[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
SecurityFocus Newsletter #229 2003-12-22->2003-12-26

To: bugtraq-jp@xxxxxxxxxxxxxxxxx
Subject: SecurityFocus Newsletter #229 2003-12-22->2003-12-26
From: Tomokazu Masuda <tomokazu.masuda@xxxxxxxxx>
Date: Wed, 21 Jan 2004 18:43:15 +0900
$BA}ED(B@$B%i%C%/$G$9!#(B
(B
(BSecurityFocus Newsletter $BBh(B 229 $B9f$NOBLu$r$*FO$1$7$^$9!#(B
$BLu$N$J$$9`L\$K$D$$$F$O!VF|K\8lLu$J$7!W$H$7$F6hJL$7$F$"$j$^$9!#(B
(B
(B--------------------------------------------------------------------------
(BBugTraq-JP $B$K4X$9$k(B FAQ($BF|K\8l(B):
(Bhttp://www.securityfocus.com/popups/forums/bugtraq-jp/faq.shtml
$B!&(BSecurityFocus Newsletter $B$NOBLu$O(B BugTraq-JP $B$G0lH$/$@$5$$(B
(B--------------------------------------------------------------------------
(B--------------------------------------------------------------------------
(BSecurityFocus Newsletter $B$K4X$9$k(BFAQ($B1Q8l(B):
(Bhttp://www.securityfocus.com/popups/forums/securityfocusnews/intro.shtml
(BBugTraq $B$K4X$9$k(B FAQ($B1Q8l(B):
(Bhttp://www.securityfocus.com/popups/forums/bugtraq/faq.shtml
(B--------------------------------------------------------------------------
$B0zMQ$K4X$9$kHw9M(B:
$B!&$3$NOBLu$O(B SecurityFocus $B$N5v2D$r3t<02qe$G9T$o$l$F$$$^$9!#(B
$B!&(BSecurityFocus Newsletter $B$NOBLu$r(B Netnews, Mailinglist, World Wide Web,
(B  $B=q@R(B, $B$=$NB>$N5-O?G^BN$G0zMQ$5$l$k>l9g$K$O%a!<%k$NA4J80zMQ$r$*4j$$$7$^$9!#(B
$B!&F|K\8lHG%K%e!<%9%l%?!<(B 1 $B9f$+$i(B 3 $B9f$^$G$K$O$3$NHw9M$,IU$$$F$$$^$;$s$,!"(B
(B  $B=`MQ$9$k$b$N$H$7$^$9!#(B
$B!&$^$?!"(BSecurityFocus $BDs6!$N(B BugTraq-JP $B%"!<%+%$%V(B [*1] $B$X$N$$$+$J$k7A<0$N(B
(B  $B%O%$%Q!<%j%s%/$b>e5-$K=`$8$F$/$@$5$$!#(B
(B1) http://online.securityfocus.com/archive/79
(B--------------------------------------------------------------------------
$B$3$NOBLu$K4X$9$kHw9M(B:
$B!&$3$NOBLu$NE,MQ@.2L$K$D$$$F3t<02ql9g!"(BBugTraq-JP $B$X(B Errata $B$H$7$F=$@5(B
(B  $BHG$r$4Ej9FD:$/$+!"4F=$l9g$K$O=$@5HG$r$G$-$k$@$1?WB.$KH/9T$7$^$9!#(B
(B--------------------------------------------------------------------------
(BThis translation is encoded and posted in ISO-2022-JP.
(B
$B86HG(B:
(BDate: Tue, 30 Dec 2003 11:26:13 -0700 (MST)
(BMessage-ID: <Pine.LNX.4.58.0312301125180.12718@xxxxxxxxxxxxxxxxxxxxxx>
(B
(BSecurityFocus Newsletter #229
(B-----------------------------
(B
(BThis Issue is Sponsored by: SPIDynamics
(B
(BI. FRONT AND CENTER($BF|K\8lLu$J$7(B)
(B     1. Checklist for Deploying an IDS
(B     2. A Very Small Step for Music-Kind
(BII. BUGTRAQ SUMMARY
(B     1. OpenBSD Tcpdump Remote Denial of Service Vulnerability
(B     2. Apple MacOS X AppleFileServer Unspecified Vulnerability
(B     3. Apple MacOS X fs_usage Unspecified Local Privilege Escalatio...
(B     4. Apple MacOS X  ASN.1 Decoding Unspecified Remote Denial Of S...
(B     5. BES-CMS Multiple Module File Include Vulnerability
(B     6. Xoops MyLinks Myheader.php Cross-Site Scripting Vulnerabilit...
(B     7. BN Soft BoastMachine Comment Form HTML Injection Vulnerabili...
(B     8. ProjectForum find Request Denial of Service Vulnerability
(B     9. ProjectForum HTML Injection Vulnerability
(B     10. DCAM WebCam Server Personal Web Server Directory Traversal V...
(B     11. RhinoSoft Serv-U FTP Server Insecure INI File Permissions Vu...
(B     12. osCommerce products_id URI Parameter SQL Injection Vulnerabi...
(B     13. PServ Web Server Directory Traversal Vulnerability
(B     14. osCommerce manufacturers_id Parameter Cross-Site Scripting V...
(B     15. Microsoft Internet Explorer File Download Warning Bypass Vul...
(B     16. Opera Relative Path Directory Traversal File Corruption Vuln...
(B     17. Sun Solaris tcsh ls-F Builtin Unspecified Privilege Escalati...
(B     18. Opera Browser URI Display Obfuscation Weakness
(B     19. iSoft-Solutions QuikStore Shopping Cart store Parameter Path...
(B     20. iSoft-Solutions QuikStore Shopping Cart template Parameter D...
(B     21. Red Hat Linux 2.4 Kernel Multiple Potential Vulnerabilities
(B     22. Xlight FTP Server PASS Command Remote Buffer Overflow Vulner...
(B     23. My Little Forum Email.PHP Cross-Site Scripting Vulnerability
(B     24. Webfroot Shoutbox Viewshoutbox.PHP Cross-Site Scripting Vuln...
(B     25. phpBB Privmsg.PHP Cross-Site Scripting Vulnerability
(B     26. ViewCVS Viewcvs.py Cross-Site Scripting Vulnerability
(B     27. KnowledgeBuilder Remote File Include Vulnerability
(B     28. Psychoblogger Multiple Cross-Site Scripting Vulnerabilities
(B     29. Psychoblogger Multiple SQL Injection Vulnerabilities
(B     30. Microsoft Internet Explorer For Mac HTTP Referer Information...
(B     31. Squirrelmail G/PGP Encryption Plugin Remote Command Executio...
(B     32. GNU Indent Local Heap Overflow Vulnerability
(B     33. Surfboard httpd Remote Buffer Overflow Vulnerability
(B     34. OpenBB Index.PHP Remote SQL Injection Vulnerability
(B     35. Web Merchant Services Storefront Shopping Cart login.asp SQL...
(B     36. Apache mod_php Module File Descriptor Leakage Vulnerability
(BIII. SECURITYFOCUS NEWS ARTICLES
(B     1. Online crime up in 2003
(B     2. Chats led to Acxiom hacker bust
(B     3. Secret Service airbrushes aerial photos
(B     4. Electronic voting firm acknowledges hacker break-in
(B     5. CIA gadget-museum: robot fish, pigeon camera, jungle microph...
