[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
SecurityFocus Newsletter #312 2005-08-15->2005-08-19

To: bugtraq-jp@xxxxxxxxxxxxxxxxx
Subject: SecurityFocus Newsletter #312 2005-08-15->2005-08-19
From: Tsuneo Ogasawara <t.ogaswr@xxxxxxxxx>
Date: Fri, 16 Dec 2005 17:27:40 +0900
$B>.3^86(B@$B%i%C%/$G$9!#(B
(B 
(BSecurityFocus Newsletter $BBh(B 312 $B9f$NOBLu$r$*FO$1$7$^$9!#(B
$BLu$N$J$$9`L\$K$D$$$F$O!VF|K\8lLu$J$7!W$H$7$F6hJL$7$F$"$j$^$9!#(B
(B 
(B---------------------------------------------------------------------------
(BBugTraq-JP $B$K4X$9$k(B FAQ ($BF|K\8l(B):
(Bhttp://www.securityfocus.com/archive/79/description
$B!&(BSecurityFocus Newsletter $B$NOBLu$O(B BugTraq-JP $B$G0lH$/$@$5$$(B
(B---------------------------------------------------------------------------
(BSecurityFocus Newsletter $B%"!<%+%$%V(B ($B1Q8l(B):
(Bhttp://www.securityfocus.com/archive/78
(BBugTraq $B$K4X$9$k(B FAQ ($B1Q8l(B):
(Bhttp://www.securityfocus.com/archive/1/description
(B---------------------------------------------------------------------------
$B0zMQ$K4X$9$kHw9M(B:
$B!&$3$NOBLu$O(B SecurityFocus $B$N5v2D$r3t<02qe$G9T$o$l$F$$$^$9!#(B
$B!&(BSecurityFocus Newsletter $B$NOBLu$r(B Netnews, Mailinglist, World Wide Web,
(B  $B=q@R(B, $B$=$NB>$N5-O?G^BN$G0zMQ$5$l$k>l9g$K$O%a!<%k$NA4J80zMQ$r$*4j$$$7$^$9!#(B
$B!&F|K\8lHG%K%e!<%9%l%?!<(B 1 $B9f$+$i(B 3 $B9f$^$G$K$O$3$NHw9M$,IU$$$F$$$^$;$s$,!"(B
(B  $B=`MQ$9$k$b$N$H$7$^$9!#(B
$B!&$^$?!"(BSecurityFocus $BDs6!$N(B BugTraq-JP $B%"!<%+%$%V(B [*1] $B$X$N$$$+$J$k7A<0$N(B
(B  $B%O%$%Q!<%j%s%/$b>e5-$K=`$8$F$/$@$5$$!#(B
(B1) http://online.securityfocus.com/archive/79
(B---------------------------------------------------------------------------
$B$3$NOBLu$K4X$9$kHw9M(B:
$B!&$3$NOBLu$NE,MQ@.2L$K$D$$$F3t<02ql9g!"(BBugTraq-JP $B$X(B Errata $B$H$7$F=$@5(B
(B  $BHG$r$4Ej9FD:$/$+!"4F=$l9g$K$O=$@5HG$r$G$-$k$@$1?WB.$KH/9T$7$^$9!#(B
(B---------------------------------------------------------------------------
(BThis translation is encoded and posted in ISO-2022-JP.
(B 
$B86HG(B:
(BDate: Wed, 24 Aug 2005 11:12:23 -0600
(BMessage-ID: <430CAA77.40307@xxxxxxxxxxxxxxxxx>
(B 
(BSecurityFocus Newsletter #312
(B-----------------------------
(B 
(BThis Issue is Sponsored By: CrossTec
(B 
(BI. FRONT AND CENTER ($BF|K\8lLu$J$7(B)
(B     1. Legal disassembly
(B     2. It's only a matter of time...
(BII. BUGTRAQ SUMMARY
(B     1. Hummingbird FTP Weak Password Encryption Weakness
(B     2. PHPXMLRPC and PEAR XML_RPC Remote Code Injection Vulnerability
(B     3. KDE Langen2KVTML Insecure Temporary File Creation Vulnerability
(B     4. Parlano MindAlign Multiple Unspecified Vulnerabilities
(B     5. Dokeos Multiple Directory Traversal Vulnerabilities
(B     6. Discuz! Arbitrary File Upload Vulnerability
(B     7. CPaint Unspecified Command Execution and Information Disclosure Vulnerabilities
(B     8. Linksys WRT54GS Wireless Authentication Bypass Vulnerability
(B     9. Apple Mac OS X Multiple Vulnerabilities
(B     10. HP Ignite-UX Password File Disclosure Vulnerability
(B     11. Apple Mac OS X Weblog Server Cross-Site Scripting Vulnerabilities
(B     12. My Image Gallery Multiple Cross Site Scripting Vulnerabilities
(B     13. HP Ignite-UX TFTP File Upload Vulnerability
(B     14. BlueZ Arbitrary Command Execution Vulnerability
(B     15. Dada Mail Archives HTML Injection Vulnerability
(B     16. SafeHTML UTF-7 And CSS Comment Tag Cross Site Scripting Vulnerabilities
(B     17. PersianBlog Userslist.ASP SQL Injection Vulnerability
(B     18. ECW Shop Index.PHP SQL Injection Vulnerability
(B     19. CPaint xmlhttp Request Input Validation Vulnerability
(B     20. ECW Shop Index.PHP Cross Site Scripting Vulnerability
(B     21. ECW Shop Index.PHP HTML Injection Vulnerability
(B     22. ECW Shop Order Input Validation Vulnerability
(B     23. WinFTP Server Log-SCR Buffer Overflow Vulnerability
(B     24. EMC Legato Networker Multiple Vulnerabilities
(B     25. phpPgAds Lib-View-Direct.INC.PHP SQL Injection Vulnerability
