[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
SecurityFocus Newsletter #224 2003-11-17->2003-11-21

To: bugtraq-jp@xxxxxxxxxxxxxxxxx
Subject: SecurityFocus Newsletter #224 2003-11-17->2003-11-21
From: y.nisimr@xxxxxxxxx (y.nisimr)
Date: Mon, 15 Dec 2003 14:34:17 +0900
$B@>B<(B@$B%i%C%/$G$9!#(B
(B
(BSecurityFocus Newsletter $BBh(B 224 $B9f$NOBLu$r$*FO$1$7$^$9!#(B
$BLu$N$J$$9`L\$K$D$$$F$O!VF|K\8lLu$J$7!W$H$7$F6hJL$7$F$"$j$^$9!#(B
(B
(B---------------------------------------------------------------------------
(BBugTraq-JP $B$K4X$9$k(B FAQ($BF|K\8l(B):
(Bhttp://www.securityfocus.com/popups/forums/bugtraq-jp/faq.shtml
$B!&(BSecurityFocus Newsletter $B$NOBLu$O(B BugTraq-JP $B$G0lH$/$@$5$$(B
(B---------------------------------------------------------------------------
(B---------------------------------------------------------------------------
(BSecurityFocus Newsletter $B$K4X$9$k(BFAQ($B1Q8l(B):
(Bhttp://www.securityfocus.com/popups/forums/securityfocusnews/intro.shtml
(BBugTraq $B$K4X$9$k(B FAQ($B1Q8l(B):
(Bhttp://www.securityfocus.com/popups/forums/bugtraq/faq.shtml
(B---------------------------------------------------------------------------
$B0zMQ$K4X$9$kHw9M(B:
$B!&$3$NOBLu$O(B SecurityFocus $B$N5v2D$r3t<02qe$G9T$o$l$F$$$^$9!#(B
$B!&(BSecurityFocus Newsletter $B$NOBLu$r(B Netnews, Mailinglist, World Wide Web,
(B  $B=q@R(B, $B$=$NB>$N5-O?G^BN$G0zMQ$5$l$k>l9g$K$O%a!<%k$NA4J80zMQ$r$*4j$$$7$^$9!#(B
$B!&F|K\8lHG%K%e!<%9%l%?!<(B 1 $B9f$+$i(B 3 $B9f$^$G$K$O$3$NHw9M$,IU$$$F$$$^$;$s$,!"(B
(B  $B=`MQ$9$k$b$N$H$7$^$9!#(B
$B!&$^$?!"(BSecurityFocus $BDs6!$N(B BugTraq-JP $B%"!<%+%$%V(B [*1] $B$X$N$$$+$J$k7A<0$N(B
(B  $B%O%$%Q!<%j%s%/$b>e5-$K=`$8$F$/$@$5$$!#(B
(B1) http://online.securityfocus.com/archive/79
(B---------------------------------------------------------------------------
$B$3$NOBLu$K4X$9$kHw9M(B:
$B!&$3$NOBLu$NE,MQ@.2L$K$D$$$F3t<02ql9g!"(BBugTraq-JP $B$X(B Errata $B$H$7$F=$@5(B
(B  $BHG$r$4Ej9FD:$/$+!"4F=$l9g$K$O=$@5HG$r$G$-$k$@$1?WB.$KH/9T$7$^$9!#(B
(B---------------------------------------------------------------------------
(BThis translation is encoded and posted in ISO-2022-JP.
(B
$B86HG(B:
(BDate: Mon, 24 Nov 2003 14:44:17 -0700 (MST)
(BMessage-ID: <Pine.LNX.4.58.0311241436590.13305@xxxxxxxxxxxxxxxxxxxxxx>
(B
(BSecurityFocus Newsletter #224
(B-----------------------------
(B
(BThis issue is sponsored by: NeoScale - Enterprise Storage Security that's
(BSimple, Reliable Secure.
(B
(BI. FRONT AND CENTER($BF|K\8lLu$J$7(B)
(B     1. Home User Security: Your First Defense
(B     2. Oracle Row Level Security: Part 2
(BII. BUGTRAQ SUMMARY
(B     1. PHPList Remote File Include Vulnerability
(B     2. KDE 3.1 Global Configuration Files Insecure Default Permissi...
(B     3. monopd Race Condition Denial of Service Vulnerability
(B     4. Minimalist Unspecified Remote Command Execution Vulnerabilit...
(B     5. SAP DB Privilege Escalation and Buffer Overrun Vulnerabiliti...
(B     6. SAP DB web-tools Multiple Vulnerabilities
(B     7. Symantec PCAnywhere Chat Client Privilege Escalation Vulnera...
(B     8. phpWebFileManager index.php Directory Traversal Vulnerabilit...
(B     9. Koch Roland Rolis Guestbook $path Remote File Include Vulner...
(B     10. PostMaster Proxy Service Cross-Site Scripting Vulnerability
(B     11. Justin Hagstrom Auto Directory Index Cross-Site Scripting Vu...
(B     12. MediaWiki 'IP' Parameter Remote File Include Vulnerability
(B     13. SqWebMail Session Hijacking Vulnerability
(B     14. NetServe Web Server Directory Traversal Vulnerability
(B     15. HP-UX IPFilter Unsupported Interface Vulnerability
(B     16. OpenBSD IBCS2 Binary Length Parameter Kernel-Based Buffer Ov...
(B     17. HP-UX CDE dtmailpr Display Environment Variable Buffer Overr...
(B     18. HP-UX DCE Unspecified Remote Denial Of Service Vulnerability
(B     19. Sun Cobalt RaQ550 Unspecified Information Disclosure Vulnera...
(B     20. Apple Safari Web Browser Null Character Cookie Stealing Vuln...
(B     21. PostgreSQL 7.4 Release To Fix Several Security Vulnerabiliti...
(B     22. Apple MacOS X Terminal sudo command Unauthorized Access Vuln...
(B     23. Valve Software Half-Life Dedicated Server Information Disclo...
(B     24. Kerio WinRoute Firewall Authentication Credentials Exposure ...
(B     25. Yak! Chat Client FTP Server Default Username Credential Weak...
(B     26. OpenBSD sysctl Local Denial of Service Vulnerability
(B     27. Apple Mac OS X Jaguar/Panther Multiple Vulnerabilities
(B     28. phpFriendlyAdmin Unspecified Cross-Site Scripting Vulnerabil...
(B     29. Sun Solaris PGX32 Libraries Unspecific Privilege Escalation ...
(B     30. EffectOffice Server Remote Service Buffer Overflow Vulnerabi...
(B     31. IBM AIX RCP Utility Local Buffer Overrun Vulnerability
(B     32. FreeRADIUS Tag Field Heap Corruption Vulnerability
(B     33. Sybase Adaptive Server Remote Password Array Heap Overflow V...
