[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
SecurityFocus Newsletter #274 2004-11-1->2004-11-5

To: bugtraq-jp@xxxxxxxxxxxxxxxxx
Subject: SecurityFocus Newsletter #274 2004-11-1->2004-11-5
From: Tsuneo Ogasawara <t.ogaswr@xxxxxxxxx>
Date: Fri, 27 May 2005 23:06:22 +0900
$B>.3^86(B@$B%i%C%/$G$9!#(B
(B
(BSecurityFocus Newsletter $BBh(B 274 $B9f$NOBLu$r$*FO$1$7$^$9!#(B
$BLu$N$J$$9`L\$K$D$$$F$O!VF|K\8lLu$J$7!W$H$7$F6hJL$7$F$"$j$^$9!#(B
(B
(B---------------------------------------------------------------------------
(BBugTraq-JP $B$K4X$9$k(B FAQ ($BF|K\8l(B):
(Bhttp://www.securityfocus.com/popups/forums/bugtraq-jp/faq.shtml
$B!&(BSecurityFocus Newsletter $B$NOBLu$O(B BugTraq-JP $B$G0lH$/$@$5$$(B
(B---------------------------------------------------------------------------
(B---------------------------------------------------------------------------
(BSecurityFocus Newsletter $B$K4X$9$k(B FAQ ($B1Q8l(B):
(Bhttp://www.securityfocus.com/popups/forums/securityfocusnews/intro.shtml
(BBugTraq $B$K4X$9$k(B FAQ ($B1Q8l(B):
(Bhttp://www.securityfocus.com/popups/forums/bugtraq/faq.shtml
(B---------------------------------------------------------------------------
$B0zMQ$K4X$9$kHw9M(B:
$B!&$3$NOBLu$O(B SecurityFocus $B$N5v2D$r3t<02qe$G9T$o$l$F$$$^$9!#(B
$B!&(BSecurityFocus Newsletter $B$NOBLu$r(B Netnews, Mailinglist, World Wide Web,
(B  $B=q@R(B, $B$=$NB>$N5-O?G^BN$G0zMQ$5$l$k>l9g$K$O%a!<%k$NA4J80zMQ$r$*4j$$$7$^$9!#(B
$B!&F|K\8lHG%K%e!<%9%l%?!<(B 1 $B9f$+$i(B 3 $B9f$^$G$K$O$3$NHw9M$,IU$$$F$$$^$;$s$,!"(B
(B  $B=`MQ$9$k$b$N$H$7$^$9!#(B
$B!&$^$?!"(BSecurityFocus $BDs6!$N(B BugTraq-JP $B%"!<%+%$%V(B [*1] $B$X$N$$$+$J$k7A<0$N(B
(B  $B%O%$%Q!<%j%s%/$b>e5-$K=`$8$F$/$@$5$$!#(B
(B1) http://online.securityfocus.com/archive/79
(B---------------------------------------------------------------------------
$B$3$NOBLu$K4X$9$kHw9M(B:
$B!&$3$NOBLu$NE,MQ@.2L$K$D$$$F3t<02ql9g!"(BBugTraq-JP $B$X(B Errata $B$H$7$F=$@5(B
(B  $BHG$r$4Ej9FD:$/$+!"4F=$l9g$K$O=$@5HG$r$G$-$k$@$1?WB.$KH/9T$7$^$9!#(B
(B---------------------------------------------------------------------------
(BThis translation is encoded and posted in ISO-2022-JP.
(B
$B86HG(B:
(BDate: 9 Nov 2004 17:48:11 -0000
(BMessage-ID: <20041109174811.23122.qmail@xxxxxxxxxxxxxxxxxxxxxx>
(B
(BSecurityFocus Newsletter #274
(B------------------------------
(B
(BThis Issue is Sponsored By: Datakey
(B
(BI. FRONT AND CENTER ($BF|K\8lLu$J$7(B)
(B     1. The Cost of Security Training
(B     2. SSH User Identities
(B     3. Trends in Web Application Security
(B     4. Phishing For Savvy Users
(BII. BUGTRAQ SUMMARY
(B     1. Microsoft Internet Explorer HTML Form Malformed A Tag Status...
(B     2. Sun Java System Web Proxy Server Multiple Unspecified Buffer...
(B     3. Caudium Remote Denial Of Service Vulnerability
(B     4. Bogofilter EMail Filter Remote Quoted Printable Decoder Deni...
(B     5. Land Down Under Multiple Remote SQL Injection Vulnerabilitie...
(B     6. Linux Kernel IPTables Initialization Failure Vulnerability
(B     7. HTML::Merge Template Parameter File Disclosure Vulnerability
(B     8. QwikMail Remote Format String Vulnerability
(B     9. Apple Safari Web Browser TABLE Status Bar URI Obfuscation We...
(B     10. Cherokee HTTPD Auth_Pam Authentication Remote Format String ...
(B     11. PostgreSQL Unspecified RPM Initialization Script Vulnerabili...
(B     12. HP OpenView Operations Remote Privilege Escalation Vulnerabi...
(B     13. Cisco Secure Access Control Server Remote Authentication Byp...
(B     14. MailEnable Professional Webmail Unspecified Vulnerability
(B     15. Haserl Local Environment Variable Manipulation Vulnerability
(B     16. NetGear ProSafe Dual Band Wireless VPN Firewall Default SNMP...
(B     17. RARLAB WinRAR Repair Archive Undisclosed Vulnerability
(B     18. Chesapeake TFTP Server Remote Directory Traversal Vulnerabil...
(B     19. Allied Telesyn TFTP Daemon Multiple Remote Vulnerabilities
(B     20. WebHost Automation Helm Control Panel Multiple Input Validat...
(B     21. Goollery Multiple Cross-Site Scripting Vulnerabilities
(B     22. ArGoSoft FTP Server Shortcut File Upload Vulnerability
(B     23. Microsoft Internet Explorer IFRAME Status Bar URI Obfuscatio...