(B     26. phpPgAds Local File Include Vulnerability
(B     27. Cisco Clean Access API Access Validation Vulnerability
(B     28. Xerox MicroServer Web Server Multiple Authentication Bypass and Input Validation Vulnerabilities
(B     29. Chris Moneymaker's World Poker Championship Buffer Overflow Vulnerability
(B     30. phpAdsNew Lib-View-Direct.INC.PHP SQL Injection Vulnerability
(B     31. PHPFreeNews SearchResults.PHP Multiple SQL Injection Vulnerabilities
(B     32. PHPFreeNews Multiple Cross-Site Scripting Vulnerabilities
(B     33. phpAdsNew Local File Include Vulnerability
(B     34. PHPTB Topic Board Multiple Remote File Include Vulnerabilities
(B     35. Mediabox404 Login_Admin_Mediabox404.PHP SQL Injection Vulnerability
(B     36. Microsoft Visual Studio .NET msdds.dll Remote Code Execution Vulnerability
(B     37. Juniper Netscreen VPN Username Enumeration Vulnerability
(B     38. Mutt Handler.c Buffer Overflow Vulnerability
(B     39. W-Agora Site Parameter Directory Traversal Vulnerability
(B     40. ATutor Login.PHP Cross-Site Scripting Vulnerability
(B     41. Emefa Guestbook Multiple HTML Injection Vulnerabilities
(B     42. Whisper32 Plaintext Password Disclosure Vulnerability
(B     43. PHPOutsourcing Zorum Prod.PHP Arbitrary Command Execution Vulnerability
(B     44. BBCaffe HTML Injection Vulnerability
(B     45. Adobe Acrobat and Adobe Reader Remote Buffer Overflow Vulnerability
(B     46. Mantis Multiple Input Validation Vulnerabilities
(B     47. OpenVPN Failed Authentication Denial Of Service Vulnerability
(B     48. HAURI Anti-Virus Compressed Files Directory Traversal Vulnerability
(B     49. OpenVPN Packet Decryption Failure Denial Of Service Vulnerability
(B     50. OpenVPN MAC Address Spoofing Denial Of Service Vulnerability
(B     51. Linux Kernel IPSec Policies Authorization Bypass Vulnerability
(B     52. OpenVPN Same Client Certificate Denial Of Service Vulnerability
(B     53. Linux Kernel SNMP Handler Denial of Service Vulnerability
(B     54. Cisco Clean Access Agent Installation Bypass Vulnerability
(B     55. Elm Expires Header Remote Buffer Overflow Vulnerability
(B     56. Linux Kernel ISO File System Denial Of Service Vulnerability
(B     57. MyBulletinBoard Search.PHP SQL Injection Vulnerability
(B     58. Sysinternals Process Explorer CompanyName Value Buffer Overflow Vulnerability
(B     59. Woltlab Burning Board ModCP.PHP SQL Injection Vulnerability
(B     60. Land Down Under Multiple SQL Injection Vulnerabilities
(B     61. Land Down Under Multiple Cross-Site Scripting Vulnerabilities
(B     62. PCRE Regular Expression Heap Overflow Vulnerability
(BIII. SECURITYFOCUS NEWS
(B     1. Storm brewing over SHA-1 as further breaks are found
(B     2. Plug-and-play bots worming and warring among Windows systems
(B     3. Worm spreading through Microsoft Plug-and-Play flaw
(B     4. NIST, DHS add national vulnerability database to mix
(B     5. Worm snaffles online gamers' passwords
(B     6. Hotel hacking could pump smut into every room
(B     7. US Air Force scrambles after privacy breach
(B     8. Exploit for unpatched IE vuln fuels hacker fears
(B
(B
(BI. FRONT AND CENTER ($BF|K\8lLu$J$7(B)
(B----------------------------------
(B
(BII.BUGTRAQ SUMMARY
(B--------------------
(B1. Hummingbird FTP Weak Password Encryption Weakness
(BBugTraq ID: 14559
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: 2005-08-15
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/14559
$BMWLs(B: 
(BHummingbird FTP $B$O!"==J,$J6/EY$N$"$k%"%k%4%j%:%`$r;HMQ$7$F%Q%9%o!<%I$r0E(B
$B9f2=$7$F$$$^$;$s!#$3$l$K$h$j!"(BFTP $B%W%m%U%!%$%k$rF~http://www.securityfocus.com/bid/14560
$BMWLs(B: 
(BPHPXMLRPC $B$*$h$S(B PEAR XML_RPC $B$O!"%j%b!<%H$+$i(B PHP $B%3!<%I$rCmF~2DG=$JLd(B
$BBj$N1F6A$re$G(B Web $B%5!<%P%W%m%;(B
$B%9$N8"8B$r;HMQ$7!"G$0U$N%5!<%P%5%$%I%9%/%j%W%H%3!<%I$rhttp://www.securityfocus.com/bid/14561
$BMWLs(B: 
(BKDE Langen2KVTML $B$K$O%;%-%e%j%F%#>eITE,@Z$K0l;~%U%!%$%k$,:n@.$5$l$kLdBj(B
