$BFC$K=EMW$J%;%-%e%j%F%#7g4Y>pJs(B

$B!!?t$"$k%;%-%e%j%F%#7g4Y>pJs$NCf$G$b!"N6Bg$G$N%3%s%T%e!<%?1?MQ$K:]$7$FFC$K=EBg$@$H9M$($i$l$k$b$N$K$D$$$F!"$3$3$K5-=R$7$F$$$^$9!#(B

1. 2003.12.15 $B$K$*$7$i$;$7$?(B Internet Explorer (IE) 5.01 / 5.5 / 6 $B$N7g4Y$G$9$,!"%;%-%e%j%F%#4k6H(B ISS $B$+$i!"7Y9p$H!"6[5^BP1~MQ$N%W%m%0%i%`$,G[I[$5$l$F$$$^$9!#(B

   • Microsoft Internet Explorer $B$K$*$1$k(B URL $B%9%W!<%U%#%s%0@H (ISS)
   • $B6[5^BP1~%W%m%0%i%`(B: Microsoft Internet Explorer domain URL spoofing filter (ISS)

   RINS $BC4Ev$Nl9g$O!"(BISS $B@=6[5^BP1~%W%m%0%i%`$r%$%s%9%H!<%k$7$F$*$/$N$,$h$$$G$7$g$&!#(B $B$?$@$7!"2DG=$G$"$l$P!"(BMozilla 1.5 $B$d(B Opera 7.23$B!"(B Safari $B$J$I$NMxMQ!&J;MQ$b9MN8$7$F$_$F$/$@$5$$!#(B

2. $B!V(BVISA $B%;%-%e%j%F%#%"%C%W%G!<%H!W$rqY$k:>5=%a!<%k(B (spam) $B$,2#9T$7$F$$$^$9!#(B $BN6Bg$K$b$b$A$m$sFO$$$F$$$^$9!#(B

   • Visa "Visa Security Update" (antiphishing.org)

   $B$3$N$h$&$J:>5=%a!<%k$,@$$NCf$K$OB??tB8:_$7$^$9!#(B $B$=$NB?$/$O(B HTML $B%a!<%k$rMxMQ$7!"MxMQH$7!"%K%;%5%$%H$G$O$J$$$3$H$r:Y?4$NCm0U$r;}$C$F3NG'$7$F$/$@$5$$!#(B

   $B$^$?$3$N:]$K$O!"%9%F!<%?%9%P!<$d%"%I%l%9%P!<$NI=<($K7g4Y$N$J$$(B web $B%V%i%&%6$rMxMQ$9$k;v$,I,MW$G$9!#8=>u$G$O!"(BMicrosoft Internet Explorer $B$K$OB?$/$N7g4Y$,=$@5$5$l$J$$$^$^;D$C$F$$$^$9!#(BMozilla 1.5 $B$d(B Opera 7.23$B!"(B Safari $B$J$I$NMxMQ!&J;MQ$b9MN8$7$F$_$F$/$@$5$$!#(B

3. $BAmL3>J4XO"AH?%(B Telecom-ISAC JAPAN $B$+$i(B$B!VG/Kv(B PC $BBgA]=|!W$N$*4j$$(B$B$,8x3+$5$l$F$$$^$9!#(B $B$3$3$K$b$"$k$h$&$K!"(B

   • Windows Update $B$d(B Microsoft Software Update Services $B$rMxMQ$7$F!":G?7$N(B Service Pack $B$H=$@5%W%m%0%i%`$rE,MQ$7$F$/$@$5$$!#(B

   • $BBg3X$H$7$F%5%$%H%i%$%;%s%9$7$F$$$k(B NAI VirusScan $B$r%$%s%9%H!<%k$7!":G?7$N%&%#%k%9%G!<%?$K99?7$7$F$/$@$5$$!#(B

   $B$h$m$7$/$*$M$,$$$$$?$7$^$9!#(B

1. $B%P!<%8%g%s(B 7,0,19,0 $B$h$jA0$N(B Macromedia Flash Player $B$K7g4Y$,H/8+$5$l$^$7$?!#(B Internet Explorer $B$"$k$$$O(B Opera $B$N>e$G(B Flash Player $B$rMxMQ$7$F$$$k>l9g$K!"0-0U$"$k(B web $B%5%$%H$,%3%s%T%e!<%?>e$N%U%!%$%k$K%"%/%;%9$G$-$F$7$^$&$H$$$&$N$G$9!#(B

   • MPSB03-08 Update to Flash Player Addressing Local Shared Object Security (macromedia.com)

   Flash Player 7,0,19,0 $B$G=$@5$5$l$F$$$^$9!#(B $B%@%&%s%m!<%I%Z!<%8(B (macromedia.com) $B$+$i$I$&$>!#(BInternet Explorer $BMQ$H(B Opera / Mozilla / Netscape $BMQ$O0[$J$k$N$G!"N>J}$K$D$$$F!":G?7$N(B Flash Player $B$r%$%s%9%H!<%k$7$F$*$$$F2<$5$$!#(B

1. 2003.12.15 $B$K$*$7$i$;$7$?!"(BInternet Explorer 5.01 / 5.5 / 6 $B$N7g4Y$G$9$,!"(BMicrosoft $B$+$i3NG'J}K!$K4X$9$k>pJs$,=P$^$7$?!#(B

   • 833786 - $B@.$j$9$^$7$?(B Web $B%5%$%H$+8+J,$1$k (Microsoft)

   $B$7$+$7$3$NJ}K!$O!"$=$b$=$b$=$N(B web $B%Z!<%8$,!V$"$d$7$$!W$3$H$K5$$,$D$/$3$H$,$G$-$k!";v$,A0Ds$H$J$j$^$9!#9*L/$J56Au$,;\$5$l$?(B web $B%Z!<%8$G$O!"$"$d$7$$$3$H$K5$$,$D$/$N$O4JC1$G$O$J$$$G$7$g$&!#(B

   2003.12.15 $B$K$b5-=R$7$?$H$*$j!">/$J$/$H$b$3$N7g4Y$,=$@5$5$l$k$^$G$O!"(BMozilla $B$d(B Opera $B$H$$$C$?!"$h$j4m81@-$NDc$$(B web $B%V%i%&%6$NMxMQ$r?d>)$7$^$9!#(B $B$^$?(B Outlook Express $B$K$D$$$F$O!"(BIE 6 SP1 $B$KIUB0$9$k(B Outlook Express 6 $B$K0\9T$7$?>e$G!"(BHTML $B%a!<%k$r%F%-%9%H$KJQ49$7$FFI$`$N$,$h$$$G$7$g$&!#(B

   • HTML$B%a!<%k$r%F%-%9%H7A<0$GFI$_=P$9(B (@IT)

   $B4XO"(B: $B%U%#%C%7%s%0:>5=$X$N4m5!46Jg$i$96bM;6H3&(B (ZDNet)$B!#(B

1. Internet Explorer 5.01 / 5.5 / 6 $B$K!"%"%I%l%9%P!<$*$h$S%9%F!<%?%9%P!<$KI=<($5$l$k(B URL $B$r56Au$9$k$3$H$,$G$-$k7g4Y$,H/8+$5$l$^$7$?!#(B

   • IE$B$K(BURL$B$r56Au$G$-$k%Q%C%AL$8x3+$N@H (Internet Watch)
   • $B$b$H$b$H$NJs9p(B: Internet Explorer URL parsing vulnerability$B!#2~NI7?(B: $B%9%F!<%?%9%P!<$r$b56Au$G$-$k(B$B%G%b%3!<%I(B$B!#$I$A$i$b(B JavaScript $B$,M-8z$G$"$k$3$H$,>r7o$G$9!#(B
   • $B#1#27n#1#1F|DI5-#3!]!]!]56AuEY%"%C%W$N4,!]!]!](B (hoshikuzu|stardust$B$N=q:X(B)$B!#(B $B$3$3$K$"$k!V(Bhttp://www.cnn.com/US/$B!W$N%G%b$r

     $B$3$N7g4Y$O!"

     • Internet Explorer 5.01 / 5.5 / 6 $B$rMxMQ$7$F%j%s%/$r$?$I$C$?7k2L$OA4$/?.MQ$G$-$J$$!#%j%s%/$r$?$I$C$?@h$O

       $B$3$N7g4Y(B ($B$N0lIt(B) $B$O(B Internet Explorer $B$K;_$^$j$^$;$s!#(B $B3F$B#1#27n#1#1F|DI5-#3!]!]!]56AuEY%"%C%W$N4,!]!]!](B (hoshikuzu|stardust$B$N=q:X(B) $B$N!V(Bhttp://www.cnn.com/US/$B!W$G$N7k2L$r<($7$^$9!#%9%F!<%?%9%P!<$K$D$$$F$O!"%/%j%C%/A0$NI=<($GH=Dj$7$^$7$?!#(B $B!_$O7g4Y$"$j!"!{$O7g4Y$J$7$G$9!#(B

       $B%V%i%&%6(B	$B%"%I%l%9%P!<(B	$B%9%F!<%?%9%P!<(B	$B%W%m%Q%F%#(B ($B%Z!<%8>pJs(B)	$BFC5-;v9`(B
       IE 5.01 SP3 + hotfix	$B!_(B	$B!_(B	$B!_(B	$B%"%I%l%9%P!<$O(B %2FUS%00 $B$N$h$&$K$J$k(B
       IE 5.5 SP2 + hotfix	$B!_(B	$B!_(B	$B!_(B	$B%"%I%l%9%P!<$O(B %2FUS%00 $B$N$h$&$K$J$k(B
       IE 6 SP1 + hotfix	$B!_(B	$B!_(B	$B!_(B	$B!!(B
       Netscape 7.1	$B!{(B	$B!_(B	$B!{(B	$B!!(B
       Mozilla 1.5	$B!{(B	$B!_(B	$B!{(B	$B!!(B
       Opera 7.23	$B!{(B	$B!{(B	$B!{(B	$B%@%$%"%m%0$bI=<($5$l$k(B
       Safari 1.0	$B!{(B	$B!_(B	$B!{(B	$B!V9=@.%U%!%$%k0lMw!W$r%W%m%Q%F%#$H$7$F07$C$?(B
       IE 5.1.7 for Mac OS 8/9	$B!{(B	$B!_(B	$B5!G=$J$7(B?	$B!!(B
       IE 5.2.3 for Mac OS X	$B!{(B	$B!_(B	$B5!G=$J$7(B?	$B!!(B

       $B$^$?!"(BJavaScript $B$,I,MW$J56Au$N>l9g$O

       $B%V%i%&%6(B	$B%"%I%l%9%P!<(B	$B%9%F!<%?%9%P!<(B	$B%W%m%Q%F%#(B ($B%Z!<%8>pJs(B)	$BFC5-;v9`(B
       IE 5.01 SP3 + hotfix	$B!_(B	$B!_(B	$B!_(B	$B!!(B
       IE 5.5 SP2 + hotfix	$B!_(B	$B!_(B	$B!{(B	$B!!(B
       IE 6 SP1 + hotfix	$B!_(B	$B!_(B	$B!{(B	$B!!(B
       Netscape 7.1	$B!{(B	$B!_(B	$B!{(B	$B!!(B
       Mozilla 1.5	$B!{(B	$B!_(B	$B!{(B	$B!!(B
       Opera 7.23	$B!{(B	$B!_(B	$B!{(B	$B%@%$%"%m%0$bI=<($5$l$k(B
       Safari 1.0	$B%G%b%Z!<%8$,$&$^$/F0$+$J$$(B	$B!_(B	$B!!(B	$B!!(B
       IE 5.1.7 for Mac OS 8/9	$B!{(B	$B!_(B	$B5!G=$J$7(B?	$B!!(B
       IE 5.2.3 for Mac OS X	$B!{(B	$B!_(B	$B5!G=$J$7(B?	$B!!(B

       Microsoft $B$+$i$O!"$7$P$i$/$O=$@5%W%m%0%i%`$ODs6!$5$l$J$$$h$&$G$9!#(B $B$3$N7g4Y$r2DG=$J8B$j2sHr$9$k$K$O!"(BMozilla 1.5 $B$d(B Opera 7.23$B!"(B Safari $B$J$I$rMxMQ$7$F$/$@$5$$!#$J$*!"(B Windows$BHG(BInternet Explorer$B$K(BURL$B$r56Au$G$-$F$7$^$&@H ($B%j%s%/$H$+HwK:O?$H$+F|5-$H$+(B) $B$K$h$k$H!"(BSafari 1.1 $B$G$O%9%F!<%?%9%P!<$N56Au$bKI;_$G$-$F$$$k$h$&$G$9!#(B

       $B$J$*!"(BIE $B%3%s%]!<%M%s%H$rMxMQ$9$k%=%U%H%&%'%"(B (Outlook Express $B$J$I(B) $B$K$bF1MM$N7g4Y$,$"$j$^$9$N$GCm0U$7$F$/$@$5$$!#!V(BHTML $B7A<0EE;R%a!<%k$rMxMQ$7$?:>5=9T0Y!W$O:G$b$"$j$,$A$J967b

1. Microsoft Windows $B$N(B 2003 $BG/(B 12 $B7nJ,$NDj4|%;%-%e%j%F%#=$@5$O9T$o$l$J$$!"$HH/I=$5$l$^$7$?(B:

   • 2003 $BG/(B 12 $B7n8=:_$N%;%-%e%j%F%#>pJs(B (Microsoft)

   2003.11.28 $B$K(B Internet Explorer (IE) $B$N=EBg$J7g4Y$K$D$$$F$*$7$i$;$7$F$$$^$9$,!"$3$l$i$O$"$H(B 1 $B$+7n$O=$@5$5$l$J$$$^$^B8B3$9$k2DG=@-$,9b$$!"$H8@$($^$9!#(B

   $B$3$N$h$&$J>u67$KBP1~$9$kJ}K!$H$7$F!"$?$H$($P(B IE $B$N%D!<%k"*%$%s%?!<%M%C%H%*%W%7%g%s"*%;%-%e%j%F%#$G!V%$%s%?!<%M%C%H%>!<%s!W$K$*$1$k%"%/%F%#%V%9%/%j%W%H$rL58z$K$7$?$j!"(B Qwik-Fix $B$N$h$&$J%;%-%e%j%F%#%=%U%H%&%'%"$rF3F~$9$k!"$3$H$,5s$2$i$l$^$9!#(B Qwik-Fix 0.57 $B$G$O!"(B2003.11.28 $B$K5-:\$7$?7g4Y$rMxMQ$7$?967b$rKI$0$3$H$,$G$-$k!"$H$5$l$F$$$^$9!#(B

   • Qwik-Fix (pivx.com)
   • Comments on 5 IE vulnerabilities (pivx.com)

   $B$?$@$7!"%;%-%e%j%F%#%=%U%H%&%'%"$rF3F~$9$k$H!"$=$NI{:nMQ$K$h$j!"(BOS $B$d0lHL$N%"%W%j%1!<%7%g%s$KIT6q9g$,H/@8$9$k(B$B2DG=@-$,$"$k(B$B!"$3$H$rG'<1$7$F$*$$$F$/$@$5$$!#%;%-%e%j%F%#$HMxJX@-$O>o$KH?HfNc$7$^$9!#(B