(B     6. Victory for CPRM: SD cards overtake Compact Flash
(BIV. SECURITYFOCUS TOP 6 TOOLS
(B     1. Fwall 0.1.4-2
(B     2. ClairVoyanT SysAdmin (CVTSA) v0.2
(B     3. OpenProtect  v5.0.1.2
(B     4. Fingerprint Verification System v0.1.0
(B     5. Socks Server 5 v2.4mr2
(B     6. GNU Transport Layer Security Library v1.0.3
(B
(BI. FRONT AND CENTER($BF|K\8lLu$J$7(B)
(B---------------------------------
(B
(B1. OpenBSD Tcpdump Remote Denial of Service Vulnerability
(BBugTraq ID: 9263
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Dec 20 2003
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9263
$B$^$H$a(B:
(B
(Btcpdump $B$O!"%U%j!<$KMxMQ2DG=$J!"%*!<%W%s%=!<%9$N%M%C%H%o!<%/%b%K%?%j%s%0%D(B
$B!<%k$G$"$k!#(B
(B
$BJs9p$K$h$k$H!"$3$N%=%U%H%&%'%"$O!"0lIt$NuBV$K4Y$kLdBj$,B8:_$9$k!#(B0xff$B!"(B0x02 $B$,4^$^$l$?F~G0$KAH$_N)$F$i$l(B
$B$?%Q%1%C%H$r!"LdBj$rJz$($k%P!<%8%g%s$N$3$N%=%U%H%&%'%"$rZ$G$O$"$k$,!"$3$NLdBj$K$h$j967be$G!"0U?^$9$k%3(B
$B!<%I$Ne$Ge$NB>$N%P!<%8%g%s$bF1MM$K1F6A$r(B
$B\(B
$B8xI=F|(B: Dec 20 2003
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9264
$B$^$H$a(B:
(B
(BAppleFileServer $B$O!"(BApple File Protocol $B%5!<%P$G$"$k!#(B
(B
$B%Y%s%@$K$h$kJs9p$K$h$k$H!"$3$N%=%U%H%&%'%"$K$O!">\:YITL@$N%;%-%e%j%F%#>e$N(B
$BLdBj$,B8:_$9$k!#Js9p$K$h$k$H!"$3$N%=%U%H%&%'%"$O!"FCJL$KAH$_N)$F$i$l$?%j%/(B
$B%(%9%H$rE,@Z$K=hM}$7$J$$!#%Y%s%@$K$h$j>\:Y$,H/I=$5$l$F$$$J$$$?$a!"$3$NLdBj(B
$B$rMxMQ$9$k967b$N1F6AHO0O$O8=;~E@$G$OL$>\$G$"$k!#L$8!>Z$G$O$"$k$,!"$3$NLdBj(B
$B$O%5!<%S%9ITG=>uBV$,0z$-5/$3$5$l$k!"$"$k$$$O!"=EMW$J>pJs$N3+<($K7R$,$k2DG=(B
$B@-$,$"$k!#(B
(B
$B$3$N7Y9p$N1F6A$O!"$3$NLdBj$,5Z$\$92DG=@-$N$"$k1F6AHO0O$rH?1G$7$?>e$G7hDj$5(B
$B$l$k$3$H$K$J$k!#$5$i$J$k>pJs$,F~\:Y$@$1$G$O$J$/1F(B
$B6A%l%Y%k$bE,59JQ99$5$l$kM=Dj$G$"$k!#(B
(B
(BApple Jaguar for Mac OS X 10.2.8/Mac OS X Server 10.2.8$B!"$*$h$S(B Panther 
(Bfor Mac OS X 10.3.2/Mac OS X Server 10.3.2 $B$,$3$NLdBj$rJz$($F$$$k$HJs9p$5(B
$B$l$F$$$k!#(B
(B
(B3. Apple MacOS X fs_usage Unspecified Local Privilege Escalatio...
(BBugTraq ID: 9265
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: Dec 20 2003
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9265
$B$^$H$a(B:
(B
(Bfs_usage $B$O!"%U%!%$%k%7%9%F%`3hF0$K4X$7$F%7%9%F%`%3!<%k;HMQ>u67$rI=<($9$k(B 
(BUnix $B%f!<%F%#%j%F%#$G$"$k!#(B
(B
$BJs9p$K$h$k$H!"(BApple MacOS X $B$K$*$1$k(B fs_usage $B$Ne$G8"8B(B
$B>:3J$r0z$-5/$3$5$l$k>\:YITL@$JLdBj$,B8:_$9$k!#$3$NLdBj$K$h$j!"%m!<%+%k$N%f(B
$B!<%6$O8"8B>:3J$,2DG=$G$"$k$H?d;!$5$l$k!#$3$N%=%U%H%&%'%"$Oe$N6<0R$r>7$/7k2L$H$J$k2DG=@-$,$"$k!#(B
(B
$B$3$NLdBj$K4X$9$k>\:Y$,ITB-$7$F$$$k$?$a!"$3$NLdBj$K4X$9$k$5$i$J$k>pJs$O8=;~(B
$BE@$G$O8x3+$5$l$F$$$J$$!#K\(B BID $B$O$5$i$J$k>pJs$,8x3+$5$lhttp://www.securityfocus.com/bid/9266
$B$^$H$a(B:
(B
$BJs9p$K$h$k$H!"(BApple MacOS X $B$KLdBj$,B8:_$9$k!#$3$NLdBj$O!"8x3+804pHW(B (PKI)
(B $BMQ$N(B ASN.1 $B%7!<%1%s%9$N=hM}$,ITE,@Z$G$"$k$3$H$K5/0x$7$F$*$j!"7k2L$H$7$F!"(B
$B%j%b!<%H$N967buBV$r0z$-5/$3$92DG=@-$,$"$k!#$3$NLdBj$O!"@x(B
$B:_E*$K!"LdBj$rJz$($k%=%U%H%&%'%"$N$N%Y%s%@$K$b1F6A$r5Z(B
$B$\$92DG=@-$,$"$k$,!"$3$l$O8=;~E@$G$OL$>\$G$"$k!#(B
(B
$B>\:Y$,ITB-$7$F$$$k$?$a!"$3$NLdBj$K4X$9$k$5$i$J$k>pJs$O8=;~E@$G$O8x3+$5$l$F(B
$B$$$J$$!#K\(B BID $B$O$5$i$J$k>pJs$,8x3+$5$lhttp://www.securityfocus.com/bid/9268
$B$^$H$a(B:
(B
(BBES-CMS 0.4 rc3$B!"(BBES-CMS 0.5 rc3 $B$O!"(BPHP $B$rMxMQ$7$F3+H/$5$l$?!"%3%s%F%s%D(B
$B4IM}%7%9%F%`$G$"$k!#(B
(B
$BJs9p$K$h$k$H!"$3$N%=%U%H%&%'%"$K$O!"967be$G$N%P!<%8%g%s$bF1MM$K1F6A$rhttp://www.securityfocus.com/bid/9269
$B$^$H$a(B:
(B
(BXoops $B$O%*!<%W%s%=!<%9$G$"$j!"%U%j!<$KMxMQ2DG=$J(B Web $B%]!<%?%k%=%U%H%&%'(B
$B%"$G$"$k!#$3$N%=%U%H%&%'%"$O%*%V%8%'%/%H;X8~$N(B PHP $B$K$h$C$F3+H/$5$l$F$*(B
$B$j!"(BMySQL $B$r%P%C%/%(%s%I%G!<%?%Y!<%9$H$7$FMxMQ$7$F$$$k!#$5$i$K$OB?$/$N(B
(BUNIX $B$d(B Linux $B$GF0:n2DG=$G$"$k!#(B
(B
$B$3$N%=%U%H%&%'%"$O!"(Bmylinks $B%b%8%e!<%k$KB8:_$9$k(B 'myheader.php' $B%9%/%j%W%H(B
$B$K$*$$$F!"%/%m%9%5%$%H%9%/%j%W%F%#%s%0$NLdBj$rJz$($F$$$k5?$$$,$"$k!#$3$NLd(B
$BBj$N860x$O!"F0E*$K@8@.$5$l$k(B Web $B%Z!<%8$KAH$_9~$^$l$k!"(BURI $B%Q%i%a!<%?$r2p(B
$B$7$FM?$($i$l$?F~NOCM$KBP$9$kL5322=$,IT==J,$G$"$k$3$H$G$"$k!#6qBNE*$K$O!"$3(B
$B$N(B 'url' $B%Q%i%a!<%?$,$3$NLdBj$K$h$k1F6A$rZMQ>pJs$N@`]$H$J$k%f!<%6$K$h$j$I$N$h$&$K(B
$B2r$N%P!<%8%g%s$b1F(B
$B6A$rhttp://www.securityfocus.com/bid/9270
$B$^$H$a(B:
(B