(BIII. SECURITYFOCUS NEWS ARTICLES
(B     1. Exploit Code on Trial
(B     2. New charges in Lowe's wi-fi hacks
(B     3. Court limits in-car FBI spying
(B     4. Wi-Fi hacker caught downloading child porn
(B     5. Check your sums, Debian advises developers after breach
(B     6. Sentencing postponed in nuclear lab hack case
(BIV. SECURITYFOCUS TOP 6 TOOLS
(B     1. Botan v1.3.4
(B     2. GNU Simple Authentication and Security Layer (SASL) v0.0.9
(B     3. SecureServ v1.0
(B     4. dnsgraph 0.9 v0.9
(B     5. pmacct v0.5.3
(B     6. CryptoFS v0.2.1
(B
(B
(BI. FRONT AND CENTER($BF|K\8lLu$J$7(B)
(B---------------------------------
(B
(BII. BUGTRAQ SUMMARY
(B-------------------
(B1. PHPList Remote File Include Vulnerability
(BBugTraq ID: 9046
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Nov 14 2003
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9046
$B$^$H$a(B:
(B
(BPHPlist $B$O!"(BPHP $B$rMxMQ$7$F3+H/$5$l$?%K%e!<%9%j!<%@!<$G$"$k!#(B
(B
$BJs9p$K$h$k$H!"$3$N%=%U%H%&%'%"$K$O!"967be$G(B
$Bhttp://www.securityfocus.com/bid/9047
$B$^$H$a(B:
(B
(BKDE $B$O!"(BLinux $B4D6-MQ$K@_7W$5$l$?%0%i%U%#%+%k%f!<%6%$%s%?!<%U%'%$%9(B (GUI) 
$B$G$"$k!#(BKDE $B$O!"(BQT $B%0%i%U%#%+%k%i%$%V%i%j$r;HMQ$7$FH$5$l$k!#$3$N%U%!%$%k$O!"MM!9$JF0:n$r@_Dj$9$k%*%W%7%g%s$@$1(B
$B$G$J$/!"B?$/$N%G%U%)%k%H$N%G%#%l%/%H%j$dl=j$rDj5A$9$k$?$a(B
$B$KMQ$$$i$l$k!#(B
(B
$BJs9p$K$h$k$H!"$3$N@_Dj%U%!%$%k$O(B SuSE 8.2 $B4D6-$G$O!"%G%U%)%k%H$G$$$+$J$k(B
$B%f!<%6$+$i$b=q$-9~$_2DG=$J%Q!<%_%C%7%g%s$GJ]B8$5$l$F$$$k!#$3$N%U%!%$%k$O!"(B
(B/etc/opt/kde3/share/config $B%G%#%l%/%H%j$KJ]B8$5$l$F$$$k!#$3$N%U%!%$%k$O!"(B
$B%Q!<%_%C%7%g%s@_Dj$K5/0x$7$F!"ITFCDj$N%m!<%+%k%f!<%6$K$h$j2~JQ$5$l$k2DG=(B
$B@-$,$"$k!#(B
(B
$B967bl=j$r;XDj$9$k$H$$$C$?!"$3$N@_(B
$BDj%U%!%$%kFb$G0-0U$"$k%G!<%?$r@_Dj$9$k2DG=@-$,$"$k!#$3$N?7$?$JIT@5$J%G!<(B
$B%?$O!"B>$N%7%9%F%`%f!<%6$,(B KDE $B$r:3J$"$k$$$OJL%f!<%6$H$7$F$NA`:n$r(B
$BZ$G$O$"$k$,!"(BSuSE $B$NB>$N%P!<%8%g%s$HF1MM$KB>$N%G%#%9%H%j%S%e!<%7%g(B
$B%s$b!"$3$l$i$N@_Dj%U%!%$%k$r%;%-%e%"$G$J$$@_Dj$GJ]B8$7$F$$$k2DG=@-$,$"$k!#(B
(B
(B3. monopd Race Condition Denial of Service Vulnerability
(BBugTraq ID: 9048
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Nov 15 2003
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9048
$B$^$H$a(B:
(B
(Bmonopd $B$O!"%b%N%]%j!<$KN`;w$9$k%\!<%I%2!<%`MQ$N%2!<%`%5!<%P$G$"$k!#$3$N(B
$B%=%U%H%&%'%"$O!"(BLinux $BM3Mh$N(B OS $B$GMxMQ$5$l$k$h$&$K@_7W$5$l$F$$$k!#(B
(B
$BJs9p$K$h$k$H!"$3$N%=%U%H%&%'%"$K$O!"%5!<%S%9ITG=>uBV$r0z$-5/$3$92DG=@-$,(B
$B$"$k!"6%9g>uBV$NLdBj$,B8:_$9$k!#(B
(B
$BFCDj$N>u672<$K$*$$$F!"$3$N%2!<%`$rl9g!"$3$N%=%U%H%&%'%"$O%/%i%C%7%e$9$k!#$^$?!"(B
$B$3$NLdBj$K$h$j!"%7%9%F%`$*$h$S%M%C%H%o!<%/;q8;$,2aBg$K>CHq$5$l$k!#(B
(B
(B4. Minimalist Unspecified Remote Command Execution Vulnerabilit...
(BBugTraq ID: 9049
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Nov 17 2003
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9049
$B$^$H$a(B:
(B
(BMinimalist $B$O!"(BLinux $B4D6-$GMxMQ2DG=$J%a!<%j%s%0%j%9%H4IM}%=%U%H%&%'%"$G(B
$B$"$k!#(B
(B
$BJs9p$K$h$k$H!"$3$N%=%U%H%&%'%"$OF~NOCM$NBEEv@-3NG'$K$*$$$FLdBj$,B8:_$9$k!#(B
$B%f!<%6$,M?$($?F~NOCM$OE,@Z$KL5322=$5$l$J$$$?$a!"%j%b!<%H$N%f!<%6$OLdBj$r(B
$BJz$($k%=%U%H%&%'%"$re$G0U?^$9$k%3%^%s%I$r\:Y$O!"8=;~E@$G$OL$>\$G$"$k!#$3$N(B BID $B$O!"$3$NLd(B
$BBj$K4X$9$k$5$i$J$k>\:Y$,8x3+$5$lhttp://www.securityfocus.com/bid/9050
$B$^$H$a(B:
(B
(BSAP DB $B$KJ#?t$NLdBj$,Js9p$5$l$F$$$k!#Js9p$K$h$k$H!"B8:_$9$kLdBj$O0J2<$N(B
$B$H$*$j$G$"$k!#(B
(B
$B$3$N%=%U%H%&%'%"$K$O!"(BWindows $B4D6-$K$*$$$F!"%m!<%+%k>e$G8"8B>:3J$,0z$-5/(B
$B$3$5$l$kLdBj(B (CAN-2003-0938) $B$,B8:_$7$F$*$j!"967b:3J$5$l$?8"8B$G0U?^$9$k%3!<%I$rl(B
$B9g!"(B'NETAPI32.DLL' $B$r0-0U$"$k%P!<%8%g%s$KCV$-49$($k$3$H$,2DG=$G$"$k!#96(B
$B7b:3J$5$l$?8"8B$Ge(B) $B$*$h$S(B 'serv.exe'
(B(Windows $B>e(B) $B$KB8:_$7$F$*$j!"%j%b!<%H$N967be$G%3!<%I$Nhttp://www.securityfocus.com/bid/9051
$B$^$H$a(B:
(B
(BSAP DB $B$O!"(BSAP AG $B$+$iDs6!$5$l$F$$$k%U%j!<$J%*!<%W%s%=!<%9$N%G!<%?%Y!<%9(B
$B%5!<%P$G$"$k!#$3$N@=IJ$O!"4{B8$N(B Web $B%5!<%P$HE}9g$7$F!"$b$7$/$O!"$3$N%=(B
$B%U%H%&%'%"<+?H$N(B Web $B%5!<%P$H6&$KpJs$X$N%"%/%;%9!"%f!<%6$*$h$S4IM}Z$N1*2s!"IT@5$K%"%/%;%9(B
$B8"$rC%e$G$N0U?^$9$k%3!<%I$NA[%k!<%H%G%#%l%/%H%j$NHO0O$r1[$($k$3$H$,2DG=$G$"$k$H?d;!$5(B
$B$l$k!#$3$NLdBj$O!"%f!<%6$,(B URI $B$r2p$7$FM?$($k%G!<%?$NL5322=$,IT==J,$G$"(B
$B$k$3$H$K5/0x$9$k!#Js9p$K$h$k$H!"$3$N(B SAP Web $B%5!<%P$O(B Windows NT/2000/XP 
$B4D6-$G$O%G%U%)%k%H$G(B Local SYSTEM $B8"8B$GZ$r9T$o$:%3%s%T%e!<%?$K4IM}http://www.example.com/waadmin.wa' $B$H$$$C$?(B URL $B$r%j%/%(%9%H$7$?:]$K@8(B
$B$8$k!#$3$N%=%U%H%&%'%"$O!"G'>ZMQ>pJs$NBEEv@-3NG'$r9T$C$F$*$i$:!"%f!<%6$O(B