$B$,B8:_$9$k5?$$$,$"$j$^$9!#$3$NLdBj$O!"@_7W>e$NITHw$K$h$j!"%U%!%$%k$X$N=q(B
$B$-9~$_A0$K%U%!%$%k$NB8:_$N3NG'$K<:GT$7$F$7$^$&$3$H$KM3Mh$7$^$9!#(B
(B
$B967be=q$-$9$k2DG=@-$,$"$j$^$9!#(B
(B
(B4. Parlano MindAlign Multiple Unspecified Vulnerabilities
(BBugTraq ID: 14562
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2005-08-15
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/14562
$BMWLs(B: 
(BParlano MindAlign $B$K$O!"L$FCDj$NJ#?t$NLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#$3$l(B
$B$i$NLdBj$K$O!"%f!<%6$NNs5s!"%/%m%9%5%$%H%9%/%j%W%F%#%s%0!"G'>Z2sHr!"@Hhttp://www.securityfocus.com/bid/14563
$BMWLs(B: 
(BDokeos $B$K$O!"%G%#%l%/%H%j%H%i%P!<%5%k967b$rH$K4XO"$9$kJ8;zNs$H0l=o$KI8E*%U%!%$%k$NL>A0(B
$B$rEO$9$H$-$K$3$NLdBj$,H/@8$7$^$9!#(B
(B
$B967be$GG$0U$N%U%!%$%k$r:o(B
$B=|$^$?$O0\F0$9$k2DG=@-$,$"$j$^$9!#$3$NLdBj$,MxMQ$5$l$k$H!"%G!<%?$N@09g@-(B
$B$,<:$o$l!"%3%s%T%e!<%?$,5!G=$7$J$/$J$k2DG=@-$,$"$j$^$9!#(B
(B
$B$3$l$i$NLdBj$rMxMQ$9$k$?$a$K$O!"967bZ(B
$B$9$kI,MW$,$"$j!"(Bteacher $B$J$I$N%3!<%9$N4IM}8"8B$r;}$C$F$$$kI,MW$,$"$j$^$9!#(B
(B
(B6. Discuz! Arbitrary File Upload Vulnerability
(BBugTraq ID: 14564
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2005-08-15
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/14564
$BMWLs(B: 
(BDiscuz! $B$K$O!"G$0U$N%U%!%$%k$,%"%C%W%m!<%I$5$l$kLdBj$,B8:_$9$k5?$$$,$"$j(B
$B$^$9!#$3$NLdBj$O!"%"%C%W%m!<%I$5$l$?2hA|%U%!%$%k$KBP$9$k%5%K%?%$%:=hM}$,(B
$B7$/2DG=@-$,$"$j$^$9!#(B
(B
(B7. CPaint Unspecified Command Execution and Information Disclosure Vulnerabilities
(BBugTraq ID: 14565
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2005-08-15
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/14565
$BMWLs(B: 
(BCPaint $B$O!"%3%^%s%I$,pJs$,3+<($5$l$kL$FCDj$N1F(B
$B6A$rpJs$O99$J$k967b$KMxMQ$5$l$k2DG=@-$,$"$j$^$9!#$^$?!"$=$NB>$N967b$,9T$o(B
$B$l$k2DG=@-$b$"$j$^$9!#(B
(B
(B8. Linksys WRT54GS Wireless Authentication Bypass Vulnerability
(BBugTraq ID: 14566	
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2005-08-15
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/14566
$BMWLs(B: 
(BLinksys WRT54GS $B$K$O!"G'>Z$,2sHr$5$l$kLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#0E9f(B
$B2=@_Dj$,;HMQ$5$l$F$$$k$H$-$G$b!"0E9f2=@_Dj$r;HMQ$7$F$$$J$$%/%i%$%"%s%H%G(B
$B%P%$%9$,@\B3$9$k$3$H$r%G%P%$%9$,5v2D$7$F$7$^$&$3$H$,Js9p$5$l$F$$$^$9!#(B
(B
$B$3$NLdBj$rMxMQ$9$k967bZ$r2sHr$7$F!"0E9f2=$5$l0BA4$G$"$k$H9M$($i(B
$B$l$F$$$k%o%$%d%l%9%M%C%H%o!<%/$K@\B3$9$k$3$H$,2DG=$G$9!#$3$N$?$a$K!"$"$?(B
$B$+$b0BA4$G$"$k$+$N$h$&$J8m2r$r>7$/2DG=@-$,$"$j$^$9!#(B
(B
$B%U%!!<%`%&%'%"$N%P!<%8%g%s(B 4.50.6 $B$K$*$$$F!"$3$NLdBj$N1F6A$r$N%P!<%8%g%s$b1F6A$rZ$5$l$F$O$$$^$;$s!#(B
(B
$B>\:Y>pJs$H$7$F!"%P!<%8%g%s(B 4.50.6 $B$K%U%!!<%`%&%'%"$,%"%C%W%0%l!<%I$5$l$?(B
$B$H$-$K$3$NLdBj$,H/@8$9$k$b$N$N!"$3$N%f%K%C%H$O9)>l=P2Y;~$N4{DjCM$K%j%;%C(B
$B%H$5$l$F$$$J$$$3$H$,<(:6$5$l$F$$$^$9!#%U%!!<%`%&%'%"$r%"%C%W%0%l!<%I$9$k(B
$B$H$-$K$O!"%f%K%C%H$r%j%;%C%H$9$k$3$H$,!"(BLinksys $B$N%"%C%W%0%l!<%IA`:n)$5$l$F$$$^$9!#(B
(B
(B9. Apple Mac OS X Multiple Vulnerabilities
(BBugTraq ID: 14567
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2005-08-15
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/14567
$BMWLs(B: 
(BApple Mac OS X $B$K$O!"J#?t$N%;%-%e%j%F%#>e$NLdBj$,B8:_$9$k$3$H$,Js9p$5$l(B
$B$F$$$^$9!#$3$l$i$NLdBj$KBP1~$9$k%"%C%W%G!<%H$,MxMQ$G$-$k$h$&$K$J$C$F$$$^(B
$B$9!#(B
(B
(BApache $B$K$O!"%P%C%U%!%*!<%P!<%U%m!<$d%"%/%;%9$NBEEv@-8!>Z$K4XO"$9$kLdBj(B
$B$J$I(B 5 $B$D$NLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#(BCVE Mitre $B$N<1JL;R8uJd$H$7$F!"(B
(BCAN-2005-1344$B!"(BCAN-2004-0942$B!"(BCAN-2004-0885$B!"(BCAN-2004-1083 $B$*$h$S(B 
(BCAN-2004-1084 $B$,$3$l$i$NLdBj$K3d$jEv$F$i$l$F$$$^$9!#(B
(B
(BAppkit $B$K$O!"(B3 $B$D$NLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#$3$l$i$N(B 2 $B$D$NLdBj$K$h(B
$B$jG$0U$N%3!<%I$,Z$,2sHr$5$l$kLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#$3$NLdBj$K(B
$BBP$7$F3d$jEv$F$i$l$?(B CVE Mitre $B$N<1JL;R8uJd$O(B CAN-2005-2504 $B$G$9!#(B
(B
