[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
SecurityFocus Newsletter #324 2005-11-07->2005-11-11

To: bugtraq-jp@xxxxxxxxxxxxxxxxx
Subject: SecurityFocus Newsletter #324 2005-11-07->2005-11-11
From: Tsuneo Ogasawara <t.ogaswr@xxxxxxxxx>
Date: Fri, 24 Feb 2006 17:47:47 +0900
$B>.3^86(B@$B%i%C%/$G$9!#(B
(B 
(BSecurityFocus Newsletter $BBh(B 324 $B9f$NOBLu$r$*FO$1$7$^$9!#(B
$BLu$N$J$$9`L\$K$D$$$F$O!VF|K\8lLu$J$7!W$H$7$F6hJL$7$F$"$j$^$9!#(B
(B 
(B---------------------------------------------------------------------------
(BBugTraq-JP $B$K4X$9$k(B FAQ ($BF|K\8l(B):
(Bhttp://www.securityfocus.com/archive/79/description
$B!&(BSecurityFocus Newsletter $B$NOBLu$O(B BugTraq-JP $B$G0lH$/$@$5$$(B
(B---------------------------------------------------------------------------
(BSecurityFocus Newsletter $B%"!<%+%$%V(B ($B1Q8l(B):
(Bhttp://www.securityfocus.com/archive/78
(BBugTraq $B$K4X$9$k(B FAQ ($B1Q8l(B):
(Bhttp://www.securityfocus.com/archive/1/description
(B---------------------------------------------------------------------------
$B0zMQ$K4X$9$kHw9M(B:
$B!&$3$NOBLu$O(B SecurityFocus $B$N5v2D$r3t<02qe$G9T$o$l$F$$$^$9!#(B
$B!&(BSecurityFocus Newsletter $B$NOBLu$r(B Netnews, Mailinglist, World Wide Web,
(B  $B=q@R(B, $B$=$NB>$N5-O?G^BN$G0zMQ$5$l$k>l9g$K$O%a!<%k$NA4J80zMQ$r$*4j$$$7$^$9!#(B
$B!&F|K\8lHG%K%e!<%9%l%?!<(B 1 $B9f$+$i(B 3 $B9f$^$G$K$O$3$NHw9M$,IU$$$F$$$^$;$s$,!"(B
(B  $B=`MQ$9$k$b$N$H$7$^$9!#(B
$B!&$^$?!"(BSecurityFocus $BDs6!$N(B BugTraq-JP $B%"!<%+%$%V(B [*1] $B$X$N$$$+$J$k7A<0$N(B
(B  $B%O%$%Q!<%j%s%/$b>e5-$K=`$8$F$/$@$5$$!#(B
(B1) http://online.securityfocus.com/archive/79
(B---------------------------------------------------------------------------
$B$3$NOBLu$K4X$9$kHw9M(B:
$B!&$3$NOBLu$NE,MQ@.2L$K$D$$$F3t<02ql9g!"(BBugTraq-JP $B$X(B Errata $B$H$7$F=$@5(B
(B  $BHG$r$4Ej9FD:$/$+!"4F=$l9g$K$O=$@5HG$r$G$-$k$@$1?WB.$KH/9T$7$^$9!#(B
(B---------------------------------------------------------------------------
(BThis translation is encoded and posted in ISO-2022-JP.
(B 
$B86HG(B:
(BDate: Tue, 15 Nov 2005 16:44:35 -0700
(BMessage-ID: <437A72E3.8080205@xxxxxxxxxxxxxxxxx>
(B 
(BSecurityFocus Newsletter #324
(B-----------------------------
(B
(BThis Issue is Sponsored By: Watchfire AppScan
(B
(BI. FRONT AND CENTER ($BF|K\8lLu$J$7(B)
(B     1. Sony's legal issues
(B     2. Linux worm overrated
(BII. BUGTRAQ SUMMARY
(B     1. Macromedia Flash Array Index Memory Access Vulnerability
(B     2. ibProArcade User ID SQL Injection Vulnerability
(B     3. Macromedia Flash ActionDefineFunction Memory Access Vulnerability
(B     4. PHPFM Arbitrary File Upload Vulnerability
(B     5. Asterisk Voicemail Unauthorized Access Vulnerability
(B     6. Debian Horde Default Administrator Password Vulnerability
(B     7. Jed Wing CHM Lib LZX Decompression Method Buffer Overflow Vulnerability
(B     8. F-Secure Anti-Virus Gatekeeper and Gateway for Linux Local Privilege Escalation Vulnerability
(B     9. OSTE Remote File Include Vulnerability
(B     10. GNU gnump3d Unspecified Cross-Site Scripting Vulnerability
(B     11. XMB U2U.PHP Cross-Site Scripting Vulnerability
(B     12. Linux-FTPD-SSL FTP Server Remote Buffer Overflow Vulnerability
(B     13. Invision Power Board Multiple Cross-Site Scripting Vulnerabilities
(B     14. Invision Power Board Multiple HTML Injection Vulnerabilities
(B     15. FileZilla Server Terminal Remote Client-Side Buffer Overflow Vulnerability
(B     16. Zone Labs Zone Alarm Advance Program Control Bypass Weakness
(B     17. toendaCMS Admin.PHP Directory Traversal Vulnerability
(B     18. VERITAS Cluster Server for UNIX Local Buffer Overflow Vulnerability
