[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
SecurityFocus Newsletter #233 2004-1-19->2004-1-23

To: bugtraq-jp@xxxxxxxxxxxxxxxxx
Subject: SecurityFocus Newsletter #233 2004-1-19->2004-1-23
From: Tomokazu Masuda <tomokazu.masuda@xxxxxxxxx>
Date: Fri, 20 Feb 2004 19:02:33 +0900
$BA}ED(B@$B%i%C%/$G$9!#(B
(B
(BSecurityFocus Newsletter $BBh(B 233 $B9f$NOBLu$r$*FO$1$7$^$9!#(B
$BLu$N$J$$9`L\$K$D$$$F$O!VF|K\8lLu$J$7!W$H$7$F6hJL$7$F$"$j$^$9!#(B
(B
(B--------------------------------------------------------------------------
(BBugTraq-JP $B$K4X$9$k(B FAQ($BF|K\8l(B):
(Bhttp://www.securityfocus.com/popups/forums/bugtraq-jp/faq.shtml
$B!&(BSecurityFocus Newsletter $B$NOBLu$O(B BugTraq-JP $B$G0lH$/$@$5$$(B
(B--------------------------------------------------------------------------
(B--------------------------------------------------------------------------
(BSecurityFocus Newsletter $B$K4X$9$k(BFAQ($B1Q8l(B):
(Bhttp://www.securityfocus.com/popups/forums/securityfocusnews/intro.shtml
(BBugTraq $B$K4X$9$k(B FAQ($B1Q8l(B):
(Bhttp://www.securityfocus.com/popups/forums/bugtraq/faq.shtml
(B--------------------------------------------------------------------------
$B0zMQ$K4X$9$kHw9M(B:
$B!&$3$NOBLu$O(B SecurityFocus $B$N5v2D$r3t<02qe$G9T$o$l$F$$$^$9!#(B
$B!&(BSecurityFocus Newsletter $B$NOBLu$r(B Netnews, Mailinglist, World Wide Web,
(B  $B=q@R(B, $B$=$NB>$N5-O?G^BN$G0zMQ$5$l$k>l9g$K$O%a!<%k$NA4J80zMQ$r$*4j$$$7$^$9!#(B
$B!&F|K\8lHG%K%e!<%9%l%?!<(B 1 $B9f$+$i(B 3 $B9f$^$G$K$O$3$NHw9M$,IU$$$F$$$^$;$s$,!"(B
(B  $B=`MQ$9$k$b$N$H$7$^$9!#(B
$B!&$^$?!"(BSecurityFocus $BDs6!$N(B BugTraq-JP $B%"!<%+%$%V(B [*1] $B$X$N$$$+$J$k7A<0$N(B
(B  $B%O%$%Q!<%j%s%/$b>e5-$K=`$8$F$/$@$5$$!#(B
(B1) http://online.securityfocus.com/archive/79
(B--------------------------------------------------------------------------
$B$3$NOBLu$K4X$9$kHw9M(B:
$B!&$3$NOBLu$NE,MQ@.2L$K$D$$$F3t<02ql9g!"(BBugTraq-JP $B$X(B Errata $B$H$7$F=$@5(B
(B  $BHG$r$4Ej9FD:$/$+!"4F=$l9g$K$O=$@5HG$r$G$-$k$@$1?WB.$KH/9T$7$^$9!#(B
(B--------------------------------------------------------------------------
(BThis translation is encoded and posted in ISO-2022-JP.
(B
$B86HG(B:
(BDate: Mon, 26 Jan 2004 14:27:37 -0700 (MST)
(BMessage-ID: <Pine.LNX.4.58.0401261337060.24339@xxxxxxxxxxxxxxxxxxxxxx>
(B
(BSecurityFocus Newsletter #233
(B-----------------------------
(B
(BThis Issue is Sponsored by: Qualys
(B
(BI. FRONT AND CENTER($BF|K\8lLu$J$7(B)
(B     1. A Visit from the FBI
(B     2. The Giant Wooden Horse Did It!
(BII. BUGTRAQ SUMMARY
(B     1. QMail-SMTPD Long SMTP Session Integer Overflow Denial of Ser...
(B     2. Rit Research Labs The Bat! PGP Message Memory Writing Vulner...
(B     3. SuSE 3Ddiag Insecure Temporary File Handling Symbolic Link V...
(B     4. OpenCA Crypto-Utils.Lib Signature Verification Vulnerability
(B     5. OpenBSD 3.4 Crypto Card Handlers File Descriptor Leak Vulner...
(B     6. PHPShop Project Multiple Vulnerabilities
(B     7. XtremeASP PhotoGallery Adminlogin.ASP SQL Injection Vulnerab...
(B     8. MetaDot Corporation MetaDot Portal Server Multiple Vulnerabi...
(B     9. Ultr@VNC ShellExecute() Local Privilege Escalation Vulnerabi...
(B     10. Agnitum Outpost Firewall Local Privilege Escalation Vulnerab...
(B     11. Netpbm Temporary File Vulnerabilities
(B     12. Pablos FTP Server Unauthorized File Existence Disclosure Vul...
(B     13. Multiple JDBC Database Insecure Default Policy Vulnerabiliti...
(B     14. Mambo Open Source mod_mainmenu.php Remote File Include Vulne...
(B     15. Legato NetWorker NSR_Shutdown Script Temporary File Symlink ...
(B     16. Invision Power Board Index.php Cross-Site Scripting Vulnerab...
(B     17. Veritas Net Backup Professional Open Transaction Manager Rem...
(B     18. YABB SE SSI.PHP ID_MEMBER SQL Injection Vulnerability
(B     19. GoAhead WebServer Directory Management Policy Bypass Vulnera...
(B     20. GetWare Web Server Component Content-Length Value Remote Den...
(B     21. GoAhead WebServer Post Content-Length Remote Resource Consum...
(B     22. Multiple Liquid War Undisclosed Buffer Overflow Vulnerabilit...
(B     23. NetScreen Security Manager Insecure Default Remote Communica...
(B     24. AIPTEK NETCam Webserver Directory Traversal Vulnerability
(B     25. SuSE Multiple Scripts Insecure Temporary File Handling Symbo...
(B     26. PHPix Remote Arbitrary Command Execution Vulnerability
(B     27. WebTrends Reporting Center Management Interface Path Disclos...
(B     28. Anteco Visual Technologies OwnServer Directory Traversal Vul...
(B     29. DUware Software Multiple Vulnerabilities
(B     30. 2Wire HomePortal Series Directory Traversal Vulnerability
(B     31. Honeyd Remote Virtual Host Detection Vulnerability
(B     32. Darkwet Network WebcamXP Cross-Site Scripting Vulnerability
(B     33. Microsoft Windows Samba File Sharing Resource Exhaustion Vul...
(B     34. Cisco Voice Product IBM Director Agent Unauthorized Remote A...
(B     35. Cisco Voice Product IBM Director Agent Port Scan Denial Of S...
(B     36. Mephistoles HTTPD Cross-Site Scripting Vulnerability
(B     37. Apache mod_perl Module File Descriptor Leakage Vulnerability
(B     38. Native Solutions TBE Banner Engine Server Side Script Execut...
(B     39. EA Black Box Need For Speed Hot Pursuit 2 Game Client Remote...
(B     40. Acme thttpd CGI Test Script Cross-Site Scripting Vulnerabili...
(B     41. Netbus Directory Listings Disclosure and File Upload Vulnera...
(B     42. McAfee ePolicy Orchestrator Agent HTTP POST Buffer Mismanage...
(BIII. SECURITYFOCUS NEWS ARTICLES
(B     1. Online fraud, I.D. theft soars
(B     2. Prison time for unlucky  phisher
(B     3. Feds seek input on spammer sentencing
(B     4. The voodoo that Dumaru doesn?t do too well?
(B     5. We'll kill spam in two years - Gates
(B     6. Chip and PIN hits 8 million cards
(BIV. SECURITYFOCUS TOP 6 TOOLS
(B     1. Brcontrol v0.02
(B     2. op  v1.1.9
(B     3. weedlog  v1.0.1
(B     4. phpOpenTracker v1.4.0
(B     5. PeerProtect v0.5
(B     6. m0n0wall vpb26r614
(B
(BI. FRONT AND CENTER($BF|K\8lLu$J$7(B)
(B---------------------------------
(B
(BII. BUGTRAQ SUMMARY
(B-------------------
(B1. QMail-SMTPD Long SMTP Session Integer Overflow Denial of Ser...
(BBugTraq ID: 9432
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Jan 16 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9432
$B$^$H$a(B:
(B
(Bqmail $B$O!"9-HO0O$GMxMQ$5$l$F$$$k%a!<%kE>Aw%(!<%8%'%s%H(B (MTA) $B$G$"$k!#(B
(B
(Bqmail-smtpd $B$K$O!"%j%b!<%H$N967buBV$r0z$-5/$3$9$3$H$,2DG=$K$J$k$H?d;!$5$l$kLdBj$,B8:_$9$k$HJs9p$5$l$F$$$k!#(B
$BJs9p$K$h$k$H!"967b$5$;$k$HJs9p$5$l$F$$$k!#$3$NIi$NCM$O!"G[Ns$NE:(B
$B$(;z$H$7$FMxMQ$5$l$k!#Id9f$,5UE>$7$?@0?t$K4p$E$$$FHO0O30$N%"%I%l%9$K%"%/%;(B
$B%9$7$h$&$H$7$?8e!"%;%0%a%s%F!<%7%g%s0cH?$,0z$-5/$3$5$l$k2DG=@-$,$"$k!#$3$N(B
$BLdBj$rMxMQ$9$k967b$K$h$j!"%j%b!<%H$N967bCHq$7$F!"@5Ev$J%f!<(B
$B%68~$1$N%5!<%S%9$rMxMQITG=>uBV$K4Y$i$;$k$3$H$,2DG=$G$"$k!#(B
(B
$B%j%b!<%H$N967b$N%P!<%8%g%s$b1F6A$rhttp://www.securityfocus.com/bid/9433
$B$^$H$a(B:
(B
(BThe Bat! $B$O!">&MQ$N%a!<%k%f!<%6%(!<%8%'%s%H$G$"$j!"(BRit Research Labs $B$K$h(B
$B$jHNGd$*$h$SJ]$5$l$?!"FCDj$N0-0U$N$"$k%a%C%;(B
$B!<%8$r=hM}$9$kJ}K!$KLdBj$,B8:_$9$k!#(BPGP $B$O%G%U%)%k%H$G%5%]!<%H$9$k$h$&$K@_(B
$BDj$5$l$F$$$k!#(B
(B
$B$3$NLdBj$O!"$3$N%=%U%H%&%'%"$,J#?t$N2U=j$K:F5"E*$KAH$_9~$^$l$F$$$k!"(BPGP $B=p(B
$BL>$r4^$`(B e-mail $B%a%C%;!<%8$r=hM}$9$k>l9g$KH/@8$9$k!#FCJL$KAH$_N)$F$i$l$?0-(B
$B0U$"$k=pL>$K$h$j!"$3$N%=%U%H%&%'%"$O3NJ]$5$l$F$$$J$$%a%b%jNN0h$NFI$_$r4^$s$@%a%C%;!<%8$r=hM}$9$k>l9g!"%/%i%C%7%e$7$J$$$H$$$&$3$H$O=EMW$JN1(B
$B0UE@$G$"$k!#(B
(B
$B$3$NLdBj$O(B The Bat! 2.01 $B$K1F6A$rM?$($k$HJs9p$5$l$F$$$k!#%Y%s%@!<$+$i$NJs(B
$B9p$K$h$k$H!"(BThe Bat! 2.03 beta $B$G$O$3$NLdBj$,:F8=$5$l$F$*$i$:!"$^$?(B The 
(BBat! 2.02 CE $B$O$*$=$i$/$3$NLdBj$N1F6A$O$J$$!#(BThe Bat! 1.x $B$K$O$3$NLdBj$N1F(B
$B6A$O$J$$!#(B
(B
(B3. SuSE 3Ddiag Insecure Temporary File Handling Symbolic Link V...
