[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
SecurityFocus Newsletter #281 2004-12-20->2004-12-24

To: bugtraq-jp@xxxxxxxxxxxxxxxxx
Subject: SecurityFocus Newsletter #281 2004-12-20->2004-12-24
From: Tsuneo Ogasawara <t.ogaswr@xxxxxxxxx>
Date: Fri, 24 Jun 2005 20:09:17 +0900
$B>.3^86(B@$B%i%C%/$G$9!#(B
(B
(BSecurityFocus Newsletter $BBh(B 281 $B9f$NOBLu$r$*FO$1$7$^$9!#(B
$BLu$N$J$$9`L\$K$D$$$F$O!VF|K\8lLu$J$7!W$H$7$F6hJL$7$F$"$j$^$9!#(B
(B
(B---------------------------------------------------------------------------
(BBugTraq-JP $B$K4X$9$k(B FAQ ($BF|K\8l(B):
(Bhttp://www.securityfocus.com/popups/forums/bugtraq-jp/faq.shtml
$B!&(BSecurityFocus Newsletter $B$NOBLu$O(B BugTraq-JP $B$G0lH$/$@$5$$(B
(B---------------------------------------------------------------------------
(B---------------------------------------------------------------------------
(BSecurityFocus Newsletter $B$K4X$9$k(B FAQ ($B1Q8l(B):
(Bhttp://www.securityfocus.com/popups/forums/securityfocusnews/intro.shtml
(BBugTraq $B$K4X$9$k(B FAQ ($B1Q8l(B):
(Bhttp://www.securityfocus.com/popups/forums/bugtraq/faq.shtml
(B---------------------------------------------------------------------------
$B0zMQ$K4X$9$kHw9M(B:
$B!&$3$NOBLu$O(B SecurityFocus $B$N5v2D$r3t<02qe$G9T$o$l$F$$$^$9!#(B
$B!&(BSecurityFocus Newsletter $B$NOBLu$r(B Netnews, Mailinglist, World Wide Web,
(B  $B=q@R(B, $B$=$NB>$N5-O?G^BN$G0zMQ$5$l$k>l9g$K$O%a!<%k$NA4J80zMQ$r$*4j$$$7$^$9!#(B
$B!&F|K\8lHG%K%e!<%9%l%?!<(B 1 $B9f$+$i(B 3 $B9f$^$G$K$O$3$NHw9M$,IU$$$F$$$^$;$s$,!"(B
(B  $B=`MQ$9$k$b$N$H$7$^$9!#(B
$B!&$^$?!"(BSecurityFocus $BDs6!$N(B BugTraq-JP $B%"!<%+%$%V(B [*1] $B$X$N$$$+$J$k7A<0$N(B
(B  $B%O%$%Q!<%j%s%/$b>e5-$K=`$8$F$/$@$5$$!#(B
(B1) http://online.securityfocus.com/archive/79
(B---------------------------------------------------------------------------
$B$3$NOBLu$K4X$9$kHw9M(B:
$B!&$3$NOBLu$NE,MQ@.2L$K$D$$$F3t<02ql9g!"(BBugTraq-JP $B$X(B Errata $B$H$7$F=$@5(B
(B  $BHG$r$4Ej9FD:$/$+!"4F=$l9g$K$O=$@5HG$r$G$-$k$@$1?WB.$KH/9T$7$^$9!#(B
(B---------------------------------------------------------------------------
(BThis translation is encoded and posted in ISO-2022-JP.
(B
$B86HG(B:
(BDate: 28 Dec 2004 20:32:23 -0000
(BMessage-ID: <20041228203223.18164.qmail@xxxxxxxxxxxxxxxxxxxxxx>
(B
(BSecurityFocus Newsletter #281
(B-----------------------------
(B
(BI. FRONT AND CENTER ($BF|K\8lLu$J$7(B)
(B     1. Spam Punishment Doesn't Fit the Crime
(B     2. Why Open Source Solaris?
(BII. BUGTRAQ SUMMARY
(B     1. Windows Media Player ActiveX Control Media File Attribute Co...
(B     2. Windows Media Player ActiveX Control File Enumeration Weakne...
(B     3. Kayako ESupport Multiple Cross-Site Scripting and SQL Inject...
(B     4. Crystal Art Crystal FTP Remote Client-Side Buffer Overflow V...
(B     5. HTGET URI Buffer Overflow Vulnerability
(B     6. IMG2ASCII Unauthorized File Upload Vulnerability
(B     7. IBM AIX Diag Local Privilege Escalation Vulnerabilities
(B     8. PHPFormMail HTML Output Function HTML Injection Vulnerabilit...
(B     9. IBM AIX PAGINIT Local Buffer Overflow Vulnerability
(B     10. ArGoSoft Mail Server HTML Injection Vulnerability
(B     11. PHP Shared Memory Module Offset Memory Corruption Vulnerabil...
(B     12. KDE Konqueror Multiple Remote Java Sandbox Bypass Vulnerabil...
(B     13. PHPFormMail Alias Hidden Field HTML Injection Vulnerability
(B     14. EScripts Software E_Board Directory Traversal Vulnerability
(B     15. Ultrix DXTerm Setup Parameter Local Buffer Overflow Vulnerab...
(B     16. Tlen.pl Instant Messenger Remote Script Execution Vulnerabil...
(B     17. Email Sanitizer MIME Type Parsing Remote Denial Of Service V...
(B     18. Google Desktop Search Remote Information Disclosure Vulnerab...
(B     19. WorkBoard PHP-Nuke Module Multiple Cross-Site Scripting Vuln...
(B     20. CHPOX Unspecified Vulnerability
(B     21. Microsoft Windows XP Firewall ACL Bypass Vulnerability
(B     22. GNU Troff (Groff) Insecure Temporary File Creation Vulnerabi...
(B     23. MIT Kerberos 5 Administration Library Add_To_History Heap-Ba...
(B     24. IBM AIX CHCOD Local Privilege Escalation Vulnerability
(B     25. IBM AIX LSVPD Local Privilege Escalation Vulnerability
(B     26. Symantec Brightmail AntiSpam Quarantine Multiple Remote Deni...
(B     27. Webroot Software My Firewall Plus Local Privilege Escalation...
(B     28. Webroot Software Spy Sweeper Enterprise Local Privilege Esca...
(B     29. Wordpress Multiple Cross-Site Scripting and SQL Injection Vu...
(B     30. LibVNCServer Multiple Unspecified Vulnerabilities
(B     31. PHPAuction Administrative Interface Authentication Bypass Vu...
(B     32. XPDF DoImage Remote Buffer Overflow Vulnerability
(B     33. Rosiello Security RFTPD Multiple Remote And Local Vulnerabil...
(B     34. Perl RMTree Local Race Condition Vulnerability
(B     35. Rosiello Security RPF Multiple Remote And Local Vulnerabilit...
(B     36. libTIFF Heap Corruption Integer Overflow Vulnerabilities
(B     37. MPlayer And Xine PNM_Get_Chunk Multiple Remote Client-Side B...
(B     38. HP-UX FTP Server Debug Logging Mode Buffer Overflow Vulnerab...
(B     39. Debian Debmake Local Insecure Temporary File Creation Vulner...
(B     40. Linux Kernel 32 Bit Compatibility System Call Handler AMD64 ...
(B     41. Sybase Adaptive Server Enterprise Multiple Unspecified Vulne...
(B     42. Skype Technologies Skype Internet Telephony Insecure Default...
(B     43. 2BGal Remote SQL Injection Vulnerability
(B     44. Snort DecodeTCPOptions Remote Denial Of Service Vulnerabilit...
(B     45. SSLTelnetd Unspecified Format String Vulnerability
(B     46. NetWin SurgeMail Webmail Unspecified Vulnerability
(B     47. Docbook-To-Man Insecure Temporary File Creation Vulnerabilit...
(B     48. LPRNG LPRNG_CERTS.SH Local Insecure Temporary File Creation ...
(B     49. PsychoStats Login Parameter Cross-Site Scripting Vulnerabili...
(B     50. Microsoft Windows winhlp32 Phrase Integer Overflow Vulnerabi...
(B     51. Microsoft Windows winhlp32 Phrase Heap Overflow Vulnerabilit...
(B     52. Linux Security Modules Process Capabilities Design Error
(B     53. Microsoft Windows ANI File Denial of Service Attack
(B     54. Microsoft Windows LoadImage API Function Integer Overflow Vu...