(B     19. PHPList Multiple Input Validation Vulnerabilities
(B     20. toendaCMS Remote File Upload Vulnerability
(B     21. Microsoft Windows Graphics Rendering Engine WMF/EMF Format Code Execution Vulnerability
(B     22. VERITAS NetBackup Volume Manager Daemon Buffer Overflow Vulnerability
(B     23. PHPKit Multiple Input Validation Vulnerabilities
(B     24. ATutor Registration.PHP SQL Injection Vulnerability
(B     25. Microsoft Windows Graphics Rendering Engine WMF Format Code Execution Vulnerability
(B     26. PHP Group Exif Module Infinite Recursion Denial Of Service Vulnerability
(B     27. HP-UX ENVD Local Privilege Escalation Vulnerability
(B     28. SAP Web Application Server HTTP Response Splitting Vulnerability
(B     29. SAP Web Application Server Multiple Cross-Site Scripting Vulnerabilities
(B     30. SAP Web Application Server URI Redirection Vulnerability
(B     31. Sylpheed LDIF Import Remote Buffer Overflow Vulnerability
(B     32. ASPKnowledgebase Adminlogin.ASP SQL Injection Vulnerability
(B     33. Linux Kernel Sysctl Unregistration Local Denial of Service Vulnerability
(B     34. HP-UX RemSHD Unspecified Unauthorized Access Vulnerability
(B     35. IBM Tivoli Directory Server Unspecified Unauthorized Access Vulnerability
(B     36. YaBB Image Upload HTML Injection Vulnerability
(B     37. Google Talk Email Notification Denial Of Service Vulnerability
(B     38. Mike Neuman OSH Environment Variable Buffer Overflow Vulnerability
(B     39. TikiWiki Tiki-view_forum_thread.PHP Cross-Site Scripting Vulnerability
(B     40. Antville Cross-Site Scripting Vulnerability
(B     41. SpamAssassin Bus Error Spam Detection Bypass Vulnerability
(B     42. IBM DB2 Content Manager Multiple Denial of Service Vulnerabilities
(B     43. IPCop Backup Key Information Disclosure Vulnerability
(B     44. IPCop Backup File Replacement Race Condition Vulnerability
(B     45. Moodle Multiple SQL Injection Vulnerabilities
(B     46. RealNetworks RealOne Player/RealPlayer RM File Remote Stack Based Buffer Overflow Vulnerability
(B     47. RealNetworks RealPlayer DUNZIP32.DLL Heap Overflow Vulnerability 
(B     48. Sun Solaris In.Named Remote Denial of Service Vulnerability
(B     49. phpAdsNew Lib-sessions.inc.PHP SQL Injection Vulnerability
(B     50. OcoMon Multiple Unspecified SQL Injection Vulnerabilities
(B     51. Kerio WinRoute Firewall RTSP Stream Denial of Service Vulnerability
(B     52. Kerio WinRoute Firewall Disabled Account Bypass Vulnerability
(B     53. Exponent CMS Multiple SQL Injection Vulnerabilities
(B     54. TikiWiki Tiki-Editpage.PHP Directory Traversal Vulnerability
(B     55. Exponent CMS Image Upload Arbitrary Script Execution Vulnerability
(B     56. TikiWiki Tiki-User_Preferences.PHP Directory Traversal Vulnerability
(B     57. Dev-Editor Virtual Directory Security Bypass Vulnerability
(B     58. Sudo Perl Environment Variable Handling Security Bypass Vulnerability
(B     59. Lynx URI Handlers Arbitrary Command Execution Vulnerability
(B     60. PHPSysInfo Multiple Input Validation Vulnerabilities
(B     61. IBM AIX Diagela.SH Unspecified Security Vulnerability
(B     62. RealNetworks RealPlayer Unspecified Malformed Image Skin File Buffer Overflow Vulnerability
(B     63. PHPWebThings Download.PHP File Parameter SQL Injection Vulnerability
(B     64. ActiveCampaign 1-2-All Broadcast Email Admin Control Panel Username SQL Injection Vulnerability
(BIII. SECURITYFOCUS NEWS
(B     1. Sony BMG faces digital-rights siege
(B     2. Gold at the end of rainbow cracking?
(B     3. Suspected bot master busted
(B     4. Hidden DRM code's legitimacy questioned
