[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
SecurityFocus Newsletter #271 2004-10-11->2004-10-15

To: bugtraq-jp@xxxxxxxxxxxxxxxxx
Subject: SecurityFocus Newsletter #271 2004-10-11->2004-10-15
From: Tsuneo Ogasawara <t.ogaswr@xxxxxxxxx>
Date: Thu, 28 Apr 2005 20:37:27 +0900
$B>.3^86(B@$B%i%C%/$G$9!#(B
(B
(BSecurityFocus Newsletter $BBh(B 271 $B9f$NOBLu$r$*FO$1$7$^$9!#(B
$BLu$N$J$$9`L\$K$D$$$F$O!VF|K\8lLu$J$7!W$H$7$F6hJL$7$F$"$j$^$9!#(B
(B
(B---------------------------------------------------------------------------
(BBugTraq-JP $B$K4X$9$k(B FAQ($BF|K\8l(B):
(Bhttp://www.securityfocus.com/popups/forums/bugtraq-jp/faq.shtml
$B!&(BSecurityFocus Newsletter $B$NOBLu$O(B BugTraq-JP $B$G0lH$/$@$5$$(B
(B---------------------------------------------------------------------------
(B---------------------------------------------------------------------------
(BSecurityFocus Newsletter $B$K4X$9$k(B FAQ($B1Q8l(B):
(Bhttp://www.securityfocus.com/popups/forums/securityfocusnews/intro.shtml
(BBugTraq $B$K4X$9$k(B FAQ($B1Q8l(B):
(Bhttp://www.securityfocus.com/popups/forums/bugtraq/faq.shtml
(B---------------------------------------------------------------------------
$B0zMQ$K4X$9$kHw9M(B:
$B!&$3$NOBLu$O(B SecurityFocus $B$N5v2D$r3t<02qe$G9T$o$l$F$$$^$9!#(B
$B!&(BSecurityFocus Newsletter $B$NOBLu$r(B Netnews, Mailinglist, World Wide Web,
(B  $B=q@R(B, $B$=$NB>$N5-O?G^BN$G0zMQ$5$l$k>l9g$K$O%a!<%k$NA4J80zMQ$r$*4j$$$7$^$9!#(B
$B!&F|K\8lHG%K%e!<%9%l%?!<(B 1 $B9f$+$i(B 3 $B9f$^$G$K$O$3$NHw9M$,IU$$$F$$$^$;$s$,!"(B
(B  $B=`MQ$9$k$b$N$H$7$^$9!#(B
$B!&$^$?!"(BSecurityFocus $BDs6!$N(B BugTraq-JP $B%"!<%+%$%V(B [*1] $B$X$N$$$+$J$k7A<0$N(B
(B  $B%O%$%Q!<%j%s%/$b>e5-$K=`$8$F$/$@$5$$!#(B
(B1) http://online.securityfocus.com/archive/79
(B---------------------------------------------------------------------------
$B$3$NOBLu$K4X$9$kHw9M(B:
$B!&$3$NOBLu$NE,MQ@.2L$K$D$$$F3t<02ql9g!"(BBugTraq-JP $B$X(B Errata $B$H$7$F=$@5(B
(B  $BHG$r$4Ej9FD:$/$+!"4F=$l9g$K$O=$@5HG$r$G$-$k$@$1?WB.$KH/9T$7$^$9!#(B
(B---------------------------------------------------------------------------
(BThis translation is encoded and posted in ISO-2022-JP.
(B
$B86HG(B:
(BDate: 19 Oct 2004 23:10:35 -0000
(BMessage-ID: <20041019231035.29488.qmail@xxxxxxxxxxxxxxxxxxxxxx>
(B
(BSecurityFocus Newsletter #271
(B-----------------------------
(B
(BThis Issue is Sponsored By: Check Point
(B
(BI. FRONT AND CENTER
(B     1. Securing Exchange With ISA Server 2004
(B     2. SSH Host Key Protection
(BII. BUGTRAQ SUMMARY
(B     1. BNC  sbuf_getmsg() Buffer Overflow Vulnerability
(B     2. MySQL Multiple Local Vulnerabilities
(B     3. Turbo Traffic Trader PHP Multiple Input Validation Vulnerabi...
(B     4. CJOverkill Multiple Cross-Site Scripting Vulnerabilities
(B     5. Apache mod_ssl SSLCipherSuite Access Validation Vulnerabilit...
(B     6. Go Smart Inc GoSmart Message Board Multiple Input Validation...
(B     7. Zanfi CMS Lite Remote File Include Vulnerability
(B     8. DUware Software Multiple Remote Vulnerabilities
(B     9. Macromedia ColdFusion MX CreateObject And CFOBJECT Java Exte...
(B     10. Microsoft Windows Kernel Local Denial of Service Vulnerabili...
(B     11. Microsoft Internet Explorer Install Engine ActiveX Control B...
(B     12. Microsoft Internet Explorer Heartbeat ActiveX Control Unspec...
(B     13. OCPortal Content Management System Remote File Include Vulne...
(B     14. Microsoft Windows Kernel Virtual DOS Machine Privilege Escal...
(B     15. ASN.1 Compiler Multiple Unspecified Vulnerabilities
(B     16. IceWarp Web Mail Multiple Unspecified Remote Input Validatio...
(B     17. Microsoft Windows NetDDE Remote Buffer Overflow Vulnerabilit...
(B     18. Microsoft Excel File Handler Buffer Overflow Vulnerability
(B     19. Microsoft SMTP Service and Exchange Routing Engine Buffer Ov...
(B     20. Microsoft Windows WMF/EMF Image Format Rendering Remote Buff...
(B     21. Microsoft CABARC Directory Traversal Vulnerability
(B     22. Microsoft Internet Explorer Double Byte Character Set Handli...
(B     23. Microsoft Window Management API Local Privilege Escalation V...
(B     24. Microsoft NNTP Component Heap Overflow Vulnerability
(B     25. Microsoft RPC Runtime Library Remote Denial Of Service And I...
(B     26. Microsoft Internet Explorer Plug-in Navigations Handling Add...
(B     27. Microsoft Windows Compressed (zipped) Folder Buffer Overflow...
(B     28. Microsoft Internet Explorer Secure Sockets Layer Caching Vul...
(B     29. Microsoft IIS Server WebDAV XML Requests Denial of Service V...
(B     30. Squid Proxy SNMP ASN.1 Parser Denial Of Service Vulnerabilit...
(B     31. Adobe Acrobat Reader Remote Access Validation Vulnerability
(B     32. Microsoft Windows 2003 Services Default SACL Access Right We...
(B     33. Microsoft Internet Explorer Unspecified showHelp Zone Bypass...
(B     34. Research In Motion Blackberry Remote Denial of Service Vulne...
(B     35. phpMyAdmin Remote Command Execution Vulnerability
(B     36. SCT Campus Pipeline Render.UserLayoutRootNode.uP Cross-Site ...
(B     37. FuseTalk Forum IMG Tag HTML Injection Vulnerability
(B     38. LibTIFF Multiple Buffer Overflow Vulnerabilities
(B     39. FuseTalk Forum Multiple Cross-Site Scripting Vulnerabilities
(B     40. 3Com 3CRADSL72 ADSL Wireless Router Information Disclosure a...
(B     41. ShixxNOTE 6.net Remote Buffer Overflow Vulnerability
(B     42. Microsoft Windows XP Weak Default Configuration Vulnerabilit...
(B     43. Macromedia JRun Management Console HTML Injection Vulnerabil...
(B     44. Microsoft Frontpage Asycpict.DLL JPEG Handling Remote Denial...
(B     45. Macromedia JRun Session ID Cookie HTTP Response Splitting Vu...
(B     46. Macromedia JRun Management Console Administrative Session Fi...
(B     47. Pinnacle Systems ShowCenter SettingsBase.PHP Cross-Site Scri...
