[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
SecurityFocus Newsletter #323 2005-10-31->2005-11-04

To: bugtraq-jp@xxxxxxxxxxxxxxxxx
Subject: SecurityFocus Newsletter #323 2005-10-31->2005-11-04
From: Tsuneo Ogasawara <t.ogaswr@xxxxxxxxx>
Date: Fri, 17 Feb 2006 17:27:38 +0900
$B>.3^86(B@$B%i%C%/$G$9!#(B
(B 
(BSecurityFocus Newsletter $BBh(B 323 $B9f$NOBLu$r$*FO$1$7$^$9!#(B
$BLu$N$J$$9`L\$K$D$$$F$O!VF|K\8lLu$J$7!W$H$7$F6hJL$7$F$"$j$^$9!#(B
(B
(B---------------------------------------------------------------------------
(BBugTraq-JP $B$K4X$9$k(B FAQ ($BF|K\8l(B):
(Bhttp://www.securityfocus.com/archive/79/description
$B!&(BSecurityFocus Newsletter $B$NOBLu$O(B BugTraq-JP $B$G0lH$/$@$5$$(B
(B---------------------------------------------------------------------------
(BSecurityFocus Newsletter $B%"!<%+%$%V(B ($B1Q8l(B):
(Bhttp://www.securityfocus.com/archive/78
(BBugTraq $B$K4X$9$k(B FAQ ($B1Q8l(B):
(Bhttp://www.securityfocus.com/archive/1/description
(B---------------------------------------------------------------------------
$B0zMQ$K4X$9$kHw9M(B:
$B!&$3$NOBLu$O(B SecurityFocus $B$N5v2D$r3t<02qe$G9T$o$l$F$$$^$9!#(B
$B!&(BSecurityFocus Newsletter $B$NOBLu$r(B Netnews, Mailinglist, World Wide Web,
(B  $B=q@R(B, $B$=$NB>$N5-O?G^BN$G0zMQ$5$l$k>l9g$K$O%a!<%k$NA4J80zMQ$r$*4j$$$7$^$9!#(B
$B!&F|K\8lHG%K%e!<%9%l%?!<(B 1 $B9f$+$i(B 3 $B9f$^$G$K$O$3$NHw9M$,IU$$$F$$$^$;$s$,!"(B
(B  $B=`MQ$9$k$b$N$H$7$^$9!#(B
$B!&$^$?!"(BSecurityFocus $BDs6!$N(B BugTraq-JP $B%"!<%+%$%V(B [*1] $B$X$N$$$+$J$k7A<0$N(B
(B  $B%O%$%Q!<%j%s%/$b>e5-$K=`$8$F$/$@$5$$!#(B
(B1) http://online.securityfocus.com/archive/79
(B---------------------------------------------------------------------------
$B$3$NOBLu$K4X$9$kHw9M(B:
$B!&$3$NOBLu$NE,MQ@.2L$K$D$$$F3t<02ql9g!"(BBugTraq-JP $B$X(B Errata $B$H$7$F=$@5(B
(B  $BHG$r$4Ej9FD:$/$+!"4F=$l9g$K$O=$@5HG$r$G$-$k$@$1?WB.$KH/9T$7$^$9!#(B
(B---------------------------------------------------------------------------
(BThis translation is encoded and posted in ISO-2022-JP.
(B 
$B86HG(B:
(BDate: Tue, 08 Nov 2005 16:47:05 -0700
(BMessage-ID: <437138F9.2060700@xxxxxxxxxxxxxxxxx>
(B 
(BSecurityFocus Newsletter #323
(B-----------------------------
(B
(BI. FRONT AND CENTER ($BF|K\8lLu$J$7(B)
(B     1. Automatic graylisting of unwanted software
(B     2. Windows rootkits in 2005, part one
(BII. BUGTRAQ SUMMARY
(B     1. MG2 Authentication Bypass Vulnerability
(B     2. PHP Advanced Transfer Manager Remote Unauthorized Access Vulnerability
(B     3. Subdreamer Multiple Remote SQL Injection Vulnerabilities
(B     4. OpenVPN Client Remote Format String Vulnerability
(B     5. Invision Gallery Index.PHP SQL Injection Vulnerability
(B     6. Snitz Forum Post.ASP Cross-Site Scripting Vulnerability
(B     7. NTop Insecure Temporary File Creation Vulnerability
(B     8. PHPBB Global Variable Deregistration Bypass Vulnerabilities
(B     9. PHPCafe Tutorial Manager Index.PHP SQL Injection Vulnerability
(B     10. OaBoard Forum.PHP Multiple SQL Injection Vulnerabilities
(B     11. PHPBB Multiple Unspecified Vulnerabilities
(B     12. IBM AIX CHCONS Local Buffer Overflow Vulnerability
(B     13. PHP PHPInfo Cross-Site Scripting Vulnerability
(B     14. PHP Parse_Str Register_Globals Activation Weakness
(B     15. PHP File Upload GLOBAL Variable Overwrite Vulnerability
(B     16. Comersus BackOffice Multiple Input Validation And Information Disclosure Vulnerabilities
(B     17. Apple Mac OS X Security Update 2005-10-31 Multiple Local Vulnerabilities
(B     18. IOFTPD Username Enumeration Vulnerability
(B     19. Belchior Foundry vCard Pro Addrbook.PHP SQL Injection Vulnerability
(B     20. EyeOS Desktop.PHP HTML Injection Vulnerability
(B     21. EyeOS User And Password Information Disclosure Vulnerability
(B     22. Elite Forum HTML Injection Vulnerability
(B     23. Multiple Vendor ReadDir_R Buffer Overflow Vulnerability
(B     24. VUBB Index.PHP Cross-Site Scripting Vulnerability
(B     25. OpenVMS Unspecified Local Denial of Service Vulnerability
(B     26. Pax File Permission Modification Race Condition Weakness
(B     27. NetBSD Insecure Temporary File Creation Vulnerability
(B     28. NetBSD KernFS Local Kernel Memory Disclosure Vulnerability
(B     29. XMB Forum Post.PHP SQL Injection Vulnerability
(B     30. Microsoft Internet Explorer Malformed HTML Parsing Denial of Service Vulnerability
(B     31. Cisco Management Center for IPS Sensors Configuration Download Weakness
(B     32. OpenVPN Server Remote Denial Of Service Vulnerability
(B     33. Sun Java System Communications Express Information Disclosure Vulnerability
(B     34. Cisco Airespace WLAN Controller Unauthorized Network Access Vulnerability
(B     35. RhinoSoft Serv-U FTP Server Unspecified Denial of Service Vulnerability
(B     36. News2Net Index.PHP SQL Injection Vulnerability
(B     37. Cisco IOS System Timers Heap Buffer Overflow Exploitation
(B     38. phpWebThings Forum.PHP Cross-Site Scripting Vulnerability
(B     39. PHPWebThing Forum.PHP SQL Injection Vulnerability
(B     40. MailWatch for MailScanner Authenticate Function SQL Injection Vulnerability
(B     41. Asus VideoSecurity Online Web Server Authentication Buffer Overflow Vulnerability
(B     42. Glider Collect'N Kill Remote Buffer Overflow Vulnerability
(B     43. Asus VideoSecurity Online Web Server Directory Traversal Vulnerability
