[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
SecurityFocus Newsletter #226 2003-12-1->2003-12-5

To: bugtraq-jp@xxxxxxxxxxxxxxxxx
Subject: SecurityFocus Newsletter #226 2003-12-1->2003-12-5
From: y.nisimr@xxxxxxxxx (y.nisimr)
Date: Wed, 24 Dec 2003 20:08:20 +0900
$B@>B<(B@$B%i%C%/$G$9!#(B
(B
(BSecurityFocus Newsletter $BBh(B 226 $B9f$NOBLu$r$*FO$1$7$^$9!#(B
$BLu$N$J$$9`L\$K$D$$$F$O!VF|K\8lLu$J$7!W$H$7$F6hJL$7$F$"$j$^$9!#(B
(B
(B---------------------------------------------------------------------------
(BBugTraq-JP $B$K4X$9$k(B FAQ($BF|K\8l(B):
(Bhttp://www.securityfocus.com/popups/forums/bugtraq-jp/faq.shtml
$B!&(BSecurityFocus Newsletter $B$NOBLu$O(B BugTraq-JP $B$G0lH$/$@$5$$(B
(B---------------------------------------------------------------------------
(B---------------------------------------------------------------------------
(BSecurityFocus Newsletter $B$K4X$9$k(BFAQ($B1Q8l(B):
(Bhttp://www.securityfocus.com/popups/forums/securityfocusnews/intro.shtml
(BBugTraq $B$K4X$9$k(B FAQ($B1Q8l(B):
(Bhttp://www.securityfocus.com/popups/forums/bugtraq/faq.shtml
(B---------------------------------------------------------------------------
$B0zMQ$K4X$9$kHw9M(B:
$B!&$3$NOBLu$O(B SecurityFocus $B$N5v2D$r3t<02qe$G9T$o$l$F$$$^$9!#(B
$B!&(BSecurityFocus Newsletter $B$NOBLu$r(B Netnews, Mailinglist, World Wide Web,
(B  $B=q@R(B, $B$=$NB>$N5-O?G^BN$G0zMQ$5$l$k>l9g$K$O%a!<%k$NA4J80zMQ$r$*4j$$$7$^$9!#(B
$B!&F|K\8lHG%K%e!<%9%l%?!<(B 1 $B9f$+$i(B 3 $B9f$^$G$K$O$3$NHw9M$,IU$$$F$$$^$;$s$,!"(B
(B  $B=`MQ$9$k$b$N$H$7$^$9!#(B
$B!&$^$?!"(BSecurityFocus $BDs6!$N(B BugTraq-JP $B%"!<%+%$%V(B [*1] $B$X$N$$$+$J$k7A<0$N(B
(B  $B%O%$%Q!<%j%s%/$b>e5-$K=`$8$F$/$@$5$$!#(B
(B1) http://online.securityfocus.com/archive/79
(B---------------------------------------------------------------------------
$B$3$NOBLu$K4X$9$kHw9M(B:
$B!&$3$NOBLu$NE,MQ@.2L$K$D$$$F3t<02ql9g!"(BBugTraq-JP $B$X(B Errata $B$H$7$F=$@5(B
(B  $BHG$r$4Ej9FD:$/$+!"4F=$l9g$K$O=$@5HG$r$G$-$k$@$1?WB.$KH/9T$7$^$9!#(B
(B---------------------------------------------------------------------------
(BThis translation is encoded and posted in ISO-2022-JP.
(B
$B86HG(B:
(BDate: Mon, 8 Dec 2003 14:33:08 -0700 (MST)
(BMessage-ID: <Pine.LNX.4.58.0312081430080.19998@xxxxxxxxxxxxxxxxxxxxxx>
(B
(BSecurityFocus Newsletter #226
(B-----------------------------
(B
(BThis Issue Sponsored by: RSA Conference 2004
(B
(BI. FRONT AND CENTER($BF|K\8lLu$J$7(B)
(B     1. Home User Security: Personal Firewalls
(B     2. Debian's Response
(B     3. Simulating and optimising worm propagation algorithms (PDF)
(B     4. The Rise of the Spammers
(BII. BUGTRAQ SUMMARY
(B     1. OpenCA Signature Verification Vulnerabilities
(B     2. Applied Watch Command Center Authentication Bypass Vulnerabi...
(B     3. SuSE XScreenSaver Package Multiple Vulnerabilities
(B     4. PieterPost Unauthorized E-mail Account Access Vulnerability
(B     5. Apache mod_python Module Malformed Query Denial of Service V...
(B     6. CuteNews Debug Query Information Disclosure Weakness
(B     7. IlohaMail User Parameter Cross-Site Scripting Vulnerability
(B     8. Surfboard Web Server File Disclosure Vulnerability
(B     9. Virtual Programming VP-ASP shopsearch.asp SQL Injection Vuln...
(B     10. Virtual Programming VP-ASP shopdisplayproducts.asp SQL Injec...
(B     11. MoinMoin Unspecified Cross-Site Scripting Vulnerability
(B     12. Alabanza AlaCart Administration Authentication Bypass SQL In...
(B     13. Sun Cluster TCP Port Conflict Denial Of Service Vulnerabilit...
(B     14. Linux Kernel do_brk Function Boundary Condition Vulnerabilit...
(B     15. Jason Maloney's Guestbook Remote Command Execution Vulnerabi...
(B     16. IBM Directory Server Web Administration Interface Cross-Site...
(B     17. HP-UX Shar Utility Predictable Temporary File Creation Vulne...
(B     18. Cisco Aironet Access Point Wired Equivalent Privacy Key Disc...
(B     19. GnuPG External HKP Format String Vulnerability
(B     20. Yahoo! Messenger YAuto.DLL Open Buffer Overflow Vulnerabilit...
(B     21. Sun ONE/iPlanet Web Server Unspecified Denial of Service Vul...
(B     22. Sun Solaris XSun Direct Graphics Access Insecure Temporary F...
(B     23. Linux Kernel Concurrent Threaded Function Calls Local Denial...
(B     24. Websense Enterprise Blocked Sites Cross-Site Scripting Vulne...
(B     25. Multiple EZPhotoShare Memory Corruption Vulnerabilities
(B     26. XBoard PXBoard Script Insecure Temporary File Creation Vulne...
(B     27. Linksys WRT54G Router Blank HTTP GET Request Denial Of Servi...
(B     28. RSync Daemon Mode Undisclosed Remote Heap Overflow Vulnerabi...
(B     29. Linux Kernel 2.4 RTC Handling Routines Memory Disclosure Vul...
(B     30. Alan Ward A-Cart Register.ASP Script Injection Vulnerability
(BIII. SECURITYFOCUS NEWS ARTICLES
(B     1. FTC investigates PetCo.com security hole
(B     2. Heckenkamp Challenges Computer Ban
(B     3. Nachi worm infected Diebold ATMs
(B     4. NatWest warns of dodgy email
(B     5. New computer virus variant floods Web sites of anti-spam act...