(B     5. Skype under scrutiny for bugs
(B     6. Say hello to the Skype Trojan
(B     7. Shared music abuse bug hits iTunes
(B     8. US cybersecurity all at sea
(B
(B
(BI. FRONT AND CENTER ($BF|K\8lLu$J$7(B)
(B----------------------------
(B
(BII.BUGTRAQ SUMMARY
(B--------------------
(B1. Macromedia Flash Array Index Memory Access Vulnerability
(BBugTraq ID: 15332
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2005-11-05
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/15332
$BMWLs(B: 
(BFlash $B%W%i%0%$%s$O!"F~NOCM$NBEEv@-3NG'$NITHw$N1F6A$re$KG[CV$5$l$?LdBj$r0z$-5/$3$9$h(B
$B$&$K@_7W$5$l$?0-0U$"$k(B SWF $B%U%!%$%k$r;HMQ$9$kJ}K!$G$9!#(B
(B
(BMacromedia Flash 6 $B$*$h$S(B 7 $B$K$*$$$FLdBj$,B8:_$9$k$HJs9p$5$l$F$$$^$9!#(B
(B
(B2. ibProArcade User ID SQL Injection Vulnerability
(BBugTraq ID: 15333
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2005-11-05
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/15333
$BMWLs(B: 
$BF~NOCM$NBEEv@-3NG'$NITHw$KM3Mh$9$k(B SQL $B9=J8$,CmF~$5$l$k967b$,Js9p$5$l$F(B
$B$$$^$9!#$3$NLdBj$O!"(BibProArcade $B%b%8%e!<%k$,M-8z$K@_Dj$5$l$F$$$k>l9g$K!"(B
(BPowerBoard $B$*$h$S(B vBulletin $B$NN>%$%s%9%H!<%k$N(B "index.php" $B%9%/%j%W%H$K(B
$BB8:_$9$k$HJs9p$5$l$F$$$^$9!#(BPowerBoard $B%f!<%6MQ$N(B HTML $BJQ?t(B "id" $B$*$h$S(B 
(BvBulletin $B%f!<%6MQ$N(B "userid" $B$N%(%9%1!<%W=hM}$,!"(BSQL $B%/%(%jJ8;zNs$KKd$a(B
$B9~$^$l$kA0$KE,@Z$Khttp://www.securityfocus.com/bid/15334
$BMWLs(B: 
(BMacromedia Flash $B$N%W%i%0%$%s$K$OF~NOCM$NBEEv@-3NG'$NITHw$N1F6A$ruBV$r0z(B
$B$-5/$3$9$?$a$KMxMQ$5$l$k2DG=@-$,$"$j$^$9!#$3$NLdBj$O!"=EMW$JG[Ns%$%s%G%C(B
$B%/%9CM$KBP$9$kF~NOCM$NBEEv@-3NG'$NITHw$KM3Mh$7$^$9!#(B
(B
$B967be$KCV$+$l$?LdBj$r0z$-5/$3$9$h$&(B
$B$K@_7W$5$l$?0-0U$"$k(B SWF $B%U%!%$%k$r;HMQ$9$kJ}K!$G$9!#(B
(B
(BMacromedia Flash 6 $B$*$h$S(B 7 $B$K$*$$$F$3$NLdBj$N1F6A$rhttp://www.securityfocus.com/bid/15335
$BMWLs(B: 
(BPHPFM $B$K$O!"G$0U$N%U%!%$%k$,%"%C%W%m!<%I$5$l$kLdBj$,B8:_$9$k5?$$$,$"$j$^(B
$B$9!#(B
(B
$B967b:3J$,0z$-5/$3$5$l$k2DG=@-$,$"$j$^$9!#$=$NB>$N967b$,http://www.securityfocus.com/bid/15336
$BMWLs(B: 
(BAsterisk $B$K$O!"K\Mh5v2D$5$l$F$$$J$$%"%/%;%9$,9T$o$l$kLdBj$,B8:_$9$k5?$$(B
$B$,$"$j$^$9!#$3$NLdBj$O!"%f!<%6$,;XDj$7$?F~NOCM$NBEEv@-3NG'$,E,@Z$Ke$NG$0U$N(B '.wav/.WAV' $B%U%!%$%k$X$N%"%/%;%9$r967bhttp://www.securityfocus.com/bid/15337
$BMWLs(B: 
(BDebian $B$N(B Horde3 $B%Q%C%1!<%8$N%G%U%)%k%H%$%s%9%H!<%k$G$O!"4IM}$N967b$,(B
$B0z$-5/$3$5$l$k2DG=@-$b$"$j$^$9!#(B
(B
$B$3$l$O(B Horde3 $B%"%W%j%1!<%7%g%s$r(B Debian Linux $B$K%$%s%9%H!<%k$9$k$H$-$K$N(B
$B$_8+$i$l$kLdBj$G$9!#(B
(B
(B7. Jed Wing CHM Lib LZX Decompression Method Buffer Overflow Vulnerability
(BBugTraq ID: 15338
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2005-11-07
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/15338
$BMWLs(B: 
(BCHM lib $B$K$O!"%P%C%U%!%*!<%P!<%U%m!<$,H/@8$9$k5?$$$,$"$j$^$9!#(B
(B
(BLZX $B2rE`%a%=%C%I$,$3$NLdBj$N1F6A$re%j%b!<%H$+$iMxMQ$5$l$k2DG=@-$,$"$j!"(BCHM lib $B%i%$%V%i%j$r;HMQ$9$k(B
$B%"%W%j%1!<%7%g%s$N%;%-%e%j%F%#%3%s%F%-%9%HFb$G967be$N>\:Y>pJs$O8=;~E@$G$O8x3+$5$l$F$$$^$;$s!#>\:Y$,8x3+$5$lhttp://www.securityfocus.com/bid/15339
$BMWLs(B: 
(BF-Secure Anti-Virus $B@=IJ$K$O!"%m!<%+%k$G8"8B>:3J$,0z$-5/$3$5$l$k2DG=@-$,(B
$B$"$j$^$9!#$3$NLdBj$O!"%;%-%e%j%F%#>eITE,@Z$J(B setuid-superuser $B%P%$%J%j$N(B
$B%Q!<%_%C%7%g%s$KM3Mh$7$^$9!#(B
(B
$B$3$NLdBj$O%m!<%+%k$N967bhttp://www.securityfocus.com/bid/15340
$BMWLs(B: 
(BOSTE $B$K$O!"%j%b!<%H$+$i%U%!%$%k$,%$%s%/%k!<%I$5$l$k5?$$$,$"$j$^$9!#$3$N(B
$BLdBj$O!"%f!<%6$,;XDj$7$?F~NOCM$N%5%K%?%$%:=hM}$,E,@Z$Ke$G(B Web $B%5!<%P%W%m%;(B
$B%9$N8"8B$r;HMQ$7!"G$0U$N(B PHP $B%3!<%I$r%j%b!<%H$+$ihttp://www.securityfocus.com/bid/15341