(BBugTraq ID: 9434
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: Jan 15 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9434
$B$^$H$a(B:
(B
(B3Ddiag $B$O!"(BSuSE Linux 7.3 $B$+$=$l0J>e$N%P!<%8%g%s$K$*$1$k!"(B3D $B%O!<%I%&%'%"!"(B
$B%=%U%H%&%'%"%i%$%V%i%j!"%O!<%I%&%'%"%I%i%$%P$N@_Dj$rI>2A$9$k$?$a$K@_7W$5$l(B
$B$?!"(B3D $B?GCG%=%U%H%&%'%"$G$"$k!#(B
(B
(BSuSE Linux $B%G%9%H%j%S%e!<%7%g%s$N(B 3Ddiag tool $B$,0l;~%U%!%$%k$r=hM}$9$k:]$K!"(B
$BLdBj$,H/8+$5$l$F$$$k!#$3$NLdBj$K$h$j!"1F6A$re$N%G!<%?$,(B
$B%m!<%+%k$+$iGK2u2DG=$K$J$j!"@x:_E*$K=EMW$J%G!<%?$N>C<:!"%5!<%S%9ITG=>uBV$r(B
$B0z$-5/$3$92DG=@-$,$"$k!#(B
(B
$B$3$NLdBj$O!"$3$N%=%U%H%&%'%"$,(B /usr/bin/switch2nv$B!"(B/usr/bin/switch2nvdia$B!"(B
(B/usr/bin/3Ddiag.ignoredb $B$K$*$1$k0l;~%U%!%$%k$N:n@.!">uBV@_Dj$rE,@Z$K=hM}(B
$B$7$F$$$J$$$3$H$K5/0x$9$k$b$N$G$"$k!#(B
(B
(B3Ddiag $B%f!<%F%#%j%F%#$GMxMQ$5$l$k!"(Bswitch2nv$B!"(Bswitch2nvidia $B%9%/%j%W%H$O(B /
(Btmp $B%G%#%l%/%H%j$K(B XF86Config $B$H$$$&L>A0$N%U%!%$%k$r:n@.$9$k!#967bH$7$F$$$k0-0U$N$"$k(B
$B%7%s%\%j%C%/%j%s%/$KCV$-49$($k$3$H$,2DG=$G$"$k!#N>%9%/%j%W%H$,l(B
$B9g!"%U%!%$%k$N@5Ev@-$r8!>Z$;$:$K4IM}e=q$-$7$F$7$^$&!#(B
(B
(B3Ddiag.ignoredb $B$O!"(B/tmp $B%G%#%l%/%H%j$K(B 3Ddiag.ignoredb $B$H$$$&L>A0$N0l;~%U(B
$B%!%$%k$r:n@.$9$k!#(B $B967bA0$G%7%s%\%j%C%/%j%s%/(B
$B$r:n@.$9$k$3$H$,2DG=$G$"$k!#$3$N%"%W%j%1!<%7%g%s$,l9g!"967bL\I8(B
$B$H$J$k%U%!%$%k$,4IM}e=q$-$5$l!"$3$l$K$h$jLdBj$rJz$($k%3%s%T%e!<%?(B
$B$K$*$$$F!"=EMW$J%G!<%?$N>C<:$d%5!<%S%9ITG=>uBV$r0z$-5/$3$5$l$k!#(B
(B
$B$3$N%D!<%k$O%=%U%H%&%'%"%i%$%V%i%j!"%O!<%I%&%'%"@_Dj$N%"%C%W%G!<%H$N$?$a$K(B
$Be$N%P!<%8%g%s$N4D6-$G$N$_MxMQ2DG=$G$"$k!#(B
(B
(B4. OpenCA Crypto-Utils.Lib Signature Verification Vulnerability
(BBugTraq ID: 9435
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Jan 16 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9435
$B$^$H$a(B:
(B
(BOpenCA $B$O!"%*!<%W%s%=!<%9$NG'>Z6I%"%W%j%1!<%7%g%s$G$"$k!#(BOpenCA $B$O!"(Bcrypto
(B-utils.lib $B$H$$$&L>A0$N0E9f2=o!"$3$N4X?t$O(B OpenCA $B%G!<%?%Y!<%9$+$i=pL>>pJs$r(B
$BFI$_9~$_!"=pL>ZL@=q$,0lCW$9$k$+3NG'$9$k$?$a$K;HMQ$5$l$k!#$7$+$7!"4XO"(B
$B$N$"$k>ZL@=q$N%7%j%"%k$K4p$E$$$?Hf3S$N$_$r9T$&$3$N4X?t$N=hM}J}K!$KLdBj$,H/(B
$B8+$5$l$F$$$k!#$3$l$K$h$j!"1*oh$K$b0-0U$N$"$k>ZL@=q$r%A%'%$%s$,$3$N%=%U%H%&%'%"$N%A%'%$%s%G%#%l%/(B
$B%H%j$KBP$7$F?.Mj4X78$r7k$S!"0lCW$7$F$$$k%7%j%"%k$r3JG<$7$F$$$k@5Ev$J>ZL@=q(B
$B$,$9$G$KMxMQ$5$l$F$$$k8x3+80%$%s%U%i$KB8:_$7$?>l9g!"0-0U$N$"$k>ZL@=q$,ZL@=q$r=j;}$9$k0-0U$"$kZL@$,I,MW$J$b$N$KBP$7=pL>$9$k$3$H$,(B
$B2DG=$G$"$k!#$3$NLdBj$O?.Mj$r56>Z$9$k$?$a$K0-MQ$9$k$3$H$,$G$-!"B>$NMM!9$J96(B
$B7b$K7R$,$k!#(B
(B
$B$3$NLdBj$O!"(BOpenCA 0.9.1.6 $B$^$G$N$9$Y$F$N%P!<%8%g%s$K1F6A$rM?$($k$HJs9p$5(B
$B$l$F$$$k!#(B
(B
(B5. OpenBSD 3.4 Crypto Card Handlers File Descriptor Leak Vulner...
(BBugTraq ID: 9436
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: Jan 16 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9436
$B$^$H$a(B:
(B
(BOpenBSD 3.4 $B$O%U%!%$%k5-=R;R$rO31L$5$;$k>\:YITL@$NLdBj$rJz$($F$$$k5?$$$,$"(B
$B$k$HJs9p$5$l$F$$$k!#%Y%s%@!<$+$i$O!"1F6A$N$"$k%7%9%F%`$K0E9f2=%+!<%I$,%$%s(B
$B%9%H!<%k$5$l$F$$$k$HH/@8$9$kLdBj$G$"$k$HJs9p$5$l$F$$$k!#(B
(B
$BL$8!>Z$G$O$"$k$,!"$3$NLdBj$OFC8"$r;}$D(B IO $B%A%c%M%k$X%"%/%;%9$9$k$?$a$K!"%m(B
$B!<%+%k$+$i$N967bH$G$-$k2DG=@-$,$"$k!#$7$+(B
$B$7$J$,$i!"$3$l$OL$8!>Z$G$"$k!#(B
(B
$B$3$NLdBj$O(B OpenBSD 3.3 $B$K$O1F6A$7$J$$!#(B
(B
$B$3$NLdBj$K4X$9$k$5$i$J$k>\:Y$,8x3+$5$lhttp://www.securityfocus.com/bid/9437
$B$^$H$a(B:
(B
(BphpShop Project $B$O(B PHP $B$rMxMQ$7$F3+H/$5$l$?(B Web $B4D6-$GF0:n$9$k%"%W%j%1!<%7(B
$B%g%s3+H/4D6-$G$"$k!#(B
(B
$BJs9p$K$h$k$H!"$3$N%=%U%H%&%'%"$K$O%G!<%?%Y!<%9$KBP$9$k967b!"=EMW$J>pJs$NO3(B
$B1L!"%f!<%6$N%V%i%&%6>e$G$N(B HTML $B$d%9%/%j%W%H%3!<%I$NpJs$r3+<(2DG=$G$"$k$H?d;!$5$l$k!#(B
(B
$B$3$N%=%U%H%&%'%"$K$O!">pJs$,O31L$9$kLdBj$,H/8+$5$l$F$$$k!#Js9p$K$h$k$H!"@5(B
$B5,$NG'>ZMQ>pJs$r;}$D%f!<%6$O(B account/shipto $B%b%8%e!<%k$r2p$7$F!"%K%C%/%M!<(B
$B%`!"4k6HL>!"%i%9%H%M!<%`!"%U%!!<%9%H%M!<%`!"%_%I%k%M!<%`!"=#L>!"ET;TL>$r4^(B
$B$`=;=j!"(BZIP $B%3!<%I!"9qL>!"EEOCHV9f!"(BFAX $BHV9f$H$$$C$?=EMW$J>pJs$r1\Mw$9$k$3(B
$B$H$,2DG=$G$"$k!#$5$i$K!"%f!<%6(B ID $B$O(B 18 $B$+$i(B 20 $B$^$G$N?t;z$G$?$$$F$$;O$^$k(B
$B$?$a!">pJs$r6K$a$F4JC1$K=8$a$k$3$H$,2DG=$G$"$k$HJs9p$5$l$F$$$k!#967bpJs$r=8$a$k$3$H$b2DG=$G$"$k!#(B
(B
$B$3$N%=%U%H%&%'%"$K$O!"967bpJs$N%Z!<%8$N(B 1 $B$D0J>e$N%U%#!<%k%I$K!"(B
$B0-0U$"$k(B HTML $B%W%m%0%i%`$r4^$a$k$3$H$,2DG=$K$J$k!"(BHTML $B%?%0A^F~$NLdBj$,B8(B
$B:_$9$k$HJs9p$5$l$F$$$k!#A^F~$5$l$?%3!<%I$O!"LdBj$rJz$($F$$$k(B Web $B%5%$%H$r(B
$B1\Mw$7$?%f!<%6$N%V%i%&%6$K$h$C$F2rZ%3!<%I$,8x3+$5$l$F$$$k!#$3$l$i$NLdBj$O!"%f!<%6$,F~(B
$BNO$9$k%G!<%?$NL5322=$,BEEv$G$J$$$3$H$K5/0x$9$k!#(B
(B
(BphpShop 0.6.1-b $B0JA0$N%P!<%8%g%s$,!"$3$l$i$NLdBj$rJz$($F$$$k$HJs9p$5$l$F$$(B
$B$k!#(B
(B
(B7. XtremeASP PhotoGallery Adminlogin.ASP SQL Injection Vulnerab...