(B     24. ISC DHCPD Remote Format String Vulnerability
(B     25. Proxytunnel Remote Format String Vulnerability
(B     26. Sun Java System Web And Application Servers Remote Denial Of...
(B     27. FsPHPGallery Multiple Input Validation Vulnerabilities
(B     28. TIPS MailPost Remote Debug Mode Information Disclosure Vulne...
(B     29. TIPS MailPost APPEND Variable Cross-Site Scripting Vulnerabi...
(B     30. yChat Unspecified Remote Denial Of Service Vulnerability
(B     31. TIPS MailPost Error Message Cross-Site Scripting Vulnerabili...
(B     32. TIPS MailPost Remote File Enumeration Vulnerability
(B     33. F-Secure Anti-Virus For Microsoft Exchange Password Protecte...
(B     34. Gbook MX Multiple Unspecified SQL Injection Vulnerabilities
(B     35. Gallery Unspecified Remote HTML Injection Vulnerability
(B     36. Info-ZIP Zip Remote Recursive Directory Compression Buffer O...
(B     37. Sun Java System Application Server HTTP TRACE Information Di...
(B     38. Microsoft ISA Server Unspecified Vulnerability
(B     39. Symantec LiveUpdate Directory Traversal Vulnerability
(B     40. Sophos MailMonitor for SMTP Unspecified Email Handling Vulne...
(B     41. Moodle Remote Glossary Module SQL Injection Vulnerability
(B     42. Zile Multiple Unspecified Vulnerabilities
(B     43. Monolith Lithtech Game Engine Multiple Remote Format String ...
(B     44. IceWarp Web Mail Multiple Remote Vulnerabilities
(B     45. Trend Micro ScanMail for Domino Remote File Disclosure Vulne...
(B     46. AntiBoard Unspecified SQL Injection Vulnerability
(BIII. SECURITYFOCUS NEWS ARTICLES
(B     1. Alleged DDoS kingpin joins most wanted list
(B     2. Online fraud tutorials... from the Secret Service?
(B     3. New Caller I.D. spoofing site opens
(B     4. Boom times ahead for IT security profession
(B     5. Trojan infects PCs to generate SMS spam
(B     6. Aussie 419 ringleader jailed for four years
(BIV. SECURITYFOCUS TOP 6 TOOLS
(B     1. creddump
(B     2. Maillog View  v1.03.3
(B     3. BullDog Firewall 20040918
(B     4. WapgGuihttp://workspaces.gotdotnet.com/wapggui 1.0
(B     5. antinat v0.81
(B     6. PopMessenger 1.60
(B
(B
(BI. FRONT AND CENTER ($BF|K\8lLu$J$7(B)
(B---------------------------------
(B
(BII. BUGTRAQ SUMMARY
(B-------------------
(B1. Microsoft Internet Explorer HTML Form Malformed A Tag Status...
(BBugTraq ID: 11565
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Oct 30 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11565
$BMWLs(B:
(BMicrosoft Internet Explorer $B$K$O!"(BURI $B$,1#JC$5$l$k5?$$$,$"$k$HJs9p$5$l$F(B
$B$$$^$9!#(B
(B
$B967bpJs$rI=<($9$k$3$H$K$h$j!"?.Mj$5$l$?>l=j$+$iDs6!$5$l$F$$$k$h$&$K56Au(B
$B$7$?(B Web $B%Z!<%8$r%f!<%6$KBP$7$FI=<($9$k2DG=@-$,$"$j$^$9!#(B
(B
(BInternet Explorer 6 SP2 $B$K$*$$$F!"$3$NLdBj$N1F6A$r$N%P!<%8%g%s$b1F6A$rhttp://www.securityfocus.com/bid/11566
$BMWLs(B:
(BSun Java System Web Proxy Server $B$H$=$N(B Administration Server $B%"%W%j%1!<(B
$B%7%g%s$K$O!"%P%C%U%!%*!<%P!<%U%m!<$K4XO"$9$kL$FCDj$NJ#?t$NLdBj$,B8:_$9$k(B
$B2DG=@-$,$"$k$HJs9p$5$l$F$$$^$9!#$3$l$i$NLdBj$O!"%f!<%6$,F~NO$7$?%G!<%?$r(B
$B%a%b%j%P%C%U%!$K%3%T!<$9$kA0$K!"6-3&%A%'%C%/$,E,@Z$K7$/2DG=@-$,$"$j$^$9!#(B
(B
(BWeb Proxy Server $B$O(B 'nobody' $B$Ghttp://www.securityfocus.com/bid/11567
$BMWLs(B:
(BCaudium $B$K$O!"%j%b!<%H$+$i$N967b$K$h$j%5!<%S%9ITG=>uBV$K4Y$k5?$$$,$"$k$H(B
$BJs9p$5$l$F$$$^$9!#(B
(B
$B%j%b!<%H$N967b7$/2DG=@-$,$"$j$^$9!#(B
(B
(BCaudium $B$N(B 1.4.4 RC2 $B$h$jA0$N%P!<%8%g%s$K$*$$$F!"$3$NLdBj$N1F6A$rhttp://www.securityfocus.com/bid/11568
$BMWLs(B:
(BBogofilter $B$O!"%j%b!<%H$+$i$N967b$K$h$j(B quoted-printable $B$N%G%3!<%@$,%5!<(B
$B%S%9ITG=>uBV$K4Y$kLdBj$N1F6A$r7$/2DG=@-$,$"$j$^$9!#(B
(B
(B5. Land Down Under Multiple Remote SQL Injection Vulnerabilitie...