(B     55. Nullsoft SHOUTcast File Request Format String Vulnerability
(B     56. Wirtualna Polska WPKontakt Remote Script Execution Vulnerabi...
(B     57. HP-UX System Administration Manager Privilege Escalation Vul...
(B     58. HP-UX Netscape Directory Server With LDAP Remote Buffer Over...
(B     59. Debian Tetex-Bin Xdvizilla Insecure Temporary File Creation ...
(B     60. Linux Kernel ELF Binary Loading Denial Of Service Vulnerabil...
(B     61. ZeroBoard Multiple Remote Script Injection And Cross-Site Sc...
(B     62. YACY Peer-To-Peer Search Engine Multiple Cross-Site Scriptin...
(BIII. SECURITYFOCUS NEWS ARTICLES
(B     1. Groups fight Internet wiretap push
(B     2. Report: DHS cyber security lagging
(B     3. Long prison term for Lowe's wi-fi hacker
(B     4. 'Metal Gear' Trojan targets Symbian phones
(B     5. Popular BitTorrent site shuts down after flurry of suits
(B     6. NASA hacker jailed for six months
(BIV. SECURITYFOCUS TOP 6 TOOLS
(B     1. Interface Traffic Indicator 1.2.3
(B     2. Colasoft Capsa 4.05
(B     3. Attack Tool Kit (ATK) 3.0
(B     4. One-Time Password Generator 1.0
(B     5. tenshi 0.3.2
(B     6. pasmal 1.5
(B
(B
(BI. FRONT AND CENTER ($BF|K\8lLu$J$7(B)
(B---------------------------------
(B
(BII.BUGTRAQ SUMMARY
(B-------------------
(B1. Windows Media Player ActiveX Control Media File Attribute Co...
(BBugTraq ID: 12031
$B%j%b!<%H$+$i$N:F8=@-(B:$B$"$j(B
$B8xI=F|(B: Dec 18 2004
$B4XO"$9$k(B URL:http://www.securityfocus.com/bid/12031
$B35MW(B:
(BWindows Media Player $B$N(B ActiveX $B%3%s%H%m!<%k$O%;%-%e%j%F%#>e@H!"6JL>!"%"%k%P%`L>$J$I$NB0@-$rJQ99$9$k$3$H$,2DG=$G$9!#(B
(B
$B$3$N@Hl9g$K$O!"%m!<%+%k%>!<%s$K$*$$$F0-0U(B
$B$N$"$k%9%/%j%W%H%3!<%I$,!<%s$KBP$9$k%;%-%e%j%F%#@)8B$,E,@Z$K@_Dj$5$l$F$$$J$$%3%s%T%e!<(B
$B%?$G$O!"G$0U$N%3!<%I$,l9g!"(BWindows XP SP2 $B$,2TF0$7$F(B
$B$$$k%3%s%T%e!<%?$O$3$NLdBj$N1F6A$rhttp://www.securityfocus.com/bid/12032
$B35MW(B:
(BWindows Media Player $B$N(B ActiveX $B%3%s%H%m!<%k$K$O!"0-0U$N$"$k(B Web $B%Z!<%8(B
$B$K$h$j%/%i%$%"%s%H%3%s%T%e!<%?$KB8:_$9$k%U%!%$%k$,Ns5s$5$l$k2DG=@-$,$"$k(B
$B%;%-%e%j%F%#>e$NLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#(B
(B
$B$3$NLdBj$O99$J$k967b$KMxMQ$5$l$k2DG=@-$,$"$j$^$9!#(B
(B
(BWindows Media Player 9 $B$K$*$$$F!"$3$NLdBj$N1F6A$rl9g!"(BWindows XP SP2 $B$,2TF0$7$F(B
$B$$$k%3%s%T%e!<%?$O$3$NLdBj$N1F6A$rhttp://www.securityfocus.com/bid/12037
$B35MW(B:
(BKayako eSupport $B$K$O!"F~NOCM$KBP$9$kBEEv@-$N3NG'$K4XO"$9$kJ#?t$NLdBj$,B8(B
$B:_$9$k5?$$$,$"$j$^$9!#(B1 $B$D$O%/%m%9%5%$%H%9%/%j%W%F%#%s%0$NLdBj$G$"$j!"(B6
$B$D$O(B SQL $B9=J8$rCmF~2DG=$JLdBj$G$9!#(B
(B
$B$3$l$i$NLdBj$,J#9gE*$KMxMQ$5$l$k$H!"%=%U%H%&%'%"$*$h$S%G!<%?%Y!<%9$KBP$9(B
$B$k%;%-%e%j%F%#>e$N6<0R$H$J$k2DG=@-$,$"$j$^$9!#(BCookie $B$KM3Mh$9$kG'>ZMQ>p(B
$BJs$N@`pJs$N3+<($dJQ99!"%P%C%/%(%s%I%G!<%?%Y!<%9http://www.securityfocus.com/bid/12038
$B35MW(B:
(BCrystal Art Crystal FTP $B$O!"%j%b!<%H$+$i%/%i%$%"%s%H%5%$%I$G%P%C%U%!%*!<(B
$B%P!<%U%m!<$,0z$-5/$3$5$l$kLdBj$N1F6A$r:3J$,0z$-5/$3$5$l$k2DG=@-$,$"$j$^$9!#(B
(B
(B5. HTGET URI Buffer Overflow Vulnerability
(BBugTraq ID: 12039
$B%j%b!<%H$+$i$N:F8=@-(B:$B$"$j(B
$B8xI=F|(B: Dec 20 2004
$B4XO"$9$k(B URL:http://www.securityfocus.com/bid/12039
$B35MW(B:
(BHTGET $B$K$O!"%P%C%U%!%*!<%P!<%U%m!<$,H/@8$9$k5?$$$,$"$j$^$9!#%=%U%H%&%'%"(B
$B$,0U?^E*$K:n@.$5$l$?(B URI $B$r=hM}$9$k:]$K!"$3$NLdBj$,H/@8$7$^$9!#(B
(B
$B$3$N967b$K@.8y$9$k$H!"%/%i%$%"%s%H%f!<%6$N%;%-%e%j%F%#%3%s%F%-%9%HFb$GG$(B
$B0U$N%3!<%I$,http://www.securityfocus.com/bid/12040
$B35MW(B:
(BIMG2ASCII $B$K$O!"%j%b!<%H%f!<%6$,G$0U$N%U%!%$%k$r%"%C%W%m!<%I$9$k$N$r5v$7(B
$B$F$7$^$&2DG=@-$,$"$j$^$9!#0-0U$N$"$k(B PHP $B%9%/%j%W%H$,LdBj$N$"$k%3%s%T%e!<(B
$B%?$K%"%C%W%m!<%I$5$l$k>l9g!"%j%b!<%H$+$i%9%/%j%W%H$,MW5a$5$l!"$=$N%3%s%F(B
$B%s%D$,\:Y>pJs$O8xI=$5$l$F$$$^$;$s!#(B
(B
(B7. IBM AIX Diag Local Privilege Escalation Vulnerabilities
(BBugTraq ID: 12041
$B%j%b!<%H$+$i$N:F8=@-(B:$B$J$7(B
$B8xI=F|(B: Dec 20 2004
$B4XO"$9$k(B URL:http://www.securityfocus.com/bid/12041
$B35MW(B:
(Bdiag $B$K$O!"%m!<%+%k$G$N8"8B>:3J$NLdBj$,B8:_$9$k5?$$$,$"$k$HJs9p$5$l$F$$(B
$B$^$9!#$3$NLdBj$O!"(B'DIAGNOSTICS' $B4D6-JQ?t$K$h$j;XDj$5$l$k%"%W%j%1!<%7%g%s(B
$B$re$G4IM}http://www.securityfocus.com/bid/12042
$B35MW(B:
(BPHPFormMail $B$K$O!"(BHTML $B%?%0$rA^F~$5$l$k5?$$$,$"$k$HJs9p$5$l$F$$$^$9!#F~(B