(BBugTraq ID: 9438
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Jan 16 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9438
$B$^$H$a(B:
(B
(BXtremeASP PhotoGallery $B$O(B Web $B%V%i%&%6$+$iMxMQ2DG=$J2hA|1\Mw%9%/%j%W%H$G$"(B
$B$k!#$3$N%=%U%H%&%'%"$O(B ASP $B$r;HMQ$7$F3+H/$5$l$F$*$j!"(BMicrosoft Windows $B4D(B
$B6-$GMxMQ2DG=$G$"$k!#$3$N%=%U%H%&%'%"$O!"%P%C%/%(%s%I%G!<%?%Y!<%9$H$7$F(B 
(BMySQL $B$rMxMQ$7$F$$$k!#(B
(B
$B$3$N%=%U%H%&%'%"$O(B SQL $BJ8$rA^F~$5$l$kLdBj$rJz$($F$$$k5?$$$,$"$k!#Js9p$K$h(B
$B$k$H!"$3$NLdBj$O(B 'adminlogin.asp' $B$KB8:_$7$F$*$j!"%f!<%6$,M?$($k%f!<%6L>$H(B
$B%Q%9%o!<%I$NCM$r(B SQL $B%/%(%j$K4^$a$kA0$K==J,$KL5322=$7$J$$!#%j%b!<%H$N967b(B
$B$N967b$,9T$o$l$k2DG=@-$,$"$k!#(B
(B
$B$3$NLdBj$rMxMQ$9$k967b$,@.8y$7$?>l9g!"$3$N%=%U%H%&%'%"$O%G!<%?$NO31L!"2~JQ(B
$B$N4m81$K$5$i$5$l$k2DG=@-$,$"$j!"$5$i$K967bhttp://www.securityfocus.com/bid/9439
$B$^$H$a(B:
(B
(BMetaDot Portal Server $B$O%3%s%F%s%D4IM}!"%]!<%?%k!"%*%s%i%$%s$GMxMQ2DG=$J%G(B
$B!<%?%Y!<%9%"%W%j%1!<%7%g%s$rDs6!$9$k%*!<%W%s%=!<%9$N%]!<%?%k%=%U%H%&%'%"$G(B
$B$"$k!#$3$N%=%U%H%&%'%"$O!"%&%'%V%]!<%?%k$d%&%'%V%5%$%H$r:n@.$9$k$?$a$KMxMQ(B
$B$5$l$k!#(B
(B
(BMetaDot Corporation $BpJs$NO31L$r0z$-5/$3$9(BSQL$BJ8$rCmF~$9$k967b$r9T$&2DG=@-(B
$B$,$"$k!#$^$?!"F1MM$NLdBj$K4XO"$9$k%/%m%9%5%$%H%9%/%j%W%F%#%s%0$NLdBj$b3NG'(B
$B$5$l$F$$$k!#(B
(B
$B$3$N%=%U%H%&%'%"$O(B SQL $BJ8$rCmF~$9$kLdBj$rJz$($F$$$k!#$3$NLdBj$rMxMQ$9$k$3(B
$B$H$K$h$j!"967be$N%G!<%?$NGK2u$d=q$-49$($r9T$&$3$H(B
$B$,2DG=$G$"$k!#Js9p$K$h$k$H!"$3$NLdBj$O%5!<%P@_Dj>pJs$rO31L$5$;$k2DG=@-$,$"(B
$B$k!#967bpJs$r%(%i!<%a%C%;!<%8$NI=<(;~$K967bpJs$O8=:_$N(B
(B Perl $B$N%P!<%8%g%s>pJs$N$_$J$i$:(B Web $B%5!<%PFb$N%Q%9>pJs$H$$$C$?%7%9%F%`@_(B
$BDj$N>\:Y$,4^$^$l$k!#(B
(B
$B>e5-$N%/%m%9%5%$%H%9%/%j%W%F%#%s%0$NLdBj$N$[$+$K!"N`;w$7$?1F6A$r$b$?$i$9MM(B
$B!9$JB>$N(B URI $B$,B8:_$9$k!#$3$l$i$NLdBj$b(B URI $BCf$G;XDj$5$l$?JQ?t$NBEEv@-3NG'(B
$B$,IT==J,$G$"$k$3$H$K5/0x$9$k!#(B
(B
(BMetaDot Portal Server 5.6.5.4 b5 $B0JA0$N%P!<%8%g%s$,$3$l$i$NLdBj$rJz$($F$$(B
$B$k$HJs9p$5$l$F$$$k!#(B
(B
$B$3$l$i$NLdBj$O8=:_!"$5$i$J$kJ,@OCf$G$"$k!#$3$NN_@Q(B BID $B$OJ,@O$,40N;$7$?;~(B
$BE@$G8DJL$N(B BID $B$,3d$jEv$F$i$l$kM=Dj$G$"$k!#(B
(B
(B9. Ultr@VNC ShellExecute() Local Privilege Escalation Vulnerabi...
(BBugTraq ID: 9440
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: Jan 17 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9440
$B$^$H$a(B:
(B
(BUltr@VNC $B$O!"%j%b!<%H$N%f!<%6$,%m!<%+%k%f!<%6$G$"$k$+$N$h$&$K%G%9%/%H%C%W(B
$B2hLL$KBP$9$k%"%/%;%9$r2DG=$H$9$k!"%/%i%$%"%s%H!"5Z$S%5!<%PMQ$N%j%b!<%H%"%/(B
$B%;%9%=%U%H%&%'%"%Q%C%1!<%8$G$"$k!#(B
(B
$B$3$N%=%U%H%&%'%"$,;HMQ$5$l$k:]!"0lIt$N%W%m%;%9$O(B SYSTEM $B8"8B$G:3J2DG=$G$"$k!#(B
(B
$B$3$NLdBj$O!"%V%i%&%62hLL$rI=<($9$k:]$K;HMQ$5$l$k(B Win32 API $B$N(B ShellExecute
(B() $B4X?t$N;HMQ$KB8:_$9$k!#$3$N%V%i%&%62hLL$O!"%f!<%6$,$3$N%=%U%H%&%'%"$N%3(B
$B%s%=!<%kFb$+$i(B "Online Help"$B!"$^$?$O(B "Home Page" $B$N$$$:$l$+$rA*Br$7$?>l9g(B
$B$K:n@.$5$l$k!#(BIEXPLORE.EXE $B%W%m%;%9$,http://www.securityfocus.com/bid/9441
$B$^$H$a(B:
(B
(BOutpost Firewall $B$O(B Agnitum $B$K$h$j3+H/$5$l$?(B Win32 $BMQ$N%Q!<%=%J%k%U%!%$%"(B
$B%&%)!<%k%=%U%H%&%'%"$G$"$k!#(B
(B
$B$3$N%=%U%H%&%'%"$,;HMQ$5$l$k:]!"%G%9%/%H%C%W%3%s%=!<%k$O(B SYSTEM $B8"8B$G:3J$9$k$3$H$,2DG=$G$"$k$HJs9p$5$l$F$$$k!#(B
(B
$BJs9p$K$h$k$H!"$3$N%3%s%=!<%k$,8"8B$r9_3J$5$;$k$3$H$J$/h$Chttp://www.securityfocus.com/bid/9442
$B$^$H$a(B:
(B
(BNetpbm $B$O2hA|%$%a!<%8$rA`:n$9$k$?$a$N%f!<%F%#%j%F%#$N=8$^$j$G$"$k!#(B
(B
(BDebian $B$NH/I=$K$h$k$H!"$3$N%=%U%H%&%'%"$K$O0l;~%U%!%$%k$r;HMQ$9$k:]$KB?$/(B
$B$NLdBj$,B8:_$9$k!#0-0U$"$k%m!<%+%k$N%f!<%6$O!"$3$l$i$NLdBj$rMxMQ$9$k$3$H$K(B
$B$h$j!"JL$N%f!<%6$,=jM-$9$k%U%!%$%k$rGK2u2DG=$G$"$k$H?d;!$5$l$k!#$3$l$i$NLd(B
$BBj$r967b$KMxMQ$9$kA0$K!"967b]$N%f!<%6$,$3$N%f!<%F%#%j%F%#$N$$$:(B
$B$l$+$r$r@5$7$/?dB,$9$kI,MW$,$"$k$H?d;!$5$l$k!#(B
$B%U%!%$%k$N>e=q$-$O!"$3$N%=%U%H%&%'%"$r]$N%f!<%6$N8"8B%l(B
$B%Y%k$G9T$o$l$k2DG=@-$,9b$$!#(B
(B
(B12. Pablos FTP Server Unauthorized File Existence Disclosure Vul...
