[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
SecurityFocus Newsletter #272 2004-10-18->2004-10-22

To: bugtraq-jp@xxxxxxxxxxxxxxxxx
Subject: SecurityFocus Newsletter #272 2004-10-18->2004-10-22
From: Tsuneo Ogasawara <t.ogaswr@xxxxxxxxx>
Date: Wed, 11 May 2005 19:43:44 +0900
$B>.3^86(B@$B%i%C%/$G$9!#(B
(B
(BSecurityFocus Newsletter $BBh(B 272 $B9f$NOBLu$r$*FO$1$7$^$9!#(B
$BLu$N$J$$9`L\$K$D$$$F$O!VF|K\8lLu$J$7!W$H$7$F6hJL$7$F$"$j$^$9!#(B
(B
(B---------------------------------------------------------------------------
(BBugTraq-JP $B$K4X$9$k(B FAQ ($BF|K\8l(B):
(Bhttp://www.securityfocus.com/popups/forums/bugtraq-jp/faq.shtml
$B!&(BSecurityFocus Newsletter $B$NOBLu$O(B BugTraq-JP $B$G0lH$/$@$5$$(B
(B---------------------------------------------------------------------------
(B---------------------------------------------------------------------------
(BSecurityFocus Newsletter $B$K4X$9$k(B FAQ ($B1Q8l(B):
(Bhttp://www.securityfocus.com/popups/forums/securityfocusnews/intro.shtml
(BBugTraq $B$K4X$9$k(B FAQ ($B1Q8l(B):
(Bhttp://www.securityfocus.com/popups/forums/bugtraq/faq.shtml
(B---------------------------------------------------------------------------
$B0zMQ$K4X$9$kHw9M(B:
$B!&$3$NOBLu$O(B SecurityFocus $B$N5v2D$r3t<02qe$G9T$o$l$F$$$^$9!#(B
$B!&(BSecurityFocus Newsletter $B$NOBLu$r(B Netnews, Mailinglist, World Wide Web,
(B  $B=q@R(B, $B$=$NB>$N5-O?G^BN$G0zMQ$5$l$k>l9g$K$O%a!<%k$NA4J80zMQ$r$*4j$$$7$^$9!#(B
$B!&F|K\8lHG%K%e!<%9%l%?!<(B 1 $B9f$+$i(B 3 $B9f$^$G$K$O$3$NHw9M$,IU$$$F$$$^$;$s$,!"(B
(B  $B=`MQ$9$k$b$N$H$7$^$9!#(B
$B!&$^$?!"(BSecurityFocus $BDs6!$N(B BugTraq-JP $B%"!<%+%$%V(B [*1] $B$X$N$$$+$J$k7A<0$N(B
(B  $B%O%$%Q!<%j%s%/$b>e5-$K=`$8$F$/$@$5$$!#(B
(B1) http://online.securityfocus.com/archive/79
(B---------------------------------------------------------------------------
$B$3$NOBLu$K4X$9$kHw9M(B:
$B!&$3$NOBLu$NE,MQ@.2L$K$D$$$F3t<02ql9g!"(BBugTraq-JP $B$X(B Errata $B$H$7$F=$@5(B
(B  $BHG$r$4Ej9FD:$/$+!"4F=$l9g$K$O=$@5HG$r$G$-$k$@$1?WB.$KH/9T$7$^$9!#(B
(B---------------------------------------------------------------------------
(BThis translation is encoded and posted in ISO-2022-JP.
(B
$B86HG(B:
(BDate: 26 Oct 2004 16:57:55 -0000
(BMessage-ID: <20041026165755.10189.qmail@xxxxxxxxxxxxxxxxxxxxxx>
(B
(BSecurityFocus Newsletter #272
(B-----------------------------
(B
(BThis Issue is Sponsored By: Check Point
(B
(BI. FRONT AND CENTER ($BF|K\8lLu$J$7(B)
(B     1. Issues Discovering Compromised Machines
(B     2. The Latest Tool in Competition: Hacking
(B     3. Security, 1994-2004: Then And Now
(BII. BUGTRAQ SUMMARY
(B     1. ARJ Software UNARJ Remote Directory Traversal Vulnerability
(B     2. CoolPHP Multiple Remote Input Validation Vulnerabilities
(B     3. 3Com OfficeConnect ADSL Wireless 11g Firewall Router Authent...
(B     4. Mozilla Multiple Memory Corruption Vulnerabilities
(B     5. Mozilla Invalid Pointer Dereference Vulnerability
(B     6. Opera Browser TBODY COL SPAN Memory Corruption Denial Of Ser...
(B     7. Links Malformed Table Denial Of Service Vulnerability
(B     8. Lynx Malformed HTML Infinite Loop Denial Of Service Vulnerab...
(B     9. H+BEDV AntiVir MS-DOS Name Scan Evasion Vulnerability
(B     10. Gnofract 4D Remote Script Code Execution Vulnerability
(B     11. Microsoft Outlook 2003 Security Policy Bypass Vulnerability
(B     12. Microsoft Outlook Express Plaintext Email Security Policy By...
(B     13. Multiple Vendor Antivirus Software Zip Files Detection Evasi...
(B     14. cPanel Remote Backup Information Disclosure Vulnerability
(B     15. Best Software SalesLogix Multiple Remote Vulnerabilities
(B     16. Proland Software Protector Plus AntiVirus MS-DOS Name Scan E...
(B     17. YaPiG Comment Field HTML Injection Vulnerability
(B     18. FIL Security Laboratory Twister Anti-TrojanVirus MS-DOS Name...
(B     19. dadaIMC Comment Field HTML Injection Vulnerability
(B     20. cPanel Front Page Extension Installation File Ownership Vuln...
(B     21. cPanel Front Page Extension Installation Information Disclos...
(B     22. BMON Local Privilege Escalation Vulnerability
(B     23. IBM Lotus Domino Cross-Site Scripting and HTML Injection Vul...
(B     24. Sun Solaris LDAP RBAC Local Privilege Escalation Vulnerabili...
(B     25. Cabextract Remote Directory Traversal Vulnerability
(B     26. Vypress Tonecast Remote Denial Of Service Vulnerability
(B     27. Jan Erdmann Jebuch HTML Injection Vulnerability
(B     28. LANDesk Management Suite Remote Denial Of Service Vulnerabil...
(B     29. HP Tru64 X Window System Multiple Local Vulnerabilities
(B     30. Microsoft Internet Explorer Valid File Drag and Drop Embedde...
(B     31. Microsoft Internet Explorer HTML Help Control Local Zone Sec...
(B     32. MPG123 Remote URL Open Buffer Overflow Vulnerability
(B     33. Apple Safari Cross-Domain Dialog Box Spoofing Vulnerability
(B     34. Maxthon Web Browser Cross-Domain Dialog Box Spoofing Vulnera...
(B     35. Apache mod_include Local Buffer Overflow Vulnerability
(B     36. Avant Browser Cross-Domain Dialog Box Spoofing Vulnerability
(B     37. Mozilla Browser Cross-Domain Dialog Box Spoofing Vulnerabili...
(B     38. Mozilla Browser Cross-Domain Tab Window Form Field Focus Vul...
(B     39. Opera Web Browser Cross-Domain Dialog Box Spoofing Vulnerabi...
(B     40. Maxthon Web Browser Cross-Domain Tab Window Form Field Focus...
(B     41. Konqueror Browser Cross-Domain Dialog Box Spoofing Vulnerabi...
(B     42. Avant Browser Cross-Domain Tab Window Form Field Focus Vulne...
(B     43. Akella Privateer's Bounty: Age of Sail II Remote Buffer Over...
(B     44. MediaWiki Title.php Cross-Site Scripting Vulnerability
(B     45. LibPNG Graphics Library Image Height Integer Overflow Vulner...
(B     46. Gaim MSN SLP Remote Buffer Overflow Vulnerability
(B     47. Gaim MSN Remote File Transfer Denial Of Service Vulnerabilit...
(B     48. Gaim MSN Remote SLP Denial Of Service Vulnerability
(B     49. Coppermine Photo Gallery Voting Restriction Failure Vulnerab...