(BCoreFoundation $B$K$O!"%P%C%U%!%*!<%P!<%U%m!<$,0z$-5/$3$5$l$kLdBj$H%5!<%S(B
$B%9ITG=>uBV$K4Y$kLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#(BCVE Mitre $B$N<1JL;R8uJd$H$7(B
$B$F(B CAN-2005-2505 $B$*$h$S(B CAN-2005-2506 $B$,$3$l$i$NLdBj$K3d$jEv$F$i$l$F$$$^(B
$B$9!#(B
(B
(BCUPS $B$K$O!"%5!<%S%9$r:F3+$G$-$k$^$G$N4V%5!<%S%9ITG=>uBV$K4Y$k(B 2 $B$D$NLdBj(B
$B$,B8:_$9$k5?$$$,$"$j$^$9!#(BCVE Mitre $B$N<1JL;R8uJd$H$7$F!"(BCAN-2005-2525 $B$*(B
$B$h$S(B CAN-2005-2526 $B$,$3$l$i$NLdBj$K3d$jEv$F$i$l$F$$$^$9!#(B
(B
(BDirectory Services $B$K$O!"(B3 $B$D$NLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#$3$l$i$NLd(B
$BBj$H$7$F!"%P%C%U%!%*!<%P!<%U%m!:3J$,0z$-5/$3$5$l$^$9!#(BCVE Mitre $B$N<1JL;R8uJd(B
$B$H$7$F!"(BCAN-2005-2507$B!"(BCAN-2005-2508 $B$*$h$S(B CAN-2005-2519 $B$,$3$l$i$NLdBj(B
$B$K3d$jEv$F$i$l$F$$$^$9!#(B
(B
(BHItoolbox $B$K$O!"7k2L$H$7$F>pJsO31L$r0z$-5/$3$9LdBj$,B8:_$9$k5?$$$,$"$j$^(B
$B$9!#(BCVE Mitre $B$N<1JL;R8uJd$H$7$F!"(BCAN-2005-2513 $B$,$3$NLdBj$K3d$jEv$F$i$l(B
$B$F$$$^$9!#(B
(B
(BKerberos $B$K$O!"%P%C%U%!%*!<%P!<%U%m!pJs$,C%Z$5$l$?967buBV$K4Y$k(B 2 $B$D$NLdBj$,B8:_$9$k5?$$$,(B
$B$"$j$^$9!#(BCVE Mitre $B$N<1JL;R8uJd$H$7$F!"(BCAN-2004-0079 $B$*$h$S(B 
(BCAN-2004-0112 $B$,$3$l$i$NLdBj$K3d$jEv$F$i$l$F$$$^$9!#(B
(B
(Bping $B$O!"%m!<%+%k$G8"8B>:3J$,0z$-5/$3$5$lG$0U$N%3!<%I$,pJs$,Aw?.$5$l$k(B 2 $B$D$NLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#(BCVE Mitre $B$N<1JL(B
$B;R8uJd$H$7$F!"(BCAN-2004-2516 $B$*$h$S(B CAN-2004-2517 $B$,$3$l$i$NLdBj$K3d$jEv(B
$B$F$i$l$F$$$^$9!#(B
(B
(BSecurityInterface $B$K$O!":G6a;HMQ$5$l$?%Q%9%o!<%I$,3+<($5$l$k2DG=@-$N$"$k(B
$BLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#$3$NLdBj$KBP$7$F3d$jEv$F$i$l$?(B CVE Mitre 
$B$N<1JL;R8uJd$O(B CAN-2005-2520 $B$G$9!#(B
(B
(Bservermgrd $B$K$O!"%P%C%U%!%*!<%P!<%U%m!<$,H/@8$9$kLdBj$,B8:_$9$k5?$$$,$"(B
$B$j$^$9!#$3$NLdBj$K$h$j!":G=*E*$KG$0U$N%3!<%I$,o$K=q$-9~(B
$B$^$l$J$$LdBj$,B8:_$9$k5?$$$,$"$j$^$9!#$3$NLdBj$KBP$7$F3d$jEv$F$i$l$?(B CVE
(BMitre $B$N<1JL;R8uJd$O(B CAN-2005-2510 $B$G$9!#(B
(B
(BSquirrelMail $B$K$O!"%/%m%9%5%$%H%9%/%j%W%F%#%s%0967b$r:3J$,0z$-5/$3$5$l(B
$B$kLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#$3$NLdBj$KBP$7$F3d$jEv$F$i$l$?(B CVE Mitre 
$B$N<1JL;R8uJd$O(B CAN-2005-2521 $B$G$9!#(B
(B
(BWebKit $B$K$O!"0U?^E*$K:n@.$5$l$?(B PDF $B%U%!%$%k$K$h$j7k2LE*$K%3!<%I$,uBV$K4Y$kLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#$3(B
$B$l$i$NLdBj$K$h$j:G=*E*$KG$0U$N%3!<%I$,http://www.securityfocus.com/bid/14568
$BMWLs(B: 
$B%$%s%9%H!<%k;~$K!"(BIgnite-UX $B$O%j%b!<%H%"%/%;%9$K(B TFTP $B%5!<%P$r;HMQ$7$^$9!#(B
$BFCDj$N>r7o2<$G!"(Bpasswd $B%U%!%$%k$N%3%T!<$,(B TFTP $B%5!<%P$N%Q%9$K3JG<$5$l$^(B
$B$9!#(B
(B
(B11. Apple Mac OS X Weblog Server Cross-Site Scripting Vulnerabilities
(BBugTraq ID: 14569
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2005-08-15
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/14569
$BMWLs(B: 
(BApple Mac OS X Weblog Server $B$K$O!"%/%m%9%5%$%H%9%/%j%W%F%#%s%0967b$rZMQ>pJs$N@`http://www.securityfocus.com/bid/14570
$BMWLs(B: 
(BMy Image Gallery $B$K$O!"%f!<%6$,;XDj$7$?F~NOCM$,E,@Z$K%5%K%?%$%:=hM}$5$l(B
$B$J$$$?$a$K!"%/%m%9%5%$%H%9%/%j%W%F%#%s%0967b$rZMQ>pJs$r@`$N967b$,http://www.securityfocus.com/bid/14571
$BMWLs(B: 
$B%$%s%9%H!<%k;~$K!"(BIgnite-UX $B$O%j%b!<%H%"%/%;%9$K(B TFTP $B%5!<%P$r;HMQ$7$^$9!#(B
$BFCDj$N>u672<$G$O!"%5!<%P%Q%9$N$$$/$D$+$,!"$9$Y$F$N%f!<%6$K=q$-9~$_2DG=$H(B
$B$J$k$3$H$,$"$j$^$9!#(Badd_new_client $B%3%^%s%I$,H/9T$5$l$k>l9g$K!"$3$NLdBj(B
$B$,H/@8$7$^$9!#%j%b!<%H$N(B TFTP $B%/%i%$%"%s%H$O!"$3$NLdBj$K$h$j0lIt$N%U%!%$(B
$B%k%7%9%F%`$KF?L>$G%G!<%?$r=q$-9~$`$3$H$,2DG=$H$J$k2DG=@-$,$"$j$^$9!#(B
(B
(B14. BlueZ Arbitrary Command Execution Vulnerability
(BBugTraq ID: 14572
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2005-08-16
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/14572
$BMWLs(B: 
(BBlueZ $B$O!"G$0U$N%3%^%s%I$,e$K$*$$$F!"$3$N%"%W%j%1!<%7%g%s$N%;%-%e%j%F%#%3%s%F%-%9(B
$B%HFb$GG$0U$N%3%^%s%I$r$N967b$,0z(B
$B$-5/$3$5$l$k2DG=@-$b$"$j$^$9!#(B
(B
(B15. Dada Mail Archives HTML Injection Vulnerability