(BBugTraq ID: 11569
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Nov 01 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11569
$BMWLs(B:
(BLand Down Under $B$K$O!"(BSQL $B9=J8$rCmF~$9$k967b$K4XO"$9$kJ#?t$NLdBj$N1F6A$r(B
$BuBV$,0z$-(B
$B5/$3$5$l$k2DG=@-$,$"$j$^$9!#(B
(B
(B6. Linux Kernel IPTables Initialization Failure Vulnerability
(BBugTraq ID: 11570
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: Nov 01 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11570
$BMWLs(B:
(BLinux $B%+!<%M%k$N(B iptables $B$O!"=i4|2=$NITHw$NLdBj$N1F6A$re$NITHw$KM3Mh$7$^$9!#(B
(B
$B$3$NLdBj$K$h$j!"LdBj$N$"$k%f!<%F%#%j%F%#$N=i4|2=$,E,@Z$K7$/2DG=@-$,$"$j$^$9!#(B
(B
(B7. HTML::Merge Template Parameter File Disclosure Vulnerability
(BBugTraq ID: 11571
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Nov 01 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11571
$BMWLs(B:
(BHTML::Merge $B$K$O!"%j%b!<%H$+$i$N967b$K$h$j%U%!%$%k$,3+<($5$l$k5?$$$,$"$k(B
$B$HJs9p$5$l$F$$$^$9!#$3$NLdBj$O!"%f!<%6$,F~NO$7$F(B 'printsource.pl' $B%9%/%j(B
$B%W%H$KEO$5$l$k%G!<%?$KBP$7$F!"%5%K%?%$%:=hM}$,E,@Z$Khttp://www.securityfocus.com/bid/11572
$BMWLs(B:
(BQwikMail $B$K$O!"%j%b!<%H$+$iMxMQ2DG=$J%U%)!<%^%C%H%9%H%j%s%0$NLdBj$,B8:_(B
$B$9$k$HJs9p$5$l$F$$$^$9!#$3$NLdBj$O!"%f!<%6$K$h$kF~NOCM$r=PNO4X?t$G%U%)!<(B
$B%^%C%H;XDj;R$H$7$F;HMQ$9$kA0$K!"F~NOCM$N%5%K%?%$%:=hM}$,E,@Z$K$N%P!<%8%g%s$b1F6A$rhttp://www.securityfocus.com/bid/11573
$BMWLs(B:
(BApple $B$N(B Safari Web $B%V%i%&%6(B $B$O!"(BURI $B$,1#JC$5$l$kLdBj$N1F6A$rpJs$rI=<($9$k$3$H$K$h$j!"?.Mj$5$l$?>l=j$+$iDs6!$5$l$F$$$k$h$&$K56Au(B
$B$7$?(B Web $B%Z!<%8$r%f!<%6$KBP$7$FI=<($9$k2DG=@-$,$"$j$^$9!#(B
(B
(B10. Cherokee HTTPD Auth_Pam Authentication Remote Format String ...
(BBugTraq ID: 11574
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Nov 01 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11574
$BMWLs(B:
(BCherokee $B$K$O!"%j%b!<%H$+$iMxMQ2DG=$J%U%)!<%^%C%H%9%H%j%s%0$NLdBj$,B8:_(B
$B$9$k$HJs9p$5$l$F$$$^$9!#$3$NLdBj$O!"%f!<%6$K$h$kF~NOCM$r;XDj$5$l$?%U%)!<(B
$B%^%C%H$KJQ49$7$F=PNO$r9T$&4X?t$K$*$$$F!"%U%)!<%^%C%H;XDj;R$H$7$F;HMQ$9$k(B
$BA0$K!"F~NOCM$N%5%K%?%$%:=hM}$,E,@Z$Khttp://www.securityfocus.com/bid/11575
$BMWLs(B:
(BPostgreSQL $B$O!"(BRPM $B$N=i4|2=%9%/%j%W%H$K4XO"$9$kL$FCDj$NLdBj$N1F6A$r\:Y>pJs$,8x3+$5$lhttp://www.securityfocus.com/bid/11576
$BMWLs(B:
(BHP OpenView Operations (OVO) $B$K$O!"%j%b!<%H$+$i$N8"8B>:3J$N5?$$$,$"$k$H(B
$BJs9p$5$l$F$$$^$9!#L$FCDj$NLdBj$K$h$j!"E,@Z$J8"8B$r;}$?$J$$4IM}http://www.securityfocus.com/bid/11577
$BMWLs(B:
(BCisco Secure Access Control Server $B$O!"%j%b!<%H$+$iG'>Z$,2sHr$5$l$kLdBj(B
$B$N1F6A$rZL@=q$KBP$9(B
$B$kBEEv@-$,E,@Z$K3NG'$5$l$J$$$3$H$KM3Mh$7$^$9!#(B
(B
$B$3$NLdBj$O!"967bZ$r;n$_$k:]$KH/@8$7$^$9!#(B
$B$3$N%"%W%j%1!<%7%g%s$G$O!"M-8z$J%f!<%6L>$H@5$7$$=q<0$N>ZL@=q$rDs<($9$k96(B
$B7bhttp://www.securityfocus.com/bid/11578
$BMWLs(B:
(BMailEnable Professional $B$N(B Webmail $B5!G=$K$O!"%;%-%e%j%F%#$K4XO"$9$kL$FC(B
$BDj$N@x:_E*$JLdBj$,B8:_$9$k5?$$$,$"$k$HJs9p$5$l$F$$$^$9!#$3$NLdBj$N860x$*(B
$B$h$S1F6A$K$D$$$F$O!"8=;~E@$G$OITL@$G$9!#$3$N%=%U%H%&%'%"$NFC@-$K$h$j!"$3(B
$B$NLdBj$O%j%b!<%H$+$iMxMQ$5$l$k2DG=@-$,$"$j$^$9!#(B
(B
(BMailEnable Professional $B$N(B 1.5 $B0JA0$N%P!<%8%g%s$K$*$$$F!"$3$NLdBj$N1F6A(B