(B     48. MediaWiki Multiple Remote Input Validation Vulnerabilities
(B     49. Unzoo Undisclosed Directory Traversal Vulnerability
(B     50. MailEnable Multiple Remote Denial Of Service Vulnerabilities
(B     51. KDocker Unspecified Vulnerability
(B     52. Federico David Sacerdoti Ansel Insecure Default Permissions ...
(B     53. Veritas Cluster Server Superuser Compromise Vulnerability
(B     54. 3Com OfficeConnect ADSL Wireless 11g Firewall Router Multipl...
(B     55. NatterChat Unspecified SQL Injection Vulnerability
(B     56. Ideal Science IdealBB Multiple Unspecified Remote Input Vali...
(B     57. CyberStrong eShop ASP Shopping Cart Unspecified Cross-Site S...
(B     58. Express-Web Content Management System Unspecified Cross-Site...
(B     59. AliveSites Forum Multiple Unspecified Remote Input Validatio...
(B     60. DevoyBB Forum Multiple Unspecified Remote Input Validation V...
(B     61. WowBB Forum Multiple Unspecified Remote Input Validation Vul...
(B     62. ProFTPD Authentication Delay Username Enumeration Vulnerabil...
(B     63. WeHelpBUS Undisclosed Remote Command Execution Vulnerability
(B     64. Yak! Chat Client FTP Server Directory Traversal Vulnerabilit...
(B     65. DMXReady Site Chassis Manager Cross-Site Scripting And SQL I...
(BIII. SECURITYFOCUS NEWS ARTICLES
(B     1. U.S. Air Traffic Control Found Vulnerable
(B     2. Patriot Act tour carried a hefty price tag
(B     3. Shifting cyber threats menace factory floors
(B     4. 419ers take Aussie financial advisor for AU$1m
(B     5. New Google tool for searching computers a privacy risk on sh...
(B     6. Watch out, there's a scammer about
(BIV. SECURITYFOCUS TOP 6 TOOLS
(B     1. ByteShelter I 1.0
(B     2. MobileJavaScanner 1.0
(B     3. JavaCallTester 1.0
(B     4. DiskInternals Uneraser 2.01
(B     5. DiskInternals NTFS Reader 1.01
(B     6. Airscanner Mobile Firewall 1.0
(B
(B
(BI. FRONT AND CENTER($BF|K\8lLu$J$7(B)
(B---------------------------------
(B
(BII. BUGTRAQ SUMMARY
(B-------------------
(B1. BNC sbuf_getmsg() Buffer Overflow Vulnerability
(BBugTraq ID: 11355
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Oct 09 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11355
$BMWLs(B:
(BBNC $B$GH/@8$9$k6-3&%A%'%C%/$KM3Mh$9$k@x:_E*$JLdBj$,H/8+$5$l=$@5$5$l$^$7$?!#(B
$B%*!<%P!<%U%m!<$O(B sbuf_getmsg() $B%W%m%7!<%8%c$GH/@8$7$^$9!#(BBNC $B$N(B 2.8.9 $B$h(B
$B$jA0$N%P!<%8%g%s$G$O!"%]%$%s%?$N%G%/%j%a%s%H$r;HMQ$7$F%3%T!<%k!<%WFb$G%3(B
$B%T!<$5$l$k%P%C%U%!$NA0$N%P%$%H$r>C5n$9$k$3$H$K$h$C$F!"(Braw $B%Q%1%C%H$K4^$^(B
$B$l$k%P%C%/%9%Z!<%9J8;z$r]%P%C(B
$B%U%!$X$N%]%$%s%?$,BP>]%P%C%U%!NN0h$N6-3&30$N>l=j$r%]%$%s%H$7$F$$$J$$$+$N(B
$B3NG'$rBU$C$F$$$^$7$?!#$3$N$?$a$K!"IT@5$J%G!<%?$K$h$C$F%j%b!<%H$+$i%P%C%U%!(B
$B%*!<%P!<%U%m!<$,0z$-5/$3$5$l$k2DG=@-$,$"$j$^$9!#$3$NIT@5%G!<%?$O!"(BIRC $B%5!<(B
$B%P$+$iAw?.$5$l$k2DG=@-$,$"$j$^$9!#(B
(B
$B%*!<%P!<%U%m!<$O(B BSS $BNN0h$GH/@8$7$^$9!#967b$N2DG=@-$K$D$$$F$OL$8!>Z$G$9!#(B
(B
(B2. MySQL Multiple Local Vulnerabilities
(BBugTraq ID: 11357
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: Oct 11 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11357
$BMWLs(B:
(BMySQL $B$K$O!"%m!<%+%k$N%;%-%e%j%F%#>e$NLdBj$,J#?tB8:_$9$k5?$$$,$"$k$HJs9p(B
$B$5$l$F$$$^$9!#967buBV$r0z$-5/$3$92DG=@-$,$"$j$^(B
$B$9!#(B
(B
$B967buBV$O!"J#?t$N%9%l%C%I$,(B ALTER MERGE $B%F!<%V%k$KBP$7$F(B UNION 
$B$9$k$H$-$KH/@8$7$^$9!#(B
(B
$B>\:Y$,ITL@$J$?$a!"99$J$k>pJs$O8=;~E@$G$ODs6!$5$l$F$$$^$;$s!#LdBj$N>\:Y$,(B
$B8x3+$5$lhttp://www.securityfocus.com/bid/11358
$BMWLs(B:
(BTurbo Traffic Trader PHP $B$K$O!"F~NOCM$KBP$9$kBEEv@-$N3NG'$K4XO"$7$F!"%;(B
$B%-%e%j%F%#LdBj$,B8:_$9$k5?$$$,$"$k$HJs9p$5$l$F$$$^$9!#%j%b!<%H$N967b$N%P!<%8%g%s$b1F6A$rhttp://www.securityfocus.com/bid/11359
$BMWLs(B:
(BCJOverkill $B$O!"%/%m%9%5%$%H%9%/%j%W%F%#%s%0967b$K4XO"$9$k$5$^$6$^$JLdBj(B
$B$N1F6A$r$N%P!<%8%g%s$b1F6A$rhttp://www.securityfocus.com/bid/11360
$BMWLs(B:
(BApache 2.x $B$N(B mod_ssl $B$K$O!"%"%/%;%9$KBP$9$kBEEv@-$N3NG'$K4XO"$7$F!"%;%-%e(B
$B%j%F%#LdBj$,B8:_$9$k5?$$$,$"$k$HJs9p$5$l$F$$$^$9!#$3$NLdBj$O!"(Bmod_ssl $B$,(B 
(B'SSLCipherSuite' $B%G%#%l%/%F%#%V$H0l=o$K;HMQ$5$l$k$h$&$K@_Dj$5$l$F$$$k>l(B
$B9g$KH/@8$7$^$9!#$3$NLdBj$K$h$C$F!"FCDj%G%#%l%/%H%j$K;XDj$5$l$?0E9f%9%$!<(B
$B%H$K4X78$J$/!"%/%i%$%"%s%H$,2>A[%[%9%H$N@_Dj$K$h$j5v2D$5$l$?G$0U$N0E9f%9(B
$B%$!<%H$r;HMQ$9$k$N$r5v$7$F$7$^$&$3$H$,Js9p$5$l$F$$$^$9!#$3$N$?$a!"967bhttp://www.securityfocus.com/bid/11361
$BMWLs(B:
(BGoSmart Message Board $B$K$O!"F~NOCM$KBP$9$kBEEv@-$N3NG'$K4XO"$7$F!"%;%-%e(B
$B%j%F%#LdBj$,J#?tB8:_$9$k5?$$$,$"$k$HJs9p$5$l$F$$$^$9!#%j%b!<%H$N967bhttp://www.securityfocus.com/bid/11362
$BMWLs(B:
(BZanfi CMS Lite $B$K$O!"%j%b!<%H$+$i%U%!%$%k$r%$%s%/%k!<%I2DG=$JLdBj$,B8:_(B
$B$9$k5?$$$,$"$k$HJs9p$5$l$F$$$^$9!#$3$NLdBj$O!"%f!<%6$,F~NO$7$?%G!<%?$N%5(B
$B%K%?%$%:=hM}$,E,@Z$Ke$G$N%P!<%8%g%s$b1F6A$rhttp://www.securityfocus.com/bid/11363
$BMWLs(B:
(BDUware $B$N%=%U%H%&%'%"$K$O!"J#?t$NLdBj$,8!=P$5$l$F$$$^$9!#%j%b!<%H$N967b(B
$Bhttp://www.securityfocus.com/bid/11364
$BMWLs(B:
(BColdFusion MX $B$K$O!"$9$Y$F$N3+H/http://www.securityfocus.com/bid/11365
$BMWLs(B:
(BMicrosoft Windows $B$N%+!<%M%k$K$O!"%5!<%S%9ITG=>uBV$K4Y$k5?$$$,$"$j$^$9!#(B
$B%m!<%+%k$N967be5qH]$5$l$k2DG=@-$,$"$j$^$9!#(B
(B
$B$3$NLdBj$K$h$j!"8"8B$,>:3J$5$l$k$3$H$O$"$j$^$;$s!#(B
(B
(B11. Microsoft Internet Explorer Install Engine ActiveX Control B...