$B0[$J$k%5!<%S%9$N@_Dj$K%"%/%;%9$72~JQ$9$k$3$H$,2DG=$G$"$k!#(B
(B
$BJs9p$K$h$k$H!"(Bweb-tools $B$N(B Web $B4IM}%3%s%]!<%M%s%H$K$O!"6-3&%A%'%C%/$,IT(B
$B==J,$G$"$k$3$H$K5/0x$7$F!"%P%C%U%!%*!<%P!<%U%m!<$,H/@8$9$kLdBj(B 
(B(CAN-2003-0942) $B$,B8:_$9$k!#$3$NLdBj$O!"2aBg$JD9$5$N(B URL $B$,%j%/%(%9%H$5(B
$B$l$?:]$KH/@8$9$k!#$3$NLdBj$K$h$j!"967be$G0U?^$9$k%3!<%I(B
$B$Nl9g$K@8$8$k!#$3$NLdBj$K(B
$B$h$j!"967be$G0U?^$9$k%3!<%I$Nhttp://www.securityfocus.com/bid/9052
$B$^$H$a(B:
(B
(BSymantec pcAnywhere $B$O!"%j%b!<%H$N%3%s%T%e!<%?$rA`:n$9$k$?$a$N@=IJ$G$"$k!#(B
$B$3$N%=%U%H%&%'%"$O!"%j%b!<%H$+$i$N4IM}!"$*$h$S%U%!%$%k$NE>Aw5!G=$rDs6!$9(B
$B$k!#$3$N%=%U%H%&%'%"$O!"%j%b!<%H$N4IM}:3J$5$;$k$3$H$,2DG=$G$"$k!#$3$NLdBj$O!"(B'AWHOST32' $B%W%m%;(B
$B%9$+$iH/@8$9$k2DG=@-$N$"$k967b$KMxMQ2DG=$J%A%c%C%H%;%C%7%g%s$K5/0x$9$k!#(B
(B'AWHOST32' $B%W%m%;%9$O!"%G%U%)%k%H$G$O(B SYSTEM $B8"8B$GF0:n$9$k!#%A%c%C%H%$(B
$B%s%?!<%U%'%$%9$N(B 'save' $B5!G=$rMxMQ$9$k$3$H$G!"967b$N%"%W%j%1!<%7%g%s$r8F$S=P$9$3$H$,2DG=$G$"$k!#(B
(B
$B$3$NLdBj$O!"(BSymantec pcAnywhere 9.01 $B$*$h$S(B 9.2 ($B%5%]!<%H$J$7(B) $B$K1F6A$r(B
$B5Z$\$9$3$H$KN10U$9$Y$-$G$"$k!#(BpcAnywhere 10.x $B$b1F6A$rhttp://www.securityfocus.com/bid/9053
$B$^$H$a(B:
(B
(BphpWebFileManager $B$O!"(BPHP $B$rMxMQ$7$F3+H/$5$l$?%U%!%$%k4IM}%D!<%k$G$"$k!#(B
$B$3$N%=%U%H%&%'%"$O!"Bg5,LO$J%W%m%8%'%/%H$N0lIt$H$7$F3+H/$5$l$F$*$j!"(B
(BPostNuke $B$N%b%8%e!<%k$H$7$FF0:n$9$k$3$H$b2DG=$G$"$k!#(B
(B
$BJs9p$K$h$k$H!"$3$N%=%U%H%&%'%"$K$O!"%j%b!<%H$N967bA[%k!<%H(B
$B%G%#%l%/%H%j$NHO0O30$N>pJs$K%"%/%;%92DG=$H$J$kLdBj$,B8:_$9$k!#$3$NLdBj$O!"(B
(B'f' $B$H$$$&L>A0$N!"(BURI $B%Q%i%a!<%?$r2p$7$F%f!<%6$,M?$($k%G!<%?$NL5322=$,IT(B
$B==J,$G$"$k$3$H$K5/0x$9$k!#$3$NLdBj$K$h$j!"(B '../' $BJ8;zNs$r;HMQ$9$k$3$H$G!"(B
$B%j%b!<%H$N967bA[%k!<%H%G%#%l%/%H%j$NHO0O30$K%"%/%;%92DG=$K(B
$B$J$k$H?d;!$5$l$k!#(B
(B
$B$3$NLdBj$rMxMQ$9$k967b$K@.8y$7$?>l9g!"%j%b!<%H$N967bpJs$K%"%/%;%92DG=$K$J$k$H?d;!$5$l$k!#(B
(B
(BphpWebFileManager 2.0.0 $B$,$3$NLdBj$rJz$($F$$$k5?$$$,$"$k$HJs9p$5$l$F$$$k(B
$B$,!"B>$N%P!<%8%g%s$bF1MM$K1F6A$rhttp://www.securityfocus.com/bid/9054
$B$^$H$a(B:
(B
(BRolis Guestbook $B$O!"(BWeb $B%$%s%?!<%U%'%$%9$rHw$($?%2%9%H%V%C%/%"%W%j%1!<%7%g(B
$B%s$G$"$k!#(B
(B
$BJs9p$K$h$k$H!"$3$N%=%U%H%&%'%"$K$O!"LdBj$rJz$($k%3%s%T%e!<%?$G$N%P!<%8%g%s$bF1MM$K1F6A$rhttp://www.securityfocus.com/bid/9055
$B$^$H$a(B:
(B
(BPostMaster $B$O!"(BWindows $B4D6-8~$1$K3+H/$5$l$?!"EE;R%a!<%k$*$h$S%W%m%-%7$N(B
$B5!G=$rE}9g$7$?%5!<%P%=%U%H%&%'%"$G$"$k!#(B
(B
$B$3$N%=%U%H%&%'%"$O!"%/%m%9%5%$%H%9%/%j%W%F%#%s%0$NLdBj$rJz$($F$$$k5?$$$,(B
$B$"$k$HJs9p$5$l$F$$$k!#$3$NLdBj$O!"%W%m%-%7%5!<%S%9$,%f!<%6$NM?$($k%G!<%?(B
$B$KBP$7$F9T$&L5322=$,IT==J,$G$"$k$3$H$K5/0x$9$k!#967bZMQ>pJs$N@`(B
$B$N967b$b2DG=$G$"$k$H?d;!$5$l$k!#(B
(B
(B11. Justin Hagstrom Auto Directory Index Cross-Site Scripting Vu...
(BBugTraq ID: 9056
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Nov 17 2003
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9056
$B$^$H$a(B:
(B
(BAuto Directory Index $B$O!"(BWeb $B%5%$%H$N%U%)%k%@$r1\Mw$9$k$?$a$K;HMQ$5$l$k!"(B
(BWeb $B%$%s%?!<%U%'%$%9$rHw$($?%"%W%j%1!<%7%g%s$G$"$k!#$3$N%=%U%H%&%'%"$O!"(B
(BPHP $B$rMxMQ$7$F3+H/$5$l$F$$$k!#(B
(B
$B$3$N%=%U%H%&%'%"$K$O!"%/%m%9%5%$%H%9%/%j%W%F%#%s%0$NLdBj$,Js9p$5$l$F$$$k!#(B
(B
$BJs9p$K$h$k$H!"$3$NLdBj$O(B 'dir' $B%Q%i%a!<%?$r2p$7$F%f!<%6$,M?$($k%G!<%?$N(B
$B=hM}$,ITE,@Z$G$"$k$3$H$K5/0x$9$k!#$3$N%G!<%?$O!"$=$N8e!"F0E*$K@8@.$5$l$k(B 
(BWeb $B%Z!<%8$Kl9g!"967bZMQ>p(B
$BJs$N@`$N967b$b2DG=$G$"(B
$B$k$H?d;!$5$l$k!#(B
(B
(BAuto Directory Index 1.2.3 $B$,$3$NLdBj$rJz$($F$$$k5?$$$,$"$k$,!"B>$N%P!<(B
$B%8%g%s$bF1MM$K1F6A$rhttp://www.securityfocus.com/bid/9057
$B$^$H$a(B:
(B
(BMediaWiki $B$O!"(BWikipedia $B$r4IM}$9$k$?$a$K@_7W$5$l$?JT=8%=%U%H%&%'%"$G$"$k!#(B
(B
$B$3$N%=%U%H%&%'%"$K?7$?$J%P!<%8%g%s$,%j%j!<%9$5$l!"%j%b!<%H$N967b]$N%3%s%T%e!<(B
$B%?$K2rhttp://www.securityfocus.com/bid/9058
$B$^$H$a(B:
(B
(BSqWebMail $B$O(B Web $B%V%i%&%6$G;HMQ2DG=$JEE;R%a!<%k%"%W%j%1!<%7%g%s$G$"$k!#(B
(B
$B$3$N%=%U%H%&%'%"$O!"%j%b!<%H$N967bh$C]$N%f!<%6$,!"(B
(BWeb $B%a!<%k%7%9%F%`$+$i1\Mw2DG=$JEE;R%a!<%k$r2p$7$F!"967bl9g$K@8$8$k!#$3$l$K$h$j!"967bl9g!"(B
$B%f!<%6$N%;%C%7%g%s$r>h$CZ$G$"$k!#(B
(B
$B$3$N%=%U%H%&%'%"$O(B Courier $B%a!<%k%5!<%P$KF1:-$5$l$F$$$k$,!"C1BN$GF0:n$9(B
$B$k(B CGI $B%"%W%j%1!<%7%g%s$H$7$F$bMxMQ2DG=$G$"$k!#(B
(B
(B14. NetServe Web Server Directory Traversal Vulnerability
(BBugTraq ID: 9059
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Nov 17 2003
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9059
$B$^$H$a(B:
(B
(BNetServe Web Server $B$O!"(BMicrosoft Windows $B4D6-MQ$N%3%s%Q%/%H$J(B Web $B%5!<(B
$B%P$G$"$k!#(B
(B
$B$3$N%=%U%H%&%'%"$K$O!"%j%b!<%H$N967bA[%k!<%H%G%#%l%/%H%j$N(B