(BBoastMachine $B$O!"(Bblog $B$d5-;v$J$I$rH/9T$9$k$?$a$K;HMQ$5$l$k(B Web $B%$%s%?!<%U(B
$B%'%$%9$rHw$($?%"%W%j%1!<%7%g%s$G$"$k!#$3$N%=%U%H%&%'%"$O!"(BPHP $B$rMxMQ$7$F3+(B
$BH/$5$l$F$$$k!#(B
(B
$B$3$N%=%U%H%&%'%"$K$O!"%j%b!<%H$N967bl9g!"967bZMQ>pJs(B
$B$N@`$N967b$b2DG=$G$"$k!#(B
(B
$B$3$NLdBj$O!"(BBoastMachine 2.6 $B$KB8:_$9$k$HJs9p$5$l$F$$$k$,!"B>$N%P!<%8%g%s(B
$B$bF1MM$K1F6A$rhttp://www.securityfocus.com/bid/9271
$B$^$H$a(B:
(B
(BProjectForum $B$O!"(BWeb $B%$%s%?!<%U%'%$%9$rHw$($?EE;R7G<(HD5!G=$rDs6!$9$k%"%W(B
$B%j%1!<%7%g%s$G$"$k!#(B
(B
$B$3$N%=%U%H%&%'%"$K$O!"%j%b!<%H$N967buBV$r0z$-5/$3$9$3$H$,(B
$B2DG=$G$"$k$H?d;!$5$l$kLdBj$,H/8+$5$l$F$$$k!#$3$NLdBj$O!"(B'projectforum.exe'
(B $B$KB8:_$9$k$HJs9p$5$l$F$$$k!#Js9p$K$h$k$H!"967bl9g!"%j%b!<%H$N967be!"B>$N@5Ev$J%f!<%68~$1$N%5!<%S%9$rMxMQITG=>uBV$K(B
$B4Y$i$;$k$3$H$,2DG=$G$"$k$H?d;!$5$l$k!#L$8!>Z$G$O$"$k$,!"$3$NLdBj$NK\http://www.securityfocus.com/bid/9272
$B$^$H$a(B:
(B
(BProjectForum $B$O!"(BWeb $B%$%s%?!<%U%'%$%9$rHw$($?EE;R7G<(HD5!G=$rDs6!$9$k%"%W(B
$B%j%1!<%7%g%s$G$"$k!#(B
(B
$B$3$N%=%U%H%&%'%"$K$O!"%j%b!<%H$N967bl9g!"967bZMQ>pJs(B
$B$N@`$N967b$b2DG=$G$"$k!#(B
(B
(BProjectForum 8.4.2.1 $B0JA0$N%P!<%8%g%s$,!"$3$NLdBj$rJz$($F$$$k5?$$$,$"$k$H(B
$BJs9p$5$l$F$$$k!#(B
(B
$B$3$N%=%U%H%&%'%"$HF1$8%(%s%8%s$rMxMQ$9$kF1pJs$,8x3+$5$lhttp://www.securityfocus.com/bid/9273
$B$^$H$a(B:
(B
(BDCAM WebCam server $B$O!"(BVisual Basic $B$rMxMQ$7$F3+H/$5$l$?(B Web $B%+%a%i%5!<%P(B
$B$G$"$k!#$3$N%=%U%H%&%'%"$K$O!"(BPersonal Web Server (PWS) $B$H8F$P$l$k(BHTTP Web
(B $B%5!<%P$,AH$_9~$^$l$F$$$k!#(B
(B
$B$3$N%=%U%H%&%'%"$N(B Personal Web Server $B$K$O!"%j%b!<%H$N967b(B
$BA[%k!<%H%G%#%l%/%H%j$NHO0O30$K$"$k>pJs$K%"%/%;%92DG=$H$J$kLdBj$,B8:_$9$k$H(B
$BJs9p$5$l$F$$$k!#$3$NLdBj$O!"%f!<%6$NM?$($k%G!<%?$NL5322=$,IT==J,$G$"$k$3$H(B
$B$K5/0x$9$k!#$3$NLdBj$K$h$j!"%j%b!<%H$N967bA[%k!<%H%G%#%l%/%H%j$NHO0O30$K%"%/%;%9$9$k$3$H$,2DG=$G$"$k$H?d(B
$B;!$5$l$k!#(B
(B
$B$3$NLdBj$rMxMQ$9$k967b$K@.8y$7$?>l9g!"%j%b!<%H$N967bpJs(B
$B$K%"%/%;%92DG=$K$J$k$H?d;!$5$l$k!#(B
(B
(BDCAM WebCam server 8.2.5 $B0JA0$N%P!<%8%g%s$,$3$NLdBj$rJz$($F$$$k5?$$$,$"$k(B
$B$HJs9p$5$l$F$$$k!#(B
(B
(B11. RhinoSoft Serv-U FTP Server Insecure INI File Permissions Vu...
(BBugTraq ID: 9274
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: Dec 22 2003
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9274
$B$^$H$a(B:
(B
(BRhinoSoft Serv-U FTP Server $B$O!"(BMicrosoft Windows $B4D6-$G;HMQ$5$l$k$h$&$K@_(B
$B7W$5$l$F$$$k!#(B
(B
$BJs9p$K$h$k$H!"$3$N%=%U%H%&%'%"$O!"%;%-%e%"$G$J$$%U%!%$%k%Q!<%_%C%7%g%s$,@_(B
$BDj$5$l$F$$$kLdBj$rJz$($F$$$k5?$$$,$"$k!#6qBNE*$K$O!"@_Dj%U%!%$%k(B "
(BServUDaemon.ini" $B$,%G%U%)%k%H$G!"%;%-%e%"$G$J$$%Q!<%_%C%7%g%s$,@_Dj$5$l$F(B
$B:n@.$5$l$F$$$k!#$3$l$K$h$j!"A4$F$N%m!<%+%k$N%f!<%6$O!"(B"ServUDaemon.ini" $B%U(B
$B%!%$%k$KBP$7$FJQ99$r2C$($k$3$H$,2DG=$G$"$k!#Js9p$K$h$k$H!"(B"Maintenance=
(BSystem" $B$N9T$r2C$($k$3$H$G!"967b:3J$5$;$k$?$a!"$3$NLdBj$rMxMQ$9$k2DG=@-$,$"$k!#(B
(B
(BRhinoSoft Serv-U FTP Server 4.1.0.0 $B$,$3$NLdBj$N1F6A$r$N%P!<%8%g%s$b1F6A$rhttp://www.securityfocus.com/bid/9275
$B$^$H$a(B:
(B
(BosCommerce $B$O!"(BPHP $B$rMxMQ$7$F3+H/$5$l$?!"%*!<%W%s%=!<%9$NEE;R>&pJsO3$($$!"$^$?$OB>$N1F6A$r0z$-5/(B
$B$3$9$H?d;!$5$l$k!#(B
(B
$B967buBV$K4Y$i$;$k2DG=@-$,$"$k$HJs9p$5$l$F$$$k!#(B
(B
(B13. PServ Web Server Directory Traversal Vulnerability
(BBugTraq ID: 9276
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Dec 22 2003
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9276
$B$^$H$a(B:
(B
(BpServ $B$O%U%j!<$KMxMQ2DG=$J!"%*!<%W%s%=!<%9$N(B Web $B%5!<%P%Q%C%1!<%8$G$"$k!#(B
$B$3$N%=%U%H%&%'%"$O!"(BUnix $B4D6-!"$*$h$S(B Linux $B4D6-$GMxMQ2DG=$G$"$k!#(B
(B
$B$3$N%=%U%H%&%'%"$K$h$kFCDj$NpJs$X%"%/%;%92DG=$K$J$k$H?d(B
$B;!$5$l$k!#(B
(B
$B$3$NLdBj$O!"%G%#%l%/%H%j;2>H$K4X$9$kJ8;zNs$N=hM}$K$"$k!#%@%V%k%9%i%C%7%e(B 
(B(//) $BJ8;zNs$r4^$`%j%/%(%9%H$r$3$N(B Web $B%5!<%P$KAw?.$5$l$k:]!"LdBj$rJz$($k%W(B
$B%m%0%i%`$K$h$j!"%j%b!<%H$N%f!<%6$O(B Web $BMQ$N2>A[%k!<%H%G%#%l%/%H%j$NHO0O$r(B
$B1[$($k$3$H$,2DG=$K$J$k!#$3$NLdBj$rMxMQ$9$k$3$H$K$h$j!"LdBj$rJz$($k%=%U%H%&(B
$B%'%"$r;HMQ$7$F$$$k%3%s%T%e!<%?>e$N%U%!%$%k$X$NFI$_http://www.securityfocus.com/bid/9277
$B$^$H$a(B:
(B
(BosCommerce $B$O!"(BPHP $B$rMxMQ$7$F3+H/$5$l$?!"%*!<%W%s%=!<%9$NEE;R>&l9g!"967bZMQ>pJs(B
$B$N@`$N967b$b2DG=$G$"$k!#(B
(B
(B15. Microsoft Internet Explorer File Download Warning Bypass Vul...