(B     6. Retail hacker sentenced to 1 1/2 years in prison
(BIV. SECURITYFOCUS TOP 6 TOOLS
(B     1. ThePacketMaster  v1.1.0
(B     2. CommNav Systems Navigator v4.2
(B     3. Firewall Builder v1.1.1
(B     4. JSch v0.1.11
(B     5. Yet Another antiVirus Recipe v1.8.3
(B     6. DansGuardian v2.7.6-3(unstable)
(B
(B
(BI. FRONT AND CENTER($BF|K\8lLu$J$7(B)
(B---------------------------------
(B
(BII. BUGTRAQ SUMMARY
(B-------------------
(B1. OpenCA Signature Verification Vulnerabilities
(BBugTraq ID: 9123
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Nov 28 2003
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9123
$B$^$H$a(B:
(B
$BJs9p$K$h$k$H!"(BOpenCA $B$K$OJ#?t$NITHw$,B8:_$7!"<:8z:Q$_$b$7$/$O4|8B@Z$l$N(B
$B>ZL@=q$,$,FbMF$N??@5(B
$B@-$N8!>Z$b$7$/$O%"%/%;%9$NBEEv@-3NG'$KMxMQ$5$l$F$$$k>l9g$K!"?<9o$J%;%-%e(B
$B%j%F%#>e$N%j%9%/$K$J$k2DG=@-$,$"$k!#(B
(B
$B%Y%s%@$NJs9p$K$h$k$H!"6qBNE*$K$O0J2<$NITHw$,B8:_$9$k!#(B
(B
(BPKCS#7 $B=pL>$N%7%j%"%k$r7hDj$9$k$?$a$KMxMQ$5$l$k(B crypto-utils.lib $BFb$N4X(B
$B?t$O!"ITE,@Z$JJ}K!$G!"(BOpenCA::PKCS7 $B%b%8%e!<%k$N%$%s%?!<%U%'%$%9$r;HMQ$9(B
$B$k!#(B
(B
$B$^$?!"(Bcrypto-utils.lib $B%i%$%V%i%j$O!"=pL>ZL@=q$N(B X.509 $B%*%V%8%'%/%H(B
$B$r:n@.$9$k$?$a$K!"=pL>$K4^$^$l$kA4$F$N>ZL@=q$rMQ$$$k!#$3$l$K$h$j!"$3$N(B 
(BX.509 $B%*%V%8%'%/%H$O!">ZL@=q%A%'%$%sFb$N>ZL@=q$N(B 1 $B$D$+$i:n@.$5$l$k$3$H(B
$B$K$J$k$HJs9p$5$l$F$$$k!#(B
(B
(BOpenCA::PKCS7 $B%b%8%e!<%k$O!">ZL@=q%A%'%$%s$N2r@O$K4XO"$7$J$$9T$N8!=P$K$*(B
$B$$$F!"@55,I=8=$rITE,@Z$K;HMQ$7$F$$$k!#(B
(B
$B$^$?!"(BOpenCA::PKCS7 $B$O!">ZL@=q%A%'%$%s$N%7%j%"%k$N2r@O$K$*$$$F$b!"@55,I=(B
$B8=$rITE,@Z$K;HMQ$7$F$*$j!"(BA$B!"(BB$B!"(BC$B!"(BD$B!"(BE$B!"$*$h$S(B F $B$NMM$JBgJ8;z$,L5;k$5$l(B
$B$k!#(B
(B
$B$3$l$i$NLdBj$K$h$j!"<:8z:Q$_$b$7$/$O4|8B@Z$l>ZL@=q$r=jM-$9$k0-0U$"$k%f!<(B
$B%6$O!"8!>Z$9$k2?$i$+$N$b$N$K=pL>$9$k2DG=@-$,$"$k!#$3$l$O$"$?$+$b?.MQ$G$-(B
$B$k$+$N$h$&$J8m2r$r@8$8$5$;$k$?$a$K0-MQ$5$l!"$=$NB>$N967b$K7R$,$k2DG=@-$,(B
$B$"$k!#(B
(B
(B2. Applied Watch Command Center Authentication Bypass Vulnerabi...
(BBugTraq ID: 9124
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Nov 28 2003
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9124
$B$^$H$a(B:
(B
(BApplied Watch Command Center $B$O!"(BSnort IDS $B$KL?Na$rAw$j@)8f$9$k$?$a$KMx(B
$BMQ$5$l$k%=%U%H%&%'%"$G$"$k!#$3$N%Q%C%1!<%8$O!"(BSnort $B%m%0$rZ$r1*2s$7!"967be$N%j%b!<%H$N967bZ$r1*2s2DG=$H?d;!$5$l$k!#$3$NLd(B
$BBj$NJL$N1F6A$H$7$F!"0-0U$"$k967be$NA4%;%s(B
$B%5!<$K(B IDS $B%"%i!<%H$rDI2C2DG=$G$"$k!#0-0U$"$k?MJ*$O!"$3$N967b$rMxMQ$7$F(B
$B>C6KE*8m8!CN(B (false negative) $B$r@8$8$5$;$k$3$H$K$h$j!"4IM}Z$G$"$k$,!"$3$NLdBj$O!"%W%m%H%3%k$NZ:Q$_$G$"$k$H$N8m$C$?2>Dj$r9T$C(B
$B$F$*$j!"$3$N%j%b!<%H$N%3%s%T%e!<%?$OMM!9$JFC8"$rI,MW$H$9$kA`:n$rl9g!"967bZ%3!<%I$O8x3+$5$l$F$$$k!#(B
(B
(B3. SuSE XScreenSaver Package Multiple Vulnerabilities
(BBugTraq ID: 9125
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: Nov 28 2003
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9125
$B$^$H$a(B:
(B
(Bxscreensaver $B%W%m%0%i%`$O!"%-!<%\!<%I$*$h$S%^%&%9$,@_Dj$5$l$?BT$A;~4V$N(B
$B4V%"%$%I%k>uBV$G$"$k>l9g$K!"%9%/%j!<%s$K?^2h$rI=<($9$k!#$3$N%=%U%H%&%'%"(B
$B$O!"%9%/%j!<%s$r%m%C%/$9$k$h$&$K@_Dj2DG=$G$"$j!"%9%/%j!<%s$*$h$S<~JU5!4o(B
$B$N%m%C%/2r=|$N$?$a$KG'>ZMQ>pJs$NF~NO$,B%$5$l$k$h$&$K$J$k!#(B
(B
(BSuSE $B$NJs9p$K$h$k$H!"(BSuSE Linux 9.0 $B$KF1:-$5$l$F$$$k$3$N%=%U%H%&%'%"$O!"(B
$BJ#?t$NLdBj$rJz$($F$$$k5?$$$,$"$k!#$3$l$i$NLdBj$K$O!"$3$N%=%U%H%&%'%"$,G'(B
$B>ZMQ>pJs$NBEEv@-3NG'$r9T$&:]$N%/%i%C%7%e$,4^$^$l$F$*$j!"L$8!>Z$G$O$"$k$,!"(B
$B$3$N%/%i%C%7%e$O%a%b%jFbMF$NGK2u$NLdBj$K5/0x$7$F$$$k2DG=@-$,$"$k!#$^$?!"(B
(BSuSE $B$NJs9p$K$h$k$H!"$3$N%=%U%H%&%'%"$O0l;~%U%!%$%k$r%;%-%e%"$G$J$$J}K!(B
$B$G:n@.$9$kLdBj$rJ#?tJz$($F$$$k$3$H$+$i!"$3$NLdBj$rMxMQ$9$k967b$K$h$j!"96(B
$B7be$G$N8"8B$r>:3J$9$k2DG=@-$,$"$k!#(B
(B
$B$3$l$i$NLdBj$KBP$9$k(B SuSE $B$N=$@5$OJ]N1Cf$G$"$j!"8x<0%"%I%P%$%6%j$N8x3+$H(B
$B9g$o$;$F!"$h$j5;=QE*$J>pJs$,F~http://www.securityfocus.com/bid/9128
$B$^$H$a(B:
(B
(BPieterPost $B$O!"%j%b!<%H$N%f!<%6$,(B POP3 $B%a!<%k%\%C%/%9$K%"%/%;%92DG=$K$J(B
$B$k$h$&$K@_7W$5$l$?(B Web $B%$%s%?!<%U%'%$%9$r;}$D%=%U%H%&%'%"$G$"$k!#$^$?!"(B
$B$3$N%=%U%H%&%'%"$OEE;R%a!<%k$NAw?.$K$bMxMQ2DG=$G$"$j!"(BPHP $B$r%5%]!<%H$9$k(B
$BA4$F$N4D6-$GF0:n$9$k$HJs9p$5$l$F$$$k!#(B
(B
$B$3$N%=%U%H%&%'%"$K$OLdBj$,B8:_$9$k$HJs9p$5$l$F$$$k!#Js9p$K$h$k$H!"$3$NLd(B
$BBj$O!V2>A[(B(virtual)$B!W%f!<%6$H$7$F%m%0%$%s$r;n$_$k:]$KG'>Z$,MW5a$5$l$J$$(B
$B$3$H$K5/0x$9$k!#$3$NLdBj$K$h$j!"@x:_E*$K8"8B$N$J$$?MJ*$,!V56Au$7$?!WEE;R(B
$B%a!<%k$rAw?.$9$kL\E*$G!"$3$N%=%U%H%&%'%"$rMxMQ2DG=$K$J$k$H?d;!$5$l$k!#(B
(B
$BJs9p$K$h$k$H!"1F6A$r$N%P!<(B
$B%8%g%s$bLdBj$rJz$($F$$$k2DG=@-$,$"$k!#(B
(B
(B5. Apache mod_python Module Malformed Query Denial of Service V...