(B     44. Battle Carry Remote Denial of Service Vulnerability
(B     45. Simple PHP Blog Multiple Input Validation Vulnerabilities
(B     46. F-Secure Web Console Directory Traversal Vulnerability
(B     47. GraphOn GO-Global For Windows Remote Buffer Overflow Vulnerability
(B     48. Invision Gallery Image Upload HTML Injection Vulnerability
(B     49. Johannes F. Kuhlmann FlatFrag Multiple Remote Buffer Overflow And Denial Of Service Vulnerabilities
(B     50. NeroNet Limited Directory Traversal Vulnerability
(B     51. NetBSD SO_LINGER DIAGNOSTIC Checking Local Denial of Service Vulnerability
(B     52. NetBSD Local PTrace Privilege Escalation Vulnerability
(B     53. IPSwitch WhatsUp Small Business 2004 Report Service Directory Traversal Vulnerability
(B     54. Scorched 3D Multiple Vulnerabilities
(B     55. F-Prot Antivirus ZIP Attachment Version Scan Evasion Vulnerability
(B     56. PHP Handicapper Multiple Cross-Site Scripting Vulnerabilities
(B     57. CutePHP CuteNews Directory Traversal Vulnerability
(B     58. vBulletin Image Upload HTML Injection Vulnerability
(B     59. PHP Handicapper Process_signup.PHP SQL Injection Vulnerability
(B     60. Libungif Colormap Handling Memory Corruption Vulnerability
(B     61. Microsoft November Advance Notification Unspecified Security Vulnerabilities
(B     62. PHP Handicapper Process_signup.PHP HTTP Response Splitting Vulnerability
(B     63. Movable Type Arbitrary Blog Creation Path  Vulnerability
(B     64. IBM WebSphere Application Server QueryString Information Disclosure Vulnerability
(B     65. Libungif Null Pointer Dereference Denial of Service Vulnerability
(B     66. Movable Type Blog Entry Posting HTML Injection Vulnerability
(B     67. Apple QuickTime Embedded Pascal Style Remote Integer Overflow Vulnerability
(B     68. Apple QuickTime Null Pointer Dereference Denial of Service Vulnerability
(B     69. Apple QuickTime Movie Attributes Remote Integer Overflow Vulnerability
(B     70. Apple QuickTime Compressed PICT Data Remote Buffer Overflow Vulnerability
(B     71. Sun Java Development Kit Font Serialization Remote Denial of Service Vulnerability
(B     72. Galerie ShowGallery.PHP SQL Injection Vulnerability
(B     73. CHFN User Modification Privilege Escalation Vulnerability
(B     74. Cerberus Helpdesk Information Disclosure Vulnerability
(B     75. Clam Anti-Virus ClamAV TNEF File Handling Denial Of Service Vulnerability
(B     76. Clam Anti-Virus ClamAV CAB File Handling Denial Of Service Vulnerability
(B     77. Clam Anti-Virus ClamAV FSG File Handling Buffer Overflow Vulnerability
(B     78. GpsDrive Friendsd Remote Format String Vulnerability
(B     79. Acme Thttpd Insecure Temporary File Creation Vulnerability
(B     80. IBM Lotus Domino Multiple Vulnerabilities
(B     81. PunBB/Blog:CMS Image Upload HTML Injection Vulnerability
(B     82. IBM AIX SWCONS Local Buffer Overflow Vulnerability
(B     83. JPortal Multiple SQL Injection Vulnerabilities
(B     84. Apache Tomcat Simultaneous Directory Listing Denial Of Service Vulnerability
(B     85. PunBB/BLOG:CMS Origin Spoofing Vulnerability
(B     86. cPanel Chat Message Field HTML Injection Vulnerability
(B     87. PunBB/BLOG:CMS Unspecified Information Disclosure Vulnerability
(B     88. Ocean12 ASP Calendar Manager Authentication Bypass Vulnerability
(B     89. Ocean12 ASP Calendar Manager SQL Injection Vulnerability
(B     90. Multiple Vendor Web Browser Cookie Hostname Handling Weakness
(B     91. Macromedia Flash Array Index Memory Access Vulnerability
(B     92. ibProArcade User ID SQL Injection Vulnerability
(BIII. SECURITYFOCUS NEWS
(B     1. Suspected bot master busted
(B     2. Hidden DRM code's legitimacy questioned
(B     3. U.S. makes securing SCADA systems a priority
(B     4. Web defacer sentenced, facing deportation 
(B     5. Skype under scrutiny for bugs
(B     6. Say hello to the Skype Trojan
(B     7. Shared music abuse bug hits iTunes
(B
(B
(BI. FRONT AND CENTER ($BF|K\8lLu$J$7(B)
(B----------------------------
(B
(BII.  BUGTRAQ SUMMARY
(B--------------------
(B1. MG2 Authentication Bypass Vulnerability
(BBugTraq ID: 15235
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2005-10-29
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/15235
$BMWLs(B:
(BMG2 $B$O!"G'>Z$r2sHr2DG=$JLdBj$N1F6A$rhttp://www.securityfocus.com/bid/15237
$BMWLs(B:
(BPHP Advanced Transfer Manager $B$O!"%j%b!<%H$N967bZMQ>pJs$r4^$`=EMW$J%U%!%$%k$X$N%"%/%;%9$,@)8B$5$l$F$$$J$$$?$a!"967bpJs$O!"(BCookie $B$r;HMQ$9$k%5!<%S%9$G967bZ$r$N%P!<%8%g%s$b1F6A$rhttp://www.securityfocus.com/bid/15238
$BMWLs(B:
(BSubdreamer $B$K$O!"%j%b!<%H$+$i(B SQL $B9=J8$rCmF~2DG=$JJ#?t$NLdBj$,B8:_$9$k5?(B
$B$$$,$"$j$^$9!#(B
(B
$B$3$l$i$NLdBj$K$h$j!"%j%b!<%H$N967b7$+$l(B
$B$?$j!"%G!<%?$,3+<($5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967b$N%P!<%8%g%s$b1F6A$rhttp://www.securityfocus.com/bid/15239
$BMWLs(B:
(BOpenVPN $B$K$O!"%j%b!<%H$+$i%U%)!<%^%C%H%9%H%j%s%0$NLdBj$,MxMQ$5$l$k5?$$$,(B
$B$"$k$3$H$,Js9p$5$l$F$$$^$9!#(B
(B
$B0-0U$"$k%5!<%P$O!"%U%)!<%^%C%H;XDj;R$r4^$`%3%^%s%I%*%W%7%g%s(B 
(B('dhcp-option' $B$J$I(B) $B$r0U?^E*$K:n@.$7$F%/%i%$%"%s%H$KAw?.$7!"$3$NLdBj$r(B
$B0z$-5/$3$9$3$H$,2DG=$G$9!#(B
(B
$B%j%b!<%H$N967bhttp://www.securityfocus.com/bid/15240
$BMWLs(B:
(BInvision Gallery $B$K$O!"(BSQL $B9=J8$rCmF~$5$l$k5?$$$,$"$j$^$9!#$3$NLdBj$O!"(B