$BMWLs(B: 
(BGNU gnump3d $B$K$O!"%/%m%9%5%$%H%9%/%j%W%F%#%s%0967b$rZMQ>pJs$N@`http://www.securityfocus.com/bid/15342
$BMWLs(B: 
(BXMB $B$K$O!"%/%m%9%5%$%H%9%/%j%W%F%#%s%0967b$rZMQ>pJs$N@`http://www.securityfocus.com/bid/15343
$BMWLs(B: 
(BLinux-FTPD-SSL FTP Server $B$G$O!"%j%b!<%H$+$i$N967b$K$h$j%P%C%U%!%*!<%P!<(B
$B%U%m!<$,H/@8$9$k2DG=@-$,$"$j$^$9!#$3$NLdBj$O!"%f!<%6$,;XDj$7$?F~NO%G!<%?(B
$B$r%5%$%:$,IT==J,$J%a%b%j%P%C%U%!$K%3%T!<$9$kA0$K!"6-3&%A%'%C%/$,E,@Z$Kl9g$ODL>o!"4IM}http://www.securityfocus.com/bid/15344
$BMWLs(B: 
(BInvision Power Board $B$K$O!"%/%m%9%5%$%H%9%/%j%W%F%#%s%0967b$rZMQ>pJs$N@`(B
$Bhttp://www.securityfocus.com/bid/15345
$BMWLs(B: 
(BInvision Power Board $B$K$O!"(BHTML $B%?%0$rA^F~2DG=$JJ#?t$NLdBj$,B8:_$9$k5?$$(B
$B$,$"$j$^$9!#$3$l$i$NLdBj$O!"%f!<%6$,;XDj$7$?F~NOCM$rF0E*$K@8@.$7$?%3%s%F(B
$B%s%D$G;HMQ$9$kA0$K!"F~NOCM$N%5%K%?%$%:=hM}$,E,@Z$KZMQ>pJs$N@`$N967b$,0z$-5/$3$5$l$k2DG=@-$b$"$j$^$9!#(B
(B
$B%P!<%8%g%s(B 2.1 $B$K$*$$$F!"$3$NLdBj$N1F6A$rhttp://www.securityfocus.com/bid/15346
$BMWLs(B: 
(BFileZilla Server Terminal $B$O!"%j%b!<%H$+$iMxMQ2DG=$J%/%i%$%"%s%H%5%$%I$G(B
$B$N%P%C%U%!%*!<%P!<%U%m!<$NLdBj$N1F6A$r:3J$,0z$-5/$3$5$l$k2DG=@-$,$"$j$^$9!#(B
(B
(B16. Zone Labs Zone Alarm Advance Program Control Bypass Weakness
(BBugTraq ID: 15347
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: 2005-11-07
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/15347
$BMWLs(B: 
(BZone Labs Zone Alarm $B$K$O!"(BAdvanced Program Control $B$K$h$kJ]8n$r2sHr$9$k(B
$B$3$H$r5v$7$F$7$^$&LdBj$,B8:_$9$k5?$$$,$"$j$^$9!#(B
(B
$BJ#?t$N%"%W%j%1!<%7%g%s$G$O!"(BHTML $B$rI=<($9$k%b!<%@%k%@%$%"%m%0%\%C%/%9$r(B
$B:n@.$7$F!"$=$N%@%$%"%m%0%\%C%/%9$r%j%b!<%H%5%$%H$K%j%@%$%l%/%H$5$;$k$3$H(B
$B$,2DG=$G$"$k$HJs9p$5$l$F$$$^$9!#(B
(B
$B$3$NLdBj$O!"0-0U$"$k%W%m%0%i%`$,(B Advanced Program Control $B$K$h$kJ]8n$r2s(B
$BHr$7$F!"I8E*$H$J$C$?%3%s%T%e!<%?$+$i%j%b!<%H$N967bl9g$K8B$jH/@8$9$kE@$KN10U$9$Y$-(B
$B$G$9!#(B
(B
(B17. toendaCMS Admin.PHP Directory Traversal Vulnerability
(BBugTraq ID: 15348
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2005-11-07
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/15348
$BMWLs(B: 
(BtoendaCMS $B$K$O!"%G%#%l%/%H%j%H%i%P!<%5%k967b$rpJs$r4^$`%U%!%$%k$r(B
$B3+<($9$k2DG=@-$,$"$j$^$9!#(B
(B
$B%P!<%8%g%s(B 2.1 $B$K$*$$$F!"$3$NLdBj$N1F6A$rhttp://www.securityfocus.com/bid/15349
$BMWLs(B: 
(BVERITAS Cluster Server for UNIX $B$NJ#?t$N%P!<%8%g%s$K$*$$$F!"%m!<%+%k$G$N(B
$B967b$K$h$j%P%C%U%!%*!<%P!<%U%m!<$,H/@8$9$kLdBj$N1F6A$rZL@=q$r;HMQ$7$FG$0U$N%^(B
$B%7%s%3!<%I$rhttp://www.securityfocus.com/bid/15350
$BMWLs(B: 
(BPHPList $B$K$O!"F~NOCM$NBEEv@-3NG'$K4XO"$9$kJ#?t$NLdBj$,B8:_$9$k5?$$$,$"$j(B
$B$^$9!#$3$l$i$NLdBj$O!"%f!<%6$,;XDj$7$?F~NOCM$N%5%K%?%$%:=hM}$,E,@Z$Khttp://www.securityfocus.com/bid/15351
$BMWLs(B: 
(BtoendaCMS $B$K$O!"G$0U$N%U%!%$%k$,%"%C%W%m!<%I$5$l$kLdBj$,B8:_$9$k5?$$$,$"(B
$B$j$^$9!#(B
(B
$B967b:3J$,0z$-5/$3$5$l$k2DG=@-$,$"$j$^$9!#$=$NB>$N967b$,http://www.securityfocus.com/bid/15352
$BMWLs(B: 
(BMicrosoft Windows $B$N(B WMF/EMF $B%0%i%U%#%C%/%l%s%@%j%s%0%(%s%8%s$O!"%j%b!<(B
$B%H$+$i%3!<%I$r7$/2DG=(B
$B@-$N$"$k@0?t%*!<%P%U%m!<$r0z$-5/$3$9$3$H$,2DG=$G$9!#(B
(B
$BLdBj$N$"$k%(%s%8%s$N@-e!"%3!<%I$N7$$$?$j!"%m!<%+%k$G8"8B$,>:3J$5$l(B
$B$k2DG=@-$,$"$j$^$9!#(B
(B
(B22. VERITAS NetBackup Volume Manager Daemon Buffer Overflow Vulnerability
(BBugTraq ID: 15353
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2005-11-08
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/15353
$BMWLs(B: 
(BVERITAS NetBackup $B$N(B Volume Manager Daemon $B$K$O!"%P%C%U%!%*!<%P!<%U%m!<(B
$B$,H/@8$9$k5?$$$,$"$j$^$9!#967b$,@.8y$9$k$H!"%5!<%S%9ITG=>uBV$K4Y$k!"$"$k(B