(BBugTraq ID: 9443
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Jan 19 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9443
$B$^$H$a(B:
(B
(BPablos FTP server $B$O%^%k%A%9%l%C%IBP1~$N(B Win32 $BMQ(B FTP $B%5!<%P$G$"$k!#(B
(B
$BJs9p$K$h$k$H!"$3$N%=%U%H%&%'%"$K$O!"%j%b!<%H$N967bA[%k!<%H(B
$B%G%#%l%/%H%j$NHO0O30$K$"$k%U%!%$%k$NB8:_M-L5$r3NG'$9$k$3$H$,2DG=$K$J$kLdBj(B
$B$,B8:_$9$k!#(B
(B
$B$3$N?6$kIq$$$O!"%/%i%$%"%s%H$,O"B3$9$k(B ".." $BJ8;zNs$r4^$`AjBP%Q%9$r;HMQ$7$F(B
(B FTP $BMQ$N2>A[%k!<%H%G%#%l%/%H%j$NHO0O30$K$"$k%U%!%$%k$N:o=|$r;n$_$k:]$K@8(B
$B$8$k!#$3$N%U%!%$%k<+BN$O:o=|$5$l$J$$$,!"%U%!%$%k$NB8:_M-L5$K$h$j0[$J$k%(%i(B
$B!<%a%C%;!<%8$,2hLL>e$KI=<($5$l$k!#$3$N%U%!%$%k$,B8:_$9$k>l9g$K$O!"%5!<%P$O(B
$B!V(B550 Permission denied.$B!W$N%l%9%]%s%9$rJV$7!"B8:_$7$J$$>l9g$K$O!V(B550 File
(B not found.$B!W$rJV$9!#(B
(B
$B$3$&$7$F967bhttp://www.securityfocus.com/bid/9444
$B$^$H$a(B:
(B
$BJs9p$K$h$k$H!"J#?t$N(B JDBC $B%G!<%?%Y!<%9$Nu672<$K$*$$$F!"%j%b!<%H$N967be$K$*$$$F0U?^$9$k%3%^%s%I$rZ$,I,MW(B
$B$G$"$k$H?d;!$5$l$k!#(B
(B
$B$3$NLdBj$KM3Mh$9$k967b$rNc>Z$9$k$?$a$N!"(BJ2EE/RI Pointbase Database $B8~$1$N(B
$B35G0Z%3!<%I$,8x3+$5$l$F$$$k!#$=$NB>$N8DJL$N%G!<%?%Y!<%9\:Y$O!"$3$l$i$NLdBj$rH/8+$7$?8&=$\:Y$,8x3+$5$lhttp://www.securityfocus.com/bid/9445
$B$^$H$a(B:
(B
(BMambo Open Source $B$O(B Web $B%$%s%?%U%'!<%9$rHw$($?%3%s%F%s%D4IM}%7%9%F%`$G$"(B
$B$k!#(B
(B
$B$3$N%=%U%H%&%'%"$K$O!"LdBj$rJz$($k%=%U%H%&%'%"$r2TF0$5$;$F$$$k%5!<%P>e$G$N%P!<%8%g%s$bF1MM$K1F6A$rhttp://www.securityfocus.com/bid/9446
$B$^$H$a(B:
(B
(BLegato NetWorker $B$O!"%G!<%?$d%a%G%#%"$N6&M-!"$*$h$S!"0[$J$k%M%C%H%o!<%/4V(B
$B$G$N%P%C%/%"%C%W=hM}$r;Y1g$9$k%5!<%P%Q%C%1!<%8$G$"$k!#$3$N%=%U%H%&%'%"$O!"(B
(BMicrosoft Windows NT/2000 $B$@$1$G$J$/!"B?$/$N(B Unix $BM3Mh$N(B OS $B>e$GF0:n$9$k!#(B
(B
$BJs9p$K$h$k$H!"$3$N%=%U%H%&%'%"$O%7%s%\%j%C%/%j%s%/967b$r$N(B "$$" $B$NItJ,$NCM$r(B1$B$D(B
$B$:$DA}2C$5$;$J$,$iB?$/$N%7%s%\%j%C%/%j%s%/$r@8@.$9$k$b$N$H?d;!$5$l$k!#$3$N(B
$B3F!9$N%7%s%\%j%C%/%j%s%/$O!"967b]$H$7$F$$$k0U?^$7$?%U%!%$%k$r;X(B
$B$7<($9$h$&$K@8@.$5$l$k!#LdBj$rJz$($k%9%/%j%W%H$,:3J$5$l$k!"$"$k$$$O%7%9%F%`A4BN$,(B
$B%5!<%S%9ITG=>uBV$K4Y$k2DG=@-$,$"$k!#(B
(B
$BJs9p$K$h$k$H!"LdBj$rJz$($k%9%/%j%W%H$r$N%P!<%8%g%s(B
$B$b1F6A$rhttp://www.securityfocus.com/bid/9447
$B$^$H$a(B:
(B
(BInvision Power Board $B$OEE;R7G<(HD5!G=$rDs6!$9$k%=%U%H%&%'%"$G$"$k!#$3$N%=(B
$B%U%H%&%'%"$O!"(BPHP $B$rMxMQ$7$F3+H/$5$l$F$*$j!"(BUnix/Linux $BM3Mh$N(B OS $B$*$h$S(B 
(BMicrosoft Windows $B$GMxMQ2DG=$G$"$k!#(B
(B
$B$3$N%=%U%H%&%'%"$K$O!"%j%b!<%H$N%f!<%6$,%/%m%9%5%$%H%9%/%j%W%F%#%s%0$rMxMQ(B
$B$9$k967b$rl9g!"967bZMQ>pJs(B
$B$N@`$N967b$b2DG=$G$"$k!#(B
(B
(BInvision Power Board $B$N$9$Y$F$N%P!<%8%g%s$,$3$NLdBj$rJz$($F$$$k$HJs9p$5$l(B
$B$F$$$k!#(B
(B
(B17. Veritas Net Backup Professional Open Transaction Manager Rem...
(BBugTraq ID: 9448
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Jan 19 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9448
$B$^$H$a(B:
(B
(BVeritas Net Backup Professional $B$O%P%C%/%"%C%W%f!<%F%#%j%F%#$G$"$k!#(B
(B
$B$3$N%=%U%H%&%'%"$K$O!"967b]$N%3%s%T%e!<%?$NFCDj$N%j%=!<%9$KBP$9(B
$B$k40A4$J%"%/%;%98"8B$rC%e$K6&M-%I%i%$%V$r@8@.$9$k!#$3$N6&M-(B
$B%I%i%$%V$O%M%C%H%o!<%/>e$NC/$b$,MxMQ2DG=$J>uBV$K$J$C$F$*$j!"%G%U%)%k%H$G(B '
(BEveryone/Full Control' $B$N%Q!<%_%C%7%g%s$,@_Dj$5$l$k!#$3$NLdBj$rMxMQ$7$F!"(B
$B%/%i%$%"%s%H%3%s%T%e!<%?>e$N%m!<%+%k%U%)%k%@$N%Q!<%_%C%7%g%s$r?/32$5$l$k$3(B
$B$H$O$J$$!#(B
(B
$B$3$NLdBj$rMxMQ$9$k967b$,@.8y$7$?>l9g!"%j%b!<%H$N967b]$N%3%s%T%e!<%?$N%I%i%$%V>e$KB8:_$9$k%U%!%$%k$K%"%/(B
$B%;%92DG=$K$J$k$H?d;!$5$l$k!#(B
(B
(B18. YABB SE SSI.PHP ID_MEMBER SQL Injection Vulnerability
(BBugTraq ID: 9449
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Jan 19 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9449
$B$^$H$a(B:
(B
(BYaBB SE $B$O%U%j!<$KMxMQ2DG=$J%*!<%W%s%=!<%9$N(B Yet Another Bulletin Board 
(B(YaBB) $B$N0\?"HG$G$"$k!#$3$N%=%U%H%&%'%"$O(B UNIX$B!"(BLinux$B!"(BMicrosoft Windows 
$B$GMxMQ2DG=$G$"$k!#(B
(B
$B$3$N%=%U%H%&%'%"$,Jz$($kLdBj$K$h$j!"%j%b!<%H$N%f!<%6$,(B SQL $BJ8$rCmF~$9$k96(B
$B7b$r;E3]$1$k$3$H$,$G$-$k2DG=@-$,$"$k!#(B
(B
$BJs9p$K$h$k$H!"$3$NLdBj$O!"$3$N%=%U%H%&%'%"$N0lIt$H$7$FG[I[$5$l$k(B SSI.php 
$B%9%/%j%W%HFb$KB8:_$9$k!#%f!<%6$,M?$($k%Q%i%a!<%?(B ID_MEMBER URI $B$KBP$9$kL5(B
$B322=$,IT==J,$G$"$k$?$a!"%j%b!<%H$N%f!<%6$O0U?^$7$?(B SQL $B%/%(%j$r$3$N%=%U%H(B
$B%&%'%"$K$h$j;HMQ$5$l$k%G!<%?%Y!<%9$KCmF~2DG=$G$"$k!#$3$l$K$h$j!"%j%b!<%H$N(B
$B967b$N967b$,l9g!"$3$N%=%U%H%&%'%"$O!"%G!<%?$N3+<($"$k(B
$B$$$O2~JQ$H$$$C$?%;%-%e%j%F%#>e$N6<0R$KGx$5$l$k2DG=@-$,$"$k!#$^$?!"967bhttp://www.securityfocus.com/bid/9450
$B$^$H$a(B:
(B
(BGoAhead WebServer $B$O!"(BMicrosoft Windows $B$*$h$S(B Unix/Linux $BM3Mh$N(B OS $B$r4^$`!"(B
$BB?$/$N(B OS $B$GMxMQ2DG=$JAH$_9~$_(B Web $B%5!<%P$N$N%G%#%l%/%H%jFb$N%j%=!<%9$KBP$9$k(B
$B%G%U%)%k%H$N=hM}$rDj5A$9$k$H$$$C$?!"FCDj$N%G%#%l%/%H%jFb$N%j%=!<%9$KBP$9$k(B
$B%j%/%(%9%H$r$I$N$h$&$K=hM}$9$k$+$N%]%j%7!<$r%f!<%6$,@_Dj2DG=$K$J$k!#$3$NF0(B
$B:n$O!"FbIt$G$O(B websUrlHandlerRequest() $B4X?t$r2p$7$F=hM}$5$l$k!#$3$N%=%U%H(B
$B%&%'%"$O!"%j%b!<%H$N967bJN,$7$?$j!"%P%C%/%9%i%C%7%e$GCV$-49$($?$j$9$k$3$H$K$h$j!"(B
$B%G%#%l%/%H%j4IM}%]%j%7!<$r1*2s2DG=$K$J$k!#%j%/%(%9%H$N@hF,$N(B URL $B%(%s%3!<(B
$B%I$5$l$?%P%C%/%9%i%C%7%e(B (%5c) $B$G$b%]%j%7!<$r1*2s$G$-$k2DG=@-$,$"$k!#$^$?!"(B
$BB>$N%P%j%(!<%7%g%s$bB8:_$9$k!#(B
(B
$B$3$NLdBj$K$h$j!"K\Mh5v2D$5$l$F$$$J$$$K$b$+$+$o$i$:!"$3$N(B Web $B%5!<%P>e$GDs(B
$B6!$5$l$F$$$k%j%=!<%9$X%"%/%;%92DG=$K$J$k2DG=@-$,$"$j!"7k2L$H$7$F!"%9%/%j%W(B
$B%H$N%=!<%9%3!<%I$H$$$C$?=EMW$J>pJs$,3+<($5$l$k5?$$$,$"$k!#@53N$J1F6AHO0O$O!"(B
$B$I$s$JpJs$^$?$O%5!<%P>e$GDs6!$5$l$F$$$kB>$N=EMW$J>pJs$N@-http://www.securityfocus.com/bid/9451
$B$^$H$a(B:
(B
(BGetWare $B$O!"(BWebCam Live $B$*$h$S(B PhotoHost $B$N(B 2 $B$D$N@=IJ$N3+H/$*$h$SJ]uBV$r0z$-5/$3$9LdBj$rJz$($F$$$k5?$$$,$"$k$HJs9p$5$l$F$$$k!#Js9p$K$h$k$H!"(B
$B$3$NLdBj$O1F6A$re!"@5Ev$J%f!<%68~$1$N%5!<%S%9Ds6!$OMxMQITG=>uBV$K4Y$k!#(B
(B
$B%j%b!<%H$N967buBV$K4Y$i$;$k$3$H$,2DG=$G$"$k!#(B
(B
$B$3$NLdBj$O!"(BWebCam Live 2.01 $B0JA0$N%P!<%8%g%s!"$*$h$S(B PhotoHost 4.0 $B0JA0$N(B
$B%P!<%8%g%s$K1F6A$r5Z$\$9$HJs9p$5$l$F$$$k$3$H$KN10U$9$Y$-$G$"$k!#$3$l$O!"$3(B
$B$l$iN>J}$N@=IJ$,(B GetWare Web $B%5!<%P%3%s%]!<%M%s%H$rF1:-$7$F$$$k$?$a$G$"$k!#(B
(B
(B21. GoAhead WebServer Post Content-Length Remote Resource Consum...