$BNOCM$+$i(B HTML $B%U%)!<%`$r=PNO$9$k$?$a$K@_7W$5$l$?4X?t$K$3$NLdBj$,B8:_$7$^(B
$B$9!#(B
(B
$B$3$N%=%U%H%&%'%"$O(B Cookie $B$r;HMQ$7$?$j%f!<%6%;%C%7%g%s$r%5%]!]%H$7$?$j$7(B
$B$F$$$J$$$H?dB,$5$l$k$?$a!"%;%C%7%g%s%O%$%8%c%C%/$,9T$o$l$k2DG=@-$O$J$$$H(B
$B?dB,$5$l$^$9$,!"$3$NLdBj$K$h$jMM!9$J967b$r5v$7$F$7$^$&2DG=@-$,$"$j$^$9!#(B
(B
(B9. IBM AIX PAGINIT Local Buffer Overflow Vulnerability
(BBugTraq ID: 12043
$B%j%b!<%H$+$i$N:F8=@-(B:$B$J$7(B
$B8xI=F|(B: Dec 20 2004
$B4XO"$9$k(B URL:http://www.securityfocus.com/bid/12043
$B35MW(B:
(Bpaginit $B$K$O!"%m!<%+%k$+$i%P%C%U%!%*!<%P!<%U%m!<$,H/@8$9$k5?$$$,$"$k$HJs(B
$B9p$5$l$F$$$^$9!#(Bpaginit $B$,%3%^%s%I%i%$%s$G%f!<%6$,F~NO$7$?%G!<%?$KBP$7$F(B
$B6-3&%A%'%C%/$r:3J$9$k2DG=@-$N$"$k$3$H$,(B
$BJs9p$5$l$F$$$^$9!#(B
(B
$B967b:3J$5$;$k$3$H$,2DG=$G$9!#(B
(B
(B10. ArGoSoft Mail Server HTML Injection Vulnerability
(BBugTraq ID: 12044
$B%j%b!<%H$+$i$N:F8=@-(B:$B$"$j(B
$B8xI=F|(B: Dec 17 2004
$B4XO"$9$k(B URL:http://www.securityfocus.com/bid/12044
$B35MW(B:
(BArGoSoft Mail Server $B$K$O!"(BHTML $B%?%0$rA^F~$5$l$k5?$$$,$"$k$HJs9p$5$l$F$$(B
$B$^$9!#$3$NLdBj$O!"%f!<%6$,F~NO$7$?%G!<%?$N%5%K%?%$%:=hM}$,E,@Z$Ku67$rMxMQ$7$F(B Cookie $B$KM3Mh$9$kG'>ZMQ>pJs$r(B Web
$B%a!<%k%7%9%F%`$N@55,%f!<%6$+$i@`http://www.securityfocus.com/bid/12045
$B35MW(B:
(BPHP $B6&M-%a%b%j%b%8%e!<%k(B (shmop) $B$O@0?t$rE,@Z$Khttp://www.securityfocus.com/bid/12046
$B35MW(B:
(BKDE Konqueror $B$O!"L5NA$GMxMQ2DG=$J%*!<%W%s%=!<%9$N(B Web $B%V%i%&%6$G$"$j!"(B
(BKDE $B%W%m%8%'%/%H$K$h$jG[I[$dJ]pJs$r3+<($7$?$j%5!<%S%9ITG=>uBV$K4Y$l(B
$B$k$J$I!"$5$^$6$^$JL$FCDj$N967b$,http://www.securityfocus.com/bid/12047
$B35MW(B:
(BPHPFormMail $B$K$O!"(BHTML $B%?%0$rA^F~$5$l$k5?$$$,$"$k$HJs9p$5$l$F$$$^$9!#$3(B
$B$NLdBj$O!"%U%#!<%k%I%(%$%j%"%9$NHsI=<(%U%#!<%k%I$K4XO"$9$kF~NOCM$NBEEv@-(B
$B3NG'%(%i!<$KM3Mh$7$^$9!#(B
(B
$B$3$NLdBj$K$h$j$5$^$6$^$J967b$,0z$-5/$3$5$l$k2DG=@-$,$"$j$^$9!#$3$N%=%U%H(B
$B%&%'%"$O(B Cookie $B$r;HMQ$7$?$j!"%f!<%6%;%C%7%g%s$r%5%]!<%H$7$?$j$7$F$$$J$$(B
$B$3$H$,?dB,$5$l$k$?$a!"%;%C%7%g%s%O%$%8%c%C%/967b$,9T$o$l$k2DG=@-$O$J$$$H(B
$B9M$($i$l$^$9!#(B
(B
(B14. EScripts Software E_Board Directory Traversal Vulnerability
(BBugTraq ID: 12048
$B%j%b!<%H$+$i$N:F8=@-(B:$B$"$j(B
$B8xI=F|(B: Dec 20 2004
$B4XO"$9$k(B URL:http://www.securityfocus.com/bid/12048
$B35MW(B:
(Be_Board $B$K$O!"%G%#%l%/%H%j%H%i%P!<%5%k967b$rhttp://www.securityfocus.com/bid/12049
$B35MW(B:
(BUltrix dxterm $B$O!"%P%C%U%!%*!<%P!<%U%m!<$,H/@8$9$kLdBj$N1F6A$rhttp://www.securityfocus.com/bid/12050
$B35MW(B:
(BTlen.pl $B$K$O!"%9%/%j%W%H$,e$GG$0U$N%9%/%j%W%H%3!<%I$rhttp://www.securityfocus.com/bid/12051
$B35MW(B:
(BEmail Sanitizer $B$N(B MIME $B%?%$%W$N2r@O5!G=$O!"%j%b!<%H$+$i$N967b$K$h$j%5!<(B
$B%S%9ITG=>uBV$K4Y$kLdBj$N1F6A$re(B
$B@55,%f!<%6$X$N%5!<%S%95qH]$r0z$-5/$3$92DG=@-$,$"$j$^$9!#(B
(B
(B18. Google Desktop Search Remote Information Disclosure Vulnerab...
(BBugTraq ID: 12052
$B%j%b!<%H$+$i$N:F8=@-(B:$B$"$j(B
$B8xI=F|(B: Dec 20 2004
$B4XO"$9$k(B URL:http://www.securityfocus.com/bid/12052
$B35MW(B:
(BGoogle Desktop Search $B$O!"%m!<%+%k%3%s%T%e!<%?$KBP$9$k%f!<%6$N8!:w7k2L$,(B
$B%j%b!<%H$N967bl9g$,$"$j$^$9!#(B
(B
(BDesktop Search $B%"%W%j%1!<%7%g%s$K$h$j!"%m!<%+%k$N8!:w7k2L$H$3$N%/%(%j$,(B
$BE}9g$5$l!"E}9g$5$l$?>pJs$,967bhttp://www.securityfocus.com/bid/12054
$B35MW(B:
(BWorkBoard $B$O!"%/%m%9%5%$%H%9%/%j%W%F%#%s%0$K4XO"$9$k$5$^$6$^$JLdBj$N1F6A(B
$B$re$G0-0U$"$k%3!<%I(B
$B$,2rZMQ>pJs$N@`http://www.securityfocus.com/bid/12055
$B35MW(B:
(Bchpox $B$O!"L$FCDj$NLdBj$N1F6A$r\:Y>pJs$O8x3+$5$l$F$$$^$;$s!#>\:Y$,8x3+$5$lhttp://www.securityfocus.com/bid/12057
$B35MW(B:
(BMicrosoft Windows XP Firewall $B$O!"(BACL $B$,2sHr$5$l$kLdBj$,B8:_$9$k5?$$$N$"(B
$B$k$3$H$,Js9p$5$l$F$$$^$9!#$3$NLdBj$O!"%@%$%"%k%"%C%W%$%s%?%U%'!<%9$+$i%U%!(B
$B%$%k$H%W%j%s%?$N6&M-$X$N%"%/%;%9$r%V%m%C%/$9$k(B Windows XP Firewall $B$N@_(B
$BDj$KB8:_$9$k$HJs9p$5$l$F$$$^$9!#(B
(B
$B$3$NLdBj$K$h$j!"%@%$%d%k%"%C%W@\B3$r$7$F$$$k%3%s%T%e!<%?%f!<%6$,$"$?$+$b(B
$B0BA4$G$"$k$+$N$h$&$K8m2r$9$k2DG=@-$,$"$j$^$9!#%f!<%6$O%U%!%$%"%&%)!<%k$K(B
$B$h$j0-0U$"$k967b$+$iJ]8n$5$l$F$$$k$H?.$8$F$7$^$&2DG=@-$,$"$j!"$=$N7k2L$H(B
$B$7$F%f!<%6$N>ZL@=q$r%;%-%e%j%F%#>eITE,@Z$JJ}K!$G07$C$F$7$^$&!"$"$k$$$O5!(B
$BL)>pJs$r6&M-$7$F$7$^$&2DG=@-$,$"$j$^$9!#(B
(B
(B22. GNU Troff (Groff) Insecure Temporary File Creation Vulnerabi...