   $B$J$*!"(BQwik-Fix $B$,!<%s$N%m%C%/%@%&%s!W$O!"(B $B8=:_3+H/Cf$N(B Windows XP Service Pack 2 $B$G(B Microsoft $B$K$h$C$F$b

   • Windows XP Service Pack 2: $B3+H/pJs(B - PDC 2003 $B8~$1Ap9F(B (Microsoft)

     Internet Explorer $B$K!<%s$r%m%C%/%@%&%s$7!"0-0U$N$"$k%9%/%j%W%H$N

2. Apple Computer $B$+$i!"(Bweb $B%V%i%&%6(B Safari $B$K4X$9$k7g4Y$N=$@5$,G[I[$5$l$F$$$^$9(B:

   • APPLE-SA-2003-12-05 Security Update 2003-12-05 (Apple)

   Mac OS X $BMxMQ

1. NEC $B$*$h$S(B (NEC $B@=%W%j%s%?%(%s%8%s$rEc:\$7$?(B) $BF|N)$N%b%N%/%m%W%j%s%?$K$*$$$F!"FCDjItJ,$,H/G.$7!":G0-$N>l9g$K$OH/2P$9$k$H$$$&7g4Y$,H/8+$5$l$^$7$?!#(B

   • $B#N#E#C@=%b%N%/%m%l!<%6!<%W%j%s%?MQ0u;zAuCV$NL5=~ItIJ8r49$K$D$$$F(B (NEC)
   • $BF|N)(BTyphoon20$B!"(BHT-4559-209/209N$B%b%N%/%m%l!<%6%W%j%s%?!<$r$4;HMQ$N$*5RMM$X(B ($BF|N)(B)

   $B3:Ev5!l9g$O!"%7%j%"%k%J%s%P!<$r3NG'$7!"3:Ev$7$F$$$k>l9g$O!V(BNEC$B%W%j%s%?$*5RMM

   • $B@aEE%b!<%I@_Dj
   • $B@aEE%b!<%I@_Dj

2. 2003.11.26 $B$K(B web $B%V%i%&%6(B Opera $B$N7g4Y$K$D$$$F5-:\$7$^$7$?$,!"(B Opera $BF|K\8lHG$K$D$$$F$b7g4Y$r=$@5$7$?(B 7.23 $BHG$,EP>l$7$^$7$?!#(B

   • OPERA$B$N%@%&%s%m!<%I(B

   Opera $BMxMQ

• 2.4.23 $B$h$jA0$N(B Linux 2.4.x $B%+!<%M%k$K7g4Y$,$"$k$3$H$,H=L@$7$^$7$?!#(B $B$3$l$r0-MQ$9$k$H!"0lHL%f!<%6$,4IM}

  • Linux kernel do_brk() lacks argument bound checking (isec.pl)
    $B>\:Y(B: Linux Kernel do_brk() Vulnerability (isec.pl)
  • Debian Investigation Report after Server Compromises (debian.org)

  $B3F

  • Debian GNU/Linux: [SECURITY] [DSA-403-1] userland can access Linux kernel memory
  • Red Hat Linux: [RHSA-2003:392-00] Updated 2.4 kernel fixes privilege escalation security vulnerability
  • Miracle Linux: kernel-2.4.9 $B%;%-%e%j%F%#(B 2003/12/02 Linux $B%+!<%M%k$N@H
  • Turbolinux: Turbolinux Security Advisory TLSA-2003-65
  • Vine Linux: [ 2003,12,03 ] kernel $B$K%;%-%e%j%F%#%[!<%k(B

• Internet Explorer 5.01 / 5.5 / 6 $B$K=EBg$J7g4Y$,J#?tB8:_$9$k$3$H$,L@$i$+$K$J$j$^$7$?!#(BInternet Explorer $B$rMxMQ$7$F(B web $B%Z!<%8$r1\Mw$9$k$H!"CN$i$J$$4V$K%&%#%k%9$r@_CV!&e$N%U%!%$%k$rEp$_FI$^$l$?$j$9$k2DG=@-$,$"$j$^$9!#(B

  • Secunia Advisory SA10289: Internet Explorer System Compromise Vulnerabilities (secunia.com)
  • Internet Explorer$B$N?7%;%-%e%j%F%#%[!<%k$O!V6K$a$F4m81!W(B (ZDNet)

  $B<($5$l$F$$$k%G%b%W%m%0%i%`$N$&$A$$$/$D$+$K$D$$$F$O!"(BNAI VirusScan $B$r:G?7$N%&%#%k%9Dj5A%U%!%$%k(B ($BK\F|;~E@$G$O(B 4306) $B$H6&$KMxMQ$7$?>l9g!"(BVirusScan $B$,8!=P!&:o=|$9$k$3$H$r3NG'$G$-$^$7$?!#$7$+$7;DG0$J$,$i!"A4$F$G$O$"$j$^$;$s!#(B

  $B$3$N7g4Y$KBP$9$k=$@5%W%m%0%i%`$O$^$@$"$j$^$;$s!#$3$l$^$G$Ne$+$+$k$H9M$($i$l$^$9!#=$@5%W%m%0%i%`$,40@.$9$k$^$G$N4V!"2sHr=hCV$H$7$F!"%$%s%?!<%M%C%H%>!<%s$K$*$1$k!V%"%/%F%#%V%9%/%j%W%H!W$NInternet Explorer $B$G%;%-%e%j%F%#$r3NJ]$9$k(B (Microsoft)$B!#(B

1. web $B%V%i%&%6(B Mozilla $B$K$*$1$k4{CN$N7g4Y$,0lMw$G$-$k%Z!<%8$,8x3+$5$l$F$$$^$9!#(B

   • Mozilla $B$K$*$1$k4{CN$N@H

   Mozilla 1.4 $B0JA0$K$O$5$^$6$^$J7g4Y$,$"$k$3$H$,$o$+$j$^$9!#(B Mozilla 1.4 $B0JA0$rMxMQ$7$F$$$k>l9g$O!"B.$d$+$K(B Mozilla 1.5 $B$K0\9T$7$F$/$@$5$$!#F1MM$NM}M3$G!"(BNetscape 7.02 $B0JA0$rMxMQ$7$F$$$k>l9g$O!"B.$d$+$K(B Netscape 7.1 $B$K0\9T$7$F$/$@$5$$!#(BNetscape 7.1 $B$N%$%s%9%H!<%k$K$"$?$C$F$O!"(B Netscape 7.1 $BF|K\8lHG$N$h$/$"$kLdBj$H2sHr:v(B (netscape.com) $B$b;2>H$7$F$*$$$F$/$@$5$$!#(B

2. web $B%V%i%&%6(B Opera 7.22 $B0JA0$K=EBg$J7g4Y$,H/8+$5$l$^$7$?!#(B

   • Opera directory traversal and buffer overflow

   Opera 7.23 $B$G=$@5$5$l$F$$$^$9!#B.$d$+$K0\9T$7$F$/$@$5$$!#(BOpera 7.23 $B$NF|K\8lHG$O$^$@8x3+$5$l$F$$$^$;$s$,!"

1. 2003.10.28 $B$N5-;v$K$*$$$F!"(B Apache 1.3.29 $B$*$h$S(B Apache 2.0.48 $B$NEP>l$K$D$$$F5-:\$7$^$7$?$,!"(B Apache 1.3.29 $B$*$h$S(B Apache 2.0.48 $B$G(B

   • mod_usertrack $B$rMxMQ$7$F$*$j!"$+$D(B
   • $B%G%U%)%k%H$N(B CookieName $B$rMxMQ$7$F$$$k(B ($BL@<(E*$K(B CookieName $B$r;XDj$7$F$$$J$$(B)

   $B>l9g$K!"(BApache $B$,%/%i%C%7%e$7$F$7$^$&$3$H$,H=L@$7$^$7$?!#(B

   • Important Bug Workaround for 2.0.48 and 1.3.29 (apache.org)

   $B2sHrJ}K!$H$7$F$O!"(BCookieName Apache $B$N$h$&$K!"L@<(E*$K(B CookieName $B$r@_Dj$9$l$P$h$$$G$9!#(B Bug 24483 $B$K$O(B Apache 2.0.48 $BMQ$N(B patch $B$b<($5$l$F$$$^$9!#(B

1. 2003.11.12 $B$K$*EA$($7$?(B Microsoft Windows $B$K4X$9$k?7$?$J7g4Y$N$R$H$D!"(BWorkstation $B%5!<%S%9$N%P%C%U%!%*!<%P!<%i%s$K$h$j!"%3!<%I$, $B$K4X$9$kB3Js$G$9!#(B

   MS03-049 $B7g4Y$rMxMQ$9$k96N,%W%m%0%i%`$,Aa$/$bEP>l$7$F$$$^$9!#7Y;!D#$+$i2r@O7k2L$,8x3+$5$l$F$$$^$9(B:

   • Windows$B$N@H ($B7Y;!D#(B)

   $B$^$?!"7Y;!D#!&AmL3>J!&7P:Q;:6H>J$NO"L>$K$h$k7Y9p$,H/$;$i$l$F$$$^$9(B:

   • MS03-049$B$N@H ($B7Y;!D#!&AmL3>J!&7P:Q;:6H>J(B)

   MS03-049 $B=$@5%W%m%0%i%`$r!"0l9o$bAa$/E,MQ$7$F$/$@$5$$!#(B

2. 2003.11.12 $B$K$*EA$($7$?(B Microsoft Windows $B$K4X$9$k?7$?$J7g4Y$N$R$H$D!"(B Internet Explorer $BMQ$NN_@QE*$J%;%-%e%j%F%#99?7(B (824145) (MS03-048) $B$K4X$9$kB3Js$G$9!#(B

   $B$I$&$d$i(B MS03-048 $B=$@5%W%m%0%i%`$K$OI{:nMQ$,$"$k$h$&$G$9!#(B

   • IE 6 $B$G!"%9%/%m!<%k%P!<$r%/%j%C%/$7$?$H$-$N0\F0NL$,(B 2 $B2hLLJ,$K$J$C$F$7$^$&!#(B

   • IE $B$N%$%s%?!<%M%C%H%*%W%7%g%s"*A4HL"*%f!<%6!

   $B>o$KH/@8$9$k$o$1$G$O$J$$$h$&$G!"(BRINS $B$N(B Windows $B$G$bH/@8$7$F$$$k$b$N$H$7$F$$$J$$$b$N$,$"$j$^$9!#(BMS03-048 $B=$@5%W%m%0%i%`$rE,MQ$7$J$$>l9g$N4m81@-$r9M$($k$H!"=$@5%W%m%0%i%`$rE,MQ$7!"$,$^$s$7$F;H$C$?J}$,$h$$$G$7$g$&!#$5$b$J$1$l$P!"(BNetscape / Mozilla $B$J$I$H$$$C$?!"B>$N%V%i%&%6$r;H$$$^$7$g$&!#(B

3. web $B%V%i%&%6(B opera 7.22 $B$,EP>l$7$F$$$^$9!#(B7.21 $B0JA0$KB8:_$7$?%;%-%e%j%F%#7g4Y$,=$@5$5$l$F$$$^$9!#(B

   • Opera Directory Traversal in Internal URI Protocol (Advisory)
   • Opera Skinned : Arbitrary File Dropping And Execution (Advisory)

   opera 7.x $BMxMQ$A$K(B 7.22 $B$X0\9T$7$F$/$@$5$$!#(B

1. Microsoft Windows $B$K4X$9$k?7$?$J7g4Y$,(B 3 $B$D!"(BMicrosoft Office $B$K4X$9$k?7$?$J7g4Y$,(B 1 $B$D!"8x3+$5$l$^$7$?(B:

   • Internet Explorer $BMQ$NN_@QE*$J%;%-%e%j%F%#99?7(B (824145) (MS03-048)

     $BBP>](B: IE 5.01 SP2$B!A(BSP4$B!"(BIE 5.5 SP2$B!"(BIE 6 gold / SP1$B!#(B IE 5.01 SP2$B!A(BSP4 $B$O(B Windows 2000 $B$G$N$_%5%]!<%H$5$l$^$9!#(B

   • Workstation $B%5!<%S%9$N%P%C%U%!%*!<%P!<%i%s$K$h$j!"%3!<%I$,

     $BBP>](B: Windows 2000 / XP$B!#(B

   • Microsoft Word $B$*$h$S(B Microsoft Excel $B$N@H

     $BBP>](B: Word 97 / 98 / 2000 / 2002$B!"(BExcel 97 / 2000 / 2002$B!#(B

   • Microsoft FrontPage Server Extensions $B$N%P%C%U%!%*!<%P!<%i%s$K$h$j!"%3!<%I$,

     $BBP>](B: FrontPage 2000 Server Extensions, FrontPage Server Extensions 2002, SharePoint Team Services 2002$B!#(B

   $B=$@5%W%m%0%i%`$rB.$d$+$KE,MQ$7$F$/$@$5$k$h$&$*4j$$CW$7$^$9!#(B $BFC$K(B MS03-048 $B$K$D$$$F$O!"$3$l$r0-MQ$9$k%&%#%k%9$,B??t3NG'$5$l$F$$$^$9!#(B $B$^$?(B MS03-049 $B$O!"(B8 $B7n$KN.9T$7$?(B Blaster $B%o!<%`$KI$E($9$k%&%#%k%9$N@=B$$,2DG=$J7g4Y$N$?$a!"6aF|Cf$K$3$l$r0-MQ$9$k%&%#%k%9$,EP>l$9$k$HM=A[$5$l$F$$$^$9!#(B $B?7e5-=$@5%W%m%0%i%`$rB.$d$+$KE,MQ$7$F$/$@$5$$!#(B

   Windows Update $B$d(B Microsoft Software Update Services$B!"(B Office Update $B$rMxMQ$9$k$H!"=$@5%W%m%0%i%`$r4JC1$KE,MQ$G$-$^$9!#(B $B$J$*!"(BOffice 97 $B$K$D$$$F$O(B Office Update $B$,BP1~$7$F$$$J$$$?$a!"(BMS03-050 $B%Z!<%8$+$i=$@5%W%m%0%i%`$r

   Windows XP $BMxMQ

   Windows XP $BMQ$N(B MS03-049 $B=$@5%W%m%0%i%`$O(B MS03-043 $B=$@5%W%m%0%i%`$HF1$8$b$N$G$9!#(B MS03-043 $B=$@5%W%m%0%i%`$O(B 2003.10.16 $B$KEP>l$7!"(B2003.10.30 $B$K99?7$5$l$F$$$^$9!#(B Microsoft $B$O$3$N99?7$K$D$$$F(B

   $B$3$N%;%-%e%j%F%#=$@5%W%m%0%i%`$rE,MQ:Q$_$N>l9g!"$3$N%"%C%W%G!<%H$r%$%s%9%H!<%k$9$kI,MW$O$"$j$^$;$s!#(B

