[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

NOTWORK.JP-SA:050401-00 JPRS$B$N(BIDN$Be$NF|K\8lJ8;z=89gN`;w;z7A$NLdBj(B

To: "NOTWORK.JP SA" <sa@xxxxxxxxxx>
Subject: NOTWORK.JP-SA:050401-00 JPRS$B$N(BIDN$Be$NF|K\8lJ8;z=89gN`;w;z7A$NLdBj(B
From: "NOTWORK.JP SA" <sa@xxxxxxxxxx>
Date: Fri, 01 Apr 2005 00:00:15 +0900

--------------------------------------------------------------------------------
(BNOTWORK.JP-SA:050401-00                                       Shoumonai Advisory
(B                                                                      NOTWORK.JP
(B
$B%H%T%C%/(B:         JPRS$B$N(BIDN$Be$NF|K\8lJ8;z=89gN`;w;z7A$NLdBj(B
$BJ,N`(B:             $B1?MQ(B
$B8x3+(BURL:          http://sa.notwork.jp/2005/NOTWORK.JP-SA:050401-00.html
$B8xI=F|(B:           2005$BG/(B4$B7n(B1$BF|(B
$BJ8@U(B:             sa at notwork.jp
$B1F6AHO0O(B:         $BA4$F$N%f!<%6(B
$BJ8=q%P!<%8%g%s(B:   1.0
(B
(B
(BI. $BGX7J(B - Background
$BF|K\8l$G;H$o$l$F$$$kJ8;z$K$ONc$($PF|$H[)$J$I!V0c$&J8;z!W$@$,!V7A$,;w$F$$$k!W(B
$BJ8;z$,J#?tB8:_$7$F$$$k!#(B
$B8=:_$N(BJPRS$B$N(BIDN$B\:Y(B - Problem Description
(B
$B0J2<$KJ#?tNc$r5s$2$k(B
(B
$B@5(B) http://$BF|K\8l(B.jp/
$B8m(B) http://$B[)K\8l(B.jp/
(B
$B@5(B) http://$BF|K\%l%8%9%H%j%5!<%S%9(B.jp/
$B8m(B) http://$B[)K\%l%8%9%H%j%5!<%S%9(B.jp/
$B8m(B) http://$BF|K\%l%8%9%H%j%50l%S%9(B.jp/
(B
$B>e5-$OI=<(AuCV$N2rA|EY$,E,@Z$K@_Dj$5$lE,@Z$J%U%)%s%H$*$h$SE,@Z$JJ8;z%5%$%:$r(B
$BMQ$$$F8+$l$PMF0W$KH=JL2DG=$G$"$k$,!"$?$H$($P(Bhtml $BJ8Cf$N%j%s%/$H$7$FMQ$$$i$l$?(B
$B>l9g$J$I!"%U%)%s%H$dJ8;z%5%$%:$N;XDj$r6/@)$5$l$k$h$&$J>l9g$K$O!"$=$N$^$^$G$O(B
$B<1JL$G$-$J$$2DG=@-$,$"$k!#(B
(B
$B$J$*EvLdBj$O87L)$K$$$($P(BIDN$B8GM-$NLdBj$G$O$J$$!#(B
$B4{$K9-$/;H$o$l$F$$$k(BASCII$B%I%a%$%sL>$K$b(B"l"($B%(%k(B)$B$H(B"1"($B%$%A(B)$B!"(B"O"($B%*!<(B)$B$H(B
(B"0"($B%<%m(B)$B$J$I$NF1MM$KN`;w;z7ALdBj$,B8:_$9$k!#$7$+$7$J$,$i(BIDN$BF3F~$KH<$$(B