(B     50. DokuWiki Remote Arbitrary File Upload Vulnerability
(B     51. Ecartis Remote Undisclosed Privilege Escalation Vulnerabilit...
(B     52. Linux Kernel IPTables Logging Rules Integer Underflow Vulner...
(B     53. SuSE Linux IBM S/390 Kernel Local Privilege Escalation Vulne...
(B     54. Zinf/Freeamp Unspecified Insecure Temporary File Creation Vu...
(B     55. Linux Kernel TIOCSETD Terminal Subsystem Race Condition Vuln...
(B     56. Linux Kernel Terminal Locking Race Condition Vulnerability
(B     57. HP-UX STMKFONT Local Privilege Escalation Vulnerability
(B     58. Veritas NetBackup Privilege Escalation Vulnerability
(B     59. Nortel Contivity VPN Client Gateway Certificate Check Failur...
(B     60. Speedtouch USB Driver Local Format String Vulnerability
(B     61. Serendipity Exit.PHP HTTP Response Splitting Vulnerability
(B     62. Altiris Deployment Server Remote Command Execution Vulnerabi...
(B     63. OpenSkat Multiple Unspecified Vulnerabilities
(B     64. Altiris Carbon Copy Remote Control System Tray Application L...
(B     65. Xpdf PDFTOPS Multiple Integer Overflow Vulnerabilities
(B     66. UBBCentral UBB.threads Dosearch.PHP SQL Injection Vulnerabil...
(B     67. Microsoft Windows XP WAV File Handler Denial Of Service Vuln...
(B     68. Netbilling NBMEMBER Script Information Disclosure Vulnerabil...
(B     69. Socat Remote Format String Vulnerability
(B     70. LibTIFF OJPEG Heap Buffer Overflow Vulnerability
(B     71. HP ServiceGuard Undisclosed Remote Vulnerability
(B     72. Code-Crafters Ability Server FTP STOR Argument Remote Buffer...
(BIII. SECURITYFOCUS NEWS ARTICLES
(B     1. Report card day looms for federal agencies
(B     2. California reports massive data breach
(B     3. U.S. Air Traffic Control Found Vulnerable
(B     4. Mac OS X rootkit surfaces
(B     5. Purdue says someone hacked into university's computers
(B     6. 419ers take Aussie financial advisor for AU$1m
(BIV. SECURITYFOCUS TOP 6 TOOLS
(B     1. antinat v0.81
(B     2. PopMessenger 1.60
(B     3. ByteShelter I 1.0
(B     4. MobileJavaScanner 1.0
(B     5. JavaCallTester 1.0
(B     6. DiskInternals Uneraser 2.01
(B
(B
(BI. FRONT AND CENTER($BF|K\8lLu$J$7(B)
(B---------------------------------
(B
(BII. BUGTRAQ SUMMARY
(B-------------------
(B1. ARJ Software UNARJ Remote Directory Traversal Vulnerability
(BBugTraq ID: 11436
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Oct 16 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11436
$BMWLs(B:
(BARJ Software UNARJ $B$O!"%j%b!<%H$+$i%G%#%l%/%H%j%H%i%P!<%5%k$NLdBj$N1F6A(B
$B$r$N%5%K%?%$%:=hM}$dBEEv@-$N3NG'$,E,@Z$K9T$o$l$J$$$3$H$KM3Mh$7$^$9!#(B
(B
$B967be=q$-$9$k2DG=@-$,$"(B
$B$j$^$9!#(B
(B
(B2. CoolPHP Multiple Remote Input Validation Vulnerabilities
(BBugTraq ID: 11437
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Oct 16 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11437
$BMWLs(B:
(BCoolPHP $B$O!"%j%b!<%H$+$i$NF~NOCM$KBP$9$kBEEv@-$N3NG'$K4XO"$9$kJ#?t$NLdBj(B
$B$N1F6A$rZMQ>pJs$N@`http://www.securityfocus.com/bid/11438
$BMWLs(B:
(B3Com OfficeConnect ADSL Wireless 11g Firewall Router $B$O!"G'>Z$,2sHr$5$l(B
$B$kLdBj$N1F6A$rZ:Q$_$N4IM}uBV$r0z$-5/$3$92DG=@-$,$"$j$^$9!#(B
(B
$B$3$NLdBj$O!":G=i$K(B '3Com OfficeConnect ADSL Wireless 11g Firewall Router
(BMultiple Unspecified Vulnerabilities' (BID 11422) $B$GJs9p$5$l$?$b$N$G$"$k(B
$BE@$KN10U$9$Y$-$G$9!#>\:Y>pJs$,8x3+$5$l$?$3$H$KH<$$!"FH<+$N(B BID $B$,3d$jEv(B
$B$F$i$l$^$7$?!#(B
(B
(B4. Mozilla Multiple Memory Corruption Vulnerabilities
(BBugTraq ID: 11439
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Oct 18 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11439
$BMWLs(B:
(BMozilla $B$K$O!"%a%b%j$,GK2u$5$l$kJ#?t$NLdBj$,B8:_$9$k$HJs9p$5$l$F$$$^$9!#(B
$B$3$l$i$NLdBj$O!"(BTEXTAREA $B%?%0!"(BINPUT $B%?%0!"(BFRAMESET $B%?%0!"$*$h$S(B IMG $B%?(B
$B%0$r4^$`0U?^E*$K:n@.$5$l$?(B HTML $B$K4XO"$7$F$$$^$9!#$3$l$i$NLdBj$K$h$C$F!"(B
$B0U?^E*$K:n@.$5$l$?(B HTML $B$,2rhttp://www.securityfocus.com/bid/11440
$BMWLs(B:
(BMozilla $B$K$O!"%5!<%S%9ITG=>uBV$r0z$-5/$3$92DG=@-$,9b$$LdBj$,B8:_$7$^$9!#(B
$B$3$NLdBj$O!"%V%i%&%6$GDL>o$"$jF@$J$$AH$_9g$o$;$N;k3PE*MWAG$,2rhttp://www.securityfocus.com/bid/11441
$BMWLs(B:
(BOpera $B$K$O!"%a%b%j$,GK2u$5$l$kLdBj$,B8:_$7$^$9!#$3$NLdBj$O!"(BTBODY $B%?%0$K(B
$B;XDj$5$l$?(B COL SPAN $B$NCM$,Bg$-$9$.$k>l9g$KH/@8$9$k2DG=@-$,$"$j$^$9!#$3$N(B
$BLdBj$K$h$j!"7ZEY$N%5!<%S%9ITG=>uBV$K4Y$k2DG=@-$,$"$j$^$9!#(B
(B
(B7. Links Malformed Table Denial Of Service Vulnerability
(BBugTraq ID: 11442
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Oct 18 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11442
$BMWLs(B:
(BLinks $B$K$O!"2aEY$KBg$-$J%5%$%:$N(B HTML $B%F!<%V%k$r=hM}$9$k:]$K%5!<%S%9ITG=(B
$B>uBV$K4Y$k5?$$$,$"$j$^$9!#$3$NLdBj$K$h$j!"%[%9%H%3%s%T%e!<%?$N;q8;$,2a>j(B
$B$K>CHq$5$l$k2DG=@-$,$"$j$^$9!#(B
(B
(B8. Lynx Malformed HTML Infinite Loop Denial Of Service Vulnerab...