   $B$H8@$C$F$$$^$9!#$7$+$7MS03-043 $B=$@5%W%m%0%i%`$KB8:_$7$?!"!V%U%!%$%k$N0lIt$,@5$7$/%$%s%9%H!<%k$5$l$J$$!W$H$$$&(B$B=EBg$JLdBj(B$B$,!"?7$7$$=$@5%W%m%0%i%`$G(B$BHkL)N"$K(B$B=$@5$5$l$F$$$^$9!#(B $B$3$N$?$a!"?7$7$$=$@5%W%m%0%i%`$NE,MQ$,6/$/?d>)$5$l$^$9$,!"4{$K8E$$=$@5%W%m%0%i%`$r%$%s%9%H!<%k$7$F$"$k>l9g$K$O!"?7$7$$=$@5%W%m%0%i%`$O(B Windows Update $B$d(B Microsoft Software Update Services $B$G$OE,MQ$G$-$^$;$s!#(B

   $B$3$N$?$a!"(BWindows XP $BMxMQMS03-043 $B%Z!<%8(B$B$+$i8DJL$K=$@5%W%m%0%i%`$r

2. 2003.10.28 $B$K$*EA$($7$?(B Apache $B$N7o$G$9$,!":#$N$H$3$m(B Miracle Linux $B$H(B Vine Linux $BMQ$N=$@5%Q%C%1!<%8$,EP>l$7$F$$$^$9!#(B

   • Miracle Linux: apache $B%;%-%e%j%F%#(B
   • Vine Linux: [ 2003,11,06 ] Apache $B$K%;%-%e%j%F%#%[!<%k(B

1. $B9-$/MxMQ$5$l$F$$$k(B web $B%5!<%P(B Apache $B$N(B 1.3.28 $B0JA0!"$*$h$S(B 2.0.47 $B0JA0$K7g4Y$,$_$D$+$j$^$7$?!#$3$l$r=$@5$7$?(B Apache 1.3.29 $B$*$h$S(B Apache 2.0.48 $B$,EP>l$7$F$$$^$9!#(B

   • Apache 2.0.48 Released
   • Apache HTTP Server 1.3.29 Released

   $B:#8e!"3Fl$9$k$HM=A[$5$l$^$9$N$G!"0FFb$KCm0U$7$F$*$$$F$/$@$5$$!#(B $B$^$?(B Windows $BMQ$N%P%$%J%j%Q%C%1!<%8$G$9$,!"$^$@(B 2.0.48 / 1.3.29 $BMQ$,MQ0U$5$l$F$$$J$$$h$&$G$9!#$3$A$i$b!"EP>l$7

1. 2003.10.16 $B$K!"(BMicrosoft Windows $B$K4X$9$k?7$?$J7g4Y$r(B 5 $B$D>R2p$7$^$7$?$,!"(B $B$3$N$&$A(B Windows NT 4.0 / 2000 / XP / Server 2003 $B$K$*$1$k7g4Y!"(B MS03-043: $B%a%C%;%s%8%c(B $B%5!<%S%9$N%P%C%U%!(B $B%*!<%P!<%i%s$K$h$j!"%3!<%I$, $B$OFC$K4m81@-$,9b$$$H9M$($i$l$F$$$^$9!#(B $B%;%-%e%j%F%#4XO"4k6H(B ISS $B$O(B 2003.10.21 $B$N(B Weekly SOC Report $B$K$*$$$F

   2003/10/15$B$K8xI=$5$l$?!"!V(BMicrosoft Windows$B%a%C%;%s%8%c%5!<%S%9$N@H$B!W$O!"(BMS Blaster$B$GMxMQ$5$l$?!V(BMicrosoft RPC$B%5!<%S%9$K$*$1$kJ#?t$N@H$B!W(B(2003/9/10)$B$HF1MM$N4m81@-$"$k$b$N$H9M$($i$l$F$$$^$9!#(B $B$9$G$K!"$3$N@HMQ$G$-$k%3!<%I$b!"6aF|Cf$K8x3+$5$l$k$b$N$HM=A[$5$l$F$$$^$9!#(B
   $B$3$N@Hl9g!"(BUDP$B$r;H$&$3$H$K$h$j(BSlammer$B$K=`$8$?%9%T!<%I$G$N3H;6$H!"(BMS Blasrer$B$HF1$846@w%?!<%2%C%H$r;}$D%o!<%`$r3+H/$9$k$3$H$,2DG=$G$"$k$?$a!"==J,$JCm0U$rJ'$&I,MW$,$"$j$^$9!#(B $B$J$*!"%o!<%`$^$?$O!"967b%3!<%I$,MxMQ$9$k$b$N$HM=A[$5$l$k$N$O!"(BTCP$B$*$h$S(BUDP$B$N(B1024-1100$BHV$^$G$N%]!<%H$G$9!#(B
   $B%M%C%H%o!<%/4IM}$r9T$o$l$kJ}$K$*$$$F$O!"$3$l$i$N%]!<%H$,3N

   $B=$@5%W%m%0%i%`$rE,MQ$7$F$$$J$$(B Windows 2000 SP4 $B$KBP$7$F!"8x3+$5$l$F$$$k!V(BDoS $B%3!<%I!W$r;n$7$?$H$3$m!"(BOS $B$,:F5/F0$7$F$7$^$&$3$H$r3NG'$G$-$^$7$?(B [$B2hA|(B]$B!#(B $B$^$@(B MS03-043 $B7g4Y$r0-MQ$9$k%&%#%k%9(B / $B%o!<%`$,EP>l$7$F$$$J$$:#$N$&$A$K!"(BMS03-043 $B=$@5%W%m%0%i%`(B$B$rE,MQ$7$F$*$$$F2<$5$$!#(BWindows Update $B$d(B Microsoft Software Update Services $B$rMxMQ$9$k$HJXMx$G$9!#(B

   $B$J$*!"(BWindows 2000 SP2 $B$H(B Windows NT 4.0 Workstation $BMQ$N=$@5%W%m%0%i%`$O!"(BWindows Update $B$d(B Microsoft Software Update Services $B$G$OG[I[$5$l$F$$$J$$$N$GCm0U$7$F$/$@$5$$!#(BMS03-043 $B%Z!<%8(B$B$+$i8DJL$KMS03-041$B!"(BMS03-042$B!"(BMS03-044$B!"(BMS03-045 $B$bF1MM$G$9!#(B

   $B=$@5%W%m%0%i%`$rE,MQ$G$-$J$$>l9g$O!"!V%a%C%;%s%8%c!MS03-043: $B!V%a%C%;%s%8%c! $B$r;2>H$7$F$/$@$5$$!#(B

1. Microsoft Windows $B$K4X$9$k?7$?$J7g4Y$,(B 5 $B$D!"(BMicrosoft Exchange $B$K4X$9$k?7$?$J7g4Y$,(B 2 $B$D!"=$@5%W%m%0%i%`$H6&$K8x3+$5$l$F$$$^$9(B:

   • MS03-041: Authenticode $B$N8!>Z$N@H
     $BBP>](B: Windows NT 4.0 / 2000 / XP / Server 2003
     $BHsBP>](B: Windows Me
   • MS03-042: Windows $B%H%i%V%k%7%e!<%?(B ActiveX $B%3%s%H%m!<%k$N%P%C%U%!(B $B%*!<%P!<%U%m!<$K$h$j!"%3!<%I$,
     $BBP>](B: Windows 2000
     $BHsBP>](B: Windows NT 4.0 / XP / Server 2003
   • MS03-043: $B%a%C%;%s%8%c(B $B%5!<%S%9$N%P%C%U%!(B $B%*!<%P!<%i%s$K$h$j!"%3!<%I$,
     $BBP>](B: Windows NT 4.0 / 2000 / XP / Server 2003
     $BHsBP>](B: Windows Me
   • MS03-044: Windows $B$N!V%X%k%W$H%5%]!<%H!W$N%P%C%U%!(B $B%*!<%P!<%i%s$K$h$j!"%7%9%F%`$,?/32$5$l$k(B (825119)
     $BBP>](B: Windows Me / NT 4.0 / 2000 / XP / Server 2003
     $BHsBP>](B: $B$J$7(B
   • MS03-045: $B%j%9%H%\%C%/%9$*$h$S%3%s%\%\%C%/%9$N%3%s%H%m!<%k$N%P%C%U%!(B $B%*!<%P!<%i%s$K$h$j!"%3!<%I$,
     $BBP>](B: Windows NT 4.0 / 2000 / XP / Server 2003
     $BHsBP>](B: Windows Me
   • MS03-046: Exchange Server $B$N@H
     $BBP>](B: Exchange 5.5 / 2000
     $BHsBP>](B: Exchange 2003
   • MS03-047: Exchange Server 5.5 Outlook Web Access $B$N@H
     $BBP>](B: Exchange 5.5
     $BHsBP>](B: Exchange 2000 / 2003

   Windows Update $B$d(B Microsoft Software Update Services $B$rMxMQ$7$FE,MQ$7$F$/$@$5$$!#(B $BFC$K(B MS03-043 $B$O(B Blaster $B$N$h$&$J%&%#%k%9$r@=B$2DG=$J7g4Y$G$9!#(B $B=$@5%W%m%0%i%`$rAa5^$KE,MQ$7$F$/$@$5$$!#(B

2. $B$3$l$^$GKh=5LZMKF|$4$m$KEP>l$7$F$$$?(B Microsoft Windows $BMQ$N=$@5%W%m%0%i%`$G$9$,!"$3$l$+$i$O!"86B'$H$7$FKh7nBh(B 2 $B2PMKF|(B (US $B;~4V(B) $B$K$^$H$a$F8x3+$5$l$k$3$H$K$J$k$=$&$G$9(B:

   • Revamping the Security Bulletin Release Process (Microsoft)

   $BKh7n$NBh(B 2 $B2PMKF|$NWindows Update $B$d(B Microsoft Software Update Services $B$rMxMQ$7$F=$@5%W%m%0%i%`$rE,MQ$9$k$h$&$K$7$F$/$@$5$$!#(B

1. 2003.09.11 $B$K!"(BInternet Explorer $BMQ$NN_@QE*$J=$@5%W%m%0%i%`(B (822925) (MS03-032) $B$N=$@5%W%m%0%i%`$OIT==J,$G$"$k;]$r$*CN$;$7$F$$$^$9$,!"$3$NIT==J,$5$r

   • Internet Explorer $BMQ$NN_@QE*$J=$@5%W%m%0%i%`(B (828750) (MS03-040)

   Windows Update $B$d(B Microsoft Software Update Services $B$rMxMQ$7$FE,MQ$7$F$/$@$5$$!#(B

   $B$J$*!"(BWindows NT 4.0 / 2000 $B$G(B IE 5.01 / 5.5 $B$rMxMQ$7$F$$$k>l9g$O!"(B $B=$@5%W%m%0%i%`$NE,MQD>8e$K4IM})$7$^$9!#(B

1. 2003.09.11 $B$K!"(BInternet Explorer $BMQ$NN_@QE*$J=$@5%W%m%0%i%`(B (822925) (MS03-032) $B$N=$@5%W%m%0%i%`$OIT==J,$G$"$k;]$r$*CN$;$7$F$$$^$9$,!"$3$N7g4Y$r0-MQ$7$?(B web $B%Z!<%8$d(B spam ($BLBOG%a!<%k(B)$B!"%&%#%k%9(B ($B%H%m%$$NLZGO(B) $B$,L"1d$7$F$$$k$h$&$G$9!#(B

   • IE$BMQN_@Q%Q%C%A$N7g4Y$G;vBV$O!V4m5!E*>u67!W(B (ZDNet)
   • DNS$B$K1F6A!"%Q%C%AL$H/9T$N@H (ZDNet)

   Windows $BHG(B Internet Explorer $B$NMxMQ2003.09.11 $B$K5-:\$7$?2sHrJ}K!$r

1. 2003.09.24 $B$K$*EA$($7$?(B OpenSSH $B$N!VN`;w$N7g4Y!W$G$9$,!"(BTurbolinux $BMQ$N=$@5%W%m%0%i%`$,EP>l$7$F$$$^$9!#(BTurbolinux $BMxMQ

   • Turbolinux Security Advisory TLSA-2003-53

2. Microsoft Office 2000 / XP $B$N=$@5%W%m%0%i%`$NE,MQ$K$O(B Office Update $B$Nl9g$,$"$k$h$&$G$9!#(B $B$4Cm0U$/$@$5$$!#(B

   • Office $B$N%"%C%W%G!<%H$NIT6q9g$H2sHr:v$K$D$$$F(B (Microsoft)

1. 2003.09.18 $B$K$*EA$($7$?(B OpenSSH $B$N7g4Y$G$9$,!"N`;w$N7g4Y$,$5$i$KH/8+$5$l$^$7$?!#(B

   • CAN-2003-0682

   $B

   • Debian GNU/Linux: [SECURITY] [DSA-382-3] OpenSSH buffer management fix

2. portable $BHG(B OpenSSH 3.7p1 $B$H(B 3.7.1p1 $B$K!"(BPAM $B$N7g4Y$,4^$^$l$F$$$?$3$H$,H=L@$7$^$7$?!#(B

   • Multiple PAM vulnerabilities in portable OpenSSH

   $B$3$N7g4Y$O(B portable $BHG(B OpenSSH 3.7.1p2 $B$G=$@5$5$l$F$$$^$9!#(B $B3XFb$G$N%@%&%s%m!<%I$O(B$B$3$A$i$+$i(B$B!#(B

1. Sun Solaris $B$KIUB0$9$k(B sadmind $B%G!<%b%s$K=EBg$J7g4Y$,H/8+$5$l$F$$$^$9!#$3$N7g4Y$r0-MQ$9$k$H!"30It$+$i(B root $B8"8B$G%3%^%s%I$r

   • [VulnWatch] iDEFENSE Security Advisory 09.16.03: Remote Root Exploitation of Default Solaris sadmind Setting

   $B$3$N7g4Y$r0-MQ$9$k$?$a$N96N,%W%m%0%i%`$,%$%s%?!<%M%C%H$G8x3+$5$l$F$$$^$9!#(BRINS $B$G3NG'$7$?$H$3$m!"3N$+$K(B root $B8"8B$G%3%^%s%I$r

   $B$3$N7g4Y$KBP$9$k=$@5%W%m%0%i%`$O$^$@B8:_$7$^$;$s!#(BSun Solaris $B$rMxMQ$7$F$$$kJ}$O!"

   1. root $B%f!<%6$G(B login $B$7$^$9!#(B

   2. $B2>A[%(%_%e%l!<%?$r5/F0$7!"