(BBugTraq ID: 11366
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Oct 12 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11366
$BMWLs(B:
(BMicrosoft Internet Explorer $B%$%s%9%H!<%k%(%s%8%s(B ActiveX $B%3%s%H%m!<%k$K(B
$B$O!"%j%b!<%H$+$iMxMQ2DG=$J%P%C%U%!%*!<%P!<%U%m!<$NLdBj$,B8:_$7$^$9!#$3$N(B
$BLdBj$O!"%3%s%H%m!<%k$KEO$5$l$k0z?t$N6-3&%A%'%C%/$KITHw$,$"$k$3$H$KM3Mh$7(B
$B$^$9!#(B
(B
$B$3$NLdBj$,MxMQ$5$l$k$H!"%/%i%$%"%s%H%f!<%6$N%;%-%e%j%F%#%3%s%F%-%9%HFb$G(B
$BG$0U$N%3!<%I$,\:Y$N8x3+$O(B 2005 $BG/(B 
(B1 $B7n(B 19 $BF|$^$GJ]N1$9$k$H$$$&7Y2|%"%I%P%$%6%j$r8xI=$7$F$$$^$9!#(B
(B
(B12. Microsoft Internet Explorer Heartbeat ActiveX Control Unspec...
(BBugTraq ID: 11367
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Oct 12 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11367
$BMWLs(B:
(BMicrosoft Internet Explorer Heartbeat MSN $B%2!<%`(B ActiveX $B%3%s%H%m!<%k(B 
(B(heartbeat.ocx) $B$K$O!"L$FCDj$NLdBj$,B8:_$7$^$9!#(B
(B
(B13. OCPortal Content Management System Remote File Include Vulne...
(BBugTraq ID: 11368
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Oct 12 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11368
$BMWLs(B:
(BocPortal $B$O!"%j%b!<%H$+$i%U%!%$%k$r%$%s%/%k!<%I2DG=$JLdBj$N1F6A$re$GG$0U$N%5!<%P%5%$%I%9%/%j%W%H%3!<%I$r$N967b$K$h$j!"LdBj$rJz$($k%3%s%T%e!<%?$KBP(B
$B$7$F$N6<0R$r0z$-5/$3$92DG=@-$,$"$j$^$9!#(B
(B
(B14. Microsoft Windows Kernel Virtual DOS Machine Privilege Escal...
(BBugTraq ID: 11369
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: Oct 12 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11369
$BMWLs(B:
(BMicrosoft Windows $B%+!<%M%k$N(B Virtual DOS Machine $B$K$O!"%m!<%+%k$+$i$N8"(B
$B8B>:3J$N5?$$$,$"$k$HJs9p$5$l$F$$$^$9!#(B
(B
(BMicrosoft Virtual DOS Machine (VDM) $B$O!"(BWindows NT $B%Y!<%9$N%*%Z%l!<%F%#(B
$B%s%0%7%9%F%`>e$G(B MS-DOS $B$r%(%_%e%l!<%H$9$kJ]8n$5$l$?4D6-$G$9!#$3$NLdBj$O!"(B
$B%"%/%;%9$KBP$9$kBEEv@-$N3NG'$KITHw$,B8:_$9$k$3$H$KM3Mh$7$^$9!#%m!<%+%k$N(B
$B967be$G8"8B$r>:3J$5$;$k$3(B
$B$H$,2DG=$G$9!#(B
(B
(B15. ASN.1 Compiler Multiple Unspecified Vulnerabilities
(BBugTraq ID: 11370
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Oct 11 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11370
$BMWLs(B:
(BASN.1 $B%3%s%Q%$%i$K$O!"L$FCDj$NLdBj$,J#?tB8:_$9$k5?$$$,$"$k$HJs9p$5$l$F$$(B
$B$^$9!#%Y%s%@$O!"e$NLd(B
$BBj$bB8:_$7$^$9!#(B
(B
(BASN.1 $B%3%s%Q%$%i$N%P!<%8%g%s(B 0.9.4 $B$K$*$$$F!"$3$l$i$NLdBj$,B8:_$9$k5?$$(B
$B$,$"$k$HJs9p$5$l$F$$$^$9!#$=$NB>$N%P!<%8%g%s$b1F6A$rhttp://www.securityfocus.com/bid/11371
$BMWLs(B:
(BIceWarp Web Mail $B$K$O!"%j%b!<%H$+$i$NF~NOCM$KBP$9$kBEEv@-$N3NG'$K4XO"$7(B
$B$F!"L$FCDj$NLdBj$,J#?tB8:_$9$k$HJs9p$5$l$F$$$^$9!#$3$l$i$NLdBj$O!"%f!<%6(B
$B$K$h$kF~NOCM$KBP$9$kBEEv@-$N3NG'$d%U%#%k%?$,<:GT$9$k$3$H$KM3Mh$7$^$9!#(B
(B
$B$3$l$i$NLdBj$9$Y$F$,5Z$\$91F6A$K$D$$$F$O8=;~E@$G$OITL@$G$9$,!"967bhttp://www.securityfocus.com/bid/11372
$BMWLs(B:
(BMicrosoft Windows NetDDE $B$O!"%j%b!<%H$+$i$N967b$K$h$k%P%C%U%!%*!<%P!<%U(B
$B%m!<$NLdBj$N1F6A$re$G(B SYSTEM $B8"8B$rMxMQ(B
$B$7$FG$0U$N%3!<%I$ru67$G$O!"%m!<%+%k$N967b:3J$5$;$k2DG=@-$,$"$j$^$9!#$3$l$O!"8"8B$r;}$?$J$$%f!<%6$K$h$k%5!<(B
$B%S%9$N3+;O$,2DG=$G$"$k$3$H$KM3Mh$7$^$9!#(B
(B
(B** $B99?7(B: NGSSoftware $B$O!"$3$NLdBj$K4XO"$9$k5;=QE*$J>\:Y$N8x3+$O(B 2005 $BG/(B 
(B1 $B7n(B 19 $BF|$^$GJ]N1$9$k$H$$$&7Y2|%"%I%P%$%6%j$r8xI=$7$F$$$^$9!#(B
(B
(B** $B99?7(B: Immunity Research $B$O!"%j%b!<%H$N967bZ$5$l$kI,MW$,$"$k$HJs9p$7$F$$$^$9!#$3$NJs9p$K4XO"$9$k>\:Y$O!";2(B
$B9M%a%C%;!<%8(B "ms04-031 pre-auth ??" $B$K<($5$l$F$$$^$9!#(B
(B
(B18. Microsoft Excel File Handler Buffer Overflow Vulnerability
(BBugTraq ID: 11373
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Oct 12 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11373
$BMWLs(B:
(BMicrosoft Excel $B$K$O!"%P%C%U%!%*!<%P!<%U%m!<$N5?$$$,$"$k$HJs9p$5$l$F$$$^(B
$B$9!#$3$NLdBj$O!"(BMicrosoft Excel $B$,0-0U$"$k(B Excel $B%U%!%$%k$r=hM}$9$k$H$-(B
$B$KH/@8$7$^$9!#(B
(B
$B7k2LE*$K!"%j%b!<%H$N967bhttp://www.securityfocus.com/bid/11374
$BMWLs(B:
(BMicrosoft Windows 2003 $B$N(B SMTP $B%5!<%S%9$H(B Exchange Routing Engine $B$K$O!"(B
$B%P%C%U%!%*!<%P!<%U%m!<$,H/@8$9$k5?$$$,$"$k$HJs9p$5$l$F$$$^$9!#$3$NLdBj$O!"(B
(BDNS $B%k%C%/%"%C%W$KBP$9$k1~Ez$,=hM}$5$l$k:]$KH/@8$7$^$9!#$3$NLdBj$rMxMQ$7(B
$B$F$N967b$K@.8y$9$k$H!"LdBj$N$"$k%5!<%S%9$N%;%-%e%j%F%#%3%s%F%-%9%HFb$G%j(B