(BBugTraq ID: 9278
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Dec 22 2003
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9278
$B$^$H$a(B:
(B
(BMicrosoft Internet Explorer $B$O!"%U%!%$%k$N(B URI $B$r=hM}$9$k:]$KLdBj$,H/8+$5(B
$B$l$F$$$k!#$3$NLdBj$rMxMQ$9$k$3$H$K$h$j!"0-0U$"$k%U%!%$%k$r%/%i%$%"%s%H%3%s(B
$B%T%e!<%?$K%@%&%s%m!<%I2DG=$K$J$k$H?d;!$5$l$k!#(B
(B
$B$3$N%=%U%H%&%'%"$O!"%U%!%$%k$N%@%&%s%m!<%I$r;n$_$k:]!"%f!<%6$K7Y9p$9$k!#$3(B
$B$N7Y9p$O!"(B'.exe' $B$d(B '.bat' $BEy$N$h$&$JFCDj$N$rJQ99$9$k$3$H$K$h$j!"967bA0$rIU$1$k2DG=@-$,$"$k!#(B
(B
(Bhttp://www.example.com/file.exe?.html
(B
$BJs9p$K$h$k$H!"%V%i%&%6$O$3$N%U%!%$%k$rl9g!"967be$K0-0U$"$k%U%!%$%k$r;E(B
$B3]$1$k$3$H$,2DG=$K$J$k$H?d;!$5$l$k!#$3$NLdBj$O!"$5$i$J$k967b$re$GZ$5$l$F$$$k$,!"B>$N%P!<%8%g(B
$B%s$bF1MM$K1F6A$rhttp://www.securityfocus.com/bid/9279
$B$^$H$a(B:
(B
(BOpera $B$O%U%!%$%k$,=q$-49$($i$l$kLdBj$rJz$($F$$$k5?$$$,$"$k!#$3$NLdBj$O!"%f(B
$B!<%6$K%U%!%$%k$N%@%$%"%m%0$,I=<($5$l$?:]$K0l;~%U%!%$%k$,:n@.$5$l!"O*Dh$9$k!#(B
$BNc$($P!"(BFILENAME.ext $B$r%@%&%s%m!<%I$9$k>l9g$N%@%$%"%m%0$G$O!"0J2<$N0l;~%U(B
$B%!%$%k$,:n@.$5$l$k!#(B
(B
(B"c:\windows\temp\FILXXX.tmp.FILENAME.ext"
(B(XXX $B$N2U=j$O%i%s%@%`$JCM$G$"$k(B)
(B
$B$7$+$7!"%@%&%s%m!<%I%@%$%"%m%0$,I=<($5$l$k:]!"%G%#%l%/%H%j$N;2>H$K4X$9$kJ8(B
$B;zNs$rMQ$$$F!"%3%s%T%e!<%?>e$NB>$N%U%!%$%k$X$NAjBP%Q%9$r;XDj$9$k$3$H$O2DG=(B
$B$G$"$k!#Nc$($P!"%f!<%6$,!"B>$N%7%9%F%`%U%!%$%k$X$NAjBP%Q%9$H$J$k$h$&$KAH$_(B
$BN)$F$i$l$?!"%U%!%$%kL>$K(B '%5C..' $BJ8;zNs$r4^$`%U%!%$%k$r%@%&%s%m!<%I$9$k>l(B
$B9g$N%@%$%"%m%0$K$*$$$F!"$=$N%U%!%$%k$O=q$-49$($i$l$k!#$3$l$O!"%f!<%6$,967b(B
$Bl9g$K$N$_2DG=$G$"$k!#(B
(B
$B$3$NLdBj$rMxMQ$9$k$3$H$K$h$j!"%3%s%T%e!<%?>e$N=EMW$J>pJs$r:o=|2DG=$G$"$k$H(B
$B?d;!$5$l$k!#Js9p$K$h$k$H!"967b$N4D6-$G$b(B
$B1F6A$r\$G$"$k!#(B
(B
(B17. Sun Solaris tcsh ls-F Builtin Unspecified Privilege Escalati...
(BBugTraq ID: 9280
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: Dec 22 2003
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9280
$B$^$H$a(B:
(B
(BSun $B$NJs9p$K$h$k$H!"(BSolaris $B$N(B tcsh $B$K$O>\:YITL@$NLdBj$,B8:_$9$k!#$3$NLdBj(B
$B$O!"(B $B%S%k%H%$%s$N(B 'ls-F' $B%3%^%s%I$K4XO"$7$F$$$k!#$3$N%S%k%H%$%s%3%^%s%I$O!"(B
(B'ls -F' $B$,$N%f!<%6(B
$B8"8B(B($B@x:_E*$K$O(Broot$B8"8B$b(B)$B$rpJs$,8x3+$5$l$?>l9g!"5;=Q>\:Y$H9g$o$;$F99?7$5$l$kM=(B
$BDj$G$"$k!#(B
(B
(B18. Opera Browser URI Display Obfuscation Weakness
(BBugTraq ID: 9281
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Dec 23 2003
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9281
$B$^$H$a(B:
(B
$BJs9p$K$h$k$H!"(BOpera $B$K$O!"K,Ld$5$l$k%Z!<%8$N(B URI $B$r967b$GFCDj$N>l=j$K%"%/(B
$B%;%9$9$k$h$&$K0U?^$5$l$?(B URI $B$,(B "\xC0\x80"$B!"(B"\xC0\xBF"$B!"(B"\xC1\x80"$B!"$*$h$S(B
(B "\xC1\xBF" $B$J$I$NFCJL$KAH$_N)$F$i$l$?J8;zNs$r4^$`>l9g$K@8$8$k!"$3$l$i$NJ8(B
$B;zNs$O!"(BUTF-8 $B%(%s%3!<%G%#%s%0$K5/0x$7$F!"(BNULL $B$H$7$F2r$N0lIt$H$7$FCV$+$l$k2DG=@-$,$"$k!#(B
(B
$B6qBNE*$K$O!"0-0U$"$k(B URI $B$Ohttp://www.malicious.com%C0%80@xxxxxxxxxxxxxxx/
(B
$B$3$N%j%s%/$r%/%j%C%/$7$?>l9g!"l9g$O!"(B16 $B?JCM$O%(%9%1!<%W(B
$B$5$l$J$$$H;W$o$l$k$N$G!"$=$N$h$&$KF0:n$7$J$$2DG=@-$,$"$k$3$H$KN10U$9$Y$-$G(B
$B$"$k!#(B
(B
$B967bl9g!"%f!<%6$O]$H$J$k%f!<%6$KBP$7!"$"$?$+(B
$B$b0BA4$G$"$k$+$N$h$&$J8m2r$r>7$+$;$k2DG=@-$,$"$k!#Js9p$K$h$k$H!"%V%i%&%6$O!"(B
(BHTTP $B$*$h$S(B HTTPS $B$G%Z!<%8$,I=<($5$l$kA0$K7Y9p$rH/$9$k$,!"(BFTP $B$GI=<($5$l$k(B
$B>l9g$O2?$b7Y9p$,H/$;$i$l$J$$!#(B
(B
$B$3$NLdBj$O!"(B"$B$9$Y$F$N%"%I%l%9$r(BUTF-8$B$G%(%s%3!<%I$9$k(B(Encoding all 
(Baddresses with UTF-8)" $B$,M-8z$J:]$K!"(BOpera 6.06 $B$K1F6A$rM?$($k$,!"$=$NB>$N(B
$B%P!<%8%g%s$bF1MM$K1F6A$rhttp://www.securityfocus.com/bid/9282
$B$^$H$a(B:
(B
(BQuikStore Shopping Cart $B$O!"(BWeb $B%V%i%&%6$GMxMQ2DG=$J%7%g%C%T%s%0%+!<%H5!G=(B
$B$rDs6!$9$k%=%U%H%&%'%"$G$"$k!#(B
(B
$BJs9p$K$h$k$H!"$3$N%=%U%H%&%'%"$K$O!"967bZ$G$O$"(B
$B$k$,!"$3$NLdBj$NK\l9g!"967b(B
$B@\E*$J967b$r;E3]$1$k:]$KM-MQ$H$J$k!"%U%!%$%k%7%9%F%`$K4X$9$k=EMW$J>pJs$K%"(B
$B%/%;%92DG=$K$J$k$H?d;!$5$l$k!#(B
(B
$B$3$N%=%U%H%&%'%"$N$I$N%P!<%8%g%s$,LdBj$rJz$($F$$$k$N$+$OJs9p$5$l$F$$$J$$!#(B