(BBugTraq ID: 9452
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Jan 19 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9452
$B$^$H$a(B:
(B
(BGoAhead WebServer $B$O!"(BMicrosoft Windows $B$*$h$S(B Unix/Linux $BM3Mh$N(B OS $B$r4^$`(B
$BMM!9$J(B OS $B$GMxMQ2DG=$JAH$_9~$_(B Web $B%5!<%P$NCHq$5$;!"7k2L$H$7$F%5!<%S%9ITG=>uBV$r0z$-5/$3$9$3$H$,2DG=$G$"$k(B
$B$H?d;!$5$l$k!#(B
(B
$B$3$NLdBj$O!"%j%b!<%H$+$i$N(B POST $B%j%/%(%9%H$N=hM}$KB8:_$9$k!#(BPOST $B%j%/%(%9(B
$B%H$N(B content-length $B$KFCDj$N%5%$%:$r;XDj$7!"$=$l$h$j$b>.$5$J%5%$%:$N%G!<%?(B
$B$rAw?.$7$?8e$K%3%M%/%7%g%s$r@ZCG$9$k$3$H$G!"%5!<%S%9$rL58B%k!<%W$K4Y$l$k$3(B
$B$H$,2DG=$G$"$k!#$3$N%W%m%0%i%`$O@ZCG$5$l$?%3%M%/%7%g%s$N=hM}$,ITE,@Z$G$"$j!"(B
$B2aBg$J%3%s%T%e!<%?$N%j%=!<%9$r>CHq$5$;!"@x:_E*$K$3$N%5!<%S%9$H6&$K%3%s%T%e(B
$B!<%?$rDd;_$5$;$k$3$H$,2DG=$G$"$k!#(B
(B
(B22. Multiple Liquid War Undisclosed Buffer Overflow Vulnerabilit...
(BBugTraq ID: 9453
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Jan 19 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9453
$B$^$H$a(B:
(B
(BLiquid War $B$O!"MM!9$J4D6-$GMxMQ2DG=$JB??M?t;22C7?$N%3%s%T%e!<%?%2!<%`$G$"(B
$B$k!#(B
(B
$B$3$N%=%U%H%&%'%"$K$O!"%P%C%U%!%*!<%P!<%U%m!<$r0z$-5/$3$9J#?t$NLdBj$rJz$($F(B
$B$$$k5?$$$,$"$k$HJs9p$5$l$F$$$k!#$3$l$i$NLdBj$O!"(Bsprintf $B$KN`;w$9$k4X?t$G%f(B
$B!<%6$NM?$($?%G!<%?$,%a%b%j$N3NJ]:Q$_$N%P%C%U%!$K%3%T!<$5$l$kA0$N6-3&%A%'%C(B
$B%/$,IT==J,$G$"$k$3$H$K5/0x$9$k!#$5$i$K!"$3$N%=%U%H%&%'%"$N%M%C%H%o!<%/%U%m(B
$B!<$N%O%s%I%i$N=hM}Z$G$O$"$k$,!"967bhttp://www.securityfocus.com/bid/9455
$B$^$H$a(B:
(B
(BNetScreen-Security Manager $B$O!"(BNetScreen $B$K$h$C$FHNGd!"J]pJs$K%"%/%;%92DG=$K$J$k$H?d;!$5$l$k!#(B
(B
$B$3$NLdBj$O!"%G%U%)%k%H$N0E9f2=$N;HMQJ}K!$KB8:_$9$k!#$3$N@=IJ$,%j%b!<%H$N(B 
(BScreenOS 5.0 $B$,Ek:\$5$l$?5!4o$HDL?.$9$k$?$a$K;HMQ$5$l$?:]!"$3$N5!4o$O!"%G(B
$B%U%)%k%H$G$O0E9f2=$r;HMQ$7$J$$!#(BScreenOS $B$,Ek:\$5$l$?5!4o$H$3$N@=IJ$H$N4V(B
$B$GAw?.$5$l$?>pJs$O!"J?J8$GAw?.$5$l$k2DG=@-$,$"$j!"%(%s%I%]%$%s%H4V$r0\F0$9(B
$B$k4V!"Cf4V$N%M%C%H%o!<%/$G$O!"@x:_E*$K=EMW$J%G!<%?$r%-%c%W%A%c2DG=$H$J$k!#(B
(B
(B24. AIPTEK NETCam Webserver Directory Traversal Vulnerability
(BBugTraq ID: 9456
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Jan 20 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9456
$B$^$H$a(B:
(B
(BAIPTEK NETCam Viewer $B$O!"(BWeb $B%+%a%i$N%5!<%P$G$"$k!#$3$N%=%U%H%&%'%"$K$O!"(B
(BNETCam webserver $B$H8F$P$l$k(B Web $B%5!<%P$bAH$_9~$^$l$F$$$k!#(B
(B
$B$3$N%=%U%H%&%'%"$N(B NETCam webserver $B$K$O!"%j%b!<%H$N967bA[%k(B
$B!<%H%G%#%l%/%H%j$NHO0O30$K$"$k>pJs$K%"%/%;%92DG=$K$J$k$H?d;!$5$l$kLdBj$,B8(B
$B:_$9$k$HJs9p$5$l$F$$$k!#$3$NLdBj$O!"%f!<%6$NM?$($kF~NO$NL5322=$,IT==J,$G$"(B
$B$k$3$H$K5/0x$9$k!#$3$NLdBj$K$h$j!"%j%b!<%H$N967bA[%k!<%H%G%#%l%/%H%j$NHO0O30$K%"%/%;%92DG=$K$J$k$H?d;!$5(B
$B$l$k!#(B
(B
$B$3$NLdBj$rMxMQ$9$k967b$K@.8y$7$?>l9g!"%j%b!<%H$N967bpJs$K%"(B
$B%/%;%92DG=$K$J$k$H?d;!$5$l$k!#(B
(B
(BAIPTEK NETCam Viewer 1.0.0.28 $B0JA0$N%P!<%8%g%s$,$3$NLdBj$rJz$($F$$$k5?$$$,(B
$B$"$k$HJs9p$5$l$F$$$k$,!"B>$N%P!<%8%g%s$bF1MM$K1F6A$r$N%P!<(B
$B%8%g%s$r;HMQ$7$F$$$k!#$h$C$F!"$3$NLdBj$O!"(BBoa Webserver File Disclosure 
(BVulnerability (BID 7544) $B$*$h$S(B Boa Webserver 0.94.2.x File Disclosure 
(BVulnerability (BID 1770) $B$H4XO"$,$"$k$H?d;!$5$l$k!#(B
(B
(B25. SuSE Multiple Scripts Insecure Temporary File Handling Symbo...