$B%b!<%H$+$i%3!<%I$rhttp://www.securityfocus.com/bid/11375
$BMWLs(B:
(BMicrosoft Windows $B$N(B WMF/EMF $B2hA|%l%s%@%j%s%0%i%$%V%i%j$O!"%j%b!<%H$+$i(B
$B$N967b$K$h$j%P%C%U%!%*!<%P!<%U%m!<$,H/@8$9$kLdBj$N1F6A$r:3J$5$;$k967b$,http://www.securityfocus.com/bid/11376
$BMWLs(B:
(BCABARC $B$K$O!"%G%#%l%/%H%j%H%i%P!<%5%k967b$re$G(B
$B@x:_E*$K=EMW$J%U%!%$%k$K%"%/%;%9$9$k2DG=@-$,$"$j$^$9!#(B
(B
$B967bhttp://www.securityfocus.com/bid/11377
$BMWLs(B:
(BMicrosoft Internet Explorer $B$K$O!"0-0U$"$k(B Web $B%Z!<%8$,%V%i%&%6$N%"%I%l(B
$B%9%P!<$r56Au$9$kLdBj$,B8:_$9$k5?$$$,$"$k$HJs9p$5$l$F$$$^$9!#$3$NLdBj$O!"(B
$BFCDj$N(B 2 $B%P%$%HJ8;z$N=hM}$,@5>o$K5!G=$7$J$$$3$H$KM3Mh$7$^$9!#7k2L$H$7$F!"(B
(B2 $B%P%$%HJ8;z%;%C%H$r;HMQ$9$k$h$&$K@_Dj$5$l$F$$$k%3%s%T%e!<%?$G$N$_!"$3$N(B
$BLdBj$N1F6A$r>N$9$k2DG=@-$,(B
$B$"$j$^$9!#(B
(B
(B23. Microsoft Window Management API Local Privilege Escalation V...
(BBugTraq ID: 11378
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: Oct 12 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11378
$BMWLs(B:
$B$$$/$D$+$NL$FCDj$N(B Window Management API $B5!G=$K$O!"%m!<%+%k$N967be$G8"8B$r>:3J$5$;$k2DG=@-$,$"$j$^$9!#(B
(B
$B$3$NLdBj$O4pK\E*$J@_7W>e$NITHw$G$"$j!"%G%9%/%H%C%W$N%&%#%s%I%&4V$NDL?.$K(B
$B;HMQ$5$l$kFCDj$N%a%C%;!<%8$K$h$C$Fu67$rH/@8$5$;$k$3$H$,$G$-$^$9!#(B
(B
$B$3$NLdBj$O0lIt$N%M%$%F%#%V$N(B Windows $B%"%W%j%1!<%7%g%s$K1F6A$7$^$9$,!"$=(B
$B$NB>$N%5!<%I%Q!<%F%#@=%"%W%j%1!<%7%g%s$GLdBj$,MxMQ$5$l$k2DG=@-$b$"$j$^$9!#(B
(B
(B24. Microsoft NNTP Component Heap Overflow Vulnerability
(BBugTraq ID: 11379
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Oct 12 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11379
$BMWLs(B:
(BMicrosoft Network News Transfer Protocol (NNTP) $B%3%s%]!<%M%s%H$K$O!"%P%C(B
$B%U%!%*!<%P!<%U%m!<$,H/@8$9$k5?$$$,$"$j$^$9!#$3$NLdBj$rMxMQ$7$F967b$K@.8y(B
$B$9$k$H!"%j%b!<%H$N967bhttp://www.securityfocus.com/bid/11380
$BMWLs(B:
(BMicrosoft RPC Runtime Library $B$O!"%j%b!<%H$+$i$N967b$K$h$C$F%5!<%S%9ITG=(B
$B>uBV$K4Y$kLdBj!"$*$h$S>pJs$,O31L$9$kLdBj$N1F6A$rpJs$r3+<($7$?$j!"LdBj$N$"$k%"(B
$B%W%j%1!<%7%g%s$r%/%i%C%7%e$5$;$F@55,%f!<%6$X$N%5!<%S%95qH]$r0z$-5/$3$92D(B
$BG=@-$,$"$j$^$9!#(B
(B
(B26. Microsoft Internet Explorer Plug-in Navigations Handling Add...
(BBugTraq ID: 11381
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Oct 12 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11381
$BMWLs(B:
(BMicrosoft Internet Explorer $B$K$O!"(BFlash $B%^%k%A%a%G%#%"$,Kd$a9~$^$l$?0-0U(B
$B$"$k(B Web $B%Z!<%8$,%V%i%&%6$N%"%I%l%9%P!<$r56Au$9$kLdBj$,B8:_$9$k5?$$$,$"(B
$B$k$HJs9p$5$l$F$$$^$9!#(B
(B 
$B0-0U$"$k%5%$%H$d56Au%5%$%H$O%f!<%6$K$h$C$F?.Mj$5$l$k%5%$%H$H$7$FI=<($5$l(B
$B$k$?$a!"$"$?$+$b?.Mj$G$-$k$b$N$G$"$k$h$&$K(B Web $B%f!<%6$r:>>N$9$k2DG=@-$,(B
$B$"$j$^$9!#(B
(B
(B27. Microsoft Windows Compressed (zipped) Folder Buffer Overflow...
(BBugTraq ID: 11382
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Oct 12 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11382
$BMWLs(B:
(BMicrosoft Windows $B$N05=L(B (ZIP) $B%U%)%k%@$N5!G=$K$O!"%P%C%U%!%*!<%P!<%U%m!<(B
$B$NLdBj$,B8:_$7$^$9!#(B
(B
$B0-0U$"$k05=L%U%!%$%k$K$h$j!"FbIt%P%C%U%!$N%*!<%P!<%U%m!<$,H/@8$7!"8=:_$N(B
$B%f!<%6$N%;%-%e%j%F%#%3%s%F%-%9%HFb$GG$0U$N%3!<%I$,http://www.securityfocus.com/bid/11383
$BMWLs(B:
(BMicrosoft Internet Explorer $B$K$O!"(BSecure Sockets Layer $B$N%-%c%C%7%e$KLd(B
$BBj$,B8:_$9$k5?$$$,$"$k$3$H$,Js9p$5$l$F$$$^$9!#(B
(B
$B$3$NLdBj$,MxMQ$5$l$k$H!"0-0U$"$k%5%$%H$rI=<($9$k%3%s%T%e!<%?$KG$0U$N%3%s(B
$B%F%s%D$,%-%c%C%7%e$5$l$k2DG=@-$,$"$k$HJs9p$5$l$F$$$^$9!#%-%c%C%7%e$5$l$?(B
$B%3%s%F%s%D$O!"@5Ev$J%5%$%H$,I=<($5$l$?$H$-$K$=$N%5%$%H$N%;%-%e%j%F%#%3%s(B
$B%F%-%9%HFb$G2rhttp://www.securityfocus.com/bid/11384
$BMWLs(B:
(BMicrosoft IIS $B%5!<%P$K$O!"IT@5$J(B WebDAV $BMW5a$r=hM}$9$k:]$K%j%b!<%H$+$i%5!<(B
$B%S%9ITG=>uBV$K4Y$i$;$kLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#$3$NLdBj$O(B Microsoft
(BXML Parser $B%3%s%]!<%M%s%H$KB8:_$7!"(BWebDAV XML $B%a%C%;!<%8%O%s%I%i$r2p$7$F(B
$B967b$rCHq$,A}Bg$9$k2DG=@-$,$"$j(B
$B$^$9!#$=$N7k2L!"%5!<%P$,%5!<%S%9ITG=>uBV$K4Y$k>l9g$,$"$j$^$9!#@5>o$J5!G=(B
$B$r2sI|$9$k$K$O!":F5/F0$,I,MW$G$9!#(B
(B
$B$^$?!"(BMicrosoft XML Parser $B$G(B XML $B%a%C%;!<%8$r=hM}$9$kB>$N%"%W%j%1!<%7%g(B
$B%s$r2p$7$FLdBj$,MxMQ$5$l$k2DG=@-$b$"$j$^$9!#(B
(B
(B30. Squid Proxy SNMP ASN.1 Parser Denial Of Service Vulnerabilit...