$BHO0O30$N>pJs$K%"%/%;%92DG=$H$J$kLdBj$,B8:_$9$k$HJs9p$5$l$F$$$k!#$3$NLdBj(B
$B$O!"%f!<%6$,M?$($k%G!<%?$NL5322=$,IT==J,$G$"$k$3$H$K5/0x$9$k!#$3$NLdBj$K(B
$B$h$j!"%j%b!<%H$N967bA[%k!<%H%G%#%l(B
$B%/%H%j$NHO0O$rD6$($k$3$H$,2DG=$H$J$k!#Js9p$K$h$k$H!"$3$NLdBj$rMxMQ$9$k$3(B
$B$H$K$h$j!"@_Dj%U%!%$%k$K%"%/%;%9$7!"4IM}pJs$H%Q%9%o!<%I>pJs(B
$B$rC%l9g!"%j%b!<%H$N967bpJs$K%"%/%;%92DG=$K$J$k$H?d;!$5$l$k!#(B
(B
(BNetServe Web Server 1.0.7 $B$O$3$NLdBj$rJz$($F$$$k5?$$$,$"$k$HJs9p$5$l$F$$(B
$B$k$,!"B>$N%P!<%8%g%s$bF1MM$K1F6A$rhttp://www.securityfocus.com/bid/9060
$B$^$H$a(B:
(B
(BHP-UX IPFilter $B$O%9%F!<%H%U%k$J%U%!%$%"%&%)!<%k%7%9%F%`$G$"$k!#$3$N%=%U(B
$B%H%&%'%"$O(B IP $B%Q%1%C%H$r%U%#%k%?%j%s%0$7!"KI8f$5$l$k%7%9%F%`$N%Q%1%C%H$N(B
$BN.$l$NF~=P$r@)8f$9$k$3$H$rA[Dj$7$F3+H/$5$l$F$$$k!#(B
(B
(BHewlett-Packard $Bu67$O!"%5%]!<%H$5$l$F$$$J$$%$%s%?!<%U%'%$%9$,!"$3$N%=%U%H%&%'%"$K$h$j==(B
$BJ,$KKI8f$5$l$F$$$k$H?.$89~$^$l$k>l9g$K@8$8$k!#http://www.securityfocus.com/bid/9061
$B$^$H$a(B:
(B
(BiBCS2 (Intel Binary Compatibility Specification 2) $B$O!"(BSCO $B$*$h$S(B ISC $B%P(B
$B%$%J%j$K$h$C$F9-$/MxMQ$5$l$k%P%$%J%j8_49@-$rJ]$D$?$a$N=q<0;EMM$G$"$k!#(B
(BiBCS2 $B%+!<%M%k%3!<%I$O!"(BCOFF $B7A<0$r4^$`MM!9$J%P%$%J%j$r=hM}$9$k$?$a$KMx(B
$BMQ$5$l$k!#(BCOFF $B%U%!%$%k%X%C%@$K$O!"$=$l$>$l%;%/%7%g%s%G!<%?!"$*$h$S%G!<(B
$B%?%5%$%:$r;X$7<($9!"(B's_scnptr' $B$*$h$S(B 's_size' $B$NCM$r4^$`MM!9$J%U%#!<%k(B
$B%I$,4^$^$l$F$$$k!#(B
(B
(BiBCS2 $B%P%$%J%j$r8F$S=P$9$h$&$K@_7W$5$l$?(B OpenBSD $B$N%+!<%M%k%3!<%I$KLdBj(B
$B$,H/8+$5$l$F$$$k!#$3$NLdBj$O!"(Bibcs2_exec.c $B%=!<%9%U%!%$%kFb$G@8$8!"6qBN(B
$BE*$K$O(B COFF $B%;%/%7%g%s%G!<%?Fb$GFI$_9~$^$l$k:]$K@8$8$k!#(B
(B
$B$3$NLdBj$O!"(B's_scnptr' $B$K$h$j;X$7<($5$l$?%;%/%7%g%s%G!<%?$r(B 128 $B%P%$%H$N(B
$BG[Ns(B 'buf' $B$K%3%T!<$9$k(B vn_rdwr() $B4X?t$r8F$S=P$94V$K@8$8$k!#$3$NLdBj$O!"(B
$B%P%$%J%jFb$G;XDj$5$l$?(B 's_size' $B$NCM$,!"(Bvn_rdwr() $B4X?t$r8F$S=P$9$?$a$N%5(B
$B%$%:$N0z?t$H$7$FMxMQ$5$l$k$3$H$K5/0x$9$k!#BEEv@-$r3NG'$9$k%A%'%C%/$,$3$N(B
$B%5%$%:CM$KBP$7$F9T$o$l$J$$$?$a!"(B'buf' $B$N%5%$%:$h$j$bBg$-$J%G!<%?$,%a%b%j(B
$B$K%3%T!<$5$l$k2DG=@-$,$"$k!#(B
(B
(BOpenBSD 2.x-3.3 $B%7%9%F%`$K$*$$$F!"$3$NLdBj$rMxMQ$9$k967b$K$h$j!"%m!<%+%k(B
$B8"8B>:3J$KMxMQ$5$l$k$+$N2DG=@-$N$"$k!"%+!<%M%k$N@)8f9=B$$rA`:n2DG=$H$J$k!#(B
$B$7$+$7!"Js9p$K$h$k$H!"$3$NLdBj$rMxMQ$9$k967b$O(B OpenBSD 3.4 $B$N%7%9%F%`>e(B
$B$G%+!<%M%k%Q%K%C%/$r0z$-5/$3$9!#L$8!>Z$G$O$"$k$,!"$3$l$O(B OpenBSD 3.4 $B$N(B
$B%j%j!<%9$GG[Hw$5$l$?MM!9$J%a%b%jJ]8n$N;EAH$_$K5/0x$9$k$H?d;!$5$l$k!#(B
(B
(B17. HP-UX CDE dtmailpr Display Environment Variable Buffer Overr...
(BBugTraq ID: 9062
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: Nov 18 2003
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9062
$B$^$H$a(B:
(B
(BHP-UX $B$O!"(BHP $B$K$h$jG[I[!"$*$h$SJ]e!"%G%U%)%k%H$N4D6-$N(B dtmailpr $B$K$b1F6A$r5Z$\$9$+$I$&$+$OL$>\$G$"$k!#(B
(B
(B18. HP-UX DCE Unspecified Remote Denial Of Service Vulnerability
(BBugTraq ID: 9063
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Nov 18 2003
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9063
$B$^$H$a(B:
(B
(BHP-UX $B$O!"(BHP $B$K$h$jG[I[!"$*$h$SJ]pJs$O!"8=;~E@$G$OL$>\$G$"$k$,!"%j%b!<(B
$B%H$N%f!<%6$,!"$3$N%=%U%H%&%'%"$N@55,%f!<%6$KBP$9$k%5!<%S%9$rITG=$K$5$;$k(B
$B$?$a$KMxMQ$5$l$k2DG=@-$,$"$k$3$H$O4{CN$G$"$k!#(B
(B
$B7hDjE*4XO"@-$r<($9>pJs$OL$8x3+$G$"$k$,!"$3$NLdBj$O(B Bugtraq ID 8371 $B$N$h(B
$B$&$J!":G6aJs9p$5$l$?!"$3$N%=%U%H%&%'%"$NB>$Nhttp://www.securityfocus.com/bid/9064
$B$^$H$a(B:
(B
(BSun Cobalt RaQ550 $B$O!"(BSun $B$+$iG[I[$5$l$F$$$k%5!<%P%"%W%i%$%"%s%9$G$"$k!#(B
(B
$B$3$N%=%U%H%&%'%"$KB8:_$9$kLdBj$K$h$j!"967bpJs$X$N%"(B
$B%/%;%98"$rC%pJs$K%"%/%;%9$9$k$3$H$,(B
$B2DG=$J%5!<%P$N%f!<%6%$%s%?%U%'%$%9$KB8:_$9$k!#(B
(B
$BL$8!>Z$G$O$"$k$,!"$3$NLdBj$rMxMQ$9$k967b$K@.8y$7$?>l9g!"$5$i$J$k967b$r;E(B
$B3]$1$k:]$KMxMQ$5$l$k2DG=@-$N$"$k!"%7%9%F%`$K4X$9$k=EMW$J>pJs$r967bpJs$,==J,$K$J$$$3$H$+$i!"$3$NLdBj$K4X$9$k$5$i$J$k>\:Y$O!"8=;~E@$G$OF~pJs$,F~http://www.securityfocus.com/bid/9065
$B$^$H$a(B:
(B
(BApple Safari 1.1 $B$O!"(BMac OS Panther $BMQ$N(B Web $B%V%i%&%6$G$"$k!#(B
(B
(BApple Safari 1.1 $B$K$O!"LdBj$rJz$($k%P!<%8%g%s$N(B Web $B%V%i%&%6$N%f!<%6$+$i!"(B
$B967bZMQ>pJs$r@`ZMQ>pJs$rFI$_=P$72DG=$G$"$k!#(B
$B967b!"pJs$N]$N(B Web $B%/%i%$%"%s%H$O%j(B
$B%s%/$N:G=i$NItJ,$K<($5$l$?%[%9%HL>$r;}$D%3%s%T%e!<%?$K@\B3$9$k!#$=$N7k2L!"(B
$B967bl9g!"%;%-%e%"%U%i%0$,N)$F$i$l$F$$$k(B Cookie $B$b@`l9g$G$5$($b!"$3$NLdBj$rMxMQ$9$k967b$O2DG=$G$"$k$HJs9p$5(B
$B$l$F$$$k!#(B
(B
$B$3$NLdBj$O!"(BApple Safari 1.0 v88 $B$+$i(B 1.1 v100.1 $B$K1F6A$rM?$($k$HJs9p$5(B
$B$l$F$$$k!#(B
(B
(B21. PostgreSQL 7.4 Release To Fix Several Security Vulnerabiliti...