(BBugTraq ID: 9457
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: Jan 20 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9457
$B$^$H$a(B:
(B
(Bfvwmbug $B$O!"%f!<%6$,(B FVWM $B$K4X$9$k%P%0%l%]!<%H$r:n@.$7!"EE;R%a!<%k$GAw?.$9(B
$B$k$3$H$r2DG=$K$9$kJd=u%7%'%k%9%/%j%W%H$G$"$k!#(Bwm-oldmenu2new $B$O!"8E$$(B 
(BWindowMaker $BIw$N%a%K%e!<%U%!%$%k$+$i?7$7$$(B PropertyList $BIw$KJQ49$9$k$?$a$K(B
$B;HMQ$5$l$k!#(Bx11perfcomp $B$O!"(Bx11perf $B$N=PNO$rE}9g$7!"=q<0$r@0$($k%9%/%j%W%H(B
$B$G$"$k!#(Bxf86debug $B$O!"(BX $B%5!<%P$r%G%P%C%0$9$k$?$a$K;HMQ$5$l$k%9%/%j%W%H$G$"(B
$B$j!"(Broot $B%f!<%6$K$h$C$F8F$S=P$5$l$J$1$l$P$J$i$J$$!#(Bwinpopup-send.sh $B$O!"(B
(Bkopete $B%Q%C%1!<%8$N0lIt$H$7$FF1:-$5$l$F$$$k%9%/%j%W%H$G$"$k!#(Blvmcreate_
(Binitrd $B$O!"?7$7$$05=L$5$l$?=i4|$N(B RAM $B%G%#%9%/$r:n@.$9$k$?$a$K;HMQ$5$l$k!#(B
(B
(BSuSE 9.0 $B$KF1:-$5$l$F$$$kJ#?t$N%9%/%j%W%H$O!"0BA4$G$J$$0l;~%U%!%$%k$N:n@.!"(B
$B$*$h$S%7%s%\%j%C%/%j%s%/$NLdBj$rJz$($F$$$k5?$$$,$"$k$HJs9p$5$l$F$$$k!#Js9p(B
$B$K$h$k$H!"0J2<$N%9%/%j%W%H$,LdBj$rJz$($F$$$k!#(B
(B
(B/usr/X11R6/bin/fvwm-bug
(B/usr/X11R6/bin/wm-oldmenu2new
(B/usr/X11R6/bin/x11perfcomp
(B/usr/X11R6/bin/xf86debug
(B/opt/kde3/bin/winpopup-send.sh
(B/sbin/lvmcreate_initrd
(B
$B$3$NLdBj$O!"LdBj$rJz$($F$$$k%9%/%j%W%H$,0BA4$G$O$J$$J}K!$G0l;~%U%!%$%k$r:n(B
$B@.$9$k$3$H$K5/0x$9$k!#6qBNE*$K$O!"%9%/%j%W%H$,8F$S=P$5$l$k:]$K!"?dB,2DG=$J(B
$B0l;~%U%!%$%k$r:n@.$9$k!#$3$NLdBj$rMxMQ$9$k967b$r9T$&$?$a$K!"%m!<%+%k$N967b(B
$BA0$N2DJQ$NCM$NItJ,$r(B 1 $B$:$DA}2C$5$;$?CM(B
$B$NL>A0$r;}$DB?$/$N%7%s%\%j%C%/%j%s%/$r(B "tmp" $B%G%#%l%/%H%jFb$K:n@.$9$k2DG=(B
$B@-$,$"$k!#$3$l$i$N%j%s%/$O!"967b]$N0U?^$9$k%U%!%$%k$r;X$7<($9!#(B
$BLdBj$rJz$($k%9%/%j%W%H$,:3J$5$l$k!"$"$k$$$O%7%9%F%`A4BN$,(B
$B%5!<%S%9ITG=>uBV$K4Y$k2DG=@-$,$"$k!#(B
(B
$B$3$N(B BID $B$K5-:\$5$l$F$$$k$=$l$>$l$NLdBj$O!"$5$i$J$kJ,@O$,40N;http://www.securityfocus.com/bid/9458
$B$^$H$a(B:
(B
(BPHPix $B$O!"(BPHP $B$rMxMQ$7$F3+H/$5$l$?(B Web $B%V%i%&%6$G;HMQ2DG=$J!"http://www.securityfocus.com/bid/9460
$B$^$H$a(B:
(B
(BWebTrends Reporting Center $B$O!"J#?t$N(B Web $B%5!<%P4D6-$GF0:n$9$k!"(BWeb $B%"%/%;(B
$B%9>u67$r@0M}$7!"I=<($9$k$?$a$K;HMQ$5$l$k!#$3$N%=%U%H%&%'%"$O!"(BMicrosoft 
(BWindows$B!"(BLinux$B!"$*$h$S(B Solaris $B$GMxMQ2DG=$G$"$k!#(B
(B
$B$3$N%=%U%H%&%'%"$N4IM}%$%s%?!<%U%'!<%9$O!"B8:_$7$J$$%j%=!<%9$,MW5a$5$l$?:](B
$B$K!"%$%s%9%H!<%k%Q%9$N>pJs$r3+<($9$k!#$3$N4IM}%$%s%?!<%U%'!<%9$O!"(BTCP $B%]!<(B
$B%H(B 1099 $BHV$G(B HTTP $B$r2p$7$F%"%/%;%92DG=$G$"$k!#$3$NLdBj$O!"4IM}%$%s%?!<%U%'(B
$B!<%9$K4^$^$l$k(B 'viewreport.pl' $B%9%/%j%W%H$KB8:_$7!"(B'profileid' $B%Q%i%a!<%?(B
$B$KB8:_$7$J$$(B ID $B$r;XDj$9$k$3$H$K$h$C$F0z$-5/$3$5$l$k2DG=@-$,$"$k!#$3$N%=%U(B
$B%H%&%'%"$N%$%s%9%H!<%k%Q%9$N@dBP%Q%9I=<($O!"$=$N$h$&$J%j%/%(%9%H$KBP$9$k%((B
$B%i!<1~EzFb$K3+<($5$l$k!#$3$N>pJs$K$h$j!"967be$G2TF0$7$F$$$k$3$N%=%U%H%&%'%"$N%P!<%8%g%s(B
(B 6.1a $B$K1F6A$r5Z$\$9$HJs9p$5$l$F$$$k!#B>$N4D6-!"$*$h$S%P!<%8%g%s$b1F6A$rhttp://www.securityfocus.com/bid/9461
$B$^$H$a(B:
(B
(BOwnServer $B$O!"%j%b!<%H$+$iJ]0BMQ%+%a%i$r4F;k$9$k$?$a$K;HMQ$5$l$k(B Web $B%5!<(B
$B%P$G$"$k!#$3$N%=%U%H%&%'%"$O!"%$%s%?!<%M%C%H$r2p$7$F1\Mw2DG=$J%i%$%V%S%G%*(B
$B$N%9%H%j!<%_%s%0$rMF0W$K$9$k!#(B
(B
(BOwnServer 1.0 $B0JA0$K$O!"%j%b!<%H$N967be$N(B 
(BWeb $B%5!<%PMQ$N2>A[%k!<%H%G%#%l%/%H%j$NHO0O30$K$"$k%U%!%$%k$r;2>H$9$k2DG=$K(B
$B$J$k$H?d;!$5$l$kLdBj$,B8:_$9$k!#$3$NLdBj$O!"%f!<%6$,;XDj$7$?(B URI $B%G!<%?$K(B
$BBP$9$kBEEv@-3NG'$,IT==J,$G$"$k$3$H$K5/0x$9$k!#(B
(B
$BJs9p$K$h$k$H!"$3$N%=%U%H%&%'%"$O%f!<%6$,;XDj$7$?(B URI $B$NL5322=$rE,@Z$K9T$C(B
$B$F$*$i$:!"967bA[%k!<%H%G%#%l%/(B
$B%H%j$NHO0O30$K%"%/%;%92DG=$K$J$k!#(B
(B
$B967bpJs$O!"LdBj$r(B
$BJz$($k%3%s%T%e!<%?$KBP$9$k$5$i$J$k967b$r;E3]$1$k:]$KM-MQ$H$J$k2DG=@-$,$"$k!#(B
(B
(B29. DUware Software Multiple Vulnerabilities
(BBugTraq ID: 9462
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Jan 20 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9462
$B$^$H$a(B:
(B
(BDUware $B$O!"(BDUcalendar$B!"(BDUclassified$B!"(BDUdirectory$B!"(BDUdownload$B!"(BDUgallery$B!"(B
(BDUpics$B!"(BDUportal$B!"(BDUarticle$B!"(BDUclassmate$B!"(BDUpoll$B!"(BDUnews$B!"(BDUamazon$B!"(B
(BDUpaypal$B!"(BDUfaq$B!"$*$h$S(B DUforum $B$r4^$`!"(BWeb $B%V%i%&%6$GMxMQ2DG=$JMM!9$J%=%U(B
$B%H%&%'%"@=IJ$r@=B$$7$F$$$k!#(B
(B
$B$3$N%=%U%H%&%'%"$K$O!"%j%b!<%H$N967bZ$r1*2s$5$l$kLdBj$,3NG'$5$l$F$$$k!#Js9p$K$h$k$H!"(B
$B967b@\%"%/%;%92DG=$G$"$j!"(B
$BG'>Z$N1*2s$b2DG=$G$"$k$H?d;!$5$l$k!#(B
(B
$B0J2<$N@=IJ$OG'>Z$r1*2s$5$l$kLdBj$rJz$($F$$$k5?$$$,$"$k!#(B
(B
(BDUamazon
(BDUarticle
(BDUcalendar
(BDUclassified
(BDUclassmate
(BDUdirectory
(BDUdownload
(BDUfaq
(BDUforum
(BDUgallery
(BDUnews
(BDUpaypal
(BDUpics
(BDUpoll
(BDUportal
(B
(BDUpics $B$O%j%b!<%H$N%U%!%$%k%"%C%W%m!<%I$NLdBj$rJz$($F$$$k5?$$$,$"$k$HJs9p(B
$B$5$l$F$$$k!#Js9p$K$h$k$H!"$3$NLdBj$O(B 'inc_add.asp' $B%9%/%j%W%H$KB8:_$9$k!#(B
$B%j%b!<%H$N967bl=j$K%"%C%W%m!<%I$9$k2DG=@-$,$"$k!#(B
(B
$B$3$NLdBj$rMxMQ$9$k967b$K@.8y$7$?>l9g!"967be$H4XO"$,$"$k2DG=@-$,$"$k!#(B
(B
(B30. 2Wire HomePortal Series Directory Traversal Vulnerability
(BBugTraq ID: 9463
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Jan 20 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9463
$B$^$H$a(B:
(B
(B2Wire HomePortal Series $B$O!"%[!<%`%f!<%6MQ$K@_7W$5$l$?!"0lO"$N%2!<%H%&%'%$(B
$B%5!<%P$G$"$k!#$3$N%=%U%H%&%'%"$O!"(BMicrosoft Windows$B!"$*$h$S(B Apple Mac OS 
$B$r%5%]!<%H$7$F$$$k!#(B
(B
$B$3$N%=%U%H%&%'%"$O!"%j%b!<%H$N967bA[%k!<%H%G%#%l%/%H%j(B
$B$NHO0O30$K$"$k>pJs$K%"%/%;%92DG=$K$J$k$H?d;!$5$l$kLdBj$,B8:_$9$k$HZ%U%)!<%`Fb$N(B 'return' $B%Q%i%a!<%?$r2p$7$F%f!<%6$,M?$($?%G!<%?(B
$B$NL5322=$,IT==J,$G$"$k$3$H$K5/0x$9$k!#$3$NLdBj$K$h$j!"%j%b!<%H$N967bA[%k!<%H%G%#%l%/(B
$B%H%j$NHO0O30$X%"%/%;%92DG=$K$J$k$H?d;!$5$l$k!#(B
(B
$B$3$NLdBj$rMxMQ$9$k967b$K@.8y$7$?>l9g!"%j%b!<%H$N967bp(B
$BJs$K%"%/%;%92DG=$K$J$k$H?d;!$5$l$k!#(B
(B
$BJs9p$K$h$k$H!"$3$N%=%U%H%&%'%"$NA4$F$N%P!<%8%g%s$,$3$NLdBj$N1F6A$rhttp://www.securityfocus.com/bid/9464
$B$^$H$a(B:
(B
(BHoneyd $B$O!"MxMQ$5$l$F$$$J$$(B IP $B%"%I%l%9>e$G2>A[%[%9%H$r%7%_%e%l!<%H$9$k!"(B
(BUnix/Linux $B$KM3Mh$9$k(B OS $B$GMxMQ2DG=$J%O%K!<%]%C%H%=%U%H%&%'%"$G$"$k!#(B
(B
(BHoneyd $B$G$O!"%j%b!<%H$N%f!<%6$K$3$N%5!<%P$NB8:_$r8!=P$5$l$F$7$^$&2DG=@-$N(B
$B$"$kLdBj$rJz$($F$$$k5?$$$,$"$k!#$3$NLdBj$O!"$3$N%=%U%H%&%'%"$K$h$kFCDj$N(B 
