[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
SecurityFocus Newsletter #232 2004-1-12->2004-1-16

To: bugtraq-jp@xxxxxxxxxxxxxxxxx
Subject: SecurityFocus Newsletter #232 2004-1-12->2004-1-16
From: Yasuhiro Nishimura <y.nisimr@xxxxxxxxx>
Date: Wed, 18 Feb 2004 20:48:27 +0900
$B@>B<(B@$B%i%C%/$G$9!#(B
(B
(BSecurityFocus Newsletter $BBh(B 232 $B9f$NOBLu$r$*FO$1$7$^$9!#(B
$BLu$N$J$$9`L\$K$D$$$F$O!VF|K\8lLu$J$7!W$H$7$F6hJL$7$F$"$j$^$9!#(B
(B
(B---------------------------------------------------------------------------
(BBugTraq-JP $B$K4X$9$k(B FAQ($BF|K\8l(B):
(Bhttp://www.securityfocus.com/popups/forums/bugtraq-jp/faq.shtml
$B!&(BSecurityFocus Newsletter $B$NOBLu$O(B BugTraq-JP $B$G0lH$/$@$5$$(B
(B---------------------------------------------------------------------------
(B---------------------------------------------------------------------------
(BSecurityFocus Newsletter $B$K4X$9$k(BFAQ($B1Q8l(B):
(Bhttp://www.securityfocus.com/popups/forums/securityfocusnews/intro.shtml
(BBugTraq $B$K4X$9$k(B FAQ($B1Q8l(B):
(Bhttp://www.securityfocus.com/popups/forums/bugtraq/faq.shtml
(B---------------------------------------------------------------------------
$B0zMQ$K4X$9$kHw9M(B:
$B!&$3$NOBLu$O(B SecurityFocus $B$N5v2D$r3t<02qe$G9T$o$l$F$$$^$9!#(B
$B!&(BSecurityFocus Newsletter $B$NOBLu$r(B Netnews, Mailinglist, World Wide Web,
(B  $B=q@R(B, $B$=$NB>$N5-O?G^BN$G0zMQ$5$l$k>l9g$K$O%a!<%k$NA4J80zMQ$r$*4j$$$7$^$9!#(B
$B!&F|K\8lHG%K%e!<%9%l%?!<(B 1 $B9f$+$i(B 3 $B9f$^$G$K$O$3$NHw9M$,IU$$$F$$$^$;$s$,!"(B
(B  $B=`MQ$9$k$b$N$H$7$^$9!#(B
$B!&$^$?!"(BSecurityFocus $BDs6!$N(B BugTraq-JP $B%"!<%+%$%V(B [*1] $B$X$N$$$+$J$k7A<0$N(B
(B  $B%O%$%Q!<%j%s%/$b>e5-$K=`$8$F$/$@$5$$!#(B
(B1) http://online.securityfocus.com/archive/79
(B---------------------------------------------------------------------------
$B$3$NOBLu$K4X$9$kHw9M(B:
$B!&$3$NOBLu$NE,MQ@.2L$K$D$$$F3t<02ql9g!"(BBugTraq-JP $B$X(B Errata $B$H$7$F=$@5(B
(B  $BHG$r$4Ej9FD:$/$+!"4F=$l9g$K$O=$@5HG$r$G$-$k$@$1?WB.$KH/9T$7$^$9!#(B
(B---------------------------------------------------------------------------
(BThis translation is encoded and posted in ISO-2022-JP.
(B
$B86HG(B:
(BDate: Tue, 20 Jan 2004 14:45:23 -0700 (MST)
(BMessage-ID: <Pine.LNX.4.58.0401201438130.1148@xxxxxxxxxxxxxxxxxxxxxx>
(B
(BSecurityFocus Newsletter #232
(B-----------------------------
(B
(BI. FRONT AND CENTER($BF|K\8lLu$J$7(B)
(B     1. Problems and Challenges with Honeypots
(BII. BUGTRAQ SUMMARY
(B     1. Multiple Vendor bzip2 Antivirus Software Denial of Service V...
(B     2. DansGuardian Webmin Module Edit.CGI Remote Directory Travers...
(B     3. Andy's PHP Projects Man Page Lookup Script Information Discl...
(B     4. VisualShapers EZContents Module.PHP Remote Command Execution...
(B     5. Jitterbug CGI Remote Arbitrary Command Execution Vulnerabili...
(B     6. LionMax Software WWW File Share Pro Remote Denial of Service...
(B     7. Sun Microsystems Sun One Web Server Remote Buffer Overflow V...
(B     8. Zope Multiple Vulnerabilities
(B     9. Symantec LiveUpdate Local Privilege Escalation Vulnerability
(B     10. Mabry Software FTPServer/X Controls Format String Vulnerabil...
(B     11. Mabry Software FTPServer/X Controls Unspecified Buffer Overf...
(B     12. Mod-Auth-Shadow Apache Module Expired User Credential Weakne...
(B     13. BEA WebLogic Ant Tasks Administrative Password Exposure Vuln...
(B     14. Multiple Vendor H.323 Protocol Implementation Vulnerabilitie...
(B     15. Microsoft MDAC Function Broadcast Response Buffer Overrun Vu...
(B     16. Microsoft ISA Server 2000 H.323 Filter Remote Buffer Overflo...
(B     17. Microsoft Exchange Server 2003 Outlook Web Access Random Mai...
(B     18. SuSE YaST SuSEconfig.gnome-filesystem Local Insecure File Cr...
(B     19. Novell iChain Web Server Failed Login Page Cross-Site Script...
(B     20. H+BEDV AntiVir Insecure Temporary File Creation Symbolic Lin...
(B     21. HP Tru64 UNIX Unspecified Remote Buffer Overflow Vulnerabili...
(B     22. Snort_Inline Rule 2077 Failure Vulnerability
(B     23. KAME Racoon "Authentication" SA Deletion Vulnerability
(B     24. KAME Racoon "Initial Contact" SA Deletion Vulnerability
(B     25. Symantec Web Security Block Page Message Cross-Site Scriptin...
(B     26. KDE Personal Information Management Suite VCF File Remote Bu...
(B     27. HP SharedX Unspecified Local Insecure File Access Vulnerabil...
(B     28. Real Networks Helix Server/Gateway Administration Service HT...
(B     29. nCipher payShield SPP Library Bad Request Verification Vulne...
(B     30. TCPDump ISAKMP Decoding Routines Multiple Remote Buffer Over...
(B     31. PHPDig Config.PHP Include Remote Command Execution Vulnerabi...
(B     32. LionMax Software WWW File Share Pro Multiple Remote Vulnerab...
(B     33. FishNet FishCart Rounding Function Integer Wrapping Vulnerab...
(B     34. Vicomsoft RapidCache Server Host Argument Denial of Service ...
(B     35. Vicomsoft RapidCache Server Directory Traversal Vulnerabilit...
(B     36. Linux Kernel 32 Bit Ptrace Emulation Full Kernel Rights Vuln...
(B     37. ELM  frm Command Remote Buffer Overflow Vulnerability
(B     38. Whale Communications e-Gap Security Appliance Login Page Sou...
(B     39. QMail-SMTPD Long SMTP Session Integer Overflow Denial of Ser...
(B     40. Rit Research Labs The Bat! PGP Message Memory Writing Vulner...
(B     41. SuSE 3Ddiag Insecure Temporary File Handling Symbolic Link V...
(B     42. OpenCA Crypto-Utils.Lib Signature Verification Vulnerability
(B     43. OpenBSD 3.4 Crypto Card Handlers File Descriptor Leak Vulner...
(B     44. PHPShop Project Multiple Vulnerabilities
(B     45. XtremeASP PhotoGallery Adminlogin.ASP SQL Injection Vulnerab...
(B
(BIII. SECURITYFOCUS NEWS ARTICLES
(B     1. Feds seek input on spammer sentencing
(B     2. No relief from Microsoft phishing bug
(B     3. Lamo Pleads Guilty to Times Hack
(B     4. Nigerian 419ers run dry
(B     5. New Internet virus spreading fast
(B     6. Beware the Habeas Joe Job
(B
(BIV. SECURITYFOCUS TOP 6 TOOLS
(B     1. File::Scan v0.79
(B     2. Dropbear SSH Server v0.41
(B     3. OSIRIS v3.0.0
(B     4. mrtg v2.10.13
(B     5. Yet Another antiVirus Recipe v1.8.6
(B     6. m0n0wall vpb25r595
(B
(B
(BI. FRONT AND CENTER($BF|K\8lLu$J$7(B)
(B---------------------------------
(B
(BII. BUGTRAQ SUMMARY
(B-------------------
(B1. Multiple Vendor bzip2 Antivirus Software Denial of Service V...