(BBugTraq ID: 9066
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Nov 18 2003
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9066
$B$^$H$a(B:
(B
(BPostgreSQL $B$O!"%U%j!<$K8x3+$5$l$F$$$k(B Object-Relational DBMS $B$G$"$k!#$3(B
$B$N%=%U%H%&%'%"$O(B Unix $B$*$h$S(B Linux $B$KM3Mh$9$kB?$/$N4D6-!"$=$7$F(B 
(BMicrosoft Windows $B$N4D6-$K$*$$$FMxMQ2DG=$G$"$k!#(B
(B
$B$3$N%=%U%H%&%'%"$N3+H/%0%k!<%W$O(B PostgreSQL 7.4 $B$r%j%j!<%9$7$?$3$H$rJs9p(B
$B$7$?!#$3$N%j%j!<%9$G$O!"5!G=@-$H%;%-%e%j%F%#$,8~>e$5$l$F$$$k!#$^$?!"J#?t(B
$B$N@x:_E*$J%;%-%e%j%F%#LdBj$KBP$9$k=$@5$b;\$5$l$F$$$k!#$3$N%j%j!<%9$G=$@5(B
$B$5$l$?LdBj$K$O!"(BXML $B%I%-%e%a%s%H$N%"%s%Q%5%s%IJ8;zNs(B (&) $B$,(B PostgreSQL 
$B%5!<%PFb$G0cH?$r0z$-5/$3$7!"$=$N%5!<%P$r%/%i%C%7%e$5$;$k>l9g$K$*$1$kBP:v(B
$B$b4^$^$l$F$$$k!#$3$NLdBj$rMxMQ$9$k967b$K$h$j!"@55,$N(B PostgreSQL $B%f!<%6$K(B
$BBP$9$k%5!<%S%9$,ITG=$K$J$k$H?d;!$5$l$k!#(B
(B
$B$5$i$K!"$3$N=$@5$G$O!"==J,$J8"8B$r;}$?$J$$%f!<%6$,@x:_E*$K4IM}\:Y$,8x3+$5$lhttp://www.securityfocus.com/bid/9069
$B$^$H$a(B:
(B
(BApple $B$N(B MacOS X $B$K$O!"(BGUI $B$rMxMQ$7$?(B Unix $B%3%^%s%I%7%'%k$G$"$k%?!<%_%J(B
$B%k%"%W%j%1!<%7%g%s$,F1:-$5$l$F$$$k!#(B
(B
$B$3$N%=%U%H%&%'%"$K$O!"967bZ$5$l$?$,!"B>$N%P!<(B
$B%8%g%s$bF1MM$K1F6A$rhttp://www.securityfocus.com/bid/9070
$B$^$H$a(B:
(B
(BHalf-Life $B$O!"(BValve Software $B$K$h$jJ]e$G%2!<%`$9$k$?$a$N@lMQ$N(B
$B%2!<%`%5!<%P%3%s%]!<%M%s%H$,F1:-$5$l$F$$$k!#$3$N%2!<%`%(%s%8%s$O!"B?$/$N(B
$B=$@5$r;\$5$l$F;HMQ$5$l$F$$$k!#(B
(B
$BJs9p$K$h$k$H!"$3$N%=%U%H%&%'%"$N@lMQ%5!<%P$O!">pJs$r3+<($9$kLdBj$rJz$($F(B
$B$$$k5?$$$,$"$k!#$3$NLdBj$O!"@lMQ%5!<%P$N@55,%f!<%6$KBP$9$k%5!<%S%9$rITG=(B
$B$H$9$k$?$a$K$b0-MQ$5$l$k2DG=@-$,$"$k!#(B
(B
$B$3$NLdBj$O!"$3$N%=%U%H%&%'%"@lMQ%5!<%P$K$h$jDs6!$5$l$F$$$k%@%&%s%m!<%I5!(B
$BG=$NITHw$K5/0x$7$F$$$k!#DL>o!"$3$NpJs$r4^$s$G$$$k2DG=@-$N$"$k%"%/%;%92DG=$J%U%)%k%@$K3JG<$5$l(B
$B$F$$$kB>$N%U%!%$%k$r%@%&%s%m!<%I!"$*$h$S3+<($9$k$3$H$,2DG=$K$J$k$H?d;!$5(B
$B$l$k!#(B
(B
$B$5$i$K967be$G0cH?$r0z$-5/$3$9$3$H$K$h$j%/%i%C%7%e$5$;!";ve!"@55,%f!<%6$KBP$9(B
$B$k%5!<%S%9$rITG=$K$9$k$b$N$H?d;!$5$l$k!#(B
(B
$B$3$NLdBj$rH/@8$5$;$k$?$a$K$O!"$3$N%=%U%H%&%'%"@lMQ%5!<%P$N@_Dj%U%!%$%kFb(B
$B$G(B 'allowdownload' $B$,M-8z$K$J$C$F$$$kI,MW$,$"$k$3$H$KN10U$9$k$Y$-$G$"$k!#(B
$B$3$NLdBj$O!"$3$N%=%U%H%&%'%"@lMQ%5!<%P$N$9$Y$F$N%P!<%8%g%s$K1F6A$rM?$($k(B
$B$HJs9p$5$l$F$$$k!#(B
(B
(B24. Kerio WinRoute Firewall Authentication Credentials Exposure ...
