Available: ActionScript Virtual Machine 2 (AVM2) Overview
(Emmy Huang, 5/29)
$B!U(B
$B%H%l%s%I(B $B%U%l%C%/%9(B $B%;%-%e%j%F%#(B - $B%j%b!<%H%U%!%$%k%m%C%/(B
$B%P!<%8%g%s(B 2.5$B!!8x3+$N$*CN$i$;(B
($B%H%l%s%I%^%$%/%m(B, 5/30)
$B!U(B
$B!VG.BP:v$O$o$l$o$l$N;HL?!W!=!=(BAPC$B%8%c%Q%s!"%G!<%?%;%s%?!
(computerworld.jp, 5/29)$B!"(B
$B9b298D=j$r%7%_%e%l!<%H!=!=6u5$NO3X$r6n;H$7$?%G!<%?%;%s%?!<$NG.BP:v(B
(computerworld.jp, 5/29)$B!#G.BP:v$O=EMW!#(B
$B!U(B
$BJF9qKIAm>J!"%5%$%P!<@oAh$KHw$($?Cf9q$N>pJs733H$K7Y>b(B
(computerworld.jp, 5/29)$B!#HsFq$b$J$K$b!"$d$C$F$J$$J}$,$*$+$7$$$H;W$&$N$@$,!D!D!#(B
$B!U(B
$B%O%d%+%oJ}LL6a4)(B
$B!!8D?M$N%7%e%_E*$K$O(B
$BJ88K6a4)(B$B$N!VE($O3$B1!&@55A$N4c!W$,CmL\$+$J!#(B
$B!U(B
Weekly SOC Report $B%m%0(B
(ISSKK)$B!#$$$D$N$^$K$+2a5n%m%0$G$-$F$^$9$M!D!D!#(B
$B!U(B
$B:F=U4[@=Lt=j(B$B$5$s!"$5$-$[$I8+$J$*$7$F$_$?$i!"$"$$$+$o$i$:;_$^$C$F$^$9$M!D!D!#(B
$B!U(B
$BJ?@.#1#8G/EY%5%$%P!<%/%j!<%s%;%s%?!<3hF0Js9p(B
($B%5%$%P!<%/%j!<%s%;%s%?!<(B, 5/25) $B$,=P$F$$$^$9!#(B
$B!U(B
$B$R$+$jEEOCBP1~%k!<%?!V#P#R!]#2#0#0#N#E!W!V#R#V!]#2#3#0#N#E!W$N(B
$BIT6q9g5Z$SBP>]$H$J$k$*5RMM$X$NBP1~$K$D$$$F(B
(NTT $BElF|K\(B, 5/30)$B!#(B5/28 $B$N?7%U%!!<%`$,Ie$C$F$$$?$h$&$G$9!#(B
Benjamin $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$BEEOC5!%]!<%H$N%J%s%P!]$,2r>C$5$l$^$9$N$G!"@_Dj$rJQ99$9$k$h$&$*4j$$$$$?$7$^$9!#(B
$B!!(BQuickTime 7.1.6 ($B0JA0(B?) $B$K(B 2 $B$D$N7g4Y!#(B
CVE-2007-2388$B!#(BQuickTime for Java $B$K7g4Y$,$"$j!"(BJava $B%"%W%l%C%H$,G$0U$N%3!<%I$r
CVE-2007-2389$B!#(BQuickTime for Java $B$K7g4Y$,$"$j!"(BWeb $B%V%i%&%6$N%a%b%j$r(B Java $B%"%W%l%C%H$+$iFI$_$H$j2DG=!#(B
$B!!(BQuickTime 7.1.6 $B$KE,MQ$9$k(B patch $B$,8x3+$5$l$F$$$k(B:
Windows, Mac
$B!!(BQuickTime 7.1.6 $B$G$N=$@5(B$B$,B-$j$J$+$C$?$H$$$&OC$J$N$+!"JL$N7g4Y$J$N$+$$$^$$$AITL@$@$J$"!#(B
$B$"$H!"(BQuickTime 7.1.6 $B$G$OD>$C$F$J$5$2$J7g4Y$NOC(B
(CVE-2007-2295,
CVE-2007-2296)
$B$O:#2s$bD>$C$F$J$$$s$@$m$&$"$J!#(B
2007.06.01 $BDI5-(B:
$B!!4XO"(B: Apple QuickTime $B$G$N%3!<%I
(ISSKK)$B!#(BCVE-2007-2388 $B$N7o!#(B
$B!!(BMac OS X 10.3.9 / 10.4.9
$BMQ$N%;%-%e%j%F%#=$@5(B patch $B!#(B
$B!U(B
Vista$B$NG[C#$^$G(B120$BF|$KEO$k6n$10z$-!"$"$k(BPC$B%f!<%6!<$N8IFH$JF.$$(B
($BF|7P(B IT Pro, 5/21)$B!#$$$d$O$d!"$9$P$i$7$$IJ
$B!!4XO"(B: [OEM] DSP$BHG(B XP Vista$B%"%C%W%0%l!<%I(B6
(2ch.net)
$B!U(B
$B%O!<%I%G%#%9%/$N%G!<%?I|5l$O$3$&$7$F9T$o$l$k(B
($BF|7P(B IT Pro, 5/24)$B!#$d$C$Q$j<*$@$h$M$(!#(B
$B!U(B
Extra.dat $B$NM-8z4|8B(B
($B%^%+%U%#!<(B, 5/28)$B!#(B5 $BF|$@$=$&$G$9!#(B
$B!U(B
$B>>2,Bg?C$N!VFMA3$N;`!W$r$&$1$F(B
($BJ]:dE8?M$N$I$3$I$3F|5-(B, 5/29)$B!"(B
$B%`%M%*F|5-(B $B#2#0#0#7G/#57n#2#8F|(B($B7n(B) ($BNkLZ=!CK(B)$B!"(B$B>>2,G@?eAj<+;&$G$I$&JQ$o$k!V@/<#$H%+%M!W$H!VG/6bLdBj!W(B
($BF|7P(B BP, 5/29)$B!#(B
$B>>2,;a$O!V6e=#$N%`%M%*!W$H8F$P$l$F$$$?$=$&$G!D!D(B
$B!U(B
$B!V%0%0$k!W!V%"%^%>$k!W$C$F$I$&Lu$9!)F|K\$NB$8l$r1QLu$7$F$_$?(B
($BF|7P(B IT Pro, 5/29)$B!#%P%j(B3 $B$J$s$F8@MU$,$"$k$N$+!#$J$s$@$+(B$B%P%k%5%s(B$B$_$?$$$G1l$?$$46$8!#(B
$B!U(B
$BBh(B4$B2sLBOG%a!<%kBP:v%+%s%U%!%l%s%9(B$B$M$?!#(B
JEAG $B%Q!<%D!"%7%e!<%H(B!
$B!U(B
$B!V#P%^!<%/!W$X$N4|BT$H8=Z!!(B864$BK|7o$N8D?M>pJsN.=P!J#1!K(B
($BF|7P(B IT Plus, 5/21)$B!"(B
$B!VZ!!(B864$BK|7o$N8D?M>pJsN.=P!J#2!K(B
($BF|7P(B IT Plus, 5/28)$B!#!V#P%^!<%/!W$K2?$+4|BT$9$kJ}$,$*$+$7$$$H;W$$$^$9$1$I!D!D!#(B
$B!U(B
$B!V$o$$$;$DJ*!W5,@)$O:,Dl$+$iJQ$($?$$$M(B
($B:j;3?-IW$N(BBlog, 5/28)
$B!U(B
RMT$B%S%8%M%9$NK!E*LdBj$K$D$$$F(B
($BF|7P(B IT Pro, 5/28)
$B$3$N$h$&$J8!F$$r$9$k$H!$I,$:$7$b!$%*%s%i%$%s%2!<%`$d(BRMT$B%S%8%M%9$HERGn:a$,$^$C$?$/L54X78$G$"$k$H$b8@$$@Z$l$J$$$H9M$($i$l$k!#(B
$B!!L5M}LpM}$3$8$D$1$F$k$h$&$K$7$+8+$($J$$$s$G$9$,!#(B
$B!U(B
$BB3!&=;L1I<%3!<%I$r;TD.B<$,N.=P$5$;$F$bA4
($B9bLZ9@8w!w<+Bp$NF|5-(B, 5/26)$B!"(B
$B=;L1I<%3!<%I$r%Q%9%o!<%I$K$7$?$/$J$$7P:QE*M}M3(B
($BIpED7=;K(B, 5/27)
$B!U(B
$B!V(BFBI$B$N%M%C%H%o!<%/$O@H
(ITmedia, 5/26)
$B!U(B
"21decode" by yamagata21
($B;e$N@Z$l$?B|(B($B$?$3(B), 5/26)
$B!U(B
$BF1?M;o$HI=8=$r9M$($k%7%s%]%8%&%`!'(B
$B!J(B3$B!K!VIO$7$$L!2h!W$,8~$-9g$C$F$-$?<+M3$H@UG$$H(B
(ITmedia, 5/28)
$B!!Dj@b$,$J$$$N$GDA@b$rE83+$7$^$9$1$l$I!"F1?MJ82=$K8B$i$:%*%?%/$NK($(%+%k%A%c!<$_$?$$$J$N$,$"$k$H$7$F!"$o$?$7$N9M$($G$O!"%P!<%A%c%k6u4V$NCf$K!"$[$\FHN)$7$?@-E*M_K>$N%(%3%N%_!]$+$b$7$l$J$$!#(B
$B!!NW>2$Gl>P$$!K!#K\EDF)$5$s(B*11$B$N$h$&$J$3$H$r8@$&J}$,$A$i$[$i$HA}$($D$D$"$k$+$J$H!#$3$l$O$3$l$G$f$f$7$-;vBV$G$O$J$$$+$H!J2q>l>P$$!K!#(B
$B!U(B
$B%]!<%?%k$O%a%G%#%"$+!)!*0-
(CNET, 5/28)
$B!U(B
gFTP$B!=!=B?5!G=$GJXMx$J(BLinux$B%U%!%$%kE>Aw$NK|G=%J%$%U(B
(Open Tech Press, 5/28)$B!#(BSSH2 $B$K$bBP1~$7$F$$$F$h$5$2$G$9$M!#4A;z%3!<%IJQ495!G=$r$I$3$+$KDI2C$7$F$d$l$P$$$$$N$+$J!D!D!#(B
$B!U(B
$BFC5vD#$,0U>"K!2~@5$KH<$&(BFAQ$B!"(BGUI$B$K4X$9$k
(Internet Watch, 5/28)
$B!U(B
$B8D?M>pJs$NN.=P$J$I$r8}
($B9qL1@83h%;%s%?!<(B, 5/28)
$B!U(B
PlaceEngine$B$N%W%i%$%P%7!<7|G0$r9M$($k(B
($B9bLZ9@8w!w<+Bp$NF|5-(B, 5/27)
$B!U(B
Microsoft$B!"3t2AA`:n%9%Q%`$r(BHotmail$B$GAw?.$7$?(B3$B6H
(Open Tech Press, 5/28)$B!#3t2AA`:n%9%Q%`$M$?!#(B
$B!U(B
$B!V9b9;=FMp
(WIRED NEWS, 5/28)$B!#%\%&%j%s%0!&%U%)!
$B!U(B
$B#N#E#C!'#7G/4V$GN"6bLs#2#22/1_$N=jF@1#$7!!@GL3D4::(B
($BKhF|(B, 5/29)$B!"(B
$BEl5~9q@G6I$+$i$N99@5DLCN$N
(NEC, 5/29)
$B!U(B
$BN)2VN4!'!VFf$N<+;&!W?k$2$?>>2,G@?eAj(B $B0BG\Fb3U$,Jz$($k!V0G!W$N@5BN(B
($BF|7P(B BP, 5/28)$B!"(B
$BNP;q8;$NA0?H!&?9NS3+H/8xCD$N85M};v$,<+;&(B
(asahi.com, 5/29)$B!#$=$3$i$8$e$&$^$C$/$m$J$N(B?
$B!U(B
$BA4F|6u!"#4#2JX7g9R!!%7%9%F%`%H%i%V%k$G%@%$%d:.Mp(B (asahi.com, 5/27)$B!"(B
$B8a8e#4;~$^$G1)EDH/JX$NA4JX7g9R!!%7%9%F%`>c32$GA4F|6u(B
(asahi.com, 5/27)$B!#(B
$B1?9T>u67$N$40FFb(B
(ANA) $B$r8+$k$H!"(B14:09 $B8=:_!"!V1)EDH/(B18$B;~0JA0$N=PH/JX$N7g9R$r7hDj$$$?$7$^$7$?!W$H$J$C$F$$$k!#(B
$B$3$N$^$^!VA4F|(B $B6u!W$K$J$C$F$7$^$&$N$+!#(B
$B!!!D!D(B 18:00 $B$+$i:F3+$5$l$?$h$&$G$9!#(B
$B!U(B
$B%9%b%C%0$G>.3X9;#8#59;$N1?F02qCf;_!!KL6e=#;T(B
(asahi.com, 5/27)$B!#$^$?Cf9q$G$9$+$M!#2+:=$bMh$F$k$7$J$"!#(B
$B4XO"(B: $B8w2=3X%9%b%C%0$OCf9qH/!)!!4D6-8&!&6eBg$,?d7W(B
(asahi.com, 5/13)$B!"(B
$B#57n$N2+:=!"#1#1G/$V$j!!Cf9q$N?9NSH2:N860x!)(B
($BEl5~?7J9(B, 5/26)
$B!U(B
$B$O$7$+OC!"4X@>$G$b5Y9;$NBg3X$,(B
$B!!N)L?4[Bg3X$O$S$o$3!&$/$5$D%-%c%s%Q%9$G$N;vNc$J$N$G!"N6Bg@%ED3X?M;v$8$c$J$$$C$9!D!D!#(B
$B!U(B
$B:[H=0w@)EY$NCN$i$l$6$k!Vf+!W!":[H=0wLL@\$G;WA[%A%'%C%/(B
($BJ]:dE8?M$N$I$3$I$3F|5-(B, 5/26)$B!"(B$B:[H=0w@)EY$NCN$i$l$6$k!Vf+!W!":[H=0wLL@\$G$NA*JL$NO@M}(B ($BJ]:dE8?M$N$I$3$I$3F|5-(B, 5/27)$B!#$3$3$^$G$R$I$$$H$O!D!D(B
$B!U(B
$BIpIY;NDI5a$NF.$$$O:#$bB3$$$F$$$k!!!!;{_7M-#v#sIpIY;N(B
(SLAPP WATCH, 5/26)
$B!U(B
$B%a!<%kGK;:(B
(Okumura's Blog, 5/26)$B!#(B
$B;d$N>l9g!"(BRSS $B$r;H$&$h$&$K$J$C$F$+$i!"%a!<%k$N=hM}$,$5$i$KCY$l$k$h$&$K$J$C$F$-$F$$$k$J$!!D!D!#(B
$B!U(B
$BCT4A!'Ho32L5:a!!Bg:e9b:[(B
($BKhF|(B, 5/25)
$B!U(B
Another Identity Theft Story
(McAfee blog, 5/25)
$B!U(B
Rich Text Malware
(McAfee blog, 5/25)$B!#(BRTF $B$G$/$k$`$H%"%s%A%&%$%k%9$r2sHr$G$-$k$3$H$,$"$k(B?
$B!!4XO"(B: $B%j%C%A%F%-%9%H%^%k%&%'%"$,%&%$%k%9BP:v%=%U%H$NLUE@$rFM$/!)(B
(ITmedia, 5/28)
$B!U(B
Are Spammers Giving Up on Image Spam?
(McAfee blog, 5/25)$B!#%[%o%$%H%Z!<%Q!Image Spam: The New Email Scourge$B!I!"F|K\8lHG$b$"$j$^$9!#(B
$B!!4XO"(B: $B2hA|%9%Q%`$,5^8:!"L5NA%[%9%F%#%s%0%5%$%H$K%7%U%H!)(B
(ITmedia, 5/28)
$B!U(B
$B8D?MMQ%M%C%H%9%H%l!<%8%5!<%S%9$OCx:n8"?/32$H$NH=7h(B
(slashdot.jp, 5/26)$B!#$J$K$3$N%H%s%G%bH=7h!"%7%s%8%i%l%J!<%$!#(B
JASRAC $BE*$K$O!V$F$a$'$NLY$1$,8:$k$3$H$O$9$Y$F0-!W$J$N$@$m$&$,!"(B
$BEl5~CO:[$5$($=$l$rG'$a$F$7$^$&$H$O!D!D!#(B
$B$H;W$C$?$i!"!V$^$?9bIt??5,;R;a!W$@$C$?$N$G$9$M!#(B
$B!!4XO"(B:
$B!!(BSun Java System Web Proxy Server 4.0.4 $B0JA0$K7g4Y!#(B
socks $B%5!<%P
$B!!(BSun Java System Web Proxy Server 4.0.5 $B$G=$@5$5$l$F$$$k!#(B
$B!U(B
$B!V2hA|$A$c$s$M$k!W1?1D
(Internet Watch, 5/25)$B!#A@$$$I$*$j!"$H$$$&$o$1$G$9$+!#(B
$B!U(B
SophosLabs Blog
$B$,$G$-$?$=$&$G$9!#(B
$B!U(B
$B%7%i%/A0J)BgE}NN!"F|K\$NHkL)8}:B$G;v>pD0
($BFIGd(B, 5/24)$B!#F|K\$S$$$-$C$F!"$=$&$$$&0UL#$@$C$?$N(B?