(BBugTraq ID: 9393
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Jan 09 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9393
$B$^$H$a(B:
(B
$BJs9p$K$h$k$H!"J#?t%Y%s%@$N%"%s%A%&%$%k%9%=%U%H$O!"%5!<%S%9ITG=>uBV$K4Y$k(B
$BLdBj$rJz$($F$$$k5?$$$,$"$k!#$3$NLdBj$O!"1F6A$ro$rE,@Z$K8!=P$7$J$$(B
$B2DG=@-$,$"$k!#$=$N$?$a!"967buBV$r0z$-5/$3$92DG=@-$,$"$k!"2aBg$KBg$-$J(B bzip2 $B%"!<%+%$%V(B (2GB 
$B$N(B 0x31 $BJ8;z$r4^$`(B) $B$r:n@.2DG=$G$"$k!#(B
(B
$B$3$NLdBj$rMxMQ$9$k967b$,@.8y$7$?>l9g!"967buBV$r0z$-5/$3$7!"7k2L$H$7$F%/%i%C(B
$B%7%e$d%O%s%0$K7R$,$k2DG=@-$,$"$k!#$^$?!"967b$N@.8y$O!"%3%s%T%e!<%?$r0-0U(B
$B$"$k%3!<%I$K$h$k6<0R$K$5$i$92DG=@-$b$"$k!#(B
(B
(BKaspersky AntiVirus for Linux 5.0.1.0$B!"(BTrend Micro InterScan VirusWall
(B3.8 Build 1130$B!"$*$h$S(B McAfee Virus Scan for Linux v4.16.0 $B$,$3$NLdBj$rJz(B
$B$($F$$$k$HJs9p$5$l$F$$$k$,!"B>$N@=IJ$bF1MM$K1F6A$rhttp://www.securityfocus.com/bid/9394
$B$^$H$a(B:
(B
(BDansGuardian Webmin Module $B$O!"(BWebmin $B$+$i(B DansGuardian $B$N4IM}$r9T$&%9%/(B
$B%j%W%H$G$"$k!#$3$N%=%U%H%&%'%"$O!"(BUnix $B$*$h$S(B Linux $B4D6-$GMxMQ2DG=$G$"$k!#(B
(B
$B$3$N%=%U%H%&%'%"$KF1:-$5$l$F$$$k%9%/%j%W%H$K$O!"F~NOCM$N=hM}$KLdBj$,3NG'$5(B
$B$l$F$$$k!#$3$N$?$a!"%j%b!<%H$N967bpJs$K%"%/%;%92DG=(B
$B$G$"$k!#(B
(B
$B$3$NLdBj$O!"(Bedit.cgi $B%9%/%j%W%H$K$h$kF~NOCM$N=hM}$KB8:_$9$k!#%j%b!<%H$N%f!<(B
$B%6$O!"(Bedit.cgi $B%9%/%j%W%H$N(B file $B%Q%i%a!<%?$K!"(BDansGuardian $BMQ$N2>A[%k!<(B
$B%H%G%#%l%/%H%j$NHO0O30$K$"$k%U%!%$%k$r1\Mw$9$k$h$&$JJ8;zNs$rM?$($k2DG=@-(B
$B$,$"$k!#967bhttp://www.securityfocus.com/bid/9395
$B$^$H$a(B:
(B
(BMan Page Lookup $B%9%/%j%W%H$O!"(BAndy's PHP Projects $B$K$h$jG[I[$*$h$SJ]e$N=EMW$J%U%!%$%k$KIT@5$K%"%/%;%92DG=$G$"$k$H?d(B
$B;!$5$l$k!#(B
(B
$B$3$NLdBj$O!"(Bindex.php $B%9%/%j%W%H$KEO$5$l$kJQ?t(B command $B$NBEEv@-3NG'$KB8:_(B
$B$9$k!#967bA[%k!<%H%G%#%l%/%H%j$r1[$($F!"%3%s%T%e!<%?>e$N(B
$B0U?^$9$k%U%!%$%k$NFbMF$r1\Mw$9$k$h$&$J!"F~G0$KAH$_N)$F$i$l$?CM$r$3$N%U%#!<(B
$B%k%I$KM?$($k2DG=@-$,$"$k!#$3$NLdBj$O!"(BWeb $B%5!<%P%W%m%;%9$NFI$_http://www.securityfocus.com/bid/9396
$B$^$H$a(B:
(B
(BezContents $B$O!"%U%j!<$KMxMQ2DG=$J!"%*!<%W%s%=!<%9$N%3%s%F%s%D4IM}%7%9%F%`(B
$B$G$"$k!#$3$N%=%U%H%&%'%"$O!"(BVisualShapers $B$K$h$C$FG[I[$*$h$SJ]http://www.securityfocus.com/bid/9397
$B$^$H$a(B:
(B
(BJitterbug $B$O!"(BCGI $B$G5-=R$5$l$?!"%U%j!<$KMxMQ2DG=$J!"%*!<%W%s%=!<%9$N%P%0(B
$BDI@W%7%9%F%`$G$"$k!#$3$N%=%U%H%&%'%"$O!"(BLinux $B4D6-$GMxMQ2DG=$G$"$k!#(B
(B
$B$3$N%=%U%H%&%'%"$K$O!"F~NOCM$N=hM}$KLdBj$,3NG'$5$l$F$$$k!#$3$N$?$a!"967b(B
$B\:Y$O!"8=;~E@$G$O8x3+$5$l$F$$$J$$!#$3$NLdBj$O!"$5$i(B
$B$J$k>pJs$,8x3+$5$lhttp://www.securityfocus.com/bid/9398
$B$^$H$a(B:
(B
(BLionMax Software WWW File Share Pro $B$O!"(BMicrosoft Windows $B4D6-$GF0:n$9$k(B 
(BHTTP $B%5!<%P$G$"$k!#(B
(B
$B$3$N%=%U%H%&%'%"$K$O!"%j%b!<%H$N967buBV$K4Y$kLdBj$,Js9p$5(B
$B$l$F$$$k!#Js9p$K$h$k$H!"$3$NLdBj$O!"(BHTTP GET $B%j%/%(%9%H$r=hM}$9$k:]$K@8$8(B
$B$k!#967buBV$r0z$-5/$3$9$?$a$K!"2aBg$KD9$$(B HTTP GET $B%j(B
$B%/%(%9%H$rAw?.$9$k$3$H$K$h$j!"$3$N%5!<%P%W%m%;%9$r%/%i%C%7%e$5$;$k2DG=@-(B
$B$,$"$k!#(B
(B
$B$3$NLdBj$rMxMQ$9$k967b$,@.8y$7$?>l9g!"%j%b!<%H$N967be!"@5Ev(B
$B$J%f!<%68~$1$N%5!<%S%9$rMxMQITG=>uBV$K4Y$i$;$k!#L$8!>Z$G$O$"$k$,!"$3$NLd(B
$BBj$rMxMQ$9$k967b$K$h$j%a%b%jFbMF$r=q$-49$(!"0U?^$9$k%3!<%I$rhttp://www.securityfocus.com/bid/9399
$B$^$H$a(B:
(B
(BSun ONE $B$O!"(BSun Microsystems $B$K$h$jHNGd$*$h$SJ]uBV$K4Y$i$;$k$3$H$,2DG=(B
$B$G$"$k!#$3$NLdBj$O!"(BHP-UX $B4D6->e$GF0:n$9$k$3$N%=%U%H%&%'%"$N$_$K3NG'$5$l(B
$B$F$$$k!#(B
(B
$B$3$NLdBj$N1F6A$*$h$S1F6A$r\:Y$O!"8=;~E@(B
$B$G$O8x3+$5$l$F$$$J$$!#$7$+$7$J$,$i!"$3$NLdBj$NK\e!"(BWeb $B%5!<%P%W%m%;%9$N8"8B$G0U?^$9(B
$B$k%3!<%I$NZ$O$^$@$5$l$F$$$J$$!#(B
(B
$B$3$NLdBj$N5;=QE*$J>\:Y$O!"$3$NLdBj$N1F6AHO0O$K4X$9$k$5$i$J$k>pJs$,8x3+$5(B
$B$lhttp://www.securityfocus.com/bid/9400
$B$^$H$a(B:
(B
(BZope $B$O!"(BZope $B%W%m%8%'%/%H$K$h$jJ]pJs$NO31L!"$*$h$SLdBj$rJz$($k%3%s%T%e!<(B
$B%?>e$K$*$1$k%;%-%e%j%F%#%A%'%C%/$NITB-$K5/0x$9$k967b$,2DG=$G$"$k$H?d;!$5(B
$B$l$k!#$3$l$i$NLdBj$rMxMQ$9$k967b$,@.8y$7$?>l9g!"%/%m%9%5%$%H%9%/%j%W%F%#(B
$B%s%0967b!"%5!<%S%9ITG=967b!"$*$h$S$=$NB>$N967b$K7R$,$k2DG=@-$,$"$k!#(B
(B
$B6qBNE*$K$O!"0J2<$NLdBj$,3NG'$5$l$F$$$k!#(B
(B
(BZSearch $B$N%$%s%?!<%U%'%$%9$O!"%/%m%9%5%$%H%9%/%j%W%F%#%s%0$NLdBj$rJz$($F(B
$B$$$k5?$$$,$"$k$HJs9p$5$l$F$$$k!#$3$NLdBj$rMxMQ$9$k967b$,@.8y$7$?>l9g!"%j(B
$B%b!<%H$N967b]$H$J$k%f!<%6$K!"$3$N%=%U%H%&%'%"$r2TF0$5$;$F$$(B
$B$k%5%$%H$X$N(B HTML $B$*$h$S%9%/%j%W%H%3!<%I$,Kd$a9~$^$l$?0-0U$"$k%O%$%Q!<%j(B
$B%s%/$rC)$k$h$&M6F3$9$k$3$H$K$h$j!"%/%m%9%5%$%H%9%/%j%W%F%#%s%0967b$,2DG=(B
$B$G$"$k$H?d;!$5$l$k!#Kd$a9~$^$l$?%3!<%I$O!"967bBP>]$H$J$k%f!<%6$N(B Web $B%V%i(B
$B%&%6$G!"LdBj$rJz$($k%=%U%H%&%'%"$r2TF0$5$;$F$$$k%5%$%H$N%;%-%e%j%F%#%3%s(B
$B%F%-%9%H$GuBV$r0z$-5/$3$9$3$H$,2DG=(B
$B$K$J$k$H?d;!$5$l$kLdBj$,3NG'$5$l$F$$$k!#$3$NLdBj$O!"ITE,@Z$J>uBV=hM}$K5/(B
$B0x$9$k!#(B
(B
$B4IM}MQ$N(B "find" $B5!G=$K$O%"%/%;%98"$NBEEv@-3NG'$KLdBj$,B8:_$9$k$HJs9p$5$l(B
$B$F$$$k!#$3$NLdBj$K$h$j!"967bZ$r7P$:$K=EMW$J>pJs$K%"%/%;%92D(B
$BG=$K$J$k$H?d;!$5$l$k!#(B
(B
(BPropertyManager $B$N(B 'lines' $B$*$h$S(B 'tokens' $B%W%m%Q%F%#$K$O!"%"%/%;%98"$NBE(B
$BEv@-3NG'$K4X$9$k>\:YITL@$NLdBj$,B8:_$9$k!#Js9p$K$h$k$H!"0lIt$N%W%m%Q%F%#(B
$B$O2DJQ%G!<%?7?(B (list) $B$G3JG<$5$l$F$*$j!"?.Mj$5$l$F$$$J$$%3!<%I$,%;%-%e%j(B
$B%F%#$NE,@Z$JBEEv@-3NG'$J$7$K!"$=$l$i$N%W%m%Q%F%#$rJQ99$G$-$k2DG=@-$,$"$k!#(B
(B
(BDTMLDocument $B%*%V%8%'%/%H$K$O!">\:YITL@$N%"%/%;%98"$NBEEv@-3NG'$NLdBj$,B8(B