$B%f!<%6$,;XDj$7$?F~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NOCM$N%5%K%?%$%:=h(B
$BM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967bhttp://www.securityfocus.com/bid/15241
$BMWLs(B:
(BSnitz Forum $B$K$O!"%/%m%9%5%$%H%9%/%j%W%F%#%s%0967b$rZMQ>pJs$N@`http://www.securityfocus.com/bid/15242
$BMWLs(B:
(Bntop $B$G$O!"0l;~%U%!%$%k$N:n@.$,%;%-%e%j%F%#>eE,@Z$K9T$o$l$^$;$s!#(B
(B
$B$3$N967b$K$h$j=EMW$J%U%!%$%k$,>e=q$-$5$l$k>l9g!"%G!<%?$,GK2u$?$j%5!<%S%9(B
$BITG=>uBV$K4Y$C$?$j$9$k2DG=@-$,9b$$$H9M$($i$l$^$9!#$=$NB>$N967b$,http://www.securityfocus.com/bid/15243
$BMWLs(B:
(BphpBB $B$K$O!"(BGLOBAL $BJQ?t$NEPO?2r=|$,E,@Z$K9T$o$l$J$$$?$a$KJ#?t$NLdBj$,B8(B
$B:_$9$k5?$$$,$"$j$^$9!#(B
(B
$B$3$l$i$NLdBj$O!"%j%b!<%H$N967bhttp://www.securityfocus.com/bid/15244
$BMWLs(B:
(BPHPcafe Tutorial Manager $B$K$O!"(BSQL $B9=J8$rCmF~$5$l$k5?$$$,$"$j$^$9!#$3$N(B
$BLdBj$O!"%f!<%6$,;XDj$7$?F~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NOCM$N%5%K(B
$B%?%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967bhttp://www.securityfocus.com/bid/15245
$BMWLs(B:
(BOaBoard $B$K$O!"(BSQL $B9=J8$rCmF~2DG=$JJ#?t$NLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#$3(B
$B$l$i$NLdBj$O!"%f!<%6$,;XDj$7$?F~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NOCM(B
$B$KBP$9$k%5%K%?%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967bhttp://www.securityfocus.com/bid/15246
$BMWLs(B:
(BphpBB $B$K$O!"J#?t$NL$FCDj$NLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#0lIt$NLdBj$O%f!<(B
$B%6$,;XDj$7$?%G!<%?$N%5%K%?%$%:=hM}$,E,@Z$K$NLdBj$N860x$H1F6A$OFCDj$5$l$^$;$s$G$7$?!#(B
(B
(BphpBB 2.0.17 $B0JA0$N%P!<%8%g%s$K$*$$$F!"$3$l$i$NLdBj$N1F6A$r\:Y$,ITL@$J$?$a!"99$J$k>pJs$O8=;~E@$G$ODs6!$5$l$F$$$^$;$s!#$3$l$i$NLdBj(B
$B$N0lIt$O!"$3$N(B BID $B$N%j%j!<%9$h$jA0$KJs9p$5$l$F$$$k2DG=@-$,$"$j$^$9!#>\(B
$B:Y$,8x3+$5$lhttp://www.securityfocus.com/bid/15247
$BMWLs(B:
(BIBM AIX $B$N(B chcons $B$K$O!"%m!<%+%k$G$N967b$K$h$j%P%C%U%!%*!<%P!<%U%m!<$,H/(B
$B@8$9$k5?$$$,$"$j$^$9!#$3$NLdBj$O!"%f!<%6$,;XDj$7$?%G!<%?$r%5%$%:$,IT==J,(B
$B$J%a%b%j%P%C%U%!$K%3%T!<$9$kA0$K!"6-3&%A%'%C%/$,<:GT$9$k$3$H$KM3Mh$7$^$9!#(B
$B$3$NLdBj$O(B 'DEBUG MALLOC' $B$,M-8z$K$J$C$F$$$k$H$-$K0z$-5/$3$5$l$^$9!#(B
(B
$BLdBj$N$"$k%f!<%F%#%j%F%#$K(B setuid root $B%S%C%H$,IUM?$5$l$F$$$k>l9g!"967b(B
$B$,@.8y$9$k$HG$0U$N%^%7%s%3!<%I$r4IM}http://www.securityfocus.com/bid/15248
$BMWLs(B:
(BPHP $B$K$O!"%/%m%9%5%$%H%9%/%j%W%F%#%s%0967b$rZMQ>pJs$N@`http://www.securityfocus.com/bid/15249
$BMWLs(B:
(BPHP $B$K$O!"967buBV$,J];}$5$l$^$9!#(BPHP $B$,(B Apache $B%b%8%e!<%k$H$7$Fl9g$O!"0-0U(B
$B$"$k%j%/%(%9%H$N=hM}$,40N;$9$k$^$G(B 'register_globals' $B$,M-8z$K$J$j$^$9!#(B
(BPHP $B$,(B CGI $B%W%m%;%9$H$7$Fl9g$O!"$3$NLdBj$,MxMQ$5$l$k2DG=@-$O(B
$BDc$$$H9M$($i$l$^$9!#(B
(B
$B%j%b!<%H$N967bhttp://www.securityfocus.com/bid/15250
$BMWLs(B:
(BPHP $B$K$O!"967be=q$-$9$k(B
$B$3$H$r5v$7$F$7$^$&2DG=@-$,$"$j$^$9!#(B
(B
$B%j%b!<%H$N967be=q$-$G$-(B
$B$k2DG=@-$,$"$j$^$9!#$3$l$K$h$j!"967bhttp://www.securityfocus.com/bid/15251
$BMWLs(B:
(BComersus BackOfficePlus $B$*$h$S(B BackOfficeLite $B$K$O!"F~NOCM$NBEEv@-3NG'$*(B
$B$h$S>pJs$N3+<($K4XO"$9$kJ#?t$NLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#(B
(B
$B$3$N%"%W%j%1!<%7%g%s$K$O!"(BSQL $B9=J8$rCmF~$9$k967b$rpJs$,3+<($5(B
$B$l$?$j!"J#?t$N%/%m%9%5%$%H%9%/%j%W%F%#%s%0967b$rpJs$d8"8B$rI,MW$H$9$k>pJs$rZMQ>pJs(B
$B$r$N967b$,0z$-5/$3$5$l$k2DG=@-$b$"(B
$B$j$^$9!#(B
(B
(B17. Apple Mac OS X Security Update 2005-10-31 Multiple Local Vulnerabilities
(BBugTraq ID: 15252
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: 2005-10-31
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/15252
$BMWLs(B:
(BMac OS X $B$K$*$1$k%m!<%+%k$GMxMQ2DG=$JJ#?t$NLdBj$r2r7h$9$k$?$a$K!"(BApple 
$B$O(B Security Update 2005-10-31 $B$r%j%j!<%9$7$^$7$?!#(B
(B
$B$3$N%;%-%e%j%F%#%"%C%W%G!<%H$G$O!"0J2<$NLdBj$,2r7h$5$l$^$7$?!#(B
(B
(B- $B%U%!%$%k=jM-7$/!#(B
(B
(B- $B%=%U%H%&%'%"%"%C%W%G!<%H$N<:GT$NLdBj(B: $B=EMW$J%;%-%e%j%F%#$N=$@5$N%$%s%9(B
$B%H!<%k$,<:GT$9$k!#(B
(B
(B- $B%0%k!<%W$N%a%s%PJQ99$NLdBj(B: $B%0%k!<%W$N%a%s%PJQ99$,CY$l$k$?$a$KIT@5%"%/(B
$B%;%9$,0z$-5/$3$5$l$k!#(B
(B
(B- Keychain $B$N>pJsO31L$NLdBj(B: Keychain $B$,%?%$%`%"%&%H$K$h$C$F%m%C%/$5$l$?(B
$B8e$G$b!"K\Mh8"8B$r;}$?$J$$%f!<%6$,$9$G$KI=<($5$l$F$$$kJ?J8$N%Q%9%o!<%I$r(B
$B1\Mw$9$k$3$H$,5v$5$l$F$7$^$&2DG=@-$,$"$k!#(B
(B
(B- $B%+!<%M%k$G$N>pJsO31L$K4XO"$9$kJ#?t$NLdBj(B: $B%m!<%+%k%f!<%6$,=EMW$J>pJs$K(B
$B%"%/%;%9$7!"99$J$k967b$rhttp://www.securityfocus.com/bid/15253
$BMWLs(B:
(BioFTPD $B$K$O!"%f!<%6L>$,Ns5s$5$l$k5?$$$,$"$j$^$9!#$3$NLdBj$O!"%f!<%6$,;X(B
$BDj$7$?F~NOCM$NBEEv@-3NG'$K$*$1$k@_7W>e$NITHw$KM3Mh$7$^$9!#(B
(B
$B967b$r<1JL$9$k2DG=@-$,$"$j$^$9!#$3(B
$B$l$O!"%Q%9%o!<%I$N%V%k!<%H%U%)!<%9967b(B ($BAmEv$j967b(B) $B$J$I$rhttp://www.securityfocus.com/bid/15254
$BMWLs(B:
(BvCard PRO $B$K$O!"(BSQL $B9=J8$rCmF~$5$l$k5?$$$,$"$j$^$9!#$3$NLdBj$O!"%f!<%6$,(B
$B;XDj$7$?F~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NOCM$N%5%K%?%$%:=hM}$,E,@Z(B
$B$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967bhttp://www.securityfocus.com/bid/15255
$BMWLs(B:
(BeyeOS $B$K$O(B HTML $B%?%0$rA^F~$5$l$k5?$$$,$"$j$^$9!#$3$NLdBj$O!"%f!<%6$,;XDj(B
$B$7$?F~NOCM$rF0E*$K@8@.$7$?%3%s%F%s%D$G;HMQ$9$kA0$K!"F~NOCM$N%5%K%?%$%:=h(B
$BM}$,E,@Z$KZMQ>pJs$N@`$N967b$,0z$-5/$3$5$l$k2DG=@-$b$"$j$^$9!#(B
(B
(B21. EyeOS User And Password Information Disclosure Vulnerability
(BBugTraq ID: 15256
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2005-11-01