(BBugTraq ID: 9071
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Nov 19 2003
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9071
$B$^$H$a(B:
(B
(BKerio WinRoute Firewall $B$O!"%M%C%H%o!<%/%W%m%-%7$H$7$F$bF0:n2DG=$J4k6H8~(B
$B$1%U%!%$%"%&%)!<%k$G$"$k!#$3$N%=%U%H%&%'%"$O(B Microsoft Windows $B4D6-$GMx(B
$BMQ2DG=$G$"$k!#(B
(B
$B$3$N%=%U%H%&%'%"$,%W%m%-%7$H$7$F@_Dj$5$lG'>Z$,M-8z$G$"$k>l9g!"FbIt$N%3%s(B
$B%T%e!<%?$+$i(B Web $B%j%/%(%9%H$,$J$5$l$kEY$K!"%/%i%$%"%s%H$N%V%i%&%6$O(B 
(BProxy-Connection HTTP $B%X%C%@%U%#!<%k%I$r%j%/%(%9%H$K4^$a$k!#$3$N%U%#!<%k(B
$B%I$NCM$O!"(BBase64 $B$G%(%s%3!<%I$5$l$?%f!<%6L>$H%Q%9%o!<%I$r4^$s$G$*$j!"%f!<(B
$B%6$N%j%/%(%9%H$r0U?^$7$?%3%s%T%e!<%?$KAw?.2DG=$G$"$k!#(B
(B
$B$3$N%=%U%H%&%'%"$K$O!"G'>Z%W%m%-%7$H$7$FF0:n$9$k:]!"G'>ZMQ>pJs$rO31L$9$k(B
$B2DG=@-$N$"$kLdBj$,H/8+$5$l$F$$$k!#$3$NLdBj$O!"$3$N%=%U%H%&%'%"$,(B 
(BProxy-Connection $B%U%#!<%k%I$r4^$`(B HTTP $B%j%/%(%9%H$rE,@Z$K:F9=@.$7$J$$$3(B
$B$H$KB8:_$7$F$$$k!#$3$N%=%U%H%&%'%"$O!"%U%#!<%k%I$N:G=i$NJ8;z(B (P) $B$r(B X $B$K(B
$BCV$-49$(!"0U?^$7$?@h$K%j%/%(%9%H$rE>Aw$9$k!#$3$N%U%#!<%k%I$K$OA0=R$N%(%s(B
$B%3!<%I$5$l$?G'>ZMQ>pJs$,4^$^$l$F$$$k$?$a!"0-0U$"$k(B Web $B%5%$%H$N4IM}ZMQ>pJs$rC%ZMQ>pJs$rMxMQ$9$k$3$H$K$h$j!"967be$K$*$$$F(B
$B$$$/$D$+$N967bZMQ>pJs$r;HMQ$9$k$3$H$,(B
$BCN$i$l$F$$$k$3$H$+$i!"%f!<%6$NG'>ZMQ>pJs$,O31L$9$k$3$H$K$h$k1F6AHO0O$O0-(B
$B2=$9$kE@$KN10U$9$Y$-$G$"$k!#(B
(B
$B$3$NLdBj$O!"(BKerio WinRoute Firewall 5.10 $B$K1F6A$rM?$($k$HJs9p$5$l$F$$$k(B
$B$,!"B>$N%P!<%8%g%s$K$b1F6A$rM?$($k2DG=@-$b$"$k!#(B
(B
(B25. Yak! Chat Client FTP Server Default Username Credential Weak...
(BBugTraq ID: 9072
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Nov 19 2003
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9072
$B$^$H$a(B:
(B
(BYak! $B$O!"(BDigicraft Software $B$K$h$jG[I[$5$l$F$$$k!">&MQ$KMxMQ2DG=$J%A%c%C(B
$B%H%/%i%$%"%s%H$G$"$k!#$3$N%=%U%H%&%'%"$O(B Microsoft Windows $B4D6-$GMxMQ2D(B
$BG=$G$"$k!#(B
(B
$BJs9p$K$h$k$H!"$3$N%=%U%H%&%'%"$N%/%i%$%"%s%H(B FTP $B%5!<%P$K$OLdBj$,B8:_$9(B
$B$k!#$3$NLdBj$K$h$j!"967b$NG'>ZMQ>pJs$K$"$k!#(BFTP $B%5!<%P$,%$%s%9%H!<%k$5$l$k(B
$B:]!"@x:_E*$KM=B,2DG=$J%Q%9%o!<%IJ8;zNs$G!"(B'y049575046' $B$H$$$&L>$N%f!<%6(B
$B$,%G%U%)%k%H$G:n@.$5$l$k!#$3$N%f!<%6$K$O!"(BFTP $B%5!<%P$,%$%s%9%H!<%k$5$l$F(B
$B$$$k%3%s%T%e!<%?$N%U%!%$%k%7%9%F%`$X$N%U%k%"%/%;%98"$,G'$a$i$l$$$k!#$3$N(B 
(BFTP $B%5!<%P$O!"(B3535 $BHV%]!<%H$GBT$Ahttp://www.securityfocus.com/bid/9073
$B$^$H$a(B:
(B
(BSysctl $B$O%+!<%M%k$N>uBV$N@_Dj$*$h$SFIuBV$K4Y$kLdBj$,B8:_$9$k$3$H$,Js9p$5(B
$B$l$F$$$k!#Js9p$K$h$k$H!"$3$N%=%U%H%&%'%"$r8F$S=P$7!"0U?^E*$K:n@.$5$l$?JQ(B
$B?t(B 'old' $B$r%$%s%/%k!<%I$5$;$k$3$H$G!"%+!<%M%k%Q%K%C%/$r0z$-5/$3$9$3$H$,(B
$B2DG=$G$"$k!#$3$NLdBj$O!"8"8B$r;}$C$F$$$J$$0-0U$"$k%m!<%+%k%f!<%6$K$h$j!"(B
$B967bBP>]$N%7%9%F%`$r%/%i%C%7%e$;$k$?$a$KMxMQ$5$l$k2DG=@-$,$"$k!#(B
(B
$B?7$7$$>pJs$K$h$k$H!"$3$N>uBV$O!"$3$N%=%U%H%&%'%"$r2p$7$F8F$S=P$5$l$k(B 
(Buvm_vsunlock() $B4X?tFb$G@8$8$k!#$3$NLdBj$O!"ITE,@Z$J%]%$%s%?$G(B 
(Btrunc_page() $B4X?t$r8F$S=P$9:]$K@8$8$k!#$^$?(B CTL_KERN $B%U%i%0$O!"$3$N>uBV(B
$B$r0z$-5/$3$9$?$a$KL@Gr$KI,MW$G$O$J$$$H?d;!$5$l$k$,L$8!>Z$G$"$k!#(B
(B
$B$3$NLdBj$K4X$9$kL@3N$J5;=QE*>\:Y$O8=;~E@$G$OL$>\$G$"$k!#$3$N(B BID $B$O!"$5(B
$B$i$J$k>pJs$,8x3+$5$lhttp://www.securityfocus.com/bid/9074
$B$^$H$a(B:
(B
(BApple $B:3J$7$?8"8B$G0U?^$9$k%3!<(B
$B%I$N\$G$"$k$,!"$3$N%"%C%W%G!<%H$O!"$3$NLdBj$+$i@8$8(B
$B$k@x:_E*$J967b$KBP$9$kKI8f:v$H$J$k$3$H$,0U?^$5$l$F$$$k!#$3$NLdBj$O!"(B
(BPanther $B$G=$@5$5$l$?J#?t$NLdBj$rH?1G$7$F$$$k(B BID 8917 $B$G$b8@5Z$5$l$F$$$k!#(B
$B$3$N%"%C%W%G!<%H$G$O!"(BJaguar $B$K$*$1$k$3$NLdBj$r=$@5$7$F$$$k!#(B
(B
(Bgroff $B%3%s%]!<%M%s%H$G$"$k(B pic $B$KB8:_$9$k=q<0;XDj;R$r4^$`J8;zNs$Nl9g!"(B
$B$3$N%W%m%0%i%`$O%Q%9%o!<%I$rJ?J8$KJQ49$9$k!#$3$NLdBj$O!"(BPanther $B$G=$@5$5(B
$B$l$?J#?t$NLdBj$rH?1G$7$F$$$k(B BID 8917 $B$G$b8@5Z$5$l$F$$$k!#$3$N%"%C%W%G!<(B
$B%H$G$O!"(BJaguar $B$K$*$1$k$3$NLdBj$r=$@5$7$F$$$k!#(B
(B
(BCAN-2003-0107 $B$K5-=R$5$l$F$$$k!"(Bzlib $B$KB8:_$9$kLdBj$O=$@5:Q$_$G$"$k!#$3(B
$B$NLdBj$O!"(Bgzprinft() $B4X?tFb$G%P%C%U%!%*!<%P!<%U%m!<$,H/@8$9$k$H$$$&$b$N(B
$B$G$"$j!"(BBID 6913 $B$K>\=R$5$l$F$$$k!#Js9p$K$h$k$H!"(BMac OS X $B$N%"%W%j%1!<%7%g(B
$B%s$OLdBj$rJz$($k4X?t$r;HMQ$7$F$$$J$$$,!"Bh(B 3 $Bl9g!"967b:3J$,(B
$B2DG=$H$J$k(B CAN-2003-0878 $B$K5-=R$5$l$F$$$kLdBj$,B8:_$9$k!#$3$NLdBj$O!"(B
(Bslpd $B%G!<%b%s$,(B tmp $B%G%#%l%/%H%jFb$G(B root $B=jM-$N%U%!%$%k$r:n@.$9$k2DG=@-(B
$B$,$"$k$?$a$K@8$8$k!#$3$l$K$h$j!"4{B8$N%U%!%$%k$r>e=q$-$G$-$k$3$H$+$i8"8B(B
$B>:3J$K$D$J$,$k!#$3$NLdBj$O!"(BPanther $B$G=$@5$5$l$?J#?t$NLdBj$rH?1G$7$F$$$k(B 
(BBID 8917 $B$G$b8@5Z$5$l$F$$$k!#$3$N%"%C%W%G!<%H$G$O!"(BJaguar $B$K$*$1$k$3$NLd(B
$BBj$r=$@5$7$F$$$k!#(B
(B
(BJava $BMQ$N(B QuickTime $B$KB8:_$9$k>\:YITL@$NLdBj$b=$@5:Q$_$G$"$k!#$3$NLdBj$O!"(B
(BBID 8922 $B$K5-=R$5$l$F$$$k!#(B
(B
$B0J2<$N%"%C%W%G!<%H$,!"(BMac OS X 10.3.1 $BMQ$K%j%j!<%9$5$l$F$$$k!'(B
(B
$BA0=R$N(B zlib $B$K$*$1$kLdBj=$@5$,4^$^$l$F$$$k!#(B
(B
(BCAN-2003-0851 $B$K5-=R$5$l$F$$$k!"(BOpenSSL $B$KB8:_$9$k%5!<%S%9ITG=>uBV$K4Y$k(B
$BLdBj$O=$@5:Q$_$G$"$k!#$3$l$O!"(BASN.1 $B2r@O$K4XO"$7$F$*$j!"$5$i$J$k>\:Y$O(B 
(BBID 8970 $B$K5-=R$5$l$F$$$k!#(B
(B
$B$3$l$i$NLdBj$KBP$9$kE,@Z$J(B BID $B$O!"$5$i$J$kJ,@O$,40N;$7$?;~E@$G99?7M=Dj(B
$B$G$"$k!#I,MW$K1~$8$F!"8D!9$NLdBj$KBP$9$k?7$?$J(B BID $B$,:n@.$5$l$kM=Dj$G$"(B
$B$k!#(B
(B
(B28. phpFriendlyAdmin Unspecified Cross-Site Scripting Vulnerabil...