      # chmod -x /usr/sbin/sadmind

   3. /etc/inetd.conf $B%U%!%$%k$r%F%-%9%H%(%G%#%?$GJT=8$7$^$9!#(B

      100232/10 tli rpc/udp wait root /usr/sbin/sadmind sadmind

      $B$N$h$&$J9T$r(B

      #100232/10 tli rpc/udp wait root /usr/sbin/sadmind sadmind

      $B$N$h$&$K%3%a%s%H2=$7$F$/$@$5$$!#(B $B9TF,$K(B # $B$rDI2C$9$k$N$G$9!#(B

   4. inetd $B%G!<%b%s$r:F=i4|2=$7$^$9!#$^$:(B inetd $B%G!<%b%s$N%W%m%;%9(B ID $B$rD4$Y$^$9!#(B

      # ps -ef | grep inetd
      root   123     1  0   8$B7n(B 17 ?        0:21 /usr/sbin/inetd -s

      $B$3$N>l9g!"%W%m%;%9(B ID $B$O(B 123 $B$G$9!#$3$N?t;z$O3F<+$N4D6-$K$h$C$F0[$J$j$^$9$N$GCm0U$7$F$/$@$5$$!#(B

      $B%W%m%;%9(B ID $B$,$o$+$C$?$i!"(B inetd $B%G!<%b%s$r:F=i4|2=$9$k$?$a$K!"$=$N%W%m%;%9(B ID ($B$3$3$G$O(B 123) $B$K(B HUP $B%7%0%J%k$rAw$j$^$9!#(B

      # kill -HUP 123

1. 2003.09.11 $B$K$*EA$($7$?(B Microsoft Windows NT 4.0 / 2000 / XP / Server 2003 $B$N=EBg$J7g4Y(B

   • RPCSS $B%5!<%S%9$N%P%C%U%!(B $B%*!<%P!<%i%s$K$h$j%3!<%I$,

   $B$rMxMQ$9$k96N,%W%m%0%i%`$,8x3+$5$l$F$$$^$9!#(B $B:#8e!"96N,%W%m%0%i%`$,$5$i$K@vN}$5$l!"$D$$$K$O(B Blaster / Nachi $B%&%#%k%9$N$h$&$J?77?%&%#%k%9$,EP>l$9$k!"$3$H$,M=A[$5$l$^$9!#(B $B:#$9$0(B MS03-039 $B=$@5%W%m%0%i%`$rE,MQ$7$F$/$@$5$$!#(B

   $B=$@5%W%m%0%i%`$NE,MQ$K$O(B Windows Update $B$,JXMx$G$9!#$^$?!"M}9)3XItMQ$N(B Microsoft Software Update Services $B$rMxMQ$7$F!"=$@5%W%m%0%i%`$r<+F0E*$KE,MQ$5$;$k$3$H$b$G$-$^$9!#(B $B>\:Y$K$D$$$F$O(B Microsoft Software Update Services $B$NMxMQJ}K!(B $B$r;2>H$7$F$/$@$5$$!#(B

2. UNIX $B$G9-$/MxMQ$5$l$F$$$kEE;R%a!<%kG[Aw%W%m%0%i%`(B sendmail $B$K?7$?$J7g4Y$,H/8+$5$l$^$7$?!#(B $B:Y9)$r;\$7$?EE;R%a!<%k$K$h$j(B sendmail $B$r96N,$7!"%7%9%F%`$NGK2u$d%&%#%k%9$N$B$3$N967b$ON6Bg$N%U%!%$%"%&%)!<%k$G$OKI$0$3$H$,$G$-$^$;$s(B$B!#(B

   sendmail 8.12.10 $B$G=$@5$5$l$F$$$kB>!"(B8.12.9 $B0JA0MQ$N=$@5%3!<%I(B$B$,8x3+$5$l$F$$$^$9!#(B $B$^$?!"3F(B UNIX $B%Y%s%@!<$+$i$b=$@5$K4X$9$k%"%J%&%s%9$,$5$l$F$$$^$9!#(B

   • FreeBSD: FreeBSD Security Advisory FreeBSD-SA-03:13.sendmail
   • OpenBSD: buffer overflow in sendmail
   • Red Hat Linux: [RHSA-2003:283-01] Updated Sendmail packages fix vulnerability.
   • Debian GNU/Linux: [SECURITY] [DSA-384-1] New sendmail packages fix buffer overflows
   • Vine Linux: Vine Linux 2.1 $B0J9_$O(B sendmail $B$rEc:\$7$F$$$^$;$s$N$G!"$3$N7g4Y$K$h$k1F6A$O$"$j$^$;$s!#(B

3. UNIX $B$G9-$/MxMQ$5$l$F$$$k1s3V@\B3%W%m%0%i%`(B OpenSSH $B$N(B 3.7 $B0JA0$K7g4Y$,H/8+$5$l$F$$$^$9!#(B

   • OpenSSH Security Advisory: buffer.adv

   OpenSSH 3.7.1 $B$G=$@5$5$l$F$$$kB>!"(B 3.6.1 $B0JA0$*$h$S(B 3.7 $BMQ$N=$@5%3!<%I(B$B$,8x3+$5$l$F$$$^$9!#$^$?!"3F(B UNIX $B%Y%s%@!<$+$i$b=$@5$K4X$9$k%"%J%&%s%9$,$5$l$F$$$^$9!#(B

   • FreeBSD: FreeBSD Security Advisory FreeBSD-SA-03:12.openssh [REVISED]
   • OpenBSD: Re: OpenSSH Security Advisory: buffer.adv
   • Red Hat Linux: [RHSA-2003:279-02] Updated OpenSSH packages fix potential vulnerabilities
   • Debian GNU/Linux: [SECURITY] [DSA-382-2] OpenSSH buffer management fix$B!"(B [SECURITY] [DSA-383-1] OpenSSH buffer management fix
   • Turbolinux: Turbolinux Security Advisory TLSA-2003-51
   • Vine Linux: [ 2003,09,18 ] openssh $B$K%;%-%e%j%F%#%[!<%k(B

   UNIX $BMxMQ

1. Microsoft $B$+$i(B Windows NT 4.0 / 2000 / XP / Server 2003 $B$N?7$?$J7g4Y>pJs$,8x3+$5$l$F$$$^$9!#(B

   • RPCSS $B%5!<%S%9$N%P%C%U%!(B $B%*!<%P!<%i%s$K$h$j%3!<%I$,

   $B$3$l$O!"BgN.9T$7$?(B Blaster / Nachi $B%&%#%k%9$N860x$H$J$C$?(B MS03-026: RPC $B%$%s%?!<%U%'%$%9$N%P%C%U%!(B $B%*!<%P!<%i%s$K$h$j%3!<%I$, $B$KN`;w$7$?7g4Y$G$9!#(BBlaster $B$d(B Nachi $B$N$h$&$J%&%#%k%9$,:F$SEP>l$9$k$N$G$O$J$$$+$H7|G0$5$l$F$$$^$9!#(B $B?7MS03-039 $B=$@5%W%m%0%i%`$rE,MQ$7!"7g4Y$r=$@5$7$F$/$@$5$$!#(B $B=$@5%W%m%0%i%`$NE,MQ$K$O(B Windows Update $B$,JXMx$G$9!#(B

2. 2003.09.04 $B$K$*EA$($7$?(B Microsoft Office 97 / 2000 / XP (2002) $B$N7g4Y$K4X$9$kB3Js$G$9!#BP1~$,BT$?$l$F$$$?(B Office 97 $BMQ$N=$@5%W%m%0%i%`$,8x3+$5$l$^$7$?!#(B Office 97 (Word 97, Word 98) $B$NMxMQ

   • MS03-035: Microsoft Word $B$NLdBj$K$h$j!"%^%/%m$,<+F0E*$K
   • MS03-036: WordPerfect $B%3%s%P!<%?$N%P%C%U%!(B $B%*!<%P!<%i%s$K$h$j!"%3!<%I$,

   Office 97 (Word 97, Word 98) $BMQ$N=$@5%W%m%0%i%`$O(B Office Update $B$G$OE,MQ$G$-$J$$$N$GCm0U$7$F$/$@$5$$!#>e5-%j%s%/$+$i(B Office 97 (Word 97, Word 98) $BMQ$N=$@5%W%m%0%i%`$rF~

3. 2003.08.22 $B$K$*EA$($7$?(B Internet Explorer $B$N7g4Y$G$9$,!"(B

   • Internet Explorer $BMQ$NN_@QE*$J=$@5%W%m%0%i%`(B (822925) (MS03-032)

   $B=$@5%W%m%0%i%`$rE,MQ$7$F$b7g4Y$,;D$C$F$$$k$3$H$,H=L@$7$^$7$?!#(B $B$7$+$b!"6K$a$F=EBg$J7g4Y$,;D$C$F$$$k$N$G$9!#967b

   $B?7$7$$=$@5%W%m%0%i%`$,EP>l$9$k$^$G$N4V!"(B $B%l%8%9%H%j%-!<(B HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/hta $B$r:o=|$7!"967b$r2sHr$7$F$/$@$@$$!#(B

   1. $B%9%?!<%H%a%K%e!<$N!V%U%!%$%kL>$r;XDj$7$F

   2. $B%&%#%s%I%&$N:8B&$G(B HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/hta $B$r%/%j%C%/$7$^$9!#(B

   3. $B%l%8%9%H%j%-!<$r:o=|$9$kA0$K!"G0$N$?$aJ]B8$7$F$*$-$^$9!#(B $B%^%&%9$r1&%/%j%C%/$7!"!V%(%/%9%]!<%H(B(E)$B!W$rA*Br$7$^$9!#(B $BE,Ev$J%U%!%$%kL>$r$D$1$FJ]B8$7$^$9!#(B

   4. $B%l%8%9%H%j%-!<$r:o=|$7$^$9!#(B $B%^%&%9$r1&%/%j%C%/$7!"!V:o=|(B(D)$B!W$rA*Br$7$^$9!#(B

   MIME $B%?%$%W(B application/hta $B$r;HMQ$9$k%"%W%j%1!<%7%g%s$rMxMQ$7$F$$$k>l9g$K$O!">e5-$r

   $B>e5-%l%8%9%H%j%-!<$r:o=|$9$kB>$K!"(BIE $B$N%*%W%7%g%s@_Dj$G!"(B[ActiveX $B%3%s%H%m!<%k$H%W%i%0%$%s$Nl9g!"(B $BA4$F$N(B ActiveX $B%3%s%H%m!<%k$rL58z$K$7$F$7$^$&$?$a!"(BPDF $B%U%!%$%k$N1\Mw$d(B Flash $B$rMxMQ$7$?%5%$%H$N1\Mw$J$I$KB?Bg$J;Y>c$,H/@8$9$k$G$7$g$&!#(B $B$3$N>l9g!"(BPDF $B$d(B Flash $B$J$I$,I,MW$J%5%$%H$r(B [$B?.Mj:Q$_%5%$%H(B] $B$KEPO?$9$k$H$h$$$G$7$g$&!#(B

   [ActiveX $B%3%s%H%m!<%k$H%W%i%0%$%s$N

   [$B%D!<%k(B] $B%a%K%e!<$N(B [$B%$%s%?!<%M%C%H(B $B%*%W%7%g%s(B] $B$+$i(B [$B%;%-%e%j%F%#(B] $B%?%V$rA*Br$9$k!#(B
   [$B%$%s%?!<%M%C%H(B] $B%>!<%s$r%/%j%C%/$7$F$+$i(B [$B%l%Y%k$N%+%9%?%^%$%:(B(C)...] $B$r%/%j%C%/$9$k!#(B[ActiveX $B%3%s%H%m!<%k$H%W%i%0%$%s$N

   [$B?.Mj:Q$_%5%$%H(B] $B$KEPO?$9$kJ}K!(B:

   [$B%D!<%k(B] $B%a%K%e!<$N(B [$B%$%s%?!<%M%C%H(B $B%*%W%7%g%s(B] $B$+$i(B [$B%;%-%e%j%F%#(B] $B%?%V$rA*Br$9$k!#(B
   [$B?.Mj:Q$_%5%$%H(B] $B%>!<%s$r%/%j%C%/$7$F$+$i(B [$B%5%$%H(B(S)...] $B$r%/%j%C%/$7!"(Bweb $B%5%$%H$N(B URL $B$rEPO?$9$k!#I8=`$G$O(B https:// $B$J(B URL $B$7$+EPO?$G$-$J$$$N$G!"!V$3$N%>!<%s$N%5%$%H$K$O$9$Y$F%5!<%P!<$N3NG'(B (https:) $B$rI,MW$H$9$k!W$N%A%'%C%/$O30$9!#(B

1. Microsoft $B$+$i!"(BMicrosoft Office 97 / 2000 / XP (2002) $B$N7g4Y$K4X$9$k>pJs$,(B 4 $B$D8x3+$5$l$^$7$?!#(B

   • MS03-035: Microsoft Word $B$NLdBj$K$h$j!"%^%/%m$,<+F0E*$K
   • MS03-036: WordPerfect $B%3%s%P!<%?$N%P%C%U%!(B $B%*!<%P!<%i%s$K$h$j!"%3!<%I$,
   • MS03-037: Visual Basic for Applications $B$NLdBj$K$h$j!"G$0U$N%3!<%I$,
   • MS03-038: Microsoft Access Snapshot Viewer $B$NL$%A%'%C%/$N%P%C%U%!$K$h$j!"%3!<%I$,

   Office Update $B$rMxMQ$7$F!"=$@5%W%m%0%i%`$rE,MQ$7$F$/$@$5$$!#(B $B$?$@$7!"(BOffice 97 $B$G$O(B Office Update $B$O$G$-$^$;$s$N$G!"8DJL$N=$@5%W%m%0%i%`$r%@%&%s%m!<%I$7%$%s%9%H!<%k$9$kI,MW$,$"$j$^$9!#(B $B$b$C$H$b!"(BOffice 97 $BMQ$N=$@5%W%m%0%i%`$,MQ0U$5$l$F$$$k$N$O!":#$N$H$3$m(B MS03-037 $B$K$D$$$F$N$_!"$N$h$&$G$9!#B>$N7g4Y$N(B Office 97 $BMQ=$@5%W%m%0%i%`$,MQ0U$5$l$?;~E@$G!":FEY$40FFb$$$?$7$^$9!#(B

   $BCm0U(B: Office Update $B$K$h$k=$@5%W%m%0%i%`$NE,MQ$K<:GT$9$k;vNc$,B8:_$9$k$h$&$G$9!#(B RINS $B$G;n$7$?8B$j$G$O@5>o$K=$@5%W%m%0%i%`$rE,MQ$G$-$F$$$^$9$,!"$b$7<:GT$9$k$h$&$G$"$l$P!"Fb@~(B 7414 $B$^$G$4AjCL$/$@$5$$!#(B

2. Microsoft $B$+$i!"(BWindows NT 4.0 / 2000 / XP / 2003 $B$N7g4Y$K4X$9$k>pJs$,8x3+$5$l$^$7$?!#(B

   • MS03-034: NetBIOS $B$NLdBj$K$h$j!">pJs$,O3$($$$9$k(B (824105)