(BBugTraq ID: 11443
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Oct 18 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11443
$BMWLs(B:
(BLynx $B$K$O!"FCDj$N0U?^E*$K:n@.$5$l$?(B HTML $B$r=hM}$9$k:]$K%5!<%S%9ITG=>uBV(B
$B$K4Y$k5?$$$,$"$j$^$9!#$3$N>u67$,MxMQ$5$l$k$H!"%"%W%j%1!<%7%g%s$,L58B%k!<(B
$B%W$K4Y$k2DG=@-$,$"$j$^$9!#(B
(B
(B9. H+BEDV AntiVir MS-DOS Name Scan Evasion Vulnerability
(BBugTraq ID: 11444
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Oct 18 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11444
$BMWLs(B:
(BAntiVir $B$O!"(BMS-DOS $BM=Ls%G%P%$%9L>$,IU$1$i$l$?%U%!%$%k$r=hM}$9$k:]$K%9%-%c(B
$B%s$,2sHr$5$l$kLdBj$N1F6A$re$NITHw$KM3Mh$7$^$9!#(B
(B
$B967b$N8e$KDL>o$N%U%!%$%k$G$"$k$+$N$h$&$K8+$((B
$B$kL>A0$rIU$1$k$H9M$($i$l$^$9!#967be(B
$B$KB8:_$7$F=i$a$FLdBj$,H/@8$9$k$H9M$($i$l$^$9!#(B
(B
$B>\:Y$,8x3+$5$lhttp://www.securityfocus.com/bid/11445
$BMWLs(B:
(BGnofract 4D $B$O!"%j%b!<%H$+$i%9%/%j%W%H%3!<%I$,e$NITHw$KM3Mh$7$^$9!#(B
(B
$B%j%b!<%H$N967bhttp://www.securityfocus.com/bid/11446
$BMWLs(B:
(BMicrosoft Outlook 2003 $B$K$O!"%;%-%e%j%F%#%]%j%7$,2sHr$5$l$k5?$$$,$"$k$H(B
$BJs9p$5$l$F$$$^$9!#(B
(B
(Bbase64 $B$G%(%s%3!<%I$5$l$?2hA|$rEE;R%a!<%k$K4^$a!"==J,$JH$,2DG=$K(B
$B$J$C$F$7$^$&$HJs9p$5$l$F$$$^$9!#(B
(B
$B$3$N$h$&$J2hA|$O(B Outlook 2003 $B$GEE;R%a!<%k$,1\Mw$5$l$k$H$-$K<+F0E*$K2r$N%a!<%kE>Aw%(!<%8%'%s%H$b1F(B
$B6A$rhttp://www.securityfocus.com/bid/11447
$BMWLs(B:
(BMicrosoft Outlook Express $B$K$O!"%;%-%e%j%F%#%]%j%7$,2sHr$5$l$k5?$$$,$"$k(B
$B$HJs9p$5$l$F$$$^$9!#(B
(B
$B$3$NLdBj$O!"0U?^E*$K:n@.$5$l$?(B CID URI $B$r;HMQ$7$FE:IU$N2hA|%U%!%$%k$,;2(B
$B>H$5$l$k>l9g$KH/@8$7$^$9!#(B
(B
$B$3$N$h$&$J2hA|$O(B Outlook Express $B$GEE;R%a!<%k$,1\Mw$5$l$k$H$-$K<+F0E*$K(B
$B2rhttp://www.securityfocus.com/bid/11448
$BMWLs(B:
$BJ#?t$N%Y%s%@$N%"%s%A%&%$%k%9%"%W%j%1!<%7%g%s$K$O!"(BZIP $B%U%!%$%k$N8!=P$,2s(B
$BHr$5$l$kLdBj$,B8:_$9$k$HJs9p$5$l$F$$$^$9!#$3$NLdBj$K$h$j!"0-0U$r;}$C$F:n(B
$B@.$5$l$?(B ZIP $B%U%!%$%k$,%9%-%c%s$*$h$S8!=P$r2sHr$7$F$7$^$&$3$H$,5v$5$l$k(B
$B2DG=@-$,$"$j$^$9!#(B
(B
$B%j%b!<%H$N967b7$/2DG=@-$,$"$j$^$9!#(B
(B
(BMcAfee$B!"(BComputer Associates$B!"(BKaspersky$B!"(BSophos$B!"(BEset $B$*$h$S(B RAV $B$+$iDs6!(B
$B$5$l$F$$$k@=IJ$K$*$$$F!"$3$NLdBj$N1F6A$rhttp://www.securityfocus.com/bid/11449
$BMWLs(B:
(BcPanel $B$K$O!"%j%b!<%H%P%C%/%"%C%W5!G=$NLdBj$K$h$j>pJs$,O31L$9$k2DG=@-$,(B
$B$"$k$HJs9p$5$l$F$$$^$9!#(B
(B
$B967b$N%P!<%8%g%s$b1F6A$rhttp://www.securityfocus.com/bid/11450
$BMWLs(B:
(BBest Software SalesLogix $B$O!"J#?t$NLdBj$N1F6A$rpJs$,3+<($5$l$k$H$$$&@_7W>e$NITHw!"IT@5%"%/%;%9$,5v$5$l$k$H$$$&%"(B
$B%/%;%9%3%s%H%m!<%k$NBEEv@-$N3NG'$K4XO"$9$kLdBj!"$*$h$S(B SQL $B9=J8$rCmF~$9(B
$B$k967b$r0z$-5/$3$9F~NOCM$NBEEv@-$N3NG'$K4XO"$9$kLdBj$KM3Mh$7$^$9!#(B
(B
$B967bpJsO31L$NLdBj$K$h$jG'>ZMQ>pJs$r@`Z$N2sHr$K$h$j%5!<%P$X$N4IM}http://www.securityfocus.com/bid/11451
$BMWLs(B:
(BProtector Plus $B$O!"(BMS-DOS $BM=Ls%G%P%$%9L>$,IU$1$i$l$?%U%!%$%k$r=hM}$9$k:](B
$B$K%9%-%c%s$,2sHr$5$l$kLdBj$N1F6A$re$NITHw$KM3Mh$7$^$9!#(B
(B
$B967b$N8e$KDL>o$N%U%!%$%k$G$"$k$+$N$h$&$K8+$((B
$B$kL>A0$rIU$1$k$H9M$($i$l$^$9!#967be(B
$B$KB8:_$7$F=i$a$FLdBj$,H/@8$9$k$H9M$($i$l$^$9!#(B
(B
$B>\:Y$,8x3+$5$lhttp://www.securityfocus.com/bid/11452
$BMWLs(B:
(BYaPiG $B$K$O!"(BHTML $B%?%0$rA^F~$9$k967b$rhttp://www.securityfocus.com/bid/11453
$BMWLs(B:
(BTwister Anti-TrojanVirus $B$O!"(BMS-DOS $BM=Ls%G%P%$%9L>$,IU$1$i$l$?%U%!%$%k$r(B
$B=hM}$9$k:]$K%9%-%c%s$,2sHr$5$l$kLdBj$N1F6A$re$NITHw$KM3Mh$7$^$9!#(B
(B
$B967b$N8e$KDL>o$N%U%!%$%k$G$"$k$+$N$h$&$K8+$((B
$B$kL>A0$rIU$1$k$H9M$($i$l$^$9!#967be(B
$B$KB8:_$7$F=i$a$FLdBj$,H/@8$9$k$H9M$($i$l$^$9!#(B
(B
$B>\:Y$,8x3+$5$lhttp://www.securityfocus.com/bid/11454
$BMWLs(B:
(BdadaIMC $B$K$O!"(BHTML $B%?%0$rA^F~$9$k967b$rhttp://www.securityfocus.com/bid/11455
$BMWLs(B:
(BcPanel $B$K$O!"(BFront Page $B3HD%$rM-8z$K$9$k5!G=$K$*$$$F!"%U%!%$%k$N=jM-8"$K(B
$B4XO"$9$kLdBj$,B8:_$9$k2DG=@-$,$"$k$HJs9p$5$l$F$$$^$9!#(B
(B
$B0-0U$"$k%f!<%6$O$3$NLdBj$rMxMQ$7$F!"@x:_E*$K=EMW$J%U%!%$%k$K40A4$J%"%/%;(B
$B%9$r9T$&2DG=@-$,$"$j$^$9!#%O!<%I%I%i%$%V$N%9%i%$%9$N%l%$%"%&%H$K$h$C$F$O!"(B
$B967b:3J$G$-$k2DG=@-$,$"$j$^$9!#(B
(B
(BcPanel $B$N%P!<%8%g%s(B 9.4.1-RELEASE-64 $B$K$*$$$F!"$3$NLdBj$,B8:_$9$k$HJs9p(B
$B$5$l$F$$$^$9!#$=$NB>$N%P!<%8%g%s$b1F6A$rhttp://www.securityfocus.com/bid/11456
$BMWLs(B:
(BcPanel $B$K$O!"(BFront Page $B3HD%$rM-8z$K$9$k5!G=$G>pJs$,O31L$9$k2DG=@-$,$"$k(B
$B$HJs9p$5$l$F$$$^$9!#(B
(B
$B967b$N%P!<%8%g%s$b1F6A$rhttp://www.securityfocus.com/bid/11457
$BMWLs(B:
(Bbmon $B$K$O!"(Bsetuid $B$N%Q!<%_%C%7%g%s$G%$%s%9%H!<%k$5$l$?>l9g$K8"8B>:3J$NLd(B
$BBj$N1F6A$r(B
$B$N%P!<%8%g%s$b1F6A$r$N%W%i%C%H%U%)!<%`(B
$B$K$D$$$F$O!"8=;~E@$G$OITL@$G$9!#(B
(B
(B23. IBM Lotus Domino Cross-Site Scripting and HTML Injection Vul...