$B$rhttp://www.securityfocus.com/bid/11579
$BMWLs(B:
(BHaserl $B$O!"%m!<%+%k$G4D6-JQ?t$,A`:n$5$l$kLdBj$N1F6A$re$NITHw$KM3Mh$7$^$9!#(B
(B
$B967bhttp://www.securityfocus.com/bid/11580
$BMWLs(B:
(BProSafe Dual Band Wireless VPN Firewall $B$K$O!"J]8nBP>]$H$J$k%M%C%H%o!<%/(B
$B$K$D$$$F$N=EMW$J>pJs$r%j%b!<%H$N967b$,;HMQ$5$l$F$$$k$3$H$KM3Mh(B
$B$7$^$9!#(B
(B
(BNetGear ProSafe Dual Band Wireless VPN Firewall $B$N%b%G%k(B FWAG114 $B$K$*$$(B
$B$F!"$3$NLdBj$,B8:_$9$k5?$$$,$"$k$HJs9p$5$l$F$$$^$9!#(B
(B
(B17. RARLAB WinRAR Repair Archive Undisclosed Vulnerability
(BBugTraq ID: 11581
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: Nov 02 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11581
$BMWLs(B:
(BRARLAB WinRAR $B$K$O!"L$8xI=$NLdBj$,B8:_$9$k5?$$$,$"$k$HJs9p$5$l$F$$$^$9!#(B
$B$3$NLdBj$O!"(BWinRAR $B$N(B 'Repair Archive' $B5!G=$GH/@8$9$k$HJs9p$5$l$F$$$^$9!#(B
(B
$B$3$NLdBj$N>\:Y$O!"8=;~E@$G$OITL@$G$9!#>\:Y>pJs$,8x3+$5$lhttp://www.securityfocus.com/bid/11582
$BMWLs(B:
(BChesapeake TFTP Server $B$K$O!"%G%#%l%/%H%j%H%i%P!<%5%k967b$rZL@=q$r;HMQ$7!"%5!<%S%9$rDs6!$7$F$$$k%3%s%T%e!<%?>e$N@x:_E*(B
$B$K=EMW$JG$0U$N%U%!%$%kFbMF$rFI$_=P$92DG=@-$,$"$j$^$9!#(B
(B
(BChesapeake TFTP Server $B$N%P!<%8%g%s(B 1.0 $B$K$*$$$F!"$3$NLdBj$,B8:_$9$k5?$$(B
$B$,$"$k$HJs9p$5$l$F$$$^$9!#(B
(B
(B19. Allied Telesyn TFTP Daemon Multiple Remote Vulnerabilities
(BBugTraq ID: 11584
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Nov 02 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11584
$BMWLs(B:
(BAllied Telesyn TFTP $B%5!<%S%9$K$O!"J#?t$NLdBj$,B8:_$9$k5?$$$,$"$k$HJs9p$5(B
$B$l$F$$$^$9!#0J2<$N6qBNE*$JLdBj$,Js9p$5$l$F$$$^$9!#(B
(B
(BAllied Telesyn TFTP Server $B$K$O!"%G%#%l%/%H%j%H%i%P!<%5%k967b$re$N@x:_E*$K=EMW$JG$0U$N%U%!%$%kFbMF(B
$B$rFI$_=P$7$?$j>e=q$-$7$?$j$9$k2DG=@-$,$"$j$^$9!#(B
(B
$B$5$i$K!"(B Allied Telesyn TFTP Server $B$K$O!"%j%b!<%H$+$i$N967b$K$h$j%P%C%U%!(B
$B%*!<%P!<%U%m!<$,H/@8$9$k5?$$$,$"$k$HJs9p$5$l$F$$$^$9!#(B
(B
$B%j%b!<%H$N967bhttp://www.securityfocus.com/bid/11586
$BMWLs(B:
(BHelm Control Panel $B$K$O!"J#?t$NLdBj$,B8:_$9$k5?$$$N$"$k$3$H$,Js9p$5$l$F(B
$B$$$^$9!#$3$l$i$NLdBj$K$O!"(BSQL $B9=J8$rCmF~$9$k967b$rhttp://www.securityfocus.com/bid/11587
$BMWLs(B:
(BGoollery $B$O!"%/%m%9%5%$%H%9%/%j%W%F%#%s%0967b$K4XO"$9$k$5$^$6$^$JLdBj$N(B
$B1F6A$re$G0-0U$"$k%3!<%I$,(B
$B2rhttp://www.securityfocus.com/bid/11589
$BMWLs(B:
(BArGoSoft FTP $B%5!<%P$K$O!"%f!<%6$,%7%g!<%H%+%C%H(B (.lnk) $B%U%!%$%k$r%5!<%P(B
$B$K%"%C%W%m!<%I$9$k$N$,5v$5$l$F$7$^$&5?$$$,$"$k$HJs9p$5$l$F$$$^$9!#$3$NLd(B
$BBj$K$D$$$F$N>\:Y$O!"8x3+$5$l$F$$$^$;$s!#(B
(B
$B$3$l$O!"(BBID 2961 (ArGoSoft FTP Server .lnk Directory Traversal
(BVulnerability) $B$K4XO"$9$kLdBj$G$"$k$H?d;!$5$l$^$9!#(BBID 2961 $B$G<($5$l$F$$(B
$B$kLdBj$G$O!"G$0U$N%G%#%l%/%H%j$X$N=q$-9~$_%Q!<%_%C%7%g%s$r;}$D%f!<%6$,!"(B
$BA*Br$7$?%G%#%l%/%H%j$r;XDj$9$k(B .lnk $B%U%!%$%k$r:n@.$7!"%"%C%W%m!<%I$9$k$N(B
$B$,5v$5$l$F$7$^$$$^$9!#$3$l$K$h$C$F%f!<%6$O!"$3$N%G%#%l%/%H%j$*$h$S%G%#%l(B
$B%/%H%j$K4^$^$l$k%U%!%$%k$KBP$9$kFI$_9~$_$*$h$S=q$-9~$_%"%/%;%9$rhttp://www.securityfocus.com/bid/11590
$BMWLs(B:
(BMicrosoft Internet Explorer $B$K$O!"(BURI $B$,1#JC$5$l$k5?$$$,$"$k$HJs9p$5$l$F(B
$B$$$^$9!#(B
(B