$B$7$?$,$C$F!"8=%P!<%8%g%s$N(B QuikStore Shopping Cart v2.12 $B$O$3$NLdBj$N1F6A(B
$B$rhttp://www.securityfocus.com/bid/9283
$B$^$H$a(B:
(B
(BQuikStore Shopping Cart $B$O!"(BWeb $B%V%i%&%6$GMxMQ2DG=$J%7%g%C%T%s%0%+!<%H5!G=(B
$B$rDs6!$9$k%=%U%H%&%'%"$G$"$k!#(B
(B
$BJs9p$K$h$k$H!"$3$N%=%U%H%&%'%"$K$O!"%j%b!<%H$N967bA[%k!<%H(B
$B%G%#%l%/%H%j$NHO0O30$K$"$k>pJs$K%"%/%;%92DG=$JLdBj$,B8:_$9$k!#$3$NLdBj$O!"(B
(B'quikstore.cgi' $B$N(B 'template' $B%Q%i%a!<%?$r2p$7$F%f!<%6$,M?$($?%G!<%?$KBP$9(B
$B$kL5322=$,IT==J,$G$"$k$3$H$K5/0x$7$F$*$j!"%j%b!<%H$N967bA[%k!<%H%G%#%l%/%H%j$NHO0O30$K%"%/%;%92DG=$G(B
$B$"$k!#(B
(B
$B$3$NLdBj$rMxMQ$9$k967b$,@.8y$7$?>l9g!"%j%b!<%H$N967bp(B
$BJs$K%"%/%;%92DG=$K$J$k$H?d;!$5$l$k!#(B
(B
$B$3$N%=%U%H%&%'%"$N$I$N%P!<%8%g%s$,LdBj$rJz$($F$$$k$N$+$OJs9p$5$l$F$$$J$$!#(B
$B$7$?$,$C$F!"8=%P!<%8%g%s$N(B QuikStore Shopping Cart v2.12 $B$O$3$NLdBj$N1F6A(B
$B$rhttp://www.securityfocus.com/bid/9284
$B$^$H$a(B:
(B
(BRed Hat Linux $B$O!"J#?t$N@x:_E*$J%;%-%e%j%F%#>e$NLdBj$r=$@5$9$k$?$a$K(B 2.4 
(BKernel $B$N%"%C%W%G!<%H$r%j%j!<%9$7$?!#(B
(B
$BLdBj$O2<5-$N$H$*$j$G$"$k!#(B
(B
(BRed Hat $B$NJs9p$K$h$k$H!"@x:_E*$J%G!<%?O31L$rKI$0$?$a!"MM!9$J(B RTC $B%I%i%$%P(B
$B$N(B ioctl $B$,=$@5$5$l$F$$$k!#$3$NLdBj$rMxMQ$9$k967b$K$h$j!"%m!<%+%k$N967b7$+$;$k!"$"$k$$$O!"%;%-%e%j%F%#>e$NLdBj$r0z$-5/$3$9(B
$B2DG=@-$,$"$k!#(B
(B
$BJs9p$K$h$k$H!"(BIP $B%"%I%l%9$r;}$?$J$$7k9g%$%s%?!<%U%'%$%9$,3+;O$5$l$?>l9g!"(B
$B7k9g%W%m%;%9$*$h$S%+!<%M%k$O(B Null $B%]%$%s%?;2>H$K5/0x$7$F!"%Q%K%C%/$K4Y$k2D(B
$BG=@-$,$"$k!#$3$NLdBj$,@8$8$k:]$K$O4IM}$NLdBj$b$3$N%"%C%W%0%l!<%I$G=$@5:Q$_$G$"$k!#(B
(B
(B22. Xlight FTP Server PASS Command Remote Buffer Overflow Vulner...
(BBugTraq ID: 9285
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Dec 23 2003
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9285
$B$^$H$a(B:
(B
(BXLight FTP Server $B$O>&MQ$KMxMQ2DG=$J(B FTP $B%5!<%P$G$"$k!#$3$N%=%U%H%&%'%"$O(B 
(BMicrosoft Windows $B4D6-$GMxMQ2DG=$G$"$k!#(B
(B
$B$3$N%=%U%H%&%'%"$K$O!"FCDj$NuBV$K4Y$k$3$H$K$J$k$H?d;!$5$l$k!#(B
(B
$B967be=q$-$9$k$3$H$K$h$j!"$3$NLdBj$rMxMQ$9$k2DG=@-$,$"(B
$B$k!#$3$l$K$h$j!"1F6A$rl9g!"967bZ$G$"$k!#(B
(B
(BXlight FTP Server 1.41 $B0JA0$N%P!<%8%g%s$,$3$NLdBj$rJz$($F$$$k5?$$$,$"$k$H(B
$BJs9p$5$l$F$$$k!#(B
(B
(B23. My Little Forum Email.PHP Cross-Site Scripting Vulnerability
(BBugTraq ID: 9286
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Dec 23 2003
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9286
$B$^$H$a(B:
(B
(Bmy little forum $B$O!"(BPHP $B$rMxMQ$7$F3+H/$5$l$?(B Web $B%V%i%&%6$GMxMQ2DG=$J%7%s(B
$B%W%k$JEE;R7G<(HD5!G=$rDs6!$9$k%=%U%H%&%'%"$G$"$k!#(B
(B
$B$3$N%=%U%H%&%'%"$O!"(B'email.php' $B%9%/%j%W%HFb$K%/%m%9%5%$%H%9%/%j%W%F%#%s%0(B
$B$NLdBj$rJz$($F$$$k5?$$$,$"$k!#$3$NLdBj$N860x$O!"(BURI $B%Q%i%a!<%?(B 'forum_
(Bcontact' $B$r2p$7$FM?$($i$l$kF~NOCM$KBP$7$F!"(BHTML $B%?%0$*$h$S%9%/%j%W%H%3!<%I(B
$B$,E,@Z$KL5322=$5$l$J$$$3$H$K$"$k!#$3$NF~NOCM$O!"F0E*$K@8@.$5$l$k(B Web $B%Z!<(B
$B%8Fb$K4^$^$l$k!#%j%b!<%H$N967bZMQ>pJs$N@`$N967b$b2DG=$G$"$k!#(B
(B
$B$3$NLdBj$O!"(Bmy little forum 1.3 $B$K1F6A$r5Z$\$9$HJs9p$5$l$F$$$k$,!"B>$N%P!<(B
$B%8%g%s$b1F6A$rhttp://www.securityfocus.com/bid/9289
$B$^$H$a(B:
(B
(BWebfroot Shoutbox $B$O!"(BWeb $B%5%$%H$NK,LdZMQ>pJs$N@`$N967b$b2DG=$G$"$k!#(B
(B
$B$3$NLdBj$O!"(BWebfroot Shoutbox 2.32 $B$K1F6A$r5Z$\$9$HJs9p$5$l$F$$$k$,!"B>$N(B
$B%P!<%8%g%s$b1F6A$rhttp://www.securityfocus.com/bid/9290
$B$^$H$a(B:
(B
(Bphp BB $B$O!"(BPHP $B$G3+H/$5$l$?%*!<%W%s%=!<%9$N(B Web $B%$%s%?%U%'!<%9$rHw$($?EE;R(B
$B7G<(HD5!G=$rDs6!$9$k%=%U%H%&%'%"$G$"$j!"B?$/$N%G!<%?%Y!<%9@=IJ$K$h$j%5%]!<(B
$B%H$5$l$F$$$k!#$3$N%=%U%H%&%'%"$O$[$H$s$I$N(B Unix $B$*$h$S(B Linux $BM3Mh$N(B OS $B$@(B
$B$1$G$J$/!"(BMicrosoft Windows $B$G$bF0:n$9$k!#(B
(B
$B$3$N%=%U%H%&%'%"$O!"(B'privmsg.php' $B%9%/%j%W%HFb$K%/%m%9%5%$%H%9%/%j%W%F%#%s(B
$B%0$NLdBj$rJz$($F$$$k5?$$$,$"$k!#(B
(B
$B$3$NLdBj$N860x$O!"(BURI $B%Q%i%a!<%?(B 'mode' $B$r2p$7$FM?$($i$l$kF~NOCM$KBP$7$F!"(B
(BHTML $B%?%0$*$h$S%9%/%j%W%H%3!<%I$,E,@Z$KL5322=$5$l$J$$$3$H$K$"$k!#$3$NF~NO(B
$BCM$O!"F0E*$K@8@.$5$l$k(B Web $B%Z!<%8Fb$K4^$^$l$k!#%j%b!<%H$N967bZMQ>pJs$N@`$N967b$b2DG=$G$"$k!#(B