$B$$$OG$0U$N%3!<%I$,http://www.securityfocus.com/bid/15354
$BMWLs(B: 
(BPHPKit $B$K$O!"F~NOCM$NBEEv@-3NG'$K4XO"$9$kJ#?t$NLdBj$,B8:_$9$k5?$$$,$"$j(B
$B$^$9!#$3$l$i$NLdBj$O!"%f!<%6$,;XDj$7$?F~NOCM$N%5%K%?%$%:=hM}$,E,@Z$Khttp://www.securityfocus.com/bid/15355
$BMWLs(B: 
(BATutor $B$K$O!"(BSQL $B9=J8$rCmF~2DG=$JLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#$3$NLdBj(B
$B$O!"%f!<%6$,;XDj$7$?F~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NOCM$N%5%K%?%$(B
$B%:=hM}$,E,@Z$K7$+$l$k2DG=@-$,$"$j$^$9!#$3$NLdBj$rMxMQ$9$k967bhttp://www.securityfocus.com/bid/15356
$BMWLs(B: 
(BMicrosoft Windows $B$N(B WMF $B%0%i%U%#%C%/%l%s%@%j%s%0%(%s%8%s$O!"%j%b!<%H$+(B
$B$i%3!<%I$r7$/@0?t%*!<%P%U%m!<$,0z$-(B
$B5/$3$5$l$k2DG=@-$,$"$j$^$9!#(B
(B
$BLdBj$N$"$k%(%s%8%s$N@-e!"%3!<%I$N7$$$?$j!"%m!<%+%k$G8"8B$,>:3J$5$l(B
$B$k2DG=@-$,$"$j$^$9!#(B
(B
(B26. PHP Group Exif Module Infinite Recursion Denial Of Service Vulnerability
(BBugTraq ID: 15358
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2005-11-08
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/15358
$BMWLs(B: 
(BPHP $B$K$O!"%5!<%S%9ITG=>uBV$K4Y$k5?$$$,$"$j$^$9!#(B
(B
$B$3$NLdBj$O!"GKB;$7$?(B JPEG $B%U%!%$%k$K4^$^$l$k(B EXIF $B2hA|%G!<%?$r2r@O$9$k$H(B
$B$-$KH/@8$7$^$9!#(B
(B
$B967b7$/2DG=@-$,$"$j$^$9!#(B
(B
(B27. HP-UX ENVD Local Privilege Escalation Vulnerability
(BBugTraq ID: 15359
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: 2005-11-09
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/15359
$BMWLs(B: 
(BHP-UX envd $B$K$O!"%m!<%+%k$G8"8B>:3J$,0z$-5/$3$5$l$k5?$$$,$"$k$3$H$,Js9p(B
$B$5$l$F$$$^$9!#(B
(B
$B$3$NLdBj$O!"%m!<%+%k$N967b:(B
$B3J$9$k$3$H$r5v$7$F$7$^$&2DG=@-$,$"$j$^$9!#(B
(B
(B28. SAP Web Application Server HTTP Response Splitting Vulnerability
(BBugTraq ID: 15360
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2005-11-09
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/15360
$BMWLs(B: 
(BSAP Web Application Server $B$K$O!"(BHTTP $B1~EzJ,3d$NLdBj$,B8:_$9$k5?$$$,$"$j(B
$B$^$9!#$3$NLdBj$O!"%f!<%6$,;XDj$7$?F~NOCM$N%5%K%?%$%:=hM}$,E,@Z$Khttp://www.securityfocus.com/bid/15361
$BMWLs(B: 
(BSAP Web Application Server $B$K$O!"%/%m%9%5%$%H%9%/%j%W%F%#%s%0967b$rZMQ>pJs$N@`http://www.securityfocus.com/bid/15362
$BMWLs(B: 
(BSAP Web Application Server $B$K$O!"%j%b!<%H$+$i(B URI $B$,%j%@%$%l%/%H$5$l$k5?(B
$B$$$,$"$k$HJs9p$5$l$F$$$^$9!#(B
(B
$B967bZMQ>pJs$N@`http://www.securityfocus.com/bid/15363
$BMWLs(B: 
(BSylpheed $B$K$O!"%P%C%U%!%*!<%P!<%U%m!<$,H/@8$9$k5?$$$,$"$j$^$9!#(B
(B
$B%f!<%6$K$h$C$F0-0U$"$k(B LFID $B%U%!%$%k$,%"%I%l%9%V%C%/$K%$%s%]!<%H$5$l$k$H(B
$B$-$K%P%C%U%!%*!<%P!<%U%m!<$,H/@8$9$k2DG=@-$,$"$j$^$9!#(B
(B
$B$3$NLdBj$,MxMQ$5$l$k$H!"967bhttp://www.securityfocus.com/bid/15364
$BMWLs(B: 
(BASPKnowledgebase $B$K$O!"(BSQL $B9=J8$rCmF~2DG=$JLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#(B
$B$3$NLdBj$O!"%f!<%6$,;XDj$7$?F~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NOCM$N(B
$B%5%K%?%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967bhttp://www.securityfocus.com/bid/15365
$BMWLs(B: 
(BLinux Kernel $B$K$O!"%m!<%+%k$G%5!<%S%9ITG=>uBV$K4Y$k5?$$$,$"$k$HJs9p$5$l(B
$B$F$$$^$9!#(B
(B
$B$3$NLdBj$O!"%M%C%H%o!<%/%G%P%$%9$,7$/$3$H$r%m!<%+%k$N967bZ$G$9!#(B
(B
(B34. HP-UX RemSHD Unspecified Unauthorized Access Vulnerability
(BBugTraq ID: 15366
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2005-11-09
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/15366
$BMWLs(B: 
(BHP-UX $B$N(B remshd $B$K$O!"IT@5%"%/%;%9$,0z$-5/$3$5$l$kL$FCDj$NLdBj$,B8:_$9$k(B
$B5?$$$,$"$j$^$9!#(B
(B
(B'Trusted Mode' $B$K@_Dj$5$l$F$$$k>l9g!"%j%b!<%H$N967bpJs$7$+8x3+$5$l$F$$$^$;$s!#>\:Y$,8x3+$5$lhttp://www.securityfocus.com/bid/15367
$BMWLs(B: 