(BBugTraq ID: 11385
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Oct 12 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11385
$BMWLs(B:
(BSquid $B$N(B SNMP ASN.1 $B2r@O%D!<%k$O!"%5!<%S%9ITG=967b$N1F6A$ruBV$G$OM-8z$G$O$"$j$^$;$s!#FCDj$NL$8!>Z$N%*%Z%l!<%F%#%s%0%7%9%F%`$K(B 
(BSquid $B$,%P%$%J%j%"%W%j%1!<%7%g%s$H$7$F4^$^$l$F$$$k>l9g$O!"%G%U%)%k%H$GM-(B
$B8z$K$J$C$F$$$k2DG=@-$,$"$j$^$9!#(B
(B
$B%j%b!<%H$N967be@55,%f!<%6$X$N%5!<%S%95qH]$r0z$-5/$3$9$3$H$,(B
$B2DG=$G$9!#(B
(B
(BSquid $B$N(B2.5-STABLE6 $B0JA0$N%P!<%8%g%s!"$*$h$S(B 3.0-PRE3-20040702 $B$K$*$$$F!"(B
$B$3$NLdBj$,B8:_$9$k$HJs9p$5$l$F$$$^$9!#(B
(B
(B31. Adobe Acrobat Reader Remote Access Validation Vulnerability
(BBugTraq ID: 11386
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Oct 12 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11386
$BMWLs(B:
(BAdobe Acrobat Reader $B$K$O!"%"%/%;%9$KBP$9$kBEEv@-$N3NG'$KLdBj$,B8:_$7$^(B
$B$9!#$3$NLdBj$O!"(BPortable Document Format (PDF) $B%U%!%$%k$X$N0-0U$"$k%U%!(B
$B%$%k$NKd$a9~$_$,5v$5$l$F$7$^$&@_7W>e$NITHw$KM3Mh$7$^$9!#(B
(B
$B967bpJs$K$h$j!"LdBj$N$"$k%3%s%T%e!<%?$KBP$7$F99$J$k967b$,(B
$Bhttp://www.securityfocus.com/bid/11387
$BMWLs(B:
$BJ#?t$N(B Microsoft Windows 2003 $B%5!<%S%9$G$O!"%G%U%)%k%H$N(B SACL $B%"%/%;%98"(B
$B$N@_Dj$KLdBj$,B8:_$9$k$HJs9p$5$l$F$$$^$9!#(B
(B
$BJ#?t$N%5!<%S%9$K$*$1$k%Q!<%_%C%7%g%s$,ITE,@Z$K@_Dj$5$l$F$$$k$?$a!"K\Mh8"(B
$B8B$r;}$?$J$$%m!<%+%k%f!<%6$G$b$3$l$i$N%5!<%S%9$r3+;O$G$-$F$7$^$&$3$H$,Js(B
$B9p$5$l$F$$$^$9!#(B
(B
$BG$0U$N%f!<%6$O$3$l$i$N%5!<%S%9$r3+;O$G$-$k$?$a!"4IM}http://www.securityfocus.com/bid/11388
$BMWLs(B:
(BMicrosoft $B$N%;%-%e%j%F%#>pJs(B MS04-038 $B$K$O!"(BInternet Explorer $B$G%$%s%?!<(B
$B%M%C%H%>!<%s$+$i%m!<%+%k%>!<%s$K1*2s$9$k$3$H$K$h$j%>!<%s8"8B$N>:3J$,5v$5(B
$B$l$F$7$^$&$H$$$&!"L$FCDj$NLdBj$KBP=h$9$k$?$a$N=$@5$,4^$^$l$F$$$^$9!#(B
(B
(BshowHelp DHTML $B%a%=%C%I$NMxMQ$K$h$C$F!"0-0U$"$k(B Web $B%5%$%H$,(B HTML $B%X%k%W(B
$B%U%!%$%k$r%m!<%+%k%>!<%s$N%;%-%e%j%F%#%3%s%F%-%9%HFb$K%m!<%I$7$J$$$h$&$K!"(B
$B%;%-%e%j%F%#8!::5!G=$r$5$i$KDI2C$7$?$H!"(BMicrosoft $B$O=R$Y$F$$$^$9!#%7%9%F(B
$B%`>e$K$9$G$KB8:_$9$k(B HTML $B%X%k%W%U%!%$%k$r;X$9$N$+!"%j%b!<%H%=!<%9$+$i$N(B 
(BHTML $B%X%k%W%U%!%$%k$r;X$9$N$+$O!"8=;~E@$G$OITL@$G$9!#(B
(B
$B$3$l$O(B Windows XP SP2/BID 10897 (Microsoft Windows XP SP2 Released -
(BMultiple Vulnerabilities Fixed) $B$G<($5$l$F$$$kL$FCDj$NLdBj$K4XO"$7$F$$$k(B
$B2DG=@-$,$"$j$^$9$,!"$3$l$OL$8!>Z$G$9!#(B
(B
(B- $B:#2s$N(B HTML $B%X%k%W$KBP$9$k99?7$O!"(Bwindow.showHelp() $B%a%=%C%I$G8F$S=P$5(B
$B$l$?$H$-5!G=$r@)8B$7$^$9!#(B
(B
$B$3$l$O!"(BBID 9320 $B$J$I!"(BshowHelp $B$G0JA0$KJs9p$5$l$F$$$kLdBj$KN`;w$7$F$$$k(B
$B2DG=@-$,$"$j$^$9!#$3$NLdBj$K4X$7$F$N>\:Y$O!"(BMicrosoft $B$O8=;~E@$G$O8xI=$7(B
$B$F$$$^$;$s!#(B
(B
(B34. Research In Motion Blackberry Remote Denial of Service Vulne...