(BBugTraq ID: 14573
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2005-08-16
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/14573
$BMWLs(B: 
(BDada Mail $B$K$O!"(BHTML $B%?%0$rA^F~2DG=$JLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#$3$N(B
$BLdBj$O!"%f!<%6$,;XDj$7$?F~NOCM$rF0E*$K@8@.$7$?%3%s%F%s%D$G;HMQ$9$kA0$K!"(B
$BF~NOCM$N%5%K%?%$%:=hM}$,E,@Z$KZMQ>pJs$N@`$N967b$,0z$-5/$3$5$l$k2DG=@-$b$"$j$^$9!#(B
(B
(B16. SafeHTML UTF-7 And CSS Comment Tag Cross Site Scripting Vulnerabilities
(BBugTraq ID: 14574
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2005-08-16
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/14574
$BMWLs(B: 
(BSafeHTML $B$K$O!"%/%m%9%5%$%H%9%/%j%W%F%#%s%0967b$rhttp://www.securityfocus.com/bid/14575
$BMWLs(B: 
(BPersianBlog $B$K$O!"(BSQL $B9=J8$rCmF~2DG=$JLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#$3$N(B
$BLdBj$O!"%f!<%6$,;XDj$7$?F~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NOCM$N%5%K(B
$B%?%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967bhttp://www.securityfocus.com/bid/14576
$BMWLs(B: 
(BECW Shop $B$K$O!"(BSQL $B9=J8$rCmF~2DG=$JLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#$3$NLd(B
$BBj$O!"%f!<%6$,;XDj$7$?F~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NOCM$N%5%K%?(B
$B%$%:=hM}$,E,@Z$Khttp://www.securityfocus.com/bid/14577
$BMWLs(B: 
(BCPaint $B$K$O!"F~NOCM$NBEEv@-3NG'$KLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#$3$NLdBj(B
$B$O!"0-0U$"$k%9%/%j%W%H$d%j%/%(%9%H$J$I%f!<%6$,;XDj$7$?F~NOCM$N%5%K%?%$%:(B
$B=hM}$,E,@Z$Ke$N6<0R$r>7$/2DG=@-$,$"$j$^$9!#$=$NB>$N967b$,http://www.securityfocus.com/bid/14578
$BMWLs(B: 
(BECW Shop $B$K$O!"%/%m%9%5%$%H%9%/%j%W%F%#%s%0967b$rZMQ>pJs$N@`http://www.securityfocus.com/bid/14579
$BMWLs(B: 
(BECW Shop $B$K$O!"(BHTML $B%?%0$rA^F~2DG=$JLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#$3$NLd(B
$BBj$O!"%f!<%6$,;XDj$7$?F~NOCM$rF0E*$K@8@.$7$?%3%s%F%s%D$G;HMQ$9$kA0$K!"F~(B
$BNOCM$N%5%K%?%$%:=hM}$,E,@Z$KZMQ>pJs$N@`$N967b$,0z$-5/$3$5$l$k2DG=@-$b$"$j$^$9!#(B
(B
(B22. ECW Shop Order Input Validation Vulnerability
(BBugTraq ID: 14580
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2005-08-16
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/14580
$BMWLs(B: 
(BECW Shop $B$K$O!"%j%b!<%H$+$i$NF~NOCM$NBEEv@-3NG'$K4X$9$kLdBj$,B8:_$9$k5?(B
$B$$$,$"$j$^$9!#@=IJ$N2]6b$r7W;;$9$k$H$-$K;HMQ$5$l$k(B URI $B%Q%i%a!<%?%G!<%?(B
$B$KBP$9$k%5%K%?%$%:=hM}$,E,@Z$K9T$o$l$J$$$?$a$K$3$NLdBj$,H/@8$7$^$9!#(B
(B
$B%j%b!<%H$N967bhttp://www.securityfocus.com/bid/14581
$BMWLs(B: 
(BWinFTP Server $B$O!"%P%C%U%!%*!<%P!<%U%m!<$NLdBj$N1F6A$rhttp://www.securityfocus.com/bid/14582
$BMWLs(B: 
(BEMC Legato Networker $B$O!"%5!<%S%9ITG=>uBV$K4Y$kLdBj!"8"8B>:3J$,0z$-5/$3(B
$B$5$l$kLdBj!"K\Mh5v2D$5$l$F$$$J$$%"%/%;%9!"$*$h$SG$0U%3%^%s%I$,uBV$K4Y$k!"8"8B>:3J$,0z$-5/$3$5$l$k!"K\Mh5v2D$5$l$F$$$J$$%"%/%;(B
$B%9!"$*$h$S>pJs$,O31L$9$k2DG=@-$,$"$j$^$9!#(B
(B
(B25. phpPgAds Lib-View-Direct.INC.PHP SQL Injection Vulnerability
(BBugTraq ID: 14583
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2005-08-17
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/14583
$BMWLs(B: 
(BphpPgAds $B$K$O!"(BSQL $B9=J8$rCmF~2DG=$JLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#$3$NLd(B
$BBj$O!"%f!<%6$,;XDj$7$?F~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NOCM$N%5%K%?(B
$B%$%:=hM}$,E,@Z$Khttp://www.securityfocus.com/bid/14584
$BMWLs(B: 
(BphpPgAds $B$K$O!"%m!<%+%k$G%U%!%$%k$,%$%s%/%k!<%I$5$l$k5?$$$,$"$j$^$9!#$3(B
$B$NLdBj$O!"%f!<%6$,;XDj$7$?F~NOCM$N%5%K%?%$%:=hM}$,E,@Z$KpJs$X$N%"%/%;%98"8B$rIUM?$9$kA0$K!"(B
$B%"%/%;%9$NBEEv@-$N3NG'$,E,@Z$Khttp://www.securityfocus.com/bid/14585
$BMWLs(B: 
(BCisco Clean Access (CCA) $B$O!"G'>Z$5$l$F$$$J$$%f!<%6$,%;%-%e%j%F%#$r2sHr(B
$B$7$F(B API $B$r8F$S=P$9$3$H$,2DG=$H$J$kLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#(B
(B
$B$3$NLdBj$rMxMQ$9$k967bpJs$rhttp://www.securityfocus.com/bid/14586
$BMWLs(B: 
(BXerox MicroServer $B$O!"G'>Z2sHr$*$h$SF~NOCM$NBEEv@-3NG'$K4XO"$9$kJ#?t$NLd(B