(BBugTraq ID: 9075
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Nov 20 2003
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9075
$B$^$H$a(B:
(B
(BphpFriendlyAdmin $B$O!"(BPHP $B$G3+H/$5$l$?!"%j%b!<%H$+$iA`:n2DG=$J%G!<%?%Y!<(B
$B%94IM}%D!<%k$G$"$k!#(B
(B
$BJs9p$K$h$k$H!"$3$N%=%U%H%&%'%"$K$O!"%j%b!<%H$N967be$G\:YITL@$N%/%m%9%5(B
$B%$%H%9%/%j%W%F%#%s%0$NLdBj$,B8:_$9$k!#$3$NLdBj$O!"%f!<%6$,M?$($k%G!<%?$K(B
$BBP$9$kL5322=$,ITE,@Z$G$"$k$3$H$K5/0x$7$F$$$k!#$3$NLdBj$K$h$j!"%j%s%/@h$r(B
$BK,$l$?:]$K%f!<%6$N%V%i%&%6$Gl9g!"967bZMQ>p(B
$BJs$N@`$N967b$bF1MM$K2D(B
$BG=$G$"$k!#(B
(B
(BphpFriendlyAdmin 1.4 $B0JA0$N%P!<%8%g%s$,!"$3$NLdBj$rJz$($F$$$k5?$$$,$"$k(B
$B$HJs9p$5$l$F$$$k$,!"B>$N%P!<%8%g%s$bF1MM$K1F6A$rhttp://www.securityfocus.com/bid/9076
$B$^$H$a(B:
(B
(BPGX32 $B$O!"(BSun Microsystems $B$K$h$jG[I[$5$l$F$$$k%U%l!<%`%P%C%U%!$G$"$k!#(B
$B$3$l$O!"J#?t$N\:Y$O!"8=;~E@$G$OL$8x3+$G$"$k!#4{CN$H$J$C$F$$$k$N$O!"(B
(BPGX32 $B%U%l!<%`%P%C%U%!$,%3%s%T%e!<%?$K%$%s%9%H!<%k$5$l$F$$$k>l9g$K$N$_Ld(B
$BBj$,B8:_$9$k$H$$$&$3$H$G$"$k!#$3$NLdBj$K$h$j!"%m!<%+%k$N%f!<%6$O!"$3$N%G(B
$B%P%$%9$HLdBj$rJz$($k%i%$%V%i%j$,%$%s%9%H!<%k$5$l$F$$$k%3%s%T%e!<%?$K4IM}(B
$BpJs$,8x3+$5$lhttp://www.securityfocus.com/bid/9077
$B$^$H$a(B:
(B
(BEffectOffice Server $B$O!">&MQMxMQ$,2DG=$J%*%U%#%94D6-$rDs6!$9$k%=%U%H%&%'(B
$B%"$G$"$k!#$3$N%=%U%H%&%'%"$O(B Microsoft Windows $B4D6-$GMxMQ2DG=$G$"$k!#(B
(B
$BJs9p$K$h$k$H!"$3$N%=%U%H%&%'%"$K$h$jMxMQ$5$l$k%5!<%S%9$K$OLdBj$,B8:_$9$k!#(B
$B$3$NLdBj$K$h$j!"%j%b!<%H%f!<%6$O!"$3$N%=%U%H%&%'%"$N@55,%f!<%6$KBP$9$k%5!<(B
$B%S%9$rITG=$G$-$k2DG=@-$,$"$k!#(B
(B
$B$3$N%=%U%H%&%'%"$O(B 56004 $BHV%]!<%H$GFb8~$-$N(B TCP $B@\B3$rBT$Ao$NF0:n$r:F3+$9$k$?$a$K$O!"Z5r$OF@$i$l$F$$$J$$!#6-3&%A%'%C%/$KM3Mh$9$kLdBj$G$"$k>l9g!"%j%b!<(B
$B%H$N967bhttp://www.securityfocus.com/bid/9078
$B$^$H$a(B:
(B
(Brcp $B$O!"%j%b!<%H$N%3%s%T%e!<%?4V$G%U%!%$%k$r%3%T!<$9$k%W%m%0%i%`$G$"$k!#(B
$B$3$N%W%m%0%i%`$K$h$j!"(BTCP/IP $B%M%C%H%o!<%/$r1[$($F!"$"$k%3%s%T%e!<%?$+$i(B
$BJL$N%3%s%T%e!<%?$X%U%!%$%k$r%3%T!<$9$k$3$H$,2DG=$G$"$k!#$^$?!"$3$N%W%m%0(B
$B%i%`$O(B cp $B%3%^%s%I$H;w$?J8K!$G\:Y$O8=;~E@$G$OL$>\$G(B
$B$"$k$,!"$3$N%=%U%H%&%'%"$,!"%3%^%s%I%i%$%s0z?t!"4D6-JQ?t$r=hM}$9$k:]$K6-(B
$B3&%A%'%C%/$,IT==J,$G$"$k$3$H$K5/0x$7$F$$$k$H?d;!$5$l$k!#(B
(B
$B$3$NLdBj$O(B AIX 4.3.3$B!"(B5.1$B!"(B5.2 $B$K$*$$$F@8$8$k$HJs9p$5$l$F$$$k!#(B
(B
(B32. FreeRADIUS Tag Field Heap Corruption Vulnerability
(BBugTraq ID: 9079
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Nov 20 2003
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9079
$B$^$H$a(B:
(B
(BFreeRADIUS $B$O!"%U%j!<$KMxMQ2DG=$J%*!<%W%s%=!<%9$N(B RADIUS $B%W%m%H%3%k$Ne=q$-$9$k$H?d;!$5$l$k!#(B
(B
(Bmemcpy $B$,uBV$K4Y$i$;$k$3$H$KN1$^$k2D(B
$BG=@-$,9b$$!#$3$l$O!"$3$N4X?t$ND9$5%Q%i%a!<%?$O%-%c%9%H$5$l!"Ii$NCM$,Hs>o(B
$B$KBg$-$JId9f$J$7@0?t$H$7$F2rH@h$rFI$_=P$92DG=@-(B
$B$,$"$k!#$7$+$7!"$3$NLdBj$rMxMQ$9$k967b$K$h$j!"$3$N%=%U%H%&%'%"$N%5!<%P%W(B
$B%m%;%9$N8"8B$G%3!<%I$,http://www.securityfocus.com/bid/9080
$B$^$H$a(B:
(B
(BSybase Adaptive Server $B$O!"MM!9$J5!G=$r;}$D(B SQL $B%j%l!<%7%g%J%k%G!<%?%Y!<(B
$B%94IM}%7%9%F%`$G$"$j!"(BMicrosoft Windows $B$r4^$`MM!9$J4D6-$GMxMQ2DG=$G$"$k!#(B
(B
$B$3$N%=%U%H%&%'%"$O!"%R!<%W%*!<%P!<%U%m!<$,H/@8$9$kLdBj$rJz$($F$$$k5?$$$,(B
$B$"$k$HJs9p$5$l$F$$$k!#Js9p$K$h$k$H!"$3$NLdBj$O!"%j%b!<%H$+$iEO$5$l$k%Q%9(B
$B%o!<%IG[NsFb$GL58z$J%Q%9%o!<%I$*$h$S%5!<%PL>$N%P%C%U%!D9$,!"LdBj$N1F6A$r(B
$BuBV$r0z(B
$B$-5/$3$9$3$H$,2DG=$G$"$k!#%5!<%S%9ITG=>uBV$N1F6AHO0O$O!"$3$N%=%U%H%&%'%"(B
$B$,%$%s%9%H!<%k$5$l$F$$$k4D6-$K0MB8$9$k!#(B
(B
(BWindows $B4D6-$K$*$$$F$O!"%/%i%$%"%s%H$N%9%l%C%I$KBP$9$k967b$N;n$_$,(B 1 $BEY(B