(BTCP SYN $B%Q%1%C%H$N1~EzJ}K!$KB8:_$9$kITHw$K5/0x$7!";ve!"%j%b!<%H$N%f!<%6(B
$B$O%9%-%c%s$7$?(B IP $B%"%I%l%9$,$=$N%=%U%H%&%'%"$rMxMQ$7$?2>A[%[%9%H$G$"$k$+$r(B
$BH=CG2DG=$G$"$k!#$=$N$h$&$J%Q%1%C%H$r]$+$i30$9$3$H$,2DG=$G$"$k!#(B
(B
(B32. Darkwet Network WebcamXP Cross-Site Scripting Vulnerability
(BBugTraq ID: 9465
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Jan 21 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9465
$B$^$H$a(B:
(B
(BWebcamXP $B$O!"(BWindows $B4D6-$GF0:n$9$k$h$&$K@_7W$5$l$?!"(BHTTP $B%5!<%P$rE}9g$7$?(B
(B webcam $B%f!<%F%#%j%F%#$G$"$k!#(B
(B
$BJs9p$K$h$k$H!"$3$N%=%U%H%&%'%"$K$O%j%b!<%H$N967bl9g!"967bZMQ>pJs(B
$B$N@`$N967b$bF1MM$K2DG=$G$"$k!#(B
(B
(BWebcamXP 1.06.945 $B$,$3$NLdBj$N1F6A$r$N%P!<%8%g%s$bF1MM$K1F6A$r(B
$Bhttp://www.securityfocus.com/bid/9467
$B$^$H$a(B:
(B
(BMicrosoft Windows $B$K$*$$$F!"(BUNIX $B%/%i%$%"%s%H$H$N%U%!%$%k6&M-$,2DG=$G$"$k(B
$B>l9g$KLdBj$,H/8+$5$l$F$$$k!#Js9p$K$h$k$H!"$3$NLdBj$O%3%s%T%e!<%?$,!"(BSamba 
$B$,F0:n$7$F$$$k(B UNIX $B%/%i%$%"%s%H$H$N%U%!%$%k6&M-$,2DG=$G$"$k:]$KH/@8$9$k!#(B
(BUnix $B%/%i%$%"%s%H>e$G%^%&%s%H$5$l$?6&M-;q8;$KBP$7$F=q$-9~$_(B/$B:n@.8"8B$N$"$k(B
$B967be$N%j%=!<%9$,6KEY$K>CHq$5$l$?>uBV$r0z$-5/$3$9$3$H$,2DG=(B
$B$G$"$k!#967bu(B
$BBV$r0z$-5/$3$92DG=@-$,$"$k!#(B
(B
$B$3$NLdBj$O!"6&M-%j%=!<%9>e$G(B 1000 $B6a$/$N%G%#%l%/%H%j$r:n@.!":o=|$9$k$3$H$G!"(B
$B$3$NLdBj$rMxMQ$9$k967b$,2DG=$G$"$k$H?d;!$5$l$k!#%G%#%l%/%H%j$,:n@.$5$l$kEY(B
$B$K!"(BWindows $B$O$=$N%G%#%l%/%H%j$KBP$7$F%Z!<%8%W!<%k%a%b%j$r3d$jEv$F$k!#%Z!<(B
$B%8%W!<%k%a%b%j$O(B Windows $B4D6-$G$O(B 343MB $B$K@)8B$5$l$F$$$k!#$=$N%G%#%l%/%H%j(B
$B$,:o=|$5$l$?>l9g!"3d$jEv$F$i$l$?%a%b%j$O2rJ|$5$l$J$$!#2aBg$J?t$N%G%#%l%/%H(B
$B%j(B(350 $BK|8D$+$i(B 580 $BK|8D(B)$B$,:o=|$7:n@.$5$l$?>l9g!"%j%=!<%9$,6KEY$K>CHq$5$l(B
$B$k!#$3$NLdBj$X$N967b$,@.8y$9$k$3$H$G!"%a%b%j$N8O3i$K5/0x$7$F!"(BWindows $B$O%U(B
$B%!%$%k6&M-$r7QB3$G$-$J$/$J$k2DG=@-$,$"$k!#%3%s%T%e!<%?$r:F5/F0$9$k$3$H$G!"(B
$B4|BT$9$kF0:n$G%5!<%S%9$,:F5/F0$9$k$HJs9p$5$l$F$$$k!#(B
(B
(BMicrosoft Windows XP Professional Service Pack 1$B!"(BMicrosoft Windows Server
(B 2003 $B$,!"$3$NLdBj$rJz$($F$$$k$HJs9p$5$l$F$$$k!#$3$NLdBj$O(B Microsoft 
(BWindows 2000 Professional$B!"$^$?$O$=$l0JA0$N%P!<%8%g%s$K$*$$$F$O1F6A$rhttp://www.securityfocus.com/bid/9468
$B$^$H$a(B:
(B
(BCisco $B%\%$%9@=IJ$H6&$K%$%s%9%H!<%k$5$l$?(B IBM Director $B%(!<%8%'%s%H$O!"%j%b(B
$B!<%H$N967bZMQ>pJs$NF~NO$rMW5a$5$;$:$K!"$3$N%]!<%H$r2p$7$FIT@5(B
$B$K4IM}MQ%"%/%;%9$,2DG=$K$J$k$H?d;!$5$l$k!#(B
(B
$B$3$NLdBj$N860x$O!"$3$N(B IBM Director $B%(!<%8%'%s%H$N%G%U%)%k%H$N%$%s%9%H!<%k(B
$B$,!"(BTCP/UDP 14247 $BHV%]!<%H$r3+J|$7$?$^$^$K$7!"$"$i$f$k(B Director Server/
(BConsole $B%(!<%8%'%s%H$+$i$N@\B3$,2DG=$K$J$k!#4IM}MQ%"%/%;%9$K$h$j967bAw!"%5!<%S%9$N%9%?!<%H(B/$B%9%H%C%W!"(BWindows 2000 $B$N%f!<%6%"%+%&%s%H(B
$B$N:n@.$d@_Dj$NJQ99$r4^$`MM!9$JA`:n$,2DG=$K$J$k!#(B
(B
(B35. Cisco Voice Product IBM Director Agent Port Scan Denial Of S...
(BBugTraq ID: 9469
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Jan 21 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9469
$B$^$H$a(B:
(B
(BCisco $B%\%$%9@=IJ$H6&$K(BIBM $B%5!<%P>e$K%$%s%9%H!<%k$5$l$?(B IBM Director $B%(!<%8(B
$B%'%s%H$O!"%j%b!<%H$+$i967b2DG=$J%5!<%S%9ITG=>uBV$K4Y$kLdBj$rJz$($F$$$k5?$$(B
$B$,$"$k!#Js9p$K$h$k$H!"$3$NLdBj$O!"1F6A$rC(B
$BHq$5$;$k!#(B
(B
$B$3$NLdBj$rMxMQ$9$k967b$K$h$j!"%j%b!<%H$N967buBV$O!"%7%9%F%`$K9-$/1F6A$rM?$($k2DG=@-$,$"$k!#(B
(B
(B36. Mephistoles HTTPD Cross-Site Scripting Vulnerability
(BBugTraq ID: 9470
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Jan 21 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9470
$B$^$H$a(B:
(B
(BMephistoles httpd $B$O(B Perl $B$rMxMQ$7$Fl9g!"967bZMQ>pJs(B
$B$r@`$N967b$b2DG=$G$"$k!#(B
(B
(B37. Apache mod_perl Module File Descriptor Leakage Vulnerability
(BBugTraq ID: 9471
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: Jan 21 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9471
$B$^$H$a(B:
(B
(BApache $B$O%U%j!<$KMxMQ2DG=$J!"%*!<%W%s%=!<%9$N(B Web $B%5!<%P5!G=$rDs6!$9$k%=%U(B
$B%H%&%'%"$G$"$k!#$3$N%=%U%H%&%'%"$O(B Apache Group $B$K$h$j!"G[I[$*$h$SJ]e$G(B Perl $B5!G=$r2DG=$K$9$k(B Apache $B%b%8(B
$B%e!<%k$G$"$k!#(B
(B
$BJs9p$K$h$k$H!"(BApache mod_perl $B%b%8%e!<%k$K$O!"%m!<%+%k$N967bh$CZMQ>pJs$N@`)$5$l$F$$$k!#$3$N(B BID $B$O$5$i$J$k>pJs$,(B
$B8x3+$5$lhttp://www.securityfocus.com/bid/9472
$B$^$H$a(B:
(B
(BNative Solutions TBE Banner Engine $B$O!"(BPHP $B$rMxMQ$7$F3+H/$5$l$?%=%U%H%&%'(B
$B%"$G$"$k!#$3$N%=%U%H%&%'%"$O!":n@.:Q$_%P%J!<$N$?$a$KMxMQ$5$l$k!#(B
(B
$BJs9p$K$h$k$H!"$3$N%=%U%H%&%'%"$K$O!"%j%b!<%H$N967be(B
$B$G0-0U$"$k%9%/%j%W%H$re$N(B 'tbe-$user_id-$banner_id.html' $B%U%!%$%k$K(B
$B=q$-9~$^$l$k!#Js9p$K$h$k$H!"%f!<%6$,M?$($?%P%J!<%G!<%?$KBP$9$kL5322=$,IT==(B
$BJ,$G$"$k$3$H$K5/0x$7$F!"967be$Ge$G%5%]!<%H$5$l$F$$$k!"(BServer Side Includes 
$B$H$$$C$?B>$N%5!<%P%5%$%I%9%/%j%W%F%#%s%08@8l$+$i%3!<%I$rKd$a9~$_$3$H$b2DG=(B
$B$G$"$k$H?d;!$5$l$k!#(B
(B
$B$3$NLdBj$rMxMQ$9$k967b$,@.8y$7$?>l9g!"967be$Ghttp://www.securityfocus.com/bid/9473
$B$^$H$a(B:
(B
(BElectronic Arts Black Box Need for Speed Hot Pursuit 2 $B$O!"(BElectronic Arts
(B $B$K$h$jHNGd$5$l!"(BElectronic Arts Black Box $B$K$h$jJ]e$"$k$$$O%M%C%H%o!<%/$r2p$7$F%2(B
$B!<%`$r$9$k5!G=$rHw$($F$$$k!#(B
(B
$BJs9p$K$h$k$H!"$3$N%=%U%H%&%'%"$N%/%i%$%"%s%H$O!"%j%b!<%H$+$i967b2DG=$J%P%C(B
$B%U%!%*!<%P!<%U%m!<$NLdBj$rJz$($F$$$k5?$$$,$"$k!#(B
(B
$B$3$NLdBj$O!"%/%i%$%"%s%H$,(B Need for Speed Hot Pursuit 2 $B%2!<%`%5!<%P$X$N@\(B
$BB3$r%M%4%7%(!<%H$9$k$?$a$KMxMQ$5$l$k!"%/%i%$%"%s%H$N%M%C%H%o!<%/@\B3%k!<%A(B
$B%s$KB8:_$9$k!#(Bgamename$B!"(Bgamever$B!"(Bhostname$B!"(Bgametype$B!"(Bmapname $B$*$h$S(B 
(Bgamemode $BJQ?t$KBP$9$k6-3&%A%'%C%/$,IT==J,$G$"$k$3$H$K5/0x$7$F!"0-0U$"$k%5(B
$B!<%P$O1F6A$rl9g!"%^%k%A%W%l%$%d!<%2!<%`$rhttp://www.securityfocus.com/bid/9474
$B$^$H$a(B:
(B
(Bthttpd $B$O!"(BAcme $B$K$h$jJ]l9g!"0-0U$"$k%3!<(B
$B%I$O967bBP>]$H$J$k%f!<%6$N(B Web $B%V%i%&%6$G2rZMQ>pJs$N@`$N967b$,9T$o$l$k2DG=@-$,$"$k!#(B
(B
(BFREESCO $B$O(B thttpd $B$NAH$_9~$_HG$rF1:-$7$F$*$j!"$^$?!"LdBj$rJz$($k%3%s%]!<%M(B
$B%s%H$rF1:-$7$F$$$k$3$H$K5/0x$7$F!"$3$NLdBj$rJz$($F$$$k5?$$$,$"$k$3$H$KN10U(B
$B$9$Y$-$G$"$k!#(B
(B
(B41. Netbus Directory Listings Disclosure and File Upload Vulnera...