(BBugTraq ID: 9129
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Nov 29 2003
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9129
$B$^$H$a(B:
(B
(BApache $B$N(B mod_python $B%b%8%e!<%k$O!"(BApache $B%5!<%P$,(B Python $B%9%/%j%W%H$r2r(B
$B\:Y$O8=;~E@$G$OL$>\$G$"$k$,!"%Y%s%@$N\:Y$,8x3+$5$lhttp://www.securityfocus.com/bid/9130
$B$^$H$a(B:
(B
(BCuteNews $B$O!"(BPHP $B$rMxMQ$7$F3+H/$5$l$?%K%e!<%94IM}%7%9%F%`$G$"$k!#(B
(B
(BCuteNews 1.3 $B$K!"%5!<%P$N=EMW$J@_Dj%G!<%?$r3+<($9$k2DG=@-$N$"$k!">pJsO3(B
$B1L$NLdBj$,Js9p$5$l$F$$$k!#$3$NLdBj$O!"$3$N%=%U%H%&%'%"$N%G%P%C%0%/%(%j$N(B
$B=hM}$K5/0x$7$F$$$k!#(B
(B
$B6qBNE*$K$O!"(Bindex.php $B%9%/%j%W%H%U%!%$%k$K(B 'debug' $B%Q%i%a!<%?$rEO$9$3$H(B
$B$G!"$3$NLdBj$r0z$-5/$3$9$3$H$,2DG=$G$"$k!#$3$N%Q%i%a!<%?$K$h$C$F!"(B
(Bphpinfo() $B$N8F$S=P$7$r4^$`0lO"$NA`:n$rpJs$O!"0-0U$"$k]$H$J(B
$B$k%3%s%T%e!<%?$K$5$i$J$k967b$r;E3]$1$k$?$a$K@x:_E*$KMxMQ$5$l$k2DG=@-$,$"(B
$B$k!#(B
(B
$B$3$NLdBj$,!"$3$N%=%U%H%&%'%"$NA4$F$N@_Dj$K$*$$$FH/@8$9$k$N$+!"FCDj$N%G%P%C(B
$B%0%b!<%I$N@_Dj$N$_$GH/@8$9$k$N$+$OL$>\$G$"$k$3$H$KN10U$9$Y$-$G$"$k!#$5$i(B
$B$J$k>pJs$,F~\:Y$rL@$i$+$K$9$kM=Dj$G$"$k!#(B
(B
$B$3$NLdBj$O!"(BCuteNews 1.3 $B$K$D$$$FJs9p$5$l$F$$$k$,!"B>$N%P!<%8%g%s$b1F6A(B
$B$rhttp://www.securityfocus.com/bid/9131
$B$^$H$a(B:
(B
(BIlohaMail $B$O!"%U%j!<$KMxMQ2DG=$J%*!<%W%s%=!<%9$N(B Web $B%$%s%?!<%U%'!<%9$r(B
$B;}$DEE;R%a!<%k%=%U%H%&%'%"$N%Q%C%1!<%8$G$"$k!#$3$N%=%U%H%&%'%"$O!"(BUnix 
$B$*$h$S(B Linux $B4D6-$GMxMQ2DG=$G$"$k!#(B
(B
$B$3$N%=%U%H%&%'%"$N$K$O!"%f!<%6$NM?$($k%Q%i%a!<%?$N=hM}$KLdBj$,H/8+$5$l$F(B
$B$$$k!#$3$l$K$h$j967b]$H$J$k%3%s%T%e!<%?$N%V%i%&%6$G0-0U$"$k(B
$B%9%/%j%W%H%3!<%I$r]$H$J$k%f!<%6$,K,$l$k:]!"7k2L$H$7$FLdBj$rJz$($k%=(B
$B%U%H%&%'%"$r2TF0$5$;$F$$$k%5%$%H$HF13J$N%;%-%e%j%F%#%3%s%F%-%9%H$G%3!<%I(B
$B$,http://www.securityfocus.com/bid/9132
$B$^$H$a(B:
(B
(BSurfboard $B$O!"(BUnix/Linux $BM3Mh$N4D6-8~$1$N%U%j!<$KMxMQ2DG=$J(B Web $B%5!<%P$N(B
$BH$rMxMQ$7$?967b$rHJ8;zNs$rM?$($k$3$H$G!"%5!<%P(B
$B$N2>A[%k!<%H%G%#%l%/%H%j$NHO0O30$X%"%/%;%9$7!"%U%!%$%k%7%9%F%`$r1\Mw2DG=(B
$B$G$"$k!#%j%b!<%H$N967be$N%5!<%P$,FI$_l9g!"967bpJs$K%"%/%;%92DG=$K$J$k$H?d;!$5$l$k!#(B
(B
(B9. Virtual Programming VP-ASP shopsearch.asp SQL Injection Vuln...