$B!U(B
$B=;L1I<%3!<%I$O%Q%9%o!<%I$J$N$+!)(B
($BIpED7=;K(B, 5/23)
$B!U(B
NTT$B$N$R$+$jEEOC>c32$O%3%^%s%I4V0c$$$,860x!"BT5!7O$O2TF/$;$:(B
($BF|7P(B IT Pro, 5/24)$B!"(B
$B!V$R$+$jEEOC!WDLOC>c32!"860x$O%O!<%I%G%#%9%/8r49;~$N@_Dj%_%9(B
(Internet Watch, 5/24)$B!"(B
HDD$B8r49%_%9!u%P%0$G(B4$B;~4V%@%&%s$7$F$7$^$&!V$R$+$jEEOC!W(B
(@IT, 5/24)
$B!U(B
PCAOB $B4F::4p=`=qBh(B5$B9f$,>5G'$5$l$^$7$?$M!#!#!#(B
($B$^$k$A$c$s$N>pJs%;%-%e%j%F%#5$$^$0$lF|5-(B, 5/25)
PCAOB$B$N4F::4p=`=qBh(B2$B9f$,GQ;_$5$lBh(B5$B9f$H$J$j$^$9$M!#4F::?M$O!"7P1D2A$KBP$9$k4F::$OITI,MW$H$7$F$7$J$/$F$h$/$J$j!"FbItE}@)$NM-8z@-$K$D$$$F$N$_0U8+I=L@$r$9$l$P$h$$$3$H$K$J$j$^$9!#F|K\$O$A$g$C$HA*Br$r4V0c$($?$+$b$7$l$^$;$s$M!#!#!#(B
$B!U(B
$B>CHqCHq
(JANJAN, 5/25)
$B!U(B
$B!V@$3&$G:G$b8e?JE*!W!!F|K\$N5-
(JANJAN, 5/25)$B!#BgK\1D$G$9$+$i!#(B
$B!U(B
SOC$B>pJsJ,@O;MH>4|%l%]!<%H(B
(ISSKK)$B!"(B2007$BG/Bh(B1$B;MH>4|J,$,=P$F$$$^$9!#pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
$BBgA08&0l!'=8CDE*<+1R8"$N@h$K$"$k$b$N(B
($BF|7P(B IT Pro, 5/23)
$B!U(B
BITS $B$M$?(B
$B!U(B
$BKI1R>J!!Dj4|E*$KA4<+1RBb0w$HLLCL!!>pJsO3$lKI;_$X(B
$B!U(B
$B@-HH:apJs(B $B%^%$%9%Z!<%9$,=#Ev6I$KDs6!!!JF9q(B
($BKhF|(B, 5/23)
$B!U(B
$B%9%$%9$N8&5f
(Open Tech Press, 5/25)$B!"(B
$B0E9fJ}<0$N0BA4@-8!>Z$KM-8z$H$5$l$k(B
$B!VAG0x?tJ,2r!W$K$*$$$F@$3&5-O?$r99?7(B
$B!A(B1000$B%S%C%HD6$NFCZ$K9W8%!*!A(B
(NTT, 5/21)$B!#FsLZ$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
Some applications do not work correctly when you use a DNS server that is running Windows Server 2003 and that supports dynamic updates
(Microsoft)$B!#(BMS DNS $B$K$*$1$k(B PTR $B%l%3!<%I$NOC!#(B
$B!U(B
Description of the Software Update for Web Folders: May 18, 2007
(Microsoft)$B!#%@%&%s%m!<%I%;%s%?!<$G=$@5%W%m%0%i%`$,G[I[$5$l$F$$$k!#(B
$B!U(B
An update is available that improves the stability of the Windows Management Instrumentation repository in Windows XP
(Microsoft)$B!"(B
An update is available that improves the stability of the Windows Management Instrumentation repository in Windows Server 2003 (Microsoft)$B!#(B
WMI $B$K4X$9$k(B Vista $B$G$N2~A1$r(B XP / Server 2003 $B$K(B backport $B$7$?$h$&$G$9!#(B
XP $BMQ(B patch $B$OM-=~%5%]!<%H$+$iF~
$B!U(B
$B8!>Z!&BQ?L56Au!!0-$$$N$OC/$+!)2?$+!)!J#1#1!KFIGd?7J95-;v$NFf(B
(JANJAN, 5/23)
$B!U(B
$B$3$l$OC/$,D0$$$F$bQM:a!A!V7'C+;v7o!W95AJ?3Bh#42s8xH=(B
(JANJAN, 5/23)
$B!U(B
$B!V$J$+$N$R$H(B $B%Y!<%?HG!W$r@_CV$9$k$+G:$`(B
(Eiji James Yoshida$B$N5-O?(B, 5/24)$B!#;d$Of+$@$H;W$C$?$N$GF~$l$F$^$;$s!#(B
site local $B$G;H$($k$h$&$J%P!<%8%g%s$,$"$l$P;H$&$+$b$G$9$,!#(B
$B!U(B
$B;yF8%]%k%N!"%m%j!<%?2hA|!"%A%c%$%k%I%]%k%N$O!"%^%k%&%'%"Ho32
(Semplice, 5/24)$B!#(BLuca $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B$"$($F%A%c%$%k%I%]%k%N$rI=<($5$;$?$j!"4XO"%5%$%H$r%V%C%/%^!<%/$K$D$C$3$s$@$j$9$k$o$1$G$9$+!#$&!<$`!#(B
$B3N$+$K!"(B$B$&$5$.2hA|(B$B$bBg?M%]%k%N$@$+$i$^$@=q$1$k$1$I!"%A%c%$%k%I%]%k%N$@$C$?$i=q$1$J$$$h$J$"!#(B
$B!U(B
Java$B%"%W%l%C%H$N%9%/%j%W%H(B
($B?eL57n$P$1$i$N$($SF|5-(B, 5/25)$B!#(B
MSIE $B$N%;%-%e%j%F%#@_Dj$K$D$$$F(B
$B$J$s$F%A%g!<8E$$$b$N$,>R2p$5$l$F$$$?$N$G%A%g!<$R$5$7$V$j$KD/$a!"(B
$B%m!<%+%k(B $B%$%s%H%i%M%C%H(B $B%>!<%s(B $B$H$O2?$+(B?
$B$,FI$a$J$$$3$H$K5$$,$D$$$F!"(B$BFI$a$k$h$&$K(B$B$7$F$*$$$?!#(B
$B!U(B
IE Proxy Changer Program
($B$F$C$7!<$N4]=P$7(B, 5/24)$B!#(B
Firefox $BMQ$O$J$$$N$+$J!D!D$H;W$C$FC5$7$F$_$?$i!"(B
SwitchProxy Tool
$B$H$$$&$N$,$_$D$+$C$?!#(B
FoxyProxy
$B$H$$$&$b$N$b$"$k$=$&$G$9!#$*$*$+$o$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
Fyodor$B;a!"(BNmap$B$H(BSourcefire$B$NDs7H$K$D$$$F8l$k(B
(Open Tech Press, 5/25)
$B!U(B
Active Virus Shield
($B$F$C$7!<$N4]=P$7(B, 5/24)$B!#$F$C$-$j(B AOL $B%f!<%6@lMQ$@$H$P$+$j!D!D!#3N$+$K(B
FREE for Everyone $B$H=q$+$l$F$$$k!#(B
$B!U(B
$B%*!<%W%s(BDNS$B$N(BCEO$B!"(BGoogle$B$H(BDell$B$r!H%9%Q%$%&%'%"!IDs6!
(Open Tech Press, 5/24)
$B!!%&%k%t%#%C%A;a$,FC$KLdBj$K$7$F$$$k$N$O!"%f!<%6!<$,(BURL$B$rBG$A4V0c$($?$j!"B8:_$7$J$$%"%I%l%9$rF~NO$7$?$j$7$?:]$K!"(BDell$B%V%i%s%I$N%Z!<%8$K6/@)E*$KA+0\$5$;$F(BGoogle$B$N9-9p$rI=<($5$;$k%V%i%&%6!&%j%@%$%l%/%?$G$"$k!#(B
$B!!%&%k%t%#%C%A;a$O!"(BDell$B$N%f!<%6!<$,!V(Bdigg.com$B!W$HF~NO$9$k$N$r8m$C$F!V(Bdigg.xom$B!W$HF~NO$9$k$H!"%Z!<%8>eCJ$K%9%]%s%5!<%I!&%j%s%/$,I=<($5$l$?%Z!<%8$K%j%@%$%l%/%H$5$l$F$7$^$&$HAJ$($F$$$k!#(B
$B!U(B
Apollo $B$H%;%-%e%j%F%#(B
$B!!:#8e$I$&$J$k$N$+!"MWCmL\$H$$$&$H$3$m$+!#(B
$B!U(B
$B2?8N%$%s%?!<%M%C%H6(2q$O4V0c$($?$N$+(B
($B:j;3?-IW$N(BBlog, 5/25)
$B!V(BSM$B!&F1@-0&!&=C4/!&%U%'%AEy$NJQBV@-M_$K4p$E$/@-9T0Y!"Mp8rEy$NGXFAE*$J@-9T0Y!W$N5/8;$O!"@h$K7kO@$r8@$($P%"%a%j%+$N%U%#%k%?%j%s%0%=%U%H$N5l%P!<%8%g%s$N%+%F%4%j$@!#(B($BCfN,(B)
$B$J$
$B!!(BWindows XP SP2 / Server 2003 $B$K(B
922582 - Microsoft Windows $B%Y!<%9$N%3%s%T%e!<%?$r99?7$9$k$H$-$K%(%i!<(B $B%a%C%;!<%8(B "0x80070002" $B$,I=<($5$l$k(B
(Microsoft) $B$N(B patch $B$rE,MQ$9$k$H!"(B
- legacy filesytem filter driver $B$,%$%s%9%H!<%k$5$l$F$$$k(B
- legacy filesystem filter driver $B$,%M%C%H%o!<%/6&M-$KJ]B8$5$l$F$$$k0E9f2=$5$l$?%U%!%$%k$K@_Dj$5$l$F$$$k(B
$B>l9g$K!"$=$N0E9f2=$5$l$?%U%!%$%k$K$O(B Symantec AntiVirus $B$K$h$k%A%'%C%/$,$&$^$/F/$+$J$$$H$$$&OC!#(B
$B!!(Bpatch $B$O(B Microsoft $B$NM-=~%5%]!<%H$+$iF~
$B!!(BWinAntiVirus Pro 2007 $BF|K\8lHG$@$=$&$G$9!#F1$8%=!<%9$+$i$N5-;v(B:
$B!!$I$&$9$l$PF|K\8lHG(B 2007 $B$J%Z!<%8$K$?$I$j$D$1$k$N$@$m$&!D!D!#(B
2007.05.26 $BDI5-(B:
$B!!(Bhttp://jp.winantivirus.com/download/2007/
$B$K$"$k$=$&$G$9!#$H$K$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
AV-Test.org Reports Stats from Antivirus Roundup
(PC Magazine, 5/22)$B!#(B
Rising $B$C$F$1$C$3$&>e0L$K$$$k$s$G$9$M!#(B
$BF|K\$G$O(B$B%&%$%k%9%-%i!<(B 2007 $B$H$7$FHNGd$5$l$F$$$k$b$N$G$9!#(B
$BKLEM$J(B UI $B$H$+$b$"$k$"$l$G$9!#(B
$B!U(B
Inside Windows Vista User Account Control
(Microsoft)
$B!U(B
$B!VEE;R%a!<%k$N%;%-%e%j%F%#BP:v!W$J$I!":G?7$N>pJs%;%-%e%j%F%#BP:v$K4X$9$kJ8=q$r8x3+(B (IPA ISEC, 5/23)$B!#$5$C$=$/!V(B$B>.5,LO4k6H$N$?$a$N>pJs%;%-%e%j%F%#BP:v(B$B!W(B
$B$r$A$i$A$iD/$a$F$_$?$N$@$,!"(B
$B!&(BThird-Party Mail Relay $BLdBj(B
$B:G6a$H$/$KLdBj$K$J$C$F$$$k$N$,!"!V(BThird-Party Mail Relay$B!W!JBh;0Aw!K$G$9!#(B
$B$3$l$O%a!<%kAw?.
$B!!:G6a(B?!
$B!U(B
$B%H%m%$$NLZGO!V(BGozi$B!W$N?7HG$,EP>l!=!=5lHG$h$j$b8!=P$,:$Fq$K!!@$3&Cf$G(B2,000$B?M0J>e$,Ho32(B
(Open Tech Press, 5/22)
$B!U(B
$B>pJsH/?.$N@UG$$OC/$K$"$k!)!J#1!K(B$B!"(B
$B>pJsH/?.$N@UG$$OC/$K$"$k!)!J#2!K(B
(SLAPP WATCH, 5/23$B!A(B24)
$B!U(B
$B!Z(BInterop Las Vegas$B![%k!<%H%-%C%H$N46@w$b8+IU$1$k!$IY;NDL!$JF%&%'!<%V$,(BTPM$B$H8!1V%M%C%H$rAH$_9g$o$;$?%7%9%F%`$r%G%b(B
-
($BF|7P(B IT Pro, 5/24)$B!#(BTPM $B$r;H$C$F(B integrity check $B$r9T$&$_$?$$!#(B
$B!U(B
$B$3$N$4$m$N7Y;!!";yF8%]%k%N$H@o$&$N$O$$$$$N$@$1$I!"$d$jJ}$,MpK=$9$.$J$$$+(B$B!#(B
$B!U(B
Another false detection case
(Chinese Internet Security Response Team, 5/19)$B!#(B
Symantec AV problem on XP SP2 Simplified Chinese
$B$KB3$$$F(B Kaspersky $B$b$d$C$F$^$7$?!"$H$$$&OC!#(B
$B$*$^$1$K!"8m8!=P$NBP>]$O6%9gB>
$B!U(B
$B$O$?$i$/$*$8$5$s(B
$B!!$*$8$5$s$h$P$o$j$9$k$K$OAa$9$.$k5$$b$7$^$9$,!"(B
$BFf$N%[!<%`%Z!<%8(B $B%5%i%j!<%^%s(B NEO
$B$N(B$B%3!<%J!(B$B$J$N5$$K$7$J$$$G$/$@$5$$!#(B
$B!U(B
$B%^%$%/%m%=%U%H$H(BJPCERT/CC$B%;%-%e%j%F%#J,Ln$GJq3gE*$J5;=Q6(NO$G9g0U(B
(Microsoft, 5/24)$B!#:#D+$NF|7P?7J9(B 3 $BLL$K!V%^%$%/%m%=%U%H!"%M%C%H$N0BA4!"@/I\$HO"7H(B -- $B7g4Y!"8x3+A0$KO"Mm!W$H$$$&!"$3$l$r$*$b$$$C$-$j8m2r$7$?$i$7$$5-;v$,7G:\$5$l$F$^$9$M!D!D!#$b$7$=$&$$$&OC$K$J$k$N$J$i!"(BJPCERT/CC $B$8$c$J$/$F(B
NISC
$B$,=P$F$/$k$H;W$&$N$G$9$,!D!D!#(B
$B!U(B
$BN6C+Bg3X$G$O!"A43X@8$rBP>]$K$O$7$+$N93BN8!::$r$B!#HqMQ$O$R$H$j(B 1,000 $B1_$G$9!#(B
($B$5$9$,$KL5NA$K$O$G$-$J$+$C$?LOMM(B)
$B!U(B
2007$BG/EY%5%]!<%H%5!<%S%9=*N;M=Dj@=IJ$N$*CN$i$;(B
($B%H%l%s%I%^%$%/%m(B)$B!#%&%$%k%9%P%9%?!<(B 2008 $B$N%G%-G!2?$G$OBgLdBj$K$J$k$N$+$J!#(B
$B!U(B
Novell$B$,JF(BEFF$B$H6(NO$7!$%*!<%W%s%=!<%92=$rAK32$9$k%=%U%HFC5v$N2~@53hF0(B
($BF|7P(B IT Pro, 5/24)
$B!U(B
$B%7%s%I%i!<@=!"%o%$%dGKCG!D$:$5$s8!::$+#7@i4p$r6[5^E@8!(B
($BFIGd(B, 5/23)$B!#%*!<%A%9$K$D$E$$$F%7%s%I%i!<$b$G$9$+!#(B
$B5-;v$r$b$H$K2U>r=q$-$K$7$F$_$?!#(B
- $B;v8N8=>l(B: $B%W%m%`%J!<%I2.7&(B 2 $B9fEo(B ($BEl5~ET?yJB6h(B)
- 2005.08 $B1?E>3+;O!#%7%s%I%i!<$,J]2006.06.03 $B$N%7%F%#%O%$%DC]8e$NDj4|8!::$G!VLdBj$J$7!W(B
- 2007.03.25$B!"=;L1$+$i%7%s%I%i!<$K!V0[>o2;$,$9$k!W$H$NO"Mm(B
- $B%o%$%d%m!<%W(B 3 $BK\$N$&$A(B 1 $BK\$NB+$,40A4$KGKCG(B
- $B%7%s%I%i!<$O(B 2007.03.31 $B$^$G$K%m!<%W$r8r49!"(B2007.04.18 $B$K$O%(%l%Y!<%?=jM-$BET;T:F@85!9=$O(B 2007.05.23 $B$K$J$C$F$h$&$d$/9q$d<+<#BN$KJs9p(B
- $B%W%m%`%J!<%I2.7&$K$*$1$k%(%l%Y!<%?!<$N%m!<%WGKB;$K$D$$$F(B
($B9qEZ8rDL>J(B, 5/23)
$B7zC[4p=`K!Bh#1#2>rBh#59`$K4p$E$-!"%7%s%I%i!<%(%l%Y!<%?!J3t!K$,8=:_J]
$B!!$H$3$m$G!"B>$N%(%l%Y!<%?20$5$s$O$@$$$8$g$&$V$J$s$@$m$&$+!#(B
$B!U(B
MetaVNC - $BAk;X8~$J(BVNC
$B$H$$$&$b$N$,$"$k$N$G$9$M!#$J$+$J$+6=L#?<$$$G$9!#(B
$B!!(BUltraVNC $BF|K\8lHG(B
$B$b(B 1.0.2 $B%Y!<%9$N$b$N$,=P$F$^$7$?!#(B
UltraVNC $BK\2H(B$B$NJ}$G$O(B
1.0.3 $B$G(B Windows Vista $B$KBP1~(B$B$5$;$h$&$HJ3F.$7$F$$$i$C$7$c$k$h$&$G$9!#(B
$B$R$5$7$V$j$K(B
MSRC4 DSM Plugin for UltraVNC
$B$r8+$?$i!"(BARC4 $B$d(B AES $B$N(B plugin $B$b=P$F$$$k$s$G$9$M!#(B
- $B$$$m$$$m(B (2007.04.24)
-
$B!!%^%+%U%#!<$M$?$N(B VSE 8.0i $B$NOC!"$J$<$+:#$4$mF|K\8lHG$,=P$F$$$^$9!#F?L>4uK>$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!!(BDKIM (RFC 4871) $B$,(B Proposed Standard $B$K$J$C$?$=$&$G$9!#(B
$B!U(B
$BF|N)$,!HG>%$%s%?%U%'!<%9!I$N.!W$NG>3hF07WB,4o$r3+H/(B
($BF|7P(B IT Pro, 5/22)
$B!U(B
$BKc?>!J$O$7$+!K$N46@wKI;_$K$D$$$F!Z6[5^9pCN![(B
($BN6C+Bg3X(B, 5/23)$B!#$^$@46@w3HBg$K$O;j$C$F$$$J$$$h$&$G$9!#(B
$B!U(B
$BCf9q!"!V%V%m%0@)EY!W0F$rE12s(B
(ITmedia, 5/23)
$B!U(B
$BF1?M;o$HI=8=$r9M$($k%7%s%]%8%&%`!'(B
$B!J(B2$B!K%$%Y%s%H2q>l$G%^%8%C%/$GEI$k$H$$$&$3$H(B
(ITmedia, 5/23)
$B!U(B
BitTorrent$B$K$h$k0cK!G[?.$G@$3&=i$NM-:aH=7h!"9a9A:G9b:[$G(B
(Internet Watch, 5/23)
$B!U(B
GPLv3$B$NCf?4J[8n;N(BE$B!&%b%0%l%s;a!'!V(BFSF$B$X$N;Y1g$OJQ$o$j$J$/B3$1$k!W(B
(CNET, 5/22)
$B!U(B
$B%0!<%0%k!"%;%-%e%j%F%#%V%m%0$r3+;O(B--$B$=$NL\O@$_$O!)(B
(CNET, 5/23)$B!"(B
Introducing Google's online security efforts
(Google Online Security Blog, 5/21)
$B!U(B
$B8|@8O+F/0Q0w2q$G!V%0%j!<%s%T%"Fn5*!W$rE0DlDI5Z(B
($BJ]:dE8?M$N$I$3$I$3F|5-(B, 5/22)$B!#:#F|$b$d$C$F$$$k$i$7$$!#(B
$BM=;;0Q0w2q=8Cf$G!V%0%j!<%s%T%"Fn5*!W$N@UG$$rLd$&(B
($BJ]:dE8?M$N$I$3$I$3F|5-(B, 5/23)
$B!!0J2<$bG/6b$M$?(B:
$B!U(B
Followup to packet tools story
(SANS ISC, 5/22)
$B!U(B
$B$o$l$o$l$O!V0-$N?u<4!W$@!*!!6bAm=q5-B&6a$,3+$-D>$j(B
(asahi.com, 5/23)$B!#3+$-D>$j$@$J$s$F!D!D!#%+%_%s%0%"%&%H$H8@$C$F$"$2$^$7$g$&!#(B
$B!U(B
$B#B#S#E!'!VJF5mFy$O7nNpLd$o$:M"=P2DG=!W9q:]5!4X$G0lCW(B
($BKhF|(B, 5/23)
$B!U(B
$B!!!J3t!KEDBu67$K$D$$$F(B
($B9qEZ8rDL>J(B, 5/23)$B!"(B$B9=B$7W;;=q56AuLdBjBP:vO"Mm6(5D2q!JBh#3#52s!K5D;v35MW(B
($B9qEZ8rDL>J(B, 5/23)
$B!U(B
$B;0I)$U$=$&@=Bg7?%H%i%C%/$N%/%i%C%A%O%&%8%s%0$KBP$9$k(B
$B!!=EE@E@8!5Z$S%5%s%W%j%s%0D4::$N
($B9qEZ8rDL>J(B, 5/23)
$B!U(B
$B%3!<%9%?!JE@8!(B
($BKhF|(B, 5/23)$B!"(B
$B%3!<%9%?!