(B
$B$3$NLdBj$O!"(BphpBB 2.0.6 $B$K1F6A$r5Z$\$9$HJs9p$5$l$F$$$k$,!"B>$N%P!<%8%g%s$b(B
$B1F6A$rhttp://www.securityfocus.com/bid/9291
$B$^$H$a(B:
(B
(BViewCVS $B$O!"%f!<%6$,(B Web $B7PM3$G(B CVS $B%l%]%8%H%j$r1\Mw$9$k$3$H$r2DG=$K$9$k%=(B
$B%U%H%&%'%"$G$"$k!#(B
(B
$B$3$N%=%U%H%&%'%"$O%/%m%9%5%$%H%9%/%j%W%F%#%s%0$NLdBj$rJz$($F$$$k5?$$$,$"$k!#(B
$B$3$NLdBj$O(B 'viewcvs.py' $B%9%/%j%W%H$KB8:_$7$F$*$j!"%(%i!<%Z!<%8$K4^$^$l$k$3(B
$B$H$K$J$k%f!<%6$,M?$($kF~NOCM$KBP$9$kL5322=$,IT==J,$G$"$k$3$H$K5/0x$9$k!#%j(B
$B%b!<%H$N967b](B
$B$N%f!<%6$K$h$jK,Ld$5$l$?>l9g!"967bZMQ>pJs$N@`]$N%f!<%6$K$I$N$h$&$K2r(B
$B$Nhttp://www.securityfocus.com/bid/9292
$B$^$H$a(B:
(B
(BKnowledgeBuilder $B$O!"5-;v$d(B FAQ $B$r4IM}$9$k$?$a$N(B Web $B%$%s%?!<%U%'!<%9$rHw(B
$B$($?%=%U%H%&%'%"$G$"$k!#(B
(B
$B$3$N%=%U%H%&%'%"$O!"%j%b!<%H$N%U%!%$%k$r%$%s%/%k!<%I$5$l$kLdBj$rJz$($F$$$k(B
$B5?$$$,$"$k!#$3$NLdBj$N860x$O!"%j%b!<%H$N967bhttp://www.securityfocus.com/bid/9293
$B$^$H$a(B:
(B
(BPsychoblogger $B$O!"(BWeblog $B$r:n@.$9$k$?$a$KMxMQ$5$l$k!"(BWeb $B%$%s%?!<%U%!%$%9(B
$B$rHw$($?%=%U%H%&%'%"$G$"$k!#$3$N%=%U%H%&%'%"$O!"(BPHP $B$rMxMQ$7$F3+H/$5$l$F$*(B
$B$j!"(BMySQL $B%G!<%?%Y!<%9$rMxMQ$9$k!#(B
(B
$B$3$N%=%U%H%&%'%"$K$O!"%j%b!<%H$N967b$N%/%m%9%5%$%H%9%/%j%W%F%#%s%0$NLdBj$O!"(B'entryadmin.php'$B!"(B'authoredit.
(Bphp'$B!"(B'blockedit.php'$B!"(B 'configadmin.php' $B$*$h$S(B 'quoteedit.php' $B$GH/8+$5(B
$B$l$F$$$k!#$3$NLdBj$O!"(B'errormessage' $BJQ?t$r2p$7$F%f!<%6$,F~NO$9$k%G!<%?$N(B
$BL5322=$,IT==J,$J7k2L$H$7$F@8$8$k!#(B
(B
$B$3$l$i$NLdBj$K$h$j!"967bl9g!"967bZMQ>pJs(B
$B$r@`$N967b$b2DG=$G$"$k!#(B
(B
(BPsychoblogger PB-beta1 $B$O!"$3$l$i$NLdBj$rJz$($F$$$k5?$$$,$"$k$HJs9p$5$l$F(B
$B$$$k$,!"B>$N%P!<%8%g%s$bF1MM$K1F6A$rhttp://www.securityfocus.com/bid/9294
$B$^$H$a(B:
(B
(BPsychoblogger $B$O!"(BWeblog $B$r:n@.$9$k$?$a$KMxMQ$5$l$k!"(BWeb $B%$%s%?!<%U%!%$%9(B
$B$rHw$($?%=%U%H%&%'%"$G$"$k!#$3$N%=%U%H%&%'%"$O!"(BPHP $B$rMxMQ$7$F3+H/$5$l$F$*(B
$B$j!"(BMySQL $B%G!<%?%Y!<%9$rMxMQ$9$k!#(B
(B
$B$3$N%=%U%H%&%'%"$K$O!"967bpJs$r3+<($5$;$k2DG=@-$N$"(B
$B$k(B SQL $BJ8$rCmF~$5$l$kJ#?t$NLdBj$,H/8+$5$l$F$$$k!#(B
(B
$B6qBNE*$K$O!"Z$G$O$"$k$,!"$3$NLdBj$O!"LdBj$rJz$($k%5%$%H$N@5Ev$J%f!<(B
$B%6$N%f!<%6L>$H%Q%9%o!<%I$r<}=8$9$k$N$KMxMQ$5$l$k2DG=@-$,$"$k!#(B
(B
$BJs9p$K$h$k$H!"(BSQL $BJ8$rCmF~$5$l$kLdBj$O!"(B'comments.php' $B$KB8:_$9$k!#$3$NLd(B
$BBj$O!"(B'blogid' $BJQ?t$r2p$7$F%f!<%6$,M?$($?%G!<%?$NL5322=$,IT==J,$G$"$k$3$H(B
$B$K5/0x$9$k!#$3$NLdBj$O!"LdBj$rJz$($k%5%$%H$N@5Ev$J%f!<%6$N%f!<%6L>$H%Q%9%o(B
$B!<%I$r<}=8$9$k$N$KMxMQ$5$l$k2DG=@-$,$"$k!#$3$NLdBj$O!"AmEv$j967b$K$h$jO*Dh(B
$B$9$k2DG=@-$N$"$k!"%G!<%?%Y!<%9$+$i0E9f2=$5$l$?%Q%9%o!<%I$r<}=8$9$k$?$a$K(B 
(BHTTP POST $B%j%/%(%9%H$r2p$7$FMxMQ$5$l$k2DG=@-$,$"$k!#(B
(B
$BB>$N(B SQL $BJ8$rCmF~$5$l$kLdBj$O!"(B'category.php' $B$KB8:_$9$k2DG=@-$,$"$k!#$3$N(B
$BLdBj$K$h$j!"967bpJs$N1\Mw$dJT=8$r$9$k$?$a$K!"%G!<%?%Y!<%9%/%(%j$r2~JQ$9$k2DG=@-$,$"$k!#(B
(B
(BPsychoblogger PB-beta1 $B$O!"$3$l$i$NLdBj$rJz$($F$$$k5?$$$,$"$k$HJs9p$5$l$F(B
$B$$$k$,!"B>$N%P!<%8%g%s$bF1MM$K1F6A$rhttp://www.securityfocus.com/bid/9295
$B$^$H$a(B:
(B
(BApple $BpJs$r3+<($9(B
$B$kLdBj$rJz$($F$$$k5?$$$,$"$k$HJs9p$5$l$F$$$k!#(B
(B
$B$3$N%V%i%&%6$O!"(BHTTPS $B%5!<%P$+$i0\F0$9$k:](B HTTP $B%j%/%(%9%H$K(B HTTP Referer 
$B%G!<%?$r4^$s$GAw?.$9$k!#$3$NF0:n$O!"(BHTTP 1.1 RFC $B$K=`5r$;$:!"FCDj$N>u672<(B
$B$K$*$$$F%;%-%e%j%F%#>e$N%j%9%/$H$J$k2DG=@-$,$"$k!#Js9p$5$l$F$$$k>u67$N(B 1 
$B$D$O!"%j%b!<%H$N(B HTTP $B%5%$%H$X$N%j%s%/$,(B Outlook Web Access(HTTPS) $B$K$h$C(B
$B$FC)$i$l$?>l9g$G$"$k!#(B
(B
(BReferer $B$K4^$^$l$k%G!<%?$O!"(BOutlook Inbox Username $B$*$h$S(B Domain $BL>$r4^$`!#(B
$B$3$NLdBj$K4XO"$9$k:G$b0lHLE*$J%j%9%/$O!"%;%C%7%g%s(B ID $B$dB>$NG'>ZMQ>pJs$,(B 
(BURI $B$K4^$^$l$k>l9g$G$"$k!#%f!<%6$,(B HTTPS $B%Z!<%8Fb$+$i$N%j%s%/$rC)$m$&$H$9(B
$B$k$H!"(BReferer $B$,30It$N%5%$%H$KO31L$9$k2DG=@-$,$"$k!#(B
(B
$B$3$NLdBj$rMxMQ$7$F967bpJs$O!"967bBP>]$N%5!<%P$KBP$9$k$5$i$J(B
$B$k967b$r;E3]$1$k$?$a$KM-MQ$H$J$k2DG=@-$,$"$k!#(B
(B
(B31. Squirrelmail G/PGP Encryption Plugin Remote Command Executio...