   Windows Update $B$rMxMQ$7$F!"=$@5%W%m%0%i%`$rE,MQ$7$F$/$@$5$$!#(B $B$?$@$7!"(BWindows NT 4.0 Workstation $B$K$b7g4Y$,$"$j$^$9$,!"$b$O$d%5%]!<%H$5$l$F$$$J$$$?$a!"=$@5%W%m%0%i%`$O1J1s$KB8:_$7$^$;$s!#(B Windows NT 4.0 Workstation $B$r$4MxMQ$NJ}$O!"B.$d$+$K(B Windows 2000 $B0J9_$K0\9T$7$F$/$@$5$$!#(B

1. Microsoft $B$+$i!"(B2 $B$D$N=EBg$J7g4Y$K4X$9$k>pJs$,8x3+$5$l$^$7$?!#(B

   • Internet Explorer $BMQ$NN_@QE*$J=$@5%W%m%0%i%`(B (822925) (MS03-032)
   • MDAC $B5!G=$NL$%A%'%C%/$N%P%C%U%!$K$h$j!"%7%9%F%`$,?/32$5$l$k(B (823718) (MS03-033)

   $B$3$l$i$N7g4Y$r0-MQ$9$k%&%#%k%9$,EP>l$7$J$$$H$b8B$j$^$;$s!#(B $B%&%#%k%9$,EP>l$7$?8e$G$OCY$9$.$^$9!#(B $B:#$9$0$K(B Windows Update $B$J$I$rMxMQ$7$F!"=$@5%W%m%0%i%`$r%$%s%9%H!<%k$7$F$/$@$5$$!#(B

2. $B3XFb$K$*$1$k(B Blaster $B%o!<%`$N3hF0$r3NG'$7$F$$$^$9!#(B $B=$@5%W%m%0%i%`$rE,MQ$7$F$$$J$$(B Windows 2000 / XP $B$K$D$$$F$O!"(B Blaster $B%o!<%`$N967b$r2003.08.19 $B$N5-=R$r$4$i$s$/$@$5$$!#(B

   RINS $B1?1D0Q0w2q$G$O(B Blaster $B%o!<%`BP:vMQ$N(B CD-ROM $B$rMQ0U$7$^$7$?!#(B $BF~

1. Blaster $B%o!<%`$K$O0!l$7$F$$$^$9$7!"(B $BN`;w$N%o!<%`(B W32.Welchia.Worm ($B%7%^%s%F%C%/(B) / W32/Nachi.worm (NAI) $B$bEP>l$7$F$$$^$9!#(B

   Blaster $B$*$h$S$=$NN`;wIJ$K46@w$7$F$$$k!"$^$?$O$=$N2DG=@-$,$"$k>l9g$K$O!"

   1. $B46@w$7$F$$$k(B ($B2DG=@-$N$"$k(B) $B5!3#$r%M%C%H%o!<%/$+$iJ*M}E*$K@ZCG$7$F$/$@$5$$!#(B $BM-@~$G@\B3$7$F$$$k>l9g$O!"%M%C%H%o!<%/%1!<%V%k$rH4$/$N$,:G$b4JC1$G$9!#L5@~$N>l9g$O!"L5@~ItJ,$r%O!<%I%&%'%"E*$KL58z$K$9$k2?$i$+$NJ}K!$,$"$k$O$:$G$9$N$G!"$=$l$r

   2. $BB>$N0BA4$J5!3#$G!"%"%s%A%&%#%k%9%Y%s%@!

      NAI VirusScan $B$N$B$3$A$i(B $B$r;2>H$7$F$/$@$5$$!#(B VirusScan $B%W%m%0%i%`K\BN$H!"(B $B:G?7$N(B SuperDAT ($B5-=R;~E@$G$O(B SDAT4286) $B$r

      $BL5=~:o=|%D!<%k$H$7$F$O0J2<$,$"$j$^$9!#(B $BL5=~:o=|%D!<%k$OF|!9?J2=$7$F$$$^$9$N$G!"I,$::G?7$N$b$N$re$G

      • AVERT$B%&%$%k%96n=|%D!<%k(B Stinger (NAI)$B!#(Bversion 1.8.3 $B$G(B Welchia / Nachi $B%o!<%`$K$bBP1~$7$F$$$^$9!#(B
      • $B%H%l%s%I%^%$%/%m(B $B%7%9%F%`(B $B%/%j!<%J(B ($B%H%l%s%I%^%$%/%m(B)

      $B%o!<%`$,3hF0Cf$N>l9g$O%o!<%`%W%m%0%i%`$N:o=|$K<:GT$9$k>l9g$,$"$j$^$9(B$B$N$GCm0U$7$F$/$@$5$$!#$3$N>l9g$O$^$:!"%?%9%/%^%M!<%8%cEy$+$i%o!<%`%W%m%0%i%`$rDd;_$5$;!"$=$N8e$K%o!<%`%W%m%0%i%`$r:o=|$7$^$9!#(B

   3. $BB3$1$F!"%^%$%/%m%=%U%HDs6!$N7g4Y=$@5%W%m%0%i%`$r]$H$J$k(B Windows $B$N(B OS $B$N

      • MS03-026 $B=$@5%W%m%0%i%`(B
      • MS03-007 $B=$@5%W%m%0%i%`(B (Windows 2000 $B$G$O(B MS03-013 $B=$@5%W%m%0%i%`(B)

   4. $B>e5-(B 2 $BE@(B (VirusScan $B$"$k$$$OL5=~6n=|%D!<%k!"$H%^%$%/%m%=%U%HDs6!$N7g4Y=$@5%W%m%0%i%`(B) $B$r!"Hs%M%C%H%o!<%/E*$K!"BP>]$H$J$k5!3#$K%3%T!<$7$^$9!#(B $B%U%m%C%T!<%G%#%9%/!"(BCD-R$B!"(BUSB $B%a%b%j$J$I$,MxMQ$G$-$k$G$7$g$&(B (CD-RW $B$O;H$o$J$$$G$/$@$5$$(B)$B!#(B $BE,@Z$Jl9g$O!"(BRINS $BC4Ev650w(B ($BFb@~(B 7414) $B$^$G$4AjCL$/$@$5$$!#(B

      $B$3$N$H$-!"%U%m%C%T!<%G%#%9%/$J$I=q$-9~$_2DG=$J%a%G%#%"$O!"%i%$%H%W%m%F%/%H%9%$%C%A$rM-8z$K$7$F$/$@$5$$!#$"$k$$$O(B CD-R $B$N$h$&$J!V0lEY$7$+=q$-9~$_$,$G$-$J$$!W%a%G%#%"$rMxMQ$7$F$/$@$5$$!#(B

   5. VirusScan $B$"$k$$$OL5=~6n=|%D!<%k$rMxMQ$7$F(B Blaster $B$*$h$S$=$NN`;wIJ$r6n=|$7$^$9!#(B VirusScan $B$rMxMQ$9$k>l9g$O!":G?7$N(B SuperDAT ($B5-=R;~E@$G$O(B SDAT4286) $B$r%$%s%9%H!<%k$7$?>e$G!"8!::!&6n=|$7$F$/$@$5$$!#(B

   6. $B6n=|8e!"%^%$%/%m%=%U%HDs6!$N7g4Y=$@5%W%m%0%i%`$r%$%s%9%H!<%k$7$^$9!#$3$l$K$h$j!":F46@w$9$k2DG=@-$rGS=|$G$-$^$9!#(B

   7. $BEv3:$N5!3#$r:F$S%M%C%H%o!<%/$K@\B3$7!"(BWindows Update $B$J$I$rMxMQ$7$F!"B>$N%;%-%e%j%F%#=$@5%W%m%0%i%`$b%$%s%9%H!<%k$7$F$*$-$^$7$g$&!#(B

   $B>e5-$N%W%m%0%i%`$r>F$-9~$s$@(B CD-ROM $B$rMQ0U$7$^$7$?!#(B $BI,MW$JJ}$O(B RINS $BC4Ev650w(B ($BFb@~(B 7414) $B$^$G$*Ld$$$"$o$;$/$@$5$$!#(B

1. 2003.07.17 $B$K$*EA$($7$?(B MS03-026: RPC $B%$%s%?!<%U%'%$%9$N%P%C%U%!(B $B%*!<%P!<%i%s$K$h$j%3!<%I$, (Microsoft) $B7g4Y$r0-MQ$9$k%&%#%k%9(B ($B%o!<%`(B) Blaster $B$,LT0R$rJ3$C$F$$$^$9!#(B

   • Blaster $B$K4X$9$k>pJs(B (Microsoft)
   • $B%^%$%/%m%=%U%H(BWindows$B$N@Hu67$K$D$$$F(B ($B7P:Q;:6H>J(B)
     • $B#87n#1#7F|!JF|!K8aA0#9!'#0#08=:_(B
     • $B#87n#1#7F|!JF|!K8a8e#2!'#0#08=:_(B

   $B$$$^$@$K(B MS03-026 (823980) $B=$@5%W%m%0%i%`$rE,MQ$7$F$$$J$$(B Windows NT 4.0 / 2000 / XP / Server 2003 $BMxMQ$A$K=$@5%W%m%0%i%`$rE,MQ$7$F$/$@$5$$!#(B $B$?$@$78=:_!"(BWindows Update $B$O$&$^$/@\B3$G$-$J$+$C$?$j!"@\B3$G$-$F$b=$@5%W%m%0%i%`$,$-$A$s$HI=<($5$l$J$+$C$?$j$9$k(B ($B=$@5%W%m%0%i%`$OB8:_$7$J$$!"$H8m$C$FI=<($9$k(B) $B$3$H$,B?!9$"$k$h$&$G$9!#(B $B=$@5%W%m%0%i%`$O(B MS03-026 (823980) $B>pJs%Z!<%8(B $B$+$iD>@\%@%&%s%m!<%I$7!"%$%s%9%H!<%k$7$?J}$,$h$$$G$7$g$&!#(B

   $B$J$*!"$3$l$^$G=$@5%W%m%0%i%`$NBP>]$H$O$J$C$F$$$J$+$C$?(B

   • Windows NT 4.0 Workstation SP6a
   • Windows 2000 SP2

   $B$K$b!"=$@5%W%m%0%i%`$,E,MQ$G$-$k$h$&$K$J$C$F$$$^$9!#(B Windows 2000 SP2 $B$rMxMQ$7$F$$$k?M$OFC$K!"Aa5^$K=$@5%W%m%0%i%`$rE,MQ$7$F$/$@$5$$!#(B

   $B$3$l$H$"$o$;$F!"3F

   $B$^$?!"!V(BMicrosoft $B$+$i$N!"EE;R%a!<%k$K$h$k=$@5%W%m%0%i%`G[I[!W$rAu$&967b$,N.9T$C$F$$$k$h$&$G$9!#(BMicrosoft $B$O$3$N$h$&$J9T0Y$r9T$$$^$;$s$N$GCm0U$7$F$/$@$5$$!#(B

   • $B%=%U%H%&%'%"$NG[I[$K4X$9$k%^%$%/%m%=%U%H$NJ}?K(B (Microsoft)

   $B$=$N

1. 2003.07.24 $B$K$*EA$($7$?(B Apache 1.3.28 $B$G$9$,!"(BCGI $B%W%m%0%i%`$No$K=*N;$G$-$J$$$h$&$G$9!#(B

   • [Apache-Users 2925] apache 1.3.28$B$N(BCGI$B$G(Bzombi$B$,;D$k(B
   • Apache Bug 21737: cgi process defunct (apache.org)

   CGI $BMxMQ

1. 2003.07.17 $B$K$*EA$($7$?(B MS03-026: RPC $B%$%s%?!<%U%'%$%9$N%P%C%U%!(B $B%*!<%P!<%i%s$K$h$j%3!<%I$, (Microsoft) $B7g4Y$G$9$,!"F|K\8lHG(B Windows 2000 / XP $B$rBP>]$H$9$k967b%3!<%I$N

   $B$3$N7g4Y$rMxMQ$7$?%&%#%k%9(B / $B%o!<%`$NEP>l$O;~4V$NLdBj$G$"$k$H9M$($i$l$^$9!#%&%#%k%9(B / $B%o!<%`$,EP>l$9$kA0$K!"=$@5%W%m%0%i%`$NE,MQ$r$*4j$$CW$7$^$9!#(B

   • MS03-026: RPC $B%$%s%?!<%U%'%$%9$N%P%C%U%!(B $B%*!<%P!<%i%s$K$h$j%3!<%I$, (Microsoft)
   • $B!V(BMicrosoft Windows RPC $B$N@H (ISSKK)

   $B2?$i$+$NM}M3$K$h$j=$@5%W%m%0%i%`$,E,MQ$G$-$J$$>l9g!"(B DCOM ($BJ,;6(B COM) $B$NL58z2=$K$h$C$F$3$N7g4Y$N1F6A$r2sHr$9$k$3$H$,$G$-$^$9!#(B DCOM $B$NL58z2=$K$D$$$F$O(B DCOM $B$rL58z$K$9$kJ}K!(B $B$r;2>H$7$F$/$@$5$$!#(B

1. Microsoft $B$+$i7g4Y>pJs$,(B 3 $BE@8x3+$5$l$F$$$^$9!#(BWindows Update $B$rMxMQ$9$k$J$I$7$F!"=$@5%W%m%0%i%`$rE,MQ$7$F$/$@$5$$!#(BMS03-030 $B$OFC$K=EBg$J7g4Y$G$9$N$G!"Aa5^$KE,MQ$r$*4j$$$7$^$9!#(B

   • MS03-029 : Windows NT 4.0 $B$N=EMW$J99?7(B
     Windows $B$N5!G=$NLdBj$K$h$j!"%5!<%S%95qH]$,5/$3$k(B (823803)

     $BBP>](B: Windows NT 4.0 Server

   • MS03-030 : Windows $B$N=EMW$J99?7(B
     DirectX $B$NL$%A%'%C%/$N%P%C%U%!$K$h$j!"%3%s%T%e!<%?$,?/32$5$l$k(B (819696)

     $BBP>](B: Windows 98 / 98 SE / Me / NT 4.0 (Media Player 6.4 $B$"$k$$$O(B IE 6 SP1 $B%$%s%9%H!<%k;~$N$_(B) / 2000 / XP / Server 2003$B!#(B

   • MS03-031 : SQL Server $B$N=EMW$J99?7(B
     Microsoft SQL Server $BMQ$NN_@QE*$J=$@5%W%m%0%i%`(B (815495)

     $BBP>](B: SQL Server 7.0 / MSDE 1.0 / SQL Server 2000 / MSDE 2000

   MS03-030 $B$K$D$$$FJdB-$7$^$9!#(BWindows $B$N%^%k%A%a%G%#%"5!G=%b%8%e!<%k$G$"$k(B DirectX $B$K4^$^$l$F$$$k(B QUARTZ.DLL $B$K7g4Y$,$"$j$^$9!#(BQUARTZ.DLL $B$O(B MIDI $B%U%!%$%k(B (.mid) $B$r=hM}$9$k%b%8%e!<%k$G$9$,!"$3$l$K7g4Y$,$"$k$?$a!"(BMIDI $B%U%!%$%k$N7A$r$7$?967b%W%m%0%i%`(B ($B%&%#%k%9(B) $B$r:n@.$9$k$3$H$,2DG=$G$9!#(B $B$3$l$K$h$j$?$H$($P!"(Bweb $B%Z!<%8>e$N(B MIDI $B%U%!%$%k$r%/%j%C%/$9$k$H967b%W%m%0%i%`$,5/F0$7!"%O!<%I%G%#%9%/>e$NA4$F$N%U%!%$%k$r>C5n$5$l$k!"$H$$$C$?>u67$,H/@8$9$k2DG=@-$,$"$j$^$9!#(B