($B9qEZ8rDL>J(B, 5/23)
$B!U(B
$B%Z%M%H%l!<%7%g%s(B $B%F%9%?!<$h$j0&$r9~$a$F!#(B
(Microsoft $B%;%-%e%j%F%#(B $B%K%e!<%9%l%?!<(B, 5/23)
$B!U(B
Microsoft Security & Management Conference$B!#(B
2007.06.25$B!"El5~ET@iBeED6h!"L5NA!#(BForeFront & System Center
$B$M$?$N$h$&$G$9!#(B
$B!U(B
$B:F0QBw6He$N8D?M>pJs$,N.=P(B
$B$N7o!">u67$,KL=)ED;T$K$b9-$,$C$F$$$k$h$&$G$9!#(B
- $B8D?M>pJs$NO3$($$$K$D$$$F$N$*OM$S$H$*CN$i$;(B
($BKL=)ED;T(B, 5/22)$B!#9gJ;;~:n6H$G$9$+!#(B
- $BKL=)ED;T$K$*$1$k8D?M>pJsN.=P$K4X$9$k$*OM$S(B
(NEC, 5/23)
- $B;38};T!!8D?M>pJs#7K|#7#5#6#07oN.=P(B
($B$_$J$H;38}9gF1?7J9
$B!U(B
$B!ZB.Js![!V$R$+$jEEOC!W$,(BNTT$BEl@>4V$GITDL$K(B
($BF|7P(B IT Pro, 5/23)$B!"(B
$B!ZB3Js![(BNTT$BEl@>4V$N!V$R$+$jEEOC!WITDL$O(B23$BF|(B10$B;~(B6$BJ,$K2sI|!$860x$OD4::Cf(B ($BF|7P(B IT Pro, 5/23)$B!#El$H@>$r$D$J$2$k5!3#$,(B5$B7n(B23$BF|8aA0(B6$B;~(B30$BJ,$4$m$+$i8aA0(B10$B;~(B6$BJ,$^$G;_$^$C$F$$$?LOMM!#(B
benjamin $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
$B8D?M>pJsJ]8nK!$O2~@5$7$J$$J}8~!)(B
($B$^$k$A$c$s$N>pJs%;%-%e%j%F%#5$$^$0$lF|5-(B, 5/23)
$B!!$H$$$&$3$H$O!"0Q0w$O2~@5$,I,MW$@$H;W$C$F$$$F$b;vL36I$,H?BP$H$$$&$3$H$G!&!&!&$H$$$&$3$H$J$N$G$7$g$&$+!)!)!)(B
$B!!$?$H$($P(B $BBh#1#52s(B($BJ?@.#1#9G/#47n#5F|!K(B $B5D;vMW;](B ($BBh#2#0pJsJ]8nIt2q(B)
$B$d(B
$BBh#1#72s(B($BJ?@.#1#9G/#57n#2#1F|!K;qNA#1!!8D?M>pJsJ]8nIt2q$K$*$1$kO@5D$N35MW(B ($BBh#2#0pJsJ]8nIt2q(B)
$B$rFI$`8B$j$G$O!"!VAa5^$KK!2~@5$,I,MW$G$"$k!W$H$N9g0U$OF@$i$l$F$$$J$$$h$&$K8+$($^$9$M!#;vL36I$H$7$F$O%,%$%I%i%$%s@0Hw0F$r;Y;}$7$?J}$,3Z$G$9$+$i!"$=$&$7$?$@$1$J$N$G$O!#(B
$B!!$"$H!"(B$BBh#1#52s(B($BJ?@.#1#9G/#47n#5F|!K(B $B5D;vMW;](B$B$N$*$o$j$K=P$F$/$k!VBh;0
$B!{(B $B2f$,9q$K$b=t309q$NBh;0p=hM}$NE}0lE*$JAk8}$r@_$1!"$=$ND9$,%3%_%C%7%g%J!<$H$7$F=P$i$l$k$h$&$K$9$k$N$,$h$$$N$G$O$J$$$+!#(B
$B!{(B $B2f$,9q$K$O!"2$=#JB$_$NFHN)4F;k5!4X$,B8:_$7$J$$$?$a!"%G!<%?J]8n%W%i%$%P%7!2A$5$l$:!"Ev3:2q5D$NHs8x3+2q9g$K;22C$G$-$J$$>uBV$G$"$k!#(BEU$B$G$O!"%G!<%?J]8n;XNa$GFHN)4F;k5!4X$r@_$1$k$3$H$H$5$l$F$$$k!#(BEU$B$OFHN)4F;k5!4X$rM-$9$k%*!<%9%H%i%j%"$G$5$(!"J]8n?e=`$,IT==J,$HI>2A$7$F$$$k$3$H$+$i!"2f$,9q$N@)EY$bIT==J,$HI>2A$5$l$k62$l$,$"$k!#2f$,9q$N@)EY$N9q:]E*$JI>2A$O9b$/$J$$!#Bh;0
$B!!LgA0J'$$!D!D!#$3$l$,(B e-japan / e-gov $B$N
$B!U(B
$B%j%H%S%M%s%3;a;&32!"1Q8!;!$,%k%4%\%$;a$r;&?M:a$G5/AJ$X(B
($BFIGd(B, 5/22)
$B!U(B
$B?6$j9~$a:>5=!!Ho326bJV4T!"%M%C%H2M6u@A5a$K$b!?<+L1It2qN;>5(B
($BKhF|(B, 5/22)
$B!U(B
$B%K%s%F%s%I!<#D#S!!
($BKhF|(B, 5/22)
- KB937383 - Microsoft Update $B$^$?$O(B Windows Update $B$,=*N;$7$J$$(B
-
$B!!(BKB927891 $B=$@5%W%m%0%i%`!"M=9p$I$*$j(B WSUS $B$GN.$l$F$^$9$M!#:F5/F0$rB%$5$l$^$7$?!#(B
$B!!(B$B%^%$%/%m%=%U%H%;%-%e%j%F%#%"%I%P%$%6%j(B (927891) Windows $B%$%s%9%H!<%i(B (MSI) $B$N=$@5(B
$B$b=P$F$$$^$9!#(B
KB927891 - You receive an access violation error and the system may appear to become unresponsive when you try to install an update from Windows Update or from Microsoft Update (rev.8.0)
$B$K$O$3$s$J5-=R$,(B:
To resolve this problem, you must install this update together with the Windows Update Automatic Client 3.0. The Windows Update Automatic Client 3.0 will automatically be released through Automatic Updates by June 30, 2007. The updated Windows Client changes the thread modeling to move MSI scans to a thread that is separate from the user interface.
$B!!(B6/30 (US $B;~4V$@$m$&(B) $B$K<+F099?7$GN.$l$F$/$k$h$&$G$9!#(B
$B!!$"$H!"(BWindows 2000 $BMQ$N(B KB927891 $B=$@5%W%m%0%i%`$b7k6IG[I[$5$l$F$$$k$h$&$G$9!#(BWSUS $B$GN.$l$F$-$F$^$7$?$7!"%@%&%s%m!<%I%;%s%?!<$K$b$"$j$^$9(B:
Windows 2000 $BMQ$N99?7%W%m%0%i%`(B (KB927891)
(Microsoft)$B!#(BJubilee $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
- $B%^%$%/%m%=%U%H(B $B%;%-%e%j%F%#(B $B%"%I%P%$%6%j(B (937696)
Microsoft Office Isolated Conversion Environment (MOICE) $B$*$h$S(B Microsoft Office $B8~$1%U%!%$%k(B $B%V%m%C%/5!G=$N8x3+(B
-
$B!!4XO"(B: Two Advisories on Non-Security Updates
(MSRC blog, 2007.05.22)
$B!!(BUNICODE $B$K4^$^$l$kA43QJ8;z(B ($BA43Q1Q?t$J$I!"(BFULLWIDTH xx) $B$dH>3QJ8;z(B ($BH>3Q%+%J$J$I!"(BHALFWIDTH xx)
(FF00-FFEF)
$B$r;H$&$H!"(BIDS $B$d(B IPS $B$d(B WAF $B$r2sHr$G$-$k$H$$$&OC!#(B
Checkpoint, ISS, Cisco, 3com $B$,$R$C$+$+$C$F$$$kLOMM!#(B
$B$b$H$b$H(B JIS X 0201 $B$d(B JIS X 0208 $B$K4^$^$l$F$$$?J8;z$NB>$K$b!"%O%s%0%k$H$+$bF~$C$F$^$9$M!#(B
$BF|K\?M$d4Z9q?M$G$J$$?M$K$O$J$8$_$N$J$$J8;z$G$9$+$M!"$d$C$Q$j!#(B
$B!U(B
$B%H%l%s%I%^%$%/%m$,F|K\9qFb@lLg$N%&%$%k%92r@O%;%s%?!<$r3+@_(B
($BF|7P(B IT Pro, 5/22)$B!#!V%j!<%8%g%J%k%H%l%s%I%i%\!W$@$=$&$G!#(B
$B!U(B
$B=;L1I<%3!<%I$r;TD.B<$,N.=P$5$;$F$bA4
($B9bLZ9@8w!w<+Bp$NF|5-(B, 5/21)$B!#$3$l$C$F$D$^$j!"=;4p%M%C%H$K$*$$$F$O!"$3$&$$$&;v>](B ($B%G!<%?$NBgNLN.=P(B) $B$X$NBP1~$,L@3N2=$5$l$F$$$J$$$H$$$&$3$H$J$s$8$c$J$$$N$+$7$i$s!#(B
$BD.(B: $BAmL3>J$KAjCL$7$?$H$3$m?&8"$G
$B!!4{H/9TJ,$OA4$FL58z$K$7!"?7HG$KL5=~8r49$9$k$N$,6Z$@$H;W$&$,!"$=$&$$$&H/A[$OAmL3>J$r4^$a$F3'L5$J$N$@$m$&$+!#%/%l%8%C%H%+!<%I2qpJs$,O31H$7$?$H$-$K2?$r$d$C$F$$$k$N$+$r9M$($?$3$H$O$J$$$N$@$m$&$+!#(B
$B!U(B
$BLr=j$N(BPKI$B$N=PC-L\$V$j$bKv4|E*(B $B:42l8)7Y;!K\It$N>l9g(B
($B9bLZ9@8w!w<+Bp$NF|5-(B, 5/13)
$B!U(B
Winny $BCx:n8"K!0cH?Vs=u;v7o4XO"(B
- Winny$BCx:n8"K!0cH?Vs=u;v7o$NH=7h!J(B1$B!K(B
$B%=%U%H%&%(%"$N3+H/<+BN$O:a$KLd$o$l$F$$$J$$(B
($BKL2,90>O$N!VCN$C$F$*$-$?$$(BIT$BK!N'F~Lg!W(B, 4/13)
- Winny$BCx:n8"K!0cH?Vs=u;v7o$NH=7h!J(B2$B!K(B
$B:[H==j$,G'Dj$7$F$$$k5R4QE*;v
($BKL2,90>O$N!VCN$C$F$*$-$?$$(BIT$BK!N'F~Lg!W(B, 4/27)
- Winny$BCx:n8"K!0cH?Vs=u;v7o$NH=7h!J(B3$B!K(B
$BCx:n8"K!0cH?Vs=u$H5;=QE*8!>Z$ON>N)$9$k$HH=CG(B
($BKL2,90>O$N!VCN$C$F$*$-$?$$(BIT$BK!N'F~Lg!W(B, 5/11)$B!#(B
$B!V2A$7$?$i$$$$$N$+$r9M$($F$_$?$$$H;W$$$^$9!W(B
$B$O(B 5/25 $B8x3+$J$N$+$J!#(B
- Winny$B;v7oH=7h$G9M$($kFbLL$NLdBj(B
($BF|7P(B IT Pro, 5/22)
- $B#W#i#n#n#yCx:n8"K!0cH?Vs=u;v7oCO:[H=7h$K$D$$$F(B
($B%W%m%0%i%`4XO"JF9qH=7h=8(B, 5/8)
- $B#W#i#n#n#yCx:n8"K!0cH?Vs=u;v7o(B $BCO:[H=7h(B
($B%W%m%0%i%`4XO"JF9qH=7h=8(B, 4/19)
$B!U(B
$B8x@5
($BFIGd(B, 5/21)
$B!U(B
$BO*!V8@O@$N<+M3!W>CLG@#A0!!%W!<%A%s@/8"$,05NO6/2=(B
($B;:7P(B, 5/22)
$B!U(B
Estonia, Botnets, and Economic Warfare
(SANS ISC, 5/21)$B!"(B
$B!H%O%C%+!
($B;:7P(B, 5/21)$B!#0KG=$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
$B!V$"$k$"$k!W@):n$NF|K\%F%l%o!<%/!"?72q
($BFIGd(B, 5/22)$B!#%F%l%o!<%/<+BN$r!V$J$+$C$?$3$H!W$K$9$k$h$&$G!#(B
$BCf?HF1$8$A$c$&$N!#(B
$B!U(B
$B:GBg(B25$BG/4VG3NAJd5k$NI,MW$J$$@x?e4O(B
(technobahn, 5/22)
$B$3$&$7$?86;RO'$,IaDL!"$I$N0L$N4V!"G3NA$NJd5k$J$7$KF0$+$7B3$1$k$3$H$,$G$-$k$N$+$,H=$i$J$$$N$G!"H=CG$N$7$h$&$b$J$$$,!"(B
$B!!(B$B73;v8&5f(B 2007.06 $B$K!V8!>Z!'86;RNO4ODz$N3KG3NA8r49$N
$B!U(B
$B6bM;D#$,!VFbItE}@)Js9p=q!W$N=q$-J}$r8xI=!$I>2A7k2L$O(B4$BCJ3,$GI=<((B
($BF|7P(B IT Pro, 5/18)
$B!U(B
$B%_%/%7%#0-MQ$7=w@-K=9T!!5~ETCO:[$GKADD!!!VH`;a$K$P$i$9!W8};_$a(B
($B5~ET?7J9(B / Yahoo, 5/18)
$BKAF,DD=R$K$h$k$H!"EDCfHo9p$O:rG/#1#17n2<=\!"%_%/%7%#$G%W%m%U%#%k$r8+$F6=L#$rJz$$$?5~ETI\Fb$N#2#0Be$N=w@-$K%a!<%k$r2?EY$bAw$j!"7HBSEEOC$NHV9f$rJ9$-=P$7$?>e!"=w@-$r8F$S=P$7$?!#=w@-$O!"CG$jB3$1$k$H%_%/%7%#$G0-8}$r=q$-9~$^$l$k$H;W$C$F:,Ii$1$7!"EEOCHV9f$r65$($F8F$S=P$7$K$b1~$8$?!"$H$$$&!#(B
$B!!$=$N=w@-$K$O%9%k!7W$K%9%k!