(BIBM Tivoli Directory Server $B$K$O!"%G%#%l%/%H%j%5!<%P$K%j%b!<%H$+$iIT@5%"(B
$B%/%;%9$rpJs$7$+8x3+$5$l$F$$$^$;$s!#>\:Y$,8x3+$5$lhttp://www.securityfocus.com/bid/15368
$BMWLs(B: 
(BYaBB $B$K$O!"(BHTML $B%?%0$rA^F~2DG=$JLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#$3$NLdBj$O!"(B
$B%f!<%6$,;XDj$7$?F~NOCM$rF0E*$K@8@.$7$?%3%s%F%s%D$G;HMQ$9$kA0$K!"F~NOCM$N(B
$B%5%K%?%$%:=hM}$,E,@Z$KZMQ>pJs$N@`$N967b$,0z$-5/$3$5$l$k2DG=@-$b$"$j$^$9!#(B
(B
$B$3$NLdBj$O!"(BWeb $B%V%i%&%6$K(B Microsoft Internet Explorer $B$r;HMQ$9$k$H$-$K(B
$B8B$jH/@8$7$^$9!#(B
(B
(B37. Google Talk Email Notification Denial Of Service Vulnerability
(BBugTraq ID: 15369
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2005-11-09
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/15369
$BMWLs(B: 
(BGoogle Talk $B$K$O!"%5!<%S%9ITG=>uBV$K4Y$k5?$$$,$"$j$^$9!#$3$NLdBj$O!"Nc30(B
$BE*$J>u67$K$h$C$FI8E*%f!<%6$,J#?t$N%(%i!<%]%C%W%"%C%W%&%#%s%I%&$H$NBPOC$*(B
$B$h$S$3$l$i$N%&%#%s%I%&$rJD$8$k$3$H$r6/@)$5$l$F$7$^$&%W%m%0%i%_%s%0%(%i!<(B
$B$KM3Mh$7$^$9!#(B
(B
$B%/%i%$%"%s%H%"%W%j%1!<%7%g%s$N%f!<%6$X$N%5!<%S%95qH]$r0z$-5/$3$9$?$a!"0U(B
$B?^E*$K:n@.$5$l$?EE;R%a!<%k%a%C%;!<%8$,967bhttp://www.securityfocus.com/bid/15370
$BMWLs(B: 
(BOsh $B$K$O!"4D6-JQ?t$r=hM}$9$k$H$-$K%P%C%U%!%*!<%P!<%U%m!<$,H/@8$9$k2DG=@-(B
$B$,$"$j$^$9!#$3$NLdBj$O!"%f!<%6$,;XDj$7$?%3%s%F%s%D$K$h$C$FNY@\$9$k4D6-JQ(B
$B?t$,>e=q$-$5$l$F$7$^$&%"%W%j%1!<%7%g%s$NITHw$KM3Mh$7$^$9!#(B
(B
$B$3$NLdBj$O!"4IM}http://www.securityfocus.com/bid/15371
$BMWLs(B: 
(BTikiWiki $B$K$O!"%/%m%9%5%$%H%9%/%j%W%F%#%s%0967b$rZMQ>pJs$N@`http://www.securityfocus.com/bid/15372
$BMWLs(B: 
(BAntville $B$K$O!"%/%m%9%5%$%H%9%/%j%W%F%#%s%0967b$rZMQ>pJs$N@`http://www.securityfocus.com/bid/15373
$BMWLs(B: 
(BSpamAssassin $B$K$O!"%9%Q%`$N8!=P$,2sHr$5$l$k2DG=@-$N$"$kLdBj$,B8:_$9$k5?(B
$B$$$,$"$j$^$9!#$3$NLdBj$ONc30E*$J>u67$N=hM}$,E,@Z$Khttp://www.securityfocus.com/bid/15376
$BMWLs(B: 
(BIBM DB2 Content Manager $B$K$O!"J#?t$NLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#$3$l$i(B
$B$NLdBj$O!"967buBV$r0z$-5/$3$9$3$H$r5v$7$F$7$^$&2DG=@-$,(B
$B$"$j$^$9!#(B
(B
(BContent Manager Version 8.2 Fix Pack 10 $B$h$jA0$N%P!<%8%g%s$K$*$$$F!"$3$l(B
$B$i$NLdBj$N1F6A$rhttp://www.securityfocus.com/bid/15377
$BMWLs(B: 
(BIPCop $B$K$O!">pJs$,O31L$9$k5?$$$,$"$j$^$9!#(BIPCop $B$K$O!">pJs$,O31L$9$k5?$$(B
$B$,$"$j$^$9!#$3$NLdBj$O!"0E9f2=$5$l$?%P%C%/%"%C%W%U%!%$%k$X$N80$,%"%W%j%1!<(B
$B%7%g%s$GJ]4I$5$l$kJ}K!$KM3Mh$7$^$9!#(B
(B
$B$3$NLdBj$rMxMQ$9$k967bpJs$O99$J$k967b$KMxMQ$5$l$k2DG=@-$,$"$j$^$9!#$^$?!"$=$NB>$N96(B
$B7b$,9T$o$l$k2DG=@-$b$"$j$^$9!#(B
(B
$B967be=q$-$9$k2DG=@-(B
$B$,$"$j$^$9!#$?$@$7!"967b$N@x:_E*$JLdBj$rMxMQ(B
$B$7$F!"(B'nobody' $B%f!<%6%"%+%&%s%H$K%"%/%;%9$,2DG=$G$"$kI,MW$,$"$j$^$9!#96(B
$B7be=q$-$G$-$k2DG=@-(B
$B$,$"$j$^$9!#(B
(B
(B44. IPCop Backup File Replacement Race Condition Vulnerability
(BBugTraq ID: 15378
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: 2005-11-10
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/15378
$BMWLs(B: 
(BIPCop $B$K$O!"%P%C%/%"%C%W%U%!%$%k$NCV$-49$($r5v$7$F$7$^$&6%9g>uBV$,H/@8$9(B
$B$k5?$$$,$"$j$^$9!#$3$NLdBj$O!"%U%!%$%k$r0E9f2=$9$kA0$K%U%!%$%k$N=jM-$N@x:_E*$JLdBj$r2p$7$F!"(B'nobody' $B%f!<%6%"%+%&%s%H$G$N%"%/%;%9$,2DG=(B
$B$G$"$kI,MW$,$"$j$^$9!#(B
(B
$B967b$,@.8y$9$k$H!"%P%C%/%"%C%W%U%!%$%k$O967bl9g!"4IM}pJs$,G$0U$N%G!<%?$G>e=q$-$5$l$k2DG=@-$,$"$j$^$9!#(B
(B
(B45. Moodle Multiple SQL Injection Vulnerabilities
(BBugTraq ID: 15380
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2005-11-10
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/15380
$BMWLs(B: 
(BMoodle $B$K$O!"(BSQL $B9=J8$rCmF~2DG=$JJ#?t$NLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#$3(B