   Windows 98 / 98 SE / Me / NT 4.0 / 2000 / XP / Server 2003 $B$O$3$N7g4Y$NBP>]$H$J$j$^$9!#$?$@$7(B Windows NT $B$K$*$$$F$O!"(BMedia Player 6.4 $B$"$k$$$O(B Internet Explorer 6.0 SP1 $B$r%$%s%9%H!<%k$7$?>l9g$K$N$_!"$3$N7g4Y$NBP>]$H$J$j$^$9!#(B

   $BBP1~:v$O!"(BOS $B$N$r;XDj$7$F

   dxdiag $B%3%^%s%I$N!V%7%9%F%`>pJs!W$N2

   DirectX $B%P!<%8%g%s$r3NG'$7$?>e$G!"2<$NI=$r$4$i$s2<$5$$!#(B

   OS	DirectX $B%P!<%8%g%s(B	$BBP1~(B
   Windows 98 / 98 SE / Me	-	DirectX 9.0b $B$r%$%s%9%H!<%k$7$F$/$@$5$$!#(B $B$?$@$7!"(BNEC PC9801/9821 $BMQ$N(B Windows 98 / 98 SE $B$K$O(B DirectX 9.0b $B$O%$%s%9%H!<%k$G$-$J$$$h$&$G$9!#(B($BBP1~:v$J$7(B)
   Windows NT 4.0 (Windows Media 6.4 $B$"$k$$$O(B IE 6 SP1 $B$r%$%s%9%H!<%k$7$?>l9g$N$_(B)	-	$B=$@5%W%m%0%i%`(B$B$rE,MQ$7$F$/$@$5$$!#(B $B$?$@$7!";vA0$K(B SP6a $B$,E,MQ$5$l$F$$$kI,MW$,$"$j$^$9!#(B
   Windows 2000	7.0	Windows 2000 SP3 $B$N>l9g$K$O!"(B $B=$@5%W%m%0%i%`(B$B$rE,MQ$7$F$/$@$5$$!#(B Windows 2000 SP4 $B$N>l9g$K$O!"(BSP4 $B$K$3$N=$@5$,4^$^$l$F$$$k$?$a!"2?$b$7$J$/$F$h$$$G$9!#(B Windows 2000 SP2 $B0JA0$N>l9g$K$O!"$^$:(B SP3 $B$+(B SP4 $B$rE,MQ$7$F$/$@$5$$!#(B
   	8.0	DirectX 9.0b $B$r%$%s%9%H!<%k$7$F$/$@$5$$!#(B
   	9.0/9.0a	$B=$@5%W%m%0%i%`(B$B$rE,MQ$9$k$+!"$"$k$$$O(B DirectX 9.0b $B$r%$%s%9%H!<%k$7$F$/$@$5$$!#(B
   Windows XP / Server 2003	8.1	$B=$@5%W%m%0%i%`(B$B$rE,MQ$7$F$/$@$5$$!#(B
   	9.0/9.0a	$B=$@5%W%m%0%i%`(B$B$rE,MQ$9$k$+!"$"$k$$$O(B DirectX 9.0b $B$r%$%s%9%H!<%k$7$F$/$@$5$$!#(B

   Windows Update $B$rMxMQ$9$k$H!"E,@Z$J=$@5%W%m%0%i%`$,<+F0E*$KE,MQ$5$l$^$9!#(B

   $BCm0U(B: DirectX 9.0b $B$r%$%s%9%H!<%k$9$k$H!"%"%s%$%s%9%H!<%k$G$-$^$;$s!#(B

2. Apache 1.3.28 $B$,EP>l$7$F$$$^$9!#(B

   • Apache HTTP Server 1.3.28 Released (apache.org)

   Apache $B$O$G$-$k8B$j:G?7$N$b$N$r;H$&$h$&$K$7$F$/$@$5$$!#(B$BM}9)3XIt(B anonymous FTP $B%5!<%P(B$B$+$i%@%&%s%m!<%I$G$-$^$9!#(B $BFC$K!"(B1.3.19 $B0JA0$N$b$N$rMxMQ$7$F$$$k>l9g$O!"(B1.3.28 $B$X$N%"%C%W%0%l!<%I$r6/$/?d>)$7$^$9!#(B

   2003.08.01 $BDI5-(B:

   Apache 1.3.28 $B$K$O(B CGI $B%W%m%0%i%`$NH(B: 2003.08.01$B!#(B

1. Microsoft $B$+$i7g4Y>pJs$,(B 2 $BE@8x3+$5$l$F$$$^$9!#(BWindows Update $B$rMxMQ$9$k$J$I$7$F!"=$@5%W%m%0%i%`$rE,MQ$7$F$/$@$5$$!#(BMS03-026 $B$OFC$K=EBg$J7g4Y$G$9$N$G!"Aa5^$KE,MQ$r$*4j$$$7$^$9!#(B

   • MS03-026: RPC $B%$%s%?!<%U%'%$%9$N%P%C%U%!(B $B%*!<%P!<%i%s$K$h$j%3!<%I$,
     $BBP>](B: Windows NT 4.0 Server, 2000, XP, Server 2003$B!#(B
     Windows NT 4.0 Workstation $B$O$b$O$d0];}$5$l$F$$$^$;$s$N$G$4Cm0U$/$@$5$$!#$^$?(B Windows 98/98SE $B$K$D$$$F$O(B Microsoft $B$KD>@\3NG'$7$F$/$@$5$$!#(B

   • MS03-027: Windows $B%7%'%k$NL$%A%'%C%/$N%P%C%U%!$K$h$j%7%9%F%`$,?/32$5$l$k(B (821557)
     $BBP>](B: Windows XP SP1$B!#(BWindows XP (SP $B$J$7(B) $B$K$O$3$N7g4Y$O$"$j$^$;$s!#(B

1. $B%H%l%s%I%^%$%/%m$,Ds6!$9$kL5NA%"%s%A%&%#%k%9%5!<%S%9(B $B!V(B$B%&%$%k%9%P%9%?!<%*%s%i%$%s%9%-%c%s(B$B!W(B $B$K$*$$$F;HMQ$5$l$k%=%U%H%&%'%"ItIJ(B (ActiveX $B%3%s%H%m!<%k(B or $B%3%s%]!<%M%s%H(B) $B$K7g4Y$,$"$k$3$H$,$o$+$j$^$7$?!#%^%$%/%m%=%U%H$NI>2A4p=`$G8@$&$H!V6[5^!W5i$N=EBg$J7g4Y$G$9!#(B

   • $B%&%$%k%9%P%9%?!<%*%s%i%$%s%9%-%c%s$N(BActiveX $B%3%s%]!<%M%s%H$N%a%b%j%P%C%U%!%*!<%P!<%U%m!<$r860x$H$9$k@H ($B%H%l%s%I%^%$%/%m(B)

   $B%&%$%k%9%P%9%?!<%*%s%i%$%s%9%-%c%s$r9T$C$?$3$H$N$"$kJ}$O!"(B$B%&%$%k%9%P%9%?!<%*%s%i%$%s%9%-%c%s(B $B$r:FEY

1. Microsoft $B$+$i7g4Y>pJs$,(B 3 $BE@8x3+$5$l$F$$$^$9!#(BWindows Update $B$rMxMQ$9$k$J$I$7$F!"=$@5%W%m%0%i%`$rE,MQ$7$F$/$@$5$$!#(BMS03-023 $B$OFC$K=EBg$J7g4Y$G$9$N$G!"Aa5^$KE,MQ$r$*4j$$$7$^$9!#(B

   • HTML $B%3%s%P!<%?$N%P%C%U%!(B $B%*!<%P!<%i%s$K$h$j!"%3!<%I$, (Microsoft)
     $BBP>](B: Windows 98 / 98SE / Me / NT 4.0 / 2000 / XP / Server 2003
   • Windows $B$N%P%C%U%!(B $B%*!<%P!<%i%s$K$h$j%G!<%?$,GKB;$9$k(B (817606) (MS03-024) (Microsoft)
     $BBP>](B: Windows NT 4.0 / 2000 / XP
   • $B%f!<%F%#%j%F%#(B $B%^%M!<%8%c$K$h$k(B Windows $B%a%C%;!<%8=hM}$NLdBj$K$h$j!"8"8B$,>:3J$9$k(B (822679) (MS03-025) (Microsoft)
     $BBP>](B: Windows 2000

   $B$J$*!"(BWindows 2000 SP4 $B$G$O(B MS03-024 $B$H(B MS03-025 $B$O$"$i$+$8$a=$@5$5$l$F$$$^$9!#(B

2. Apache 2.0.47 $B$,EP>l$7$F$$$^$9!#(B

   • Apache 2.0.47 Released (apache.org)

   $B30It$+$i;HMQITG=967b$r$BM}9)3XIt(B anonymous FTP $B%5!<%P(B $B$+$iF~$B$3$A$i(B $B$G$9!#(B

3. Mac OS X $B$K$O%9%/%j!<%s%m%C%/5!9=(B (Windows $B$N!V%3%s%T%e!<%?$N%m%C%/!W$d(B UNIX $B$N(B xlock $B$KAjEv(B) $B$,I8=`AuHw$5$l$F$$$^$9$,!"$$$/$D$+$NA`:n$r9T$&$H!"C/$G$b$3$N%m%C%/$r30$9$3$H$,$G$-$F$7$^$&$3$H$,L@$i$+$K$J$C$F$$$^$9!#(B

   • [harden-mac:0465] MacOSX - crash screensaver locked with password and get the desktop back

   Mac OS X $B%f!<%6$O!"%9%/%j!<%s%m%C%/5!9=$r2a?.$7$J$$$h$&$K$7$F$/$@$5$$!#(B

1. Windows 2000 SP4 $BF|K\8lHG$,8x3+$5$l$^$7$?!#(B

   • Windows 2000 Service Pack 4 $BF|K\8lHG(B (Microsoft)
   • Windows 2000 Service Pack 4 $B%j%j!<%9%N!<%H(B (Microsoft)
   • Windows 2000 Service Pack 4 $B$h$/4s$;$i$l$k (Microsoft)

   Windows 2000 SP4 $B$G$O!"(BSP3 $B0JA0$KB8:_$9$k(B ShellExecute() $B$N0z?t$K$h$j%P%C%U%!%*!<%P!<%U%m!<$,H/@8$9$k7g4Y$,=$@5$5$l$F$$$^$9!#(B

   • SNS Advisory No.65 Windows 2000 ShellExecute() API Let Applications to Cause Buffer Overflow (LAC)

   Windows 2000 SP3 $B0JA0$rMxMQ$7$F$$$k>l9g$O!"2DG=$J8B$jB.$d$+$K(B Windows 2000 SP4 $B$X%"%C%W%0%l!<%I$5$l$k$3$H$r?d>)$7$^$9!#(B

2. $BEE;R%a!<%k%=%U%H(B Datula$B!"(BEdMax$B!"(BWeMail32$B!"(BWinbiff$B!"%I%i$($b$s%a!<%k(B $B$K!"FCDj$N>u67(B ($B%j%s%/$r%/%j%C%/$9$k!"E:IU%U%!%$%k$r3+$/!"$J$I(B) $B2<$G!"0-0U$"$kEE;R%a!<%k$K5-:\$5$l$?%9%/%j%W%H$,!V%^%$(B $B%3%s%T%e!<%?!W%>!<%s8"8B$G

   • [memo:6145] $BJ#?t$N%a!<%k%=%U%H$KITE,@Z$J%;%-%e%j%F%#%>!<%s$,E,MQ$5$l$k7g4Y(B ($B%;%-%e%j%F%#%[!<%k(B memo ML)

   WeMail32 2.09$B!"(BWinbiff 2.42PL1$B!"%I%i$($b$s%a!<%k(B 2.04B$B!"(B EdMax $B%7%'%"%&%'%"HG(B 3.04 / $B%U%j!

   • Winbiff$B%f!<%6!<$N3'MM$X=EMW$J$*CN$i$;(B (orangesoft.co.jp)
   • $B%I%i$($b$s%a!<%k(B $B%"%C%W%G!<%H%b%8%e!<%k8x3+$N$*CN$i$;(B (doraemon-mail.com)
   • WeMail32 What's New (ntes.co.jp)
   • EdMax $B99?7MzNr(B (edcom.jp)
   • EdMax$B%U%j! (edcom.jp)

   Datura $B$K$D$$$F$O!"(BIE 5.5 $B0J>e$HJ;MQ$9$k$3$H$K$h$j!"LdBj$r2sHr$G$-$^$9!#(B

1. Microsoft $B$+$i(B Windows Media Player 9 $B$H(B Windows 2000 Server $B>e$N(B Windows Media $B%5!<%S%9(B 4.1 $B$K4X$9$k7g4Y>pJs$,8x3+$5$l$F$$$^$9!#(B

   • Windows Media Player $B$NLdBj$K$h$j!"%a%G%#%"(B $B%i%$%V%i%j$,%"%/%;%9$5$l$k(B (819639) (MS03-021)
   • Windows Media $B%5!<%S%9$N(B ISAPI $B%(%/%9%F%s%7%g%s$NLdBj$K$h$j!"%3!<%I$,

   $B3:Ev$9$k%=%U%H%&%'%"$rMxMQ$7$F$$$k>l9g$O!"B.$d$+$K=$@5%W%m%0%i%`$rE,MQ$7$F$/$@$5$$!#$J$*!"(B Windows Media Player 8 $B0JA0$d(B Windows NT 4.0 $B>e$N(B Windows Media $B%5!<%S%9(B 4.1 $B$O$3$N7g4Y$N1F6A$r

2. $B%7%^%s%F%C%/$N(B Symantec Security Check $B$K$*$$$F@_CV$5$l$k(B Active X $B%3%s%H%m!<%k(B Symantec RuFSI Utility Class ($B$"$k$$$O(B Symantec RuFSI Registry Information Class) $B$K7g4Y$,H/8+$5$l$^$7$?!#0-0U$"$k(B web $B%Z!<%8$K$h$C$F!"%U%!%$%k$NGK2u$d%&%#%k%9$N@_CV$J$I$,2DG=$K$J$j$^$9!#(B

   • 2003$BG/(B6$B7n(B25$BF|(B: Symantec Security Check $B$N(BActiveX$B$K%P%C%U%!!&%*!<%P!<%U%m!<$N@H ($B%7%^%s%F%C%/(B)
   • $B%7%^%s%F%C%/$N%*%s%i%$%s!&%5!<%S%9!V(BSecurity Check$B!W$K%;%-%e%j%F%#!&%[!<%k(B ($BF|7P(B IT Pro)