$B!U(B
$B%"%s%4%i!'@PL}B3$-86;RNO%V!<%`$+(B
(JANJAN, 5/21)
$B!U(B
SNMP$B$H(Bv3$B%;%-%e%j%F%#(B
(ITmedia, 5/18)$B!#(B
$B!U(B
PC$B%"%W%j$N(B28$B!s$O=$@5%Q%C%AL$E,MQ!$(BQuickTime 7$B$G$O(B33$B!s(B
($BF|7P(B IT Pro, 5/18)$B!#(B
Secunia Software Inspector
$B$G$N7k2L$@$=$&$G!#(B
$B!U(B
$BBg3X$N$O$7$+5Y9VAj
(asahi.com, 5/22)$B!#4XO"(B:
$B!!M=KI=hCV$r$7$F$$$k3X9;$,$"$k$=$&$G(B:
$B!!6bBtBg3X!J6bBt;T!K$G$O!"0l:rG/$+$i?7F~@8Ls#1#8#0#0?M$NA40w$K!"$O$7$+!"Iw?>!"$*$?$U$/Iw
($BCfN,(B)
$B!!@lLg2H$O!VJF9q$G$OLH1V$r;}$C$F$$$k$3$H$rF~3X$N>r7o$K$9$kBg3X$b$"$k!#6bBtBg$N$h$&$JBP:v$r$H$C$F$$$l$P5Y9V$K$9$kI,MW$O$J$/!"B>$NBg3X$K$b9-$^$C$F$[$7$$!W$HOC$7$F$$$k!#(B
$B!!4XO"(B: $BKc?>!J$O$7$+!K$K4X$9$k=EMW$J$*$7$i$;(B
($B6bBtBg3X(B, 5/21)
$B!U(B
$B@>F|K\$N5{$J$N$K!DKL$N%5%o%i$,Bg5y!!@D?9(B
(asahi.com, 5/21)
$B!!(BBadBunny seen in "the wild" - OpenOffice multiplatform macro worm discovered
(Sophos, 2007.05.21) $B$NOC!#(B
$B:#2s$N%&%$%k%9$O!"J#?t$N(BOS$B>e$GF0:n$9$k$3$H$,FCD'!#(BOpenOffice.org$B$N%^%/%m5!G=$r0-MQ$9$k$N$G!"(BOpenOffice.org$B$,%$%s%9%H!<%k$5$l$F$$$k4D6-$J$i!"(BOS$B$K$+$+$o$i$:F0:n$9$k!#6qBNE*$K$O!"(BWindows$B$H(BMac OS$B!"(BLinux$B$N$$$:$l$G$bF0:n$9$k!#(B
$B!!$5$9$,$O(B OpenOffice.org $B$G$9$M!#$9$P$i$7$$$G$9!#(B
2007.05.25 $BDI5-(B:
$B!!F|7P(B IT Pro $B5-;v$K$O(B
$B%&%$%k%9$,;E9~$^$l$?J8=q%U%!%$%k$r3+$/$H!"%"%@%k%H2hA|$,%@%&%s%m!<%I$5$l$FI=<($5$l$k$H$$$&!#(B
$B$H$"$k$o$1$G$9$,!"(BSB.Badbunny
(Symantec) $B$KEv3:2hA|$N(B URL $B$,=P$F$^$9$M!#3N$+$K%"%@%k%H2hA|$@$J$"!#(B
$B!!(BJavaScript $B$d(B Perl $B$d(B Ruby $B$d(B IRC $B$r;H$&$N$G$9$+!D!D!#$*$^$1$K%"%s%A%&%$%k%9%Y%s%@!<%5%$%H$K(B ping $B$G$9$+!#(B
2007.06.11 $BDI5-(B:
$B!!%(%m$&$5$.!"Mac$B!"(BLinux$B!"(BWindows$B$K46@w$9$k(BOpenOffice$B%o!<%`(B--$B%;%-%e%j%F%#4k6H$,7Y9p(B
(CNET, 2007.06.11)
$B!!!V(BMicrosoft Office Isolated Conversion Environment (MOICE): Open XML$B%U%)!<%^%C%H$X$NJQ49%=%U%H!W$H!V(BOffice 2003 / 2007 $B$G;H$($k%U%!%$%k%V%m%C%/5!G=!W$,EP>l$7$?$=$&$G$9!#$7$+$7F|K\8l$,$o$1$o$+$i$s$N$G26K]Lu(B:
2007.05.23 $BDI5-(B:
$B!!4XO"(B: Two Advisories on Non-Security Updates
(MSRC blog, 2007.05.22)
$B!!(BOpera 9.x $B$K7g4Y!#(Btorrent $B%U%!%$%k$N=hM}$K$*$$$F(B buffer overflow $B$9$k7g4Y$,$"$j!"96N,(B torrent $B%U%!%$%k$K$h$C$FG$0U$N%3!<%I$rl9g$K$N$_H/F0$9$k!#(B
$B!!(BOpera 9.21 $B$G=$@5$5$l$F$$$k!#(B
$B!!4XO"(B: How can I disable the BitTorrent client in Opera? (opera.com)
2007.05.25 $BDI5-(B:
$B!!(BiDefense Security Advisory 05.23.07: Opera Software Opera Web Browser Transfer Item Pop-up Menu
Stack Overflow Vulnerability
$B!!(B[SECURITY] OpenSSL 0.9.8c and 0.9.7k released
$B$NOC$G$9$+!D!D!#$$$C$=(B IMSS 7 $B$K0\9T$7$?J}$,$$$$$N$+$J$"!#(B
- KB937383 - Microsoft Update $B$^$?$O(B Windows Update $B$,=*N;$7$J$$(B
-
$B!!4XO"(B: $B<+F099?7$J$I$G(BCPU$BIi2Y$,(B100$B!s$K$J$kIT6q9g$r=$@5$9$k(B
(@IT, 2007.05.18)
$B!!0J2<$N(BBBS$B$NJs9p$J$I$K$h$k$H!">e5-$NA`:n8e!"$5$i$K(B%windir%$B%U%)%k%@$K$"$k(BWindows Update.log$B$d(BWindowsUpdate.log$B%U%!%$%k$r:o=|$9$k$H!"%9%-%c%s;~$NIi2Y$,2<$,$k$H$NJs9p$,$"$k!#(B
* $B$3$NLdBj$K4X$9$k%G%#%9%+%C%7%g%s!&%9%l%C%I(B$B!J(BHotFix Report BBS$B!K(B
$B!!(BWUA $B$,%m%0%U%!%$%k$r2r@O$7$F$?$j$9$k$s$@$m$&$+!D!D!#(B
$B!!(BFirefox 2.0.0.3 $B$G(B about:config $B$9$k$H$3$s$J$N$,=P$^$9!#(B
$B!!$H$j$"$($:A4It%A%'%C%/$7$F!"(Bhttp://www.microsoft.com $B$r%V%i%&%:$7$F$$$k>uBV$G(B
https://www.microsoft.com $B$r%V%i%&%:$7$h$&$H$9$k$H!"$3$s$J7Y9p$,=P$^$9!#(B
$B!!(Bhttps://www.microsoft.com $B$r%V%i%&%:$7$F$$$k>uBV$G(B
http://www.microsoft.com $B$r%V%i%&%:$7$h$&$H$9$k>l9g$O$3$&$G$9!#(B
$B!!$I$A$i$b!V7Y9p(B OFF$B!W$,%G%U%)%k%H$G!"$*$^$1$K!VKh2s7Y9p$9$k!W$r%A%'%C%/$7$F(B ok $B$7$J$$$H!"0J8e$O7Y9p$,>C$($F$7$^$$$^$9!#$3$l$rKI;_$9$k$K$O!"(B
security.$B$J$s$H$+(B.show_once $B$r(B false $B$K@_Dj$9$l$P$h$$$h$&$G$9!#(Bfalse $B$@$H!"%A%'%C%/$5$l$?>uBV$,%G%U%)%k%H$K$J$k$h$&$G$9!#(B
$B!!$H$$$&$o$1$G!"$3$s$J46$8$K$9$k$H!"ItJ,E*$K$O2~A1$5$l$k$h$&$G$9!#(B
$B!!B>$K$b2~A1@_Dj$,$"$C$?$i65$($F$/$@$5$$(B _o_$B!#(B
$B!V(BHTTPS $B$J%Z!<%8$+$i(B JSONP $B$G(B HTTP $BDL?.$7$F$$$F$b!D!D!W$H$$$&$N$r3NG'$G$-$k$k$h$&$J%G%b%5%$%H$,$I$3$+$K$J$$$+$7$i$s!#(B
$B!U(B
$B:F0QBw6He$N8D?M>pJs$,N.=P(B
($BF|7P(B IT Pro, 5/18)$B!#(B
$B0&FnD.!"BPGO;T!";38};T$N8D?M>pJs$,(B Winny $B$GN.=P!#(B
$B!U(B
$B!H%d%U%*%/:>5=!IL5:a3NDj!!:DL3LH@U!"J[=~M=Dj$J$7(B
($BEl5~?7J9(B, 5/19)$B!#$d$C$?$b$s>!$A!#(B
$B!U(B
$B%Z%k!-73!"?M8"?/32$K%U%8%b%j85BgE}NN4XM?$N>Z8@(B
(JANJAN, 5/18)
$B!U(B
$B%V%k%,%j%"!'%m%7%"!&%(%M%k%.!<$X$NBgI}0MB8(B
(JANJAN, 5/19)
$B!U(B
$B%O%A$N8@$$J,!!J9$$$F$/$l!A%K%[%s%_%D%P%AA}2C$N$o$1(B
(JANJAN, 5/19)
$B!U(B
Symantec AV problem on XP SP2 Simplified Chinese
(SANS ISC, 5/18)$B!#(B
Notron 360 $BBPCf9q8lHG(B Windows (Windows XP SP2 $B4JBN;zCfJ8HG(B)$B!#(B
netapp32.dll $B$H(B lsass.exe $B$r(B Backdoor.Haxdoor
$B$H8m8!=P$7$F:o=|$G$9$+!#(B
$B!U(B
Advisory: Sophos Anti-Virus for Windows 2000+ - when upgrading to version 6.5.7, a reboot is requested by computers with Sophos Client Firewall installed
(Sophos, 5/15)
$B!U(B
New For-Profit Symbian Trojans
(F-Secure blog, 5/18)$B!#%1!<%?%$%&%$%k%9J}LL$b$$$h$$$h6bA,$G$9$+!#(B
$B!U(B
DDoS Attacks on Finnish Sites
(F-Secure blog, 5/18)$B!#(BF-Secure $B$5$s$O$$$=$,$7$$$=$&$G$9!#(B
$B!U(B
$B0-K!NL;:!&0BG\Fb3U$X$N7Y9p(B($B3$EOM:0l$5$s(B)
($BJ]:dE8?M$N$I$3$I$3F|5-(B, 5/19)
$B!U(B
$B%5%s%G!<%W%m%8%'%/%H!&%3%a%s%HL>M@TLB;AJ>Y(B
(SLAPP WATCH, 5/19)
$B0BG\M@TLB;$GAJ$($F$$$^$9!#(B($BCfN,(B) $B$H$-$N8"NOM@TLB;AJ>Y$O!"CmL\$7$J$$$o$1$K$O$$$-$^$;$s!#0BG\@/8"$rH]DjE*$K07$C$F$$$k%a%G%#%"$OD+F|?7J9pJs$rH/$9$k9T0Y$G$"$j!"8"NO$N>pJsH/?.$K9~$a$i$l$?0U?^$dA`:n@-$rFI$_9~$`%j%F%i%7!<$O!"K:$l$?$/$J$$$b$N$G$9!#(B
$B!U(B
$B%$%i%/CsN1JF73$NL14VMW0w!"#3$+7n$G#1#4#6?M;`K4!DJF;f(B
($BFIGd(B, 5/19)$B!#L14V73;v2q
$B!U(B
$B7Y415_=P;~$K#S#A#TBb0w7b$?$l;`K4!!0&CNN)$F$3$b$j(B
(asahi.com, 5/17)$B!#%\%G%#%"!<%^!<$OAuCe$7$F$$$?$h$&$J$N$G$9!#(B
$B%\%G%#%"!<%^!<$N@-G=$,0-$$(B? $BHH?M$N=F$,6K$a$F6/NO(B?
$BKI$.$h$&$N$J$$3QEY$+$i7b$?$l$?(B?
$B!!(B$B#1%;%s%A$N$9$-4V$KHoCF!!=^?&$NNS5!F0Bb0w(B
($BCfF|(B, 5/18)$B!#86M}E*$K@8$8$k$o$:$+$J$9$-4V$K6vA3E*Cf$7$F$7$^$C$?LOMM!#(B
$B#S#A#TBb0wA@7b!";`K4=i$N%1!<%9!!8=>l$NO"7H!"AuHw8+D>$7(B
($BCfF|(B, 5/18)$B!#8+D>$7$H8@$C$F$b!"(B$B%"!<%`%9!<%D(B$B$_$?$$$JE[$G$b$D$/$i$J$$$H$I$&$7$h$&$b$J$$$N$G$O!#$"$k$$$O%5%$%\!<%02=(B ($B5ABN2=(B) $B$+!#$I$A$i$+$H$$$&$H!"AuHw$h$j$O:n@o$NJ}$rJQ$($k$Y$-$J$s$8$c$J$$$N$+!#(B
$B!!@$$NCf$K$O!"(B$B%l%4$GB?5S@o$B?M$b$$$k$s$G$9$M!D!D!#(B
$B%Q!<%D20$5$s$,$"$k$N$+!D!D!#(B
$B!U(B
P2P$BF02hG[?.$N!V(BJoost$B!W$,BfIw$NL\$K(B
($BF|7P(B BP, 5/17)
YouTube$B$H0[$J$kBh;0E@$O!$(BJoost$B$,5/6HEv=i$+$i%3%s%F%s%D!&%[%k%@!<$H9-9p$r0lLvM-L>$K$7$?$N$O!$H`$i$,3+H/$7$?(BP2P$B%U%!%$%k8r49%=%U%H$N!V(BKaZaA$B!W$G$"$C$?!#%3%s%F%s%D!&%[%k%@!<$K4w$_7y$o$l$?(BKaZaA$B$r3+H/$7$?N>;a$,!$$3$l$@$1%3%s%F%s%D!&%[%k%@!<$d9-9p
$B!U(B
[AML 13966] $BMh=5$NK!L30Q0w2q$KCmL\$r!*!*(B
$BMh=5$+$i=05D1!K!L30Q0w2q$G$O!"6&KE:aEy?7@_K!0F$+!VHo32Y;22C@)EY!WK!0F$N$I$A$i$+$N?35DF~$j$,$*$3$J$o$l$k$3$H$K$J$k$H;W$o$l$^$9!#(B
$B!U(B
Google$B$K$h$k%^%k%&%'%"O@J8(B
(Geek $B$J$Z!<$8(B, 5/15) (info from Web$B%Z!<%87PM3$G$N%^%k%&%'%"46@w;vNc(B, Lucablog)$B!#(BThe Ghost in the Browser: Analysis of Web-based Malware
(USENIX HotBots '07) $B$N>R2p5-;v!#(B
$B!U(B
$B0E9f5;=Q$O%&%$%k%9:n
(ITmedia, 5/16)$B!"(B$B%3%9%H$N$?$a$K5;=Q3W?7$r5>@7$K$7$?$i!"%&%$%k%9:n ($BF|7P(B IT Pro, 5/16)$B!#%R%2$N$*$8$5$s$NOC!#(B
$B%W%l%98~$1$N!V9V1i!W$J$s$@$m$&$+!#(B
$B!U(B
$B%&%$%k%9$K$h$k(B2$B
($BF|7P(B IT Pro, 5/16)
$B!U(B
$B!V(BMicrosoft$B
(Open Tech Press, 5/17)
$B!U(B
$BJF9q!!9qEZ0BA4J]>c>J$H9qEZ8rDL>J$K$h$k!"(B
$BF|!]JF4V$G$N3$>e2_J*DI@W%?%0%7%9%F%`$NDL?.G=NOZ
($BF|>&%(%l(B, 5/18)
$B!U(B
$B%Q%C%A$rEv$F$k$^$G;~4V2T$.$r$9$k$?$a$N%"%W%i%$%"%s%9(B
(slashdot.jp, 5/17)$B!#EP>l$7$?!"$C$F%"%J%?!D!D!#(B
ISS $B$O2?G/$bA0$+$i(B
Virtual Patch
$B$rDs>'!&@=IJ2=$7$F$$$k$s$G$9$1$I$M$(!#(B
$B!U(B
$BL!2h$rL5CG%M%C%HG[?.!!H/GdF|A0!"%&%#%K!<$G(B
($BCfF|(B, 5/18)$B!#(BWinny $B$H$$$($P5~ETI\7Y!"$rL\;X$7$F$$$k$s$G$9$+$M!#(B
$BI\7Y$K$h$k$H!"%&%#%K!<$rMxMQ$7$?L!2hG[?.$NE&H/$OA49q=i$H$$$&!#(B
$B!!$=$s$J$3$H$r$o$6$o$68@$&E[$K!"$=$l$r$o$6$o$67G:\$9$kE[$G$9$+!#(B
$B4XO"(B:
$B!U(B
$B$O$7$+(B ($BKc?>(B) $BOC(B
$B!!N6Bg$G$b46@w;vNc$,=P$F$$$?$=$&$G$9!#9,$$$K$b3HBg$;$:$K:Q$s$@$h$&$G$9$,!#(B
$B!U(B
$B%;%-%e%j%F%#JY6/2q!w?@8M!"6(NO
($BIpED7=;K(B, 5/18)
$B!!(BAdobe Version Cue CS3
$B%5!<%P$r(B Mac OS X $B$K%$%s%9%H!<%k$9$k$H!"(BMac OS X $B$N%Q!<%=%J%k%U%!%$%"%&%)!<%k$,L58z$K$J$C$F$7$^$&$H$$$&OC!#(BCVE-2007-2682$B!#%$%s%9%H!<%k8e$K%Q!<%=%J%k%U%!%$%"%&%)!<%k$r
$B!!(BBrightStor ARCserve Backup 11.x $B$K(B 2 $B$D$N(B DoS $B7g4Y!#(B
Mediasvr.exe $B$H(B caloggerd.exe $B$,(B DoS $B967b$r
$B!!8=;~E@$G$O=$@5%W%m%0%i%`$O$^$@$J$$$h$&$@!#(B
CA $B$O(B ren mediasvr.exe mediasvc.exe.disable $B$7$F$+$i(B CA BrightStor Tape Engine $B%5!<%S%9$r:F5/F0$9$k$3$H$r?d>)$7$F$$$k!#(B
$B!!(BNorton Personal Firewall 2004, Norton Internet Security 2004
$B$KIUB0$9$k(B ActiveX $B%3%s%H%m!<%k(B (ISLALERT.DLL) $B$K(B buffer overflow $B$9$k7g4Y$,$"$j!"96N,(B web $B%Z!<%8$,G$0U$N%3!<%I$rCVE-2007-1689
$B!!(BLiveUpdate $B$r;H$C$F:G?7$K99?7$9$l$P=$@5$5$l$k!#(B
$B;dE*$K$O$`$7$m!"(BNIS 2004 $B$,$$$^$@$K0];}$5$l$F$$$k$3$H$NJ}$,6C$-$@!#(B
$B!U(B
$B?M5$DLHN%5%$%H$K@H
(ITmedia, 5/14)$B!#9-9p$r0-MQ$9$k;vNc$,A}$($F$$$k$h$&$J!#(B
$B!!4XO"(B: An experiment in using sponsored ads for malware
(McAfee blog, 5/17)
$B!U(B
JASRAC $BJ}LL(B
$B!U(B
Microsoft Office 2007 $B%U%!%$%k(B $B"*(B 2003 / 2004 $B%3%s%P!<%?(B
$B!U(B
$BJULn8E$OG3$($F$$$k$+(B
$B!U(B
$BL$CN$N$<$$
($BF|7P(B IT Pro, 5/17)
$B!U(B
OSSEC HIDS
v1.2 $B$,=P$F$$$^$9!#(B
$B!U(B
$BAH$_9~$_%;%-%e%j%F%#!
($BF|7P%(%l%/%H%m%K%/%9(B2007$BG/(B5$B7n(B7$BF|9f(B)
$B$H$$$&FbMF$,7G:\$5$l$F$$$k$=$&$G!#(B
$B!U(B
$B%7%9%F%`$NN"8}$r:n$C$F80$r$+$1$F$*$/$?$a$N(BSBD$B!J(BSecure Back Door$B!K(B
(Open Tech Press, 5/7)$B!#(B
SAdoor
$B$_$?$$$J$b$N$G$9$+$M!#(BSAdoor $B$[$I(B rootkit $B$C$]$/$O$J$$$h$&$G$9$,!#(B
Remacc.SAdoor ($B%7%^%s%F%C%/(B)
$B!U(B
$B!Z2q8+B.Js![(BNTT$BEl$,%U%l%C%D$NBg5,LO>c32$G
($BF|7P(B IT Pro, 5/16)$B!"(B
$B!Z>\Js![(BNTT$BEl$,%U%l%C%D>c32$N860xJs9p!$5l%=%U%HEk:\$N%k!<%?!<$,7PO):F7W;;$7$-$l$:(B
($BF|7P(B IT Pro, 5/16)$B!#%I%_%NE]$7$,$-$l$$$K7h$^$C$F$7$^$C$?$N$G$9$+!#(B
$B!VBT5!7O$X$N@Z$j$+$(!W$N;vA01i=,$,$G$-$l$P$h$$$N$@$m$&$1$I!"$J$+$J$+$=$&$b$$$+$J$$$7$J$"!#(B
$B!!Mh7n$+$i$@$=$&$G$9!#(B$B%5%s%W%k(B$B!#(B
$B3N$+$K8+$d$9$/$J$C$F$$$k$H;W$$$^$9!#(B
- Internet Explorer $BMQ$NN_@QE*$J%;%-%e%j%F%#99?7%W%m%0%i%`(B (931768) (MS07-027)
-
$B!!(Bpatch $B$rE,MQ$9$k$H!"(BIE 7 $B$K$*$$$F!"(B"Temporary Internet Files" $B$,$U$D$&$G$O$J$$>l=j$K$"$k(B ($B%G%U%)%k%H$N0LCV$+$iJL$N>l=j$K0\F0$5$;$F$$$k(B) $B>l9g$KIT6q9g$,H/@8$9$k$3$H$,$"$kLOMM!#(B
$B!!(BVista $B$N>l9g$NH/@8>r7o$O(B:
- "Temporary Internet Files" $B$,%f!<%6%U%)%k%@3,AX$N30$K$"$k(B ($BNc(B: $BJL$N%\%j%e!<%`$K0\F0$5$;$F$$$k(B)
- Phishing Filter $B$,M-8z(B
- Protected mode $B$,M-8z(B
$B!!(BWindows XP / Server 2003 $B$N>l9g$O!"0J2<$N$I$A$i$+$,M-8z$J>l9g$KH/@8$9$kLOMM(B:
- "Temporary Internet Files" $B$r4^$`%U%)%k%@3,AX$,:o=|$5$l$F$$$k(B
- "Temporary Internet Files" $B$N%Q!<%_%C%7%g%s$,JQ99$5$l$F$$$k(B
$B!!2sHr:v$,5-:\$5$l$F$$$k$N$G;2>H$5$l$?$$!#(B
$B!!(BIBM $B%[!<%`%Z!<%8!&%S%k%@!<(B 2000 / 2001 / V6 $B!A(B V11 $B$K7g4Y!#(B
$BIUB0$9$k%5%s%W%k(B CGI $B%W%m%0%i%`$K7g4Y$,$"$j!"(BOS $B%3%^%s%I%$%s%8%'%/%7%g%s$r>7$/!#(Bcadz $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!!(B$B%[!<%`%Z!<%8!&%S%k%@!<$N%5%s%W%k(BCGI$B$N@H
(IBM) $B$K$*$$$F!"=$@5J}K!$H=$@5%W%m%0%i%`$,8x3+$5$l$F$$$k!#(B
$B!U(B
$B!V%U%l%C%D%5!<%S%9!W$*$h$S!V$R$+$jEEOC!W$N(B
$B$4MxMQ$G$-$J$$>u67$K$D$$$F(B
$BBh#2Js!J(B21$B;~(B00$BJ,8=:_!K(B
(NTT $BElF|K\(B, 5/15)$B!#(B
$B$^$@D>$C$F$^$;$s!#(B
$B!!(B$BBh#3Js!J#2#2;~#3#0J,8=:_!K(B$B!"(B
$BBh#4Js!J#2#3;~#3#0J,8=:_!K(B$B!#!V#5!?#1#6!J?e!K!!#1!'#0#0!J8aA0!K$K$O!"$[$\A4LL2sI|$9$k8+9~$_$G$9!W$@$=$&$G$9!#(B
$B!U(B
$B%*!<%9%H%i%j%"!'?e;HMQ@)8B6/2=$r=`Hw!!?<9o$J43$P$D$G(B
($BKhF|(B, 5/15)
$B!U(B
$B%H%`%=%s!'%m%$%?!<$HGc<}9g0U!!6bM;!&7P:Q>pJs$G@$3&0l$K(B
($BKhF|(B, 5/15)
$B!U(B
$B!V(BWinZip$B!W$d!V(BQuickTime$B!W$N$<$$
($BF|7P(B IT Pro, 5/15)$B!#(B
Phishing Authors Keeping up with Latest Exploits
(Symantec blog, 5/14) $B$NOC$+$J!#(B
$B!U(B
IBM$B!"%G!<%?%;%s%?!<$N>JEENO2=$KG/4V(B10$B2/%I%k$rEj;q!=!=!V(BProject Big Green$B!W$N2
(Open Tech Press, 5/14)
$B!U(B
GPLv3$B$K$^$D$o$k(B8$B$D$N$h$/$"$k8m2r(B
(Open Tech Press, 5/10)
$B!U(B
$B!VN"D"JmCDBN!W$H$$$&@/<#;q6b$N!V$m2a4o!W(B
(JANJAN, 5/15)$B!#%^%M!<%m%s%@%j%s%0$G$9$J!#(B
$B!U(B
USB $B%o!<%`(B$B$H$$$&$N$,$"$k$N$@$=$&$G!#(B
autorun $B$M$?$G$9$+$M!#(B
$B!U(B
$B@=IJ;v8N!!?7$?$K9q$X$NJs9p5AL3!A>CHq
(JANJAN, 5/15)
$B!U(B
FOSS$B$K$h$k(BMS$BJ]M-FC5v$N?/32$O(B235$B7o!'(BMS$BK!L38\Ld(B
(slashdot.jp, 5/15)$B!#(BThe Month of Patent Violations $B$H$+$d$C$F$/$l$l$P$($($s$A$c$&$N(B?