(BBugTraq ID: 12058
$B%j%b!<%H$+$i$N:F8=@-(B:$B$J$7(B
$B8xI=F|(B: Dec 20 2004
$B4XO"$9$k(B URL:http://www.securityfocus.com/bid/12058
$B35MW(B:
(BGNU Troff (groff) $B$O!"%;%-%e%j%F%#>eITE,@Z$K0l;~%U%!%$%k$r:n@.$7$F$7$^$&(B
$BJ#?t$NLdBj$N1F6A$re$NITHw$KM3Mh$7$^$9!#(B
(B
$B967be=q$-$9$k2DG=@-$,$"$j(B
$B$^$9!#(B
(B
(BGNU Troff (groff) 1.18 $B$K$*$$$F!"$3$l$i$NLdBj$,B8:_$9$k$3$H$,Js9p$5$l$F(B
$B$$$^$9!#$=$NB>$N%P!<%8%g%s$b$3$l$i$NLdBj$N1F6A$r\:Y$,8x3+$5$lhttp://www.securityfocus.com/bid/12059
$B35MW(B:
(BMIT Kerberos 5 $B$N4IM}%i%$%V%i%j$O!"%R!<%WNN0h$G%P%C%U%!%*!<%P!<%U%m!<$,(B
$BH/@8$9$kLdBj$N1F6A$ru672<$GH/@8$9$k%$%s%G%C%/%9%(%i!<$KM3Mh$7$^$9!#(B
(B
$BG'>Z:Q$_$N967b7$/2DG=@-$,$"$j$^$9!#(B
(B
(B24. IBM AIX CHCOD Local Privilege Escalation Vulnerability
(BBugTraq ID: 12060
$B%j%b!<%H$+$i$N:F8=@-(B:$B$J$7(B
$B8xI=F|(B: Dec 21 2004
$B4XO"$9$k(B URL:http://www.securityfocus.com/bid/12060
$B35MW(B:
(BAIX 'chcod' $B%f!<%F%#%j%F%#$K$O!"%m!<%+%k$G$N8"8B>:3J$NLdBj$,B8:_$9$k5?$$(B
$B$,$"$k$HJs9p$5$l$F$$$^$9!#(B
(B
$B%Y%s%@$O!"%Q%9$N=hM}J}K!$,%;%-%e%j%F%#>eITE,@Z$G$"$k$3$H$K$h$j$3$NLdBj$,(B
$BH/@8$9$k$H@bL@$7$F$$$^$9!#(B
(B
$BJs9p$K$h$l$P!"(B'system' $B%0%k!<%W$N%a%s%P$G$"$k%m!<%+%k%f!<%6$O$3$NLdBj$r(B
$BMxMQ$7$F4IM}http://www.securityfocus.com/bid/12061
$B35MW(B:
(BAIX 'lsvpd' $B%f!<%F%#%j%F%#$K$O!"%m!<%+%k$G$N8"8B>:3J$NL$FCDj$NLdBj$,B8:_(B
$B$9$k5?$$$,$"$k$HJs9p$5$l$F$$$^$9!#%Y%s%@$O!"%Q%9$N=hM}J}K!$,%;%-%e%j%F%#(B
$B>eITE,@Z$G$"$k$3$H$K$h$j$3$NLdBj$,H/@8$9$k$H@bL@$7$F$$$^$9!#(B
(B
$BJs9p$K$h$l$P!"(B'invscout' $B%f!<%F%#%j%F%#$r;HMQ$9$k$H!"$9$Y$F$N%m!<%+%k%f!<(B
$B%6$,$3$NLdBj$rMxMQ$G$-$k2DG=@-$,$"$k$3$H$,Js9p$5$l$F$$$^$9!#(B
(B
(B26. Symantec Brightmail AntiSpam Quarantine Multiple Remote Deni...
(BBugTraq ID: 12063
$B%j%b!<%H$+$i$N:F8=@-(B:$B$"$j(B
$B8xI=F|(B: Dec 21 2004
$B4XO"$9$k(B URL:http://www.securityfocus.com/bid/12063
$B35MW(B:
(BSymantec $B$N(B Brightmail AntiSpam $B$N(B Quarantine $B%3%s%]!<%M%s%H$O!"%j%b!<%H(B
$B$+$i$N967b$K$h$j%5!<%S%9ITG=>uBV$K4Y$kJ#?t$NLdBj$N1F6A$ru67$r%"%W(B
$B%j%1!<%7%g%s$,E,@Z$K=hM}$7$J$$$3$H$KM3Mh$7$^$9!#(B
(B
$BBh(B 1 $B$NLdBj$O!"%f!<%6$N(B Quarantine $B%U%)%k%@$K2aEY$KB??t$N%9%Q%`%a%C%;!<(B
$B%8$,J]B8$5$l$?$H$-$KH/@8$7$^$9!#BhFs$NLdBj$O!"DLCN$r9T$&:]$K(B Notifier $B$G(B
(BSMTP $B%(%i!<$,H/@8$9$k$H$-5/$3$j$^$9!#(B
(B
$B967bhttp://www.securityfocus.com/bid/12064
$B35MW(B:
(BMy Firewall Plus $B$K$O!"%m!<%+%k$G$N8"8B>:3J$NLdBj$,B8:_$9$k5?$$$,$"$k$H(B
$BJs9p$5$l$F$$$^$9!#(B
(B
$B$3$NLdBj$O!"%=%U%H%&%'%"$,(B SYSTEM $B8"8B$G%X%k%W%"%W%j%1!<%7%g%s$r5/F0$7$F(B
$B$7$^$&@_7W>e$NITHw$KM3Mh$7$^$9!#(B
(B
(BMy Firewall Plus 5.0 $B$K$*$$$F!"$3$NLdBj$,B8:_$9$k$HJs9p$5$l$F$$$^$9!#$=(B
$B$NB>$N%P!<%8%g%s$b1F6A$rhttp://www.securityfocus.com/bid/12065
$B35MW(B:
(BSpy Sweeper Enterprise $B$K$O!"%m!<%+%k$G$N8"8B>:3J$NLdBj$,B8:_$9$k5?$$$,(B
$B$"$k$HJs9p$5$l$F$$$^$9!#(B
(B
$B$3$NLdBj$O!"%=%U%H%&%'%"$,(B SYSTEM $B8"8B$G%X%k%W%"%W%j%1!<%7%g%s$r5/F0$7$F(B
$B$7$^$&@_7W>e$NITHw$KM3Mh$7$^$9!#(B
(B
(BSpy Sweeper Enterprise 1.5.1 $B$K$*$$$F!"$3$NLdBj$,B8:_$9$k$HJs9p$5$l$F$$(B
$B$^$9!#$=$NB>$N%P!<%8%g%s$b1F6A$rhttp://www.securityfocus.com/bid/12066
$B35MW(B:
(BWordpress $B$O!"%/%m%9%5%$%H%9%/%j%W%F%#%s%0$*$h$S(BSQL $B9=J8$rCmF~$9$k967b$r(B
$Bhttp://www.securityfocus.com/bid/12068
$B35MW(B:
(BLibVNCServer $B$O!"L$FCDj$NJ#?t$NLdBj$N1F6A$ruBV$,0z$-5/$3(B
$B$5$l$k!"$5$i$K$O%7%9%F%`$KBP$9$k6<0R$r>7$/2DG=@-$,$"$j$^$9$,!"$3$l$K$D$$(B
$B$F$OL$8!>Z$G$9!#(B
(B
(B31. PHPAuction Administrative Interface Authentication Bypass Vu...