$B967bpJs$rI=<($9$k$3$H$K$h$j!"?.Mj$5$l$?>l=j$+$iDs6!$5$l$F$$$k$h$&$K56(B
$BAu$7$?(B Web $B%Z!<%8$r%f!<%6$KBP$7$FI=<($9$k2DG=@-$,$"$j$^$9!#(B
(B
(BInternet Explorer 6 $B$K$*$$$F!"$3$NLdBj$N1F6A$r$N%P!<%8%g%s$b1F6A$rhttp://www.securityfocus.com/bid/11591
$BMWLs(B:
(BISC DHCPD $B%5!<%P%Q%C%1!<%8$K$O!"%j%b!<%H$+$iMxMQ2DG=$J%U%)!<%^%C%H%9%H%j(B
$B%s%0$NLdBj$,B8:_$9$k$HJs9p$5$l$F$$$^$9!#%f!<%6$,F~NO$7$?%G!<%?$O!"0BA4$G(B
$B$J$$J}K!$G%m%0$,5-O?$5$l$^$9!#$3$NLdBj$,MxMQ$5$l$k$H!"(BDHCP $B%5!<%P$GG$0U(B
$B$N%3!<%I$,Z$G$9!#(B
(B
(B25. Proxytunnel Remote Format String Vulnerability
(BBugTraq ID: 11592
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Nov 03 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11592
$BMWLs(B:
(BProxytunnel $B$K$O!"%j%b!<%H$+$i967b2DG=$J%U%)!<%^%C%H%9%H%j%s%0$NLdBj$,B8(B
$B:_$9$k5?$$$,$"$j$^$9!#$3$NLdBj$O!"%W%m%-%7%5!<%P$,B>$N%j%b!<%H%5!<%P$+$i(B
$Bl9g$KH/@8$7$^$9!#$3$NLdBj$rMxMQ$7$?(B
$B967b$K@.8y$9$k$H!"%W%m%-%7%5!<%P$N%;%-%e%j%F%#%3%s%F%-%9%HFb$GG$0U$N%3!<(B
$B%I$,http://www.securityfocus.com/bid/11593
$BMWLs(B:
(BSun Java Web Server $B$*$h$S(B Sun Java Application Server $B$O!"%j%b!<%H$+$i(B
$B$N967b$K$h$j%5!<%S%9ITG=>uBV$K4Y$kLdBj$N1F6A$r7$/2DG=@-$,$"$j$^$9!#(B
(B
(B27. FsPHPGallery Multiple Input Validation Vulnerabilities
(BBugTraq ID: 11594
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Nov 03 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11594
$BMWLs(B:
(BFsPHPGallery $B$K$O!"F~NOCM$KBP$9$kBEEv@-$N3NG'$K4XO"$9$kJ#?t$NLdBj$,B8:_(B
$B$9$k5?$$$,$"$k$HJs9p$5$l$F$$$^$9!#0J2<$N6qBNE*$JLdBj$,Js9p$5$l$F$$$^$9!#(B
(B
(BFsPHPGallery $B$K$O!"%5!<%S%9ITG=>uBV$K4Y$k5?$$$,$"$k$HJs9p$5$l$F$$$^$9!#(B
$B$3$NLdBj$O!"%f!<%6$,F~NO$7$?2hA|$N(B size $BB0@-CM$N%5%K%?%$%:=hM}$,E,@Z$K7$/2D(B
$BG=@-$,$"$j$^$9!#(B
(B
$B$^$?(B FsPHPGallery $B$K$O!">pJsO31L$N5?$$$,$"$k$HJs9p$5$l$F$$$^$9!#(B
(B
$B%j%b!<%H$N967bhttp://www.securityfocus.com/bid/11595
$BMWLs(B:
(BTIPS MailPost $B$O!"%j%b!<%H$+$i$N967b$K$h$j%G%P%C%0%b!<%I$N>pJs$,O31L$9$k(B
$BLdBj$N1F6A$rpJs$N3+<($,5v$5$l$F$7$^$&$H$$$&(B
$B@_7W>e$NITHw$KM3Mh$7$^$9!#(B
(B
$B967bpJs$rC%pJs$K$h$j!"99$J$k967b$,0z$-5/$3$5$l$k2DG=@-$,$"$j$^$9!#(B
(B
(B29. TIPS MailPost APPEND Variable Cross-Site Scripting Vulnerabi...
(BBugTraq ID: 11596
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Nov 03 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11596
$BMWLs(B:
(BMailPost $B$K$O!"%/%m%9%5%$%H%9%/%j%W%F%#%s%0967b$rZMQ>pJs$N@`$N%P!<%8%g%s$b1F6A$rhttp://www.securityfocus.com/bid/11597
$BMWLs(B:
(ByChat $B$K$O!"%j%b!<%H$+$i$N967b$K$h$j%5!<%S%9ITG=>uBV$K4Y$kL$FCDj$NLdBj$,(B
$BB8:_$9$k2DG=@-$,$"$k$HJs9p$5$l$F$$$^$9!#(ByChat $B$K$O!"(BHTTP $B@\B3$N=hM}$GL$(B
$BFCDj$NIT6q9g$,$"$k$HJs9p$5$l$F$$$^$9!#(B
(B
$B%j%b!<%H$N967b7$/2DG=@-$,$"$k$HJs9p$5$l$F$$$^$9!#(B
(B
$B>\:Y>pJs$,8x3+$5$lhttp://www.securityfocus.com/bid/11598
$BMWLs(B:
(BMailPost $B$K$O!"%/%m%9%5%$%H%9%/%j%W%F%#%s%0967b$rZMQ>pJs$N@`$N%P!<%8%g%s$b1F6A$rhttp://www.securityfocus.com/bid/11599
$BMWLs(B:
(BTIPS MailPost $B$O!"%j%b!<%H$+$i$N967b$K$h$j%U%!%$%k$,Ns5s$5$l$kLdBj$N1F6A(B
$B$rl=j$K$"$k%U%!%$(B
$B%k$NB8:_$K$D$$$F$N>pJs$rp(B
$BJs$K$h$j!"99$J$k967b$,0z$-5/$3$5$l$k2DG=@-$,$"$j$^$9!#(B
(B
(B33. F-Secure Anti-Virus For Microsoft Exchange Password Protecte...