(BBugTraq ID: 11389
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Oct 13 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11389
$BMWLs(B:
(BResearch In Motion Blackberry 7230 $B$O!"%j%b!<%H$+$i$N967b$K$h$j%5!<%S%9(B
$BITG=>uBV967b$N1F6A$re$KJ]B8$5$l$?$9$Y$F$NEE;R%a!<%k%a%C%;!<%8$rB;<:$5$;$k2DG=@-$,$"(B
$B$j$^$9!#(B
(B
$B99?7(B: $BEv=i!"$3$l$O%P%C%U%!%*!<%P!<%U%m!<$NLdBj$H$7$FG'<1$5$l$F$$$^$7$?!#(B
$B?7$?$J>pJs$K$h$k$H!"%j%b!<%H$+$i$N967b$K$h$k%5!<%S%9ITG=>uBV$K4Y$kLdBj$N(B
$B$_$G$"$k$3$H$,?d;!$5$l$F$$$^$9!#$3$N(B BID $B$O!"$3$N>pJs$rH?1G$7$F99?7$5$l(B
$B$?$b$N$G$9!#(B
(B
(B35. phpMyAdmin Remote Command Execution Vulnerability
(BBugTraq ID: 11391
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Oct 13 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11391
$BMWLs(B:
(BphpMyAdmin $B$K$O!"%j%b!<%H$+$i$N%3%^%s%Ie$GG$0U$N%3(B
$B%^%s%I$,7$/2DG=@-$,$"$j$^$9!#(B
(B
(BphpMyAdmin 2.6.0-pl1 $B0JA0$N%P!<%8%g%s$,$3$NLdBj$N1F6A$rhttp://www.securityfocus.com/bid/11392
$BMWLs(B:
(BCampus Pipeline $B$O!"%/%m%9%5%$%H%9%/%j%W%F%#%s%0967b$N1F6A$re$G0-0U$"$k%3!<%I$,2rZMQ>pJs$N@`http://www.securityfocus.com/bid/11393
$BMWLs(B:
(BFuseTalk Forum $B$K$O!"(BHTML $B%?%0$rA^F~2DG=$JLdBj$rMxMQ$9$k967b$rZMQ>pJs$N@`http://www.securityfocus.com/bid/11406
$BMWLs(B:
(BLibTIFF $B$O!"%P%C%U%!%*!<%P!<%U%m!<$K4XO"$7$F!"J#?t$NLdBj$N1F6A$re$GG$0U$N%3!<%I$rhttp://www.securityfocus.com/bid/11407
$BMWLs(B:
(BFuseTalk Forum $B$K$O!"F~NOCM$KBP$9$kBEEv@-$N3NG'$K4XO"$7$F!"LdBj$,J#?tB8(B
$B:_$9$k5?$$$,$"$k$HJs9p$5$l$F$$$^$9!#%j%b!<%H$N967bZMQ>pJs$N@`http://www.securityfocus.com/bid/11408
$BMWLs(B:
(B3Com 3CRADSL72 $B$K$O!">pJs$,O31L$9$kLdBj$*$h$SG'>Z$,2sHr$5$l$kLdBj$,B8:_(B
$B$9$k5?$$$,$"$k$HJs9p$5$l$F$$$^$9!#%j%b!<%H$N967b!"%W%i%$%^%j$*$h$S%;%+%s%@%j$N(B DNS $B%5!<%P!"%G%U%)%k%H$N%2!<(B
$B%H%&%'%$$J$I$N=EMW$J>pJs$r3+<($9$k2DG=@-$,$"$j$^$9!#$^$?967be$N%G%P%$%9$d$=$NB>$N%f!<(B
$B%6$KBP$7$F99$J$k967b$,2C$($i$l$k2DG=@-$,$"$j$^$9!#(B
(B
(B41. ShixxNOTE 6.net Remote Buffer Overflow Vulnerability
(BBugTraq ID: 11409
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Oct 13 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11409
$BMWLs(B:
(BShixxNOTE 6.net $B$O!"%j%b!<%H$+$i$N967b$K$h$j%P%C%U%!%*!<%P!<%U%m!<$,H/@8(B
$B$9$kLdBj$N1F6A$re$GG$0U$N%3!<%I$rhttp://www.securityfocus.com/bid/11410
$BMWLs(B:
(BMicrosoft Windows XP Service Pack 2 $B$K$O!"%G%U%)%k%H$N@_Dj$,@Hhttp://www.securityfocus.com/bid/11411
$BMWLs(B:
(BMacromedia JRun $B$K$O!"(BHTML $B%?%0$rA^F~2DG=$JLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#(B
$B$3$NLdBj$O4IM}%3%s%=!<%k$KB8:_$7!"4IM}%;%C%7%g%s$,%O%$%8%c%C%/$5$l$k$N$r(B
$B5v$7$F$7$^$&2DG=@-$,$"$j$^$9!#(B
(B
(B44. Microsoft Frontpage Asycpict.DLL JPEG Handling Remote Denial...
(BBugTraq ID: 11412
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Oct 14 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11412
$BMWLs(B:
(BMicrosoft Frontpage $B$K$O!"IT@5$J(B JPEG $B%U%!%$%k$r=hM}$9$k:]$K%j%b!<%H$+$i(B
$B$N967b$K$h$C$F%5!<%S%9ITG=>uBV$K4Y$kLdBj$,J#?tB8:_$9$k5?$$$,$"$k$HJs9p$5(B
$B$l$F$$$^$9!#$3$l$i$NLdBj$O!"(B'asycpict.dll' $B%b%8%e!<%k$K$h$k8!::$,E,@Z$K(B
$BuBV$K4Y$kLdBj$N$_$G$"$k$HJs(B
$B9p$5$l$F$$$^$9$,!"LdBj$N$"$k%3%s%T%e!<%?>e$GG$0U$N%3!<%I$rZ$G$9!#(B
(B
$B$3$l$i$NLdBj$O!":G=i$NJs9p$G$O(B 'asycpict.dll' $B%i%$%V%i%j$K1F6A$9$k$b$N$G(B
$B$"$k$H<($5$l$F$$$?E@$KN10U$9$Y$-$G$9!#:G=i$NJs9p$G$O!"Ev3:%i%$%V%i%j$O(B 
(BMicrosoft Windows XP $B$N$9$Y$F$N%P!<%8%g%s$KF1:-$5$l$F$$$k$HJs9p$5$l$F$$(B
$B$^$7$?$,!"$3$l$,@53N$J>pJs$G$O$J$$$H$$$&J#?t$NJs9p$,=P$5$l$F$$$^$9!#$3$l(B
$B$i$NJs9p$O!"LdBj$N%i%$%V%i%j$O(B Microsoft Front Page 97 $B$*$h$S(B 98 $B$KF1:-(B
$B$5$l$F$$$k$H;XE&$7$F$$$^$9!#$=$NCf$N(B 1 $B$D$NJs9p$G$O!"(BMicrosoft Internet
(BExplorer $B$N%P!<%8%g%s(B 3.01 $B$K$bEk:\$5$l$F$$$k$3$H$,;XE&$5$l$F$$$^$9!#$3(B
$B$l$K4X$7$F$O!"L$8!>Z$G$9!#(B
(B
$B>\:Y$,ITL@$J$?$a!"99$J$k>pJs$O8=;~E@$G$ODs6!$5$l$F$$$^$;$s!#>\:Y>pJs$,8x(B
$B3+$5$lhttp://www.securityfocus.com/bid/11413
$BMWLs(B:
(BMacromedia JRun $B$K$O!"%;%C%7%g%s(B ID $B$N=hM}$NITHw$K$h$j(B HTTP $B1~EzJ,3d$NLd(B
$BBj$,B8:_$7$^$9!#$3$NLdBj$O!"(BPOST $BMW5a$,E,@Z$K=hM}$5$l$J$$$3$H$KM3Mh$7$^(B
$B$9!#(B
(B
$B%j%b!<%H$N967b>N$9$k2DG=@-$,$"$j$^$9!#(B
(B
(B46. Macromedia JRun Management Console Administrative Session Fi...