(BBugTraq ID: 11458
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Oct 18 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11458
$BMWLs(B:
(BLotus Domino $B$O!"%/%m%9%5%$%H%9%/%j%W%F%#%s%0$*$h$S(B HTML $B%?%0$rA^F~2DG=(B
$B$JLdBj$N1F6A$re$G0-0U$"(B
$B$k%3!<%I$,2rZMQ>pJs$N@`ZMQ(B
$B>pJs$N@`$N967b$,http://www.securityfocus.com/bid/11459
$BMWLs(B:
(BSun Solaris $B$K$O!"(BLDAP $B$*$h$S(B RBAC $Be$NLdBj$KM3Mh$9$k%m!<%+%k$+$i$N(B
$B8"8B>:3J$NLdBj$N1F6A$re$NITHw$,$"$k$?$a$KH/@8(B
$B$9$k2DG=@-$,$"$j$^$9!#(B
(B
$B%m!<%+%k967bhttp://www.securityfocus.com/bid/11460
$BMWLs(B:
(Bcabextract $B$K$O!"%j%b!<%H$+$i%G%#%l%/%H%j%H%i%P!<%5%k967b$rhttp://www.securityfocus.com/bid/11462
$BMWLs(B:
(BVypress Tonecast $B$K$O!"%j%b!<%H$+$i$N967b$K$h$j%5!<%S%9ITG=>uBV$K4Y$k5?(B
$B$$$,$"$k$HJs9p$5$l$F$$$^$9!#(B
(B
$B0U?^E*$K:n@.$5$l$?%*!<%G%#%*%9%H%j!<%`$r=hM}$7$?>l9g$K!"LdBj$N$"$k%=%U%H(B
$B%&%'%"$,%/%i%C%7%e$7$F$7$^$&$HJs9p$5$l$F$$$^$9!#(B
(B
$B967bu67$rMxMQ$7$F!"@55,%f!<%6$X$N%5!<%S%95qH]$r0z$-5/$3$92DG=@-(B
$B$,$"$j$^$9!#(B
(B
(B27. Jan Erdmann Jebuch HTML Injection Vulnerability
(BBugTraq ID: 11463
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Oct 19 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11463
$BMWLs(B:
(BJebuch $B$K$O!"(BHTML $B%?%0$rA^F~$9$k967b$rZMQ>pJs(B
$B$,@`$N967b$,http://www.securityfocus.com/bid/11464
$BMWLs(B:
(BLANDesk Management Suite $B$K$O!"%5!<%S%9ITG=>uBV$K4Y$k5?$$$,$"$k$HJs9p$5(B
$B$l$F$$$^$9!#(BRemote Desktop $B%5!<%S%9$K@\B3$9$k$H!"LdBj$N$"$k%=%U%H%&%'%"(B
$B$,u67$rMxMQ$7$F!"LdBj$N$"$k%=%U%H%&%'%"$G@55,%f!<%6(B
$B$X$N%5!<%S%95qH]$r0z$-5/$3$92DG=@-$,$"$j$^$9!#(B
(B
(B29. HP Tru64 X Window System Multiple Local Vulnerabilities
(BBugTraq ID: 11465
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: Oct 19 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11465
$BMWLs(B:
(BHP Tru64 $B$N(B X Window System $B$O!"%U%!%$%k$N%P!<%_%C%7%g%s$K4XO"$9$kL$FCDj(B
$B$NLdBj$N1F6A$r\:Y$,ITL@$J$?$a!"$3$NLdBj$K4XO"$9$kB>$N>pJs$O8=;~E@$G$ODs6!$5$l$F$$$^$;(B
$B$s!#>\:Y$,8x3+$5$lhttp://www.securityfocus.com/bid/11466
$BMWLs(B:
(BMicrosoft $B$N(B Internet Explorer $BMQN_@Q%Q%C%A(B (MS04-038) $B$O!"%U%!%$%k$r%$(B
$B%s%?!<%M%C%H%>!<%s$+$i%m!<%+%k%3%s%T%e!<%?$K%I%i%C%0%"%s%I%I%m%C%W$9$k$N(B
$B$r@)8B$7!"$3$l$K$h$C$Fe$K3JG<$5$l(B
$B$k$N$rKI;_$9$k$?$a$N%Q%C%A$G$9!#$7$+$7!"%Q%C%AE,MQ8e$bB??t$N%U%!%$%k%?%$(B
$B%W$G%I%i%C%0%"%s%I%I%m%C%W$NA`:n$,5v$5$l$^$9!#$3$l$i$N%U%!%$%k%?%$%W$N$$(B
$B$:$l$+$K0-0U$"$k(B HTML $B%?%0$d%9%/%j%W%H%3!<%I$rKd$a9~$s$G%U%!%$%k$N3HD%;R(B
$B$r:o=|$7!"%*%Z%l!<%F%#%s%0%7%9%F%`$,%U%!%$%k$NFbMF$K1~$8$FF0E*$K%U%!%$%k(B
$B%?%$%W$r7hDj$9$k$h$&$K;E8~$1$k$3$H$,2DG=$G$"$k$H<($5$l$F$$$^$9!#(B
(B
$B$3$NLdBj$r(B BID 11467 $B$G<($5$l$F$$$kLdBj$J$I$HAH$_9g$o$;$k$3$H$K$h$j!"%/(B
$B%i%$%"%s%H%3%s%T%e!<%?>e$GG$0U$N%3!<%I$,http://www.securityfocus.com/bid/11467
$BMWLs(B:
(BMicrosoft Windows XP SP2 $B$H(B Internet Explorer 6 SP2 $B$G$O!"%m!<%+%k%>!<%s(B
$B$N%;%-%e%j%F%#@_Dj$,4K$$$?$a$KH/@8$7$F$$$?$5$^$6$^$JLdBj$NMxMQ$rKI;_$9$k(B
$B$?$a!"%m!<%+%k%>!<%s$N%;%-%e%j%F%#@)8B$,6/2=$5$l$F$$$^$9!#$7$+$7!"(BHTML
(BActiveX $B%3%s%H%m!<%k$N(B 'hhctrl.ocx' $B$r;HMQ$7$F$3$l$i$N%;%-%e%j%F%#@)8B$r(B
$B2sHr$9$k$3$H$,2DG=$G$"$k$3$H$r<($9ZMQ%3!<%I$,%j%j!<%9$5$l$F$$$^$9!#(B
(B
$B967b$NLdBj$rMxMQ$7$F0-0U$"$k(B HTML
$B%?%0$d%9%/%j%W%H%3!<%I$N%3%s%F%s%D$r%7%9%F%`$KG[CV$G$-$k>l9g!"$3$N%3%s%H(B
$B%m!<%k$rMxMQ$7$F!"%3%s%F%s%D$NoKI;_$5$l$k%m!<%+%k%>!<%s$N%;%-%e(B
$B%j%F%#@)8B$r2sHr$9$k2DG=@-$,$"$j$^$9!#$^$?!"$3$NZMQ%3!<%I$G$O(B
(BADODB.Connection $B$d(B ADODB.recordset $B$J$I$N$5$^$6$^$J(B ADODB $B%a%=%C%I$r;H(B
$BMQ$7!"(B.HTA $B%U%!%$%k$H$7$F0-0U$"$kG$0U$N%3!<%I$r%U%!%$%k%7%9%F%`$K=q$-9~(B
$B$_$^$9!#(B
(B
(B32. MPG123 Remote URL Open Buffer Overflow Vulnerability
(BBugTraq ID: 11468
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Oct 20 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11468