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/15256
$BMWLs(B:
(BeyeOS $B$K$O!">pJs$,O31L$9$k5?$$$,$"$j$^$9!#$3$NLdBj$O!"=EMW$J>pJs$d8"8B$r(B
$BI,MW$H$9$k>pJs$X$N%"%/%;%98"8B$rIUM?$9$kA0$K!"%"%/%;%9$NBEEv@-3NG'$,E,@Z(B
$B$K$*$h$SBP1~$9$k0E9f2=$5$l$?%Q%9(B
$B%o!<%I$N0lMw$rpJs$O!"%P%C%/%(%s%I%7%9%F%`$KBP$9(B
$B$k99$J$k967b$N$N967b$,http://www.securityfocus.com/bid/15257
$BMWLs(B:
(BElite Forum $B$K$O!"(BHTML $B%?%0$rA^F~$5$l$k5?$$$,$"$j$^$9!#$3$NLdBj$O!"%f!<(B
$B%6$,;XDj$7$?F~NOCM$rF0E*$K@8@.$7$?%3%s%F%s%D$G;HMQ$9$kA0$K!"F~NOCM$N%5%K(B
$B%?%$%:=hM}$,E,@Z$KZMQ>pJs$N@`$N967b$,0z$-5/$3$5$l$k2DG=@-$b$"$j$^$9!#(B
(B
(B23. Multiple Vendor ReadDir_R Buffer Overflow Vulnerability
(BBugTraq ID: 15259
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: 2005-11-01
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/15259
$BMWLs(B:
(B'readdir_r' $B4X?t$NFCDj$N;HMQ$K$h$j!"%P%C%U%!%*!<%P!<%U%m!<$,H/@8$9$k2DG=(B
$B@-$,$"$j$^$9!#$3$NLdBj$O!"%a%b%j%P%C%U%!$N3d$jEv$F$H99$J$k=hM}$G$N%P%C%U%!(B
$B$N;HMQ$N4V$G6%9g>uBV$,H/@8$9$k$3$H$KM3Mh$7$^$9!#(B
(B
$B6qBNE*$K$O!"(B'readdir_r' $B4X?t$G$O!"7k2L$rJV$9%a%b%j%P%C%U%!$N%5%$%:$r;XDj(B
$B$7$?$j!"FCDj$N%5%$%:$rMW5a$7$?$j$9$k$3$H$K<:GT$7$F$7$^$$$^$9!#7k2L$rJV$9(B
$B$K$OIT==J,$J%5%$%:$N%a%b%j%P%C%U%!$r;HMQ$9$k$?$a$K!"%P%C%U%!%*!<%P!<%U%m!<(B
$B$,H/@8$9$k2DG=@-$,$"$j$^$9!#(B
(B
$B967bl9g$O!"%/%i%C%7%e$,5/$3$j!"@55,%f!<%6$X$N%5!<%S%95qH]$,(B
$B0z$-5/$3$5$l$k2DG=@-$,9b$$$H9M$($i$l$^$9!#(B
(B
$B0[$J$k%U%!%$%k%7%9%F%`4V$N:GBg%Q%9D9$KAj0c$,$J$$%*%Z%l!<%F%#%s%0%7%9%F%`(B
$B$O!"$3$NLdBj$N1F6A$rhttp://www.securityfocus.com/bid/15260
$BMWLs(B:
(BVUBB $B$K$O!"%/%m%9%5%$%H%9%/%j%W%F%#%s%0967b$rZMQ>pJs$N@`http://www.securityfocus.com/bid/15261
$BMWLs(B:
(BOpenVMS $B$K$O!"%m!<%+%k$G%5!<%S%9ITG=>uBV$K4Y$kL$FCDj$NLdBj$,B8:_$9$k5?$$(B
$B$,$"$j$^$9!#$3$NLdBj$O!"Nc30E*$J>u67$N=hM}$,E,@Z$KuBV$K$7$?$jDd;_$5(B
$B$;$?$j$7!"7k2LE*$K@55,%f!<%6$X$N%5!<%S%95qH]$r>7$/$3$H$,$G$-$^$9!#(B
(B
$B$3$NLdBj$K$D$$$F!"8=;~E@$G$O>pJs$,$[$H$s$I8x3+$5$l$F$$$^$;$s!#>\:Y$,8x3+(B
$B$5$lhttp://www.securityfocus.com/bid/15262
$BMWLs(B:
(BPax $B$K$O!"%;%-%e%j%F%#>e$NLdBj$,B8:_$9$k5?$$$,$"$k$HJs9p$5$l$F$$$^$9!#$3(B
$B$NLdBj$O!"$9$Y$F$N%f!<%6$,=q$-9~$_$G$-$k!"$^$?$O%0%k!<%W$G=q$-9~$_$G$-$k(B
$B%G%#%l%/%H%j$K%"!<%+%$%V$,Cj=P$5$l$k>l9g$K$N$_H/@8$7$^$9!#(Bpax $B$G$O!"?7$7(B
$B$/Cj=P$7$?%U%!%$%k$KBP$7$FHs%"%H%_%C%/$J%W%m%7!<%8%c$G=q$-9~$_$rhttp://www.securityfocus.com/bid/15263
$BMWLs(B:
(BNetBSD $B$N(B X $B%S%k%I$G$O!"0l;~%U%!%$%k$N:n@.$,%;%-%e%j%F%#>eE,@Z$K9T$o$l$^(B
$B$;$s!#%m!<%+%k$K%"%/%;%9$,2DG=$J967be=q$-$9$k2DG=@-$,$"$j$^$9!#(B
(B
$B$3$N967b$K$h$j=EMW$J%U%!%$%k$,>e=q$-$5$l$k>l9g!"%G!<%?$,GK2u$?$j%5!<%S%9(B
$BITG=>uBV$K4Y$C$?$j$9$k2DG=@-$,9b$$$H9M$($i$l$^$9!#$=$NB>$N967b$,http://www.securityfocus.com/bid/15264
$BMWLs(B:
(BNetBSD $B$N(B kernfs $B%U%!%$%k%7%9%F%`$K$O!"%+!<%M%k%a%b%j$,3+<($5$l$k5?$$$,(B
$B$"$j$^$9!#$3$NLdBj$O!"(B'kernfs_xread()' $B$KEO$5$l$k%f!<%6$,;XDj$7$?0z?t$N(B
$B%5%K%?%$%:=hM}$,E,@Z$KpJs$O!"G$0U$N%3%s%T%e!<%?$KBP$7$FB>$N967b$r;E(B
$B3]$1!"5!G=$r40A4$KB;$M$k$?$a$K;HMQ$5$l$k2DG=@-$,$"$j$^$9!#(B
(B
(B29. XMB Forum Post.PHP SQL Injection Vulnerability
(BBugTraq ID: 15267
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2005-11-01
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/15267
$BMWLs(B:
(BXMB Nexus Forum $B$K$O!"(BSQL $B9=J8$rCmF~$5$l$k5?$$$,$"$j$^$9!#$3$NLdBj$O!"%f!<(B
$B%6$,;XDj$7$?F~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NOCM$N%5%K%?%$%:=hM}$,(B
$BE,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967bhttp://www.securityfocus.com/bid/15268
$BMWLs(B:
(BMicrosoft Internet Explorer $B$O!"%5!<%S%9ITG=>uBV$K4Y$kLdBj$N1F6A$ruBV$K4Y$i$;$k2DG=@-$,(B
$B$"$j$^$9!#(B
(B
$B$3$NLdBj$K$D$$$F$N>\:Y$O!"8=;~E@$G$O$[$H$s$I8xI=$5$l$F$$$^$;$s!#99$J$k>\(B
$B:Y$,8x3+$5$lhttp://www.securityfocus.com/bid/15269
$BMWLs(B:
(BCisco Management Center for IPS Sensors $B$K$O!"%G%W%m%$%a%s%HCf$K0lIt$N(B 
(BIPS $B%7%0%M%A%c$,L58z2=$5$l$k5?$$$,$"$j$^$9!#(B
(B
(BIPS MC 2.1 $B$K$h$j@_Dj$5$l$k(B Cisco IOS IPS $B%G%P%$%9$K$*$$$F!"$3$NLdBj$N5?(B
$B$$$,$"$j$^$9!#(BCisco IPS MC 2.1$B!"(BCisco IDS MC$B!"$^$?$O(B Cisco SDM $B$K$h$j@_(B
$BDj$5$l$k(B Cisco IDS/IPS $B%=%j%e!<%7%g%s!"$*$h$S(B Cisco IOS CLI $B$r;HMQ$7$F@_(B
$BDj$5$l$k(B Cisco IDS/IPS $B%=%j%e!<%7%g%s$b!"F1MM$KLdBj$N1F6A$rhttp://www.securityfocus.com/bid/15270
$BMWLs(B:
(BOpenVPN $B%5!<%P$K$O!"%j%b!<%H$+$i$N967b$K$h$j%5!<%S%9ITG=>uBV$K4Y$k5?$$$,(B
$B$"$j$^$9!#$3$NLdBj$O!"@_7W>e$NITHw$K$h$j!"(BTCP $B%b!<%I$Gu67$,E,@Z$K=hM}$5$l$J$$$3$H$KM3Mh$7$^$9!#(B
(B
(BOpenVPN 2.0 $B$N$9$Y$F$N%P!<%8%g%s$K$*$$$F!"$3$NLdBj$N1F6A$rhttp://www.securityfocus.com/bid/15271
$BMWLs(B:
(BSun Java System Communications Express $B$K$O!">pJs$,O31L$9$k5?$$$,$"$j$^(B
$B$9!#(B
(B
$B%j%b!<%H$N967bhttp://www.securityfocus.com/bid/15272
$BMWLs(B:
(BCisco Airespace WLAN (Wireless LAN) $B%G%P%$%9$K$O!"K\Mh8"8B$r;}$?$J$$%f!<(B
$B%6$,J]8n$5$l$F$$$k%M%C%H%o!<%/$K%"%/%;%9$9$k$3$H$r5v$7$F$7$^$&5?$$$,$"$j(B
$B$^$9!#(B
(B
$B$3$NLdBj$O!"(BCisco $B$N%"%/%;%9%]%$%s%H$,(B Lightweight Access Point Protocol
(B(LWAPP) $B%b!<%I$Gl9g$K0z$-5/$3$5$l$k2DG=@-$,(B
$B$"$j$^$9!#(B
(B
$B$3$NLdBj$O!"K\Mh8"8B$r;}$?$J$$%f!<%6$,G'>Z:Q$_$NB>%[%9%H$N(B MAC $B%"%I%l%9(B
$B$K56Au$9$k$3$H$K$h$j!"J]8n$5$l$F$$$k%M%C%H%o!<%/$K0E9f2=$5$l$F$$$J$$%M%C(B
$B%H%o!<%/%Q%1%C%H$rAw?.$9$k$3$H$r5v$7$F$7$^$&2DG=@-$,$"$j$^$9!#$3$l$K$h$j(B
$BL5@~%M%C%H%o!<%/$N%;%-%e%j%F%#$,2sHr$5$l$k$N$G!"G'>Z$5$l$F$$$J$$%[%9%H$K(B