$B:_$9$k!#$3$NLdBj$K$h$j!"967bpJs$K%"%/%;%9$G$-$k2DG=@-$,$"$k!#(B
(B
(BDTMLMethods $B$K$O!"%"%/%;%98"$NBEEv@-3NG'$NLdBj$,B>$K$b3NG'$5$l$F$$$k!#Js(B
$B9p$K$h$k$H!"?F%*%V%8%'%/%H$KAjBPE*$K%"%/%;%9$9$k:]$K!"(BDTMLMethods proxy 
$B8"8B$,ITE,@Z$K7Q>5$5$l$k!#(B
(B
(BDTML $B%?%0$N(B 'dtml-tree' $B$K$O!"967buBV(B
$B$K4Y$i$;$k$3$H$,2DG=$G$"$k$H?d;!$5$l$k!"%5!<%S%9ITG=$K4Y$kLdBj$,3NG'$5$l(B
$B$F$$$k!#(B
(B
$B$3$N%=%U%H%&%'%"$K$O!">pJs$r3+<($7$F$7$^$&LdBj$,B8:_$9$k$HJs9p$5$l$F$$$k!#(B
$B$3$NLdBj$K$h$j!"967buBV$K4Y$kLdBj$,B8:_$9$k!#967be$G0-0U$"$k%9%/%j(B
$B%W%H$r\:YITL@$NITHw$,B8:_$9$k$HJs9p$5$l$F$$$k!#(B
(B
$B967b$N?.Mj$5(B
$B$l$F$$$J$$%3!<%I$N7+$jJV$7$K$b3NG'$5$l$F$$$k!#(B
(B
$B$3$l$i$NLdBj$K4X$9$k$5$i$J$kJ,@O$,8=:_9T$o$l$F$$$k!#$3$N(B BID $B$O!"J,@O$,40(B
$BN;$N%P!<%8%g%s$bF1MM$K1F6A$rhttp://www.securityfocus.com/bid/9401
$B$^$H$a(B:
(B
(BSymantec $Bl9g!"(BSymantec $B$N%5%$%H$+$i%@%&%s(B
$B%m!<%I$7!"%$%s%9%H!<%k$r9T$&!#$3$N%W%m%;%9$O!"%9%1%8%e!<%k2=!"$^$?$O:3J$r0z$-5/$3$9LdBj$rJz$($F(B
$B$$$k5?$$$,$"$k$HJs9p$5$l$F$$$k!#$3$N%=%U%H%&%'%"$,$3$N$h$&$K@_Dj$5$l$F$$(B
$B$k:]!"$3$N%=%U%H%&%'%"$N%5!<%S%9$r2p$7$F%"%C%W%G!<%H$,F~l(B
$B9g!"(BWindows $B$N%?%9%/%P!<$K%"%$%3%s$,I=<($5$l$k!#Js9p$K$h$k$H!"FC8"$r;}$?(B
$B$J$$%m!<%+%k$N%f!<%6$O!"$3$N%=%U%H%&%'%"$NBPOC<0$N%;%C%7%g%s$r3+;O$9$k:]!"(B
$B$3$N%"%$%3%s$rMQ$$$k!#(B
(B
$B$3$NLdBj$O!"$3$N%=%U%H%&%'%"$,:G=i$K(B SYSTEM $B8"8B$G5/F0$5$l$k$3$H$K5/0x$9(B
$B$k!#$3$N%=%U%H%&%'%"$NBPOC<0$N%W%m%;%9$,%f!<%6$N$b$N$H0[$J$C$?$H$7$F$b!"(B
$B8"8B$r9_3J$5$;$J$$!#$3$l$K$h$j!"%m!<%+%k$N967bhttp://www.securityfocus.com/bid/9402
$B$^$H$a(B:
(B
(BMabry Software FTPServer/X $B$O!"(BMicrosoft Windows $B4D6-8~$1$N(B FTP $B%5!<%P$X(B
$BAH$_9~$`$3$H$rA[Dj$7$?(B ActiveX $B%3%s%H%m!<%k$*$h$S(B COM $B%*%V%8%'%/%H$G$"$k!#(B
(B
$BJs9p$K$h$k$H!"$3$N%=%U%H%&%'%"$O!"%/%i%$%"%s%H$+$i$N0-0U$"$k%j%/%(%9%H$N(B
$B=hM}$N:]$K!"%j%b!<%H$+$i967b$KMxMQ2DG=$J=q<0;XDj;R$r4^$`J8;zNs$NZ$N%f!<%6L>$rM?$($k:]$K%j%b!<%H$N%/%i%$%"%s%H(B
$B$+$i=q<0;XDj;R$r4^$`J8;zNs$,Kd$a9~$^$l$?0-0U$"$k%j%/%(%9%H$rZ$N4V$KM?$($i$l$?%G!<%?$r=hM}$9$k=q(B
$B<0I=<(4X?t$N8m$C$?;HMQ$K5/0x$9$k!#7k2L$H$7$F!"$3$NJ}K!$GM?$($i$l$?=q<0;X(B
$BDj;R$,!"$=$N$^$^2rZ$5$l$F$$$k$,!"M}O@>e!"$3(B
$B$N%5!<%P$r2TF0$7$F$$$k%3%s%T%e!<%?>e$G0U?^$9$k%3!<%I$N$N%P!<%8%g%s$bF1MM$K1F6A$rhttp://www.securityfocus.com/bid/9403
$B$^$H$a(B:
(B
(BMabry Software FTPServer/X $B$O!"(BMicrosoft Windows $B4D6-8~$1$N(B FTP $B%5!<%P$X(B
$BAH$_9~$`$3$H$rA[Dj$7$?(B ActiveX $B%3%s%H%m!<%k$*$h$S(B COM $B%*%V%8%'%/%H$G$"$k!#(B
(B
$B$3$N%=%U%H%&%'%"$O!"ITL@3N$G$O$"$k$,!"%j%b!<%H$+$i967b$KMxMQ2DG=$J%P%C%U%!(B
$B%*!<%P!<%U%m!<$r0z$-5/$3$9LdBj$rJz$($F$$$k5?$$$,$"$k$HJs9p$5$l$F$$$k!#$3(B
$B$l$K$h$j!"%j%b!<%H$N967b@\$N7k2L$H$7$F!"%5!<%S%9ITG=>uBV$K4Y$k2DG=(B
$B@-$,$"$k!#(B
(B
$B967be=q$-$9$k$?$a$K!"$3$NLdBj$rMxMQ$9$k(B
$B2DG=@-$,$"$k!#$3$l$K$h$j!"$3$N%=%U%H%&%'%"$N=hM}$O967bl9g!"967bZ$G$"$k!#(B
(B
(BFTPServer/X  COM Object 1.00.050 $B$O!"$3$NLdBj$N1F6A$r$N%P!<%8%g%s$bF1MM$K1F6A$rhttp://www.securityfocus.com/bid/9404
$B$^$H$a(B:
(B
(BMod-Auth-Shadow $B$O!"(BUnix $B$*$h$S(B Linux $B4D6-$N(B /etc/shadow $B%U%!%$%k$G%f!<%6(B
$B$rG'>Z$9$k(B Apache $B%5!<%PMQ$N%b%8%e!<%k$G$"$k!#(B
(B
(Bmod-auth-shadow $B$K$O!"G'>ZMQ>pJs$N4|8B$,@Z$l$?8e$K!"%f!<%6$,%3%s%T%e!<%?(B
$B$K%"%/%;%9$9$k$3$H$r5v2D$9$k2DG=@-$N$"$kLdBj$,H/8+$5$l$F$$$k!#$3$NLdBj$K(B
$B$h$j!"7k2L$H$7$F%f!<%6$,G'>ZMQ>pJs$NM-8z4|4V30$K(B Web $B%5%$%H$K%"%/%;%92DG=(B
$B$K$J$k$H?d;!$5$l$k!#(B
(B
$B$3$NLdBj$O!"(B/etc/shadow $B%U%!%$%k$KF~NO$5$l$?M-8z4|4V%G!<%?$N=hM}$KB8:_$9(B
$B$k!#$3$NLdBj$K4X$9$k6qBNE*$J>\:Y$O!"8x3+$5$l$F$$$J$$!#$3$N(B BID $B$O!"99$J$k(B
$B>pJs$,8x3+$5$lhttp://www.securityfocus.com/bid/9405
$B$^$H$a(B:
(B
(BWebLogic Server $B$*$h$S(B WebLogic Express $B$O!"(BBEA Systems $B$K$h$C$FHNGd$5$l(B
$B$F$$$k4k6H8~$1$N%"%W%j%1!<%7%g%s%5!<%P@=IJ$G$"$k!#(B
(B
$B$3$l$i$N%=%U%H%&%'%"$O!"4IM}http://www.securityfocus.com/bid/9406
$B$^$H$a(B:
(B
(BH.323 $B%W%m%H%3%k$O!"(BIP $B%M%C%H%o!<%/$K$*$$$F!"MM!9$JEEOC$d%^%k%A%a%G%#%"@=(B
$BIJ$G;HMQ$5$l$F$$$k!#$3$N%W%m%H%3%k$O!"%^%k%A%a%G%#%"2q5D5!G=$r%5%]!<%H$9(B
$B$k%O!<%I%&%'%"@=IJ$HF1MM!"MM!9$J(B OS $B$G;HMQ$5$l$F$$$k!#(B
(B
$B$3$N%W%m%H%3%k$N(B H.225 $B%5%V%3%s%]!<%M%s%H$K$O!"MM!9$J%Y%s%@$K$*$$$F!"$3$N(B
$B%W%m%H%3%k$NuBV$r0z$-5/$3$9$b$N$+$i@x:_E*$K0U?^$7$?%3!<%I$rH(B
$B2DG=$G$"$k!#(B
(B
$B8=;~E@$G$O!"A4$F$N%Y%s%@$N%"%I%P%$%6%j$,!"F~pJs$,8x3+$5$ll9g$K1F6A$rhttp://www.securityfocus.com/bid/9407
$B$^$H$a(B:
(B
(BMicrosoft Data Access Components (MDAC) $B$O!"MM!9$J7A<0$N%m!<%+%k!"$*$h$S(B
$B%j%b!<%H$N%G!<%?%Y!<%9%/%(%j$N5!G=$rHw$($?%G!<%?%Y!<%9%"%/%;%9$N$?$a$N%3(B
$B%s%]!<%M%s%H$rDs6!$9$k!#(B
(B
(BMicrosoft $B$O!"(BMDAC $B$N5!G=$KB8:_$9$k%P%C%U%!%*!<%P!<%U%m!<$NLdBj$rJs9p$9$k(B
$B%"%I%P%$%6%j$r8xI=$7$F$$$k!#$3$NLdBj$O!"%"%W%j%1!<%7%g%s$,%M%C%H%o!<%/>e(B
$B$N(B SQL Server $B$X$N%/%(%j$N$?$a$K%V%m!<%I%-%c%9%H%j%/%(%9%H$r:n@.$9$k:]$K(B
$B@8$8!"0U?^E*$KAH$_N)$F$i$l$?%G!<%?$,%V%m!<%I%-%c%9%H$KBP$9$k%l%9%]%s%9$K(B
$B4^$^$l$FJV$5$l$k!#$3$NLdBj$O!"JV?.%G!<%?$N6-3&%A%'%C%/$,IT==J,$G$"$k$3$H(B
$B$K5/0x$7!"%j%b!<%H$N967bl9g!"LdBj$rJz$($k(B MDAC $B$N5!G=$r;HMQ$9$k(B
$B%"%W%j%1!<%7%g%s$Nl9g!"$3$l$K$h$j!"LdBj$r(B
$BJz$($k%3%s%T%e!<%?$O40A4$K4m81$KGx$5$l$k2DG=@-$,$"$k!#$3$NLdBj$rMxMQ$9$k(B
$B967b$K$h$j!"7k2L$H$7$F!"%/%i%$%"%s%H%"%W%j%1!<%7%g%s$N%5!<%S%9ITG=>uBV$r(B
$B0z$-5/$3$92DG=@-$,$"$k!#(B
(B
(BMicrosoft $B$NJs9p$K$h$k$H!"$3$NLdBj$N1F6A$O!"(BMDAC 2.8 $B$G$O%5!<%S%9$,MxMQIT(B
$BG=>uBV$K4Y$k$N$_$G$"$k!#(B
(B
(B16. Microsoft ISA Server 2000 H.323 Filter Remote Buffer Overflo...