$B8x3+$5$l$k$=$P$+$i(B fix $B$5$l$k$C$7$g!#(B
$B!U(B
$BBh(B 4 $B2s(B Admintech.jp $B%3%_%e%K%F%#JY6/2q(B$B!#(B
2007.06.09$B!"%^%$%/%m%=%U%H3t<02q;YE9(B ($BBg:eI\Bg:e;T(B)$B!"(B1000 $B1_!#(B
$B!U(B
$BBh(B11$B2s$^$C$A$c#1#3#9JY6/2q!J4IM}$B!#(B
2007.06.23$B!"5~ETI\5~ET;T!"L5NA!#(B
$B!U(B
$B9qO"Js9p=q$,2PIU$1Lr$H$J$C$?%/%k%ICOJ}$NA{F0(B
(JANJAN, 5/15)
$B!U(B
$B%$%i%/K!0F!"0Q0w2q2D7h!!9R6u<+1RBbGI8/$r#2G/1dD9(B
($BCfF|(B, 5/14)$B!#Bp5^JX7QB3!#$J$<(B 2 $BG/(B?
$B!U(B
$BCO5e$,HaLD!*!!EE;RGQ4~J*!!G/#5#0#0#0K|(Bt
(JANJAN, 5/14)$B!#(BGreen Electronics Guide
(greenpeace) $B$M$?$,4^$^$l$F$^$9$M!#(B
$B!U(B
$BJULn8E$+$i6[5^>pJs(B$B!#(B
- 5/15$BCk(B
$B3$>e<+1RBb$NA]3$Jl4O!V$V$s$4!W$,5*0KH>Eg2-$GBT5!$7$F$$$k$3$H$,3NG'$5$l$^$7$?!#9TF0$H$7$FHs>o$KIT<+A3$J$b$N$r46$8$F$$$^$7$?!#$b$7$+$9$k$HJF73:FJTFCApJs$,$"$j$^$9!#$3$NK!0F$,@.N)$7$F$7$^$($P7{K!$r4^$`3FK!N'$d!"<+<#BN$N8"8B$r$b1[$($kNO$,H/F0$5$l$F$7$^$$$^$9!#;vA0D4::$K<+1RBb$,4X$o$k$H$_$F$$$^$7$?$,!"$3$3$KMh$F:G0-$N%7%J%j%*$,Ib$+$S>e$,$C$FMh$?$3$H$K$J$j$^$9!#$D$^$j!V%"%;%9L5$7$G$$$-$J$j9);vCe
$B!U(B
$B$"$^$j$KIT6`?5!!A$E:!&dL@%N>5D0w!AD4::FCJL0QGI8/CDD9$N%4!<%^%s(B
(JANJAN, 5/13)
$B!U(B
$B%U%j!<%9%T%s!&%[%$!<%kIU%^%&%9$G@8;:@-8~>e(B
($BIpED7=;K(B, 5/15)$B!#$3$N%Z!<%8$b(B Realforce 91 $B$GBG$C$F$^$9$,!"$3$N%-!<%\!<%I!"BG802;$,$1$C$3$&Bg$-$$$G$9!#;n$7BG$A$J$7$GGc$*$&$H$7$F$$$kJ}$O$4Cm0U$r!#(B
$B%?%$%T%s%0<+BN$O$9$4$/5$;}$A$$$$$G$9!#(B
$B!!%-!<%\!<%IJ}LL!";dE*$K$O(B
FKB8579
$B$NI|3h$r4uK>$7$F$$$k$N$@$,!"$J$s$H$+$J$i$s$b$N$+$N$&!D!D(B
$B!!(BMX Revolution (logitech.com) $B$G$9$+!#(B
$B%N!<%H(B PC $B8~$1$N(B
VX Revolution
$B$J$i%P%C%F%j9~(B 109g $B$G!"=E$$$N$,6l
$B!U(B
Snort 2.6.1.5 Now Available!
(Snort.org, 5/14)
$B!U(B
toto$B$,:FEY%7%9%F%`>c32$GHNGdCfCG!$(B15$BF|$OA4LLDd;_$G:F3+L$Dj(B
($BF|7P(B IT Pro, 5/15)$B!#6bA,M_$N%Q%o!<$KIi$1$F$$$k$h$&$G!#(B
$BA05-;v(B: toto$B%7%9%F%`$,!H(B6$B2/1_A@$$!I$G%@%&%s!$HNGdE9$H$N%2!<%H%&%(%$$,860x(B
($BF|7P(B IT Pro, 5/13)
$B!U(B
[AML 13928] $BN&>e<+1RBb$N%^%K%e%"%k%S%G%*$,(BYoutube$B$GN.=P(B
$B!U(B
BTCrack 1.1 Heisec Release$B!#(B
Bluetooth Cracker $B$N$h$&$G$9!#(B
$B!U(B
$BKL$N?77?(B IRBM ($B%Y!<%9$K$J$C$F$$$k$N$O(B 1960 $BG/Be$N5;=Q(B)
$B!U(B
$B%?%_%U%k0J30$G$b0[>o9TF0!!%$%s%U%kLt$G7W#1#67o(B
(asahi.com, 5/14)
CVE-2007-2671$B!#(B
Firefox 2.0.0.3 DoS $B$M$?!#(B
CVE-2007-2653$B!#(B
Vim 7.1 $B$G$O!"J#?t$N%;%-%e%j%F%#7g4Y$r4^$`=$@5$,9T$o$l$F$$$k$N$@$=$&$G$9!#(B
$B%j%j!<%9%"%J%&%s%9(B$B!#(B
CVE-2007-2650$B!#(B
ClamAV ($B%P!<%8%g%sITL@(B) $B$N(B OLE2 $B%Q!<%5$K7g4Y$,$"$j!"BgNL$K(B disk $B$r>CHq$5$;$k$h$&$J(B Office $BJ8=q%U%!%$%k$r:n@.$G$-$k$=$&$@!#(B
CVE-2007-0244$B!#(B
PoPToP $B$M$?!#(B
CVE-2007-2627$B!#(B
WordPress XSS $B$M$?!#(Bsidebar.php $B$@$=$&$G$9!#(B
SquirrelMail $B$M$?!#(B
- CVE-2007-2631$B!#(B
SquirrelMail 1.4.8-4.fc6 $B0JA0$K(B CSRF $B@HCVE-2007-2589$B!#(B
SquirrelMail 1.4.0 $B!A(B 1.4.9a $B$K(B CSRF $B@HCVE-2007-1262$B!#(B
SquirrelMail 1.4.0 $B!A(B 1.4.9a $B$K(B XSS $B@H
SquirrelMail $B$N:G?7HG$O(B 1.4.10a $B$G!"(B1.4.10 $BMQ$N(B patch
$B$bMQ0U$5$l$F$$$k!#(B
$B!!(BSamba 3.x $B$KJ#?t$N7g4Y$,B8:_$9$k(B ($BCm(B: Samba 2.x $B$NJ]
$B!!$3$l$i$N7g4Y$O(B Samba 3.0.25 $B$G=$@5$5$l$F$$$k!#(B
$B$?$@$7(B Samba 3.0.25 $B$K$O;EMMJQ99$b4^$^$l$F$$$k$=$&$J$N$G$4Cm0U$r!#(B
2007.05.31 $BDI5-(B:
$B!!4XO"(B: Samba $B$G$N%j%b!<%H(B $B%3!<%I
(ISSKK)
2007.06.03 $BDI5-(B:
$B!!(BSamba Update (Symantec blog, 2007.06.01)$B!#(B
- Metasploit Framework module $B=P$F$^$9(B
- OS $B$,4IM}$7$F$$$J$$(B talloc
$B$K$h$k(B heap memory $B$,A@$o$l$?(B
- Mac OS X $B$N(B samba $B$G$O$3$N7g4Y$,$^$@=$@5$5$l$F$$$J$$(B
$B!U(B
JP$B%I%a%$%s!!(BWeb$B2~cbB.Js(B
(izumino.jp) $B$K(B
http://www.hiroshima-u.ac.jp $B$d(B
http://sec.ipa.go.jp $B$d(B
http://www.arajo.ktr.mlit.go.jp
$B$H$$$&J8;zNs$,7G:\$5$l$F$$$k$J$!!D!D!#$*$*$+$o$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
$B6u<+$NC5CN>pJs$rJF73$K>o;~Ds6!!"KI1R>J$,@h7n2<=\$+$i(B
($BFIGd(B, 5/13)$B!#$J$7$/$:$7!#(B
$B!U(B
$B%(%s%3!<%I(B quoted-printable $B$K$D$$$F(B
(Exchange Server 2007 $B%U%)!<%i%`(B)$B!#(BExchange Server 2007 $B$O(B quoted-printable $B$N$_%5%]!<%H$G$9$+!#AGE($G$9$M!#(B
$B!U(B
$BDsEt5-;v$O$&$s$6$j!"4k6HHcH=$G:8A+$5$l$?JT=8D9$,JFBg
(technobahn, 5/14)
$B!U(B
IBM ISS $B%;%-%e%j%F%#%=%j%e!<%7%g%s%;%_%J!<(B $B!AJF9q8&5f3+H/%A!<%`(BX-Force$BE}3g@UG$pJs%;%-%e%j%F%#!A(B
(ISSKK)$B!#(B2007.05.24$B!"El5~ETL\9u6h!"L5NA!#(B
$BpJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
$B%"%C%W%k$d(BMS$B$i$K(BDMCA$B0cH?$G7Y9p>u(B--$BJF%j%C%T%s%0KI;_5;=Q4k6H(B
(CNET, 5/14)$B!#$J$s$@$+$J$"!#(B
$B!U(B
iPod$B$G?4B!%Z!<%9%a!<%+!<8m:nF0$N2DG=@-!=!=JFBg3XD4::(B
(ITmedia, 5/11)$B!#4XO"(B:
$BJs9p$N86J8$rFI$s$G$_$^$7$?(B ($B%9%3%"(B:2, $B;29M$K$J$k(B)
(slashdot.jp, 5/13)
$B!U(B
$B%7%9%F%`4IM}4p=`DIJdHG$r$D$/$k$Y$-$G$O$J$+$C$?$N$+!&!&!&(B
($B$^$k$A$c$s$N>pJs%;%-%e%j%F%#5$$^$0$lF|5-(B, 5/12)
$B!U(B
$B4634?<$$2sA[5-$K!X:[H==jHk;K!Y$,N(D>$K(B
($BJ]:dE8?M$N$I$3$I$3F|5-(B, 5/13)$B!#N"6b$M$?!#(B
$B!U(B
$B%m%0%$%s@.8y;~$N%j%@%$%l%/%H@h$H$7$FG$0U%5%$%H$N;XDj$,2DG=$G$"$C$F$O$$$1$J$$(B
($B9bLZ9@8w!w<+Bp$NF|5-(B, 5/12)
$B!!(BOffice 2003 $B$r%$%s%9%H!<%k$7$F$"$k(B Windows $B$G<+F099?7$d(B Windows Update / Microsoft Update $B$ru67$K$J$k$h$&$G$9!#(B
$B$3$N$"$?$j$G5DO@$5$l$F$$$kOC(B:
$B!!(BWSUS$BG[2<$G(BCPU$B;HMQN((B100% $B$N$$$o$5$5$s$NEj9F$,$h$/$^$H$^$C$F$$$^$9(B ($B86J8%^%^(B)$B!#(B
$B!&K\7o$O(BOffice2003$B$N4D6-$GH/@8$9$k!#(B
$B!&A4@$3&$GH/@8$7$F$$$k(B
$B!&(BOffice2003$B$N=$@5%W%m%0%i%`%j%9%H$,D9$$$N$b860x$N0lIt(B
$B!&(Bwu$B%/%i%$%"%s%H$,=$@5$b%8%e!<%k$r2r@O$9$k$N$K%Q%o!<$r?)$C$F$$$k!#(B
$B!&$3$N$H$-(Bwu$B%/%i%$%"%s%H$O(Bsvchost.exe$B$NG[2<$GAv$k$?$a!"(Bsvchost$BG[2<$N$9$Y$F$N%W%m%;%9$K1F6A$9$k!#(B
$B!!2r7hJ}K!$O!"(BKB927891 $B=$@5%W%m%0%i%`$H(B
Windows Update Agent (WUA) 3.0 client $B$NN>J}$r%$%s%9%H!<%k$9$k$3$H!#(B
$B$?$@$7(B Windows 2000 $B$N>l9g$O(B WUA 3.0 client $B$N$_$NBP1~$H$J$k!#(B
WUA 3.0 client $B$O(B
KB937383 $B$+$iF~!"(B2007.05.22 (US $B;~4V$@$m$&(B) $B$K$O(B WSUS $B7PM3$G$bMxMQ$G$-$k$h$&$K$J$kLOMM!#(B
2007.05.21 $BDI5-(B:
$B!!4XO"(B: $B<+F099?7$J$I$G(BCPU$BIi2Y$,(B100$B!s$K$J$kIT6q9g$r=$@5$9$k(B
(@IT, 2007.05.18)
$B!!0J2<$N(BBBS$B$NJs9p$J$I$K$h$k$H!">e5-$NA`:n8e!"$5$i$K(B%windir%$B%U%)%k%@$K$"$k(BWindows Update.log$B$d(BWindowsUpdate.log$B%U%!%$%k$r:o=|$9$k$H!"%9%-%c%s;~$NIi2Y$,2<$,$k$H$NJs9p$,$"$k!#(B
* $B$3$NLdBj$K4X$9$k%G%#%9%+%C%7%g%s!&%9%l%C%I(B$B!J(BHotFix Report BBS$B!K(B
$B!!(BWUA $B$,%m%0%U%!%$%k$r2r@O$7$F$?$j$9$k$s$@$m$&$+!D!D!#(B
2007.05.23 $BDI5-(B:
$B!!(BKB927891 $B=$@5%W%m%0%i%`!"M=9p$I$*$j(B WSUS $B$GN.$l$F$^$9$M!#:F5/F0$rB%$5$l$^$7$?!#(B
$B!!(B$B%^%$%/%m%=%U%H%;%-%e%j%F%#%"%I%P%$%6%j(B (927891) Windows $B%$%s%9%H!<%i(B (MSI) $B$N=$@5(B
$B$b=P$F$$$^$9!#(B
KB927891 - You receive an access violation error and the system may appear to become unresponsive when you try to install an update from Windows Update or from Microsoft Update (rev.8.0)
$B$K$O$3$s$J5-=R$,(B:
To resolve this problem, you must install this update together with the Windows Update Automatic Client 3.0. The Windows Update Automatic Client 3.0 will automatically be released through Automatic Updates by June 30, 2007. The updated Windows Client changes the thread modeling to move MSI scans to a thread that is separate from the user interface.
$B!!(B6/30 (US $B;~4V$@$m$&(B) $B$K<+F099?7$GN.$l$F$/$k$h$&$G$9!#(B
$B!!$"$H!"(BWindows 2000 $BMQ$N(B KB927891 $B=$@5%W%m%0%i%`$b7k6IG[I[$5$l$F$$$k$h$&$G$9!#(BWSUS $B$GN.$l$F$-$F$^$7$?$7!"%@%&%s%m!<%I%;%s%?!<$K$b$"$j$^$9(B:
Windows 2000 $BMQ$N99?7%W%m%0%i%`(B (KB927891)
(Microsoft)$B!#(BJubilee $B$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
2007.05.30 $BDI5-(B:
$B!!(BSvchost /MSI issue follow up:
(WSUS Product Team Blog, 2007.05.15) $B$,=P$F$^$7$?!#(B
$B!U(B
$B%8%O!<%I!&%M%C%H$N6<0R(B@$B#C#B#S%I%-%e%a%s%H(B
($BIpED7=;K(B, 5/10)$B!#(B
$BKh=5?eMK(B 25:55 $B$+$i$N(B
$B!V(BCBS$B%I%-%e%a%s%H(B$B!W(B(TBS)?! $B$=$s$JHVAHCN$i$J$$$>!"$H;W$C$F(B
MBS $BKhF|J|Aw(B$B$NHVAHI=$r8+$?$i!"$=$N;~4V$O(B
$B!V(B$B%Y%j!<%?(B$B!W$rJ|Aw$7$F$$$?!#$,$C$/$j!#(B
$B!!$3$Ninfovlad.net $B$G$7$g$&$+!#(B
$B!!;W$$=P$7$?8@MU(B: FOX $B8z2L(B
$B!U(B
Turbolinux Enhancement Advisory TLEA-2007-5
(Turbolinux, 4/16)$B!#7'G-$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
- Turbolinux 10 Server, Turbolinux Appliance Server 2.0
($BCfN,(B)
* Tomoyo Linux $B$N%5%]!<%H(B
$B!U(B
$B;3C+9d;K$N%^%s%9%j!