(BBugTraq ID: 12069
$B%j%b!<%H$+$i$N:F8=@-(B:$B$"$j(B
$B8xI=F|(B: Dec 21 2004
$B4XO"$9$k(B URL:http://www.securityfocus.com/bid/12069
$B35MW(B:
(BPhpAuction $B$K$O!"G'>Z$,2sHr$5$l$kLdBj$,B8:_$9$k5?$$$,$"$k$HJs9p$5$l$F$$(B
$B$^$9!#$3$NLdBj$O!"(BPhpAuction $B$N4IM}%$%s%?%U%'!<%9$X$N%"%/%;%9@)8f$K;HMQ(B
$B$5$l$k%7%9%F%`$N@_7W$,@HZ%7%9%F(B
$B%`$r2sHr$7$F!"4IM}%$%s%?%U%'!<%9$K%"%/%;%9$9$k2DG=@-$,$"$j$^$9!#(B
(B
(B32. XPDF DoImage Remote Buffer Overflow Vulnerability
(BBugTraq ID: 12070
$B%j%b!<%H$+$i$N:F8=@-(B:$B$"$j(B
$B8xI=F|(B: Dec 21 2004
$B4XO"$9$k(B URL:http://www.securityfocus.com/bid/12070
$B35MW(B:
(Bxpdf $B$K$O!"%j%b!<%H$+$i$N967b$K$h$j%P%C%U%!%*!<%P!<%U%m!<$,H/@8$9$k5?$$(B
$B$,$"$k$HJs9p$5$l$F$$$^$9!#$3$NLdBj$O!"%f!<%6$,F~NO$7$?%G!<%?$r%W%m%;%9%P%C(B
$B%U%!$K%3%T!<$9$kA0$K6-3&%A%'%C%/$,%"%W%j%1!<%7%g%s$K$h$jE,@Z$K9T$o$l$F$$(B
$B$J$$$?$a$KH/@8$7$^$9!#%j%b!<%H$N967bl(B
$B9g$O!"(BPDF $B$,E,@Z$J%/%i%$%"%s%H%"%W%j%1!<%7%g%s$+$i%/%j%C%/$5$l$k$H!"(B
(Bxpdf $B$,<+F0E*$K5/F0$9$k$?$a!"(BWeb $B$^$?$OEE;R%a!<%k$r2p$7$F$3$N967b$,9T$o(B
$B$l$k2DG=@-$,$"$j$^$9!#(B
(B
(Bxpdf 3.00 $B$K$*$$$F$3$NLdBj$N1F6A$rhttp://www.securityfocus.com/bid/12071
$B35MW(B:
(BRosiello Security $B$N(B rftpd $B$O!"%j%b!<%H$+$iZ%9%-!<%`$,%"%W%j%1!<%7%g%s$K$h$jE,@Z$KpJsO31L$K4XO"$9$kJ#?t$NLdBj$N1F6A$r(B
$BuBV$,0z$-5/$3$5$l$k!"%U%!%$%k$*$h$S(B
$B%G%#%l%/%H%j$N%Q!<%_%C%7%g%s$,2sHr$5$l$k!"$=$7$FLdBj$N$"$k%5!<%P%W%m%;%9(B
$B$N8"8B$GG$0U$N%3!<%I$,http://www.securityfocus.com/bid/12072
$B35MW(B:
(BPerl $B$O!"%m!<%+%k$G6%9g>uBV$,H/@8$9$k5?$$$N$"$k$3$H$,Js9p$5$l$F$$$^$9!#(B
(B'File::Path' $B%b%8%e!<%k$K$h$jDs6!$5$l$F$$$k(B 'rmtree()' $B4X?t$K$3$NLdBj$,(B
$BB8:_$7$^$9!#(B
(B
$B%m!<%+%k$N967buBV$rMxMQ$7$F!"@x:_E*$K=EMW$J%G!<%?$r3+<($9$k!"(B
$B$"$k$$$OLdBj$N$"$k4X?t$r;HMQ$9$k%"%W%j%1!<%7%g%s$KBP$7$F$=$NB>$N967b$r;n(B
$B$_$k2DG=@-$,$"$j$^$9!#(B
(B
(B35. Rosiello Security RPF Multiple Remote And Local Vulnerabilit...
(BBugTraq ID: 12073
$B%j%b!<%H$+$i$N:F8=@-(B:$B$"$j(B
$B8xI=F|(B: Dec 21 2004
$B4XO"$9$k(B URL:http://www.securityfocus.com/bid/12073
$B35MW(B:
(BRosiello Security rpf $B$O!"%j%b!<%H$+$i$N967b$K$h$k%P%C%U%!%*!<%P!<%U%m!<(B
$B$NLdBj$*$h$S%m!<%+%k$G%7%s%\%j%C%/%j%s%/967b$rZ$5$l$J$$$3$H!"$*$h$S%m!<%+%k$G%7%s%\%j%C%/%j(B
$B%s%/967b$re$NITHw$KM3Mh$7$^$9!#(B
(B
$B%P%C%U%!%*!<%P!<%U%m!<$NLdBj$K$h$j!"%j%b!<%H$N967b:(B
$B3J$r9T$&2DG=@-$,$"$j$^$9!#%7%s%\%j%C%/%j%s%/$NLdBj$K$h$j!"967bhttp://www.securityfocus.com/bid/12075
$B35MW(B:
(Blibtiff $B$O%R!<%WNN0h$,GK2u$5$l$k(B 2 $B$D$NLdBj$N1F6A$re$O!"967bhttp://www.securityfocus.com/bid/12076
$B35MW(B:
(Bxine $B$*$h$S(B MPlayer $B%f!<%F%#%j%F%#$K$O!"%P%C%U%!%*!<%P!<%U%m!<$,H/@8$9$k(B
$BJ#?t$NLdBj$,B8:_$9$k$3$H$,Js9p$5$l$F$$$^$9!#Js9p$5$l$F$$$kLdBj$O!"0J2<$N(B
$B$H$*$j$G$9!#(B
(B
(B'pnm_get_chunk()' $B4X?t$K$O!"%P%C%U%!%*!<%P!<%U%m!<$,H/@8$9$k$$$/$D$+$NLd(B
$BBj$,B8:_$9$k$3$H$,Js9p$5$l$F$$$^$9!#(B
(B
(B'pnm_get_chunk()' $B$N(B RMF_TAG$B!"(BDATA_TAG$B!"(BPROP_TAG$B!"(BMDPR_TAG $B$*$h$S(B
(BCONT_TAG $B$rhttp://www.securityfocus.com/bid/12077
$B35MW(B:
(BHP-UX $B$KF1:-$5$l$F$$$k(B FTP $B%5!<%P$O!"%G%P%C%0=PNO$r5-O?$9$k$h$&$K@_Dj$5(B
$B$l$F$$$k>l9g$K!";vA0G'>Z$K$*$$$F%j%b!<%H$+$i%P%C%U%!%*!<%P!<%U%m!<$,0z$-(B
$B5/$3$5$l$kLdBj$,B8:_$7$^$9!#$3$l$O%G%U%)%k%H$N@_Dj$G$O$"$j$^$;$s!#$I$3$+(B
$B$N;~E@$G4IM}l9g$KLdBj$,H/@8$7$^$9!#%j%b!<%H$N967b(B
$Be$G(B root $B8"8B$rC%http://www.securityfocus.com/bid/12078
$B35MW(B:
(BDebian $B$N(B debmake $B$O!"%;%-%e%j%F%#>eITE,@Z$K%m!<%+%k$G%U%!%$%k$,:n@.$5$l(B
$B$kLdBj$N1F6A$reITE,@Z$JJ}K!$G0l;~%U%!%$%k$r:n@.$7$F$7$^$&@_7W>e$NITHw$KM3Mh$7$^$9!#(B
(B
$B967bhttp://www.securityfocus.com/bid/12079
$B35MW(B:
(BLinux Kernel $B$K$O!"%m!<%+%k$G$N8"8B>:3J$NLdBj$,B8:_$9$k5?$$$,$"$k$HJs9p(B
$B$5$l$F$$$^$9!#$3$NLdBj$K$h$j967b:3J$7!"LdBj$N$"$k%3%s%T%e!<%?(B
$B$r40A4$K@)8f$9$k2DG=@-$,$"$j$^$9!#(B
(B
(B32 $B%S%C%H8_49%7%9%F%`$N%3!<%k%O%s%I%i$,L$FCDj$N0z?t$rE,@Z$K8!>Z$7$F$$$J(B
$B$$$?$a$K!"$3$NLdBj$,H/@8$9$k$3$H$,Js9p$5$l$F$$$^$9!#$3$NLdBj$O!"(BAMD64 $B%W(B
$B%i%C%H%U%)!<%`$G$N$_H/@8$7$^$9!#(B
(B
(BLinux Kernel 2.4.x $B7O$N%P!<%8%g%s$K$*$$$F!"$3$NLdBj$N1F6A$r\:Y$O!"8=;~E@$G$OITL@$G$9!#>\:Y>pJs$,8x3+$5$lhttp://www.securityfocus.com/bid/12080
$B35MW(B:
(BSybase Adaptive Server Enterprise $B$O!"L$FCDj$NJ#?t$NLdBj$,B8:_$9$k5?$$$N(B
$B$"$k$3$H$,Js9p$5$l$F$$$^$9!#(B
(B
$B$3$l$i$NLdBj$N860x$*$h$S1F6A$K$D$$$F$O!"8=;~E@$G$OITL@$G$9!#$3$l$i$NLdBj(B
$B$K$h$j%m!<%+%k$*$h$S%j%b!<%H$+$i$N967b$,2DG=$H$J$k$3$H$,?dB,$5$l$^$9!#$3(B
$B$l$i$NLdBj$N8!=P$K4XM?$7$?8&5fe$N%j%9(B
$B%/$O$,Hs>o$K9b$$$H9M$($F$$$^$9!#(B2005 $BG/(B 3 $B7n$^$G$3$l$i$NLdBj$NFCDj$N>\:Y(B
$B>pJs$O8x3+$5$l$J$$M=Dj$G$9!#(B
(B
(BSybase Adaptive Server Enterprise 12.5.2 $B0JA0$K$*$$$F!"$3$l$i$NLdBj$,B8(B
$B:_$9$k$3$H$,Js9p$5$l$F$$$^$9!#(B
(B
$B>\:Y$,8x3+$5$lhttp://www.securityfocus.com/bid/12081
$B35MW(B:
(BSkype Technologies $B$N(B Skype $B$O!"%G%U%)%k%H$N%$%s%9%H!<%k;~$K%;%-%e%j%F%#(B
$B>eITE,@Z$J@_Dj$,$5$l$kLdBj$N1F6A$reITE,@Z$J@_Dj$,$5$l$F$$$k%G%#%l%/%H%j$K%U%!%$(B
$B%k$r:n@.$9$k2DG=@-$,$"$j$^$9!#(B
(B
(B43. 2BGal Remote SQL Injection Vulnerability
(BBugTraq ID: 12083
$B%j%b!<%H$+$i$N:F8=@-(B:$B$"$j(B
$B8xI=F|(B: Dec 22 2004
$B4XO"$9$k(B URL:http://www.securityfocus.com/bid/12083
$B35MW(B:
(B2Bgal $B$O!"%j%b!<%H$+$i(B SQL $B9=J8$rCmF~$9$k967b$rpJs$,3+<($5$l$?$jGK2u$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#(B
(B
(B44. Snort DecodeTCPOptions Remote Denial Of Service Vulnerabilit...