(BBugTraq ID: 9408
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Jan 13 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9408
$B$^$H$a(B:
(B
(BH.323 $B%U%#%k%?$O!"(BH.323$B!"$*$h$S(B T.120 $B%W%m%H%3%k$G;HMQ$9$k%H%i%U%#%C%/$r(B
$B4F;k!"$*$h$S%U%#%k%?%j%s%0$9$k$?$a$K(B Microsoft ISA Server 2000 $B$G;HMQ$5$l(B
$B$F$$$k!#(BH.323$B!"$*$h$S(B T.120 $B%W%m%H%3%k$O!"(BIP Telephony $B%"%W%j%1!<%7%g%s$G(B
$B;HMQ$5$l$F$$$k!#(BH.323 $B%U%#%k%?$O!"(BISA Server 2000 $B$G$O%G%U%)%k%H$GM-8z$K(B
$B$J$C$F$$$k$HJs9p$5$l$F$$$k!#(B
(B
$BJs9p$K$h$k$H!"(BH.323 $B%U%#%k%?$K$O!"%j%b!<%H$N967be$G0U?^$9$k%3!<%I$rl9g!"%j%b!<%H$N967be$G2TF0$7$F$$$k(B Microsoft Firewall Service $B$Nhttp://www.securityfocus.com/bid/9409
$B$^$H$a(B:
(B
(BMicrosoft Exchange Server 2003 $B$O!"(BMicrosoft $B$,HNGd$7$F$$$kEE;R%a!<%k!"$*(B
$B$h$S%G%#%l%/%H%j%5!<%P$G$"$k!#(BOutlook Web Access (OWA) $B$O!"%f!<%6$,(B Web 
$B$r2p$7$F(B Exchange Server $B$N%a!<%k%\%C%/%9$K%"%/%;%92DG=$K$J$k!"$3$N%=%U%H(B
$B%&%'%"$K$h$jDs6!$5$l$F$$$k%5!<%S%9$G$"$k!#(B
(B
$BG'>Z$5$l$?(B OWA $B%f!<%6$,B>$N(B OWA $B%f!<%6$N%a!<%k%\%C%/%9$K%"%/%;%92DG=$K$J(B
$B$k$H?d;!$5$l$kLdBj$,B8:_$9$k!#F10l$N(B Exchange $B%5!<%P>e$G(B OWA $B$r2p$7$F:G6a(B
$B%"%/%;%9$5$l$?%a!<%k%\%C%/%9$@$1$,!"$3$NJ}K!$G%"%/%;%9$5$l$k2DG=@-$,$"$k!#(B
$B967be$G2TF0$7$F$$$k%U%m%s%H%(%s%I$N(B Exchange $B%5!<%P$H$NG'>Z(B
$B$K(B Kerberos $BG'>Z$r;HMQ$7$J$$$h$&$K@_Dj$5$l$F$$$k>l9g$K$N$_B8:_$9$k!#$3$N(B
$B>l9g!"G'>Z$O(B NTLM $BG'>Z$KEO$5$l$k!#$3$N$h$&$K$7$F4IM}Z$r;HMQ$7$F$$$k%P%C%/%(%s%I$N%5!<%P$H$NG'>Z$r;n$_$k!#$3$l$i$N(B
$B%j%/%(%9%H$K$*$$$F!"(BIIS 6 $B$O(B Kerberos $BG'>Z$rL5;k$7!"(BNTLM $B$K$h$C$F4{$KG'>Z(B
$B$5$l$F$$$k3+$$$?%3%M%/%7%g%s$X%"%/%;%92DG=$K$J$k!#(B
(B
$B$3$NLdBj$rMxMQ$9$kLdBj$K@.8y$7$?>l9g!"%j%b!<%H$N967b$N%f!<%6$N%a!<(B
$B%k%\%C%/%9Fb!"$^$?$OAw?.%a!<%k$N=EMW$J>pJs$X!"$=$N%f!<%6$H$7$F%"%/%;%92D(B
$BG=$K$J$k$H?d;!$5$l$k!#(B
(B
(B18. SuSE YaST SuSEconfig.gnome-filesystem Local Insecure File Cr...
(BBugTraq ID: 9411
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: Jan 13 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9411
$B$^$H$a(B:
(B
(BYaST $B$O!"(BSuSE Linux $B$N@_Dj!"$*$h$S:F@_Dj$r;Y1g$9$k%=%U%H%&%'%"$G$"$k!#(B
(BSuSEConfig.gnome-filesystem $B%9%/%j%W%H$O!"(BGNOME $B4D6-$r%;%C%H%"%C%W$9$k$h(B
$B$&$K@_7W$5$l$F$$$k!#(B
(B
$B$3$N%9%/%j%W%H$O!"0U?^$9$k%U%!%$%k$N=q$-49$($KMxMQ$5$l$k2DG=@-$,$"$k!"%;(B
$B%-%e%"$G$O$J$$%U%!%$%k$r:n@.$9$kLdBj$rJz$($F$$$k5?$$$,$"$k$HJs9p$5$l$F$$(B
$B$k!#Js9p$K$h$k$H!"$3$NLdBj$O!"$3$N%9%/%j%W%H$,!"$"$kFCDj$N%U%!%$%k$X=q$-(B
$B9~$`:]$K%7%s%\%j%C%/%j%s%/(B (symlink) $B$rC)$k$3$H$K5/0x$9$k!#(B
(B
$B:G=*E*$K!"%m!<%+%k$N%f!<%6$O!"LdBj$rJz$($F$$$k$3$N%9%/%j%W%H%U%!%$%k$N>l(B
$B=j$K%7%s%\%j%C%/%j%s%/$r:n@.$9$k$3$H$K$h$j!"$3$NLdBj$rMxMQ$9$k2DG=@-$,$"(B
$B$k!#0-0U$"$k%7%s%\%j%C%/%j%s%/$O!"%3%s%T%e!<%?>e$N0U?^$9$k%U%!%$%k$r;X$7(B
$B<($9!#2?$bCN$i$J$$%f!<%6$,$3$N%9%/%j%W%H$r8F$S=P$9:]!"@x:_E*$K(B YaST $B%=%U(B
$B%H%&%'%"$r2p$7$F!"%7%s%\%j%C%/%j%s%/$K$h$C$F%j%s%/$5$l$F$$$k%U%!%$%k$NFb(B
$BMF$r=q$-49$($i$l$k!#$?$@$7!"%f!<%6$,967bBP>]$N%U%!%$%k$X=q$-9~$`$?$a$K=<(B
$BJ,$J8"8B$r;}$D(B SuSEconfig.gnome-filesystem $B$r8F$S=P$7$?>l9g$K8B$j!"%U%!%$(B
$B%k$N=q$-49$($,5/$3$k!#%m!<%+%k$N%f!<%6$O!"%3%s%T%e!<%?$r9-HO$KEO$j%5!<%S(B
$B%9ITG=>uBV!"$^$?$O@x:_E*$K%7%9%F%`8"8B$X$N>:3J$r0z$-5/$3$9!"0U?^$7$?%U%!(B
$B%$%k$r=q$-49$($k$?$a$K$3$NLdBj$rMxMQ$9$k2DG=@-$,$"$k!#(B
(B
$BJs9p$K$h$k$H!"(BSuSE Linux 9.0 $B$O$3$NLdBj$rJz$($F$$$k5?$$$,$"$k$,!"B>$N%P!<(B
$B%8%g%s$bF1MM$K1F6A$rhttp://www.securityfocus.com/bid/9412
$B$^$H$a(B:
(B
(BNovell iChain Server $B$O!"MM!9$J%M%C%H%o!<%/$KM3Mh$9$k%"%/%;%9@)8f$rZMQ>pJs$r@`$N967b$b2DG=$G$"$k!#(B
(B
(B20. H+BEDV AntiVir Insecure Temporary File Creation Symbolic Lin...
(BBugTraq ID: 9413
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: Jan 13 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9413
$B$^$H$a(B:
(B
(BAntiVir $B$O!"(BH+BEDV $B$K$h$C$FG[I[$5$l$F$$$k%"%s%A%&%#%k%9%=%U%H%&%'%"%Q%C%1!<(B
$B%8$G$"$k!#$3$N%=%U%H%&%'%"$O(B Linux $B$*$h$S(B Microsoft Windows $B4D6-$GMxMQ2D(B
$BG=$G$"$k!#(B
(B
$B0l;~%U%!%$%k:n@.$N=hM}$K4X$9$kLdBj$K$h$j!"%m!<%+%k$N%G!<%?$NGK2u$,2DG=$K(B
$B$J$k$H?d;!$5$l$k!#(B
(B
$BJs9p$K$h$k$H!"$3$N%=%U%H%&%'%"$O!"%W%m%;%9$,-Mh:n@.$5$l$k0l;~%U%!%$%k$NL>A0$r?dB,$7!"967bBP>]$N(B
$B%7%9%F%`%U%!%$%k$X$N%7%s%\%j%C%/%j%s%/$r:n@.$7@.8y$9$k$3$H$K$h$j!"$3$NLd(B
$BBj$r0-MQ$9$k2DG=@-$,$"$k!#%j%V!<%H$N:]!"$3$N%=%U%H%&%'%"$O!"?dB,$5$l$?%7(B
$B%s%\%j%C%/%j%s%/$KBP$7$F=q$-9~$_$r9T$&!#$3$N%=%U%H%&%'%"$,%7%s%\%j%C%/%j(B
$B%s%/$5$l$?%U%!%$%k$K=q$-9~$_$r9T$&:]!"=EMW$J%G!<%?$,GK2u$5$l!"7k2L$H$7$F(B
$B%5!<%S%9ITG=>uBV$K4Y$k2DG=@-$,$"$k!#(B
(B
$B$3$NLdBj$O!"(BLinux $B4D6-8~$1$N(B AntiVir $B$N$_$K1F6A$r5Z$\$9$3$H$,3NG'$5$l$F$$(B
$B$k!#(B
(B
(B21. HP Tru64 UNIX Unspecified Remote Buffer Overflow Vulnerabili...
(BBugTraq ID: 9414
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Jan 13 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9414
$B$^$H$a(B:
(B
(BHP $B$O!"(BTru64 UNIX $B$K%m!<%+%k$*$h$S%j%b!<%H$+$i$N%P%C%U%!%*!<%P!<%U%m!<$N(B
$BLdBj$,J#?tB8:_$9$k$HJs9p$7$F$$$k!#Js9p$K$h$k$H!"$3$NLdBj$O!"(BIPSec $B$*$h$S(B 
(BSSH $B%=%U%H%&%'%"$ruBV$r0z$-5/$3(B
$B$9$?$a$K@x:_E*$KMxMQ2DG=$G$"$k!#$3$l$i$NLdBj$N@-e!"967bl9g!"$3$l$i$N%Q%C%1!<%8$K(B setuid/setgid 
$B%S%C%H$,N)$F$i$l$F$$$J$1$l$P!"967b:3J$9$k$3$H$O$J$$$H?d;!$5$l$k!#%j%b!<%H$+$i$N%P%C%U%!%*!<%P!<%U%m!<$r(B
$BMxMQ$9$k967b$,@.8y$7$?>l9g!"967bpJs$rH?1G$799?7$5$l$k!#L$3NG'$G$O$"$k$,!"$3$l(B
$B$i$NLdBj$O!"(BOpenSSL SSLv2 Client_Master_Key Remote Denial Of Service
(BVulnerability (BID 8746)$B!"(BOpenSSL ASN.1 Parsing Vulnerabilities (BID 8732)$B!"(B
$B$*$h$S(B OpenSSL ASN.1 Large Recursion Remote Denial Of Service
(BVulnerability (BID 8970) $B$K4XO"$7$F$$$k2DG=@-$,9b$$!#(B
(B
(B22. Snort_Inline Rule 2077 Failure Vulnerability
(BBugTraq ID: 9415
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Jan 13 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9415
$B$^$H$a(B:
(B
(Bsnort_inline $B$O!"(BSnort $B$KJQ99$r2C$($?%P!<%8%g%s$G$"$k!#$3$N%=%U%H%&%'%"$O!"(B
(Biptables $B$+$i%Q%1%C%H$r$C$?=hM}(B
$B$H$7$F%Q%1%C%H$r%I%m%C%W$9$k$h$&$K@_Dj$5$l$F$$$k:]$K@8$8$k!#$3$N%k!<%k@_(B
$BDj$K4X$o$i$:!"0lDj;~4V7P2a8e!"%H%i%U%#%C%/$O0l1~$-$C$Q$j$H5qH]$5$l$k$K$b(B
$B$+$+$o$i$:!"$3$N%=%U%H%&%'%"$O967be$G$O@\B3$,%V%m%C%/$5$l$J$$$K$b4X$o$i$:%V%m%C%/$5$l$k$H?.$8$k$3$H$K$J(B
$B$k!#(B
(B
(B23. KAME Racoon "Authentication" SA Deletion Vulnerability
(BBugTraq ID: 9416
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Jan 13 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9416
$B$^$H$a(B:
(B
(BKAME Racoon $B$O!"(BBSD Unix $B%W%i%C%H%U%)!<%`MQ$K3+H/$5$l$?(B IPSec $B804IM}%G!<(B
$B%b%s$G$"$j!"G'>Z$^$?$O0E9f2=$5$l$?%M%C%H%o!<%/%H%i%U%#%C%/$K$*$$$F(B 
(BSecurity Associations (SA) $B$r3NN)$*$h$S@_Dj$9$k$?$a$K;HMQ$5$l$k!#(B
(B
$BJs9p$K$h$k$H!"967bl9g!"967bhttp://www.securityfocus.com/bid/9417
$B$^$H$a(B:
(B
(BKAME Racoon $B$O!"(BBSD Unix $B%W%i%C%H%U%)!<%`MQ$K3+H/$5$l$?(B IPSec $B804IM}%G!<(B
$B%b%s$G$"$j!"G'>Z$^$?$O0E9f2=$5$l$?%M%C%H%o!<%/%H%i%U%#%C%/$K$*$$$F(B 
(BSecurity Associations (SA) $B$r3NN)$*$h$S@_Dj$9$k$?$a$K;HMQ$5$l$k!#(B
(B
$BJs9p$K$h$k$H!"967bl9g!"7k2L$H$7$F%5!<%S%9$K;Y>c$r$-$?$92D(B
$BG=@-$,$"$k!#(B
(B
(B25. Symantec Web Security Block Page Message Cross-Site Scriptin...