(Internet Watch, 5/10)
$B!U(B
$B<+F0
(WIRED, 5/10)
$B!U(B
3$BA[4D6-$r;H$&Am9g4F;k%7%9%F%`(B
(WIRED, 5/10)$B!#5$J,$O(B CTU$B!#(B
$B!U(B
WIRED VISION$B!#(B
$B5"$C$F$-$?(B Hotwired Japan$B!#(B
$B!U(B
YLUG$B2q9g!&FI=q2q;qNA(B
(YLUG)$B!#(BTomoyo $B$J%t%#%G%*$d(B SE-PostgreSQL $B$J;qNA$,7G:\$5$l$F$$$^$9!#(B
$B7'G-$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
$BF|K\0eBgLdBj!JL>M@TLB;AJ>Y!K(B (SLAPP WATCH, 5/10)
$B!U(B
Professional Rootkits
($B$F$C$7!<$N4]=P$7(B, 5/9)
$B!U(B
Upgrade to Norman Virus Control version 5.90
(Norman)$B!#(B Norman Virus Control 5.90 $B$K%"%C%W%0%l!<%I$9$k$H!"%5!<%P%U%j!<%:$r4^$`IT6q9g$,H/@8$9$k$3$H$,$"$kLOMM!#$^$"!"F|K\$G(B Norman $B;H$C$F$k?M$,$I$N$/$i$$$$$k$N$+$O5?Ld$J$N$G$9$,!#(B
$B!U(B
$BBP:v%5%$%H$H$d$i$,?d>)$9$k!V0BA4M%NI$J%5!<%S%9$N@kEA!W$O!"M6F3E*(B
(Lucablog, 5/7)
$B!U(B
USB$B%a%b%j$K$4MQ?4(B
(Okumura's Blog, 5/10)
$B!U(B
$B>pJs%;%-%e%j%F%##2(B.$B#0(B $B!]<+M3$HE}@)$N;~Be$N>pJs%;%-%e%j%F%#!](B ($B>pJs=hM}3X2q(B)$B!#(B
2007.06.06$B!A(B2007.12.14 ($B7W(B 6 $B2s(B)$B!"El5~ET@iBeED6h!"3X@8$J$i(B 6 $B2s$G(B 12,600$B1_!#(B
$B!U(B
$BBh#42sLBOG%a!<%kBP:v%+%s%U%!%l%s%9(B (IAjapan)$B!#(B
2007.05.28$B!"El5~ET9A6h!"(B2,000$B1_!#5HED$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!U(B
$B!V3K$N%4%_Kd$a
(JANJAN, 5/10)
$B!U(B
Relative file: URIs of the form "/<DriveLetter>:/<path>/<FileName>" do not resolve correctly in Internet Explorer 7
(Microsoft)$B!#M-=~(B patch $B$,$"$k$h$&$@!#(B
$B!U(B
A networked printer that is hosted on a computer that is running Windows 2000 with Service Pack 4 may not work correctly on a client computer that is running a 64-bit version of Windows Vista
(Microsoft)$B!#$^$!!"$=$m$=$m(B Windows 2000 $B$O
$B!U(B
Internet Security and Acceleration (ISA) Server does not log an IP packet that consists of only an IP header
(Microsoft)$B!#(BWindows Server 2003 $B$,(B drop $B$7$F$7$^$&$N$G!"(BISA $B$OCN$j$h$&$,$J$$$=$&$@!#(B
$B!U(B
You receive a Stop 0x000000D1 error when you remove a USB storage device from a computer that is running Windows Server 2003 Service Pack 1 (SP1)
(Microsoft)$B!#(BUSB $B%9%H%l!<%8$,(B FAT $B$G$+$D0E9f2=%\%j%e!<%`$r4^$`>l9g$NOC!#(B
Windows Server 2003 SP2 $B$GD>$C$F$$$k$=$&$@!#(B
$B!U(B
Persistent cookies are not shared between Internet Explorer 7 and Office applications in Windows Vista
(Microsoft)$B!#;EMM$G$9!#(B
$B!U(B
9th of May
(F-Secure blog, 5/9)$B!#%(%9%H%K%"$M$?!#(B5/9 $B$O%m%7%"$N@o>!5-G0F|$G$9$+!#(B
$B$0$0$C$F$_$?$i!"(B
$B!Z!5-G0F|!J(B5/9$B!K$O$$$D$b@2$l$k$N$G$9$+!)(B ($B%m%7%"(BFAQ)
$B$J$s$FOC$r$_$D$1$?!#(B
$B!U(B
$B!HE(BPE*Gc<}!I$rKI$2(B
$B!A?7F|E4!&%H%C%W$N7hCG!A(B
(NHK $B%9%Z%7%c%k(B) $B$r:#8+$F$$$k$H$3$m$J$N$@$,!"$=$&$$$&$3$H$K$J$C$F$$$?$N$+!#(B
$B!U(B
$B?M5$1G2h$H%?%$%"%C%W!!%5%$%P!
($BKL3$F;?7J9(B, 5/9)$B!#(B$B%@%$%O!<%I(B 4.0 $B$M$?!#(B6/30 $B$+$i>e1G$G$9$+!#(B
$B!U(B
$B%M%C%H$NHpknCf=}LdBj!J8eJT!K!'!VF?L>@-!W$KBP$9$k4Z9q!$JF9q!$F|K\$N
($BF|7P(B IT Pro, 5/10)
$B!U(B
$BL$CN$N$<$$
($BF|7P(B IT Pro, 5/10)
$B!!(BSDK / JRE 1.4.2 Update 13 $B0JA0!"(BJDK / JRE 5 Update 10 $B0JA0$K4^$^$l$k(B
Java Web Start
$B$K7g4Y!#?.Mj$5$l$F$$$J$$%"%W%j%1!<%7%g%s$,(B local file $B$rFI$_=q$-$G$-$?$j!"G$0U$N%3!<%I$rCVE-2007-2435
$B!!(BSDK / JRE 1.4.2 Update 14$B!"(BJDK / JRE 5 Update 11 $B$G=$@5$5$l$F$$$k!#(B
$B$J$*!"(BSDK/ JDK/ JRE $B$N?7$7$$%P!<%8%g%s$r%$%s%9%H!<%k$7$F$b8E$$%P!<%8%g%s$O;D$j$D$E$1$k$N$GCm0U$5$l$?$$!#8E$$%P!<%8%g%s$OL@<(E*$K:o=|$7$J$1$l$P$J$i$J$$!#(B
2007.07.15 $BDI5-(B:
$B!!(BJDK / JRE 5 Update 6 $B0J9_$d(B JDK / JRE 6 $B$G$O!"8E$$%P!<%8%g%s$N(B JRE $B$r;X<($5$l$?>l9g$N07$$$,2~A1$5$l$F$*$j!":G?7HG$r%$%s%9%H!<%k$5$($9$l$P$h$$$h$&$@!#(B
$BB3!&8|@8O+F/>J$N@H
($B9bLZ9@8w!w<+Bp$NF|5-(B, 7/10) $B$N!V(BJava Update$B$7$F$b8E$$(BJRE$B$,>C$($J$$LdBj!W$r;2>H!#(B
$B!!%;%-%e%j%F%#%Y!<%9%i%$%s$K$I$N$h$&$J%P!<%8%g%s$,;XDj$5$l$F$$$k$N$+$O!"(BJava SE $B$N%j%j!<%9%N!<%H$KL@5-$5$l$F$$$k!#$?$H$($P(B
Java SE 6
Update Release Notes (Sun) $B$N!V(B1.6.0_02 $B$G$NJQ99E@(B$B!W$r8+$k$H!"(B
$B$3$s$JI=$,$"$k!#(B
|
JRE Family Version
|
Security Baseline
|
|
5.0
|
1.5.0_12
|
|
1.4.2
|
1.4.2_14
|
$B!!(BNorton AntiVirus 2005 / 2006, Norton Internet Security 2005 / 2006,
Norton System Works 2005 / 2006 $B$K7g4Y!#(BNAVOPTS.DLL ActiveX $B%3%s%H%m!<%k$K7g4Y$,$"$j!"96N,(B web $B%5%$%H$K%"%/%;%9$9$k$HG$0U$N%3!<%I$rCVE-2006-3456
$B!!BP1~$9$k$K$O!"(BLiveUpdate $B$G:G?7HG$K99?7$9$l$P$h$$!#4XO"(B:
2007.05.11 $BDI5-(B:
$B!!F|K\8lHG(B: SYM07-005 :
$B%7%^%s%F%C%/@=IJ$K(B COM $B%*%V%8%'%/%H$,%;%-%e%j%F%#$r2sHr$9$k@H
($B%7%^%s%F%C%/(B)
$B!!%^%+%U%#!<$N%3%s%7%e!<%^8~$1%"%s%A%&%$%k%9%W%m%@%/%H$GMxMQ$5$l$F$$$k!"(B$B%^%+%U%#!<(B $B%;%-%e%j%F%#%;%s%?!<(B
$B$K7g4Y!#(BIsOldAppInstalled ActiveX $B$K(B buffer overflow $B$9$k7g4Y$,$"$j!"96N,(B web $B%5%$%H$K%"%/%;%9$9$k$HG$0U$N%3!<%I$r
$B!!(BSecurityCenter 7.2.147 / 6.0.25 $B$G=$@5$5$l$F$$$k!#(B
McAfee Security Bulletin: McAfee SecurityCenter 7.2.147 or higher fixes vulnerability
(McAfee) $B$r;2>H!#(B
$BMxMQ
2007.05.11 $BDI5-(B:
$B!!(BPoC: McAfee Security Center IsOldAppInstalled ActiveX Buffer Overflow Vulnerability (milw0rm)
$B!!(BCisco IOS $B$N(B FTP $B%5!<%P5!G=$KJ#?t$N7g4Y!#(Bremote $B$+$i(B IOS $B$N%G%P%$%9%U%!%$%k%7%9%F%`$KL5G'>Z$G%"%/%;%9$7!"@_Dj%U%!%$%k$rFI$_=q$-$7$?$jG$0U$N%3!<%I$r
$B!!(BFTP $B%5!<%P5!G=$rL58z$K$9$l$P2sHr$G$-$k(B ($B%G%U%)%k%H$OL58z(B)$B!#(B
- $B%H%l%s%I%^%$%/%m(B ServerProtect 5.58 for Windows $B$K(B 2 $B$D$N7g4Y(B ($BF|K\8l(B patch $B=P$F$^$7$?(B _o_)
-
$B!!(B[Full-disclosure] ZDI-07-025: Trend Micro ServerProtect AgRpcCln.dll Stack Overflow Vulnerabilit
$B$N(B CVE $BHV9f$r(B
CVE-2007-2528
$B$K=$@5$7$?!#(B
- New PHP releases
-
- CVE-2007-2511: Buffer overflow in the user_filter_factory_create function in PHP before 5.2.2 has unknown impact and local attack vectors.
- CVE-2007-2510: Buffer overflow in the make_http_soap_request function in PHP before 5.2.2 has unknown impact and remote attack vectors, possibly related to "/" (slash) characters.
- CVE-2007-2509: CRLF injection vulnerability in the ftp_putcmd function in PHP before 4.4.7, and 5.x before 5.2.2 allows remote attackers to inject arbitrary FTP commands via CRLF sequences in the parameters to earlier FTP commands.
- CVE-2007-1864: Buffer overflow in the bundled libxmlrpc library in PHP before 4.4.7, and 5.x before 5.2.2, has unknown impact and remote attack vectors.
- Internet Explorer $BMQ$NN_@QE*$J%;%-%e%j%F%#99?7%W%m%0%i%`(B (931768) (MS07-027)
-
$B!!(B931768 - MS07-027: Cumulative Security Update for Internet Explorer
(Microsoft) $B$K!"(Bpatch $B$rE,MQ$9$k$H$$$C$7$g$K=$@5$5$l$k9`L\$N0lMw$,$"$k!#(B
$BFC$K1F6A$,Bg$-$=$&$J$N$O!"(B
934819 - FIX: After you install Internet Explorer 7, the Inetinfo.exe process may stop responding on a computer that is running both Windows Server 2003 Service Pack 1 and IIS 6.0
$B$H$+(B
932600 - In some scenarios, you must remove Windows Server 2003 SP2 before you upgrade to the full retail version of Windows Small Business Server 2003 or before you migrate to Windows Server 2003
$B$+$J$"!#(B
GDR $BHG$G=$@5$5$l$k$N$GCm0U!#(B
- 2007$BG/(B5$B7n$N%;%-%e%j%F%#%j%j!<%9M=Dj(B
-
$B!!$^$H$a%Z!<%8(B:
$B!U(B
$BCf9q@=0eLtIJ$H%Z%C%H%U!<%I$+$iFG@-J*
(asahi.com, 5/9)$B!#%A%c%$%J%j%9%/$G$9$+!#(B
$BCf9q;:FG@-J* ($BCf1{F|Js(B, 5/8) $B$O?^F~$j$J$N$G!"$^$:$O$3$l$rFI$s$@J}$,$$$$$+$b!#(B
$BCf9q$NFGJ*(B($B%8%(%A%l%s%0%j%3!<%k(B)$B!"%Q%J%^$G(B100$B?M0J>e$N;R$I$b$r;&$9!!860x$O56%0%j%;%j%s$N:.$8$C$?Iw ($BE74AF|>h(B, 5/8) $B$b;2>H!#(B
$BCf9q$O7k6I!"(BSARS $B$N$3$m$H2?$bJQ$o$i$s$J$"!D!D!#(B
$B!U(B
Vista$B$N(BiPod$B
(Internet Watch, 5/9)
$B!U(B
$B@/I\HkL)>pJs!'O3$($$KI;_:v$K?7AH?%!!MhG/#47nH/B-$X(B
($BKhF|(B, 5/8)
$B!U(B
$B%8%'%C%H%3!<%9%?!<;v8N$K8B$i$J$$!"Ha7`$N8e$G5$$E$/!V0];}4IM}$N=E$5!W(B
($BF|7P(B KEN-Plats, 5/8)
$B!U(B
$B%8%'%C%H%3!<%9%?!<;v8NJ}LL(B
$B!!GX7J$H$J$k>u67!#!V7zIt=_(B $B;\@_1D6HItD9$@$1$,0-
$B!U(B
Wizard Bible vol.33 (2007,5,8)$B!#>.Ln;{$5$s!"$5$9$,$G$9!#(B
$B!U(B
$B$"$:$54F::K!?M(B $B:bL3Js9p$K78$kFbItE}@)$K$D$$$F(B
($B$^$k$A$c$s$N>pJs%;%-%e%j%F%#5$$^$0$lF|5-(B, 5/9)
$B!U(B
$BIT@5%3!<%I$r@$3&$K$^$-;6$i$9%[%9%F%#%s%02q
(Open Tech Press, 5/8)
$B3F%W%m%P%$%@!<$,%[%9%F%#%s%0$7$F$$$k46@w%5%$%H$N?t$O
* $B%"%$%Q%o!<%&%'%V!'(B1$BK|(B834
* $B%l%$%d!<%I!'(B2,513
* $B%6%W%i%M%C%H!'(B2,056
* $B%$%s%?!<%J%C%W!'(B1,437
* $B%A%c%$%J%M%C%H!'(B786
$B!!$3$&$$$&>u67$r!"(BiPowerWeb
$B$N%H%C%W%Z!<%8$GHy>P$s$G$$$k$*$M$($5$s$O$I$&;W$C$F$$$k$N$@$m$&!#(B
$B!U(B
$BAH$_9~$_%7%9%F%`FCM-$N%;%-%e%j%F%#LdBj$r7!$j2<$2$k(B
(ITmedia, 5/9)
$B!U(B
$BC8O)6e>r$N2q!!9b1s:ZJf;R$5$s$r>7$$$F%$%i%/Js9p2q$r3+:E(B
(JANJAN, 5/9)
$B8=:_$N%$%i%/$NBPN)$N>u67$O0l8@$G8@$$I=$;$J$$J#;($JMMAj$G!"JF73$b4^$a$FC/$b$,@UG$$ruBV$K$J$C$F$$$k$H$$$&!#(B
$B!U(B
$B%O!<%^%s%W%m@=$N%S%k%H%$%s7?%,%9%3%s%m$KIT6q9g!"E@8!$X(B
$B!AEl5~%,%9!&Bg:e%,%9$N%V%i%s%I$K$FHNGd(B
($B2HEE(B Watch, 5/8)
$B!U(B
$B86;RNO>pJs;o$NAwIU@h(B1,700$B7o$,%U%!%$%k8r49%=%U%H$GN.=P(B
(Internet Watch, 5/9)$B!#0QBw@h$N6(NO2qpJs$rEO$9I,MW$O$J$+$C$?$N$@$=$&$G!#(B
$B!U(B
$BBh(B11$B2s$^$C$A$c#1#3#9JY6/2q!J4IM}$B!#(B
2007.06.23$B!"5~ETI\5~ET;T!"L5NA!#(B
$B!U(B
$B%(%l%Y!<%?!<;v8N!'5^>e>:$7E70f>WFM!!El5~!&HD666hLr=j$G(B
($BKhF|(B, 5/9)$B!#%(%l%Y!<%?$C$F!"J]
$B!U(B
$B%"%Q%^%s%7%g%s!"?7$?$KBQ?L6/EYITB-!!?@8M;TH/I=(B
(asahi.com, 5/9)$B!#EDB
$B!U(B
WASC Announcement: Distributed Open Proxy Honeypot Project Data Released$B!#(B
PDF $BJ8=q(B
$B!U(B
$BHNGd;~$NK\?M3NG'MW@A$X!!%W%j%Z%$%IDL?.%+!<%I(B
($BEl5~?7J9(B, 5/8)$B!#(Bb-mobile $B$NOC!#(B
$B!U(B
$B%&%$%k%9%P%9%?!<(B2007$B%$%s%9%H!<%k8e$K=hM}$,=E$/!JCY$/!K$J$kLdBj$HBP=hK!(B
($B1`It8&(B)$B!#$3$NOC!"%&%$%k%9%P%9%?!<(B2007 15.30 $B0J9_$bB3$$$F$$$k$s$G$9$M!D!D!#(B
$B!U(B
$BCN$C$F$*$-$?$$%$%s%?!<%M%C%H%;%-%e%j%F%#(B $B$Y$j%5%$%s(B
($B$@$a$@$aF|5-(B, 5/9)$B!#3N$+$K9a$P$7$$$G$9$M!#(B
$B%;%-%e%"%I$H8@$o$l$k$H!"(Bsecurity advertised $B$NN,$+$H;W$C$F$7$^$C$?!#(B
$B!U(B
$B1Q8lHG(BWSUS 3.0$B@5<0HG$,0lHL8x3+(B
(hotfix.jp, 5/1) $B$K;36a$5$s$+$i$N%D%C%3%_$,!#(B
WSUS$B$O:G=i$+$i%^%k%A8@8l$G:n$i$l$F$$$k$N$G!"F|K\8lHG(BWindows Server$B$K%$%s%9%H!<%k$9$l$PF|K\8lI=<($G;H$($^$9!#0lIt%X%s$JF|K\8lI=5-$b$"$j$^$9$,!"$*$*$`$MF0:n$ONI9%$G$9!#(B
$B$3$N%P!<%8%g%s$+$i(Bx64$B$,%5%]!<%H$5$l$?$N$G!"=aBt$JJ*M}%a%b%j4D6-$G%5%/%5%/F0$+$9$3$H$b2DG=$G$9!#(B
$B!!$*$)!"$=$&$@$C$?$N$+!#(B
$B!U(B
Trend Micro Control Manager 3.5 Patch 2 $B8x3+$N$*CN$i$;(B
($B%H%l%s%I%^%$%/%m(B, 5/9)$B!#(B
$B!V%Q%?!<%s%U%!%$%k$NG[?.%3%^%s%I$r$C$F$$$k$=$&$G$9!#(B
$B!U(B
IT$B%;%-%e%j%F%#$N%"%i%$=P$7(B
(22) Windows$B$K$*$1$k%P%C%U%!%*!<%P!<%U%m!<(B(6)
($B%^%$%3%_%8%c!<%J%k(B, 5/9)$B!#$*$D$+$l$5$^$G$9!#(B
$B!U(B
JVN$B$,$*$+$7$$!#(B ($BMU$C$QF|5-(B, 5/9)$B!#(B
JVN#36628264:
Lunascape $B$N(B RSS$B%j!<%@5!G=$K$*$$$FG$0U$N%9%/%j%W%H$,
$B$O(B
2007.04.25
$B$K=P$F$k$s$G$9$1$I$M$(!#$J$s$G$7$g$&$M$(!#(B
$B!U(B
$B>&IJL>!V%3%+%$%s!W$N%I%j%s%/:^$r2s<}!"2~L>$X!!JF9q(B
(CNN, 5/8)$B!#%3%+%3!<%i$O(B ok $B$J$N$K!D!D!#(BCoca-in $B$H$+$@$C$?$i(B ok $B$@$C$?$N$+$J$"!#(B
$B!U(B
$B30Mh&MQ2=$rL\;X$7(B
(CNN, 5/8)
$B!U(B
$B!Z(BCRYPTO-GRAM$BF|K\8lHG![JF@/I\$N@AIi6H ($BF|7P(B IT Pro, 5/8)$B!#(B
$B0-0U$N$"$k%W%m%0%i%`!"JFBh(B6$B4OBb$N@x?e4O$,5!G=Dd;_(B
$B$NOC$+$J!#(B
$B!U(B
$B$b$&9b3[$NFC5v;HMQNA$O;YJ'$$$^$;$s!"%V%i%8%k@/I\$,!V6/@)FC5v
(technobahn, 5/8)
$B!!(BCryptographic API Component Object Model (CAPICOM) $B$*$h$S(B BizTalk 2004 $B$K7g4Y!#(B
CAPICOM.dll ActiveX $B%3%s%H%m!<%k$K7g4Y$,$"$j!"96N,(B web $B%Z!<%8$,G$0U$N%3!<%I$rCVE-2007-0940
$B!!(Bpatch $B$,$"$k$N$GE,MQ$9$l$P$h$$!#$?$@$7$3$N(B patch $B$O!"8E$$(B ($B7g4Y$N$"$k(B) CAPICOM.dll $B$r:o=|$O$7$J$$$N$GCm0U!#(B
5$B7n$N%;%-%e%j%F%#%j%j!<%9(B ($BF|K\$N%;%-%e%j%F%#%A!<%`$N(B Blog) $B$N2r@b$r;2>H!#(B
$B!!(BInternet Explorer 5.01 SP4 / 6.0 SP1 / 6.0 SP2 / 7 $B$KJ#?t$N7g4Y!#(B
COM $B%*%V%8%'%/%H$N%$%s%9%?%s%92=$N%a%b%jGKB;$N@HCVE-2007-0942
IE $B>e$G%$%s%9%?%s%92=$5$l$k;v$,A[Dj$5$l$F$$$J$$$h$&$J(B COM $B%*%V%8%'%/%H$r(B IE $B$,(B ActiveX $B%3%s%H%m!<%k$H$7$F%$%s%9%?%s%92=$9$k:]$N=hM}$K7g4Y$,$"$j!"%a%b%jGK2u$,H/@8!#$3$l$rMxMQ$9$k$H!"96N,(B web $B%Z!<%8$,G$0U$N%3!<%I$r
$B=i4|2=$5$l$F$$$J$$%a%b%j$NGKB;$N@HCVE-2007-0944
$B=i4|2=$5$l$F$$$J$$!"$"$k$$$O:o=|$5$l$?%*%V%8%'%/%H$N=hM}$K7g4Y$,$"$j!"%a%b%jGKB;$,H/@8!#$3$l$rMxMQ$9$k$H!"96N,(B web $B%Z!<%8$,G$0U$N%3!<%I$r[Full-disclosure] ZDI-07-027: Microsoft Internet Explorer
Table Column Deletion Memory Corruption Vulnerability
$B%W%m%Q%F%#$N%a%b%jGKB;$N@HCVE-2007-0945
$B%W%m%Q%F%#%a%=%C%I$N=hM}$K7g4Y$,$"$j!"%a%b%jGKB;$,H/@8!#$3$l$rMxMQ$9$k$H!"96N,(B web $B%Z!<%8$,G$0U$N%3!<%I$r
HTML $B%*%V%8%'%/%H$N%a%b%jGKB;$N@HCVE-2007-0946, CVE-2007-0947
$B96N,(B web $B%Z!<%8$K$h$C$F=i4|2=$5$l$F$$$J$$%a%b%j$X$N%"%/%;%9$rM6H/$9$k$H!"%a%b%jGKB;$,H/@8!"G$0U$N%3!<%I$r
$BG$0U$N%U%!%$%k$N=q$-49$($N@HCVE-2007-2221
Microsoft Windows Media Server $B$N(B mdsauth.dll $B$K7g4Y$,$"$j!"(B
$B96N,(B web $B%Z!<%8$,G$0U$N%3!<%I$rMS07-027 mdsauth.dll NMSA Session Description Object SaveAs control, arbitrary file modification
(milw0rm)
$B!!(Bpatch $B$,$"$k$N$GE,MQ$9$l$P$h$$!#(Bpatch $B$O$^$?!"