(BURL$B$GMQ$$$k$3$H$,=PMh$kN`;w;z7A$NAH$_9g$o$;$,A}Bg$9$k$N$b$^$?;ve5-Nc$OA4$FF|K\8lJ8;z=89g$N$_$G9=@.$5$l$F$*$j!"(BJET$B%,%$%I%i%$%s(B(RFC3743)
$B$d(BICANN$B%,%$%I%i%$%s(B(http://www.icann.org/general/idn-guidelines-20jun03.htm)
$B$G?d>)$5$l$F$$$k$H$5$l$k(B"$BEPO?2DG=$JJ8;z=89g$rDj5A(B"$B$9$k$3$H$G$O2sHr=PMh$J$$!#(B
(B
(B
(BIII. $B1F6AHO0O(B - Impact
$B1F6A$9$kHO0O$H$7$F$O0J2<$,9M$($i$l$k(B
(B
$B!&%=%U%H%&%'%"MxMQ$N:]$K(BIDN$B$r;HMQ$9$k%(%s%I%f!<%6(B
$B!&%I%a%$%sL>$r$r;HMQ$9$k%=%U%H%&%'%"(B
$B!&%l%8%9%H%j(B(JPRS)
(B
(BIV. $B2sHrJ}K!(B - Workaround
(B
(B
$B%(%s%I%f!<%6(B
(B
$B!&%I%a%$%sL>$r%V%i%&%6Ey$N%"%W%j$+$i%3%T!<$7!"%U%)%s%Hl9g$K$h$C$F$OJ8;z%3!<%I(B
(B  $B3NG'%D!<%k$rMQ$$$F(B"$BN`;w;z7A(B"$B$G$J$$$3$H$r3NG'$9$k!#(B
$B!&;kNO$NLdBj$K$h$jN`;w;z7A$N<1JL$,:$Fq$J>l9g$K$O;kNO6:@54o6q(B($B4c6@Ey(B)
(B  $B$r;HMQ$9$k(B
$B!&(BIDN $B$NMxMQ$ODd;_$9$k(B
(B
$B%I%a%$%sMxMQl9g$K$O(B
(B  $BA[Dj$7$&$kA4$F$N%Q%?!<%s$N%I%a%$%s$rA4$F$NI=<(2U=j$G;HMQ$9$k%U%)%s%H$KN`;wJ8;z$r<1JL$7$d$9$$%U%)%s%H$r(B
(B  $B:NMQ$9$k(B $B$^$?%I%a%$%sL>$NI=<(J8;z%5%$%:$rBg$-$/$9$k(B
$B!&%I%a%$%sL>$N%9%Z%k%A%'%C%/$r9T$($k$h$&$K$9$k(B
$B!&%I%a%$%sL>$N;H$o$l$F$$$kJ8;z$KN`;w;z7AJ8;z$N%A%'%C%/$r9T$($k$h$&$K$9$k(B
(B
$B$J$*5DO@$NM>CO$,$"$k$@$m$&$,!"%I%a%$%sL>$rI=<($9$k:]$K(Bpunycode$BJQ498e$NJ8;zNs(B
$B$rI=<($9$k$H$$$&e5-$N$h$&$J(B
$B%A%'%C%/$r9T$$$K$/$/$J$k$H9M$($i$l$k!#(B
(B
(B
(BV. $B2r7h:v$*$h$S8=>u(B - Solution and Present situation
(B
$B2r7h:v$H$7$F%l%8%9%H%j(B(JPRS)$B$,$r$N?=@A$OB(;~7$h$&$J;HMQ(B"$B$r$9$k$3(B
(B   $B$H$,LdBj$G$"$k$H9M$($F$$$k(B
(B
(B3. JPRS$B$O(B"$B8+$?L\$K;w$?J8;zNs(B"$B$rIT@5$JL\E*$G;HMQ$5$l$F$$$k>l9g$K$O(BJP$B%I%a%$%sL>(B
(B   $BJ6Ah=hM}J}?K(B(JP-DRP)$B$K=>$$4p$E$-2r7h$r?^$k$3$H$,=PMh$k$H9M$($F$$$k(B
(B
(B4. JPRS$B$H$7$F$O(BWHOIS$B$KEPO?>pJs$,8x3+$5$l$k$?$a!"8+$?L\$K;w$?%I%a%$%sL>$N0-MQ(B
(B   $B$rA0$b$C$F8#@)$9$k$3$H$,$G$-$k$H9M$($F$$$k(B
(B
(B
(B