$BMWLs(B:
(Bmpg123 $B$O!"%j%b!<%H$+$i$N967b$K$h$k%P%C%U%!%*!<%P!<%U%m!<$NLdBj$N1F6A$r(B
$Be$GG$0U$N%^%7%s%3!<%I$rhttp://www.securityfocus.com/bid/11469
$BMWLs(B:
(BApple Safari $B$K$O!"%/%m%9%I%a%$%s$G%@%$%"%m%0%\%C%/%9$,56Au$5$l$k5?$$$,(B
$B$"$k$HJs9p$5$l$F$$$^$9!#967b5=$r9T$&2DG=@-$,$"$j$^$9!#(B
(B
(BApple Safari 1.2.3 (v125.9) $B$K$*$$$F!"$3$NLdBj$,B8:_$9$k$HJs9p$5$l$F$$$^(B
$B$9!#$=$NB>$N%P!<%8%g%s$b1F6A$rhttp://www.securityfocus.com/bid/11470
$BMWLs(B:
(BMaxthon Web $B%V%i%&%6$K$O!"%/%m%9%I%a%$%s$G%@%$%"%m%0%\%C%/%9$,56Au$5$l$k(B
$B5?$$$,$"$k$HJs9p$5$l$F$$$^$9!#967b5=$r9T$&2DG=@-$,$"$j$^$9!#(B
(B
(B35. Apache mod_include Local Buffer Overflow Vulnerability
(BBugTraq ID: 11471
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: Oct 20 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11471
$BMWLs(B:
$BLdBj$N$"$k%b%8%e!<%k$G(B mod_include $BMQ$N%?%0$N2r@O$,;n9T$5$l$k:]$K!"LdBj(B
$B$,H/@8$7$^$9!#%f!<%6$,F~NO$7$?%?%0J8;zNs$r8GDj$N%P%C%U%!$K%3%T!<$9$kA0$K!"(B
$BJ8;zNs$ND9$5$NBEEv@-$,E,@Z$K3NG'$5$l$J$$$?$a!"%*!<%P!<%U%m!<$,H/@8$7$^$9!#(B
(B
$B%m!<%+%k$N967be$G(B Apache 
$B%5!<%P$N8"8B$GG$0U$N%3!<%I$rhttp://www.securityfocus.com/bid/11472
$BMWLs(B:
(BAvant Browser $B$K$O!"%/%m%9%I%a%$%s$G%@%$%"%m%0%\%C%/%9$,56Au$5$l$k5?$$$,(B
$B$"$k$HJs9p$5$l$F$$$^$9!#967b5=$r9T$&2DG=@-$,$"$j$^$9!#(B
(B
(B37. Mozilla Browser Cross-Domain Dialog Box Spoofing Vulnerabili...
(BBugTraq ID: 11473
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Oct 20 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11473
$BMWLs(B:
(BMozilla $B%V%i%&%6$K$O!"%/%m%9%I%a%$%s$G%@%$%"%m%0%\%C%/%9$,56Au$5$l$k5?$$(B
$B$,$"$k$HJs9p$5$l$F$$$^$9!#967b5=$r9T$&2DG=@-$,$"$j$^$9!#(B
(B
(BNetscape Navigator $B$b!"%3!<%I$,N`;w$7$F$$$k$?$a$K$3$NLdBj$N1F6A$rhttp://www.securityfocus.com/bid/11474
$BMWLs(B:
(BMozilla $B%V%i%&%6$*$h$S$9$Y$F$NGI@8%V%i%&%6$K$O!"%/%m%9%I%a%$%s$K$*$1$k%?(B
$B%V%&%#%s%I%&$N(B Form $B%U%#!<%k%I$X$N%U%)!<%+%9$r5v$7$F$7$^$&LdBj$,B8:_$9$k(B
$B$HJs9p$5$l$F$$$^$9!#$3$NLdBj$O!"F10l$N%V%i%&%6%&%#%s%I%&$K$*$$$F!"$"$k(B
(BWeb $B%Z!<%8$+$iJL$N%?%V$G2r$N(B Web $B%Z!<%8$N(B Form $B%U%#!<%k%I(B
$B$K%"%/%;%9$9$k$N$,5v$5$l$F$7$^$&$H$$$&!"%"%/%;%9$KBP$9$kBEEv@-$N3NG'$NIT(B
$BHw$KM3Mh$7$^$9!#(B
(B
$B$3$NLdBj$,MxMQ$5$l$k$H!"%Q%9%o!<%I$d>\:Y$J:bL3%G!<%?$J$I$N=EMW$J>pJs$r3+(B
$B<($9$k$h$&$K@_7W$5$l$?@bF@NO$N$"$k%U%#%C%7%s%0:>5=$,9T$o$l$k2DG=@-$,$"$j(B
$B$^$9!#(B
(B
(B39. Opera Web Browser Cross-Domain Dialog Box Spoofing Vulnerabi...
(BBugTraq ID: 11475
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Oct 20 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11475
$BMWLs(B:
(BOpera $B$K$O!"%/%m%9%I%a%$%s$G%@%$%"%m%0%\%C%/%9$,56Au$5$l$k5?$$$,$"$k$HJs(B
$B9p$5$l$F$$$^$9!#967b5=$r9T$&2DG=@-$,$"$j$^$9!#(B
(B
(BOpera $B$N%P!<%8%g%s(B 7.54 $B$K$*$$$F!"$3$NLdBj$N1F6A$r$N%P!<%8%g%s$b1F6A$rhttp://www.securityfocus.com/bid/11476
$BMWLs(B:
(BMaxthon Web $B%V%i%&%6$K$O!"%/%m%9%I%a%$%s$K$*$1$k%?%V%&%#%s%I%&$N(B Form $B%U%#(B
$B!<(B
$B%k%I$X$N%U%)!<%+%9$r5v$7$F$7$^$&LdBj$,B8:_$9$k$HJs9p$5$l$F$$$^$9!#$3$NLd(B
$BBj$O!"F10l$N%V%i%&%6%&%#%s%I%&$K$*$$$F!"$"$k(B Web $B%Z!<%8$+$iJL$N%?%V$G2r(B
$B$N(B Web $B%Z!<%8$N(B Form $B%U%#!<%k%I$K%"%/%;%9$9$k$N$,5v$5$l$F(B
$B$7$^$&$H$$$&!"%"%/%;%9$KBP$9$kBEEv@-$N3NG'$NITHw$KM3Mh$7$^$9!#(B
(B
$B$3$NLdBj$,MxMQ$5$l$k$H!"%Q%9%o!<%I$d>\:Y$J:bL3%G!<%?$J$I$N=EMW$J>pJs$r3+(B
$B<($9$k$h$&$K@_7W$5$l$?@bF@NO$N$"$k%U%#%C%7%s%0:>5=$,9T$o$l$k2DG=@-$,$"$j(B
$B$^$9!#(B
(B
(B41. Konqueror Browser Cross-Domain Dialog Box Spoofing Vulnerabi...
(BBugTraq ID: 11477
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Oct 20 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11477
$BMWLs(B:
(BKonqueror $B%V%i%&%6$K$O!"%/%m%9%I%a%$%s$G%@%$%"%m%0%\%C%/%9$,56Au$5$l$k5?(B
$B$$$,$"$k$HJs9p$5$l$F$$$^$9!#967b5=$r9T$&2DG=@-$,$"$j$^$9!#(B
(B
(B42. Avant Browser Cross-Domain Tab Window Form Field Focus Vulne...