$B$h$kIT@5%"%/%;%9$,5v$5$l$F$7$^$&2DG=@-$,$"$j$^$9!#(B
(B
(B35. RhinoSoft Serv-U FTP Server Unspecified Denial of Service Vulnerability
(BBugTraq ID: 15273
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2005-11-02
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/15273
$BMWLs(B:
(BServ-U FTP $B%5!<%P$K$O!"%5!<%S%9ITG=>uBV$K4Y$kL$FCDj$NLdBj$,B8:_$9$k5?$$(B
$B$,$"$j$^$9!#$3$NLdBj$O!"Nc30E*$J>u67$,E,@Z$K=hM}$5$l$J$$$3$H$KM3Mh$9$k2D(B
$BG=@-$,9b$$$H9M$($i$l$^$9!#(B
(B
$B$3$NLdBj$N6qBNE*$J>\:Y$O8=;~E@$G$O8x3+$5$l$F$$$^$;$s!#>\:Y$,8x3+$5$l7$/$3$H$,$G$-$^$9!#(B
(B
(B36. News2Net Index.PHP SQL Injection Vulnerability
(BBugTraq ID: 15274
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2005-11-02
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/15274
$BMWLs(B:
(BNews2Net $B$K$O!"(BSQL $B9=J8$rCmF~$5$l$k5?$$$,$"$j$^$9!#$3$NLdBj$O!"%f!<%6$,(B
$B;XDj$7$?F~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NOCM$N%5%K%?%$%:=hM}$,E,@Z(B
$B$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967bhttp://www.securityfocus.com/bid/15275
$BMWLs(B:
(BCisco IOS $B$K$O!"%R!<%WNN0h$G%P%C%U%!%*!<%P!<%U%m!<$,H/@8$9$k5?$$$,$"$j$^(B
$B$9!#(BCisco $B$,%j%j!<%9$7$?%"%I%P%$%6%j$K$h$k$H!"(BIOS $B$N%"%C%W%0%l!<%I$K$h$j!"(B
$B%R!<%WNN0h$G$N%P%C%U%!%*!<%P!<%U%m!<$NLdBj$,MxMQ$5$l$k2DG=@-$KBP=h$G$-$^(B
$B$9!#$3$N%"%I%P%$%6%j$K$h$jFCDj$N%R!<%W%*!<%P!<%U%m!<$NLdBj$,2r7h$5$l$k$N(B
$B$+!"$^$?$OB>$N%R!<%W%*!<%P!<%U%m!<$NLdBj$,MxMQ$5$l$k4m81@-$r4KOB$9$k$?$a(B
$B$N%;%-%e%j%F%#6/2=$,Ds6!$5$l$k$@$1$G$"$k$N$+$K$D$$$F$O!"8=;~E@$G$OL@$i$+(B
$B$G$O$"$j$^$;$s!#(B
(B
(B38. phpWebThings Forum.PHP Cross-Site Scripting Vulnerability
(BBugTraq ID: 15276
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2005-11-02
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/15276
$BMWLs(B:
(BphpWebThings $B$K$O!"%/%m%9%5%$%H%9%/%j%W%F%#%s%0967b$rZMQ>pJs$N@`$N%P!<%8%g%s$b(B
$B1F6A$rhttp://www.securityfocus.com/bid/15277
$BMWLs(B:
(BphpWebThing $B$K$O(B SQL $B9=J8$rCmF~$5$l$k5?$$$,$"$j$^$9!#$3$NLdBj$O!"%f!<%6(B
$B$,;XDj$7$?F~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NOCM$N%5%K%?%$%:=hM}$,E,(B
$B@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967bhttp://www.securityfocus.com/bid/15278
$BMWLs(B:
(BMailWatch for MailScanner $B$K$O(B SQL $B9=J8$rCmF~$5$l$k5?$$$,$"$j$^$9!#$3$N(B
$BLdBj$O!"%f!<%6$,;XDj$7$?F~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NOCM$N%5%K(B
$B%?%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967bhttp://www.securityfocus.com/bid/15279
$BMWLs(B:
(BAsus VideoSecurity Online $B$N(B Web $B%5!<%P$K$O!"G'>Z%a%+%K%:%`$G%P%C%U%!%*!<(B
$B%P!<%U%m!<$,H/@8$9$k5?$$$,$"$j$^$9!#$3$NLdBj$O!"(BWeb $B%5!<%P$GG'>Z$,M-8z$K(B
$B$J$C$F$$$k>l9g$K$N$_0z$-5/$3$5$l$^$9!#(B
(B
(BAsus VideoSecurity Online $B$N(B Web $B%5!<%P$O!"%G%U%)%k%H$G$OM-8z$K$J$C$F$$(B
$B$^$;$s!#(B
(B
(BAsus VideoSecurity Online 3.5.0 $B0JA0$N%P!<%8%g%s$K$*$$$F!"LdBj$N1F6A$rhttp://www.securityfocus.com/bid/15280
$BMWLs(B:
(BGlider Connect'n Kill $B$K$O!"%j%b!<%H$+$i$N967b$K$h$j%P%C%U%!%*!<%P!<%U%m!<(B
$B$,H/@8$9$k5?$$$,$"$j$^$9!#$3$NLdBj$O!"%f!<%6$,;XDj$7$?F~NO%G!<%?$r%5%$%:(B
$B$,IT==J,$J%a%b%j%P%C%U%!$K%3%T!<$9$kA0$K!"6-3&%A%'%C%/$,E,@Z$KuBV$,>7$+$l$k2DG=@-$,$"$j$^$9!#(B
$BG$0U$N%3!<%I$,http://www.securityfocus.com/bid/15281
$BMWLs(B:
(BAsus VideoSecurity Online $B$K$O!"%G%#%l%/%H%j%H%i%P!<%5%k967b$rpJs$rhttp://www.securityfocus.com/bid/15282
$BMWLs(B:
(BBattle Carry $B$K$O!"%j%b!<%H$+$i$N967b$K$h$j%5!<%S%9ITG=>uBV$K4Y$k5?$$$,(B
$B$"$j$^$9!#$3$NLdBj$ONc30E*$J>u67$N=hM}$,E,@Z$K7$/2DG=@-$,$"$j$^$9!#(B
(B
(B45. Simple PHP Blog Multiple Input Validation Vulnerabilities
(BBugTraq ID: 15283
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2005-11-02
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/15283
$BMWLs(B:
(BSimple PHP Blog $B$K$O!"F~NOCM$NBEEv@-3NG'$K4XO"$9$kJ#?t$NLdBj$,B8:_$9$k5?(B
$B$$$,$"$j$^$9!#$3$l$i$NLdBj$O!"%f!<%6$,;XDj$7$?F~NOCM$N%5%K%?%$%:=hM}$,E,(B
$B@Z$KZMQ>pJs$N@`(B
$Bhttp://www.securityfocus.com/bid/15284
$BMWLs(B:
(BF-Secure Anti-Virus for Microsoft Exchange $B$*$h$S(B F-Secure Internet
(BGatekeeper $B$K$O!"%G%#%l%/%H%j%H%i%P!<%5%k967b$r$N@\B3$rl9g$K$N$_!"%j%b!<%H$+$iLdBj$rMxMQ2DG=$G$9!#%G%U%)%k%H$N@_Dj$G(B
$B$O!"%m!<%+%k$+$i$N$_LdBj$rMxMQ2DG=$G$9!#(B
(B
(B47. GraphOn GO-Global For Windows Remote Buffer Overflow Vulnerability
(BBugTraq ID: 15285
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2005-11-02
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/15285
$BMWLs(B:
(BGraphOn GO-Global For Windows $B$K$O!"%j%b!<%H$+$i$N967b$K$h$j%P%C%U%!%*!<(B
$B%P!<%U%m!<$,H/@8$9$k5?$$$,$"$j$^$9!#$3$NLdBj$O!"%f!<%6$,;XDj$7$?F~NO%G!<(B
$B%?$r%5%$%:$,IT==J,$J%a%b%j%P%C%U%!$K%3%T!<$9$kA0$K!"6-3&%A%'%C%/$,E,@Z$K(B
$BuBV$,>7$+$l$k2DG=@-$,$"$j$^$9!#G$0U$N(B
$B%3!<%I$,http://www.securityfocus.com/bid/15286
$BMWLs(B:
(BInvision Gallery $B$K$O!"(BHTML $B%?%0$rA^F~$5$l$k5?$$$,$"$j$^$9!#$3$NLdBj$O!"(B
$B%f!<%6$,;XDj$7$?F~NOCM$rF0E*$K@8@.$7$?%3%s%F%s%D$G;HMQ$9$kA0$K!"F~NOCM$N(B
$B%5%K%?%$%:=hM}$,E,@Z$KZMQ>pJs$N@`$N967b$,0z$-5/$3$5$l$k2DG=@-$b$"$j$^$9!#(B
(B
(BMicrosoft Internet Explorer Web $B%V%i%&%6$r;HMQ$7$F$$$k>l9g$K$N$_$3$NLdBj(B
$B$,0z$-5/$3$5$l$^$9!#(B
(B
(B49. Johannes F. Kuhlmann FlatFrag Multiple Remote Buffer Overflow And Denial Of Service Vulnerabilities
(BBugTraq ID: 15287
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2005-11-02