$B$G$b@.8y$7$?>l9g!"%5!<%P$O%m%0%$%s$N;n9T$r$N%/%i%$%"%s%H$d%5!<%P%W%m%;%9$O1F6A$rZ$G$"$k!#(B
(B
(B
(BIII. SECURITYFOCUS NEWS ARTICLES
(B--------------------------------
(B1. Exploit Code on Trial
$BCxZ%3!<%I$r8x3+$9$kNQM}4Q$K$D$$$FF,$rJz$($F$$$k!#(B
(B
(Bhttp://www.securityfocus.com/news/7511
(B
(B2. New charges in Lowe's wi-fi hacks
$BCxZ8@$K$h$jhttp://www.securityfocus.com/news/7507
(B
(B3. Court limits in-car FBI spying
$BCxAw$9$k$3$H$r(B FBI $B$K5v2D(B
$B$9$k$H8@$C$?H=7h$O9pAJ$5$lJ$$5$l$?!#(B
(B
(Bhttp://www.securityfocus.com/news/7491
(B
(B4. Wi-Fi hacker caught downloading child porn
$BCxhttp://www.securityfocus.com/news/7514
(B
(B5. Check your sums, Debian advises developers after breach
$BCxhttp://www.securityfocus.com/news/7513
(B
(B6. Sentencing postponed in nuclear lab hack case
$BCxhttp://www.securityfocus.com/news/7504
(B
(B
(BIV. SECURITYFOCUS TOP 6 TOOLS
(B-----------------------------
(B1. Botan v1.3.4
$B:nhttp://botan.randombit.net/
$BF0:n4D6-(B: N/A
$B$^$H$a(B:
(B
(BBotan $B$O!"(BC++ $B$rMxMQ$7$F3+H/$5$l$?0E9f%"%k%4%j%:%`%i%$%V%i%j$G$9!#$3$N%=(B
$B%U%H%&%'%"$O!"%V%m%C%/0E9f$*$h$S%9%H%j!<%`0E9f!"8x3+80%"%k%4%j%:%`!"%O%C(B
$B%7%e4X?t!"%a%C%;!<%8G'>ZId9f$NI}9-$$A*Br$,2DG=$G$9!#;H$$0W$$%U%#%k%?%$%s(B
$B%?%U%'%$%9$rHw$(!"(BX.509v3 $B$r4^$`!"B?$/$N0lHLE*$J6H3&I8=`$KBP1~$7$F$$$^$9!#(B
(B
(B2. GNU Simple Authentication and Security Layer (SASL) v0.0.9
$B:nhttp://www.gnu.org/software/gsasl/
$BF0:n4D6-(B: POSIX
$B$^$H$a(B:
(B
(BGNU SASL $B$O!"(BIETF Simple Authentication and Security Layer (SASL) $B%U%l!<(B
$B%`%o!<%/$*$h$S0lIt$N(B SASL $B%a%+%K%:%`$rZ$rMW5a$9$k!"$*$h$S%/%i%$%"(B
$B%s%H$,%5!<%P$KBP$7$FG'>Z$r9T$&:]$KMxMQ$5$l$^$9!#(B
(B
(B3. SecureServ v1.0
$B:nhttp://www.neostats.net/index.php?id=81
$BF0:n4D6-(B: FreeBSD$B!"(BIRIX$B!"(BPOSIX$B!"(BUNIX
$B$^$H$a(B
(B
(BIRC $B4IM}http://dnsgraph.sourceforge.net
$BF0:n4D6-(B: Linux
$B$^$H$a(B:
(B
(Bdnsgraph $B$O!"F|Kh!"=5Kh!"7nKh!"$*$h$SG/Kh$N!"@.8y(B/$B<:GT!":F5/(B/$B;2>H!"$*$h(B
$B$S(B nxrrset/nxdomain $B$N%0%i%U$r@8@.$9$k!"Hs>o$K%7%s%W%k$J(B Bind $BMQ$N(B DNS 
$BE}7W(B RRDtool $B$N%U%m%s%H%(%s%I$G$9!#(B
(B
(B5. pmacct v0.5.3
$B:nhttp://www.ba.cnr.it/~paolo/pmacct/
$BF0:n4D6-(B: Linux$B!"(BOpenBSD
$B$^$H$a(B:
(B
(Bpmacct $B$O(B IP $B%H%i%U%#%C%/>pJs(B ($B%=!<%9%"%I%l%9!"%P%$%H?t7W;;!"%Q%1%C%H?t(B)
$B$r<}=8$9$k$?$a$N%M%C%H%o!<%/%D!<%k$G$9!#%G!<%?$O%a%b%jFb$N%F!<%V%k$KJ]B8(B
$B$5$l!"%m!<%+%k%9%H%j!<%`J}8~$X$N@\B3$r2p$7$F%/%i%$%"%s%H%W%m%0%i%`$K$h$j(B
$B$=$NFbMF$,8!:w$5$l$^$9!#%1!<%V%k$+$i$N%Q%1%C%H$r<}=8$O(B pcap $B%i%$%V%i%j!"(B
$B$*$h$S(B 1 $B$D0J>e$N%W%m%_%9%-%c%9%b!<%I$N%M%C%H%o!<%/%$%s%?%U%'!<%9$r;HMQ(B
$B$7$F9T$o$l$^$9!#(B
(B
(B6. CryptoFS v0.2.1
$B:nhttp://reboot.animeirc.de/cryptofs/
$BF0:n4D6-(B: Linux
$B$^$H$a(B:
(B
(BCryptoFS $B$O(B Linux Userland Filesystem $BMQ$N0E9f2=%U%!%$%k%7%9%F%`$G$9!#%^(B
$B%&%s%H%]%$%s%H$KBP$7$F=q$-9~$^$l$?%U%!%$%k$O!"0lHL$N%U%!%$%k%7%9%F%`>e$N(B
$B%G%#%l%/%H%jFb$K(B ($B%G!<%?$*$h$S%U%!%$%kL>$r(B) $B0E9f2=$7$F3JG<$5$l$^$9!#(B
(B
(B--
$BLu(B: $BA}EDCR0l(B(MASUDA Tomokazu)$B!">.>>%_%5(B(KOMATSU Misa)$B!"(B
$BGOCeFF(B(UMAKI Atsushi)$B!"3QED8<;J(B(KAKUDA Motoshi)$B!"(B
$B@P86J8;R(B(ISHIHARA Ayako)$B!">!3$D>?M(B(KATSUMI Naoto)$B!"(B
$B9b66=SB@O:(B(TAKAHASHI Shuntarou)
$B4F=$(B: $B@>B<9/MN(B(NISHIMURA Yasuhiro)
(BLAC Co., Ltd.
(Bhttp://www.lac.co.jp/security/
Attachment: smime.p7s
Description: S/MIME cryptographic signature
Prev by Date: SecurityFocus Newsletter #223 2003-11-10->2003-11-14

Next by Date: SecurityFocus Newsletter #225 2003-11-24->2003-11-28

Previous by thread: SecurityFocus Newsletter #223 2003-11-10->2003-11-14

Next by thread: SecurityFocus Newsletter #225 2003-11-24->2003-11-28

Index(es):

Date

Thread