$BBj$N1F6A$r:3J$,0z$-5/$3$5$l$k2DG=@-$,$"$j$^$9!#(B
$B$=$NB>$N967b$,http://www.securityfocus.com/bid/14587
$BMWLs(B: 
(BChris Moneymaker's World Poker Championship $B$O!"6-3&>r7o%(%i!<$,B8:_$9$k(B
$B5?$$$,$"$j$^$9!#967b$,@.8y$9$k$H!"%"%W%j%1!<%7%g%s$G%(%i!<$,H/@8$7$?$j!"(B
$BG$0U$N%3!<%I$,http://www.securityfocus.com/bid/14588
$BMWLs(B: 
(BphpAdsNew $B$K$O!"(BSQL $B9=J8$rCmF~2DG=$JLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#$3$NLd(B
$BBj$O!"%f!<%6$,;XDj$7$?F~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NOCM$N%5%K%?(B
$B%$%:=hM}$,E,@Z$Khttp://www.securityfocus.com/bid/14589
$BMWLs(B: 
(BPHPFreeNews $B$K$O!"(BSQL $B9=J8$rCmF~2DG=$JJ#?t$NLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#(B
$B$3$l$i$NLdBj$O!"%f!<%6$,;XDj$7$?F~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NO(B
$BCM$N%5%K%?%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967bhttp://www.securityfocus.com/bid/14590
$BMWLs(B: 
(BPHPFreeNews $B$K$O!"%/%m%9%5%$%H%9%/%j%W%F%#%s%0967b$rZMQ>pJs$N@`http://www.securityfocus.com/bid/14591
$BMWLs(B: 
(BphpAdsNew $B$K$O!"%m!<%+%k$G%U%!%$%k$,%$%s%/%k!<%I$5$l$k5?$$$,$"$j$^$9!#$3(B
$B$NLdBj$O!"%f!<%6$,;XDj$7$?F~NOCM$N%5%K%?%$%:=hM}$,E,@Z$KpJs$X$N%"%/%;%98"8B$rIUM?$9$kA0$K!"(B
$B%"%/%;%9$NBEEv@-$N3NG'$,E,@Z$Khttp://www.securityfocus.com/bid/14592
$BMWLs(B: 
(BPHPTB $B$K$O!"%j%b!<%H$+$i%U%!%$%k$,%$%s%/%k!<%I2DG=$JJ#?t$NLdBj$,B8:_$9$k(B
$B5?$$$,$"$j$^$9!#$3$l$i$NLdBj$O!"%f!<%6$,;XDj$7$?F~NOCM$N%5%K%?%$%:=hM}$,(B
$BE,@Z$Ke$GG$0U$N%5!<%P%5%$%I%9%/%j%W%H%3!<%I$rhttp://www.securityfocus.com/bid/14593
$BMWLs(B: 
(BMediabox404 $B$K$O!"(BSQL $B9=J8$rCmF~2DG=$JLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#$3$N(B
$BLdBj$O!"%f!<%6$,;XDj$7$?F~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NOCM$N%5%K(B
$B%?%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967bZ$r2sHr$7!"LdBj$N$"$k%"%W%j%1!<%7%g%s$KBP$9$k(B
$B4IM}http://www.securityfocus.com/bid/14594
$BMWLs(B: 
(BMicrosoft Visual Studio .NET $B$K$O!"%j%b!<%H$+$iG$0U$N%3!<%I$,http://www.securityfocus.com/bid/14595
$BMWLs(B: 
(BJuniper Netscreen $B$N(B VPN $BZ$,;HMQ$5$l$F$$$k>l9g!"(B
(BIKE $B%"%0%l%C%7%V%b!<%I$K$*$1$kM-8z$J%f!<%6L>$,<1JL$5$l$F$7$^$$$^$9!#$3$N(B
$BLdBj$rMxMQ$9$k$H967b$r;HMQ$7$F!"967bZ>pJs$rF~(B
$Bhttp://www.securityfocus.com/bid/14596
$BMWLs(B: 
(BMutt $B$NEE;R%a!<%k$NE:IU%U%!%$%k$N%(%s%3!<%I$*$h$S%G%3!<%I5!G=$K$O!"%P%C(B
$B%U%!%*!<%P!<%U%m!<$,H/@8$9$kLdBj$,B8:_$7$^$9!#$3$NLdBj$O!"%j%b!<%H$N967b(B
$B7$-!"0-0U$N$"$k%3!<%I$rhttp://www.securityfocus.com/bid/14597
$BMWLs(B: 
(BW-Agora $B$K$O!"%G%#%l%/%H%j%H%i%P!<%5%k967b$rH$K4X$9$kJ8;zNs(B '../' $B$rLdBj(B
$B$N$"$k%Q%i%a!<%?$K;XDj$9$k$3$H$G!"G$0U$N%U%!%$%k$rFI$_=P$9$3$H$,2DG=$G$9!#(B
$B$3$NLdBj$,MxMQ$5$l$k$H!"5!L)@-$,<:$o$l$k2DG=@-$,$"$j$^$9!#C%pJs(B
$B$K$h$j!"%P%C%/%(%s%I%7%9%F%`$KBP$7$F99$J$k967b$,2C$($i$l$k2DG=@-$,$"$j$^(B
$B$9!#B>$N967b$,0z$-5/$3$5$l$k2DG=@-$b$"$j$^$9!#(B
(B
(B40. ATutor Login.PHP Cross-Site Scripting Vulnerability
(BBugTraq ID: 14598
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2005-08-18
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/14598
$BMWLs(B: 
(BATutor $B$K$O!"%/%m%9%5%$%H%9%/%j%W%F%#%s%0967b$rZMQ>pJs$N@`http://www.securityfocus.com/bid/14599
$BMWLs(B: 
(BEmefa Guestbook $B$K$O!"(BHTML $B%?%0$rA^F~2DG=$JJ#?t$NLdBj$,B8:_$9$k5?$$$,$"(B
$B$j$^$9!#$3$l$i$NLdBj$O!"%f!<%6$,;XDj$7$?F~NOCM$rF0E*$K@8@.$7$?%3%s%F%s%D(B
$B$G;HMQ$9$kA0$K!"F~NOCM$N%5%K%?%$%:=hM}$,E,@Z$KZMQ>pJs$N@`$N967b$,0z$-5/$3$5$l$k2DG=@-$b$"$j$^$9!#(B
(B
(B42. Whisper32 Plaintext Password Disclosure Vulnerability
(BBugTraq ID: 14600
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: 2005-08-18
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/14600
$BMWLs(B: 
(BWhisper32 $B$K$O!"%Q%9%o!<%I$,J?J8$G3+<($5$l$k5?$$$,$"$j$^$9!#$3$NLdBj$O!"(B
$B%"%W%j%1!<%7%g%s$,%;%-%e%j%F%#>eITE,@Z$JJ}K!$G%Q%9%o!<%I$rJ]B8$9$k$3$H$K(B
$BM3Mh$7$^$9!#(B
(B
$B967bhttp://www.securityfocus.com/bid/14601
$BMWLs(B: 
(BZorum $B$K$O!"G$0U$N%3%^%s%I$,http://www.securityfocus.com/bid/14602