(BBugTraq ID: 11478
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Oct 20 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11478
$BMWLs(B:
(BAvant Browser $B$K$O!"%/%m%9%I%a%$%s$K$*$1$k%?%V%&%#%s%I%&$N(B Form $B%U%#!<%k(B
$B%I$X$N%U%)!<%+%9$r5v$7$F$7$^$&LdBj$,B8:_$9$k$HJs9p$5$l$F$$$^$9!#$3$NLdBj(B
$B$O!"F10l$N%V%i%&%6%&%#%s%I%&$K$*$$$F!"$"$k(B Web $B%Z!<%8$+$iJL$N%?%V$G2r$N(B Web $B%Z!<%8$N(B Form $B%U%#!<%k%I$K%"%/%;%9$9$k$N$,5v$5$l$F$7$^(B
$B$&$H$$$&!"%"%/%;%9$KBP$9$kBEEv@-$N3NG'$NITHw$KM3Mh$7$^$9!#(B
(B
$B$3$NLdBj$,MxMQ$5$l$k$H!"%Q%9%o!<%I$d>\:Y$J:bL3%G!<%?$J$I$N=EMW$J>pJs$r3+(B
$B<($9$k$h$&$K@_7W$5$l$?@bF@NO$N$"$k%U%#%C%7%s%0:>5=$,9T$o$l$k2DG=@-$,$"$j(B
$B$^$9!#(B
(B
(B43. Akella Privateer's Bounty: Age of Sail II Remote Buffer Over...
(BBugTraq ID: 11479
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Oct 20 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11479
$BMWLs(B:
(BAkella Privateer's Bounty: Age of Sail II $B$K$O!"%j%b!<%H$+$i$N967b$K$h$j(B
$B%P%C%U%!%*!<%P!<%U%m!<$,H/@8$9$kLdBj$N1F6A$re$GG$0U$N%3!<%I$rhttp://www.securityfocus.com/bid/11480
$BMWLs(B:
(BMediaWiki $B$K$O!"%/%m%9%5%$%H%9%/%j%W%F%#%s%0967b$rhttp://www.securityfocus.com/bid/11481
$BMWLs(B:
(BLibPNG $B$O!"(BPortable Network Graphics (PNG) $B$N8x<0%j%U%!%l%s%9%i%$%V%i%j(B
$B$G$9!#(B
(B
(BLibPNG $B$O!"2hA|$N9b$5$r;HMQ$7$F$N@0?t%*!<%P!<%U%m!<$,H/@8$9$kLdBj$N1F6A(B
$B$re=q$-$5$l!"$3$l$K$h$jE,@Z$J%W%m%0%i%`$Nhttp://www.securityfocus.com/bid/11482
$BMWLs(B:
(BGaim $B$N(B MSN SLP $B%a%C%;!<%85!G=$O!"%j%b!<%H$+$i$N967b$K$h$j%P%C%U%!%*!<%P!<(B
$B%U%m!<$,H/@8$9$kLdBj$N1F6A$re$GG$0U$N%3!<%I$rhttp://www.securityfocus.com/bid/11483
$BMWLs(B:
(BGaim $B$K$O!"%j%b!<%H$N(B MSN $B%U%!%$%kE>Aw$K$h$C$F%5!<%S%9ITG=>uBV$K4Y$kLdBj(B
$B$N1F6A$ru67$,E,@Z$K=hM}$5$l$J$$$3$H$KM3Mh(B
$B$7$^$9!#(B
(B
$B967bhttp://www.securityfocus.com/bid/11484
$BMWLs(B:
(BGaim $B$K$O!"%j%b!<%H$N(B MSN SLP $B$K$h$j%5!<%S%9ITG=>uBV$K4Y$kLdBj$N1F6A$ru67$,E,@Z$K=hM}$5$l$J$$$3$H$KM3Mh$7$^$9!#(B
(B
$B967bhttp://www.securityfocus.com/bid/11485
$BMWLs(B:
(BCoppermine Photo Gallery $B$K$O!"%f!<%6$,(B 1 $B$D$N2hA|$KBP$7$FJ#?t$NEjI<$r9T(B
$B$&$N$r5v$7$F$7$^$&2DG=@-$,$"$k$H$$$&@_7W>e$NITHw$,B8:_$9$k5?$$$,$"$k$HJs(B
$B9p$5$l$F$$$^$9!#(B
(B
$B8=;~E@$G$O!"(BCoppermine Photo Gallery $B$N$9$Y$F$N%P!<%8%g%s$KLdBj$,B8:_$9(B
$B$k$H9M$($i$l$^$9!#(B
(B
(B50. DokuWiki Remote Arbitrary File Upload Vulnerability
(BBugTraq ID: 11486
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Oct 20 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11486
$BMWLs(B:
(BDokuWiki $B$K$O!"%j%b!<%H$+$iG$0U$N%U%!%$%k$,%"%C%W%m!<%I$5$l$k5?$$$,$"$k(B
$B$HJs9p$5$l$F$$$^$9!#967bhttp://www.securityfocus.com/bid/11487
$BMWLs(B:
(BEcartis $B$K$O!"%j%b!<%H$+$i$N8"8B>:3J$K4XO"$9$kL$8xI=$NLdBj$,B8:_$9$k5?$$(B
$B$,$"$k$HJs9p$5$l$F$$$^$9!#%j%b!<%H$N967bhttp://www.securityfocus.com/bid/11488
$BMWLs(B:
(BLinux $B%+!<%M%k(B 2.6 $B%V%i%s%A$N(B iptables $B%m%.%s%0%k!<%k$K$O!"@0?t%"%s%@!<(B
$B%U%m!<$NLdBj$,B8:_$9$k$HJs9p$5$l$F$$$^$9!#(B
(B
$B%j%b!<%H$N967bhttp://www.securityfocus.com/bid/11489
$BMWLs(B:
(BSuSE Linux $B$K$O!"%m!<%+%k$+$i$N8"8B>:3J$NLdBj$,B8:_$9$k5?$$$,$"$k$HJs9p(B
$B$5$l$F$$$^$9!#$3$NLdBj$O!"(BSuSE Linux Enterprise Server 9 $B$,(B IBM S/390 $B%W(B
$B%i%C%H%U%)!<%`$K%$%s%9%H!<%k$5$l$k>l9g$K$N$_1F6A$9$k$HJs9p$5$l$F$$$^$9!#(B
(B
$B%m!<%+%k$N967b:3J$5$;$k2DG=@-$,$"$j$^$9!#(B
(B
(B54. Zinf/Freeamp Unspecified Insecure Temporary File Creation Vu...
(BBugTraq ID: 11490
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: Oct 21 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11490
$BMWLs(B:
(BZinf/Freeamp $B$O!"%;%-%e%j%F%#>eITE,@Z$K0l;~%U%!%$%k$r:n@.$7$F$7$^$&L$FC(B
$BDj$NLdBj$N1F6A$re$NITHw$KM3Mh$9$k2DG=@-$,$"$j$^$9!#(B
(B
$B967be=q$-$9$k2DG=@-$,$"$j$^$9!#(B
(B
(B55. Linux Kernel TIOCSETD Terminal Subsystem Race Condition Vuln...