(BBugTraq ID: 9296
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Dec 25 2003
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9296
$B$^$H$a(B:
(B
(BSquirrelmail $B$O!"%U%j!<$KMxMQ2DG=$J%*!<%W%s%=!<%9$N(B Web $B%a!<%k$N%Q%C%1!<%8(B
$B$G$"$k!#$3$N%=%U%H%&%'%"$O!"(BUnix $B$*$h$S(B Linux $B4D6-$GMxMQ2DG=$G$"$k!#(B
(B
$B$3$N%=%U%H%&%'%"$N(B G/PGP Plugin $B$KEO$5$l$?FCDj$NpJs$O!"8=;~E@$G$O==J,$K8!>Z$5$l$F$$$J$$2DG=@-$,$"$k!#$7(B
$B$?$,$C$F!"$3$N(B BID $B$O$5$i$J$k>pJs$,8x3+$5$l$?;~E@$G99?7M=Dj$G$"$k!#(B
(B
(B32. GNU Indent Local Heap Overflow Vulnerability
(BBugTraq ID: 9297
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: Dec 26 2003
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9297
$B$^$H$a(B:
(B
(BGNU Indent $B$O!"(BC $B9=J8$r2~A1$9$k$?$a$KMxMQ$5$l!"%=!<%9%3!<%I$rFI$_$d$9$/$9(B
$B$k%=%U%H%&%'%"$G$"$k!#(B
(B
$B$3$N%=%U%H%&%'%"$K$O!"967be$G0U?^$9$k%3!<%I$r(B
$Be=q$-$5$l!"(B
(Bindent $B$r$N(B
$B%P!<%8%g%s$bF1MM$K1F6A$rhttp://www.securityfocus.com/bid/9299
$B$^$H$a(B:
(B
(BSurfboard $B$O!"(BUnix/Linux $BM3Mh$N4D6-8~$1$N%U%j!<$KMxMQ2DG=$J(B Web $B%5!<%P$NuBV$K4Y$k$3$H$K$J$k$H?d;!$5$l$k!#(B
(B
$B967be=q$-$9$k$3$H$K$h$j!"$3$NLdBj$rMxMQ$9$k2DG=@-$,$"(B
$B$k!#$3$l$K$h$j!"1F6A$rl9g!"967bZ$G$"$k!#(B
(B
(BSurfboard 1.1.9 $B$,$3$NLdBj$rJz$($F$$$k5?$$$,$"$k$HJs9p$5$l$F$$$k$,!"B>$N%P(B
$B!<%8%g%s$bF1MM$K1F6A$rhttp://www.securityfocus.com/bid/9300
$B$^$H$a(B:
(B
(BOpenBB $B$O!"%U%j!<$KMxMQ2DG=$J!"%*!<%W%s%=!<%9$NEE;R7G<(HD5!G=$rDs6!$9$k%=(B
$B%U%H%&%'%"$G$"$k!#$3$N%=%U%H%&%'%"$O!"(BUnix$B!"(BLinux$B!"(BMicrosoft Windows $B4D6-(B
$B$GMxMQ2DG=$G$"$k!#(B
(B
$B$3$N%=%U%H%&%'%"$KB8:_$9$kLdBj$K$h$j!"%j%b!<%H$N%f!<%6$,%G!<%?%Y!<%9$NO@M}(B
$B9=B$$r2~JQ$G$-$k2DG=@-$,$"$k!#(B
(B
$BJs9p$K$h$k$H!"$3$N%=%U%H%&%'%"$O!"(B'index.php' $B%9%/%j%W%H$N(B 'CID' $BJQ?t$r2p(B
$B$7$FEO$5$l$kF~NOCM$NBEEv@-3NG'$,ITE,@Z$G$"$k!#$3$N$?$a!"%j%b!<%H$N%f!<%6$O!"(B
$B0-0U$"$k0U?^$7$?(B SQL $B%/%(%j$r$3$N%=%U%H%&%'%"MQ$N%G!<%?%Y!<%9%f!<%6$N%3%s(B
$B%F%-%9%H$GCmF~2DG=$G$"$k$H?d;!$5$l$k!#$3$NLdBj$rMxMQ$9$k967b$,@.8y$7$?>l9g(B
$B$N1F6AHO0O$O!"$3$N%=%U%H%&%'%"$,MxMQ$9$k%G!<%?%Y!<%9$NpJs$,3+<($5$l$?$j!"EE;R7G<((B
$BHD$d%G!<%?%Y!<%9<+BN$,%j%b!<%H$+$i$N6<0R$K;/$5$l$F$7$^$&2DG=@-$,$"$k!#(B
(B
(BOpenBB 1.06 $B$,$3$NLdBj$rJz$($F$$$k2DG=@-$,$"$k$HJs9p$5$l$F$$$k$,!"B>$N%P!<(B
$B%8%g%s$bF1MM$K1F6A$rhttp://www.securityfocus.com/bid/9301
$B$^$H$a(B:
(B
(BStorefront shopping cart $B$O(B Web $B%V%i%&%6$G;HMQ$G$-$k%7%g%C%T%s%0%+!<%H%W%m(B
$B%0%i%`$G$"$k!#$3$l$O(B ASP $B$rMxMQ$7$F3+H/$5$l$F$$$k!#(B
(B
$B$3$N%=%U%H%&%'%"$K$O!"%j%b!<%H$N%f!<%6$,!"0-0U$"$k(B SQL $B9=J8$r%G!<%?%Y!<%9(B
$B%/%(%j$KCmF~2DG=$G$"$k$H?d;!$5$l$kLdBj$,B8:_$9$k$HJs9p$5$l$F$$$k!#Js9p$K$h(B
$B$k$H!"$3$NLdBj$O(B 'login.asp' $B%9%/%j%W%H$G$N%f!<%6$,M?$($?%G!<%?$KBP$9$kL5(B
$B322=$,IT==J,$G$"$k$3$H$K5/0x$9$k!#$3$NLdBj$rMxMQ$9$k967b$K$h$j!"%j%b!<%H$N(B
$B967bpJs$r3+<($5$;$k2DG=@-$,$"$k!#Js9p$K$h$k$H!"967b(B
$B$*$h$S%Q%9%o!<%I$H$7$F!"(B'=' $B$rMQ$$$F%m%0%$%s2DG=$G$"$k$H?d;!$5(B
$B$l$k!#(B
(B
$B0-0U$"$k%f!<%6$O!"@x:_E*$K%=%U%H%&%'%"$^$?$O%G!<%?%Y!<%9$r?/32$9$k$?$a$K!"(B
$B=EMW>pJs$N1\Mw$^$?$O2~$6$s$r9T$J$*$&$H!"%G!<%?%Y!<%9%/%(%j$r2~JQ$9$k2DG=@-(B
$B$,$"$k!#(B
(B
$B$3$N%=%U%H%&%'%"$N$I$N%P!<%8%g%s$,LdBj$rJz$($F$$$k$N$+$OJs9p$5$l$F$$$J$$!#(B
$B$7$?$,$C$F!"8=9THG$G$"$k(B QuikStore Shopping Cart v2.12 $B$O$3$NLdBj$N1F6A$r(B
$Bhttp://www.securityfocus.com/bid/9302
$B$^$H$a(B:
(B
(BApache $B$O%U%j!<$KMxMQ2DG=$J!"%*!<%W%s%=!<%9$N(B Web $B%5!<%P5!G=$rDs6!$9$k%=%U(B
$B%H%&%'%"$G$"$k!#$3$N%=%U%H%&%'%"$O(B Apache Group $B$K$h$j!"G[I[$*$h$SJ]e$G(B PHP $B5!G=$r2DG=$K$9$k(B Apache $B%b%8%e(B
$B!<%k$G$"$k!#(B
(B