$BMWLs(B: 
(BBBCaffe $B$K$O!"(BHTML $B%?%0$rA^F~2DG=$JLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#$3$NLd(B
$BBj$O!"%f!<%6$,;XDj$7$?F~NOCM$rF0E*$K@8@.$7$?%3%s%F%s%D$G;HMQ$9$kA0$K!"F~(B
$BNOCM$N%5%K%?%$%:=hM}$,E,@Z$KZMQ>pJs$N@`$N967b$,0z$-5/$3$5$l$k2DG=@-$b$"$j$^$9!#(B
(B
(B45. Adobe Acrobat and Adobe Reader Remote Buffer Overflow Vulnerability
(BBugTraq ID: 14603
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2005-08-16
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/14603
$BMWLs(B: 
(BAdobe Acrobat $B$*$h$S(B Adobe Reader $B$O%j%b!<%H$+$i%P%C%U%!%*!<%P!<%U%m!<$,(B
$B0z$-5/$3$5$l$kLdBj$N1F6A$rhttp://www.securityfocus.com/bid/14604
$BMWLs(B: 
(BMantis $B$O!"F~NOCM$NBEEv@-3NG'$K4XO"$9$kJ#?t$NLdBj$,B8:_$9$k5?$$$,$"$j$^(B
$B$9!#$3$l$i$NLdBj$K$O!"%/%m%9%5%$%H%9%/%j%W%F%#%s%0!"$*$h$S(B SQL $B9=J8$rCm(B
$BF~2DG=$JLdBj$,4^$^$l$^$9!#$3$l$i$NLdBj$O!"%f!<%6$,;XDj$7$?F~NOCM$N%5%K%?(B
$B%$%:=hM}$,E,@Z$KZMQ>pJs$N@`7$+$l(B
$B$?$j!"%G!<%?$,3+<($5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967bhttp://www.securityfocus.com/bid/14605
$BMWLs(B: 
(BOpenVPN $B$K$O!"%5!<%S%9ITG=>uBV$K4Y$k5?$$$,$"$j$^$9!#$3$NLdBj$K$h$j!"%/%i(B
$B%$%"%s%H@\B3$,@ZCG$5$l$^$9!#(B
(B
$BG'>Z$5$l$F$$$k967b7(B
$B$/$3$H$,2DG=$G$9!#(B
(B
(B48. HAURI Anti-Virus Compressed Files Directory Traversal Vulnerability
(BBugTraq ID: 14606
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2005-08-19
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/14606
$BMWLs(B: 
(BHAURI Anti-Virus $B$K$O!"%G%#%l%/%H%j%H%i%P!<%5%k967b$rH$K4X$9$kJ8;zNs(B '../' $B$r%"!<(B
$B%+%$%V$5$l$F$$$k%U%!%$%kL>$K;XDj$9$k$3$H$K$h$j!"G$0U$N>l=j$K%U%!%$%k$r=q(B
$B$-9~$`$3$H$,2DG=$G$9!#$3$NLdBj$,MxMQ$5$l$k$H!"%G!<%?$N@09g@-$,<:$o$l!"%3(B
$B%s%T%e!<%?$,5!G=$7$J$/$J$k2DG=@-$,$"$j$^$9!#$3$NLdBj$,MxMQ$5$l$k$H!"LdBj(B
$B$N$"$k%"%W%j%1!<%7%g%s$,%5!<%S%9ITG=>uBV$K4Y$k2DG=@-$,$"$j$^$9!#%&%$%k%9(B
$BBP:v%=%U%H%&%'%"$,L58z$K$5$l$k$H!"%P%C%/%(%s%I%7%9%F%`$KBP$7$F99$J$k967b(B
$B$r;n$_$k$?$a$Nhttp://www.securityfocus.com/bid/14607
$BMWLs(B: 
(BOpenVPN $B$K$O!"%5!<%S%9ITG=>uBV$K4Y$k5?$$$,$"$j$^$9!#$3$NLdBj$K$h$j!"%/%i(B
$B%$%"%s%H@\B3$,@ZCG$5$l$^$9!#(B
(B
$BG'>Z$5$l$F$$$k967b7(B
$B$/$3$H$,2DG=$G$9!#(B
(B
(B50. OpenVPN MAC Address Spoofing Denial Of Service Vulnerability
(BBugTraq ID: 14608
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2005-08-19
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/14608
$BMWLs(B: 
(BOpenVPN $B$K$O!"%5!<%S%9ITG=>uBV$K4Y$k5?$$$,$"$j$^$9!#$3$NLdBj$K$h$j!"%*%Z(B
$B%l!<%F%#%s%0%7%9%F%`$N%a%b%j$,;H$$?T$/$5$l!"%7%9%F%`$,%/%i%C%7%e$9$k2DG=(B
$B@-$,$"$j$^$9!#(B
(B
$BG'>Z$5$l$F$$$k967b7(B
$B$-!"(BOpenVPN $B%5!<%P$r%/%i%C%7%e$5$;$k$3$H$,2DG=$G$9!#$^$?!"%*%Z%l!<%F%#%s(B
$B%0%7%9%F%`$r%/%i%C%7%e$5$;$k2DG=@-$,$"$j$^$9!#(B
(B
(B51. Linux Kernel IPSec Policies Authorization Bypass Vulnerability
(BBugTraq ID: 14609
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: 2005-08-19
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/14609
$BMWLs(B: 
(BLinux Kernel $B$K$O!"G'>Z$,2sHr$5$l$kLdBj$,B8:_$7$^$9!#(B
(B
$B$3$NLdBj$O!"8"8B$,I,MW$H$J$k4X?t$X$N%"%/%;%9$r5v2D$9$kA0$K!"G'>Z=hM}$,E,(B
$B@Z$KuBV$K4Y$i$;$k$3$H$,2DG=$H$J$j$^$9!#(B
(B
$B967bhttp://www.securityfocus.com/bid/14610
$BMWLs(B: 
(BOpenVPN $B$K$O!"%5!<%S%9ITG=>uBV$K4Y$k5?$$$,$"$j$^$9!#$3$NLdBj$O!"6%9g>uBV(B
$B$r0z$-5/$3$7!"LdBj$N$"$k%5!<%P$r%/%i%C%7%e$5$;$^$9!#(B
(B
$BG'>Z$5$l$F$$$k967b7(B
$B$-!"LdBj$N$"$k%5!<%P%"%W%j%1!<%7%g%s$r%/%i%C%7%e$5$;$k$3$H$,2DG=$G$9!#(B
(B
(B53. Linux Kernel SNMP Handler Denial of Service Vulnerability
(BBugTraq ID: 14611
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2005-08-19
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/14611
$BMWLs(B: 
(BLinux Kernel $B$K$O!"%5!<%S%9ITG=>uBV$K4Y$k5?$$$,$"$j$^$9!#$3$NLdBj$O!"0-(B
$B0U$N$"$k(B UDP $B%Q%1%C%H$,(B SNMPD $B$K$h$jHFI$_=P$7$KM3Mh$7$^$9!#(B
(B
(B54. Cisco Clean Access Agent Installation Bypass Vulnerability
(BBugTraq ID: 14612
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2005-08-19