(BBugTraq ID: 12084
$B%j%b!<%H$+$i$N:F8=@-(B:$B$"$j(B
$B8xI=F|(B: Dec 22 2004
$B4XO"$9$k(B URL:http://www.securityfocus.com/bid/12084
$B35MW(B:
(BSnort $B$K$O!"%j%b!<%H$+$i$N967b$K$h$j%5!<%S%9ITG=>uBV$K4Y$k5?$$$,$"$k$HJs(B
$B9p$5$l$F$$$^$9!#$3$NLdBj$O!"(B'decode.c' $B%U%!%$%k$N(B DecodeTCPOptions() $B4X(B
$B?t$KB8:_$9$k$HJs9p$5$l$F$$$^$9!#$^$?!"0-0U$"$k(B TCP $B%Q%1%C%H$,E,@Z$K=hM}(B
$B$5$l$J$$7k2L$H$7$FH/@8$7$^$9!#(B
(B
$B%j%b!<%H$N967bhttp://www.securityfocus.com/bid/12085
$B35MW(B:
(BSSLTelnetd $B$O!"L$FCDj$N%U%)!<%^%C%H%9%H%j%s%0$NLdBj$N1F6A$r\:Y>pJs$O8x3+$5$l$F$$$^$;$s!#LdBj$N$"$k(B
$B%"%W%j%1!<%7%g%s$N@-e!"$3$NLdBj$O%j%b!<%H$+$iMxMQ$5$l$k$3$H$,?dB,$5$l(B
$B$^$9!#(B
(B
(BLinux Netkit netkit-telnet-ssl 0.17.17 $B$K$*$$$F$3$NLdBj$N1F6A$r$N%P!<%8%g%s$b1F6A$r\:Y$,8x3+$5$lhttp://www.securityfocus.com/bid/12086
$B35MW(B:
(BSurgeMail $B$K$O!"L$FCDj$NLdBj$,B8:_$9$k5?$$$,$"$k$HJs9p$5$l$F$$$^$9!#(B
(BSurgeMail $B%5!<%P$N(B Webmail $B5!G=$,$3$NLdBj$N1F6A$re$N>\:Y$O8x3+$5$l$F$$$^$;$s!#$3$N%"%W%j%1!<%7%g%s$N@-e!"(B
(B
$B$3$NLdBj$OF~NOCM$NBEEv@-3NG'%(%i!<$KM3Mh$9$k$3$H$,?dB,$5$l$^$9!#L$3NG'$G(B
$B$9$,!"$3$NLdBj$O%j%b!<%H$+$i$bMxMQ2DG=$G$"$k$H9M$($i$l$^$9!#(B
(B
(BSurgeMail 2.2c9 $B$h$jA0$N%j%j!<%9$,!"$3$NLdBj$N1F6A$r\:Y$,ITL@$J$?$a!"99$J$k>pJs$O8=;~E@$G$ODs6!$5$l$F$$$^$;$s!#>\:Y$,8x3+$5(B
$B$lhttp://www.securityfocus.com/bid/12087
$B35MW(B:
(BDocbook-To-Man $B$O!"%;%-%e%j%F%#>eITE,@Z$K0l;~%U%!%$%k$r:n@.$7$F$7$^$&Ld(B
$BBj$N1F6A$re$G%;%-%e%j%F%#>eITE,@Z$K%U%!%$%k$r:n@.$7$F$7$^$&@_7W>e$N(B
$BITHw$KM3Mh$7$^$9!#(B
(B
$B967bhttp://www.securityfocus.com/bid/12088
$B35MW(B:
(BLPRng $B$N(B 'lprng_certs.sh' $B%9%/%j%W%H$O!"%;%-%e%j%F%#>eITE,@Z$K0l;~%U%!%$(B
$B%k$r:n@.$7$F$7$^$&LdBj$N1F6A$re$G%;%-%e%j%F%#>e(B
$BITE,@Z$K%U%!%$%k$r:n@.$7$F$7$^$&@_7W>e$NITHw$KM3Mh$7$^$9!#(B
(B
$B967bhttp://www.securityfocus.com/bid/12089
$B35MW(B:
(BPsychoStats $B$K$O!"%/%m%9%5%$%H%9%/%j%W%F%#%s%0967b$rZMQ>pJs$N@`http://www.securityfocus.com/bid/12091
$B35MW(B:
(BMicrosoft Windows $B$K$O!"@0?t%*!<%P!<%U%m!<$NLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#(B
$B$3$NLdBj$O!"(B'winhlp32.exe' $B$KB8:_$7!"0U?^E*$K:n@.$5$l$?%U%l!<%:$,AH$_9~(B
$B$^$l$?(B Windows Help $B%U%!%$%k(B (.hlp) $B$,%W%m%0%i%`$K$h$C$F=hM}$5$l$k$H$-$K(B
$BH/@8$7$^$9!#(B
(B
$B$3$N967b$,@.8y$9$k$H!"0-0U$"$k%X%k%W%U%!%$%k$r3+$$$?%f!<%6$N%;%-%e%j%F%#(B
$B%3%s%F%-%9%H$G!"G$0U$N%3!<%I$,l9g$,$"$k$?$a!"$3$l$O(B
$B;ve%j%b!<%H$NLdBj$H9M$($i$l$^$9!#(B
(B
(B51. Microsoft Windows winhlp32 Phrase Heap Overflow Vulnerabilit...