2007.05.10 $BDI5-(B:
$B!!(B931768 - MS07-027: Cumulative Security Update for Internet Explorer
(Microsoft) $B$K!"(Bpatch $B$rE,MQ$9$k$H$$$C$7$g$K=$@5$5$l$k9`L\$N0lMw$,$"$k!#(B
$BFC$K1F6A$,Bg$-$=$&$J$N$O!"(B
934819 - FIX: After you install Internet Explorer 7, the Inetinfo.exe process may stop responding on a computer that is running both Windows Server 2003 Service Pack 1 and IIS 6.0
$B$H$+(B
932600 - In some scenarios, you must remove Windows Server 2003 SP2 before you upgrade to the full retail version of Windows Small Business Server 2003 or before you migrate to Windows Server 2003
$B$+$J$"!#(B
GDR $BHG$G=$@5$5$l$k$N$GCm0U!#(B
2007.05.11 $BDI5-(B:
$B!!(BPoC: MS07-027 mdsauth.dll NMSA Session Description Object SaveAs control, arbitrary file modification
(milw0rm)$B!#$3$s$J$K$U$D$&$KF0$/$b$N$@$C$?$N$+!#(B
2007.05.17 $BDI5-(B:
$B!!(Bpatch $B$rE,MQ$9$k$H!"(BIE 7 $B$K$*$$$F!"(B"Temporary Internet Files" $B$,$U$D$&$G$O$J$$>l=j$K$"$k(B ($B%G%U%)%k%H$N0LCV$+$iJL$N>l=j$K0\F0$5$;$F$$$k(B) $B>l9g$KIT6q9g$,H/@8$9$k$3$H$,$"$kLOMM!#(B
$B!!(BVista $B$N>l9g$NH/@8>r7o$O(B:
- "Temporary Internet Files" $B$,%f!<%6%U%)%k%@3,AX$N30$K$"$k(B ($BNc(B: $BJL$N%\%j%e!<%`$K0\F0$5$;$F$$$k(B)
- Phishing Filter $B$,M-8z(B
- Protected mode $B$,M-8z(B
$B!!(BWindows XP / Server 2003 $B$N>l9g$O!"0J2<$N$I$A$i$+$,M-8z$J>l9g$KH/@8$9$kLOMM(B:
- "Temporary Internet Files" $B$r4^$`%U%)%k%@3,AX$,:o=|$5$l$F$$$k(B
- "Temporary Internet Files" $B$N%Q!<%_%C%7%g%s$,JQ99$5$l$F$$$k(B
$B!!2sHr:v$,5-:\$5$l$F$$$k$N$G;2>H$5$l$?$$!#(B
2007.08.16 $BDI5-(B:
$B!!>e5-$N(B "Temporary Internet Files" $B$NLdBj$O!"(B
$B%^%$%/%m%=%U%H(B $B%;%-%e%j%F%#>pJs(B MS07-045 - $B6[5^(B:
Internet Explorer $BMQ$NN_@QE*$J%;%-%e%j%F%#99?7%W%m%0%i%`(B (937143)
(Microsoft)
$B$G=$@5$5$l$^$7$?!#4XO"(B: IE August Security Update is Now Available
(IEblog, 2007.08.14)
$B!!(BExchange 2000 / 2003 / 2007 $B$KJ#?t$N7g4Y!#(B
Outlook Web Access $B$N%9%/%j%W%H(B $B%$%s%8%'%/%7%g%s$N@HCVE-2007-0220
Outlook Web Access $B$K%9%/%j%W%H%$%s%8%'%/%7%g%s$,2DG=$H$J$k7g4Y$,$"$k!#(B
$B!V(BUTF $B$G%(%s%3!<%I$5$l$?E:IU%U%!%$%k!W$K4XO"$9$k$=$&$@!#(B
$B7A<0$N@5$7$/$J$$(B iCal $B$N@HCVE-2007-0039
EXCDO $B5!G=$K$*$1$k%$%s%?!<%M%C%H(B $B%+%l%s%@!<(B (iCal) $B%U%!%$%k$N=hM}$K7g4Y$,$"$j!"(Bremote $B$+$i(B DoS $B967b$rExchange Calendar MODPROPS Denial of Service (CVE-2007-0039)
MIME $B%G%3!<%I$N@HCVE-2007-0213
Base64 $B%(%s%3!<%I$5$l$?%U%!%$%k$N=hM}$K7g4Y$,$"$j!"96N,%a!<%k$K$h$jG$0U$N%3!<%I$r
IMAP $B%j%F%i%k=hM}$N@HCVE-2007-0221
IMAP $B%j%/%(%9%H$N=hM}$K7g4Y$,$"$j!"(Bremote $B$+$i(B DoS $B967b$rMicrosoft Exchange Server 2000 IMAP Literal Processing DoS Vulnerability (iDefense)
$B!!(Bpatch $B$,$"$k$N$GE,MQ$9$l$P$h$$!#(B
$B!!(BMicrosoft Office 2000 / XP (2002) / 2003 / 2007, Microsoft Office 2004 for Mac $B$K7g4Y!#IA2h%*%V%8%'%/%H$N=hM}$K7g4Y$,$"$j!"96N,(B Office $B%I%-%e%a%s%H$K$h$C$FG$0U$N%3!<%I$rCVE-2007-1747
$B!!(Bpatch $B$,$"$k$N$GE,MQ$9$l$P$h$$!#(B
2007.08.03 $BDI5-(B:
$B!!(BMS07-025 $B$,2~D{$5$l$^$7$?!#(B
$B!V(BWord / Excel / PowerPoint 2007
$B%U%!%$%k7A<0MQ(B Microsoft Office $B8_495!G=%Q%C%/(B$B!W$b$3$N7g4Y$N1F6A$r
$B!!(BMicrosoft Word 2000 / 2002 (XP) / 2003, Word Viewer 2003,
Works Suite 2004 / 2005 / 2006, Microsoft Office 2004 for Mac $B$KJ#?t$N7g4Y!#(B
Word $BG[Ns$N%*!<%P!<%U%m!<$N@HCVE-2007-0035
Word $B$K$*$1$kG[Ns$N=hM}$K7g4Y$,$"$j!"96N,(B Word $B%U%!%$%k$K$h$jG$0U$N%3!<%I$r
Word $B%I%-%e%a%s%H$N%9%H%j!<%`$N@HCVE-2007-0870
$B%^%$%/%m%=%U%H(B $B%;%-%e%j%F%#(B $B%"%I%P%$%6%j(B (933052)
Microsoft Word $B$N@H$B$N7o!#(B
Word $B$N(B RTF $B$N2r@O$N@HCVE-2007-1202
Word $B$K$*$1$k!VFCDj$N%j%C%A%F%-%9%H7A<0$NJ8;z!W$N=hM}$K7g4Y$,$"$j!"96N,(B Word $B%U%!%$%k$K$h$jG$0U$N%3!<%I$rMicrosoft Word RTF File Parsing Heap Corruption Vulnerability
(iDefense)
$B!!(Bpatch $B$,$"$k$N$GE,MQ$9$l$P$h$$!#(B
$B!!(BExcel 2000 / 2002 (XP) / 2003 / 2007, Excel Viewer 2003, Word/Excel/PowerPoint 2007 $B%U%!%$%k7A<0MQ(B Microsoft Office $B8_495!G=%Q%C%/(B, Microsoft Office 2004 for Mac $B$KJ#?t$N7g4Y!#(B
Excel $B$N(B BIFF $B%l%3!<%I$N@HCVE-2007-0215
Excel $B$K$*$1$k(B BIFF $B%l%3!<%I(B$B$N=hM}$K7g4Y$,$"$j!"96N,(B Excel $B%U%!%$%k$K$h$jG$0U$N%3!<%I$rZDI-07-026: Microsoft Excel BIFF File Format Named Graph Record Parsing Stack Overflow
Vulnerability
Excel $B$N%U%)%s%H$N@_Dj$N@HCVE-2007-1203
Excel $B$K$*$1$kFC
Excel $B$N%U%#%k%?(B $B%l%3!<%I$N@HCVE-2007-1214
Excel $B$K$*$1$kFCMicrosoft Excel Filter Record Code Execution Vulnerability
(iDefense)
$B!!(Bpatch $B$,$"$k$N$GE,MQ$9$l$P$h$$!#$J$*!"(BWord/Excel/PowerPoint 2007 $B%U%!%$%k7A<0MQ(B Microsoft Office $B8_495!G=%Q%C%/(B$BMQ$N(B patch $B$O(B Office Update $B$d(B Microsoft Update $B$G$OE,MQ$5$l$J$$$N$GCm0U!#(B
$B8DJL$K%@%&%s%m!<%I(B$B$7$FE,MQ$7$J$1$l$P$J$i$J$$!#(B
$B!!(B5 $B7n$O(B Month of ActiveX Bug $B$J$N$@$=$&$G$9!#(B
$B!!(BBarracuda Spam Firewall, Panda AntiVirus, avast!, AntiVir,
zoo 2.10, unzoo.c, WinAce, PicoZip $B$K7g4Y!#(B
ZOO $B%"!<%+%$%V$N07$$$K7g4Y$,$"$j!"FCDj$N(B ZIP $B%"!<%+%$%V$K$h$C$FL58B%k!<%W$K4Y$k!#(BPoC $B%3!<%I$,E:IU$5$l$F$$$k!#(B
- Barracuda Spam Firewall:
CVE-2007-1669$B!#(B
virusdef 2.0.6399 (firmware 3.4 $B0J9_(B) / 2.0.6399o (firmware 3.4 $BL$K~(B)
$B$GBP1~$5$l$F$$$k!#(B
- Panda AntiVirus: CVE-2007-1670$B!#(B2007.04.02 $B$N99?7$GBP1~$5$l$F$$$k!#(B
- avast!: CVE-2007-1672$B!#(B
4.7.981 (2007.04.14) $B$GBP1~$5$l$F$$$k!#(B
- AntiVir: CVE-2007-1671$B!#(B
2007.03.22 $B$N99?7(B (avpack32.dll 7.3.0.6) $B$GBP1~$5$l$F$$$k!#(B
- zoo 2.10: CVE-2007-1669$B!#;XE&J8=q$K(B patch $B$,E:IU$5$l$F$$$k!#(B
patch $B$r$"$F$J$$$HL58B%k!<%W$K$J$j!"(Bpatch $B$r$"$F$k$H$=$&$O$J$i$J$$$3$H$runzoo.c: CVE-2007-1673$B!#L$BP1~(B
- WinAce: CVE-2007-2535$B!#L$BP1~(B
- PicoZip: CVE-2007-2536$B!#L$BP1~(B
$B!U(B
mod_auth_openpgp
$B$H$$$&$b$N$,$"$k$=$&$G!#(B
$B!U(B
$BJFO"K.:G9b:[!"FC5v$N!V<+L@@-!W$rH=Dj$9$kK!E*4p=`$N4KOB$rL?$8$k(B
(CNET, 5/1)
$B!U(B
HD-DVD$B0E9f2r=|%-!<$r$a$0$C$FBgA{$.!"(BDigg$B$O1j>e(B
(slashdot.jp, 5/6)$B!#(B
$B$3$&$$$&$B$O!VHs>o$KC1=c$J%_%9!W$J$N$G$9$+!D!D!#(B
$B!U(B
Windows Vista$B$N%?%9%/(B $B%^%M!<%8%c$G3F%W%m%;%9$N%G!<%?uBV$rI=<($9$kJ}K!(B
(Eiji James Yoshida$B$N5-O?(B, 5/6)
$B!U(B
$BBhFs2s$P$j$+$?JY6/2q>\:Y(B$B$,8x3+$5$l$F$$$^$7$?!#(B
$B!U(B
$B!Z%7%C%/%O%&%9![20FbMQ$N<+A3EINA$+$i$b%[%k%`%"%k%G%R%I!"El5~ET$,495$$r8F$S$+$1(B
($BF|7P(B KEN-Plats, 4/27)
$B!U(B
$B%;%-%e%j%F%#@lLg2H$,;E3]$1$?!Hf+!I(B
($BF|7P(B IT Pro, 5/7)$B!#(B
The Week Of Vista Bugs [TWOVB]
$B$,%,%;$@$C$?OC!#(B
$B!U(B
$B%(%-%9%]%i%s%I(B $B;`$N%8%'%C%H%3!<%9%?!
- $B%3!<%9%?!<;v8N!'C&@~$7#1?M;`K4!"#1#9?M$,=E7Z=}!]!]Bg:e!&%(%-%9%]%i%s%I(B
($BKhF|(B, 5/6)
$BF16a$O:rG/#17n$G!"!V!J:#G/$O!K#3%+7nH>CY$i$;$F$bBg>fIW!W$HH=CG$7!":#7n#1#5F|$K
- $BBg:e!&%3!<%9%?!<;v8N!'HaLD!"Ht$S;6$kGKJR!!$3$I$b$NF|0EE>!VI]$/$F>h$l$J$$!W(B
($BKhF|(B, 5/6)
$B2rBN$9$k8!::$OD>6a$G$O:rG/#17n$Ke$2$k$J$I$7$FL\;k$G$b8!::$,2DG=!W$HOC$7!"$3$NF|$N;O6HA0$NE@8!$G$b0[>o$O$J$+$C$?$HOC$7$?!#(B
- $B%3!<%9%?!<;v8N!'E@8!!"M71`COG$$;!!0BA4650i$b5,Dj$J$/(B
($BKhF|(B, 5/6)
$B$D$^$j!"K!$GDj$a$i$l$?>r7o$r$$$C$?$s%/%j%"$7!"0lEY7zC[3NG'$,2<$j$F$7$^$($P!"$=$N8e$N0BA44IM}$NB?$/$O=jM-
- $B%3!<%9%?!<;v8N!'A49q$NETF;I\8)$K6[5^E@8!;X<(!!9q8r>J(B
($BKhF|(B, 5/6)
- $B%(%-%9%]%i%s%I(B
$B!!$^$?!">!
$B!!$=$l0J9_$N1D6H$K$D$-$^$7$F$O!"$^$@7h$^$C$F$*$j$^$;$s$N$G!"8eF|%[!<%`%Z!<%8$r$4Mw$$$?$@$-$^$9$h$&!"$*4j$$?=$7>e$2$^$9!#(B
- $B$K@^$l$k!!%3!<%9%?!<;v8N$GA\:w(B
($BEl5~?7J9(B, 5/6)
$B@lLg2H$K$h$k$H!"!VHhO+GKLL!W$H8F$P$l!"@^$l$?860x$O6bB0HhO+$N2DG=@-$,9b$$$H$$$&!#(B
- $B4?@<0lE>!"62I]$NK=Av!D%3!<%9%?!
($BFIGd(B, 5/6)$B!#2#E>$NMM;R$,$o$+$kW7b$NBg$-$5$,A[A|$5$l$k!#(B
$B!!<:GT$N%]%$%s%H$O2?$@$m$&!D!D!#(B
- $B8!::!&@0HwBN@)$O$I$&$@$C$?$N$+!#(B
- $B6bB0HhO+$r%A%'%C%/$G$-$F$$$?$N$+$I$&$+(B
- $BJ,2r8!::$N!V!J:#G/$O!K#3%+7nH>CY$i$;$F$bBg>fIW!W$N:,5r$O(B
- $B$=$b$=$b!"$I$N$h$&$J8!::!&@0HwBN@)$,I,MW$H$5$l$k5!3#$J$N$+(B
- $B@_7W!&@=B$;~E@$G$O==J,$J0BA4@-$,$"$C$?$N$+!#(B
- $B$H$$$&>u67$O9MN8$5$l$F$$$?$N$+(B
- $BF,ItJ]8n%P!<$N6/EY$O==J,$@$C$?$N$+(B
$B!!!D!D$H=q$$$F$$$k$H!"(B$B%3!<%9%?!<;v8N!"6bB0HhO+$^$G8!::$;$:(B
(TBS, 5/6) $B$@$=$&$G!#(B
$B2q8+$G%(%-%9%]%i%s%IB&$O!"D62;GH$r;H$C$F
$B!!$D$^$j!"B>$N%3!<%9%?!<$G$bF1MM$N;v8N$,H/@8$9$k2DG=@-$,$"$k$H$$$&$3$H$J$N$+(B? $B;v8N$,H/@8$7$F$b:G0-$N>u67$O2sHr$5$l$k$h$&$J@_7W(B ($BK\
$B!!(BPHP 4.4.7 / 5.2.2 $B$,EP>l$7$?$=$&$G$9!#(B
MOPB-03, 08, 14, 20, 21, 22, 24, 26, 29, 33, 34,
CVE-2007-1001
$B$,D>$C$F$$$k$=$&$G$9!#(B
2007.05.10 $BDI5-(B:
- CVE-2007-2511: Buffer overflow in the user_filter_factory_create function in PHP before 5.2.2 has unknown impact and local attack vectors.