(BBugTraq ID: 11491
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: Oct 21 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11491
$BMWLs(B:
(BLinux $B%+!<%M%k$N%?!<%_%J%k%5%V%7%9%F%`$K$O!"%m!<%+%k$GLdBj$,H/@8$9$k5?$$(B
$B$,$"$j$^$9!#$3$NLdBj$O!"JL$N%9%l%C%I$GFI$_uBV$K4Y$C$?$j!"%+!<%M%k%a%b%j(B
$B$,FI$_http://www.securityfocus.com/bid/11492
$BMWLs(B:
(BLinux $B%+!<%M%k$N%?!<%_%J%k%5%V%7%9%F%`$K$O!"6%9g>uBV$K4Y$kLdBj$,B8:_$7$^(B
$B$9!#$3$NLdBj$O!"%?!<%_%J%k$N%m%C%/$K4XO"$7$F$*$j!"%j%b!<%H$N%f!<%6$,(B PPP
$B%@%$%d%k%"%C%W%]!<%H$r2p$7$F%3%s%T%e!<%?$K@\B3$9$k$H$-$KH/@8$7$^$9!#(B
(B
$B%j%b!<%H$N%f!<%6$,%3%s%=!<%k$+$i(B PPP $B$K%9%$%C%A$9$k$H$-!"$3$NLdBj$r0z$-(B
$B5/$3$9%G!<%?$,Aw?.$5$l$F$7$^$&2DG=@-$,$o$:$+$K$"$k$3$H$,Js9p$5$l$F$$$^$9!#(B
$B$3$l$K$h$j!"%5!<%S%9ITG=>uBV$,0z$-5/$3$5$l$k2DG=@-$,$"$k$HJs9p$5$l$F$$$^(B
$B$9!#$3$NLdBj$N1F6A$,B>$K$"$k$+$I$&$+$K$D$$$F$O!"8=;~E@$G$OITL@$G$9!#(B
(B
(B57. HP-UX STMKFONT Local Privilege Escalation Vulnerability
(BBugTraq ID: 11493
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: Oct 21 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11493
$BMWLs(B:
(BHP-UX stmkfont $B$K$O!"%m!<%+%k$+$i$N8"8B>:3J$NLdBj$,B8:_$9$k5?$$$,$"$k$H(B
$BJs9p$5$l$F$$$^$9!#$3$NLdBj$O!"(Bstmkfont $B$K$h$C$F30It$No(B setgid 'bin' $B%S%C%H$,IUM?$5$l$F%$%s%9%H!<%k$5$l$^$9!#(B
(B
(B58. Veritas NetBackup Privilege Escalation Vulnerability
(BBugTraq ID: 11494
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Oct 21 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11494
$BMWLs(B:
(BVeritas NetBackup $B$K$O!"8"8B>:3J$NLdBj$,B8:_$9$k5?$$$,$"$k$HJs9p$5$l$F$$(B
$B$^$9!#%m!<%+%k$N967be$G8"(B
$B8B$r>:3J$5$;$k2DG=@-$,$"$j$^$9!#(B
(B
$B967bhttp://www.securityfocus.com/bid/11495
$BMWLs(B:
(BNortel Contivity VPN Client $B$K$O!">ZL@=q$N%A%'%C%/$,<:GT$9$k5?$$$,$"$k$H(B
$BJs9p$5$l$F$$$^$9!#$3$NLdBj$O!"%f!<%6$,5v2D$9$kA0$K(B VPN $B@\B3$,3NN)$5$l$F(B
$B$7$^$&$?$a$KH/@8$7$^$9!#(B
(B
$B967bhttp://www.securityfocus.com/bid/11496
$BMWLs(B:
(B
(BSpeedtouch USB Driver $B$K$O!"%U%)!<%^%C%H%9%H%j%s%0$K4XO"$9$k%m!<%+%k$h$j(B
$Bhttp://www.securityfocus.com/bid/11497
$BMWLs(B:
(BSerendipity $B$K$O!"(BHTTP $B1~EzJ,3d$NLdBj$,B8:_$9$k5?$$$,$"$k$HJs9p$5$l$F$$$^(B
$B$9!#(B
(B
$B%j%b!<%H$N967bhttp://www.securityfocus.com/bid/11498
$BMWLs(B:
(BAltiris Deployment Server $B$N%/%i%$%"%s%H$G$O!"%j%b!<%H$+$i%3%^%s%I$,Z$GE,@Z$K3NG'$5$l$J$$$3$H$KM3Mh$7$^(B
$B$9!#(B
(B
$B%m!<%+%k$G%M%C%H%o!<%/$K%"%/%;%9$G$-$k967bhttp://www.securityfocus.com/bid/11499
$BMWLs(B:
(BOpenSkat $B$K$O!"J#?t$NL$FCDj$NLdBj$,B8:_$9$k5?$$$,$"$k$HJs9p$5$l$F$$$^$9!#(B
$B$3$l$i$NLdBj$N860x$*$h$S1F6A$K$D$$$F$O8=;~E@$G$OITL@$G$9$,!"HsBPOC%<%mCN(B
$B<1>ZL@%W%m%H%3%k$K4XO"$9$kLdBj$G$"$k$HJs9p$5$l$F$$$^$9!#$3$l$i$NLdBj$O!"(B
$B%j%b!<%H$G\:Y>pJs$O8x3+$5$l$F$$$^$;$s!#>\:Y$,8x(B
$B3+$5$lhttp://www.securityfocus.com/bid/11500
$BMWLs(B:
(BAltiris Carbon Copy Remote Control $B%"%W%j%1!<%7%g%s$r;HMQ$9$k$H!"(BWindows
$B%7%9%F%`%H%l%$Fb$N%"%$%3%s$+$i%=%U%H%&%'%"$r5/F0$9$k$3$H$K$h$C$FFCDj$N5!(B
$BG=$r:3J$NLdBj(B
$B$,B8:_$9$k$HJs9p$5$l$F$$$^$9!#(B
(B
(B65. Xpdf PDFTOPS Multiple Integer Overflow Vulnerabilities
(BBugTraq ID: 11501
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Oct 21 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11501
$BMWLs(B:
(Bpdftops $B$K$O!"J#?t$N@0?t%*!<%P!<%U%m!<$NLdBj$,B8:_$9$k2DG=@-$,$"$k$HJs9p(B
$B$5$l$F$$$^$9!#$3$NLdBj$O!"%f!<%6$NF~NO$K$h$C$F@0?tCM$N%*!<%P!<%U%m!<$,H/(B
$B@8$7$J$$$h$&$KE,@Z$K3NG'$5$l$J$$$3$H$KM3Mh$7$^$9!#$3$NLdBj$K$h$j!"%a%b%j(B
$B%P%C%U%!$N6-3&$rD6$($F%G!<%?$,%3%T!<$5$l$F$7$^$&2DG=@-$,$"$j$^$9!#(B
(B
$B$3$l$i$N%*!<%P!<%U%m!<$NLdBj$K$h$j!"%"%W%j%1!<%7%g%s$G3d$jEv$F$i$l$k%a%b(B
$B%jNN0h$,4|BT$5$l$kCM$h$j>.$5$/$J$C$F$7$^$$$^$9!#%*!<%P!<%U%m!<$,H/@8$9$k(B
$B$H!"3d$jEv$F$i$l$?%P%C%U%!$N6-3&$rD6$($F%a%b%jNN0h$,>e=q$-$5$l$k2DG=@-$,(B
$B$"$j$^$9!#$3$l$K$h$j!"967be=q$-$9$k2DG=@-$,$"(B
$B$j$^$9!#$^$?967bhttp://www.securityfocus.com/bid/11502
$BMWLs(B:
(BUBBCentral UBB.threads $B$K$O!"(BSQL $B9=J8$rCmF~$9$k967b$rpJs$r1\Mw$^(B
$B$?$OJQ99$7!"%=%U%H%&%'%"$d%G!<%?%Y!<%9$KBP$9$k6<0R$r>7$/2DG=@-$,$"$j$^$9!#(B
(B
(B67. Microsoft Windows XP WAV File Handler Denial Of Service Vuln...
(BBugTraq ID: 11503
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Oct 22 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11503
$BMWLs(B:
(BMicrosoft Windows XP $B$K$O!"%5!<%S%9ITG=>uBV$K4Y$k5?$$$,$"$k$HJs9p$5$l$F(B
$B$$$^$9!#$3$NLdBj$O!"(BWAV $B%U%!%$%k$N%X%C%@CM$,=hM}$5$l$kA0$K!"%5%K%?%$%:=h(B
$BM}$,E,@Z$KCHq$5$l$F$7$^$$$^$9!#967bu67$rMxMQ$7$F!"@55,%f!<%6$X$N%5!<(B
$B%S%95qH]$r0z$-5/$3$92DG=@-$,$"$j$^$9!#(B
(B
(B68. Netbilling NBMEMBER Script Information Disclosure Vulnerabil...