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/15287
$BMWLs(B:
(BJohannes F. Kuhlmann FlatFrag $B$K$O!"%j%b!<%H$+$i$N967b$K$h$j%P%C%U%!%*!<(B
$B%P!<%U%m!<$,H/@8$9$k!"$*$h$S%5!<%S%9ITG=>uBV$K4Y$kJ#?t$NLdBj$,B8:_$9$k5?(B
$B$$$,$"$j$^$9!#%P%C%U%!%*!<%P!<%U%m!<$NLdBj$O!"%f!<%6$,;XDj$7$?%G!<%?$rIT(B
$B==J,$J%5%$%:$N%a%b%j%P%C%U%!$K%3%T!<$9$kA0$K!"6-3&%A%'%C%/$,E,@Z$KuBV$K4Y$kLdBj$O!"(BNULL $B%]%$%s%?$K$h(B
$B$k;2>HFI$_=P$7$N;n$_$KM3Mh$7$^$9!#(B
(B
$B967bhttp://www.securityfocus.com/bid/15288
$BMWLs(B:
(BNeroNet $B$K$O!"%G%#%l%/%H%j%H%i%P!<%5%k967b$rpJs$O!"%P%C%/%(%s%I%3%s%T%e!<%?$KBP$7$F99$J$k967b$r;n$_$k$?$a$Nhttp://www.securityfocus.com/bid/15289
$BMWLs(B:
(BNetBSD $B$O!"%m!<%+%k$G%5!<%S%9ITG=>uBV$K4Y$k2DG=@-$,$"$j$^$9!#$3$NLdBj$O!"(B
(BSO_LINGER $B?GCG%A%'%C%/%3!<%I$K$*$1$k%+!<%M%k%l%Y%k$N%P%0$KM3Mh$7$^$9!#(B
(BNetBSD 2.x $B$K$*$$$F!"$3$NLdBj$N1F6A$r7$/$3$H$r5v$7$F$7$^$$$^$9!#(B
(B
(B52. NetBSD Local PTrace Privilege Escalation Vulnerability
(BBugTraq ID: 15290
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: 2005-11-02
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/15290
$BMWLs(B:
(BNetBSD $B$N(B $B%W%m%;%9DI@W5!G=(B 'ptrace' $B$K$O!"%m!<%+%k$G8"8B$,>:3J$5$l$k2DG=(B
$B@-$,$"$j$^$9!#$3$NLdBj$O!"%W%m%;%9$NDI@W$,9T$o$l$kA0$K>:3J$5$l$?8"8B$Ghttp://www.securityfocus.com/bid/15291
$BMWLs(B:
(BIPSwitch WhatsUp Small Business 2004 $B$K$O!"%G%#%l%/%H%j%H%i%P!<%5%k967b(B
$B$rl=j$K$"$k%U%!%$%k$K%"%/%;%9$9$k$3$H$,5v$5$l$F$7$^$&2DG=@-$,(B
$B$"$j$^$9!#$3$l$K$h$j=EMW$J>pJs$,http://www.securityfocus.com/bid/15292
$BMWLs(B:
(BScorched 3D $B$K$O!"%P%C%U%!%*!<%P!<%U%m!uBV$K4Y$kLdBj!"G$0U$N%3!<%IZ$K@.8y$9$kI,MW$,$"$j$^$9!#(B
(B
(BScorched 3D 39.1 $B0JA0$N%P!<%8%g%s$K$*$$$F!"$3$l$i$NLdBj$N1F6A$rhttp://www.securityfocus.com/bid/15293
$BMWLs(B:
(BF-prot Antivirus $B$K$O!"(BZIP $B7A<0$NE:IU%U%!%$%k$N=hM};~$K%9%-%c%s$,2sHr$5(B
$B$l$k5?$$$,$"$j$^$9!#$3$NLdBj$O!"@_7W>e$NITHw$K$h$j!"FCDj$N(B ZIP $B%U%!%$%k(B
$B$r2rE`$G$-$J$$>l9g$K4m81@-$,$J$$$HH=CG$5$l$k$3$H$KM3Mh$7$^$9!#(B
(B
$B967bhttp://www.securityfocus.com/bid/15294
$BMWLs(B:
(BPHP Handicapper $B$K$O!"%/%m%9%5%$%H%9%/%j%W%F%#%s%0$K4XO"$9$kJ#?t$NLdBj$,(B
$BB8:_$9$k5?$$$,$"$j$^$9!#$3$l$i$NLdBj$O!"%f!<%6$,;XDj$7$?F~NOCM$N%5%K%?%$(B
$B%:=hM}$,E,@Z$KZMQ>pJs$N@`http://www.securityfocus.com/bid/15295
$BMWLs(B:
(BCuteNews $B$O!"%G%#%l%/%H%j%H%i%P!<%5%k$NLdBj$N1F6A$rH$K4X$9$kJ8;zNs(B '../' $B$r;XDj$9$k$3$H$K$h$j!"G$0U$N%U%!%$%k$rpJs$O!"%P%C%/%(%s%I%7%9%F%`$KBP$7$F99$J$k(B
$B967b$r;n$_$k$?$a$N7$/2DG=@-$b$"$j$^$9!#(B
(B
(BCuteNews 1.4.1 $B$K$*$$$F!"$3$NLdBj$N1F6A$r$N%P!<%8%g%s$b1F6A$rhttp://www.securityfocus.com/bid/15296
$BMWLs(B:
(BvBulletin $B$K$O(B HTML $B%?%0$rA^F~$5$l$k5?$$$,$"$j$^$9!#$3$NLdBj$O!"%f!<%6$,(B
$B;XDj$7$?F~NOCM$rF0E*$K@8@.$7$?%3%s%F%s%D$G;HMQ$9$kA0$K!"F~NOCM$N%5%K%?%$(B
$B%:=hM}$,E,@Z$KZMQ>pJs$N@`$N967b$,0z$-5/$3$5$l$k2DG=@-$b$"$j$^$9!#(B
(B
(BMicrosoft Internet Explorer Web $B%V%i%&%6$r;HMQ$7$F$$$k>l9g$K$N$_$3$NLdBj(B
$B$,0z$-5/$3$5$l$^$9!#(B
(B
(B59. PHP Handicapper Process_signup.PHP SQL Injection Vulnerability
(BBugTraq ID: 15298
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2005-11-03
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/15298
$BMWLs(B:
(BPHP Handicapper $B$K$O!"(BSQL $B9=J8$rCmF~$5$l$k5?$$$,$"$j$^$9!#$3$NLdBj$O!"%f!<(B
$B%6$,;XDj$7$?F~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NOCM$N%5%K%?%$%:=hM}$,(B
$BE,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967bhttp://www.securityfocus.com/bid/15299
$BMWLs(B:
(Blibungif $B$K$O!"%a%b%j$rGK2u$5$l$k5?$$$,$"$j$^$9!#(B
(B
(BGIF $B%U%!%$%k$N%+%i!<%^%C%W=hM}$,E,@Z$KuBV$K4Y$k2DG=@-$,$"$j$^$9!#(B
(B
(Blibungif 4.1.3 $B0JA0$N%P!<%8%g%s$K$*$$$F!"$3$NLdBj$N1F6A$rhttp://www.securityfocus.com/bid/15300
$BMWLs(B:
(BMicrosoft $B$O!"(B2005 $B7n(B 11 $B7n(B 8 $BF|$K%;%-%e%j%F%#>pJs$r%j%j!<%9$9$kM=Dj$G$"(B
$B$k$H$N;vA0DL9p$r=P$7$^$7$?!#(B
(B
$B$3$N%;%-%e%j%F%#>pJs$O!"(BMicrosoft Windows $B$K1F6A$rM?$($kLdBj$K4XO"$9$k$b(B
$B$N$G$9!#(B
(B
(B62. PHP Handicapper Process_signup.PHP HTTP Response Splitting Vulnerability
(BBugTraq ID: 15301
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2005-11-03
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/15301
$BMWLs(B:
(BPHP Handicapper $B$O!"(BHTTP $B1~EzJ,3d$NLdBj$N1F6A$rhttp://www.securityfocus.com/bid/15302
$BMWLs(B:
(BMovable Type $B$K$O!"G$0U$N%Q%9$K%V%m%0$r:n@.$G$-$kLdBj$,B8:_$9$k5?$$$,$"(B
$B$j$^$9!#$3$NLdBj$O!"%f!<%6$,;XDj$7$?F~NOCM$N%5%K%?%$%:=hM}$,E,@Z$Kl9g$K$N$_!"$3$NLdBj$,B8:_$9$kE@$KN10U$9$Y$-$G$9!#(B
(B
(B64. IBM WebSphere Application Server QueryString Information Disclosure Vulnerability
(BBugTraq ID: 15303
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: 2005-11-03
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/15303
$BMWLs(B:
(BIBM WebSphere Application Server $B$O!"%j%b!<%H$+$iMxMQ2DG=$J>pJsO31L$NLd(B
$BBj$N1F6A$rpJs$r3+<($7!"99$J$k967b(B
$B$Nhttp://www.securityfocus.com/bid/15304
$BMWLs(B:
(Blibungif $B$K$O!"%5!<%S%9ITG=>uBV$K4Y$k5?$$$,$"$j$^$9!#$3$NLdBj$ONc30E*$J(B
$B>u67$N=hM}$,E,@Z$K7$+$l$^$9!#(B
(B
(Blibungif 4.1.3 $B0JA0$N%P!<%8%g%s$K$*$$$F!"$3$NLdBj$N1F6A$rhttp://www.securityfocus.com/bid/15305
$BMWLs(B:
(BMovable Type $B$K$O!"(BHTML $B%?%0$rA^F~$5$l$k5?$$$,$"$j$^$9!#$3$NLdBj$O!"%f!<(B
$B%6$,;XDj$7$?F~NOCM$rF0E*$K@8@.$7$?%3%s%F%s%D$G;HMQ$9$kA0$K!"F~NOCM$N%5%K(B
$B%?%$%:=hM}$,E,@Z$KZMQ>pJs$N@`$N967b$,0z$-5/$3$5$l$k2DG=@-$b$"$j$^$9!#(B
(B