(BBugTraq ID: 9475
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Jan 22 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9475
$B$^$H$a(B:
(B
(BNetbus $B$O!"(BMicrosoft Windows $B4D6-$GMxMQ2DG=$J!"1x@w$5$l$?%7%9%F%`$N%j%b!<(B
$B%H4IM}$r2DG=$K$9$k%P%C%/%I%"%W%m%0%i%`$G$"$k!#$3$N%=%U%H%&%'%"$O%P%C%/%I%"(B
$B%5!<%P$X$N%"%/%;%9$K%Q%9%o!<%I$rMW5a$9$k$h$&$K@_Dj2DG=$G$"$k!#$^$?!"$3$N%=(B
$B%U%H%&%'%"$O%S%k%H%$%s$N(B Web $B%5!<%P$rF1:-$7$F$$$k!#(B
(B
$BJs9p$K$h$k$H!"$3$N(B Web $B%5!<%P$K$O!"%j%b!<%H$N%f!<%6$,(B root $B%G%#%l%/%H%j$N(B
$B%G%#%l%/%H%jFbMF$N0lMw$r3+<(2DG=$G$"$k$H?d;!$5$l$kLdBj$,B8:_$9$k!#$^$?!"Js(B
$B9p$K$h$k$H!"%j%b!<%H$N967bl=j$K%"%C%W%m!<%I$9$k2DG=@-$,$"$k!#$3$NLdBj$rMxMQ$9$k967b(B
$B$,@.8y$7$?>l9g!"=EMW$J>pJs$N3+<($d!"0-0U$"$k%U%!%$%k$r1F6A$re=q$-$,0z$-5/$3$5$l$k2DG=@-$,$"(B
$B$k!#(B
(B
(BNetbus Pro $B$,$3$NLdBj$rJz$($F$$$k$HJs9p$5$l$F$$$k!#(B
(B
(B42. McAfee ePolicy Orchestrator Agent HTTP POST Buffer Mismanage...
(BBugTraq ID: 9476
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Jan 22 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/9476
$B$^$H$a(B:
(B
(BMcAfee ePolicy Orchestrator (ePO) $B$O!"%j%b!<%H$+$iMM!9$J%]%j%7!<$*$h$S%"%s(B
$B%A%&%$%k%9@=IJ$r4IM}$9$k$?$a$K@_7W$5$l$?@=IJ$G$"$k!#$3$N%=%U%H%&%'%"$O!"(B
(BMicrosoft Windows $B4D6-$GMxMQ2DG=$G$"$k!#(B
(B
$BJs9p$K$h$k$H!"(BMcAfee ePolicy $B%(!<%8%'%s%H$O%P%C%U%!4IM}$NLdBj$rJz$($F$*$j!"(B
$B1F6A$rZ$G$O$"$k$,!"Js9p$K$h$k$H!"$3$NLdBj$K$h$j!"%j%b!<%H$N967bp?=$7N)$F(B
$B$N$&$A$NBgH>$,%$%s%?!<%M%C%H$K4XO"$9$k!#(B
(B
(Bhttp://www.securityfocus.com/news/7897
(B
(B2. Prison time for unlucky  phisher
$BCx5=;U$O(B 4 $BG/6a$/$N94N1$r@k9p$5$l$?!#(B
(B
(Bhttp://www.securityfocus.com/news/7871
(B
(B3. Feds seek input on spammer sentencing
$BCxhttp://www.securityfocus.com/news/7846
(B
(B4. The voodoo that Dumaru doesn?t do too well?
$BCxhttp://www.securityfocus.com/news/7903
(B
(B5. We'll kill spam in two years - Gates
$BCxhttp://www.securityfocus.com/news/7902
(B
(B6. Chip and PIN hits 8 million cards
$BCxhttp://www.securityfocus.com/news/7901
(B
(B
(BIV. SECURITYFOCUS TOP 6 TOOLS
(B-----------------------------
(B1. Brcontrol v0.02
$B:nhttp://sourceforge.net/projects/brcontrol/
$BF0:n4D6-(B: Linux
$B$^$H$a(B:
(B
(BBrcontrol $B$O!"(BIDS $B$H%U%!%$%"%&%)!<%k4V$N!"Aj8_:nMQ$r2DG=$K$9$k%Q%C%A$N=89g(B
$B$G$9!#8=:_!"(Bsnort $B$O(B IDS $B$H$7$F%5%]!<%H$5$l!"(BLinux $B$N(B netfilter $B5!G=$O%U%!(B
$B%$%"%&%)!<%k$H$7$F%5%]!<%H$5$l$F$$$^$9!#(BBrcontrol $B$O!"967bE*$J%O%K!<%]%C%H(B
$B$N9=C[!"$^$?$OB>$N>e0L$N%U%!%$%"%&%)!<%k$*$h$S(B IDS $B$N@_Dj$r%5%]!<%H$7$^$9!#(B
$B$5$i$K!"%V%j%C%8$H$7$F$b5!G=$7$^$9!#(B
(B
(B2. op  v1.1.9
$B:nhttp://swapoff.org/op
$BF0:n4D6-(B: UNIX
$B$^$H$a(B:
(B
(Bop $B$O(B $BC;$$JLL>$r;HMQ$9$k$3$H$K$h$j!"%9!<%Q!<%f!<%68"8B$KBP$9$k$-$a:Y$+$$%"(B
$B%/%;%9@)8f$r9T$&%=%U%H%&%'%"$G$9!#$3$N%=%U%H%&%'%"$O!"%f!<%6$*$h$S%[%9%H%Y(B
$B!<%9$N%"%/%;%9@)8f$H%3%^%s%I$NMxMQ4|8B$N5!G=$rHw$($F$$$^$9!#(B
(B
(B3. weedlog  v1.0.1
$B:nhttp://www.firepool.com/weedlog/
$BF0:n4D6-(B: Linux
$B$^$H$a(B:
(B
(Bweedlog $B$O!"%k!<%?$G$J$$%7%9%F%`>e$G%M%C%H%o!<%/@\B3$N%G%P%C%0$r;Y1g$9$k$?(B
$B$a$N%Q%1%C%H5-O?%D!<%k$G$9!#8=;~E@$G$O!"(BICMP$B!"(BIGMP$B!"(BTCP$B!"(BUDP $B%W%m%H%3%k$r(B
$B%5%]!<%H$7$F$$$^$9!#$3$N%=%U%H%&%'%"$O!"I8=`=PNO!"%U%!%$%k!"$"$k$$$O(B 
(Bsyslog $B$X$N=PNO$r%5%]!<%H$7$F$$$^$9!#(B
(B
(B4. phpOpenTracker v1.4.0
$B:nhttp://www.phpopentracker.de/
$BF0:n4D6-(B: N/A
$B$^$H$a(B:
(B
(BphpOpenTracker $B$O!"(BWeb $B%5%$%H$N%H%i%U%#%C%/$*$h$SK,Ldhttp://www.atout.be/
$BF0:n4D6-(B: Linux$B!"(BPOSIX
$B$^$H$a(B:
(B
(BPeerProtect $B$O!"(BJay's $B%U%!%$%"%&%)!<%k$GF0:n$9$k%"%I%*%s$G$"$j!"(BRIAA $B$*$h(B
$B$S(B MPAA $BEy$+$i$NA4$F$N(B IP $B%"%I%l%9$r4^$`%j%9%H$r@8@.$7!"$=$l$i$+$i(B P2P $B7?(B 
(B($B0lBP0l7?(B) $B%W%m%0%i%`$rJ]8n$7$^$9!#(B
(B
(B6. m0n0wall vpb26r614
$B:nhttp://m0n0.ch/wall
$BF0:n4D6-(B: FreeBSD
$B$^$H$a(B:
(B
(Bm0n0wall $B$O!"AH$_9~$_(B PC $B$KE,1~$9$k!"(B(FreeBSD $B$K4p$E$/(B) $B%*!<%k%$%s%o%s7?$N(B
$B%U%!%$%"%&%)!<%k%=%U%H%&%'%"$N%Q%C%1!<%8$G$9!#>&MQ$N%U%!%$%"%&%)!<%k%^%7%s(B
$B$NMM$J;H$$0W$$(B Web $B%$%s%?!<%U%'%$%9$rHw$($F$$$^$9!#%7%'%k%9%/%j%W%H$NBe$o(B
$B$j$K(B PHP $B$,MxMQ$5$l!"%7%9%F%`$NA4@_Dj$OC10l$N(B XML $B7A<0$N%U%!%$%k$KJ]B8$5$l(B
$B$^$9!#L5@~(B LAN$B!"(BVPN$B!"%H%i%U%#%C%/%7%'%$%W$J$I$K$bBP1~$7$F$$$^$9!#(B
(B
(B
(B--
$BLu(B: $B@>B<9/MN(B(NISHIMURA Yasuhiro)$B!">.NS9nL&(B(KOBAYASHI Katsumi)$B!"(B
$BA}ED@;;R(B(MASUDA Kiyoko)$B!"A}EDCR0l(B(MASUDA Tomokazu)$B!"(B
$BGOCeFF(B(UMAKI Atsushi)$B!"3QED8<;J(B(KAKUDA Motoshi)$B!"(B
$B>!3$D>?M(B(KATSUMI Naoto)$B!"9b66=SB@O:(B(TAKAHASHI Shuntarou)$B!"(B
$B?e>B9n?M(B(MIZUNUMA Katsuhito)
$B4F=$(B: $BA}EDCR0l(B(MASUDA Tomokazu)
(BLAC Co., Ltd.
(Bhttp://www.lac.co.jp/security/
Attachment: smime.p7s
Description: S/MIME cryptographic signature
Prev by Date: SecurityFocus Newsletter #232 2004-1-12->2004-1-16

Previous by thread: SecurityFocus Newsletter #232 2004-1-12->2004-1-16

Index(es):

Date

Thread