- CVE-2007-2510: Buffer overflow in the make_http_soap_request function in PHP before 5.2.2 has unknown impact and remote attack vectors, possibly related to "/" (slash) characters.
- CVE-2007-2509: CRLF injection vulnerability in the ftp_putcmd function in PHP before 4.4.7, and 5.x before 5.2.2 allows remote attackers to inject arbitrary FTP commands via CRLF sequences in the parameters to earlier FTP commands.
- CVE-2007-1864: Buffer overflow in the bundled libxmlrpc library in PHP before 4.4.7, and 5.x before 5.2.2, has unknown impact and remote attack vectors.
$B!U(B
$BD9:j;TD9
($BFIGd(B, 5/2)
$B!U(B
$B%(%9%H%K%"!'%m%7%"$H$N6[D%9b$^$k!!5l%=O"HjE15nC<=o$K(B
($BKhF|(B, 5/2)
$B%(%9%H%K%"9qL1$NLs#33d$K$"$?$k%m%7%"7O=;L1$K$H$C$F5-G0Hj$O!"BhFs]D'!#$@$,BgH>$N%(%9%H%K%"?M$K$O5l%=O"$K$h$k@jNN$N>]D'$G!"KhG/#57n#9F|$N@o>!5-G0F|$K$O!"5-G0Hj<~JU$GAPJ}$N>.6%$j9g$$$,B3$$$F$-$?!#%(%9%H%K%"$O$3$l$r0\E>$NM}M3$K$7$F$$$k!#(B
$B!!2rJ|$7$?$N$,%=O"$G$O!"2rJ|
$B%m%7%"B&$O!VNr;K$N=q$-49$(!W$J$I$HH?H/$7!">e1!$O#2#7F|!"@/I\$K%(%9%H%K%"$H$N9q8rCG@d$rMW5a!#%W!<%A%sBgE}NN$r;Y;}$9$k?F1RBb!V%J!<%7!W$J$I$N
$B!!!VNr;K$N=q$-49$(!W$H8@$C$F$k?MC#<+?H$,!"%=O"$,2?$r$d$C$F$-$?$N$+$r$5$C$Q$jK:$l$F$k$h$&$G!#(B
$B!U(B
$B%F%m$H8@O@$r9M$($k!J#4!K=54)D+F|!!
(JANJAN, 5/2)
$B!U(B
$B7P;:>J!">pJs%7%9%F%`$N!VAj8_1?MQ@-%U%l!<%`%o!<%/0F!W$r8x3+!!0U8+Jg=8(B
(Open Tech Press, 5/2)
$B!U(B
$B!V(BWindows 98/Me$B$r;H$$B3$1$k$3$H$O4m81!W!"(BIPA$B$,Cm0U4-5/(B
($BF|7P(B IT Pro, 5/2)$B!#(B1998 $BG/$H$$$&$H!"(BFreeBSD 3.0-RELEASE $B$H$+(B
Red Hat Linux 5.2 $B$H$+$G$9$M!#(B
$B!U(B
$B?7F~e;J$+$i2ql9g!";X<(DL$j$K9TF0$9$k$N$O(B37%$B!";X<($K=>$o$J$$$N$O(B13%
($B$^$k$A$c$s$N>pJs%;%-%e%j%F%#5$$^$0$lF|5-(B, 5/2)$B!#(B
$B
$B!U(B
freeftpmanager p2psharing.biz trojan site!
(SANS ISC, 5/1)$B!#(B
freeftpmanager
$B$N%@%&%s%m!<%I@h$O(B p2psharing.biz $B$G!"(BF-Secure $B$O(B Trojan-Downloader.Win32.PurityScan.eg [AVP] $B$HH=Dj$9$k$H$$$&OC!#(B
$B%9%/%j!<%s%7%g%C%H$r8+$k8B$j$G$O!"(BFTP $B%/%i%$%"%s%H$H$7$F$NCf?H$O(B
FileZilla $B$J$N$+$J!#N"$N5!G=$O%H%m%$(B?
$B!U(B
VMware Converter 3.0.1
$B$,=P$F$$$^$9!#(B
$B!U(B
$B%*%j%3%sAJ>Y%j%s%/=8!J#5!K(B4$B7nCf3F=j$G$N8@5Z(B
(SLAPP WATCH, 5/2)
$B!U(B
VNC 'scans' with windows size of 55808
(SANS ISC, 5/1)$B!#(B
TCP Window size 55808 $B$K$D$$$F$O(B
Intrusec Alert: 55808 Trojan Analysis
$B$r;2>H!#(B
$B!U(B
$B!Z(BWatcher$B$N%V%C%/%^!<%/![%;%-%e%j%F%#@H
($BF|7P(B IT Pro, 5/1)$B!#$&$o!"$3$N%Z!<%8$,(B top $B$K7G:\$5$l$F$k$7!D!D(B (^^;;;)
$B!U(B
$BF|K\%*!<%A%9$NGKCG%o%$%d!"@V$5$S#1G/#1#0$+7nJ|CV(B
($BFIGd(B, 5/1)
$B!!(BVMware Workstation 5.5.4, Build 44386 $BEP>l!#J#?t$N7g4Y$,=$@5$5$l$F$$$k!#(B
$B6&M-%U%)%k%@(B$B$rMxMQ$7$F$$$k>l9g$K!"%2%9%H(B OS $B$+$i%[%9%H(B OS $B$NG$0U$N>l=j$KG$0U$NFbMF$r=q$-9~$a$k!#6&M-%U%)%k%@$NB0@-@_Dj$O4X78$J$$$_$?$$!#(B
CVE-2007-1744
64bit $B%[%9%H>e$G(B 64bit $B%2%9%H$rMxMQ$7$F$$$k>l9g$K!"%m!<%+%k%W%m%0%i%`$r%G%P%C%0$9$k$H!"2>A[%^%7%s$rGK2u$G$-$k(B ($BG$0U$N%3!<%I$NCVE-2007-1876
Windows $B%2%9%H(B OS $B$N%a%b%j4IM}$K$*$1$kJ#?t$N(B general protection faults (GPFs) $B$N07$$$K7g4Y$,$"$j!"(BWindows $B2>A[%^%7%s$r%/%i%C%7%e$G$-$k!#(B
CVE-2007-1069
$BFCDj$N>u67$G!"2>A[%^%7%s%W%m%;%9(B (VMX) $B$K2u$l$?@_Dj$rJ]B8$5$;$k$3$H$,$G$-$k!#(B
$B$3$l$O(B DoS $B967b$K$J$k!#(B
CVE-2007-1877
ACPI $BEE8;4IM}$K4XO"$7$F!"%9%j!<%W(B (S2) $B$+$iDL>oF0:n(B (S0) $B$KI|5"$9$k>l9g$K2>A[%^%7%s%W%m%;%9(B (VMX) $B$OF0:n>uBV$N>pJs$r<}=8$9$k!#(B
$BFCDj$N>u67$G!"(BVMX $B$,8m$C$?>pJs$r<}=8$9$k$h$&$KA`:n$G$-$k!#(B
$B$3$l$O(B DoS $B967b$K$J$k!#(B
CVE-2007-1337
$B!!B>$N%W%m%@%/%H$O(B:
- About Security Update 2007-004
-
$B!!(BSecurity Update 2007-004 v1.1 $B$,=P$F$$$^$9!#(B
$B!!(BAirPort $B4X78$G%(%s%P%0$7$F$$$?$b$N!"(Bftp $B%5!<%P4X78$G?7$?$J7g4Y(B CVE-2007-0745 $B$r$D$/$C$F$7$^$C$F$$$?$b$N$r=$@5$7$?$=$&$G$9!#(B
- $B!V(BMac$B%O%C%-%s%0!&%3%s%F%9%H!W$GM%>!^6b(B1$BK|%I%k!=!=$"$i$?$a$FZ$5$l$?(BMac$B4D6-$N4m81$J@H
-
$B!!(BQuickTime 7.1.6 $B=P$^$7$?!#$3$N7g4Y$,=$@5$5$l$F$$$^$9!#(B
$B!!:G6a8x3+$5$l$?0J2<$N7g4Y$O$^$@D>$C$F$$$J$$$h$&$J$N$GCm0U(B:
$B!U(B
$B%$!<%8%94O>pJs!'O3$($$%k!<%H$O$5$i$KJ#;(2=(B
($BKhF|(B, 5/1)
$B!U(B
$BF|K\!'9q:]7:;v:[H==j2CF~$X(B
($B%"%`%M%9%F%#!&%$%s%?!<%J%7%g%J%kF|K\(B, 4/27)
$B!U(B
$B%k!&%b%s%I!&%G%#%W%m%^%F%#!<%/(B 2007.04 $B$+$i(B:
$B!U(B
$B%&%$%k%9$NL"1d$r5v$9Cf9q$H$$$&:.FY(B
($BF|7P(B BP, 2/13)$B!#!V(B$B;K>e:G0-$N%&%$%k%9(B$B!W$NOC!#(B
$B!!$3$NK\$N0lHV$NLdBj$O!"(BSARS $B$O;K>e:G0-$G$OA4A3$J$$$H$$$&E@$@$h$J$"!#(B
$B86Bj$O(B China Syndrome $B$J$N$K!"$I$&$7$F$3$&$$$&BjL>$K$7$F$7$^$&$N$@$m$&!#(B
$BJ8i:=U=)$NC4Ev$B;K>e:G0-$N%$%s%U%k%(%s%6(B$B!W$G$bFI$_$J$5$$!#(B
($B!V(B$B%0%l!<%H!&%$%s%U%k%(%s%6(B$B!W$OF|K\8l$,$R$I$+$C$?$N$G!D!D(B)
$B!U(B
$B!H(BA$B5i@oHH9gc+$,8f0U$K>$$5$:!I(B $BKNIt;x=>F|5-$,L@$+$7$???
($BF|7P(B BP, 4/27)
$B!U(B
$BJF%a%G%#%"$,7Y2|$9$k0BG\
($BF|7P(B BP, 4/26)
$B!U(B
$B!VI,MW0J>e$K
(asahi.com, 5/1)$B!#F|%F%l$H%F%lD+!#>&GdF;6q$@$+$i$M$'!#(B
$B!U(B
$B7HBS$N>pJsO3$l!)!!2M6u@A5a%a!<%k$K8D?M>pJs(B
(asahi.com, 5/1)$B!#(B
$B>\:Y$J8D?M>pJs$r7G:\$7$?7HBS%a!<%k$K$4Cm0U!*(B
($B9qL1@83h%;%s%?!<(B, 4/17) $B$NOC!"$"$$$+$o$i$:B3$$$F$$$k$h$&$G$9!#(B
$B!U(B
$B!V7HBS%a!<%k$,J8>OG=NO$K0-1F6A!W!=!=%"%$%k%i%s%I650i5!4X(B
(ITmedia, 4/26)$B!#$3$H$P$H$$$&$N$OJQ2=$7$F$$$/$b$N$@$H$O$$$&$b$N$N!D!D(B
$B!U(B
$BAmL3>J$,!V%$%s%?!<%M%C%HH~2=1?F0(B2007$B!W$r(B6$B7n$K
(Internet Watch, 4/27)$B!#H~2=1?F0$M$'!D!D!#(B
$B!U(B
8$BG/A0$O!VEpD0K!!W!"O"5YL@$1$K2?$,5/$-$k$+(B
($BJ]:dE8?M$N$I$3$I$3F|5-(B, 4/30)
$B!U(B
$B?79qN)DIEi;\@_!"0BG\Fb3U$GE`7k$r7hDj(B
($BJ]:dE8?M$N$I$3$I$3F|5-(B, 4/29)
$B!U(B
$B?M!9$,
(JANJAN, 5/1)
$B!U(B
$B%$%s%8%'%/%7%g%s7O967b$X$NKI8f$NE4B'(B
($BF|7P(B IT Pro, 4/25)
$B!U(B
MS$B!$(BOffice 2007$B%;%-%e%j%F%#5!G=$r(BOffice 2003$B$KDI2C$X(B
($BF|7P(B IT Pro, 4/27)$B!#(BOffice 2003 SP3 $BOC!#(B
$B!U(B
$B;3A1$N$?$3>F$-4o$GH/1l!&H/2P$N62$l(B
($B2HEE(B Watch, 4/27)
$B!U(B
RSA Conference Japan 2007 $B$M$?(B
$B!U(B
SSHjail$B$rMQ$$$?(Bjail$B2=$K$h$k(BOpenSSH$B%5!<%P$NJ]8n(B
(Open Tech Press, 5/1)
$B!U(B
$BCx:n8"$NJ]8n4|4VEy$r8!F$$9$k>.0Q0w2q!"4X78
(Internet Watch, 4/27)
$B!U(B
DoS$B6G/$G967b5^8:(B
(ITmedia, 4/27)$B!#(BSymantec blog $B$M$?!#(B
$B!U(B
$B%U%l!<%`%j%s%/!&%G%#!<%W%j%s%/0cK!O@(B
(Okumura's Blog, 4/29)$B!#$"$$$+$o$i$:$"$k$s$G$9$M!#(B
$B!U(B
$B2N;l$N0zMQ$rG'$a$J$$(BJASRAC
(Okumura's Blog, 4/29)$B!#$5$9$,$O(B JASRAC $B$G$9$M!#(B
$B!U(B
$B3X
($B$^$k$A$c$s$N>pJs%;%-%e%j%F%#5$$^$0$lF|5-(B, 4/30)
$B!U(B
$BEl
($B?eL57n$P$1$i$N$($SF|5-(B, 4/30)$B!#$"$i$^$"!#(B
$B!U(B
$B1x?e$NCf$N%,%6!A1x?eCy?eCS7h2u$G1R@8>uBV$,0-2=(B
(JANJAN, 4/26)
$B!U(B
$B$NHH:a!A85Ho9p$?$A$,F|K\$N7:;v
(JANJAN, 4/26)$B!#$3$l$,F|K\$N7Y;!!&8!;!!#(B
$B!U(B
$B8!>Z!&BQ?L56Au!!0-$$$N$OC/$+!)2?$+!)!J#1#0!K(B $BF#ED;a!!9VCL
(JANJAN, 4/26)$B!#!X(B$B!Z40A4HG![7n$K6A$/E+!!BQ?L56Au(B$B!Y$,!"J8i:=U=)$G$O$J$/9VCL$B$B$,$J$5$l$F$$$k$=$&$G$9!#(B
$B!U(B
$B!V%$%s%?!<%M%C%H@)!WF3F~$O(B7$B7n!"5,@)%5%$%H$K@/I\$,9pCN(B - $B4Z9q(B
($B%^%$%3%_%8%c!<%J%k(B, 4/28)
$B!U(B
https://affiliate.amazon.co.jp $B$NOC(B$B!#(B
$B$*$*$+$o$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
$B!!:#$OD>$C$F$^$9$M!#(B
$B!U(B
$B%o!<%`$NF0$-$r!V8+$($k2=!W$9$k$H!D!D(B
(ITmedia, 4/28)$B!#(B
$B%o!<%`$,Aw?.$9$k%Q%1%C%H$NF0$-$r$_$F$_$h$&(B
(HIRT, 2/28) $B$NOC!#(B
$B!U(B
NIST publishes guidance on RFID
(SANS ISC, 4/29)
$B!U(B
Microsoft web site compromise and partner security
(SANS ISC, 4/29)$B!#C/$,0-$$$s$@$m$&!#(B
$B4XO"(B: $B%^%$%/%m%=%U%H$N(BWeb$B%Z!<%8$,2~$6$s!"!V%Q%$$^$_$l$N
($BF|7P(B IT Pro, 5/1)
$B!U(B
EGold indicted for money laundering and illegal money transmitting
(F-Secure blog, 4/30)$B!#;q6b@v>t$G$9$+!#(B
$B!U(B
Update on the Estonian DDoS attacks
(F-Secure blog, 4/30)
$B!U(B
$B%-!<%m%,!<$N0-MQ$,5^A}Cf!$(BKaspersky$B$N%l%]!<%H$h$j(B
($BF|7P(B IT Pro, 4/27)
$B!U(B
Aircrack-ptw - WEP Cracking Tool (ARP)
$B$G$9$+!#(B
$B!U(B
FireMaster - Firefox Master Password Recovery Tool
$B$G$9$+!#(B
$B!U(B
$B@~0]6ZDK>I!"0lHL0e$N(B25$B!s$,IBL>CN$i$L(B
($BF|7P%a%G%#%+%k(B $B%*%s%i%$%s(B, 4/26)
$B!U(B
$B!ZLL3J;R![=;Bp$NAk$+$i$NIT?3
($BF|7P(B KEN-Plats, 4/26)
$B!U(B
$BEl>Z$,%7%9%F%`A}6/:v$rA0E]$7!$:#=)$K(B1$BF|(B2000$BK|7o$NCmJ8$KBP1~(B
($BF|7P(B IT Pro, 4/24)
$B!V$3$N(B2$B7n(B28$BF|$N@$3&F1;~3t0B$N:]$K!"(B1$BF|Ev$?$j$NCmJ87o?t$,2a5n:G9b$N(B936$BK|7o$K>e$C$?$3$H$,
$B!U(B
Penetration Test Framework Version
0.4 released $B$@$=$&$G$9!#(B
$B!U(B
$B!ZBQ?L![L?$r
($BF|7P(B KEN-Plats, 4/24)$B!"(B
$B!U(B
$B!V%P%Y%k!W4U>^$7BND4ITNI!!1GA|E@LG$G#7?MEG$-5$$J$I(B
($BCfF|(B, 4/30)$B!#(B$B%P%M%k(B$B$K%A%+%A%+7O$NLdBj$G$9$+!#(B
$B!U(B
$B3t2AA`:n;v7o!VNB;3Gq!W%M%C%H@-0-MQ$70lHLEj;q2HM6$&(B
($BKhF|(B, 4/24)
$B!!:_8K=hJ,Cf!#(B
2007.05.09 $BDI5-(B:
$B!!(BWinamp <= 5.34 .MP4 File Code Execution
(milw0rm) $B$KBP1~$9$k$?$a$N(B Winamp 5.34a Security Patch
$B$,8x3+$5$l$F$$$^$9!#%U%m!<%H$5$s>pJs$"$j$,$H$&$4$6$$$^$9!#(B
- Photoshop CS3/CS2$B$K%Q%C%AL$Ds6!$N@H
-
$B!!(BPNG $B%U%!%$%k$b$d$P$$LOMM!#(B
- [Clamav-announce] announcing ClamAV 0.90.2
-
$B!!(B0.90.2 $B$GD>$C$F$$$k!"(BPDF $B$G(B DoS $B$9$k7o(B: CVE-2007-2029$B!#(B
$B!!(Bbind 9.4.1 $B$,=P$?$=$&$G$9!#(B
RELEASE NOTES
$B$r8+$k$H!"$3$s$J$3$H$,=q$+$l$F$$$^$9(B:
BIND 9.4.1 is a security release of BIND 9, containing a
fix for a vulnerability in BIND 9.4.0:
2172. [bug] query_addsoa() was being called with a non zone db.
[RT #16834]
If you are running BIND 9.4.0 (either pre-release or final),
you are advised to upgrade as soon as possible to BIND 9.4.1.
$B!!(Bdiff $B$B$3$s$J$1$7$+$J$$$7(B$B!#(B
$B!!4XO"(B: [SA25070] ISC BIND "query_addsoa" Denial of Service
![[$B%;%-%e%j%F%#%[!<%k(B memo]](/%7Ekjm/security/memo/sechole-memo.gif)
$B;d$K$D$$$F(B