(BBugTraq ID: 9418
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Jan 14 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9418
$B$^$H$a(B:
(B
$BJs9p$K$h$k$H!"(BSymantec Web Security $B$K$O!"%j%b!<%H$+$i$N967bl9g!"967bZMQ>p(B
$BJs$r@`$N967b$b2DG=$G$"$k!#(B
(B
(BSymantec Web Security 2.5$B!"(B3.0.0 $B$*$h$S(B 3.0.1 $B$O$3$NLdBj$rJz$($F$$$k$HJs(B
$B9p$5$l$F$$$k!#(B
(B
(B26. KDE Personal Information Management Suite VCF File Remote Bu...
(BBugTraq ID: 9419
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Jan 14 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9419
$B$^$H$a(B:
(B
(BKDE Personal Information Management Suite (kdepim) $B$O!"%f!<%6$,EE;R%a!<%k!"(B
$B;E;v!"M=Dj!"O"Mm@h$J$I$r@0M}$9$k0l=u$H$J$k!#$3$l$O!"(BX Windows System $BMQ$N(B
$B%0%i%U%#%+%k$J%G%9%/%H%C%W4D6-$G$"$k(B KDE $B$KF1:-$5$l$F$$$k!#(B
(B
$BJs9p$K$h$k$H!"$3$N%=%U%H%&%'%"$K$O!"%j%b!<%H$+$i$N967be$G0U?^$9$k%3!<%I$re$N%f!<%6$K0-0U$"$k(B VCF $B%U%!(B
$B%$%k$rAw?.$9$k:]$K@8$8$k!#(BVCF $B%U%!%$%k$N%U%!%$%k>pJs%j!<%@!<$NLdBj$K5/0x(B
$B$7$F!"%f!<%6$,0-0U$"$k(B VCF $B%U%!%$%k$r3+$1$k>l9g!"967be$G0U?^$9$k%3!<%I$rl9g!"%j%b!<%H$N967bhttp://www.securityfocus.com/bid/9420
$B$^$H$a(B:
(B
(BSharedX $B$O!"(BHP $B$K$h$j\:Y$,F~pJs$,8x3+$5$lhttp://www.securityfocus.com/bid/9421
$B$^$H$a(B:
(B
(BHelix Universal Server $B$O!"(BReal Networks $B$K$h$jG[I[!"0];}$5$l$F$$$k%a%G%#(B
$B%"G[?.%5!<%P$G$"$j!"(BUnix$B!"(BLinux $B$*$h$S(B Microsoft Windows $B4D6-$GMxMQ2DG=$G(B
$B$"$k!#(B
(B
$B$3$N%=%U%H%&%'%"$N4IM}%5!<%S%9$K$h$k(B HTTP POST $B%j%/%(%9%H$N=hM}$KLdBj$,3N(B
$BG'$5$l$F$$$k!#$3$N$?$a!"%j%b!<%H$+$i$N967bZMQ>pJs$rJ];}$7$F$$$kI,MW$,$"$k!#LdBj$N:,8;$O!"(Badmi3260.dll $B$H$7$F(B 
(BMicrosoft Windows $B$N4D6-$GMxMQ2DG=$J(B adminfs.so $B%i%$%V%i%j$KB8:_$9$k!#96(B
$B7bZ$G$O$"$k$,!"$3(B
$B$l$O(B adminfs.so $B%i%$%V%i%j$KB8:_$9$kF~NO=hM}$NLdBj$K5/0x$7$F$$$k2DG=@-$,(B
$B$"$k!#(B
(B
$BDL>o5!G=$NI|5l$K$O!"http://www.securityfocus.com/bid/9422
$B$^$H$a(B:
(B
(BnCipher payShield $B$O!"EE;R7h:QMQ$N%;%-%e%j%F%#4pHW$r9=C[$9$k$?$a$N%=%U%H(B
$B%&%'%"$^$?$O%"%W%i%$%"%s%9$G$"$k!#(B
(B
$B$3$N%=%U%H%&%'%"$N(B SPP $B%i%$%V%i%j$O!"56$N%j%/%(%9%H$rK\J*$G$"$k$HG'<1$7$F(B
$B$7$^$&LdBj$rJz$($F$$$k$HJs9p$5$l$F$$$k!#Js9p$K$h$k$H!"$3$NLdBj$O%[%9%HB&(B
$B$N%i%$%V%i%j!"$*$h$S$3$N%i%$%V%i%j$K%j%s%/$5$l$F$$$k%"%W%j%1!<%7%g%s$K$N(B
$B$_B8:_$7$F$$$k!#$3$NLdBj$O!"%b%8%e!<%k$N%/%(%j$,l9g!"K\Mh$O$3$N%=%U%H%&%'%"$N%O!<%I%&%'(B
$B%"%;%-%e%j%F%#%b%8%e!<%k$+$i(B "Status_VerifyFailed" $B$,JV$5$l$k$,!"$3$NLdBj(B
$B$K4XO"$9$k%i%$%V%i%j$N(B "SPP_VerifyPVV()" $B%3!<%k$O(B "Status_OK" $B$rJV$92DG=(B
$B@-$,$"$k!#(B
(B
$B967bl9g!"$3$NLdBj$r0-MQ$9$k$3$H(B
$B$K$h$j!"(B"Status_OK" $B1~Ez$,JV$5$l$k$^$G$3$N%=%U%H%&%'%"$KL58z$J%j%/%(%9%H(B
$B$rBgNL$KAw$j$D$1$k2DG=@-$,$"$k!#(B
(B
(B30. TCPDump ISAKMP Decoding Routines Multiple Remote Buffer Over...
(BBugTraq ID: 9423
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Jan 14 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9423
$B$^$H$a(B:
(B
(Btcpdump $B$O%U%j!<$KMxMQ2DG=$J%*!<%W%s%=!<%9$N%M%C%H%o!<%/4F;k%D!<%k$G$"$k!#(B
$B$3$N%=%U%H%&%'%"$O(B Unix$B!"(BLinux $B$*$h$S(B Microsoft Windows $B$GMxMQ2DG=$G$"$k!#(B
(B
$BJs9p$K$h$k$H!"$3$N%=%U%H%&%'%"$K$O!"%j%b!<%H$N967buBV$K4Y$k$,!"967be$G0U?^$9$k%3!<(B
$B%I$re=q$-$9$k$?$a$K!"$3$NLdBj$rMxMQ$9$k(B
$B2DG=@-$,$"$k!#$3$l$K$h$j!"$3$N%=%U%H%&%'%"$N=hM}$O967bl9g!"967bpJs$rH?1G$5$;$F99?7$9$kM=Dj$G$"$k!#(B
(B
(B31. PHPDig Config.PHP Include Remote Command Execution Vulnerabi...
(BBugTraq ID: 9424
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Jan 14 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9424
$B$^$H$a(B:
(B
(BPhpDig $B$O(B PHP $B$rMxMQ$7$F3+H/$5$l$?!"%U%j!<$KMxMQ2DG=$J%*!<%W%s%=!<%9$N8!(B
$B:w%(%s%8%s$G$"$k!#$3$N%=%U%H%&%'%"$O(B Unix $B$*$h$S(B Linux $B$GMxMQ2DG=$G$"$k!#(B
(B
$B$3$N%=%U%H%&%'%"$K4^$^$l$k=hM}$KLdBj$,H/8+$5$l$F$$$k!#$3$l$K$h$j!"%j%b!<(B
$B%H$N%f!<%6$,LdBj$rJz$($k%=%U%H%&%'%"$r2TF0$5$;$F$$$k%3%s%T%e!<%?$K5v2D$J(B
$B$/%"%/%;%9$G$-$k2DG=@-$,$"$k!#(B
(B
$B$3$NLdBj$O!"(Bincludes $B%5%V%G%#%l%/%H%j$K$"$k(B config.php $B%9%/%j%W%H$K$h$kF~(B
$BNOCM$N%U%#%k%?%j%s%0$KB8:_$9$k!#967be$K$"$k%9%/%j%W%H$r%$%s%/%k!<%I2DG=$K$J$k!#0-(B
$B0U$"$k8@8l%U%!%$%k!"$^$?$O$3$N%9%/%j%W%H$K$h$jMW5a$5$l$kB>$N%U%!%$%k$,B8(B
$B:_$9$k>l=j$rM?$($k$3$H$K$h$j!"$3$N%U%!%$%k$K4^$^$l$k%3%^%s%I$,LdBj$rJz$((B
$B$k%=%U%H%&%'%"$r2TF0$5$;$F$$$k%3%s%T%e!<%?>e$Ge$Ghttp://www.securityfocus.com/bid/9425
$B$^$H$a(B:
(B
(BLionMax Software WWW File Share Pro $B$O!"(BMicrosoft Windows $B4D6-$GF0:n$9$k(B 
(BHTTP $B%5!<%P$G$"$k!#(B
(B
$B$3$N%=%U%H%&%'%"$O!"%j%b!<%H$+$i967b$KMxMQ2DG=$JJ#?t$NLdBj$rJz$($F$$$k5?(B
$B$$$,$"$k$HJs9p$5$l$F$$$k!#(B
(B
$B:G=i$NLdBj$O!"%j%b!<%H$N967be(B
$B=q$-$9$k2DG=@-$,$"$k$HJs9p$5$l$F$k!#967bH$K4X$9$k(B
$BJ8;zNs(B "../" $B$r%"%C%W%m!<%I$9$k%U%!%$%k$N%U%!%$%kL>$K4^$a$k$3$H$K$h$j!"$3(B
$B$NLdBj$r0-MQ$9$k$b$N$H?d;!$5$l$k!#(B
(B
$BFs$DL\$NLdBj$O!"%j%b!<%H$N%f!<%6$,LdBj$rJz$($k%=%U%H%&%'%"$K$h$k%5!<%S%9(B
$BDs6!$rITG=$K$G$-$k2DG=@-$,$"$k$HJs9p$5$l$F$$$k!#Js9p$K$h$k$H!"$3$N%=%U%H(B
$B%&%'%"$,2aBg$J%G!<%?$r4^$`(B POST $B%j%/%(%9%H$r=hM}$9$k>l9g!"%7%9%F%`%j%=!<(B
$B%9$r>CHq$7!"LdBj$rJz$($k%3%s%T%e!<%?$O1~Ez$7$J$/$J$k!#$3$N(B POST $B%j%/%(%9(B
$B%H$O!"Bg$-$J(B Content-Length HTTP $B%X%C%@$NCM$N0lIt$G$"$kI,MW$,$"$j!"(B2MB $B$r(B
$BD6$($k(B POST $B%G!<%?$r4^$`$H?d;!$5$l$k!#(B
(B
$B:G8e$NLdBj$O!"$3$N%=%U%H%&%'%"$K$h$jJ]8n$5$l$F$$$k%G%#%l%/%H%j$X$N%"%/%;(B
$B%9$r@)8f$9$k$?$a$KMxMQ$5$l$k!"%"%/%;%9@)8f%k!<%A%s$K4XO"$9$k$HJs9p$5$l$F(B
$B$$$k!#Js9p$K$h$k$H!"%j%b!<%H$N967b]$NJ]8n$5$l$F$$$k%j%=!<%9(B
$B$X$NFCJL$KAH$_N)$F$?(B HTTP $B%j%/%(%9%H$rH/9T$9$k$3$H$K$h$j!"%"%/%;%9@)8f$r(B
$B1*2s$9$k2DG=@-$,$"$k!#0-0U$"$k(B URI $B$K$O!"967bBP>]$H$J$k%U%)%k%@L>$K%T%j%*(B
$B%IJ8;zNs$,IU2C$5$l$?$b$N$,4^$^$l$F$$$kI,MW$,$"$k!#$^$?!"967bBP>]$N%U%)%k(B
$B%@L>$K(B 1 $B$D0J>e$N%9%i%C%7%e$^$?$O%P%C%/%9%i%C%7%eJ8;zNs$rIU2C$5$;$?$b$N$r(B 
(BURI $B$K4^$^$;$kJ}K!$b$"$k!#(B
(B
(B33. FishNet FishCart Rounding Function Integer Wrapping Vulnerab...