(BBugTraq ID: 12092
$B%j%b!<%H$+$i$N:F8=@-(B:$B$"$j(B
$B8xI=F|(B: Dec 23 2004
$B4XO"$9$k(B URL:http://www.securityfocus.com/bid/12092
$B35MW(B:
(BMicrosoft Windows $B$O!"%R!<%WNN0h$G%P%C%U%!%*!<%P!<%U%m!<$,H/@8$9$kLdBj$N(B
$B1F6A$rl9g$,$"$k$?$a!"$3$l$O(B
$B;ve%j%b!<%H$NLdBj$H9M$($i$l$^$9!#(B
(B
(B52. Linux Security Modules Process Capabilities Design Error
(BBugTraq ID: 12093
$B%j%b!<%H$+$i$N:F8=@-(B:$B$J$7(B
$B8xI=F|(B: Dec 23 2004
$B4XO"$9$k(B URL:http://www.securityfocus.com/bid/12093
$B35MW(B:
(BLinux Security Modules $B$K$O!"%[%9%H$KBP$9$k%;%-%e%j%F%#>e$N6<0R$r>7$/@_(B
$B7W>e$NITHw$,B8:_$9$k$3$H$,Js9p$5$l$F$$$^$9!#(BLSM $B$,%+!<%M%k%b%8%e!<%k$H$7(B
$B$F%m!<%I$5$l$k$H$-$K!"%7%9%F%`>e$N4{B8$N%W%m%;%9$K5v2D$5$l$F$$$J$$8"8B$,(B
$BIUM?$5$l$k$3$H$,Js9p$5$l$F$$$^$9!#$3$l$K$O!"(Broot $B0J30$N%W%m%;%9$b4^$^$l(B
$B$^$9!#%7%9%F%`>e$N0-0U$N$"$k%f!<%6$O!"$3$N$H$-$K!"4IM}eC%http://www.securityfocus.com/bid/12094
$B35MW(B:
(BMicrosoft Windows $B$O!"0U?^E*$K:n@.$5$l$?(B ANI $B%U%!%$%k$r=hM}$9$k$H$-$K%5!<(B
$B%S%9ITG=>uBV$K4Y$k5?$$$N$"$k$3$H$,Js9p$5$l$F$$$^$9!#(BMicrosoft Windows $B$N(B
$B%+!<%M%k$O!"(BANI $B%U%!%$%k%X%C%@$K@_Dj$5$l$F$$$k%U%l!<%`?t$d%l!<%H?t$KBP$9(B
$B$k%5%K%?%$%:=hM}$,E,@Z$K9T$o$l$J$$$?$a!"%7%9%F%`$,%/%i%C%7%e$9$k2DG=@-$,(B
$B$"$j$^$9!#(B
(B
(B54. Microsoft Windows LoadImage API Function Integer Overflow Vu...
(BBugTraq ID: 12095
$B%j%b!<%H$+$i$N:F8=@-(B:$B$"$j(B
$B8xI=F|(B: Dec 20 2004
$B4XO"$9$k(B URL:http://www.securityfocus.com/bid/12095
$B35MW(B:
(BMicrosoft Windows $B$K$O!"%j%b!<%H$+$i$N967b$K$h$j@0?t%*!<%P!<%U%m!<$,H/@8(B
$B$9$k5?$$$,$"$k$HJs9p$5$l$F$$$^$9!#$3$NLdBj$O!"%f!<%6$NF~NOCM$K$h$C$F@0?t(B
$BCM$N%*!<%P!<%U%m!<$,H/@8$7$J$$$h$&$K$9$k$?$a$N3NG'$,E,@Z$K9T$o$l$J$$$3$H(B
$B$KM3Mh$7$^$9!#$3$NLdBj$K$h$j!"%a%b%j%P%C%U%!$N6-3&$rD6$($F%G!<%?$,%3%T!<(B
$B$5$l$F$7$^$&2DG=@-$,$"$j$^$9!#(B
(B
$B$3$NLdBj$O!"(BUSER32 $B%i%$%V%i%j$N(B 'LoadImage' $B4X?t$KB8:_$9$k$3$H$,Js9p$5$l(B
$B$F$$$^$9!#(B
(B
$B967bu(B
$B67$rMxMQ$9$k$3$H$,2DG=$G$9!#%f!<%6$,$3$N%U%!%$%k$r3+$/$H$-$K!"@0?t%*!<%P!<(B
$B%U%m!<$,0z$-5/$3$5$l$k2DG=@-$,$"$j$^$9!#$3$N967b$,@.8y$9$k$H!"LdBj$N$"$k(B
$B%f!<%6$N%;%-%e%j%F%#%3%s%F%-%9%HFb$GH/@8$7!"LdBj$N$"$k%3%s%T%e!<%?$X$NIT(B
$B@5$J%"%/%;%9$,9T$o$l$k2DG=@-$,$"$j$^$9!#(B
(B
(B55. Nullsoft SHOUTcast File Request Format String Vulnerability
(BBugTraq ID: 12096
$B%j%b!<%H$+$i$N:F8=@-(B:$B$"$j(B
$B8xI=F|(B: Dec 23 2004
$B4XO"$9$k(B URL:http://www.securityfocus.com/bid/12096
$B35MW(B:
(BNullsoft SHOUTcast $B$K$O!"%j%b!<%H$+$iMxMQ2DG=$J%U%)!<%^%C%H%9%H%j%s%0$N(B
$BLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#(B
(B
$B%5!<%P$,%U%!%$%k$KBP$9$k%/%i%$%"%s%H%j%/%(%9%H$r=hM}$9$k$H$-$K!"$3$NLdBj(B
$B$,H/@8$7$^$9!#(B
(B
$B967b$,@.8y$9$k$H!"%5!<%P%W%m%;%9$N%;%-%e%j%F%#%3%s%F%-%9%HFb$GG$0U$N%3!<(B
$B%I$,$N%W%i%C%H%U%)!<%`MQ$N%P!<%8%g%s$K$*$$$F$b!"$3$NLdBj$N1F6A(B
$B$rhttp://www.securityfocus.com/bid/12097
$B35MW(B:
(BWPKontakt $B$K$O!"%9%/%j%W%H$,e$Ghttp://www.securityfocus.com/bid/12098
$B35MW(B:
(BHP $B$O!"(BHP-UX $B$N(B SAM $B%3%s%]!<%M%s%H$K1F6A$rM?$($kLdBj$,B8:_$9$k$3$H$r8xI=(B
$B$7$^$7$?!#$3$NLdBj$N>\:Y$O$^$@L@3N$K$J$C$F$O$$$^$;$s!#%m!<%+%k%f!<%6$,IT(B
$B@5$K8"8B$rC%\:Y$,(B
$BL@$i$+$K$J$jhttp://www.securityfocus.com/bid/12099
$B35MW(B:
(BHP-UX $B$K$O!"%j%b!<%H$+$i$N967b$K$h$j%P%C%U%!%*!<%P!<%U%m!<$,H/@8$9$k5?$$(B
$B$,$"$k$HJs9p$5$l$F$$$^$9!#(BNetscape Directory Server $B$,(B LDAP $B$r;HMQ$7$F$$(B
$B$k(B HP-UX $B>e$KG[Hw$5$l$F$$$k$H$-!"$3$NLdBj$,H/@8$9$k2DG=@-$,$"$j$^$9!#(B
(B
$B$3$NLdBj$O!"%f!<%6$,F~NO$7$?%G!<%?$,%W%m%;%9%P%C%U%!$K%3%T!<$5$l$kA0$K6-(B
$B3&%A%'%C%/$,%"%W%j%1!<%7%g%s$K$h$jE,@Z$Ke$N>\:Y>pJs$O8x3+$5$l$F$$(B
$B$^$;$s!#(B
(B
$B>\:Y$,8x3+$5$lhttp://www.securityfocus.com/bid/12100
$B35MW(B:
(Bxdvizilla $B$O!"(BMozilla $B%Y!<%9$N%V%i%&%6$GI=<($9$k(B DVI $B%U%!%$%k$rE}9g$9$k(B
$B%9%/%j%W%H$G$9!#(Bxdvizilla $B$O!"(BDebian tetex-bin $B%Q%C%1!<%8$KeITE,@Z$K0l;~%U%!%$%k$,:n@.$5$l$kLdBj$,B8:_$9(B
$B$k5?$$$N$"$k$3$H$,Js9p$5$l$F$$$^$9!#(B
(B
$B$3$NLdBj$O!"%"%W%j%1!<%7%g%s$,%U%!%$%k$X$N=q$-9~$_A0$K%U%!%$%k$NB8:_$r3N(B
$BG'$7$J$$$H$$$&@_7W>e$NITHw$KM3Mh$9$k2DG=@-$,$"$j$^$9!#(B
(B
$B967be=q$-$9$k2DG=@-$,(B
$B$"$j$^$9!#(B
(B
(Btetex-bin 2.0.2 $B$K$3$NLdBj$,B8:_$9$k5?$$$N$"$k$3$H$,Js9p$5$l$F$$$^$9!#$=(B
$B$NB>$N%P!<%8%g%s$b1F6A$rhttp://www.securityfocus.com/bid/12101
$B35MW(B:
(BLinux Kernel $B$O!"(BELF $B%P%$%J%j$N%m!<%I$K4XO"$9$kLdBj$N1F6A$r7$/2DG=@-$,$"$j$^$9!#(B
(B
(B61. ZeroBoard Multiple Remote Script Injection And Cross-Site Sc...