$B$l$i$NLdBj$O!"%f!<%6$,;XDj$7$?F~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NOCM(B
$B$KBP$9$k%5%K%?%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967bhttp://www.securityfocus.com/bid/15381
$BMWLs(B: 
(BRealNetworks $B$N(B RealPlayer $B$H(B RealOne Player $B$K$O!"%j%b!<%H$+$i$N967b$K(B
$B$h$j%9%?%C%/>e$G%P%C%U%!%*!<%P!<%U%m!<$,H/@8$9$k5?$$$,$"$k$HJs9p$5$l$F$$(B
$B$^$9!#$3$NLdBj$O!"(BRM (Real Media) $B%U%!%$%k$N2r@O;~$K6-3&%A%'%C%/$,e$GG$(B
$B0U$N%3!<%I$rhttp://www.securityfocus.com/bid/15382
$BMWLs(B: 
(BWindows $B%W%i%C%H%U%)!<%`>e$N(B Real Player $B$K$O!"%R!<%WNN0h$G%P%C%U%!%*!<(B
$B%P!<%U%m!<$,H/@8$9$kLdBj$,B8:_$7$^$9!#(B
(B
$B$3$NLdBj$O!"0U?^E*$K:n@.$5$l$?%U%!%$%k$r=hM}$9$k$?$a$K(B 'DUNZIP32.DLL' $B$,(B
$B8F$S=P$5$l$k$H$-$K0z$-5/$3$5$l$^$9!#(B
(B
$B967b$,@.8y$9$k$H!"967be$GIT@5%"%/%;%9$rhttp://www.securityfocus.com/bid/15384
$BMWLs(B: 
(BSun Solaris $B$N(B in.named $B$K$O!"%j%b!<%H$+$i$N967b$K$h$j%5!<%S%9ITG=>uBV$K(B
$B4Y$k5?$$$,$"$j$^$9!#(B
(B
$B967b7$/2DG=(B
$B@-$,$"$j$^$9!#(B
(B
(B49. phpAdsNew Lib-sessions.inc.PHP SQL Injection Vulnerability
(BBugTraq ID: 15385
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2005-11-11
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/15385
$BMWLs(B: 
(BphpAdsNew $B$K$O!"(BSQL $B9=J8$rCmF~2DG=$JLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#$3$NLd(B
$BBj$O!"%f!<%6$,;XDj$7$?F~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NOCM$N%5%K%?(B
$B%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967bhttp://www.securityfocus.com/bid/15386
$BMWLs(B: 
(BOcoMon $B$K$O!"(BSQL $B9=J8$rCmF~2DG=$JJ#?t$NL$FCDj$NLdBj$,B8:_$9$k5?$$$,$"$j(B
$B$^$9!#$3$l$i$NLdBj$O!"%f!<%6$,;XDj$7$?F~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"(B
$BF~NOCM$KBP$9$k%5%K%?%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967b$N%P!<%8%g%s$b1F6A$rhttp://www.securityfocus.com/bid/15387
$BMWLs(B: 
(BKerio WinRoute Firewall $B$K$O!"%j%b!<%H$+$i$N967b$K$h$j%5!<%S%9ITG=>uBV$K(B
$B4Y$k5?$$$,$"$j$^$9!#(B
(B
$B%j%b!<%H$N967bhttp://www.securityfocus.com/bid/15388
$BMWLs(B: 
(BKerio WinRoute Firewall $B$K$O!"L58z2=$5$l$F$$$k%"%+%&%s%H$K$h$k%"%/%;%9$r(B
$B5v$7$F$7$^$&LdBj$,B8:_$9$k5?$$$,$"$j$^$9!#$3$NLdBj$O!"%"%W%j%1!<%7%g%sFb(B
$BIt$KB8:_$7$F$$$kG'>Z$NITHw$KM3Mh$9$k$H?d;!$5$l$^$9!#(B
(B
$BL$FCDj$NITHw$N$?$a!"L58z2=$5$l$F$$$k%"%+%&%s%H$,1F6A$rZ$5$l$k2DG=@-$,$"$j$^$9!#$3$N$?$a$K!"$"$?$+$b0BA4$G$"$k$+$N$h$&$J8m2r$r(B
$B>7$/2DG=@-$,$"$j$^$9!#(B
(B
(B53. Exponent CMS Multiple SQL Injection Vulnerabilities
(BBugTraq ID: 15389
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2005-11-11
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/15389
$BMWLs(B: 
(BExponent CMS $B$K$O!"(BSQL $B9=J8$rCmF~2DG=$JJ#?t$NLdBj$,B8:_$9$k5?$$$,$"$j$^(B
$B$9!#$3$l$i$NLdBj$O!"%f!<%6$,;XDj$7$?F~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"(B
$BF~NOCM$KBP$9$k%5%K%?%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967bhttp://www.securityfocus.com/bid/15390
$BMWLs(B: 
(BTikiWiki $B$K$O!"%G%#%l%/%H%j%H%i%P!<%5%k967b$rpJs$r4^$`%U%!%$%k$r(B
$B3+<($9$k2DG=@-$,$"$j$^$9!#$3$NJ}K!$GpJs$O!"$3$N%=%U%H%&%'%"$*(B
$B$h$S%[%9%H%3%s%T%e!<%?$KBP$7$F99$J$k967b$r;n$_$k$?$a$Nhttp://www.securityfocus.com/bid/15391
$BMWLs(B: 
(BExponent CMS $B$K$O!"G$0U$N%9%/%j%W%H$,http://www.securityfocus.com/bid/15392
$BMWLs(B: 
(BTikiWiki $B$K$O!"%G%#%l%/%H%j%H%i%P!<%5%k967b$rpJs$r4^$`%U%!%$%k$r(B
$B3+<($9$k2DG=@-$,$"$j$^$9!#$3$NJ}K!$GpJs$O!"$3$N%=%U%H%&%'%"$*(B
$B$h$S%[%9%H%3%s%T%e!<%?$KBP$7$F99$J$k967b$r;n$_$k$?$a$Nhttp://www.securityfocus.com/bid/15393
$BMWLs(B: 
(BDev-Editor $B$K$O!"%k!<%H2>A[%G%#%l%/%H%j0J30$N>l=j$K$"$k%G%#%l%/%H%j$X$N(B