(BBugTraq ID: 9133
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Dec 01 2003
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9133
$B$^$H$a(B:
(B
(BVP-ASP $B$O!"%$%s%?!<%M%C%H%7%g%C%T%s%06HpJs$r3+<($5$;$k$3$H$,2DG=$G$"$k!#(B
(B
$B0-0U$"$k%f!<%6$O!"%G!<%?%Y!<%9%/%(%j$r2~JQ$7!"@x:_E*$K%=%U%H%&%'%"$d%G!<(B
$B%?%Y!<%9$KBP$9$k6<0R$r0z$-5/$3$9=EMW$J>pJs$N1\Mw$dJT=8$r9T$&2DG=@-$,$"$k!#(B
(B
(BVP-ASP 4.50 $B$*$h$S(B 5.0 $B$,$3$NLdBj$rJz$($F$$$k5?$$$,$"$k$HJs9p$5$l$F$$$k!#(B
(B
(B10. Virtual Programming VP-ASP shopdisplayproducts.asp SQL Injec...
(BBugTraq ID: 9134
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Dec 01 2003
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9134
$B$^$H$a(B:
(B
(BVP-ASP $B$O!"%$%s%?!<%M%C%H%7%g%C%T%s%06HpJs$r3+<($5$;$k$3$H$,2DG=$G$"$k!#(B
(B
$B0-0U$"$k%f!<%6$O!"%G!<%?%Y!<%9%/%(%j$r2~JQ$7!"@x:_E*$K%=%U%H%&%'%"$d%G!<(B
$B%?%Y!<%9$KBP$9$k6<0R$r0z$-5/$3$9=EMW$J>pJs$N1\Mw$dJT=8$r9T$&2DG=@-$,$"$k!#(B
(B
(BVP-ASP 4.50 $B$*$h$S(B 5.0 $B$,$3$NLdBj$rJz$($F$$$k5?$$$,$"$k$HJs9p$5$l$F$$$k!#(B
(B
(B11. MoinMoin Unspecified Cross-Site Scripting Vulnerability
(BBugTraq ID: 9135
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Dec 01 2003
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9135
$B$^$H$a(B:
(B
(BMoinMoin $B$O(B Python $B$rMxMQ$7$F3+H/$5$l$?(B Wiki $B%W%m%0%i%`$G$"$k!#$3$N%=%U(B
$B%H%&%'%"$O!"(BUnix$B!"$*$h$S(B Linux $B4D6-$GMxMQ2DG=$G$"$j!"%U%j!<$KMxMQ2DG=$J(B
$B%*!<%W%s%=!<%9$G$"$k!#(B
(B
$B$3$N%=%U%H%&%'%"$K$h$k!"$$$/$D$+$N%?%$%W$NF~NO$N=hM}$KLdBj$,3NG'$5$l$F$$(B
$B$k!#$3$NLdBj$K$h$j!"967b]$H$J$k%f!<%6$N%V%i%&%6>e$G%3!<%I$r\:Y$O8x3+$5$l$F$$$J$$!#B>$N%/%m%9%5%$%H%9%/%j%W%F%#(B
$B%s%0$rMxMQ$9$k967b$HF1MM$K!"$3$NLdBj$O967bBP>]$H$J$k%f!<%6$K0-0U$"$k%j%s(B
$B%/$r%/%j%C%/$5$;$kI,MW$,$"$k$H?d;!$5$l$k!#F1MM$K!"%9%/%j%W%H%3!<%I$OLdBj(B
$B$rJz$($k%=%U%H%&%'%"$r2TF0$5$;$F$$$k%5%$%H$N%;%-%e%j%F%#%3%s%F%-%9%H$GpJs$,8x3+$5$lhttp://www.securityfocus.com/bid/9136
$B$^$H$a(B:
(B
(BAlabanza AlaCart $B$O!"(BAlabanza $B$K$h$C$F3+H/$5$l$?A4$F$N5!G=$rHw$($?%7%g%C(B
$B%T%s%0%+!<%H%=%U%H%&%'%"%Q%C%1!<%8$G$"$k!#(B
(B
$BJs9p$K$h$k$H!"$3$N%=%U%H%&%'%"$K$O(B SQL $BJ8$rCmF~$9$k967b$rZ=hM}$KEO$5$l$k%f!<%6(B
$BL>!"$*$h$S%Q%9%o!<%I%G!<%?$r=hM}$9$k:]$K5/$3$k!#6qBNE*$K$O!"$3$N%=%U%H%&%'(B
$B%"$O%f!<%6$N%f!<%6L>!"$*$h$S%Q%9%o!<%I$r4^$`(B SQL $B%3%s%F%s%D$r!"(BSQL $BJ8$K(B
$BA^F~$9$kA0$K%(%9%1!<%W$7$J$$!#(B
(B
$B$3$NLdBj$rMxMQ$9$k967b$r9T$&$?$a$K!"967b!"$*$h$S%Q%9%o!<%I$K(B 
(B('or')$B!"$^$?$O(B ('=') $B$N$h$&$JFCJL$KAH$_N)$F$i$l$?(B SQL $B%3!<%I$rA^F~$7!";v(B
$Be!"(BSQL $BJ8$NO@M}9=B$$rA`:n$9$k2DG=@-$,$"$k!#(BSQL $BJ8$,A`:n$5$l$?>l9g!"96(B
$B7bZMQ>pJs!"$*$h$S;q;:>p(B
$BJs$r4^$`=EMW$J>pJs$r967bhttp://www.securityfocus.com/bid/9137
$B$^$H$a(B:
(B
(BSun Cluster $B$O!"(BSun Microsystems $B$K$h$C$FJ]e$K$*$$$F!"$$$/$D$+$N%"%W(B
$B%j%1!<%7%g%s$rA`:n$9$k:]$KLdBj$,B8:_$9$k$3$H$,H/8+$5$l$F$$$k!#$3$NLdBj$K(B
$B$h$j!"967buBV$r0z$-5/$3$92DG=@-$,$"$k!#(B
(B
$B$3$NLdBj$O!"$3$N%=%U%H%&%'%"$K$h$k%]!<%H$N=hM}$KB8:_$7$F$*$j!"(BOPS/RAC $B%Q%C(B
$B%1!<%8$,%$%s%9%H!<%k$5$l$F$$$kI,MW$,$"$k!#%/%i%9%?Fb$N%m!<%+%k$N%3%s%T%e!<(B
$B%?>e$N967bl9g!"7k2L$H$7$F!"%/%i%9%?Fb(B
$B$N%3%s%T%e!<%?$X$N%5!<%S%9$,ITG=>uBV$K4Y$k2DG=@-$,$"$k!#(B
(B
(B14. Linux Kernel do_brk Function Boundary Condition Vulnerabilit...