   Symantec Security Check $B$rMxMQ$7$?$3$H$,$"$k>l9g$O!"(BSymantec Security Check $B$r:FEYK,Ld$7!"!V%;%-%e%j%F%#%j%9%/$N%9%-%c%s!W$r9T$C$F$/$@$5$$!#(B $B$3$N2aDx$G!"7g4Y$,=$@5$5$l$??7$7$$(B Active X $B%3%s%H%m!<%k$,@_CV$5$l$^$9!#(B

1. Microsoft $B$+$i(B Internet Explorer $B$K4X$9$k7g4Y>pJs$,8x3+$5$l$F$$$^$9!#(B

   • Internet Explorer $BMQ$NN_@QE*$J=$@5%W%m%0%i%`(B (818529) (MS03-020)

   $B$3$l$K$O!"(B2003.05.16 $B$K$*EA$($7$?!VBgNL$N(B iframe $B%?%0$K$h$j!"0-0U$"$k%3%^%s%I$r%f!<%6%3%s%T%e!<%?>e$G<+F0e5-%j%s%/$d(B Windows Update $B$rDL$8$F!"Aa5^$K=$@5%W%m%0%i%`$rE,MQ$7$F$/$@$5$$!#(B

1. Yahoo! $B%A%c%C%H!"(BYahoo! $B%a%C%;%s%8%c!<$G;HMQ$5$l$F$$$k(B ActiveX $B%3%s%H%m!<%k!V(BYahoo! $B%\%$%9%3%s%H%m!<%k!W$K7g4Y$,H/8+$5$l$^$7$?!#(B

   • Yahoo!$B%\%$%9%3%s%H%m!<%k$N%;%-%e%j%F%#@H (yahoo.co.jp)
   • Yahoo!$B$N(BIM$B$K%;%-%e%j%F%#%[!<%k(B (ZDNet)

   $B$3$N7g4Y$r0-MQ$5$l$k$H!"(B web $B%Z!<%8$r1\Mw$7$?$@$1$G%&%#%k%9$r

2. 2003.04.25 $B$K$*EA$($7$?!"(BWindows $B%+!<%M%k%a%C%;!<%8=hM}$N%P%C%U%!%*!<%P!<%i%s$K$h$j!"8"8B$,>:3J$9$k(B (811493) (MS03-013) $B7g4Y$N=$@5%W%m%0%i%`$r(B Windows XP SP1 $B$KE,MQ$9$k$H%Q%U%)!<%^%s%9Dc2<$r>7$/>l9g$,$"$k$H$$$&7o$G$9$,!"$3$NLdBj$r=$@5$7$??7$7$$=$@5%W%m%0%i%`$,MQ0U$5$l$^$7$?!#(B

   • Windows $B%+!<%M%k%a%C%;!<%8=hM}$N%P%C%U%!%*!<%P!<%i%s$K$h$j!"8"8B$,>:3J$9$k(B (811493) (MS03-013)

   Windows XP SP1 $B$rMxMQ$7$F$$$k>l9g$b!"=$@5%W%m%0%i%`$NB.$d$+$JE,MQ$r$*4j$$$$$?$7$^$9!#(B

3. Windows $B%3%s%]!<%M%s%H$NL$%A%'%C%/$N%P%C%U%!$K$h$j(B Web $B%5!<%P!<$,?/32$5$l$k(B (MS03-007) $B7g4Y$K$D$$$F!"(B2003.03.27 $B$K(B

   Windows 2000 $B0lHL$K1F6A$9$k$3$H$,L@$i$+$K$J$C$F$$$^$9!#(B ($BCfN,(B) Windows 2000 $B$rMxMQ$7$F$$$k>l9g$O!"=$@5%W%m%0%i%`$NB.$d$+$JE,MQ$r$*4j$$$$$?$7$^$9!#(B

   $B$H=R$Y$^$7$?$,!"(BMicrosoft $B$O(B 2003.05.29 $BIU$G!"(BWindows XP $B$K$bF1$87g4Y$,B8:_$9$k$HH/I=$7$^$7$?!#(B

   Windows XP $B$rMxMQ$7$F$$$k>l9g$b!"=$@5%W%m%0%i%`$NB.$d$+$JE,MQ$r$*4j$$$$$?$7$^$9!#(B

1. Microsoft $B$+$i(B 2 $BpJs$,8x3+$5$l$F$$$^$9!#(B

   • Internet Information Service $BMQ$NN_@QE*$J=$@5%W%m%0%i%`(B (811114) (MS03-018)
   • Windows Media $B%5!<%S%9$N(B ISAPI $B%(%/%9%F%s%7%g%s$NLdBj$K$h$j!"%5!<%S%95qH]$,5/$3$k(B (817772) (MS03-019)

   Microsoft IIS 4.0$B!A(B5.1 $B$r$4MxMQ$NJ}!"$*$h$S(B Microsoft Windows Media $B%5!<%S%9(B 4.1 $B$r%$%s%9%H!<%k$5$l$F$$$kJ}$O!">e5-%j%s%/$+$i=$@5%W%m%0%i%`$rE,MQ$7$F$/$@$5$$!#(B

2. Apache 2.0.x $B$K!"30It$+$i;HMQITG=967b$r

   • [SECURITY] [ANNOUNCE] Apache 2.0.46 released

   Apache 2.0.x $B$r$4MxMQ$NJ}$O!"(BApache 2.0.46 $B$X0\9T$9$k$+!"$"$k$$$O%Y%s%@!

   • [RHSA-2003:186-01] Updated httpd packages fix Apache security vulnerabilities (Red Hat Linux)

1. Internet Explorer 6.0 SP1 $B$K=EBg$J7g4Y$,H/8+$5$l$^$7$?!#(B $BBgNL$N(B iframe $B%?%0$K$h$j!"0-0U$"$k%3%^%s%I$r%f!<%6%3%s%T%e!<%?>e$G<+F0

   • Re: Flooding Internet Explorer 6.0.2800 (6.x?) security zones ! - UPDATED (ntbugtraq ML)
   • IE$B$K4m81$J%;%-%e%j%F%#!&%[!<%k!$%9%/%j%W%H$rL58z$K$7$F$b967b$r ($BF|7P(B IT Pro)

   $B!<%s$G$N!V%U%!%$%k$N%@%&%s%m!<%I!W$rL58z$K$7$F$*$/$3$H$r6/$/?d>)$7$^$9!#$"$k$$$O!"(BIE $B$O$d$a$F(B Mozilla 1.3.1 $B$J$IB>$N(B web $B%V%i%&%6$rMxMQ$9$k$N$b$R$H$D$NJ}K!$G$9!#(B

2. web $B%V%i%&%6(B Netscape 7.02 $B$K$O!"(Bcookie $B>pJs$,O31H$7$F$7$^$&$H$$$&7g4Y$,H/8+$5$l$F$$$^$9!#(B

   • Netscape 7.02$B0JA0$K(Bcookie$BO31L$J$I$N@H (slashdot.jp)

   $B$3$N7g4Y$O8=;~E@$G$b$^$@=$@5$5$l$F$$$^$;$s!#(BNetscape $B$HF1MM$N(B web $B%V%i%&%6$G$"$k(B Mozilla 1.3.1 $B$K$O$3$NLdBj$O$J$$$h$&$G$9!#(BNetscape $B$G$O$J$/(B Mozilla $B$rMxMQ$7$?J}$,$h$j0BA4$G$"$k!"$H8@$($^$9!#(B

3. 2003.05.12 $B$K$*EA$($7$?!"(BMac OS X $BMQ$N(B web $B%V%i%&%6(B Safari $B$N7g4Y$O!"(B Safari 1.0 Beta 2 (v74) $B$G=$@5$5$l$^$7$?!#(B Safari $BMxMQ$B%=%U%H%&%'%"!&%"%C%W%G!<%H(B $B$rMxMQ$7$F(B Safari 1.0 Beta 2 (v74) $B$X%"%C%W%0%l!<%I$7$F$/$@$5$$!#(B

1. web $B%V%i%&%6(B Opera for Windows $B$N%P!<%8%g%s(B 7.11 $B$,EP>l$7$^$7$?!#

   • [Opera 7] Yet Another Story of "Phantom of the Opera"
   • [Opera 7/6] $B%@%&%s%m!<%I;~$ND9$$3HD%;R$G5/$3$k%R!<%W%P%C%U%!%*!<%P!<%i%s$K$h$k@H

   Opera for Windows $BMxMQ

1. Mac OS X $BMQ$N(B web $B%V%i%&%6(B Safari $B$K$*$$$F!"%;%-%e%"%5%$%H(B (https://) $B$K@\B3$7$?>l9g$K!"K\Mh9T$o$l$k$Y$-(B Common Name $B$N8!::$,9T$o$l$J$$$?$a$K!"%K%;$N%;%-%e%"%5%$%H$K@\B3$7$F$b5$$,$D$+$J$$$H$$$&7g4Y$,H/3P$7$F$$$^$9!#(B

   • Safari$B$J$I$K(BSSL$B$G>ZL@=q$N8!>Z$,F/$+$J$$%P%0(B (slashdot.jp)

   $B=$@5%W%m%0%i%`$O$^$@B8:_$7$^$;$s!#2sHr$9$k$K$O!"%?!<%_%J%k$+$i(B defaults write com.apple.Safari IncludeDebugMenu 1 $B%3%^%s%I$r

   • slashdot.jp #313741
   • slashdot.jp #313819

   Safari $BMxMQ

   2003.05.16 $BDI5-(B:

   Safari 1.0 Beta 2 (v74) $B$G=$@5$5$l$^$7$?!#(B Safari $BMxMQ$B%=%U%H%&%'%"!&%"%C%W%G!<%H(B $B$rMxMQ$7$F(B Safari 1.0 Beta 2 (v74) $B$X%"%C%W%0%l!<%I$7$F$/$@$5$$!#(B

2. Windows XP $B$G%&%$%k%9%P%9%?!<(B 2003 $B$rMxMQ$7$F$$$k>l9g$K!"%U%m%C%T!<%G%#%9%/$N%U%)!<%^%C%H$,$G$-$J$$$3$H$,$"$k$h$&$G$9!#(B

   • $B%&%$%k%9%P%9%?!<(B2003: $B%U%m%C%T!<%G%#%9%/$N%U%)!<%^%C%H$,$G$-$J$$(B ($B%H%l%s%I%^%$%/%m(B)

   $B$3$N>l9g$O!"%j%"%k%?%$%`8!:w5!G=$rL58z$K$7$F$+$i%U%m%C%T!<%G%#%9%/$r%U%)!<%^%C%H$7!"%U%)!<%^%C%H8e$K%j%"%k%?%$%`8!:w5!G=$rL58z$KLa$;$P2sHr$G$-$^$9!#(B $B%&%$%k%9%P%9%?!<(B 2003 $BMxMQ

1. Windows Media Player 7.1 / 8.0 $B$K$*$$$F!"%9%-%s5!9=$rMxMQ$7$?967b$,2DG=$G$"$k$H$N>pJs$,8x3+$5$l$F$$$^$9!#(B

   • Windows Media Player $B%9%-%s(B $B%@%&%s%m!<%I$NLdBj$K$h$j!"%3!<%I$, (Microsoft)

   Windows Media Player 7.1 / 8.0 $B$NMxMQ$A$K=$@5%W%m%0%i%`$rE,MQ$7$F$/$@$5$$!#$J$*$3$N7g4Y$O!"(BWindows Media Player 9 $B$*$h$S(B 6.4 $B$K$OB8:_$7$^$;$s!#(B

1. 2003.04.18 $B$K$*EA$($7$?!"(BWindows $B%+!<%M%k%a%C%;!<%8=hM}$N%P%C%U%!%*!<%P!<%i%s$K$h$j!"8"8B$,>:3J$9$k(B (811493) (MS03-013) $B7g4Y$K$D$$$F!"(BMicrosoft $B$+$i!"(BWindows XP SP1 $B$KE,MQ$9$k$H%Q%U%)!<%^%s%9Dc2<$r>7$/>l9g$,$"$k$H$N>pJs$,8x3+$5$l$^$7$?!#(B

   • $B$h$/4s$;$i$l$kpJs(B (MS03-013)

   $B%Q%U%)!<%^%s%9Dc2<$,H/@8$7!"F|>oE*$J1?MQ$K;Y>c$,$"$k>l9g$O!"%3%s%H%m!<%k%Q%M%k$N!V%W%m%0%i%`$NDI2C$H:o=|!W(B(Windows 2000 $B$G$O!V%"%W%j%1!<%7%g%s$NDI2C$H:o=|!W(B) $B$+$i!"=$@5%W%m%0%i%`(B (hotfix) Q811493 $B$r%"%s%$%s%9%H!<%k$9$k$3$H$K$h$C$F2sHr$G$-$^$9!#(B

1. Microsoft $B$+$i!"?7$?$K(B 2 $B$D$N=EBg$J7g4Y$K4X$9$k>pJs$,8x3+$5$l$F$$$^$9!#(B

   • Outlook Express $BMQ$NN_@QE*$J=$@5%W%m%0%i%`(B (330994) (MS03-014)
   • Internet Explorer $BMQ$NN_@QE*$J=$@5%W%m%0%i%`(B (813489) (MS03-015)

   Outlook Express $B$*$h$S(B/$B$^$?$O(B Internet Explorer $BMxMQl9g$,B?!9$"$j$^$9$N$G!"!V;d$O(B Outlook Express $B$b(B Internet Explorer $B$bMxMQ$7$F$$$J$$!W$H$$$&>l9g$G$b!"I,$:=$@5%W%m%0%i%`$rE,MQ$7$F$/$@$5$$!#(B

   $B$J$*!"(BWindows Update $B$O%@%&%s%m!<%IB.EY$,0[MM$KCY$+$C$?$jl9g$,$"$j$^$9$N$GMxMQ$K:]$7$FN10U$7$F$*$$$F$/$@$5$$!#(B

2. Windows $B%3%s%]!<%M%s%H$NL$%A%'%C%/$N%P%C%U%!$K$h$j(B Web $B%5!<%P!<$,?/32$5$l$k(B (MS03-007) $B7g4Y$K$D$$$F!"(B2003.03.27 $B$K(B

   Windows 2000 $B0lHL$K1F6A$9$k$3$H$,L@$i$+$K$J$C$F$$$^$9!#(B ($BCfN,(B) Windows 2000 $B$rMxMQ$7$F$$$k>l9g$O!"=$@5%W%m%0%i%`$NB.$d$+$JE,MQ$r$*4j$$$$$?$7$^$9!#(B

   $B$H=R$Y$^$7$?$,!"(BMicrosoft $B$O(B 2003.04.24 $BIU$G!"(BWindows NT 4.0 $B$K$bF1$87g4Y$,B8:_$9$k$HH/I=$7$^$7$?!#(B

   Windows NT 4.0 $B$rMxMQ$7$F$$$k>l9g$b!"=$@5%W%m%0%i%`$NB.$d$+$JE,MQ$r$*4j$$$$$?$7$^$9!#(B