(BBugTraq ID: 11600
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Nov 03 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11600
$BMWLs(B:
(BF-Secure Anti-Virus for Microsoft Exchange $B$K$O!"%9%-%c%J$,2sHr$5$l$k5?(B
$B$$$,$"$k$HJs9p$5$l$F$$$^$9!#FCJL$K:n@.$5$l!"B>$N%"!<%+%$%VFb$K%M%9%H$5$l(B
$B$F$$$k%"!<%+%$%V$K$h$C$F!"$3$NLdBj$,0z$-5/$3$5$l$k$HJs9p$5$l$F$$$^$9!#$3(B
$B$N$h$&$J%"!<%+%$%V$OIT@5$J%"%W%j%1!<%7%g%s$r4^$s$G$$$k2DG=@-$,$"$j$^$9$,!"(B
$BEE;R%a!<%k$N%2!<%H%&%'%$$G$N8!=P$d8!1V$rLH$l$^$9!#(B
(B
(B34. Gbook MX Multiple Unspecified SQL Injection Vulnerabilities
(BBugTraq ID: 11601
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Nov 03 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11601
$BMWLs(B:
(BGbook MX $B$K$O!"(BSQL $B9=J8$rCmF~$9$k967b$K4XO"$9$kL$FCDj$NJ#?t$NLdBj$,B8:_(B
$B$9$k2DG=@-$,$"$k$HJs9p$5$l$F$$$^$9!#$3$l$i$NLdBj$O!"%f!<%6$K$h$kF~NOCM$r(B
(BSQL $B%/%(%j$KDI2C$9$kA0$K!"F~NOCM$N%5%K%?%$%:=hM}$,E,@Z$K7(B
$B$$$?$j%G!<%?$,3+<($^$?$O2~$6$s$5$l$k2DG=@-$,$"$j$^$9!#$^$?!"967bhttp://www.securityfocus.com/bid/11602
$BMWLs(B:
(BGallery $B$O!"(BHTML $B%?%0$rA^F~2DG=$JL$FCDj$NLdBj$N1F6A$rZMQ>pJs$N@`http://www.securityfocus.com/bid/11603
$BMWLs(B:
(BInfo-ZIP Zip $B$O!"%j%b!<%H$+$iMxMQ2DG=$J:F5"E*$K%G%#%l%/%H%j$r05=L$9$k:](B
$B$KH/@8$9$k%P%C%U%!%*!<%P!<%U%m!<$NLdBj$N1F6A$re$GG$0U$N%3!<%I$r:3J$,0z$-5/(B
$B$3$5$l$k2DG=@-$,$"$j$^$9!#(B
(B
(B37. Sun Java System Application Server HTTP TRACE Information Di...
(BBugTraq ID: 11604
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Nov 03 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11604
$BMWLs(B:
(BSun Java System Application Server $B$K$O!"%j%b!<%H$N967bZMQ>pJs$J$I$N=EMW$J>pJs$r@`http://www.securityfocus.com/bid/11605
$BMWLs(B:
(BMicrosoft $B$O!"(BInternet Security and Acceleration (ISA) Server $BMQ$N%;%-%e(B
$B%j%F%#99?7%W%m%0%i%`$r%j%j!<%9$9$kM=Dj$G$"$k$H$N;vA0DL9p$r9T$$$^$7$?!#=$(B
$B@5FbMF$O!"(B2004 $BG/(B 11 $B7n(B 9 $BF|$N%j%j!<%9$^$G8xI=$5$l$^$;$s!#>\:Y$OITL@$G$9!#(B
(B
(B39. Symantec LiveUpdate Directory Traversal Vulnerability
(BBugTraq ID: 11606
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Nov 05 2004
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/11606
$BMWLs(B:
(BSymantec LiveUpdate $B$K$O!"%G%#%l%/%H%j%H%i%P!<%5%k967b$r$KBP$9$kBEEv@-$,E,@Z$K3NG'$5$l$:$K%G%#%l%/%H%j%D%j!<$,2rE`$5$l$k$HJs9p(B
$B$5$l$F$$$^$9!#(B
(B
$B$3$N967b$re$N4{B8%U%!%$%k$,>e=q$-$5$l$k2D(B
$BG=@-$O$J$$$HJs9p$5$l$F$$$kE@$KN10U$9$Y$-$G$9!#(B
(B
(BLiveUpdate $B$N%P!<%8%g%s(B 1.80.19.0 $B$*$h$S(B 2.5.56.0 $B$K$*$$$F!"$3$NLdBj$N1F(B
$B6A$r$N%P!<%8%g%s$b1F6A$rhttp://www.securityfocus.com/bid/11607
$BMWLs(B:
(BSophos MailMonitor for SMTP $B$K$O!"L$FCDj$NLdBj$,B8:_$9$k5?$$$,$"$k$HJs9p(B
$B$5$l$F$$$^$9!#$3$NLdBj$O!"IT@5$JEE;R%a!<%k%a%C%;!<%8$,=hM}$5$l$k:]$KH/@8(B
$B$9$k$HJs9p$5$l$F$$$^$9!#$3$NLdBj$N1F6A$O!"FCDj$5$l$F$$$^$;$s!#(B