(BBugTraq ID: 9138
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: Dec 01 2003
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9138
$B$^$H$a(B:
(B
(Bdo_brk() $B$O!"(Bbrk() $B%7%9%F%`%3!<%k!"(BELF$B!"$*$h$S(B a.out $B$N%m!<%G%#%s%05!9=(B
$B$r4^$`MM!9$J%+!<%M%k$N$N=i4|2=$5$l$F$$$J$$%R!<%W%a%b%j$NNN0h(B
$B$rA}8:$9$k$?$a$K;HMQ$5$l$k!#(B
(B
(BLinux OS $B$G$O!"$=$l$>$l$N%W%m%;%9$O!"2>A[%a%b%j>e$N(B 0 $B$+$i(B TASK_SIZE $BJQ(B
$B?t$K$h$C$FDj5A$5$l$?!"FCDj$N2>A[%a%b%j$NHO0O$X$N8B$i$l$?%"%/%;%9$,5v2D$5(B
$B$l$F$$$k!#$3$NHO0O$O$5$i$KO@M}E*$J%;%/%7%g%s$K:YJ,2=$5$l$k!#$3$l$i$N%;%/(B
$B%7%g%s$b2>A[%a%b%jNN0h$H$7$F$_$J$5$l$k!#$3$NHO0O30$N%a%b%j$NFbMF$O!"%f!<(B
$B%6$NNN0h$X$N%"%/%;%9$,:$Fq$G$"$k$HH=CG$5$l!"%+!<%M%k%3!<%I!"$*$h$S%+!<%M(B
$B%k$NMM!9$J%G!<%?9=B$$r3JG<$9$k$?$a$K;HMQ$5$l$k!#%a%b%j$N$3$NNN0h$O%Z!<%8(B
$BJ]8n5!9=$K$h$C$FJ]8n$5$l$F$$$k!#(B
(B
$B$3$N4X?t$K$O!"%f!<%6$,M?$($k%"%I%l%9$r=hM}$9$k:]$KITHw$,H/8+$5$l$F$$$k!#(B
$BFCJL$KAH$_N)$F$i$l$?%"%I%l%9$rEO$9$3$H$K$h$j!"(BTASK_SIZE $B$NCM$N@)8B$r1[$(!"(B
$B%+!<%M%k$,;HMQ$9$kJ]8n$5$l$?%a%b%jNN0h$XC#$9$kF?L>$N%a%b%j%^%C%W$X%"%/%;(B
$B%92DG=$K$J$k$H?d;!$5$l$k!#7k2L$H$7$F!"967be$G$b$3$NLdBj$rMxMQ$9$k(B
$B3N5!G=$r4^$`M-8z$J%j%b!<(B
$B%H$+$i$N(B root $B8"8B$rC%http://www.securityfocus.com/bid/9139
$B$^$H$a(B:
(B
(BJason Maloney's Guestbook $B$O!"(BWeb $B%V%i%&%6$+$iMxMQ2DG=$J%2%9%H%V%C%/5!G=(B
$B$r;}$D(B CGI $B$G$"$k!#(B
(B
$BJs9p$K$h$k$H!"$3$N%=%U%H%&%'%"$K$O!"7k2L$H$7$F!"(BWeb $B%5!<%P$N$lhttp://www.securityfocus.com/bid/9140
$B$^$H$a(B:
(B
(BIBM Directory Server $B$O!"(BHP-UX$B!"(BMicrosoft Windows$B!"(BLinux $B$r4^$`J#?t$N4D(B
$B6-$GMxMQ2DG=$J(B LDAP $B%5!<%P$G$"$k!#(B
(B
$B$3$N%=%U%H%&%'%"$O!"%/%m%9%5%$%H%9%/%j%W%F%#%s%0$NLdBj$rJz$($F$$$k5?$$$,(B
$B$"$k!#$3$N$?$a!"$3$N%5!<%P$X$N0-0U$"$k%O%$%Q!<%j%s%/$NCf$K!"0-0U$"$k(B 
(BHTML $B%?%0$*$h$S%9%/%j%W%H%3!<%I$rKd$a9~$_2DG=$G$"$j!"$=$N%j%s%/$rC)$C$?(B
$B:]$K967bBP>]%f!<%6$N%V%i%&%6Fb$G2rZMQ>pJs$N@`$N96(B
$B7b$rMF0W$K$9$k2DG=@-$,$"$k!#$3$NLdBj$rMxMQ$9$k$3$H$G!"$3$N%5!<%P$r?/322D(B
$BG=$G$"$k$H?d;!$5$l$k!#(B
(B
$B$3$NLdBj$O!"(BDirectory Server 4.1 $B$K$*$$$FJs9p$5$l$F$$$k$,!"$=$NB>$N%P!<(B
$B%8%g%s$bF1MM$K1F6A$rhttp://www.securityfocus.com/bid/9141
$B$^$H$a(B:
(B
(BHP-UX $B$O!"(BHewlett-Packard $B$K$h$jHNGd!"J]e$G%U%!%$%k$,GK2u$5$l!"@x:_E*$K8"8B>:3J$,0z$-5/$3$5$l$k$H?d;!$5(B
$B$l$k!#(B
(B
(B18. Cisco Aironet Access Point Wired Equivalent Privacy Key Disc...
(BBugTraq ID: 9143
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Dec 02 2003
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9143
$B$^$H$a(B:
(B
(BCisco Aironet $B%"%W%i%$%"%s%9$O!"L5@~(B LAN $B$rMxMQ$9$kpJs$r3+<($9$kLdBj$rJz$($F$$$k5?$$$,$"$k$HJs9p$5$l(B
$B$F$$$k!#(B
(B
$BJs9p$K$h$k$H!"$3$NLdBj$O(B 'snmp-server enable traps wlan-wep' $B%3%^%s%I$,(B
$B@_Dj$5$l$F$$$k>l9g$KB8:_$7$F$*$j!"$3$N5!G=$,M-8z$J:]!"$3$N%=%U%H%&%'%"$,(B
$BJ?J8$G!"(BWEP $B%-!<$r%7%s%W%k%M%C%H%o!<%/4IM}%W%m%H%3%k(B (SNMP) $B%5!<%P$KAw?.(B
$B$9$k$?$a$K@8$8$k!#$3$NLdBj$O!"(BWEP Key $B$,JQ99!"$b$7$/$O$3$N%=%U%H%&%'%"$,(B
$B:F5/F0$5$l$kEY$KZ%W%m%H%3%k$N$&$A$N$R$H$D$,;HMQ$5$l$k>l9g!"(BWEP $B%-!<$OF0E*$K@_Dj$5(B
$B$l$k$h$&Dj5A$5$l$k!#(B
(B
(B19. GnuPG External HKP Format String Vulnerability
(BBugTraq ID: 9144
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Dec 03 2003
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9144
$B$^$H$a(B:
(B
(BGnuPG $B$K$O!"%j%b!<%H$+$i0-MQ2DG=$J=q<0;XDj;R$r4^$`J8;zNs$No!"967be$N(B
$B0U?^$9$k>l=j$K=q$-9~$_2DG=$K$J$j!"!"$5$i$K0U?^$9$k%3!<%I$rhttp://www.securityfocus.com/bid/9145
$B$^$H$a(B:
(B
(BYahoo! Messenger $B$O!"%U%j!<$KMxMQ2DG=$J%A%c%C%H%/%i%$%"%s%H$G$"$j!"(BYahoo! 