(BBugTraq ID: 9426
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Jan 14 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9426
$B$^$H$a(B:
(B
(BFishCart $B$O>&MQ$G%*!<%W%s%=!<%9$N%7%g%C%T%s%0%+!<%I5!G=$rDs6!$9$k%=%U%H%&%'(B
$B%"%Q%C%1!<%8$G$"$k!#$3$N%=%U%H%&%'%"$O(B Unix$B!"(BLinux $B$*$h$S(B Microsoft
(BWindows $B4D6-$GMxMQ2DG=$G$"$k!#(B
(B
$B$3$N%=%U%H%&%'%"$N@Ze$N?t;z$rEO$9$3$H$K$h$j!"Ii$NCM$rL5M}$d$j1#$9$3$H$,(B
$B$G$-$k2DG=@-$,$"$k!#967b&e$NLdBj$r0z$-$3$92DG=@-$,$"$k!#(B
(B
(B34. Vicomsoft RapidCache Server Host Argument Denial of Service ...
(BBugTraq ID: 9427
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Jan 15 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9427
$B$^$H$a(B:
(B
(BVicomsoft RapidCache $B$O!"(BMicrosoft Windows $B$*$h$S(B Apple MacOS $B4D6-$GF0:n(B
$B$9$k(B Web $B%-%c%C%7%e%5!<%P$G$"$k!#(B
(B
$B$3$N%=%U%H%&%'%"$K$O!"967buBV$K4Y$i$;$k$3$H$,2DG=$JLdBj$,Js9p$5$l$F$$(B
$B$k!#(B
(B
$B$3$NLdBj$O!"967bo$KD9$$J8;zNs$r%5!<%P$KAw?.$9$k:]$KH/@8$9$k!#$3$N967b$K$h$j!"7k2L$H$7(B
$B$F%5!<%S%9ITG=>uBV$K4Y$j!"@55,%f!<%6$X$N%5!<%S%9$,MxMQITG=$K$J$k$H?d;!$5(B
$B$l$k!#(B
(B
$B2DG=@-$ODc$$$,!"$3$NLdBj$rMxMQ$9$k$3$H$K$h$j!"967bhttp://www.securityfocus.com/bid/9428
$B$^$H$a(B:
(B
(BVicomsoft RapidCache $B$O!"(BMicrosoft Windows $B$*$h$S(B Apple MacOS $B4D6-$GF0:n(B
$B$9$k(B Web $B%-%c%C%7%e%5!<%P$G$"$k!#(B
(B
$B$3$N%=%U%H%&%'%"$K$O!"%j%b!<%H$N967bpJs$K%"%/%;%92DG=$K$J$kLdBj$,B8:_$9$k$HJs9p$5(B
$B$l$F$$$k!#$3$NLdBj$O%f!<%6$,M?$($k%G!<%?$NL5322=$,IT==J,$G$"$k$3$H$K5/0x(B
$B$9$k!#%j%b!<%H$N967bl9g!"%j%b!<%H$N967bpJs$K%"%/%;%92DG=$K$J$k$H?d(B
$B;!$5$l$k!#(B
(B
(BrapidCache 2.2.6 $B0JA0$N%P!<%8%g%s$,$3$NLdBj$rJz$($F$$$k5?$$$,$"$k$HJs9p$5(B
$B$l$F$$$k!#(B
(B
(B36. Linux Kernel 32 Bit Ptrace Emulation Full Kernel Rights Vuln...
(BBugTraq ID: 9429
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: Jan 15 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9429
$B$^$H$a(B:
(B
(BUnix $B$*$h$S(B Unix $B$KM3Mh$9$k%+!<%M%k$O!"(Bptrace $B$H8F$P$l$k%G%P%C%05!G=$rDs(B
$B6!$7$F$$$k!#(Bptrace $B$O!"$"$k%W%m%;%9$,B>$N%W%m%;%9$r(B 'attach' $B$7!"$=$N%W%m(B
$B%;%9$N%a%b%j$rD4::$^$?$O2~JQ$9$k$3$H$r2DG=$K$9$k!#%W%m%;%9$N8"8B$r@)8f$9(B
$B$k!"%a%b%j(B ($B%7%9%F%`%l%8%9%?(B) $B$NFCDj$NHO0O$r99?7$9$k$?$a$K$O!"8"8B$,>:3J(B
$B$5$l$F$$$J$$$+$rF~G0$K3NG'$9$kI,MW$,$"$k!#(B
(B
(Bx86_64 (AMD64) $B%"!<%-%F%/%A%c>e$N(B Linux $B%+!<%M%k$G!"(Bptrace $B$N(B 32 $B%S%C%H%((B
$B%_%e%l!<%7%g%s$KLdBj$,H/8+$5$l$F$$$k!#%7%9%F%`%l%8%9%?$K3JG<$5$l$k>pJs$N(B
$BBEEv@-3NG'$K<:GT$9$k$?$a!"$3$NLdBj$K$h$j%f!<%66u4V$N%W%m%0%i%`$,%+!<%M%k(B
$B$N40A4$J@)8f8"$rC%$N%W%m%;%9$K(B ring 0 
$B$r@_Dj2DG=$K$J$k!#(Bring 0 $B$O:G$b9b$$8"8B%l%Y%k$G$"$j!"%f!<%66u4V$N%W%m%;%9(B
$B$,LdBj$rJz$($k%+!<%M%k$N40A4$J@)8f8"$rC%uBV$rJ];}$7$F$$$J$$$3$H$K5/0x$9$k!#(B
(BEFLAGS $B%l%8%9%?$K=q$-9~$^$l$kEY$K!"FC8"%W%m%;%9$r@)8B$9$k$?$a$K(B ptrace $B$O(B
$B$9$Y$F$N(B EFLAGS $B%U%i%0$r%/%j%"$9$k!#$3$l$K$h$j!"(BEFLAGS $B%l%8%9%?Fb$N(B IOPL 
$B%U%i%0$r2p$7$F(B I/O$BFC8"%l%Y%k(B (I/O Privilege Level) $B$,(B ring 0 $B$K@_Dj$5$l!"(B
$B%W%m%;%9$,<+J,$K3d$jEv$F$i$l$?HO0O30$N%a%b%j6u4V$X=q$-9~$_2DG=$K$J$k!#$3(B
$B$NLdBj$K$h$kJL$N7k2L$H$7$F!"$9$Y$F$N%^%9%/2DG=$J3d$j9~$_$,L58z$K$J$k!#$3(B
$B$NLdBj$O%+!<%M%k$r%/%i%C%7%e$5$;$k$N$KMxMQ$5$l!"7k2L$H$7$F%5!<%S%9ITG=>u(B
$BBV$K4Y$k2DG=@-$,$"$k!#(B
(B
$B$3$NLdBj$O!"(Bx86_64 (AMD 64) $B%"!<%-%F%/%A%c$r%5%]!<%H$9$k(B Linux $B%+!<%M%k(B 
(B2.4 $B$K1F6A$rM?$($k$3$H$,4{CN$H$J$C$F$$$k$,!"B>$N%P!<%8%g%s$N%+!<%M%k$b(B 
(Bx86_64 (AMD64) $B%W%m%;%C%5$K4XO"$7$FLdBj$rJz$($F$$$k2DG=@-$,$"$k!#(B
(B
$B$3$NLdBj$K4X$9$k$5$i$J$k>pJs$O!"8=;~E@$G$O8x3+$5$l$F$$$J$$!#$3$N(B BID $B$O$5(B
$B$i$J$k>pJs$,8x3+$5$lhttp://www.securityfocus.com/bid/9430
$B$^$H$a(B:
(B
(BELM $B$O!"(BUNIX $B4D6-$GMxMQ2DG=$J%a!<%k%f!<%6%(!<%8%'%s%H$G$"$k!#(B
(B
$B$3$N%=%U%H%&%'%"$K$O!"%j%b!<%H$N967be$G0U?^$9(B
$B$k%3!<%I$rl9g!"%j%b!<%H$N967bZ$G$O$"$k$,!"(BELM 2.5.6 $B0JA0$N%P!<%8%g%s$,$3$NLdBj$rJz$($F$$$k2DG=@-(B
$B$,$"$k!#(B
(B
(B38. Whale Communications e-Gap Security Appliance Login Page Sou...