(B
(BSophos MailMonitor for SMTP $B$N%P!<%8%g%s(B 2.1 $B$K$*$$$F!"LdBj$,B8:_$9$k$H(B
$BJs9p$5$l$F$$$^$9!#$=$NB>$N%P!<%8%g%s$b1F6A$rhttp://www.securityfocus.com/bid/11608
$BMWLs(B:
(BMoodle $B$NMQ8l=8%b%8%e!<%k$O!"%j%b!<%H$+$i(B SQL $B9=J8$rCmF~2DG=$JLdBj$N1F6A(B
$B$r$N967b$,http://www.securityfocus.com/bid/11609
$BMWLs(B:
(BZile $B$O!"L$FCDj$NJ#?t$NLdBj$N1F6A$r\:Y$,8x3+$5$l:3J$,http://www.securityfocus.com/bid/11610
$BMWLs(B:
(BLithtech $B%2!<%`%(%s%8%s$K$O!"J#?t$N%j%b!<%H$+$iMxMQ2DG=$J%U%)!<%^%C%H%9(B
$B%H%j%s%0$NLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#$3$l$i$NLdBj$O!"(Bprintf() $B7A<0$N(B
$B4X?t$,IT@5$K;HMQ$5$l$k$3$H$KM3Mh$7$^$9!#$3$l$K$h$j!"30It$N%G!<%?$+$iLdBj(B
$B$N$"$k4X?t$K%U%)!<%^%C%H;XDj;R$,D>@\Ds6!$5$l$k$N$,5v$5$l$F$7$^$$$^$9!#(B
(B
$BLdBj$N$"$k%5!<%P$,0U?^E*$K:n@.$5$l$?MW5a$r=hM}$9$k:]$K!"%5!<%S%9ITG=>uBV(B
$B$K4Y$j$^$9!#(B
(B
$B967bhttp://www.securityfocus.com/bid/11611
$BMWLs(B:
(BIceWarp Web Mail $B$O!"%j%b!<%H$+$ie$N4{CN$N>l=j$K$"(B
$B$k%U%!%$%k$r>e=q$-$7!"%f!<%6$NG'>ZMQ>pJs$r3+<($9$k2DG=@-$,$"$j$^$9!#$3$l(B
$B$i$NLdBj$O!"99$J$k967b$r;n$_$k$?$a$Nhttp://www.securityfocus.com/bid/11612
$BMWLs(B:
(BScanMail for Domino $B$K$O!"=EMW$J@_Dj%U%!%$%k$,%j%b!<%H$N967bpJs$,967bhttp://www.securityfocus.com/bid/11613
$BMWLs(B:
(BAntiBoard $B$O!"(BSQL $B9=J8$rCmF~2DG=$JLdBj$K4XO"$9$kL$FCDj$NLdBj$N1F6A$r7$$$?(B
$B$j!"%G!<%?$,3+<($^$?$OA`:n$5$l$k2DG=@-$,$"$j$^$9!#$^$?!"967bhttp://www.securityfocus.com/news/9870
(B
(B2. Online fraud tutorials... from the Secret Service?
$B:nl$H$J$C$F$$$?(B Shadowcrew.com $B$rJD:?(B
$B$5$;$^$7$?$,!"0cK!9T0Y$K4XO"$9$k>pJs%G!<%?%Y!<%9$OJ|CV$7$?$^$^$G$7$?!#(B
(B
(Bhttp://www.securityfocus.com/news/9866
(B
(B3. New Caller I.D. spoofing site opens
$B:nhttp://www.securityfocus.com/news/9822
(B
(B4. Boom times ahead for IT security profession
$B:npJs%;%-%e%j%F%#4XO"$NO+(B
$BF/?M8}$O!"G/N((B 13.7 % $B$N@*$$$G3HBg$7!"(B2008 $BG/$K$O(B 210 $BK|?M$KC#$9$k$HM=B,(B
$B$5$l$^$9!#(B
(Bhttp://www.securityfocus.com/news/9887
(B
(B5. Trojan infects PCs to generate SMS spam
$B:nhttp://www.securityfocus.com/news/9886
(B
(B6. Aussie 419 ringleader jailed for four years
$B:ne$2$?%*!<%9%H%i%j%"?M$N(B 419 $B:>5=;U$O!"%K%e!<%5%&%9%&%'!<%k%:=#COJ}:[H=(B
$B=j$G:>5=$NAJ0x(B 10 $B9`L\$H;JK!K832$NAJ0x(B 1 $B9`L\$K$h$j(B 4 $BG/$N6X8G7:$rhttp://www.securityfocus.com/news/9877
(B
(B
(BIV. SECURITYFOCUS TOP 6 TOOLS
(B-----------------------------
(B1. creddump
$B:nhttp://www.oxid.it/downloads/creddump.zip
$BF0:n4D6-(B: Windows XP
$BMWLs(B:
(B
(BCredential Manager $B$O!"(BMicrosoft $B$,(B Windows Server 2003 $B$H(B Windows XP $B$G(B
$B>ZL@=q>pJsMQ$N%;%-%e%"$J3JG<>l=j$H$7$FDs6!$7$F$$$k?7$7$$(B SSO $B%=%j%e!<%7%g(B
$B%s$G$9!#$3$N%=%j%e!<%7%g%s$r;HMQ$9$k$H!"%f!<%6$,$5$^$6$^$J%M%C%H%o!<%/%j(B
$B%=!<%9$d%"%W%j%1!<%7%g%sMQ$N%f!<%6L>$H%Q%9%o!<%I$r(B 1 $BEYF~NO$9$k$@$1$G!"(B