(B67. Apple QuickTime Embedded Pascal Style Remote Integer Overflow Vulnerability
(BBugTraq ID: 15306
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2005-11-03
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/15306
$BMWLs(B:
(BApple QuickTime $B$O!"%j%b!<%H$+$iMxMQ2DG=$J@0?t%*!<%P!<%U%m!<$NLdBj$N1F6A(B
$B$r7$/2DG=@-$,$"$j$^$9!#$^$?!"(B
$B$3$NLdBj$K$h$j%3!<%Il9g$O!"LdBj$N$"$k%=%U%H%&%'%"$r5/F0$7$?%f!<%6$N8"8B$G%3!<%I$,http://www.securityfocus.com/bid/15307
$BMWLs(B:
(BQuickTime $B$K$O!"%5!<%S%9ITG=>uBV$K4Y$k5?$$$,$"$j$^$9!#$3$NLdBj$ONc30E*$J(B
$B>u67$N=hM}$,E,@Z$K7$+$l$^$9!#(B
(B
(B69. Apple QuickTime Movie Attributes Remote Integer Overflow Vulnerability
(BBugTraq ID: 15308
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2005-11-03
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/15308
$BMWLs(B:
(BApple QuickTime $B$O!"%j%b!<%H$+$iMxMQ2DG=$J@0?t%*!<%P!<%U%m!<$NLdBj$N1F6A(B
$B$r7$/2DG=@-$,$"$j$^$9!#$^$?!"(B
$B$3$NLdBj$K$h$j%3!<%Il9g$O!"LdBj$N$"$k%=%U%H%&%'%"$r5/F0$7$?%f!<%6$N8"8B$G%3!<%I$,http://www.securityfocus.com/bid/15309
$BMWLs(B:
(BApple QuickTime $B$O!"%j%b!<%H$+$iMxMQ2DG=$J%P%C%U%!%*!<%P!<%U%m!<$NLdBj$N(B
$B1F6A$r7$/2DG=@-$,$"$j$^$9!#$^$?!"(B
$B$3$NLdBj$K$h$j%3!<%Il9g$O!"LdBj$N$"$k%=%U%H%&%'%"$r5/F0$7$?%f!<%6$N8"8B$G%3!<%I$,http://www.securityfocus.com/bid/15312
$BMWLs(B:
(BSun Java Development Kit (JDK) $B$K$O!"%j%b!<%H$+$i$N967b$K$h$j%5!<%S%9IT(B
$BG=>uBV$K4Y$k5?$$$,$"$j$^$9!#$3$NLdBj$O!"%U%)%s%H$N%G%7%j%"%i%$%7$+$l$^$9!#(B
(B
(B72. Galerie ShowGallery.PHP SQL Injection Vulnerability
(BBugTraq ID: 15313
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2005-11-04
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/15313
$BMWLs(B:
(BGalerie $B$K$O!"(BSQL $B9=J8$rCmF~$5$l$k5?$$$,$"$j$^$9!#$3$NLdBj$O!"%f!<%6$,;X(B
$BDj$7$?F~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NOCM$N%5%K%?%$%:=hM}$,E,@Z$K(B
$B7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967bhttp://www.securityfocus.com/bid/15314
$BMWLs(B:
(Bchfn $B$K$O!"8"8B>:3J$,0z$-5/$3$5$l$k5?$$$,$"$j$^$9!#$3$NLdBj$O!"%f!<%6$,(B
$B;XDj$7$?F~NOCM$N%5%K%?%$%:=hM}$,E,@Z$K:3J$5$;(B
$B$k$3$H$,$G$-$^$9!#(B
(B
(B74. Cerberus Helpdesk Information Disclosure Vulnerability
(BBugTraq ID: 15315
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2005-11-04
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/15315
$BMWLs(B:
(BCerberus Helpdesk $B$K$O!">pJs$,O31L$9$k5?$$$,$"$j$^$9!#$3$NLdBj$O!"%f!<%6(B
$B$,;XDj$7$?F~NOCM$N%5%K%?%$%:=hM}$,E,@Z$K$N%f!<%6$NG$0U$NEE;R%a!<%kE:IU%U%!%$%k$rp(B
$BJs$O!"%P%C%/%(%s%I%7%9%F%`$KBP$9$k99$J$k967b$N$N967b$,http://www.securityfocus.com/bid/15316
$BMWLs(B:
(BClamAV $B$K$O!"%5!<%S%9ITG=>uBV$K4Y$k5?$$$,$"$j$^$9!#$3$NLdBj$O!"0U?^E*$K(B
$B:n@.$5$l$?(B TNEF $B%U%!%$%k$N=hM}$,<:GT$9$k$3$H$KM3Mh$7$^$9!#(B
(B
$BLdBj$NMxMQ$K$h$j%"%W%j%1!<%7%g%s$,L58B%k!<%W$K4Y$j!"%5!<%S%9ITG=>uBV$,>7(B
$B$+$l$k2DG=@-$,$"$j$^$9!#(B
(B
(B76. Clam Anti-Virus ClamAV CAB File Handling Denial Of Service Vulnerability
(BBugTraq ID: 15317
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2005-11-04
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/15317
$BMWLs(B:
(BClamAV $B$K$O!"%5!<%S%9ITG=>uBV$K4Y$k5?$$$,$"$j$^$9!#$3$NLdBj$O!"0U?^E*$K(B
$B:n@.$5$l$?(B CAB $B%U%!%$%k$N=hM}$,<:GT$9$k$3$H$KM3Mh$7$^$9!#(B
(B
$BLdBj$NMxMQ$K$h$j%"%W%j%1!<%7%g%s$,L58B%k!<%W$K4Y$j!"%5!<%S%9ITG=>uBV$,>7(B
$B$+$l$k2DG=@-$,$"$j$^$9!#(B
(B
(B77. Clam Anti-Virus ClamAV FSG File Handling Buffer Overflow Vulnerability
(BBugTraq ID: 15318
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2005-11-04
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/15318
$BMWLs(B:
(BClamAV $B$K$O!"%P%C%U%!%*!<%P!<%U%m!<$,H/@8$9$k5?$$$,$"$j$^$9!#$3$NLdBj$O!"(B
$B%f!<%6$,;XDj$7$?F~NO%G!<%?$r%5%$%:$,IT==J,$J%a%b%j%P%C%U%!$K%3%T!<$9$kA0(B
$B$K!"6-3&%A%'%C%/$,E,@Z$Kl9g$K0z$-5/$3$5$l$^$9!#(B
(B
(B78. GpsDrive Friendsd Remote Format String Vulnerability
(BBugTraq ID: 15319
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2005-11-04
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/15319
$BMWLs(B:
(BGpsDrive $B$K$O!"%j%b!<%H$+$i%U%)!<%^%C%H%9%H%j%s%0$NLdBj$,MxMQ$5$l$k5?$$(B
$B$,$"$j$^$9!#%j%b!<%H$N967bhttp://www.securityfocus.com/bid/15320
$BMWLs(B:
(Bthttpd $B$G$O!"0l;~%U%!%$%k$N:n@.$,%;%-%e%j%F%#>eE,@Z$K9T$o$l$^$;$s!#(B
(B
$B%m!<%+%k$K%"%/%;%9$,2DG=$J967be=q$-$9$k2DG=@-$,$"$j(B
$B$^$9!#(B
(B
$B$3$N967b$K$h$j=EMW$J%U%!%$%k$,>e=q$-$5$l$k>l9g!"%G!<%?$,GK2u$?$j%5!<%S%9(B
$BITG=>uBV$K4Y$C$?$j$9$k2DG=@-$,9b$$$H9M$($i$l$^$9!#$=$NB>$N967b$,http://www.securityfocus.com/bid/15321
$BMWLs(B:
(BIBM Lotus Domino $B$K$O!"J#?t$NLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#0lIt$NLdBj$,(B
$BMxMQ$5$l$k$H%/%i%C%7%e$,0z$-5/$3$5$l$^$9!#$^$?!"1F6A$,ITL@$J$$$/$D$+$NL$(B
$BFCDj$NLdBj$,B8:_$9$k$3$H$b3NG'$5$l$F$$$^$9!#(B
(B
(BLotus Domino 6.5.4 Fix Pack 2 $B$h$jA0$N%P!<%8%g%s$K$*$$$F!"$3$l$i$NLdBj$N(B
$B1F6A$rhttp://www.securityfocus.com/bid/15322
$BMWLs(B:
(BPunBB $B$*$h$S(B Blog:CMS $B$K$O!"(BHTML $B%?%0$rA^F~$5$l$k5?$$$,$"$j$^$9!#$3$NLd(B
$BBj$O!"%f!<%6$,;XDj$7$?F~NOCM$rF0E*$K@8@.$7$?%3%s%F%s%D$G;HMQ$9$kA0$K!"F~(B
$BNOCM$N%5%K%?%$%:=hM}$,E,@Z$KZMQ>pJs$N@`$N967b$,0z$-5/$3$5$l$k2DG=@-$b$"$j$^$9!#(B
(B
(BMicrosoft Internet Explorer Web $B%V%i%&%6$r;HMQ$7$F$$$k>l9g$K$N$_$3$NLdBj(B
$B$,0z$-5/$3$5$l$^$9!#(B
(B
(B82. IBM AIX SWCONS Local Buffer Overflow Vulnerability
(BBugTraq ID: 15323
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: 2005-11-03