$BJs9p$K$h$k$H!"(BApache mod_php $B%b%8%e!<%k$K$O!"%m!<%+%k$N967bh$CZMQ>pJs$*$h$S$=$NB>(B
$B$NG'>Z>pJs$H$$$C$?=EMW$J>pJs$r@`pJs%;%s%?!<$K4s$;$i$l$?6l>p7o?t$O!":rG/$@$1$G(B 60 $B%Q!<%;%s%H>e>:$7(B
$B$?!#(B
(B
(Bhttp://www.securityfocus.com/news/7714
(B
(B2. Chats led to Acxiom hacker bust
$BCxe$N(B IRC $B%m%0$O!"?tI4?M$N8\5R>pJs$r%@%&%s%m!<%I$7$?!"(B
$B%7%s%7%J%F%#=#$K=;$`CK@-!V(BEpitaph,$B!W$r9pH/$9$k$K$$$?$C$?!#(B
(B
(Bhttp://www.securityfocus.com/news/7697
(B
(B3. Secret Service airbrushes aerial photos
$BCx$N7zJ*$J$I$N%o%7%s%H%s(B 
(BD.C. $B$N8x6&;\@_$,D;bW?^$K1G$7=P$5$l$k:]!"(BPhotoshop $B$G2hA|=hM}$,;\$5$l$F(B
$B$$$k!#(B
(B
(Bhttp://www.securityfocus.com/news/7671
(B
(B4. Electronic voting firm acknowledges hacker break-in
$BCxhttp://www.securityfocus.com/news/7728
(B
(B5. CIA gadget-museum: robot fish, pigeon camera, jungle microph...
$BCxhttp://www.securityfocus.com/news/7721
(B
(B6. Victory for CPRM: SD cards overtake Compact Flash
$BCxhttp://www.securityfocus.com/news/7712
(B
(B
(BIV. SECURITYFOCUS TOP 6 TOOLS
(B-----------------------------
(B1. Fwall 0.1.4-2
$B:nhttp://linux.fan.lt/fwall/
$BF0:n4D6-(B: N/A
$B$^$H$a(B:
(B
(Bfwall $B$O!"(Bbash $B$K4p$E$/!"(Biptables $BMQ$N4J0WE*$J;H$$0W$$%U%!%$%"%&%)!<%k%9%/(B
$B%j%W%H$G$9!#$3$N%D!<%k$O!"(B1 $B!A(B 2 $B$D$N%$%s%?!<%U%'%$%9!"%]!<%H%U%)%o!<%G%#(B
$B%s%0!"%5!<%S%9ITG=>uBV$NKI8f$J$I$N@_Dj$,2DG=$G$9!#(B
(B
(B2. ClairVoyanT SysAdmin (CVTSA) v0.2
$B:nhttp://cvtsa.sourceforge.net/
$BF0:n4D6-(B: Linux
$B$^$H$a(B:
(B
(BCVTSA $B$O!"%3%s%T%e!<%?$+$iN%$l$?>l=j$K$$$F$b(B Linux $B%3%s%T%e!<%?>e$G$"$i$f(B
$B$k%3%^%s%I$ro$K0BA4(B
$B$K$9$k%;%-%e%j%F%#5!9=$,B8:_$7$^$9!#$N2?http://opencomputing.sf.net
$BF0:n4D6-(B: Linux
$B$^$H$a(B:
(B
(BOpenProtect $B$O!"MM!9$J%*!<%W%s%=!<%9$N%Q%C%1!<%8$rMxMQ$7$F!"%3%s%F%s%D%U%#(B
$B%k%?%j%s%05!G=$NDs6!$K2C$($F%9%Q%`$*$h$S%&%$%k%9$rKI$0!"%5!<%PB&$GF0:n$9$k(B
$BEE;R%a!<%k%W%m%F%/%?$G$9!#$3$N%=%U%H%&%'%"$O!"(BSendmail$B!"(BPostfix$B!"(BExim $B$*$h(B
$B$S(B qmail $B$r%5%]!<%H$7$F$*$j!"4JC1$K%$%s%9%H!<%k$*$h$SJ]http://fvs.sourceforge.net/
$BF0:n4D6-(B: FreeBSD$B!"(BLinux$B!"(BUNIX$B!"(BWindows 2000$B!"(BWindows 95/98$B!"(BWindows NT
$B$^$H$a(B:
(B
(BFingerprint Verification System $B$O!"%W%m%0%i%^$,!"FCJL$J%N%&%O%&$,$J$/$F$b!"(B
$B%=%U%H%&%'%"$K%U%#%s%,!<%W%j%s%H5;=Q$rAH$_9~$`$3$H$r2DG=$K$9$k!"4JC1$KMxMQ(B
$B$G$-$k%i%$%V%i%j$G$9!#$3$N%i%$%V%i%j$O!"9bB.$GMQNL$,>.$5$/!"AH$_9~$_%7%9%F(B
$B%`$KHs>o$KM-8z$G$9!#(B
(B
(B5. Socks Server 5 v2.4mr2
$B:nhttp://digilander.iol.it/matteo.ricchetti/
$BF0:n4D6-(B: Linux
$B$^$H$a(B:
(B
(BSocks Server 5 $B$O!"(BSocks $B%W%m%H%3%k%P!<%8%g%s(B 4 $B$*$h$S(B 5 $B$KBP1~$7$?(B Linux 
$BMQ$N(B socks $B%5!<%P$G$9!#(B
(B
(B6. GNU Transport Layer Security Library v1.0.3
$B:nhttp://www.gnutls.org
$BF0:n4D6-(B: FreeBSD$B!"(BNetBSD$B!"(BOpenBSD$B!"(BSolaris$B!"(BUNIX
$B$^$H$a(B:
(B
(BGNU Transport Layer Security Library $B$O!"(BTCP/IP $B$N$h$&$J?.Mj@-$N$"$k%H%i%s(B
$B%9%]!<%HAX>e$K0BA4$JAX$rB<9/MN(B(NISHIMURA Yasuhiro)$B!"A}EDCR0l(B(MASUDA Tomokazu)$B!"(B
$B>.>>%_%5(B(KOMATSU Misa)$B!"GOCeFF(B(UMAKI Atsushi)$B!"(B
$B3QED8<;J(B(KAKUDA Motoshi)$B!"@P86J8;R(B(ISHIHARA Ayako)$B!"(B
$B>!3$D>?M(B(KATSUMI Naoto)$B!"9b66=SB@O:(B(TAKAHASHI Shuntarou)
$B4F=$(B: $BA}EDCR0l(B(MASUDA Tomokazu)
(BLAC Co., Ltd.
(Bhttp://www.lac.co.jp/security/
Attachment: smime.p7s
Description: S/MIME cryptographic signature
Prev by Date: SecurityFocus Newsletter #228 2003-12-15->2003-12-19
Next by Date: SecurityFocus Newsletter #230 2003-12-29->2004-1-2
Previous by thread: SecurityFocus Newsletter #228 2003-12-15->2003-12-19
Next by thread: SecurityFocus Newsletter #230 2003-12-29->2004-1-2
Index(es):
- Date
- Thread