$B$h$C$F%l%8%9%H%j$K$h$kBP1~$OK>$_Gv$G$"$j!"%(%s%I%f!<%6!"%I%a%$%sMxMQr7o$rK~$?$98B$j$K$*$$$F!":FG[I[$*$h$S;HMQ$r5v2D$7$^$9!#(B
(B
(B1. $BK\J8=q$NH/9TF|IU$N0UL#$r$h$/M}2r$7$F$$$k$3$H(B :)
(B2. $B:FG[I[$9$k>l9g$K$O$3$N9`$K=q$+$l$?FbMF$rI,$:$=$N$^$^4^$a$k$3$H(B
(B
$BK\J8=q$O(BNOTWORK.JP $B$K$h$C$F!I8=>u$N$^$^!I(B $BDs6!$5$l$k$b$N$H$7$^$9(B
$BK\J8=q$K$D$$$F$OL@<(L[<($rLd$o$:!"@53N$G$"$k$H$NJ]>Z$b!"FCDj$NL\E*$KE,9g(B
$B$9$k$H$NJ]>Z$r4^$a!"2?$NJ]>Z$b$J$5$l$^$;$s!#(B
$B;vM3$N$$$+$s$rLd$o$:!"(B $BB;32H/@8$N860x$$$+$s$rLd$o$:!"3n$D!"@UG$$N:,5r$,(B
$B7@Ls$G$"$k$+873J@UG$$G$"$k$+(B ($B2a<:$=$NB>(B) $BITK!9T0Y$G$"$k$+$rLd$o$:!"(B
$BD>@\B;32!"4V@\B;32!"6vH/E*$JB;32!"(B $BFCJLB;32!"D(H3E*B;32$^$?$O7k2LB;32$N(B
$B$$$:$l$KBP$7$F$b@UG$$r$$$C$5$$Ii$$$^$;$s!#(B
(B
(B
$B;29M(B.
(BMultiple Browsers IDN Spoofing Test
(Bhttp://secunia.com/multiple_browsers_idn_spoofing_test/
(B
$B9q:]2=%I%a%$%sL>(B(IDN)$B$N%U%#%C%7%s%0:>5=@H5=BP:v$K!V%=Fs0l(B.jp$B!WLdBj$O4^$^$l$F$$$k$N$+(B
(Bhttp://www.nantoka.com/~kei/diary/?200502c&to=200502213#200502213
(B
$BB3!&F|K\8l(B.jp$B$N%U%#%C%7%s%0:>5=BP:v$K!V%=Fs0l(B.jp$B!WLdBj$O4^$^$l$F$$$k$N$+(B
(Bhttp://www.nantoka.com/~kei/diary/?200502c&to=200502252#200502252
(B
(BIDN($BB?8@8l%I%a%$%s!&F|K\8l%I%a%$%s(B)$B$G$N(B"$B8+$?L\$K;w$?J8;zNs(B"
(Bhttp://unixluser.org/diary/?200503a&to=200503085#200503085
(Bhttp://www.nantoka.com/~kei/diary/?200503a&to=200503081#200503081
(B
$B9q:]2=%I%a%$%sL>$N%U%#%C%7%s%0:>5=@Hhttp://www.jdna.jp/survey/phishing/
(B
(B--------------------------------------------------------------------------------

Next by Date: SecurityFocus Newsletter #268 2004-9-20->2004-9-24
Next by thread: SecurityFocus Newsletter #268 2004-9-20->2004-9-24
Index(es):
- Date
- Thread

NOTWORK.JP-SA:050401-00 JPRS$B$N(BIDN$Be$NF|K\8lJ8;z=89gN`;w;z7A$NLdBj(B

NOTWORK.JP-SA:050401-00 JPRS$B$N(BIDN$Be$NF|K\8lJ8;z=89gN`;w;z7A$NLdBj(B