(BBugTraq ID: 11414
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Oct 14 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11414
$BMWLs(B:
(BMacromedia JRun $B$K$O!"%;%C%7%g%s$,8GDj$5$l$k5?$$$,$"$j$^$9!#$3$NLdBj$O4I(B
$BM}%3%s%=!<%k$KB8:_$7$^$9!#(B
(B
$B$3$N%"%W%j%1!<%7%g%s$K$O!"%;%C%7%g%s$,8GDj$5$l$k5?$$$,$"$k$HJs9p$5$l$F$$(B
$B$^$9!#967bZ$G%f!<%6$N%;%C%7%g%s$r%O%$%8%c%C%/$9$k2DG=@-$,$"$j$^$9!#(B
(B
$B$3$NLdBj$K$h$j!"%j%b!<%H$N967bZ%A%'%C%/$r2sHr$7!"(BWeb $B%"%W%j%1!<%7%g(B
$B%s$X$N4IM}http://www.securityfocus.com/bid/11415
$BMWLs(B:
(BPinnacle Systems ShowCenter $B$O!"%/%m%9%5%$%H%9%/%j%W%F%#%s%0967b$NLdBj$r(B
$Be$G0-0U$"$k%3!<%I$,2rhttp://www.securityfocus.com/bid/11416
$BMWLs(B:
(BMediaWiki $B$K$O!"%/%m%9%5%$%H%9%/%j%W%F%#%s%0967b!"(BHTML $B%?%0$rA^F~$9$k96(B
$B7b!"$*$h$S(B SQL $B9=J8$rCmF~$9$k967b$r$N%P!<%8%g%s$b1F6A$rhttp://www.securityfocus.com/bid/11417
$BMWLs(B:
(Bunzoo $B%f!<%F%#%j%F%#$K$O!"%G%#%l%/%H%j%H%i%P!<%5%k967b$r$KBP$7$F%5%K%?%$%:=hM}$,E,@Z$K\:Y$,8x3+$5$lhttp://www.securityfocus.com/bid/11418
$BMWLs(B:
(BMailEnable $B$O!"%j%b!<%H$+$i$N967b$K$h$j%5!<%S%9ITG=>uBV$K4Y$kJ#?t$NLdBj(B
$B$N1F6A$rhttp://www.securityfocus.com/bid/11419
$BMWLs(B:
(BKDocker $B$K$O!"L$FCDj$NLdBj$,B8:_$9$k5?$$$,$"$k$HJs9p$5$l$F$$$^$9!#%Y%s%@(B
$B$O!"(BKDocker $B$N(B 0.8 $B0JA0$N%P!<%8%g%s$K$*$$$F$3$NLdBj$rJs9p$7$F$$$^$9!#$3(B
$B$NLdBj$N860x$*$h$S1F6A$O!"8=;~E@$G$OITL@$G$9!#$3$NLdBj$NFC@-$K$h$j!"%m!<(B
$B%+%k$N967b:3J$5$;$?$j!"%m!<%+%k$G%3%s%T%e!<%?5!G=$KBP$9$k6<0R(B
$B$r0z$-5/$3$92DG=(B
$B$r0z$-5/$3$92DG=@-$,$"$k$H?d;!$5$l$^$9!#(B
(B
$B>\:Y$,ITL@$J$?$a!"99$J$k>pJs$O8=;~E@$G$ODs6!$5$l$F$$$^$;$s!#LdBj$N>\:Y$,(B
$B8x3+$5$lhttp://www.securityfocus.com/bid/11420
$BMWLs(B:
(BAnsel $B$K$O!"%G%U%)%k%H$N%Q!<%_%C%7%g%s$,%;%-%e%j%F%#>eITE,@Z$K@_Dj$5$l$F(B
$B$$$k5?$$$,$"$k$HJs9p$5$l$F$$$^$9!#%"%W%j%1!<%7%g%s$O!"%;%-%e%j%F%#>eITE,(B
$B@Z$J%Q!<%_%C%7%g%s$r;HMQ$7$F2hA|%"%k%P%`$,:n@.$5$l$k$HJs9p$5$l$F$$$^$9!#(B
$B%j%b!<%H$N967bhttp://www.securityfocus.com/bid/11421
$BMWLs(B:
(BVeritas Cluster Server $B$O!"4IM}\:Y$,8x3+$5$lhttp://www.securityfocus.com/bid/11422
$BMWLs(B:
(B3Com OfficeConnect ADSL Wireless 11g Firewall Router $B$K$O!"L$FCDj$NLdBj(B
$B$,J#?tB8:_$9$k5?$$$,$"$k$HJs9p$5$l$F$$$^$9!#uBV$K4Y$kLdBj$K$h$C$F!"%j%b!<%H$N967b\:Y>pJs$N8x3+$KH<$C$FFH<+$N(B BID $B$,3d$jEv$F$i$l$?E@$K(B
$BN10U$9$Y$-$G$9!#>\:Y$O(B '3Com OfficeConnect ADSL Wireless 11g Firewall
(BRouter Authentication Bypass Vulnerability' (BID 11438) $B$r;2>H$7$F$/$@$5(B
$B$$!#(B
(B
(B55. NatterChat Unspecified SQL Injection Vulnerability
(BBugTraq ID: 11423
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Oct 14 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11423
$BMWLs(B:
$BL$FCDj$N(B SQL $B9=J8$rCmF~$9$k967b$r$N%P!<(B
$B%8%g%s$b1F6A$rhttp://www.securityfocus.com/bid/11424
$BMWLs(B:
(BIdeal Science IdealBB $B$K$O!"F~NOCM$KBP$9$kBEEv@-$N3NG'$K4XO"$7$F!"L$FCDj(B
$B$NLdBj$,J#?tB8:_$9$k5?$$$,$"$k$HJs9p$5$l$F$$$^$9!#$3$l$i$NLdBj$O!"%f!<%6(B
$B$,F~NO$7$?%G!<%?$N%5%K%?%$%:=hM}$,E,@Z$Khttp://www.securityfocus.com/bid/11425
$BMWLs(B:
(BCyberStrong eShop ASP Shopping Cart $B$K$O!"%/%m%9%5%$%H%9%/%j%W%F%#%s%096(B
$B7b$K4XO"$9$kL$FCDj$NLdBj$,B8:_$7$^$9!#$3$NLdBj$,MxMQ$5$l$k$H!"(BCookie $B$K(B
$BM3Mh$9$kG'>ZMQ>pJs$N@`http://www.securityfocus.com/bid/11426
$BMWLs(B:
(BExpress-Web Content Management System $B$K$O!"%/%m%9%5%$%H%9%/%j%W%F%#%s%0(B
$B967b$K4XO"$9$kL$FCDj$NLdBj$,B8:_$7$^$9!#$3$NLdBj$,MxMQ$5$l$k$H!"(BCookie 
$B$KM3Mh$9$kG'>ZMQ>pJs$N@`http://www.securityfocus.com/bid/11427
$BMWLs(B:
(BAlivesites Forum $B$K$O!"F~NOCM$KBP$9$kBEEv@-$N3NG'$K4XO"$9$kL$FCDj$NLdBj(B
$B$,J#?tB8:_$9$k5?$$$,$"$k$HJs9p$5$l$F$$$^$9!#$3$l$i$NLdBj$O!"%f!<%6$,F~NO(B
$B$7$?%G!<%?$N%5%K%?%$%:=hM}$,E,@Z$Khttp://www.securityfocus.com/bid/11428
$BMWLs(B:
(BDevoyBB $B$O!"F~NOCM$KBP$9$kBEEv@-$N3NG'$K4XO"$9$kLdBj$N1F6A$rZMQ>pJs$r@`http://www.securityfocus.com/bid/11429
$BMWLs(B:
(BWowBB $B$O!"F~NOCM$KBP$9$kBEEv@-$N3NG'$K4XO"$9$kJ#?t$NLdBj$N1F6A$rZMQ>pJs$r@`http://www.securityfocus.com/bid/11430
$BMWLs(B:
(BProFTPD $B$K$O!"%j%b!<%H$N967b(B
$B$r%(%_%e%l!<%H$5$l$k2DG=@-$,$"$k$HJs9p$5$l$F$$$^$9!#(B
(B
$B%j%b!<%H$N967be$GM-8z$J%f!<%6L>!"(B
$B8"8B$r;}$D%f!<%6L>!"$^$?$OB8:_$7$J$$%f!<%6L>$r3d$j=P$92DG=@-$,$"$j$^$9!#(B
(B
(B63. WeHelpBUS Undisclosed Remote Command Execution Vulnerability
(BBugTraq ID: 11431
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Oct 15 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11431
$BMWLs(B:
(BWeHelpBUS $B$K$O!"%3%^%s%I$,pJs$,8x3+$5$l$F$$$^$;$s!#(B
(B
$B967be$GG$0U$N%7%'%k%3%^%s%I$r\:Y>pJs$,8x3+$5$lhttp://www.securityfocus.com/bid/11433
$BMWLs(B:
(BYak! Chat Client FTP $B%5!<%P$K$O!"%j%b!<%H$+$i%G%#%l%/%H%j%H%i%P!<%5%k96(B
$B7b$re$K0-0U$"$k%U%!%$%k$rG[CV$7!"B>$NJ}(B
$BK!$K$h$C$F$3$l$i$N%U%!%$%k$r7$/2DG=@-$,$"$j$^$9!#(B
(B
(BYak! 2.1.2 $B0JA0$N%P!<%8%g%s$K$*$$$F!"$3$NLdBj$,B8:_$9$k5?$$$,$"$k$HJs9p(B
$B$5$l$F$$$^$9!#(B
(B
(B65. DMXReady Site Chassis Manager Cross-Site Scripting And SQL I...