(BBugTraq ID: 9431
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Jan 15 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9431
$B$^$H$a(B:
(B
(BWhale Communications e-GAP $B$O!"%j%b!<%H$+$i%V%i%&%6$r2p$7$F%;%-%e%"$K%"%/(B
$B%;%9$9$k4D6-$rDs6!$9$k%"%W%i%$%"%s%9@=IJ$G$"$k!#(B
(B
$B$3$N%=%U%H%&%'%"$O!"%=!<%9%3!<%I$rO31L$7$F$7$^$&LdBj$rJz$($F$$$k5?$$$,$"(B
$B$k$HJs9p$5$l$F$$$k!#Js9p$K$h$k$H!"1F6A$r]$H$J$k%3%s%T%e!<%?$X$N$5$i(B
$B$J$k967b$r;E3]$1$k:]$KM-MQ$H$J$k>pJs$r3+<($9$k2DG=@-$,$"$k!#(B
(B
$B$3$NLdBj$O!"(BWhale Communications e-GAP appliance 2.5 $B$K1F6A$rM?$($k$HJs9p(B
$B$5$l$F$$$k$,!"B>$N%P!<%8%g%s$b1F6A$rhttp://www.securityfocus.com/bid/9432
$B$^$H$a(B:
(B
(Bqmail $B$O!"9-HO0O$GMxMQ$5$l$F$$$k%a!<%kE>Aw%(!<%8%'%s%H(B (MTA) $B$G$"$k!#(B
(B
(Bqmail-smtpd $B$K$O!"%j%b!<%H$N967buBV$r0z$-5/$3$9$3$H$,2DG=$K$J$k$H?d;!$5$l$kLdBj$,B8:_$9$k$HJs9p$5$l$F(B
$B$$$k!#Js9p$K$h$k$H!"967b$5$;$k$HJs9p$5$l$F$$$k!#$3(B
$B$NIi$NCM$O!"G[Ns$NE:$(;z$H$7$FMxMQ$5$l$k!#Id9f$,5UE>$7$?@0?t$K4p$E$$$FHO(B
$B0O30$N%"%I%l%9$K%"%/%;%9$7$h$&$H$7$?8e!"%;%0%a%s%F!<%7%g%s0cH?$,0z$-5/$3(B
$B$5$l$k2DG=@-$,$"$k!#$3$NLdBj$rMxMQ$9$k967b$K$h$j!"%j%b!<%H$N967bCHq$7$F!"@5Ev$J%f!<%68~$1$N%5!<%S%9$rMxMQITG=>uBV$K4Y$i$;$k$3$H$,2D(B
$BG=$G$"$k!#(B
(B
$B%j%b!<%H$N967b$N%P!<%8%g%s$b1F6A$rhttp://www.securityfocus.com/bid/9433
$B$^$H$a(B:
(B
(BThe Bat! $B$O!">&MQMxMQ2DG=$J%a!<%k%f!<%6%(!<%8%'%s%H$G$"$j!"(BRit Research
(BLabs $B$K$h$jG[I[$*$h$SJ]$5$l$?!"FCDj$N0-0U$N$"$k%a%C%;!<(B
$B%8$r=hM}$9$kJ}K!$KLdBj$,B8:_$9$k!#(BPGP $B$O%G%U%)%k%H$G%5%]!<%H$9$k$h$&$K@_(B
$BDj$5$l$F$$$k!#(B
(B
$B$3$NLdBj$O!"$3$N%=%U%H%&%'%"$,J#?t$N2U=j$K:F5"E*$KAH$_9~$^$l$F$$$k!"(BPGP 
$B=pL>$r4^$`(B e-mail $B%a%C%;!<%8$r=hM}$9$k>l9g$KH/@8$9$k!#FCJL$KAH$_N)$F$i$l(B
$B$?0-0U$"$k=pL>$K$h$j!"$3$N%=%U%H%&%'%"$O3NJ]$5$l$F$$$J$$%a%b%jNN0h$NFI$_(B
$B$r4^$s$@%a%C%;!<%8$r=hM}$9$k>l9g!"%/%i%C%7%e$7$J$$$H$$$&$3$H$O=EMW$J(B
$BN10UE@$G$"$k!#(B
(B
$B$3$NLdBj$O(B The Bat! 2.01 $B$K1F6A$rM?$($k$HJs9p$5$l$F$$$k!#%Y%s%@!<$+$i$NJs(B
$B9p$K$h$k$H!"(BThe Bat! 2.03 beta $B$G$O$3$NLdBj$,:F8=$5$l$F$*$i$:!"(BThe Bat!
(B2.02 CE $B$O$*$=$i$/$3$NLdBj$N1F6A$O$J$$!#(BThe Bat! 1.x $B$K$O$3$NLdBj$N1F6A$O(B
$B$J$$!#(B
(B
(B41. SuSE 3Ddiag Insecure Temporary File Handling Symbolic Link V...
(BBugTraq ID: 9434
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: Jan 15 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9434
$B$^$H$a(B:
(B
(B3Ddiag $B$O!"(BSuSE Linux 7.3 $B$+$=$l0J>e$N%P!<%8%g%s$K$*$1$k!"(B3D $B%O!<%I%&%'%"!"(B
$B%=%U%H%&%'%"%i%$%V%i%j!"%O!<%I%&%'%"%I%i%$%P$N@_Dj$rI>2A$9$k$?$a$K@_7W$5(B
$B$l$?!"(B3D $B?GCG%=%U%H%&%'%"$G$"$k!#(B
(B
(BSuSE Linux $B%G%9%H%j%S%e!<%7%g%s$N(B 3Ddiag tool $B$,0l;~%U%!%$%k$r=hM}$9$k:](B
$B$K!"LdBj$,H/8+$5$l$F$$$k!#$3$NLdBj$K$h$j!"1F6A$re$N%G!<(B
$B%?$,%m!<%+%k$+$iGK2u2DG=$K$J$j!"@x:_E*$K=EMW$J%G!<%?$N>C<:!"%5!<%S%9ITG=(B
$B>uBV$r0z$-5/$3$92DG=@-$,$"$k!#(B
(B
$B$3$NLdBj$O!"$3$N%=%U%H%&%'%"$,(B /usr/bin/switch2nv$B!"(B/usr/bin/switch2nvdia$B!"(B
(B/usr/bin/3Ddiag.ignoredb $B$K$*$1$k0l;~%U%!%$%k$N:n@.!">uBV@_Dj$rE,@Z$K=hM}(B
$B$7$F$$$J$$$3$H$K5/0x$9$k$b$N$G$"$k!#(B
(B
(B3Ddiag $B%f!<%F%#%j%F%#$GMxMQ$5$l$k!"(Bswitch2nv$B!"(Bswitch2nvidia $B%9%/%j%W%H$O(B 
(B/tmp $B%G%#%l%/%H%j$K(B XF86Config $B$H$$$&L>A0$N%U%!%$%k$r:n@.$9$k!#967bH$7$F$$$k0-0U$N(B
$B$"$k%7%s%\%j%C%/%j%s%/$KCV$-49$($k$3$H$,2DG=$G$"$k!#N>%9%/%j%W%H$,l9g!"%U%!%$%k$N@5Ev@-$r8!>Z$;$:$K4IM}e=q$-$7$F$7$^$&!#(B
(B
(B3Ddiag.ignoredb $B$O!"(B/tmp $B%G%#%l%/%H%j$K(B 3Ddiag.ignoredb $B$H$$$&L>A0$N0l;~(B
$B%U%!%$%k$r:n@.$9$k!#(B $B967bA0$G%7%s%\%j%C%/%j%s(B
$B%/$r:n@.$9$k$3$H$,2DG=$G$"$k!#$3$N%"%W%j%1!<%7%g%s$,l9g!"967b(B
$BL\I8$H$J$k%U%!%$%k$,4IM}e=q$-$5$l!"$3$l$K$h$jLdBj$rJz$($k%3%s%T%e!<(B
$B%?$K$*$$$F!"=EMW$J%G!<%?$N>C<:$d%5!<%S%9ITG=>uBV$r0z$-5/$3$5$l$k!#(B
(B
$B$3$N%D!<%k$O%=%U%H%&%'%"%i%$%V%i%j!"%O!<%I%&%'%"@_Dj$N%"%C%W%G!<%H$N$?$a(B
$B$Ke$N%P!<%8%g%s$N4D6-$G$N$_MxMQ2DG=$G$"$k!#(B
(B
(B42. OpenCA Crypto-Utils.Lib Signature Verification Vulnerability
(BBugTraq ID: 9435
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Jan 16 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9435
$B$^$H$a(B:
(B
(BOpenCA $B$O!"%*!<%W%s%=!<%9$NG'>Z6I%"%W%j%1!<%7%g%s$G$"$k!#(BOpenCA $B$O!"(B
(Bcrypto-utils.lib $B$H$$$&L>A0$N0E9f2=o!"$3$N4X?t$O(B OpenCA $B%G!<%?%Y!<%9$+$i=pL>>pJs(B
$B$rFI$_9~$_!"=pL>ZL@=q$,0lCW$9$k$+3NG'$9$k$?$a$K;HMQ$5$l$k!#$7$+$7!"(B
$B4XO"$N$"$k>ZL@=q$N%7%j%"%k$K4p$E$$$?Hf3S$N$_$r9T$&$3$N4X?t$N=hM}J}K!$KLd(B
$BBj$,H/8+$5$l$F$$$k!#$3$l$K$h$j!"1*oh$K$b0-0U$N$"$k>ZL@=q$r%A%'%$%s$,$3$N%=%U%H%&%'%"$N%A%'%$%s%G%#%l(B
$B%/%H%j$KBP$7$F?.Mj4X78$r7k$S!"0lCW$7$F$$$k%7%j%"%k$r3JG<$7$F$$$k@5Ev$J>Z(B
$BL@=q$,$9$G$KMxMQ$5$l$F$$$k8x3+80%$%s%U%i$KB8:_$7$?>l9g!"0-0U$N$"$k>ZL@=q(B
$B$,ZL@=q$r=j;}$9$k0-0U$"$kZL@$,I,MW$J$b$N$KBP$7=pL>$9$k$3(B
$B$H$,2DG=$G$"$k!#$3$NLdBj$O?.Mj$r56>Z$9$k$?$a$K0-MQ$9$k$3$H$,$G$-!"B>$NMM(B
$B!9$J967b$K7R$,$k!#(B
(B
$B$3$NLdBj$O!"(BOpenCA 0.9.1.6 $B$^$G$N$9$Y$F$N%P!<%8%g%s$K1F6A$rM?$($k$HJs9p$5(B
$B$l$F$$$k!#(B
(B
(B43. OpenBSD 3.4 Crypto Card Handlers File Descriptor Leak Vulner...