$B$K$h$jG[I[!"J]e$G!"0U?^$9$k%3!<%I$re=q$-$5$l(B
$B$k2DG=@-$,$"$k!#(B
(B
$BLdBj$rJz$($k(B ActiveX $B%3%s%H%m!<%k$N(B CLSID $B$*$h$S967b%3!<%I$r4^$`(B Web $B%Z!<(B
$B%8$K$h$j$3$NLdBj$r0-MQ$7!"%V%i%&%6$rMxMQ$7$F$$$k%f!<%6$N8"8B$G%3!<%I$Nhttp://www.securityfocus.com/bid/9146
$B$^$H$a(B:
(B
(BSun ONE Web Server $B$O!"(BSun Microsystems $B$K$h$jJ]$,(B iPlanet $B$+$iJQ99$5$l$F$$$k!#(B
(B
(BSun $B$NJs9p$K$h$k$H!"(BWindows $B4D6-$GF0:n$7$F$$$k(B Sun ONE Web Server $B$*$h$S(B 
(BiPlanet $B$O%j%b!<%H$+$i%5!<%S%9ITG=967b$r\:Y$rL@$i$+$K$7$F$$$J$$!#$3$N(B BID 
$B$O$5$i$J$k>\:Y$,8x3+$5$lhttp://www.securityfocus.com/bid/9147
$B$^$H$a(B:
(B
(BSolaris $B$O(B Sun Microsystems $B$K$h$jG[I[$*$h$SJ]e=q$-(B
$B2DG=$G$"$k!#(B
(B
$B$3$NLdBj$O0l;~%U%!%$%k$,%;%-%e%"$G$O$J$$J}K!$G@8@.$5$l$k$3$H$K$"$k!#0l;~(B
$B%U%!%$%k$*$h$S%7%s%\%j%C%/%j%s%/$NB8:_3NG'$,IT==J,$G$"$k$?$a!"967b]$N%7%9%F%`%U%!%$%k$rGK2u$9$k$3$H$,(B
$B2DG=$H$J$k!#(B
(B
(BXsun $B$N%W%m%;%9$O!"(Bdtlogin $B$,e=q$-$9$k$3$H$,2DG=$H$J$kE@(B
$B$KN10U$9$Y$-$G$"$k!#L$8!>Z$G$O$"$k$,!"$3$l$K$h$j@x:_E*$K8"8B>:3J$,$G$-$k(B
$B2DG=@-$,$"$k!#(B
(B
(B23. Linux Kernel Concurrent Threaded Function Calls Local Denial...
(BBugTraq ID: 9148
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: Dec 02 2003
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9148
$B$^$H$a(B:
(B
$B%m!<%+%k$+$i$N967b$K$h$j%5!<%S%9ITG=>uBV$K4Y$kLdBj$,(B Linux $B%+!<%M%k$KH/(B
$B8+$5$l$F$$$k!#Js9p$K$h$k$H!"$3$NLdBj$O%9%l%C%I$G(B exit() $B4X?t!"$*$h$S(B 
(Bfork() $B4X?t$,F1;~$Kl9g!"4V0c$C$?%(%i!<$,JV$5$l$k$3$H$K5/0x$9(B
$B$k!#L$8!>Z$G$O$"$k$,!"4V0c$C$?%(%i!l9g!"7k2L$H$7$F!"8"8B$r;}$?$J$$0-0U$"$k(B
$B%f!<%6$N%"%W%j%1!<%7%g%s$,LdBj$rJz$($k%3%s%T%e!<%?$r%/%i%C%7%e$5$;!";ve$9$Y$F$NB>$N%f!<%6$KBP$9$k%5!<%S%9Ds6!$,ITG=$K$J$k2DG=@-$,$"$k!#(B
(B
$B$3$NLdBj$K4X$9$kL@3N$J5;=Q>\:Y$O8=;~E@$G$OL$>\$G$"$k$,!"$3$NLdBj$N$5$i$J(B
$B$kJ,@O$,?J$_pJs$O!"$^$@8!>Z$5$l$F$$$J$$!#$5(B
$B$i$J$k>\:Y$O!"$3$N(B BID $B$N(B $B2r7h:v>pJs$r;2>H$5$l$?$$!#(B
(B
(B24. Websense Enterprise Blocked Sites Cross-Site Scripting Vulne...
(BBugTraq ID: 9149
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Dec 03 2003
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9149
$B$^$H$a(B:
(B
(BWebsense Enterprise $B$O!"(BWeb $B%5%$%H!"%$%s%9%?%s%H%a%C%;!<%8%M%C%H%o!<%/!"(B
$B$*$h$S(B P2P $B7?(B ($B0lBP0l7?(B) $B%M%C%H%o!<%/$X$N%"%/%;%9$r@)8B$9$k$3$H$,2DG=$J(B
$B%U%#%k%?%j%s%0%=%U%H%&%'%"$G$"$k!#(B
(B
$BZMQ>pJs$r@`http://www.securityfocus.com/bid/9150
$B$^$H$a(B:
(B
(BeZphotoshare $B$O!"%M%C%H%o!<%/$r1[$($F%G%8%?%ke$N(B 10101 $BHV%]!<%H$KBgNL$N0-0U$"$k%Q%1%C%H$rAw?.$9$k$+!"Be$o$j$K2aBg(B
$B$J%G!<%?$r4^$`%Q%1%C%H$rAw?.$9$k$3$H$K$h$j!"$3$N%=%U%H%&%'%"$N%W%m%;%9%a(B
$B%b%jFb$K3NJ]:Q$N%P%C%U%!$N6-3&$r1[$($k2DG=@-$,$"$k!#(B
(B
$B$3$l$K$h$j!":G=*E*$K!"1F6A$ro$K=EMW$J$b$N$"$k!#Js9p$K$h$k$H!"967bu67$rMxMQ$7!"(B
$B1F6A$re$G%j%b!<%H$+$i0U?^$7$?%3!<%I$rhttp://www.securityfocus.com/bid/9151
$B$^$H$a(B:
(B
(BXBoard $B$O!"(BGUI $B$G%A%'%9$r%W%l%$2DG=$J%=%U%H%&%'%"$G$"$k!#$3$N%=%U%H%&%'(B
$B%"$O!"(B'pxboard' $B$H$$$&%9%/%j%W%H$rF1:-$7$F$*$j!"$3$N%9%/%j%W%H$O0l;~%U%!(B
$B%$%k$X$NI8=`F~NO$rJ]B8$9$k$h$&$K:n$i$l$F$*$j!"%f!<%6$,A02s$N%2!<%`$r%m!<(B
$B%I$7$?$j!"$=$NB>$NA`:n$r9T$&$3$H$,2DG=$H$J$k!#(B
(B
$BJs9p$K$h$k$H!"$3$N%9%/%j%W%H$N%f!<%F%#%j%F%#$O!"0l;~%U%!%$%k$N:n@.J}K!$,(B
$B%;%-%e%"$G$J$$$3$H$K5/0x$7$F!"%7%s%\%j%C%/%j%s%/$rMxMQ$7$?967b$r5,B'$r;HMQ$7$F$$(B
$B$k$3$H$K5/0x$9$k!#(B
(B
$B7k2L$H$7$F!"967bH$7$F$$$k%7%s(B
$B%\%j%C%/%j%s%/$r(B /tmp $B%G%#%l%/%H%j$KG[CV$9$k$3$H$,2DG=$K$J$k$H?d;!$5$l$k!#(B
$B$3$l$K$h$j!";ve!"M=4|$7$F$$$k%U%!%$%k$G$O$J$/!"$3$N%j%s%/$K$h$C$F;2>H(B
$B$5$l$?%U%!%$%k$KBP$9$kA`:n$r$3$N%9%/%j%W%H$O:3J$G$-$k2DG=@-$,$"$k$H?d;!$5$l(B
$B$k!#(B
(B
$B$3$NLdBj$NK\http://www.securityfocus.com/bid/9152
$B$^$H$a(B:
(B
(BLinksys WRT54G $B$O!"L5@~%k!<%?%"%W%i%$%"%s%9$G$"$j!"Mh$k$Y$-(B 54Mbps $BL5@~(B
$B%M%C%H%o!<%/4p=`$rK~$?$9$h$&$K@_7W$5$l$F$$$k!#$3$N%k!<%?$K$O!"DL>o$O$3$N(B
$B%k!<%?$r4IM}$9$k$?$a$K;HMQ$5$l$k(B Web $B%5!<%P5!G=$,Ds6!$5$l$F$$$k!#(B
(B
$B$3$N%k!<%?$O!"(B80 $BHV%]!<%H(B $B$"$k$$$O(B 8080 $BHV%]!<%H$G6u$N(B HTTP GET $B%j%/%(%9(B
$B%H$r=hM}$9$k:]$K!"%5!<%S%9ITG=>uBV$K4Y$k5?$$$,$"$k$HJs9p$5$l$F$$$k!#Js9p(B
$B$K$h$k$H!"1F6A$ro$N5!G=@-$r2sI|$9$k$?$a$K$O%"%W%i%$(B
$B%"%s%9$NEE8;$r:FEjF~$9$kI,MW$,$"$k!#(B
(B
$B$3$NLdBj$rMxMQ$9$k967b$K$h$j!"967b$N%U%!!<(B
$B%`%&%'%"%P!<%8%g%s$bF1MM$K1F6A$rhttp://www.securityfocus.com/bid/9153
$B$^$H$a(B:
(B
(Brsync $B$O!"%M%C%H%o!<%/$r2p$7$F%U%!%$%k!"$*$h$S%G%#%l%/%H%j9=B$$rF14|$5$;(B
$B$k$?$a$KMxMQ$5$l$k!#$3$N%=%U%H%&%'%"$OB?$/$N>l9g!"(Brsync $B%5!<%P$X$N(B 
(Banonymous $B%"%/%;%9$r2p$7$F!"(BFTP $B%_%i!<%5%$%H$rJ]$N(B Unix OS $B>e$GF0:n$9$k!#(B
(B
$B$3$N%=%U%H%&%'%"$O!"%G!<%b%s%b!<%I$GF0:n$7$F$$$k:]$K!"Hs8x3+$N%R!<%W%*!<(B
$B%P!<%U%m!<$,H/@8$9$kLdBj$rJz$($F$$$k5?$$$,$"$k$HJs9p$5$l$F$$$k!#Js9p$K$h(B
$B$k$H!"$3$NLdBj$O%j%b!<%H$+$i967b2DG=$G$"$j!"G$0U$N%3!<%I$rl9g!"$3$NLdBj$X$N967b$,$h$jMF0W$K$J$k$HJs9p$5$l$F$$$k!#(B
(B
$B$3$NLdBj$O!"(BBID 9138 $B$G<($5$l$F$$$k(B Linux Kernel do_brk $B4X?t$N6-3&%A%'%C(B
$B%/$KM3Mh$9$kLdBj$HJ;MQ$7$F0-MQ$5$l$F$$$k$H$NJs9p$b$"$k!#%f!<%6$K$O(B BID
(B9138 $B$G<($5$l$F$$$kLdBj$r2r7h$9$k=$@5%W%m%0%i%`$rE,MQ$9$k$h$&4+9p$,=P$5(B
$B$l$F$$$k!#(B
(B
$B$3$N(B BID $B$O!"$3$NLdBj$K4X$9$k$5$i$J$k>pJs$,8x3+$5$l$?http://www.securityfocus.com/bid/9154
$B$^$H$a(B:
(B
(BLinux kernel 2.4 $B$O%a%b%jFbMF$,O31L$9$kLdBj$rJz$($F$$$k5?$$$,$"$k$HJs9p(B
$B$5$l$F$$$k!#Js9p$K$h$k!"$3$NLdBj$O(B kernel real time clock (RTC) $B%$%s%?!<(B
$B%U%'%$%9$N=hM}$K$FH/@8$7!"7k2L$H$7$F!"(BRTC $B$,FI$_9~$^$l$k:]$K%+!<%M%k%a%b(B
$B%j%9%?%C%/$N%G!<%?$,%f!<%64D6-$KO31L$9$k2DG=@-$,$"$k!#O31L$9$k%G!<%?$O%i(B
$B%s%@%`$KA*Br$5$l$k62$l$,$"$k!#(B
(B
$B$3$NLdBj$rMxMQ$9$k967b$K$h$j!"967bZMQ>pJs$H$$$C$?@x:_E*(B
$B$K=EMW$J%G!<%?$r3+<($9$k2DG=@-$,$"$k!#(B
(B
$B$3$NLdBj$K4X$9$k>\:Y$O8=;~E@$G$OL$>\$G$"$k!#$3$N(B BID $B$O$5$i$J$k>pJs$,8x(B
$B3+$5$l$N%P!<%8%g%s$N(B
$B%+!<%M%k$K$bF1MM$K1F6A$r5Z$\$92DG=@-$,$"$kE@$KN10U$9$Y$-$G$"$k!#(B
(B
(B30. Alan Ward A-Cart Register.ASP Script Injection Vulnerability
(BBugTraq ID: 9155
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Dec 04 2003
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9155
$B$^$H$a(B:
(B
(BAlan Ward's A-Cart $B$O(B Web $B%V%i%&%6$+$iMxMQ2DG=$J%7%g%C%T%s%0%+!<%H%"%W%j(B
$B%1!<%7%g%s$G$"$k!#$3$N%=%U%H%&%'%"$O(B ASP $B$rMxMQ$7$F3+H/$5$l$F$*$j!"(B
(BMicrosoft Windows $B$,2TF0$7$F$$$k%5!<%P>e$GF0:n$9$k(B Microsoft Access $B$HO"(B
$B7H$9$k$h$&@_7W$5$l$F$$$k!#(B
(B
$B$3$N%=%U%H%&%'%"$K$h$k%U%)!<%`F~NO$N=hM}$KLdBj$,H/8+$5$l$F$$$k!#$3$l$K$h(B
$B$j!"LdBj$N$"$k%5%$%H$K(B HTML $B%?%0$d%9%/%j%W%H%3!<%I$NA^F~$,2DG=$K$J$k$H?d(B
$B;!$5$l$k!#(B
(B
$B$3$NLdBj$O%U%)!<%`NN0h$X$NF~NOCM$N%A%'%C%/$KB8:_$9$k!#%G!<%?$,(B 
(Bregister.asp $B%9%/%j%W%H$NFCDj$NNN0h$KF~NO$5$l$k:]!"$3$N%9%/%j%W%H$OF~NO(B
$BCM$NBEEv@-3NG'$*$h$S@x:_E*$K4m81$J%G!<%?$KBP$9$kL5322=$r==J,$K9T$o$J$$!#(B
$B967b@\%W%m%0%i%`$rA^F~$9(B
$B$k2DG=@-$,$"$j!"$3$N%=%U%H%&%'%"$G9=@.$5$l$k%7%g%C%T%s%0%5%$%H$HF13J$N%;(B
$B%-%e%j%F%#%3%s%F%-%9%H$G!"967bBP>]$H$J$k%f!<%6$N%V%i%&%6Fb$G%W%m%0%i%`$r(B
$B2r&MQ%5%$%H>e$KB8:_$9$kBg5,LO$JLdBj$O!"JFO"K.$K$h(B
$B$k>CHqpJsD4::$r:F3+$9$k$b$N$H$J$C$?!#(B
(B
(Bhttp://www.securityfocus.com/news/7581
(B
(B2. Heckenkamp Challenges Computer Ban
$BCxhttp://www.securityfocus.com/news/7576
(B
(B3. Nachi worm infected Diebold ATMs
$BCxhttp://www.securityfocus.com/news/7517
(B
(B4. NatWest warns of dodgy email
$BCxhttp://www.securityfocus.com/news/7582
(B
(B5. New computer virus variant floods Web sites of anti-spam act...