(BBugTraq ID: 11434
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Oct 15 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11434
$BMWLs(B:
(BDMXReady Site Chassis Manager $B$O!"F~NOCM$KBP$9$kBEEv@-$N3NG'$K4XO"$7$F!"(B
$B%j%b!<%H$+$ie$G0-0U$"$k%3!<(B
$B%I$,2rZMQ>pJs$N@`c32$N8e!"O"K.9R6u6I(B (FAA) $BFb(B
$B$N:G$b=EMW$J%7%9%F%`$,AjJQ$o$i$:%3%s%T%e!<%?%;%-%e%j%F%#$NLdBj$rJz$($F$$(B
$B$k$H$$$&Js9p$,=P$5$l$^$7$?!#(B
(B
(Bhttp://www.securityfocus.com/news/9729
(B
(B2. Patriot Act tour carried a hefty price tag
$BCxhttp://www.securityfocus.com/news/9703
(B
(B3. Shifting cyber threats menace factory floors
$BCxl$G$O1s3VA`:n$G2TF0$9$k5!4o$KBP$9$k%5%$%P!<96(B
$B7b$N6<0R$O!"FbIt4X78http://www.securityfocus.com/news/9671
(B
(B4. 419ers take Aussie financial advisor for AU$1m
$BCxe$2$F%J%$%8%'%j%"%s%9%-%c%`$N:>5=;U$K2#N.$7$7$?:a$G!"(B
$BD94|$N6X8G7:$rhttp://www.securityfocus.com/news/9753
(B
(B5. New Google tool for searching computers a privacy risk on sh...
$BCxhttp://www.securityfocus.com/news/9745
(B
(B6. Watch out, there's a scammer about
$BCxCHqhttp://www.securityfocus.com/news/9742
(B
(B
(BIV. SECURITYFOCUS TOP 6 TOOLS
(B-----------------------------
(B1. ByteShelter I 1.0
$B:nhttp://www.mazzoft.com/bs1.zip
$BF0:n4D6-(B: Windows 2000$B!"(BWindows 95/98
$BMWLs(B: 
(B
$B$3$N%9%F%,%N%0%i%U%#!JEE;R$"$V$j$@$75;=Q!K%D!<%k$r;HMQ$9$k$H!"(BOutlook $B$N(B
$BEE;R%a!<%k%a%C%;!<%8$H(B .doc $B7A<0%U%!%$%k$N%G!<%?$r1#$9$3$H$,2DG=$G$9!#(B
(B
(B2. MobileJavaScanner 1.0
$B:nhttp://vidstrom.net/stools/mobilejavascanner/
$BF0:n4D6-(B: Java
$BMWLs(B: 
(B
(BMobileJavaScanner $B$O!"(BMIDlet ($B7HBSEEOC8~$1(B Java $B%W%m%0%i%`(B) $B$N(BTCP $B%]!<%H(B
$B%9%-%c%J$G$9!#(B
(B
(B3. JavaCallTester 1.0
$B:nhttp://www.vidstrom.net/stools/javacalltester/
$BF0:n4D6-(B: Java
$BMWLs(B: 
(B
(BJavaCallTester $B$O!"DLOCMQ$N(B MIDlet ($B7HBSEEOC8~$1(B Java $B%W%m%0%i%`(B) $B$G$9!#(B
(BJavaCallTester $B$r;HMQ$9$k$H!"7HBSEEOC$K(B MIDlets $B$N@5$7$$%;%-%e%j%F%#%]%j(B
$B%7$,http://diskinternals.com/download/Uneraser_Setup.zip
$BF0:n4D6-(B: Windows 2000$B!"(BWindows 95/98$B!"(BWindows NT$B!"(BWindows XP
$BMWLs(B: 
(B
(BDiskInternals Uneraser $B$O!"%I%-%e%a%s%H!"6H0w$N0-0U$"$k9T0Y$K$h$C$F:o=|$5$l$?%U%!%$%k$r85$KLa$7$^(B
$B$9!#FCJL$J%9%-%k$OITMW$G!";nMQ$O40A4$KL5NA$G$9!#(B
(B
(B5. DiskInternals NTFS Reader 1.01
$B:nhttp://diskinternals.com/download/NTFS_Reader_Setup.zip
$BF0:n4D6-(B: Windows 2000$B!"(BWindows 95/98$B!"(BWindows NT$B!"(BWindows XP
$BMWLs(B: 
(B
(BWindows 95$B!"(B98 $B$*$h$S(B Me $B$+$i(B NTFS $B$X$NFI$_=P$7%"%/%;%9$rDs6!$7$^$9!#%7(B
$B%9%F%`$^$?$O%M%C%H%o!<%/>e$GI=<(2DG=$J%G%#%9%/$KG$0U$N%U%!%$%k$rJ]B8$G$-(B
$B$^$9!#05=L%U%!%$%k$d0E9f2=$5$l$?%U%!%$%k$bJ]B8$G$-$^$9!#(B
(B
$BJ]B8;~$K$O!"%U%!%$%k$N%;%-%e%j%F%#%]%j%7$OL5;k$5$l$^$9!#$D$^$j!"(BWindows
(B9x $B$+$i(B NTFS $B>e$K$"$k$9$Y$F$N%U%!%$%k$K%"%/%;%9$G$-$k$N$G$9!#(B
(B
(B6. Airscanner Mobile Firewall 1.0
$B:nhttp://www.airscanner.com/downloads/fw/amfw.exe
$BF0:n4D6-(B: Windows CE
$BMWLs(B: 
(B
$B$"$J$?$N%O%s%I%X%k%I(B PC $B!J(BWindows Mobile/Pocket PC$BMQ!K$K40A4$J5!G=$rDs6!(B
$B$9$k%Q!<%=%J%k%U%!%$%"%&%)!<%k$G$9!#(B
(B
(BAirscanner Mobile Firewall for Windows Mobile Pocket PC $B$O!"$9$Y$F$NZ$9$k%Q%1%C%H%U%#(B
$B%k%?%j%s%07?%U%!%$%"%&%)!<%k$G$9!#(B
(B
$B$3$N%Q!<%=%J%k%U%!%$%"%&%)!<%k$O!"Dj5A:Q$_%U%#%k%?$N%;%C%H$d%f!<%6<+?H$,(B
$B:n@.$7$?%U%#%k%?$+$i!"%f!<%6$,A*Br$7$?%"%/%;%9%3%s%H%m!<%k%j%9%H$K4p$E$-!"(B
$B%G!<%?$NAwZ$7$^$9!#(B
(B
$B%Q%1%C%H.3^8691M:(B(OGASAWARA Tsuneo)
(BLAC Co., Ltd.
(Bhttp://www.lac.co.jp/index.html
Attachment: smime.p7s
Description: S/MIME cryptographic signature
Prev by Date: [SNS Advisory No.80] nProtect:Netizen Arbitrary File Download Vulnerability
Previous by thread: [SNS Advisory No.80] nProtect:Netizen Arbitrary File Download Vulnerability
Index(es):
- Date
- Thread