$B$3$l$i$N%j%=!<%9$K8e$G%"%/%;%9$7$?$H$-$K%7%9%F%`$+$i<+F0E*$K>pJs$,Ds6!$5(B
$B$l$k$N$G!"%f!<%6$NF~NO$OI,MW$"$j$^$;$s!#(B
(B
(B2. Maillog View v1.03.3
$B:nhttp://www.netorbit.it/modules.html
$BF0:n4D6-(B: Linux
$BMWLs(B:
(B
(BMaillog View $B$O(B /var/log/maillog.* $B$NA4$F$N%U%!%$%k$r4JC1$K1\Mw$G$-$k$h(B
$B$&$K$9$k!"(BWebmin $B8~$1%b%8%e!<%k$G$9!#$3$N%=%U%H%&%'%"$K$O<+F099?7!"%a%C(B
$B%;!<%8%5%$%:$NI=<(!">:=g(B / $B9_=g$G$NI=<(JB$SBX$(!"05=L:Q$_%U%!%$%k$X$NBP(B
$B1~!"40A4$JE}7W%G!<%?$N1\Mw%Z!<%8$J$I$N5!G=$rHw$($F$$$^$9!#(BSendmail$B!"(B
(BPostfix$B!"(BExim$B!"$*$h$S(B Qmail ($B0lIt(B) $B$KBP1~$7$F$$$^$9!#(BCourier MTA $B$O!";n(B
$B83E*$K%5%]!<%H$5$l$F$$$^$9!#(B
(B
(B3. BullDog Firewall 20040918
$B:nhttp://tanaya.net/BullDog
$BF0:n4D6-(B: Linux
$BMWLs(B:
(B
(BBulldog $B$O!"9bIi2Y%7%9%F%`8~$1$N6/NO$+$D7ZNL$N%U%!%$%"%&%)!<%k$G$9!#B?:L(B
$B$J5!G=$rHw$($?$3$N%U%!%$%"%&%)!<%k$r;HMQ$9$l$P!"C/$G$b<+J,$N%7%9%F%`$rJ](B
$B8n$G$-$^$9!#(B
(B
$B$3$N%7%9%F%`$O:GBg8B$NJ]8n$N$?$a$NF0E*%k!<%k$d@EE*%k!<%k$N%;%C%H$rDs6!$7!"(B
$B$$$/$D$+$N9bEY$J5!G=$rHw$($F$$$^$9!#(B
(B
$B$3$N%U%!%$%"%&%)!<%k$O!"%[%S!<%f!<%6$d73;v4pCO$G$b;HMQ2DG=$G$9!#(B
(BGeneration 7 $B$O!"%9%/%i%C%A$+$i$N:F@_7W$K$h$j3+H/$5$l$?40A4$J%j%i%$%HHG(B
$B$G$9!#(B
(B
$B$3$N%U%!%$%"%&%)!<%k$O!"%;%C%H%"%C%W$K$"$kDxEY$N;~4V$rMW$7$^$9!#(B
(B
(B4. WapgGuihttp://workspaces.gotdotnet.com/wapggui 1.0
$B:nhttp://workspaces.gotdotnet.com/wapggui
$BF0:n4D6-(B: Windows 2000$B!"(BWindows XP
$BMWLs(B:
(B
(BWAPG $B%Q%9%o!<%I%8%'%M%l!<%?$r!)$^$?$O6/@)$5$l$kJ8;z$N%/%i%9$N(B
$B;XDj$J$I!"$5$^$6$^$J5!G=$r%5%]!<%H$7$^$9!#(B
(B
(B5. antinat v0.81
$B:nhttp://yallara.cs.rmit.edu.au/~malsmith/products/antinat/
$BF0:n4D6-(B: MacOS$B!"(BPOSIX$B!"(BWindows 2000$B!"(BWindows 95/98$B!"(BWindows NT$B!"(BWindows XP
$BMWLs(B:
(B
(BAntinat SOCKS Server $B$O!"%W%m%-%7%Y!<%9$N%"%W%j%1!<%7%g%s$r5-=R$9$k$?$a(B
$B$N%/%i%$%"%s%H%i%$%V%i%j$r4^$`!"%9%1!<%i%V%k$JJ#?t%9%l%C%I$N(B SOCKS $B%5!<(B
$B%P$G$9!#(BSOCKS 4$B!"(BSOCKS 5$B!"G'>Z!"%U%!%$%"%&%)!<%k!"(BUDP$B!"$*$h$SL>A02r7h$,(B
$B%5%]!<%H$5$l$F$$$^$9!#(B
(B
(B6. PopMessenger 1.60
$B:nhttp://www.leadmind.com
$BF0:n4D6-(B: Windows 2000$B!"(BWindows 95/98$B!"(BWindows NT$B!"(BWindows XP
$BMWLs(B:
(B
(BLAN $B>e$GMF0W$+$D%;%-%e%"$JJ}K!$G!"%A%c%C%H$7$?$j%F%-%9%H7A<0$N%a%C%;!<%8(B
$B$d%U%!%$%k$rAw?.$G$-$^$9!#(B
(B
(B--
$BK]Lu(B: LAC $BK]Lu%A!<%`(B
$B4F=$(B: $B>.3^8691M:(B (OGASAWARA Tsuneo)
(BLAC Co., Ltd.
(Bhttp://www.lac.co.jp/index.html
Attachment: smime.p7s
Description: S/MIME cryptographic signature
Prev by Date: SecurityFocus Newsletter #273 2004-10-25->2004-10-29
Next by Date: SecurityFocus Newsletter #275 2004-11-8->2004-11-12
Previous by thread: SecurityFocus Newsletter #273 2004-10-25->2004-10-29
Next by thread: SecurityFocus Newsletter #275 2004-11-8->2004-11-12
Index(es):
- Date
- Thread