(BBugTraq ID: 9436
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: Jan 16 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9436
$B$^$H$a(B:
(B
(BOpenBSD 3.4 $B$OHs8x3+%U%!%$%k5-=R;R$rO31L$5$;$kLdBj$rJz$($F$$$k5?$$$,$"$k(B
$B$HJs9p$5$l$F$$$k!#%Y%s%@!<$+$i$O!"1F6A$N$"$k%7%9%F%`$K0E9f2=%+!<%I$,%$%s(B
$B%9%H!<%k$5$l$F$$$k$HH/@8$9$kLdBj$G$"$k$HJs9p$5$l$F$$$k!#(B
(B
$BL$8!>Z$G$O$"$k$,!"$3$NLdBj$OFC8"$r;}$D(B IO $B%A%c%M%k$X$N%"%/%;%98"$rC%H$G$-$k2DG=(B
$B@-$,$"$k!#$7$+$7$J$,$i!"$3$l$OL$8!>Z$G$"$k!#(B
(B
$B$3$NLdBj$O(B OpenBSD 3.3 $B$K$O1F6A$7$J$$!#(B
(B
$B$3$N(B BID $B$O!"$3$NLdBj$K4X$9$k$5$i$J$k>\:Y$,8x3+$5$lhttp://www.securityfocus.com/bid/9437
$B$^$H$a(B:
(B
(BphpShop Project $B$O(B PHP $B$rMxMQ$7$F3+H/$5$l$?(B Web $B4D6-$GF0:n$9$k%"%W%j%1!<(B
$B%7%g%s3+H/4D6-$G$"$k!#(B
(B
$BJs9p$K$h$k$H!"$3$N%=%U%H%&%'%"$K$O%G!<%?%Y!<%9$KBP$9$k967b!"=EMW$J>pJs$N(B
$BO31L!"%f!<%6$N%V%i%&%6>e$G$N(B HTML $B$d%9%/%j%W%H%3!<%I$NpJs$r3+<(2DG=$G$"$k$H?d;!$5$l$k!#(B
(B
$B$3$N%=%U%H%&%'%"$K$O!">pJs$,O31L$9$kLdBj$,H/8+$5$l$F$$$k!#Js9p$K$h$k$H!"(B
$B@55,$NG'>ZMQ>pJs$r;}$D%f!<%6$O(B account/shipto $B%b%8%e!<%k$r2p$7$F!"%K%C%/(B
$B%M!<%`!"4k6HL>!"%i%9%H%M!<%`!"%U%!!<%9%H%M!<%`!"%_%I%k%M!<%`!"=#L>!"ET;T(B
$BL>$r4^$`=;=j!"(BZIP $B%3!<%I!"9qL>!"EEOCHV9f!"(BFAX $BHV9f$H$$$C$?=EMW$J>pJs$r1\(B
$BMw$9$k$3$H$,2DG=$G$"$k!#$5$i$K!"%f!<%6(B ID $B$O(B 18 $B$+$i(B 20 $B$^$G$N?t;z$G$?$$(B
$B$F$$;O$^$k$?$a!">pJs$r6K$a$F4JC1$K=8$a$k$3$H$,2DG=$G$"$k$HJs9p$5$l$F$$$k!#(B
$B967bpJs$r=8$a$k$3$H$b2DG=$G$"$k!#(B
(B
$B$3$N%=%U%H%&%'%"$K$O!"967bpJs$N%Z!<%8$N(B 1 $B$D0J>e$NNN0h$K!"0-0U$"(B
$B$k(B HTML $B%W%m%0%i%`$r4^$a$k$3$H$,2DG=$K$J$k!"(BHTML $B%?%0A^F~$NLdBj$,B8:_$9$k(B
$B$HJs9p$5$l$F$$$k!#A^F~$5$l$?%3!<%I$O!"LdBj$rJz$($F$$$k(B Web $B%5%$%H$r1\Mw$7(B
$B$?%f!<%6$N%V%i%&%6$K$h$C$F2rZ%3!<%I$,8x3+$5$l$F$$$k!#$3$l$i$NLdBj$O!"(B
$B%f!<%6$,F~NO$9$k%G!<%?$NL5322=$,BEEv$G$J$$$3$H$K5/0x$9$k!#(B
(B
(BphpShop 0.6.1-b $B0JA0$N%P!<%8%g%s$,!"$3$l$i$NLdBj$rJz$($F$$$k$HJs9p$5$l$F(B
$B$$$k!#(B
(B
(B45. XtremeASP PhotoGallery Adminlogin.ASP SQL Injection Vulnerab...
(BBugTraq ID: 9438
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Jan 16 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9438
$B$^$H$a(B:
(B
(BXtremeASP PhotoGallery $B$O(B Web $B%V%i%&%6$+$iMxMQ2DG=$J2hA|1\Mw%9%/%j%W%H$G(B
$B$"$k!#$3$N%=%U%H%&%'%"$O(B ASP $B$G(B
$B$H%Q%9%o!<%I$NCM$r(B SQL $B%/%(%j$K4^$a$kA0$K==J,$KL5322=$7$J$$!#%j%b!<%H$N96(B
$B7b$N967b$,9T$o$l$k2DG=@-$,$"$k!#(B
(B
$B$3$NLdBj$rMxMQ$9$k967b$,@.8y$7$?>l9g!"$3$N%=%U%H%&%'%"$O%G!<%?$NO31L!"2~(B
$BJQ$N4m81$K$5$i$5$l$k2DG=@-$,$"$j!"$5$i$K967b5=;U$N6X8G4|4V$O!"(BWeb $B%5%$%H$+$i<}=8$7$?EE;R%a!<%k%"%I(B
$B%l%9$NNL$K1~$8$FD9$/$5$l$k$Y$-$G$"$m$&$+!)$^$?!"$3$&$$$C$?:>5=;U$N6X8G4|(B
$B4V$O!"Aw?.$7$?%9%Q%`$N?t$KHfNc$9$Y$-$G$"$m$&$+!)(BCAN-SPAM $BK!0F$N0cH?http://www.securityfocus.com/news/7846
(B
(B2. No relief from Microsoft phishing bug
$BCx5=$N1B?)$H$J$C$?!#(B
(B
(Bhttp://www.securityfocus.com/news/7807
(B
(B3. Lamo Pleads Guilty to Times Hack
$BCxhttp://www.securityfocus.com/news/7771
(B
(B4. Nigerian 419ers run dry
$BCxhttp://www.securityfocus.com/news/7856
(B
(B5. New Internet virus spreading fast
$BCxhttp://www.securityfocus.com/news/7854
(B
(B6. Beware the Habeas Joe Job
$BCxhttp://www.securityfocus.com/news/7852
(B
(B
(BIV. SECURITYFOCUS TOP 6 TOOLS
(B-----------------------------
(B1. File::Scan v0.79
$B:nhttp://www.cpan.org/authors/id/H/HD/HDIAS/
$BF0:n4D6-(B: N/A
$B$^$H$a(B:
(B
(BFile::Scan $B%b%8%e!<%k$O!"(BWindows/DOS/Mac $B$N%&%$%k%9$r8!=P2DG=$J!"%^%k%A%W(B
$B%i%C%H%U%)!<%`$N%&%$%k%9%9%-%c%J$r:n@.$9$k5!G=$r%f!<%6$KDs6!$7$^$9!#$3$N(B
$B%=%U%H%&%'%"$O%&%$%k%9%9%-%c%J$H$=$N%7%0%M%A%c$N%G!<%?%Y!<%9$r4^$s$G$$$^(B
$B$9!#(B
(B
(B2. Dropbear SSH Server v0.41
$B:nhttp://matt.ucc.asn.au/dropbear/dropbear.html
$BF0:n4D6-(B: POSIX
$B$^$H$a(B:
(B
(BDropbear $B$O%a%b%j$,>/$J$$AH$_9~$_4D6-$K$*$$$F;HMQ2DG=$J$h$&$K>.7?$K@_7W$5(B
$B$l$?(B SSH2 $B%5!<%P$G$9!#0lHLE*$J;HMQ$G$O==J,$K5!G=$7!"%;%-%e%"$G$9!#(B
(B
(B3. OSIRIS v3.0.0
$B:nhttp://osiris.shmoo.com
$BF0:n4D6-(B: BSDI$B!"(BFreeBSD$B!"(BLinux$B!"(BMacOS$B!"(BOpenBSD$B!"(BUNIX$B!"(BWindows 2000,
(BWindows NT, Windows XP
$B$^$H$a(B:
(B
(BOsiris $B$O!"J#?t$N%3%s%T%e!<%?$K$h$k%M%C%H%o!<%/$G$ND94|E*$JJQ2=$r4F;k$7!"(B
$BJQ2=$r4IM}\:Y!"%+!<%M%k%b%8%e!<%k!"$*$h$S%M%C%H%o!<%/%$%s(B
$B%?!<%U%'%$%9$N@_Dj$r4^$`B>$N>pJs$r4IM}$9$k5!G=$r;CDjE*$K%5%]!<%H$7$F$$$^(B
$B$9!#(B($BK\%Y!<%?%j%j!<%9$K$OF1:-$5$l$F$$$^$;$s!#(B)
(B
(B4. mrtg v2.10.13
$B:nhttp://people.ee.ethz.ch/~oetiker/webtools/mrtg/
$BF0:n4D6-(B: POSIX$B!"(BWindows 2000$B!"(BWindows NT
$B$^$H$a(B:
(B
(BMulti Router Traffic Grapher (MRTG) $B$O!"%M%C%H%o!<%/4V$N%H%i%U%#%C%/$NIi(B
$B2Y$r4F;k$9$k%D!<%k$G$9!#$3$N%=%U%H%&%'%"$O!"8=:_$N%H%i%U%#%C%/>uBV$r;k3P(B
$BE*$KI=<($9$k(B GIF/PNG $B2hA|$r4^$s$@(B HTML $B%Z!<%8$r:n@.$7$^$9!#(B
(B
(B5. Yet Another antiVirus Recipe v1.8.6
$B:nhttp://agriroot.aua.gr/~nikant/nkvir/
$BF0:n4D6-(B: N/A
$B$^$H$a(B:
(B
(BYet Another antiVirus Recipe $B$O!"B?$/$N0lHLE*$JEE;R%a!<%k%o!<%`$r%U%#%k%?(B
$B%j%s%0$9$k$N$KM-MQ$J(B procmail $B$G$9!#$3$N%=%U%H%&%'%"$O!"(Bbase-64 $B%7%0%M%A%c(B
$B$r;}$D%o!<%`(B (Klez$B!"(BHybris$B!"$*$h$S(B BugBear $B$J$I(B)$B!"(BHTML IFRAME $B$rMxMQ$9$k(B
$B967b!"(BCLSID $B$rMxMQ$7$F3HD%;R$r1#$9967b!"(B-XML $B%3!<%I%Y!<%9$rMxMQ$9$k967b!"(B
$B5=$H8F$P$l$khttp://m0n0.ch/wall
$BF0:n4D6-(B: FreeBSD
$B$^$H$a(B:
(B
(Bm0n0wall $B$O!"AH$_9~$_(B PC $B$KE,1~$7$?(B FreeBSD $BM3Mh$N%*!<%k%$%s%o%s$N%U%!%$(B
$B%"%&%)!<%k%=%U%H%&%'%"%Q%C%1!<%8$G$9!#$3$N%=%U%H%&%'%"$O!">&MQ$N%U%!%$%"(B
$B%&%)!<%k@=IJ$N$h$&$J;H$$$d$9$$(B Web $B%$%s%?!<%U%'!<%9$rF1:-$7$F$$$^$9!#(BPHP 
$B$,%7%'%k%9%/%j%W%H$NBe$o$j$K;HMQ$5$l!"A4BN$N%7%9%F%`@_Dj$O!"6&DL$N(B XML $B7A(B
$B<0$N%U%!%$%kFb$K3JG<$5$l$^$9!#L5@~(B LAN$B!"(BVPN$B!"%H%i%U%#%C%/%7%'%$%T%s%0$J$I(B
$B$b%5%]!<%H$7$F$$$^$9!#(B
(B
(B--
$BLu(B: $B@>B<9/MN(B(NISHIMURA Yasuhiro)$B!"A}EDCR0l(B(MASUDA Tomokazu)$B!"(B
$B>.>>%_%5(B(KOMATSU Misa)$B!"GOCeFF(B(UMAKI Atsushi)$B!"(B
$B3QED8<;J(B(KAKUDA Motoshi)$B!"@P86J8;R(B(ISHIHARA Ayako)$B!"(B
$B>!3$D>?M(B(KATSUMI Naoto)$B!"9b66=SB@O:(B(TAKAHASHI Shuntarou)
$B4F=$(B: $B@>B<9/MN(B(NISHIMURA Yasuhiro)
(BLAC Co., Ltd.
(Bhttp://www.lac.co.jp/security/
Attachment: smime.p7s
Description: S/MIME cryptographic signature
Prev by Date: SecurityFocus Newsletter #231 2004-1-5->2004-1-9
Next by Date: SecurityFocus Newsletter #233 2004-1-19->2004-1-23
Previous by thread: SecurityFocus Newsletter #231 2004-1-5->2004-1-9
Next by thread: SecurityFocus Newsletter #233 2004-1-19->2004-1-23
Index(es):
- Date
- Thread