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/15323
$BMWLs(B:
(BIBM AIX $B$N(B swcons $B$K$O!"%m!<%+%k$G$N967b$K$h$j%P%C%U%!%*!<%P!<%U%m!<$,H/(B
$B@8$9$k5?$$$,$"$j$^$9!#(B
(B
$BLdBj$N$"$k%f!<%F%#%j%F%#$K(B setuid root $B%S%C%H$,IUM?$5$l$F$$$k>l9g$O!"96(B
$B7b$,@.8y$9$k$3$H$K$h$jG$0U$N%^%7%s%3!<%I$r4IM}http://www.securityfocus.com/bid/15324
$BMWLs(B:
(BJPortal $B$K$O!"(BSQL $B9=J8$rCmF~2DG=$JJ#?t$NLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#$3(B
$B$l$i$NLdBj$O!"%f!<%6$,;XDj$7$?F~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NOCM(B
$B$N%5%K%?%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967bhttp://www.securityfocus.com/bid/15325
$BMWLs(B:
(BApache Tomcat $B$O!"%j%b!<%H$+$i$N967b$K$h$j%5!<%S%9ITG=>uBV$K4Y$kLdBj$N1F(B
$B6A$ruBV$K4Y(B
$B$i$;$k2DG=@-$,$"$j$^$9!#(B
(B
(B85. PunBB/BLOG:CMS Origin Spoofing Vulnerability
(BBugTraq ID: 15326
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2005-11-04
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/15326
$BMWLs(B:
(BPunBB $B$*$h$S(B Blog:CMS $B$O!"967bhttp://www.securityfocus.com/bid/15327
$BMWLs(B:
(BcPanel $B$K$O(B HTML $B%?%0$rA^F~$5$l$k5?$$$,$"$j$^$9!#$3$NLdBj$O!"%f!<%6$,;X(B
$BDj$7$?F~NOCM$rF0E*$K@8@.$7$?%3%s%F%s%D$G;HMQ$9$kA0$K!"F~NOCM$N%5%K%?%$%:(B
$B=hM}$,E,@Z$KZMQ>pJs$N@`$N967b$,0z$-5/$3$5$l$k2DG=@-$b$"$j$^$9!#(B
(B
$B$3$NLdBj$rMxMQ$9$k$K$O!"967bhttp://www.securityfocus.com/bid/15328
$BMWLs(B:
(BPunBB $B$*$h$S(B Blog:CMS $B$K$O!">pJsO31L$K4XO"$9$kL$FCDj$NLdBj$,B8:_$9$k5?$$(B
$B$,$"$j$^$9!#(B
(B
$B$3$NLdBj$K$D$$$F$N>\:Y$J>pJs$O$[$H$s$I8x3+$5$l$F$$$^$;$s!#99$J$k>pJs$,8x(B
$B3+$5$lhttp://www.securityfocus.com/bid/15329
$BMWLs(B:
(BOcean12 ASP Calendar Manager $B$K$O!"G'>Z$,2sHr$5$l$k5?$$$,$"$j$^$9!#$3$N(B
$BLdBj$O!"%"%/%;%9$NBEEv@-3NG'$NITHw$KM3Mh$7$^$9!#(B
(B
$B%"%/%;%98"8B$NBEEv@-3NG'$,E,@Z$K$N%P!<%8%g%s$b1F6A(B
$B$rhttp://www.securityfocus.com/bid/15330
$BMWLs(B:
(BOcean12 ASP Calendar Manager $B$K$O!"(BSQL $B9=J8$rCmF~$5$l$k5?$$$,$"$j$^$9!#(B
$B$3$NLdBj$O!"%f!<%6$,;XDj$7$?F~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NOCM$N(B
$B%5%K%?%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967bhttp://www.securityfocus.com/bid/15331
$BMWLs(B:
$BJ#?t$N(B Web $B%V%i%&%6$K$O!"(BCookie $B$N%[%9%HL>=hM}$NLdBj$K$h$j=EMW$J>pJs$,3+(B
$B<($5$l$k2DG=@-$,$"$j$^$9!#$3$NLdBj$O!"(BCookie $B$H%I%a%$%sL>$N4XO"IU$1$,(B 
(BWeb $B%V%i%&%6$GE,@Z$K3NG'$5$l$J$$$3$H$KM3Mh$7$^$9!#(B
(B
$BLdBj$N$"$k(B Web $B%V%i%&%6$r%k%P%i%$%V%i%j$K(B
$B8!:w%Q%9$,@_Dj$5$l$F$$$k>l9g$K!"$3$NLdBj$,0z$-5/$3$5$l$^$9!#(B
(B
$B$3$NLdBj$K$h$j!"%j%b!<%H$N967bpJs$K%"%/%;%9$7!"99$J$k967b$N(B
$B5=$,9T$o$l$k2DG=@-$b$"$j$^$9!#(B
(B
$B4{B8$N:G>e0L%I%a%$%s$HFbItE*$K%[%9%H$5$l$F$$$k%I%a%$%s$GF1;~$KM-8z$J%[%9(B
$B%HL>$r%f!<%6$,;HMQ$9$k>l9g$K$N$_!"$3$NLdBj$rMxMQ2DG=$G$"$kE@$KN10U$9$Y$-(B
$B$G$9!#(B
(B
(B91. Macromedia Flash Array Index Memory Access Vulnerability
(BBugTraq ID: 15332
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2005-11-05
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/15332
$BMWLs(B:
(BFlash $B%W%i%0%$%s$O!"F~NOCM$NBEEv@-3NG'$NITHw$NLdBj$N1F6A$rhttp://www.securityfocus.com/bid/15333
$BMWLs(B:
$BF~NOCM$NBEEv@-3NG'$NITHw$KM3Mh$9$k(B SQL $B9=J8$rCmF~$9$k967b$,Js9p$5$l$F$$(B
$B$^$9!#(BPowerBoard $B$*$h$S(B vBulletin $B$N%$%s%9%H!<%k$N(B "index.php" $B%9%/%j%W(B
$B%H$K$*$$$F!"$3$N%b%8%e!<%k$,M-8z$K$J$C$F$$$k>l9g$KLdBj$,B8:_$9$k$3$H$,Js(B
$B9p$5$l$F$$$^$9!#(BPowerBoard $B%f!<%6$N(B "id" $B$*$h$S(B vBulletin $B%f!<%6$N(B 
(B"userid" $B$H$$$&(B HTML $BJQ?t$,!"(BSQL $B%/%(%jJ8;zNs$KKd$a9~$^$l$kA0$KE,@Z$K%((B
$B%9%1!<%W$5$l$J$$$3$H$,Js9p$5$l$F$$$^$9!#(B
(B
(B
(BIII. SECURITYFOCUS NEWS ARTICLES
(B--------------------------------
(B1. Suspected bot master busted
$BCxR2p$GHo32$re$2$F$$$?MF5?$G!"%+%j%U%)%k%K%"=#:_=;$NCK$,9pH/$5$l$^$7$?!#(B
(B
(Bhttp://www.securityfocus.com/news/11353
(B
(B2. Hidden DRM code's legitimacy questioned
$BCxe$K$O%"%s%$%s%9%H!<%k$,:$Fq$J%G%8%?%kCx:n8"4IM}(B (DRM) $B%=%U%H%&%'%"$,(B
$B1#$5$l$F%$%s%9%H!<%k$5$l$^$9!#$3$N$3$H$K$D$$$F!"%;%-%e%j%F%#$N@lLg2H$?$A(B
$B$O%l%3!<%I2qhttp://www.securityfocus.com/news/11352
(B
(B3. U.S. makes securing SCADA systems a priority
$BCxc>J$O3F4k6H$,@)8f%7%9%F%`$r(B
$B%m%C%/%@%&%s$G$-$k$h$&$K$9$k$?$a$N?7$?$J;n$_$r9T$C$F$$$^$9!#(B
(B
(Bhttp://www.securityfocus.com/news/11351
(B
(B4. Web defacer sentenced, facing deportation 
$BCxhttp://www.securityfocus.com/news/11350
(B
(B5. Skype under scrutiny for bugs
$BCxe$NLdBj$O!"%Y%s%@$K$H$C$F:G0-$N%?(B
$B%$%_%s%0$G5/$3$j$^$7$?!#(B
(B
(Bhttp://www.securityfocus.com/news/11354
(B
(B6. Say hello to the Skype Trojan
$BCxhttp://www.securityfocus.com/news/11348
(B
(B7. Shared music abuse bug hits iTunes
$BCxhttp://www.securityfocus.com/news/11347
(B
(B8. US cybersecurity all at sea
$BCxc>J$K$h$k%"%a%j%+9qFb$N%5%$%P!<%;%-%e%j%F%#%j%9%/$N4IM}$OIT==(B
$BJ,$G$"$k!"$H@h$NJF9qBgE}NN>pJs%;%-%e%j%F%#C4Ev8\Ld$OH/8@$7$F$$$^$9!#(B
(B
(Bhttp://www.securityfocus.com/news/11345
(B
(B
(B--
$BK]Lu(B: LAC $BK]Lu%A!<%`(B
$B4F=$(B: $B>.3^8691M:(B (OGASAWARA Tsuneo)
(BLAC Co., Ltd.
(Bhttp://www.lac.co.jp/index.html
Attachment: smime.p7s
Description: S/MIME cryptographic signature
Prev by Date: Windows Media Player BMP Heap Overflow
Next by Date: SecurityFocus Newsletter #322 2005-10-24->2005-10-28
Previous by thread: Windows Media Player BMP Heap Overflow
Next by thread: SecurityFocus Newsletter #322 2005-10-24->2005-10-28
Index(es):
- Date
- Thread