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/14612
$BMWLs(B: 
(BCisco Clean Access $B$O!"%(!<%8%'%s%H$N6/@)%$%s%9%H!<%k$r2sHr2DG=$H$J$kLd(B
$BBj$N1F6A$rl9g$G$bhttp://www.securityfocus.com/bid/14613
$BMWLs(B: 
(BElm $B$O!"967bhttp://www.securityfocus.com/bid/14614
$BMWLs(B: 
$B05=L$5$l$?(B ISO $B%U%!%$%k%7%9%F%`$N%+!<%M%k%I%i%$%P$K$O!"%5!<%S%9ITG=>uBV(B
$B$K4Y$kLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#$3$NLdBj$O!"F~NOCM$N%5%K%?%$%:=hM}$,(B
$B%I%i%$%P$K$h$jE,@Z$Khttp://www.securityfocus.com/bid/14615
$BMWLs(B: 
(BMyBulletinBoard $B$K$O!"(BSQL $B9=J8$rCmF~2DG=$JLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#(B
$B$3$NLdBj$O!"%f!<%6$,;XDj$7$?F~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NOCM$N(B
$B%5%K%?%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967bhttp://www.securityfocus.com/bid/14616
$BMWLs(B: 
(BProcess Explorer $B$K$O!"%P%C%U%!%*!<%P!<%U%m!<$,H/@8$9$k5?$$$,$"$j$^$9!#(B
$B$3$NLdBj$O!"%f!<%6$,;XDj$7$?%G!<%?$N6-3&%A%'%C%/$,E,@Z$Khttp://www.securityfocus.com/bid/14617
$BMWLs(B: 
(BWoltLab Burning Board $B$K$O!"(BSQL $B9=J8$rCmF~2DG=$JLdBj$,B8:_$9$k5?$$$,$"$j(B
$B$^$9!#$3$NLdBj$O!"%f!<%6$,;XDj$7$?F~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~(B
$BNOCM$N%5%K%?%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967bZMQ>pJs$,I,MW(B
$B$H$J$kE@$KN10U$9$Y$-$G$9!#(B
(B
(B60. Land Down Under Multiple SQL Injection Vulnerabilities
(BBugTraq ID: 14618
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2005-08-20
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/14618
$BMWLs(B: 
(BLand Down Under $B$K$O!"(BSQL $B9=J8$rCmF~2DG=$JJ#?t$NLdBj$,B8:_$9$k5?$$$,$"$j(B
$B$^$9!#$3$l$i$NLdBj$O!"%f!<%6$,;XDj$7$?F~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"(B
$BF~NOCM$N%5%K%?%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967bhttp://www.securityfocus.com/bid/14619
$BMWLs(B: 
(BLand Down Under $B$K$O!"%/%m%9%5%$%H%9%/%j%W%F%#%s%0967b$rZMQ>pJs$N@`http://www.securityfocus.com/bid/14620
$BMWLs(B: 
(BPCRE $B$K$O!"%R!<%WNN0h$G%P%C%U%!%*!<%P!<%U%m!<$,H/@8$9$k5?$$$,$"$j$^$9!#(B
$B$3$NLdBj$O!"%G!<%?$rFbIt$N%a%b%j%P%C%U%!$K%3%T!<$9$kA0$K!"%f!<%6$,;XDj$7(B
$B$?F~NOCM$N6-3&%A%'%C%/$,E,@Z$Kl9g$N1F6A$O!"LdBj$N$"$k%i%$%V%i%j$r;HMQ(B
$B$9$k%"%W%j%1!<%7%g%s$H%f!<%6$NG'>ZMQ>pJs$K$h$C$F0[$J$j$^$9!#$3$N967b$,@.(B
$B8y$9$k$H!":G=*E*$K967b$NCf9q?M8&5f$KMQ$$$k0E9f2=5,3J$KBP$9$k96(B
$B7bJ}K!$r@:O#$7!"0E9f8&5fhttp://www.securityfocus.com/news/11292
(B
(B2. Plug-and-play bots worming and warring among Windows systems
$BCxhttp://www.securityfocus.com/news/11285
(B
(B3. Worm spreading through Microsoft Plug-and-Play flaw
$BCxe$NLdBj$rMxMQ$7$F%3%s%T%e!<(B
$B%?$K46@w$7$^$9$,!"%;%-%e%j%F%#$N@lLg2H$?$A$O!":#2s$N967b$OA02s$NN.9T$[$I(B
$B=EBg$J$b$N$G$O$J$$$H9M$($F$$$^$9!#(B
(B
(Bhttp://www.securityfocus.com/news/11281
(B
(B4. NIST, DHS add national vulnerability database to mix
$BCxhttp://www.securityfocus.com/news/11278
(B
(B5. Worm snaffles online gamers' passwords
$BCx!"%Q%9%o!<%I!"$*$h$S%G!<%?$rC%http://www.securityfocus.com/news/11294
(B
(B6. Hotel hacking could pump smut into every room
$BCx]$H$J$C$F$$$k$H%;%-%e(B
$B%j%F%#$N8&5f$O7Y9p$7$F$$$^$9!#(B
(B
(Bhttp://www.securityfocus.com/news/11293
(B
(B7. US Air Force scrambles after privacy breach
$BCxpJs$,8x(B
$B3+$5$l$?2DG=@-$,$"$k$3$H$r(B33,000 $B?M0J>e$N6u73J<$KDLCN$;$6$k$rF@$J$/$J$j(B
$B$^$7$?!#(B
(B
(Bhttp://www.securityfocus.com/news/11290
(B
(B8. Exploit for unpatched IE vuln fuels hacker fears
$BCxhttp://www.securityfocus.com/news/11289
(B
(B
(B--
$BK]Lu(B: LAC $BK]Lu%A!<%`(B
$B4F=$(B: $B>.3^8691M:(B (OGASAWARA Tsuneo)
(BLAC Co., Ltd.
(Bhttp://www.lac.co.jp/index.html
Attachment: smime.p7s
Description: S/MIME cryptographic signature
Prev by Date: Windows Kernel APC Data-Free Local Privilege Escalation Vulnerability
Next by Date: SecurityFocus Newsletter #311 2005-08-08->2005-08-12
Previous by thread: Windows Kernel APC Data-Free Local Privilege Escalation Vulnerability
Next by thread: SecurityFocus Newsletter #311 2005-08-08->2005-08-12
Index(es):
- Date
- Thread