1. Windows NT 4.0 / 2000 / XP $B$K!"%3%s%=!<%k$"$k$$$O(B Windows Teminal $B$+$i%m%0%*%s2DG=$J$"$i$f$kMxMQ

   • Windows $B%+!<%M%k%a%C%;!<%8=hM}$N%P%C%U%!%*!<%P!<%i%s$K$h$j!"8"8B$,>:3J$9$k(B (811493) (MS03-013)

   $B$3$N7g4Y$rMxMQ$7$?967b$r)$7$^$9!#(B

1. 2003.04.15 $B$K$*EA$($7$?!"(B MS03-011: Microsoft VM $B$NLdBj$K$h$j!"%7%9%F%`$,?/32$5$l$k(B (816093) $B$N(B Windows NT 4.0 $BMQ=$@5$,(B Widows Update $B$+$iF~

1. 2003.04.10 $B$K$*EA$($7$?(B Microsoft Java VM (Microsoft Virtual Machine for Internet Explorer) $B$NLdBj$G$9$,!"F|K\8lHG(B Windows NT 4.0 $B$N>l9g$N$_!"(BWindows Update $B$+$i=$@5%W%m%0%i%`$rF~uBV$K$J$C$F$$$k$h$&$G$9!#(B

   • MS03-011: Microsoft VM $B$NLdBj$K$h$j!"%7%9%F%`$,?/32$5$l$k(B (816093) (Microsoft)

   $B2sHrJ}K!$H$7$F$O!"(BWindows 98/Me/2000/XP $B$+$i(B Windows Update $B%+%?%m%0(B$B$K%"%/%;%9$7!"(BWindows 98/Me/XP $B$N$$$:$l$+MQ$N=$@5%W%m%0%i%`$rl9g$O!"$3$l$b:NMQ$G$-$^$;$s!#(B

   Windows NT 4.0 $B$7$+=jM-$7$F$$$J$$J}$O!"(BRINS $BC4Ev650w$^$G$4O"Mm$/$@$5$$!#(B

1. UNIX $B$GF0:n$9$k!"(BWindows $BMQ$N%U%!%$%k%5!<%P%=%U%H%&%'%"(B Samba 2.2.8 $B0JA0$K!"30It$+$i(B root $B8"8B$rC%

   • [samba-jp:14528] Re: Fw: [SECURITY] Samba 2.2.8a security available for download
   • [memo:5727] $B!Z(BANN$B![(B Samba 2.2.7b$BF|K\8lHG%j%j!<%9(B1.0 $B@5<0%j%j!<%9(B

   $BN6C+Bg3X$G$O!"%U%!%$%"%&%)!<%k$K$*$$$FBg3X30$+$i$N967b$O!"3F$B=$@5%Q%C%1!<%8(B (patch) $B>pJs(B]

2. Apache 2.0.44 $B$^$G$N(B 2.x $BHG$K!"30It$+$i;HMQITG=967b$r

   • Apache 2.0.45 Released (apache.org)

   Apache 2.0.45 $B$G=$@5$5$l$F$$$^$9$N$G!"(B2.0.44 $B0JA0$N(B 2.x $BHG$rMxMQ$7$F$$$k>l9g$O%"%C%W%0%l!<%I$r$*4j$$CW$7$^$9!#(B[$B=$@5%Q%C%1!<%8(B (patch) $B>pJs(B]

3. $BB?$/$N(B UNIX $B$K4^$^$l$k(B SunRPC $BM3Mh$N(B XDR $B%i%$%V%i%j$K!"30It$+$i(B root $B8"8B$rC%

   • CERT Advisory CA-2003-10 Integer overflow in Sun RPC XDR library routines (cert.org)

   $B3F$B=$@5%Q%C%1!<%8(B (patch) $B>pJs(B]

4. Microsoft Windows $B$N$[$H$s$I$KEc:\$5$l$F$$$k(B Microsoft Java VM (Microsoft Virtual Machine for Internet Explorer) $B$N(B build 3809 $B0JA0$K!"0-0U$"$k(B web $B%Z!<%8$+$iG$0U$N%3!<%I$r

   • MS03-011: Microsoft VM $B$NLdBj$K$h$j!"%7%9%F%`$,?/32$5$l$k(B (816093) (Microsoft)

   Microsoft Java VM build 3810 $B$G=$@5$5$l$F$$$^$9!#(BWindows Update $B$J$I$rMxMQ$7$F!"=$@5%W%m%0%i%`$r%$%s%9%H!<%k$7$F2<$5$$!#(B Microsoft Java VM $B$K$D$$$F$O!"(BMicrosoft Java VM $B$K$D$$$F(B $B$b;2>H$7$F$/$@$5$$!#(B

   $B$3$NLdBj$O!"(BInternet Explorer $B$N@_Dj$G(B Java $B$rL58z$K$9$l$P2sHr$G$-$^$9!#(B

1. 2003.04.01 $B$K$*EA$($7$?(B QuickTime Player $B$N7o$G$9$,!"

   QuickTime 6 $B$r%$%s%9%H!<%k:Q$N>l9g(B:

   $B%3%s%H%m!<%k%Q%M%k$N(B QuickTime $B$G!V%"%C%W%G!<%H$N%A%'%C%/!W(B $B$r9T$$!"%"%C%W%G!<%H$7$^$9!#(B

   QuickTime 5 $B0JA0$r%$%s%9%H!<%k$7$F$$$k>l9g(B

   QuickTime 6 $B$r(B http://www.apple.com/quicktime/download/ $B$+$i(B $B%@%&%s%m!<%I$7$^$9!#(B Select a language: $B$G(B Japanese $B$rA*Br$7$F$/$@$5$$!#(B

   $B%@%&%s%m!<%I$7$?(B QuickTime Installer $B$r%@%V%k%/%j%C%/$7$F%$%s%9%H!<%k$7$^$9!#(B

1. UNIX $B$G9-$/MxMQ$5$l$F$$$k%a!<%kG[Aw%W%m%0%i%`(B sendmail 8.11.6 $B0JA0!"$*$h$S(B 12.0$B!A(B12.8 $B$K=EBg$J7g4Y$,H/8+$5$l$^$7$?!#EE;R%a!<%k$rMxMQ$7$?967b$K$h$j!"(Bsendmail $B$rF0:n$5$;$F$$$k5!3#$N4IM}

   • $B?7$?$J(B sendmail $B$N@H (JPCERT/CC)
   • Vendor Status Note JVNCA-2003-12: Sendmail $B$K%P%C%U%!%*!<%P!<%U%m!<$N@H (JPCERT/CC JVN)
   • Sendmail $B$K$*$1$k?7$?$J%;%-%e%j%F%#@H (IPA)
   • $B%a!<%k%5!<%P%=%U%H!J(Bsendmail$B!K$N@H (@police / $B7Y;!D#(B)

   $B8=:_!"M}9)3XIt$NBP30%a!<%k%2!<%H%&%'%$$K$*$$$F(B 2003.03.05 $B$K$*$7$i$;$7$?(B sendmail $B$NLdBj$b$"$o$;$FBP:v$r;\$7$F$"$k$?$a!"30It$+$i$N967b$K$OBP1~$G$-$F$$$k$H9M$($i$l$^$9$,!"FbIt$+$i$N967b$K$OL5NO$G$9!#M}9)3XItFb(B UNIX $B%[%9%H$K$*$$$F!"=$@5%Q%C%1!<%8(B (patch) $B$rE,MQ$9$k$J$I$NBP:v$r$*4j$$$$$?$7$^$9!#(B [patch $B>pJs(B]

2. RealNetworks $B$NCxL>$J%9%H%j!<%_%s%0%=%U%H%&%'%"(B Real Player / RealOne Player $B$K=EBg$J7g4Y$,H/8+$5$l$^$7$?!#=$@5HG$,MQ0U$5$l$F$$$^$9$N$G!"3F<+$G%"%C%W%G!<%H$7$F$/$@$5$$!#(B

   • RealNetworks$B!"(B2003 $BG/(B 3 $B7n$K(B RealOne Player $B$*$h$S(B RealPlayer $B$N%;%-%e%j%F%#@H (real.com)

3. Apple $B$NCxL>$J%9%H%j!<%_%s%0%=%U%H%&%'%"(B QuickTime Player 5.x / 6.0 for Windows $B$K=EBg$J7g4Y$,H/8+$5$l$^$7$?!#(B QuickTime Player 6.1 for Windows $B$G=$@5$5$l$F$$$^$9$,!"(BQuickTime Player 6.1 for Windows $BF|K\8lHG$O$^$@EP>l$7$F$$$J$$$h$&$G$9!#(B

   • QuickTime 6.1 for Windows is available (apple.com)

   QuickTime Player 6.1 for Windows $BF|K\8lHG$,8x3+$5$l

1. Windows $B%3%s%]!<%M%s%H$NL$%A%'%C%/$N%P%C%U%!$K$h$j(B Web $B%5!<%P!<$,?/32$5$l$k(B (MS03-007) $B$K$D$$$F!"(B2003.03.20 $B$K(B

   IIS 5.0 $B$r2TF/$5$;$F$$$k(B Windows 2000 $B$K=EBg$Jl9g$O!"=$@5%W%m%0%i%`$NB.$d$+$JE,MQ$r$*4j$$$$$?$7$^$9!#(B

   $B$H=R$Y$^$7$?$,!"$=$N8e!"$3$NLdBj$O(B IIS 5.0 $B$r2TF/$5$;$F$$$k!&$$$J$$$K4X78$J$/!"(BWindows 2000 $B0lHL$K1F6A$9$k$3$H$,L@$i$+$K$J$C$F$$$^$9!#(B

   • $B!V(BIIS$B$rF0$+$7$F$$$J$/$F$b4m81!W!=!=(BWindows 2000$B$N?<9o$J%;%-%e%j%F%#!&%[!<%k(B ($BF|7P(B IT Pro)

   • $BEv=i$NJs9p$h$j$b$:$C$H?<9o$@$C$?(BWindows 2000$B$N%;%-%e%j%F%#%[!<%k(B (ZDNet)

   • SNS Spiffy Reviews No.5: Successful Reproduction of MS03-007 "Unchecked Buffer In Windows Component Could Cause Web Server Compromise" (LAC)

   Windows 2000 $B$rMxMQ$7$F$$$k>l9g$O!"=$@5%W%m%0%i%`$NB.$d$+$JE,MQ$r$*4j$$$$$?$7$^$9!#(B

   $BCm0U(B: Windows 2000 SP2 $B$K$*$$$F!"(Bntoskrnl.exe $B$N%P!<%8%g%s$,(B 5.0.2195.4797 $B!A(B 5.0.2195.4928 $B$G$"$k>l9g$K(B MS03-007 $B=$@5%W%m%0%i%`$rE,MQ$9$k$H!"(B Stop 0x00000071 $B%(%i!<$,H/@8$7$^$9!#(B $B$3$l$i$N(B ntoskrnl.exe $B$O%W%m%@%/%H%5%]!<%H%5!<%S%9$+$iG[I[$5$l$?FC[memo:5677] [memo:5691]$B!#(B Windows 2000 SP2 $B$KE,MQ$9$k>l9g$O!"G0$N$?$a!"E,MQA0$K(B ntoskrnl.exe $B$N%P!<%8%g%s$r3NG'$7$F$*$$$F2<$5$$!#(B MS03-007 $B$N!V7Y9p!W$b;2>H$7$F$/$@$5$$!#(B

1. Microsoft $B$+$i%;%-%e%j%F%#>pJs$,(B 3 $B$DEP>l$7$F$$$^$9!#(B

   • Windows $B%3%s%]!<%M%s%H$NL$%A%'%C%/$N%P%C%U%!$K$h$j(B Web $B%5!<%P!<$,?/32$5$l$k(B (MS03-007)

     $BBP>](B: Windows 2000 (IIS 5.0)

   • Windows $B%9%/%j%W%H%(%s%8%s$NLdBj$K$h$j!"%3!<%I$,

     $BBP>](B: Windows 98/Me, NT 4.0, 2000, XP ($BCm(B: Windows 95 $B$O$b$O$d%5%]!<%H$5$l$F$$$^$;$s(B)

   • ISA Server DNS $B%"%?%C%/8!=P%U%#%k%?$NLdBj$K$h$j!"%5!<%S%95qH]$,5/$3$k(B (331065) (MS03-009)

     $BBP>](B: Internet Security and Acceleration (ISA) Server 2000

   $B$^$:!V(BWindows $B%3%s%]!<%M%s%H$NL$%A%'%C%/$N%P%C%U%!$K$h$j(B Web $B%5!<%P!<$,?/32$5$l$k(B (MS03-007)$B!W$G$9$,!"(BIIS 5.0 $B$r2TF/$5$;$F$$$k(B Windows 2000 $B$K=EBg$Jl9g$O!"=$@5%W%m%0%i%`$NB.$d$+$JE,MQ$r$*4j$$$$$?$7$^$9!#(BWindows 2000 SP2 $B$"$k$$$O(B SP3 $B$G$J$$$H=$@5%W%m%0%i%`$rE,MQ$G$-$J$$E@$KCm0U$7$F$/$@$5$$!#(B

   $BWindows $B%9%/%j%W%H%(%s%8%s$NLdBj$K$h$j!"%3!<%I$,$B!W(B $B$G$9$,!";ve!"A4$F$N(B Windows $B$GLdBj$H$J$j$^$9!#(B $B0-0U$"$k(B web $B%Z!<%8:n@.C5n!&GK2u$J$I!"G$0U$N%3!<%I$,

   $B:G8e$K!V(BISA Server DNS $B%"%?%C%/8!=P%U%#%k%?$NLdBj$K$h$j!"%5!<%S%95qH]$,5/$3$k(B (331065) (MS03-009)$B!W$G$9$,!"BP>]$H$J$k(B ISA Server 2000 $B$rMxMQ$7$F$$$kIt=p$OM}9)3XIt$K$O$J$$$H9M$($i$l$^$9!#(B

   $B=$@5%W%m%0%i%`$NE,MQ$K$O!"(BWindows Update $B$rMxMQ$9$k$N$,4JC1$G$9!#%;%-%e%j%F%#LdBj$N=$@5$O!V=EMW$J99?7$H(B Service Pack$B!W$K4^$^$l$F$$$^$9!#$?$@$7!"(BWindows Update $B$N!V%I%i%$%P$N99?7!W$NMxMQ$K$D$$$F$O$4Cm0U$/$@$5$$!#!V%I%i%$%P$N99?7!W$K$O(B 3rd $B%Q!<%F%#@=IJMQ$N%I%i%$%P$b4^$^$l$^$9$,!"(B3rd $B%Q!<%F%#<+?H$,G[I[$7$F$$$k$b$N$h$j$b8E$$%P!<%8%g%s$N>l9g$,$"$j$^$9!#(B $B$3$N$?$a!"!V%I%i%$%P$N99?7!W$r9T$&$H%P!<%8%g%s%@%&%s$,H/@8$7$F$7$^$&2DG=@-$,$"$k$N$G$9!#(B