$BCxhttp://www.securityfocus.com/news/7575
(B
(B6. Retail hacker sentenced to 1 1/2 years in prison
$BCxhttp://www.securityfocus.com/news/7567
(B
(B
(BIV. SECURITYFOCUS TOP 6 TOOLS
(B-----------------------------
(B1. ThePacketMaster  v1.1.0
$B:nhttp://www.thepacketmaster.com/
$BF0:n4D6-(B: Linux
$B$^$H$a(B:
(B
(BThePacketMaster Linux Security Server $B$O!"(BCD-ROM $B$+$i5/F0$7!"?/F~8!::$r(B
$Bhttp://www.commnav.com/products/systems_navigator.php
$BF0:n4D6-(B: IRIX$B!"(BLinux$B!"(BSolaris$B!"(BSunOS
$B$^$H$a(B:
(B
(BSystems Navigator $B$O!"(BCommNav $Bhttp://www.fwbuilder.org/
$BF0:n4D6-(B: FreeBSD$B!"(BLinux$B!"(BSolaris
$B$^$H$a(B:
(B
(BFirewall Builder $B$O!"(BGUI $B$*$h$S!"MM!9$J4D6-8~$1$N0lO"$N%]%j%7!<%3%s%Q%$(B
$B%i$G9=@.$5$l$F$$$^$9!#$3$N%=%U%H%&%'%"$O!"%*%V%8%'%/%H$N%G!<%?%Y!<%9$NJ](B
$B]%b%G%k$H6&DL$N(B GUI $B$rDs6!$7(B
$B$^$9!#$3$N%=%U%H%&%'%"$O!"8=:_!"(Biptables$B!"(Bipfilter$B!"$*$h$S(B OpenBSD pf $B$r(B
$B%5%]!<%H$7$F$$$^$9!#(B
(B
(B4. JSch v0.1.11
$B:nhttp://www.jcraft.com/jsch/
$BF0:n4D6-(B: OS $B$K0MB8$7$J$$(B
$B$^$H$a(B:
(B
(BJSch $B$O(B SSH2 $B$N(B pure Java $BAw!"(BX11 $BE>Aw!"%U%!%$%kE>AwEy$,MxMQ$G$-$k(B
$B$h$&$K$J$j$^$9!#$^$?!"$3$N%=%U%H%&%'%"$N5!G=$r$4<+?H$N(B Java $B%W%m%0%i%`$X(B
$BAH$_F~$l$k$3$H$,2DG=$G$9!#(B
(B
(B5. Yet Another antiVirus Recipe v1.8.3
$B:nhttp://agriroot.aua.gr/~nikant/nkvir/
$BF0:n4D6-(B: N/A
$B$^$H$a(B:
(B
(BYet Another antiVirus Recipe $B$O!"B?$/$N0lHLE*$JEE;R%a!<%k%o!<%`$r%U%#%k(B
$B%?%j%s%0$9$k$N$KM-MQ$J(B procmail $B$G$9!#$3$N%=%U%H%&%'%"$O!"(Bbase-64 $B%7%0%M(B
$B%A%c$r;}$D%o!<%`(B (Klez$B!"(BHybris$B!"$*$h$S(B BugBear $B$J$I(B)$B!"(BHTML IFRAME $B$rMxMQ(B
$B$9$k967b!"(BCLSID $B$rMxMQ$7$F3HD%;R$r1#$9967b!"(B-XML $B%3!<%I%Y!<%9$rMxMQ$9$k(B
$B967b!"http://dansguardian.org/
$BF0:n4D6-(B: Linux
$B$^$H$a(B:
(B
(BDansGuardian $B$O!"A4$F$N%U%'%C%A$r9T$&$?$a$K(B Squid $B$r;HMQ$9$k(B Web $B%3%s%F(B
$B%s%D%U%#%k%?%j%s%0%W%m%-%7$G$9!#$3$N%=%U%H%&%'%"$O!"%U%l!<%:%^%C%A%s%0!"(B
$B%U%!%$%k3HD%;R%^%C%A%s%0!"(BMIME $B%?%$%W%^%C%A%s%0!"(BPICS $B%U%#%k%?%j%s%0!"$*(B
$B$h$S(B URL/$B%I%a%$%s%V%m%C%-%s%0$r4^$`J#?t$NJ}K!$r;HMQ$7$F%U%#%k%?%j%s%0$r(B
$B9T$$$^$9$,!"J}K!$O$3$l$i$K@)8B$5$l$F$$$k$o$1$G$O$"$j$^$;$s!#$3$N%=%U%H%&%'(B
$B%"$O!"%f!<%6L>!"%I%a%$%sL>!"H/?.85(B IP $BEy$r4^$`FCDj$NH=CG4p=`$K$h$k%U%#%k(B
$B%?%j%s%0$rDd;_$9$k$3$H$,2DG=$G$9!#I}9-$$@_Dj$,2DG=$J%m%05!G=$K$h$jFI$_$d(B
$B$9$$7A<0$N%m%0$r@8@.$7$^$9!#$3$N%=%U%H%&%'%"$K$O!"%F%-%9%H$N$_$N%m%0%Z!<(B
$B%8$r5-O?$9$k%*%W%7%g%s$,$"$j!"$=$l$K$h$C$F!"(B($BKh%Z!<%88=$l$k2hA|$N$h$&$J(B) 
$B>iD9$J>pJs$rCx$7$/8:>/$7$^$9!#(B
(B
(B--
$BLu(B: $B@>B<9/MN(B(NISHIMURA Yasuhiro)$B!"A}EDCR0l(B(MASUDA Tomokazu)$B!"(B
$B>.>>%_%5(B(KOMATSU Misa)$B!"GOCeFF(B(UMAKI Atsushi)$B!"(B
$B3QED8<;J(B(KAKUDA Motoshi)$B!"@P86J8;R(B(ISHIHARA Ayako)$B!"(B
$B>!3$D>?M(B(KATSUMI Naoto)$B!"9b66=SB@O:(B(TAKAHASHI Shuntarou)
$B4F=$(B: $B@>B<9/MN(B(NISHIMURA Yasuhiro)
(BLAC Co., Ltd.
(Bhttp://www.lac.co.jp/security/
Attachment: smime.p7s
Description: S/MIME cryptographic signature
Prev by Date: SecurityFocus Newsletter #225 2003-11-24->2003-11-28

Next by Date: SecurityFocus Newsletter #227 2003-12-8->2003-12-12

Previous by thread: SecurityFocus Newsletter #225 2003-11-24->2003-11-28

Next by thread: SecurityFocus Newsletter #227 2003-12-8->2003-12-12

Index(es):

Date

Thread