(BBugTraq ID: 11504
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Oct 22 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11504
$BMWLs(B:
(BNetbilling 'nbmember.cgi' $B%9%/%j%W%H$K$O!">pJs$,O31L$9$k5?$$$,$"$k$HJs9p(B
$B$5$l$F$$$^$9!#%j%b!<%H$N967bZMQ>pJs$*(B
$B$h$S@x:_E*$K=EMW$J@_Dj>pJs$K%"%/%;%9$9$k2DG=@-$,$"$j$^$9!#(B
(B
(B69. Socat Remote Format String Vulnerability
(BBugTraq ID: 11505
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Oct 22 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11505
$BMWLs(B:
(Bsocat $B$O!"%j%b!<%H$+$iMxMQ2DG=$J%U%)!<%^%C%H%9%H%j%s%0$NLdBj$N1F6A$rhttp://www.securityfocus.com/bid/11506
$BMWLs(B:
(BLibTIFF $B$O!"%R!<%W%P%C%U%!%*!<%P!<%U%m!<$NLdBj$N1F6A$re$GG$0U$N%3!<%I$rhttp://www.securityfocus.com/bid/11507
$BMWLs(B:
(BHP ServiceGuard $B$K$O!"%j%b!<%H$+$i967b$r\:Y$O8x3+$5$l$F$$$^$;$s$,!"967b:3J$5$;$k2DG=@-$,$"$k$HJs9p$5$l$F$$$^$9!#(B
(B
$B>\:Y>pJs$,8x3+$5$lhttp://www.securityfocus.com/bid/11508
$BMWLs(B:
(BAbility Server $B$K$O!"%j%b!<%H$+$i$N967b$K$h$j%P%C%U%!%*!<%P!<%U%m!<$,H/(B
$B@8$9$k5?$$$,$"$k$HJs9p$5$l$F$$$^$9!#$3$NLdBj$O!"(BFTP $B%5!<%P$Ge=q$-$9$k$3$H$,$G$-$k>l9g!"%3%s%T%e!<%?>e(B
$B$G%3!<%I$rJD#$G$O%5%$%P!<%;%-%e%j%F%#$N4F::$K$h$j2~A1Js9p$,$5$l$F$$$^$9$,!"(B
$BO"K.@/I\5!4X$OAjJQ$o$i$:%&%$%k%9$d%o!<%`$N6<0R$K$5$i$5$l$F$$$^$9!#(B
(B
(Bhttp://www.securityfocus.com/news/9788
(B
(B2. California reports massive data breach
$BCxhttp://www.securityfocus.com/news/9758
(B
(B3. U.S. Air Traffic Control Found Vulnerable
$BCxc32$N8e!"O"K.9R6u6I(B (FAA) $BFb(B
$B$N:G$b=EMW$J%7%9%F%`$,AjJQ$o$i$:%3%s%T%e!<%?%;%-%e%j%F%#$NLdBj$rJz$($F$$(B
$B$k$H$$$&Js9p$,=P$5$l$^$7$?!#(B
(B
(Bhttp://www.securityfocus.com/news/9729
(B
(B4. Mac OS X rootkit surfaces
$BCxhttp://www.securityfocus.com/news/9796
(B
(B5. Purdue says someone hacked into university's computers
$BCxhttp://www.securityfocus.com/news/9786
(B
(B6. 419ers take Aussie financial advisor for AU$1m
$BCxe$2$F%J%$%8%'%j%"%s%9%-%c%`$N:>5=;U$K2#N.$7$7$?:a$G!"(B
$BD94|$N6X8G7:$rhttp://www.securityfocus.com/news/9753
(B
(B
(BIV. SECURITYFOCUS TOP 6 TOOLS
(B-----------------------------
(B1. antinat v0.81
$B:nhttp://yallara.cs.rmit.edu.au/~malsmith/products/antinat/
$BF0:n4D6-(B: MacOS$B!"(BPOSIX$B!"(BWindows 2000$B!"(BWindows 95/98$B!"(BWindows NT$B!"(BWindows XP
$BMWLs(B:
(B
(BAntinat SOCKS Server $B$O!"%W%m%-%7%Y!<%9$N%"%W%j%1!<%7%g%s$r5-=R$9$k$?$a(B
$B$N%/%i%$%"%s%H%i%$%V%i%j$r4^$`!"%9%1!<%i%V%k$J%^%k%A%9%l%C%I$N(B SOCKS $B%5!<(B
$B%P$G$9!#(BSOCKS 4$B!"(BSOCKS 5$B!"G'>Z!"%U%!%$%"%&%)!<%k5!G=!"(BUDP$B!"$*$h$SL>A02r(B
$B7h$,%5%]!<%H$5$l$F$$$^$9!#(B
(B
(B2. PopMessenger 1.60
$B:nhttp://www.leadmind.com
$BF0:n4D6-(B: Windows 2000$B!"(BWindows 95/98$B!"(BWindows NT$B!"(BWindows XP
$BMWLs(B:
(B
(BLAN $B>e$G4JC1$+$D%;%-%e%"$JJ}K!$G!"%A%c%C%H$7$?$j%F%-%9%H7A<0$N%a%C%;!<%8(B
$B$d%U%!%$%k$rAw?.$G$-$^$9!#(B
(B
(B3. ByteShelter I 1.0
$B:nhttp://www.mazzoft.com/bs1.zip
$BF0:n4D6-(B: Windows 2000$B!"(BWindows 95/98
$BMWLs(B:
(B
$B$3$N%9%F%,%N%0%i%U%#!JEE;R$"$V$j$@$75;=Q!K%D!<%k$r;HMQ$9$k$H!"(BOutlook $B$N(B
$BEE;R%a!<%k%a%C%;!<%8$H(B .doc $B7A<0%U%!%$%k$N%G!<%?$r1#$9$3$H$,2DG=$G$9!#(B
(B
(B4. MobileJavaScanner 1.0
$B:nhttp://vidstrom.net/stools/mobilejavascanner/
$BF0:n4D6-(B: Java
$BMWLs(B:
(B
(BMobileJavaScanner $B$O!"(BMIDlet ($B7HBSEEOC8~$1(B Java $B%W%m%0%i%`(B) $B$N(B TCP $B%]!<(B
$B%H%9%-%c%J$G$9!#(B
(B
(B5. JavaCallTester 1.0
$B:nhttp://www.vidstrom.net/stools/javacalltester/
$BF0:n4D6-(B: Java
$BMWLs(B:
(B
(BJavaCallTester $B$O!"DLOCMQ$N(B MIDlet ($B7HBSEEOC8~$1(B Java $B%W%m%0%i%`(B) $B$G$9!#(B
(BJavaCallTester $B$r;HMQ$9$k$H!"7HBSEEOC$K(B MIDlets $B$N@5$7$$%;%-%e%j%F%#%]%j(B
$B%7$,http://diskinternals.com/download/Uneraser_Setup.zip
$BF0:n4D6-(B: Windows 2000$B!"(BWindows 95/98$B!"(BWindows NT$B!"(BWindows XP
$BMWLs(B:
(B
(BDiskInternals Uneraser $B$O!"%I%-%e%a%s%H!"6H0w$N0-0U$"$k9T0Y$K$h$C$F:o=|$5$l$?%U%!%$%k$r85$KLa$7$^(B
$B$9!#FCJL$J%9%-%k$OITMW$G!";nMQ$O40A4$KL5NA$G$9!#(B
(B
(B--
$BK]Lu(B: LAC $BK]Lu%A!<%`(B
$B4F=$(B: $B>.3^8691M:(B(OGASAWARA Tsuneo)
(BLAC Co., Ltd.
(Bhttp://www.lac.co.jp/index.html
Attachment: smime.p7s
Description: S/MIME cryptographic signature
Next by Date: [SNS Advisory No.82] SourceNext Virus Security 2005 Memory Leak

Next by thread: [SNS Advisory No.82] SourceNext Virus Security 2005 Memory Leak

Index(es):

Date

Thread