(BBugTraq ID: 12103
$B%j%b!<%H$+$i$N:F8=@-(B:$B$"$j(B
$B8xI=F|(B: Dec 24 2004
$B4XO"$9$k(B URL:http://www.securityfocus.com/bid/12103
$B35MW(B:
(BZeroBoard $B$O!"%9%/%j%W%H$rA^F~$9$k967b$d%/%m%9%5%$%H%9%/%j%W%F%#%s%0967b(B
$B$r7$$$?(B
$B$j!"(BCookie $B$KM3Mh$9$kG'>ZMQ>pJs$N@`$N967b$,http://www.securityfocus.com/bid/12104
$B35MW(B:
(BYACY $B$O!"%/%m%9%5%$%H%9%/%j%W%F%#%s%0$K4XO"$9$kJ#?t$NLdBj$N1F6A$rZMQ>pJs$N@`$N967b$,0z$-5/$3$5$l$k2DG=@-$,$"$j$^$9!#(B
(B
(BIII.SECURITYFOCUS NEWS ARTICLES
(B--------------------------------
(B1. Groups fight Internet wiretap push
$BCxZ$7$h$&$H!"(BFBI $B$rD4::$7$F$$$^$9!#(B
(B
(Bhttp://www.securityfocus.com/news/10192
(B
(B2. Report: DHS cyber security lagging
$BCxc>J$G@Hhttp://www.securityfocus.com/news/10148
(B
(B3. Long prison term for Lowe's wi-fi hacker
$BCxhttp://www.securityfocus.com/news/10138
(B
(B4. 'Metal Gear' Trojan targets Symbian phones
$BCxhttp://www.securityfocus.com/news/10185
(B
(B5. Popular BitTorrent site shuts down after flurry of suits
$BCxhttp://www.securityfocus.com/news/10166
(B
(B6. NASA hacker jailed for six months
$BCxhttp://www.securityfocus.com/news/10164
(B
(BIV.SECURITYFOCUS TOP 6 TOOLS
(B-----------------------------
(B1. Interface Traffic Indicator 1.2.3
$B:nhttp://software.ccschmidt.de/#inftraffic
$BF0:n4D6-(B:Windows 2000$B!"(BWindows NT$B!"(BWindows XP
$B35MW(B:
(B
(BInterface Traffic Indicator $B$O!"%$%s%?%U%'!<%9$NCe?.$*$h$SAw?.%H%i%U%#%C(B
$B%/$r%S%C%H(B/$BIC!"$*$h$S%P%$%H(B/$BIC!"$^$?$OMxMQN($GB,Dj$9$k$?$a$N%0%i%U%f!<%F%#(B
$B%j%F%#$G$9!#(BSNMP $B$r%5%]!<%H$7$F$$$k$9$Y$F$N%G%P%$%9(B ($B%3%s%T%e!<%?!"(BNIC$B!"(B
$B%9%$%C%A!"%k!<%?$J$I(B) $B>e$GF0:n$7!"%]!<%j%s%04V3V$rD4@0(B ($B:G>.$G(B 3 $BIC(B) $B$G(B
$B$-$^$9!#$3$N%W%m%0%i%`$r9bEY$J%M%C%H%o!<%/4D6-$G;HMQ$7!"A*Br$7$?%M%C%H%o!<(B
$B%/%$%s%?%U%'!<%9(B ($B%G%P%$%9$K$h$j>pJs$,Ds6!$5$l$k>l9g$K$O!"%P%C%/%W%l!<%s(B
$B%]!<%H$bBP>]$H$J$j$^$9(B) $B$r4F;k$G$-$^$9!#$^$?!"<+Bp$N%M%C%H%o!<%/$G$b;HMQ(B
$B$G$-$^$9!#(B
(B
(B2. Colasoft Capsa 4.05
$B:nhttp://www.colasoft.com/
$BF0:n4D6-(B:Windows 2000$B!"(BWindows 95/98$B!"(BWindows NT$B!"(BWindows XP
$B35MW(B:
(B
(BCapsa $B$O!"6/NO$J5!G=$bHw$($J$,$i;H$$>!http://www.computec.ch/projekte/atk/
$BF0:n4D6-(B:Windows 2000$B!"(BWindows 95/98$B!"(BWindows NT$B!"(BWindows XP
$B35MW(B:
(B
(BAttack Tool Kit (ATK) $B$O!"?/F~%F%9%H$H6/2=$5$l$?%;%-%e%j%F%#4F::$rDs6!$9(B
$B$k%*!<%W%s%=!<%9$N%f!<%F%#%j%F%#$G$9!#(BATK 3.0 $B$K$*$1$k$b$C$H$b=EMW$JJQ99(B
$B$O!"@lMQ$N?/F~;n9T%k!<%A%s$H(B Plugin AutoUpdate (HTTP $B$r;HMQ(B) $B$,F3F~$5$l(B
$B$F$$$kE@$G$9!#(B
(B
(B4. One-Time Password Generator 1.0
$B:nhttp://marcin.studio4plus.com/en/otpgen/
$BF0:n4D6-(B:Java
$B35MW(B:
(B
(BJava $BBP1~$N7HBSEEOCMQ$N%o%s%?%$%`$N%Q%9%o!<%I@8@.%D!<%k(B (One-Time
(BPassword Generator) $B$G$9!#%$%s%?%U%'!<%9$O!"I,MW$J%-!.8B$KM^$((B
$B$k$h$&$K@_7W$5$l$F$$$^$9!#(B
(B
(B5. tenshi 0.3.2
$B:nhttp://tenshi.gentoo.org/
$BF0:n4D6-(B: Perl (any system supporting perl)
$B35MW(B:
(B
(Btenshi $B$O!"%f!<%6$,Dj5A$7$?@55,I=8=$H0lCW$7$?9T$N%m%0%U%!%$%k$r4F;k$7!"(B
$B$=$N7k2L$rJs9p$9$k$h$&$K@_7W$5$l$?!"%m%04F;kMQ%=%U%H%&%'%"$G$9!#@55,I=8=(B
$B$O!"7Y9p4V3V$*$h$S%a!<%k$Nhttp://www.elitelabs.org/
$BF0:n4D6-(B:Linux
$B35MW(B:
(B
(Bpasmal 1.5 $B$O!"C1=c$^$?$O0E9f2=$5$l$?(B TCP/UDP/ICMP $B%Q%1%C%H$r;HMQ$9$k%]!<(B
$B%H%N%C%-%s%0G'>Z%7%9%F%`$G$9!#(Bpasmal $B$O!"(Biptable $B$d(B ipchain ($B%U%!%$%"%&%)!<(B
$B%kMQ(B)$B!"$^$?$OB>$NG$0U$N%W%m%0%i%`(B ($B%j%b!<%H%7%'%k!"(Breboot $B$J$I(B) $B$HJ;$;$F(B
$B;HMQ$G$-$^$9!#%Q%C%1!<%8$K$O!"(BPHP Web Admin$B!"%3%^%s%I%i%$%s%/%i%$%"%s%H(B
$B$N(B pasmal.client$B!"5/F0$HDd;_MQ(B rc.d $B%9%/%j%W%H$,4^$^$l$F$$$^$9!#$^$?(B
(Bpasmal 1.5 $B$G$O!"%9%K%U%!5!G=$K$h$C$F?/F~8!CN%7%9%F%`$,Ds6!$5$l$^$9!#$3(B
$B$N%7%9%F%`$O!"(Bsyslogd $B$H%+%9%?%`$N%m%0%U%!%$%k$r;HMQ$7$F.3^8691M:(B (OGASAWARA Tsuneo)
(BLAC Co., Ltd.
(Bhttp://www.lac.co.jp/index.html
Attachment: smime.p7s
Description: S/MIME cryptographic signature
Prev by Date: eEye Advisory - EEYEB-200505 - RealPlayer vidplin.dll AVI$B=hM}%R!<%W%*!<%P!<%U(B$B%m!<(B

Next by Date: $B>CKI>J$N%I%a%$%s(B FDMA.GO.JP $B$KB8:_$7$?4m81@-(B

Previous by thread: eEye Advisory - EEYEB-200505 - RealPlayer vidplin.dll AVI$B=hM}%R!<%W%*!<%P!<%U(B$B%m!<(B

Next by thread: $B>CKI>J$N%I%a%$%s(B FDMA.GO.JP $B$KB8:_$7$?4m81@-(B

Index(es):

Date

Thread