$BIT@5%"%/%;%9$K4XO"$9$kLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#(B
(B
$B$3$NLdBj$O!"(BDev-Editor $B$,2>A[%G%#%l%/%H%j$X$N%"%/%;%9$r=hM}$9$kJ}K!$K$h(B
$B$j0z$-5/$3$5$l$^$9!#(B
(B
$B967b$,@.8y$9$k$H!";XDj$N%k!<%H2>A[%G%#%l%/%H%j0J30$N%G%#%l%/%H%j$K%"%/%;(B
$B%9$9$k$3$H$r967bpJs$,3+<($5$l!"HkL)(B
$B>pJs$X$NIT@5%"%/%;%9$r>7$/2DG=@-$,$"$j$^$9!#(B
(B
(B58. Sudo Perl Environment Variable Handling Security Bypass Vulnerability
(BBugTraq ID: 15394
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: 2005-11-11
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/15394
$BMWLs(B: 
(BSudo $B$K$O!"%;%-%e%j%F%#@)8B$,2sHr$5$l$k5?$$$,$"$j$^$9!#$3$NLdBj$K$h$j!"(B
$BG$0U$N%3!<%I$,l(B
$B9g$N4D6-JQ?t(B 'PERLLIB'$B!"(B'PERL5LIB'$B!"$*$h$S(B 'PERL5OPT' $B$N=hM}$KB8:_$9$kIT(B
$BHw$KM3Mh$7$^$9!#(B
(B
$B967bhttp://www.securityfocus.com/bid/15395
$BMWLs(B: 
(BLynx $B$K$O!"G$0U$N%3%^%s%I$,http://www.securityfocus.com/bid/15396
$BMWLs(B: 
(BphpSysInfo $B$K$O!"F~NOCM$NBEEv@-3NG'$K4XO"$9$kJ#?t$NLdBj$,B8:_$9$k5?$$$,(B
$B$"$j$^$9!#$3$l$i$NLdBj$O!"%f!<%6$,;XDj$7$?F~NOCM$N%5%K%?%$%:=hM}$,E,@Z$K(B
$BZMQ>pJs$N@`pJs$d=EMW$J>pJs$N$N967b$,http://www.securityfocus.com/bid/15397
$BMWLs(B: 
(BIBM AIX $B$K$O!"L$FCDj$N%;%-%e%j%F%#>e$NLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#(B
(B
$B$3$NLdBj$K4X$9$k>pJs$O$[$H$s$I8x3+$5$l$F$$$^$;$s!#>\:Y$J>pJs$,8x3+$5$lhttp://www.securityfocus.com/bid/15398
$BMWLs(B: 
(BRealNetworks $B$N(B RealPlayer $B$K$O!"%j%b!<%H$N967bhttp://www.securityfocus.com/bid/15399
$BMWLs(B: 
(BphpWebThings $B$K$O!"(BSQL $B9=J8$rCmF~2DG=$JLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#$3(B
$B$l$O!"(BSQL $B%/%(%j$G;HMQ$5$l$k%G!<%?$K4XO"$9$kF~NOCM$NBEEv@-3NG'$NLdBj$G$9!#(B
$B$3$NLdBj$O!"%j%b!<%H%f!<%6$,%/%(%j$N9=B$$*$h$S%m%8%C%/$rA`:n$9$k$3$H$r5v(B
$B$7$F$7$^$$$^$9!#(B
(B
$B$3$NLdBj$K$h$j!"$3$N%=%U%H%&%'%"$N5!G=$,B;$J$o$l$k2DG=@-$,$"$j$^$9!#%G!<(B
$B%?%Y!<%9$Nhttp://www.securityfocus.com/bid/15400
$BMWLs(B: 
(BActiveCampaign 1-2-All Broadcast Email $B$K$O!"(BSQL $B9=J8$rCmF~2DG=$JLdBj$,(B
$BB8:_$9$k5?$$$,$"$j$^$9!#$3$l$O!"(BSQL $B%/%(%j$G;HMQ$5$l$k%G!<%?$K4XO"$9$kF~(B
$BNOCM$NBEEv@-3NG'$NLdBj$G$9!#$3$NLdBj$O!"%j%b!<%H%f!<%6$,%/%(%j$N9=B$$*$h(B
$B$S%m%8%C%/$rA`:n$9$k$3$H$r5v$7$F$7$^$$$^$9!#(B
(B
$B$3$NLdBj$K$h$j!"$3$N%=%U%H%&%'%"$N5!G=$,B;$J$o$l$k2DG=@-$,$"$j$^$9!#%G!<(B
$B%?%Y!<%9$Nu$rCHqp$OK!E*$J8e$m=b$rF@$^$7$?!#2;3Z6H3&$N5p?M$G$"$k(B 
(BSony BMG $B$KBP$7!">/$J$/$H$b(B 5 $B7o$NAJ>Y$,4{$K5/$3$5$l$F$$$k$+:#8e5/$3$5$l(B
$B$kM=Dj$G$9!#(B
(B
(Bhttp://www.securityfocus.com/news/11356
(B
(B2. Gold at the end of rainbow cracking?
$BCxpJs$r2rFI$9$k(B
$B$3$H$,6K$a$FMF0W$K$J$j$^$9!#0UM_$"$U$l$k?M!9$O!"$3$N%F!<%V%k$r%$%s%?!<%M%C(B
$B%H$+$i%"%/%;%9$G$-$k$h$&$K$9$k$3$H$G2?$i$+$N%S%8%M%9$K$J$k$N$G$O$J$$$+$H(B
$B9M$($F$$$^$9!#(B
(B
(Bhttp://www.securityfocus.com/news/11355
(B
(B3. Suspected bot master busted
$BCxR2p$GHo32$re$2$F$$$?MF5?$G!"%+%j%U%)%k%K%"=#:_=;$NCK$,9pH/$5$l$^$7$?!#(B
(B
(Bhttp://www.securityfocus.com/news/11353
(B
(B4. Hidden DRM code's legitimacy questioned
$BCxe$K$O%"%s%$%s%9%H!<%k$,:$Fq$J%G%8%?%kCx:n8"4IM}(B (DRM) $B%=%U%H%&%'%"$,(B
$B1#$5$l$F%$%s%9%H!<%k$5$l$^$9!#$3$N$3$H$K$D$$$F!"%;%-%e%j%F%#$N@lLg2H$?$A(B
$B$O%l%3!<%I2qhttp://www.securityfocus.com/news/11352
(B
(B5. Skype under scrutiny for bugs
$BCxe$NLdBj$O!"%Y%s%@$K$H$C$F:G0-$N%?(B
$B%$%_%s%0$G5/$3$j$^$7$?!#(B
(B
(Bhttp://www.securityfocus.com/news/11354
(B
(B6. Say hello to the Skype Trojan
$BCxhttp://www.securityfocus.com/news/11348
(B
(B7. Shared music abuse bug hits iTunes
$BCxhttp://www.securityfocus.com/news/11347
(B
(B8. US cybersecurity all at sea
$BCxc>J$K$h$k%"%a%j%+9qFb$N%5%$%P!<%;%-%e%j%F%#%j%9%/$N4IM}$OIT==(B
$BJ,$G$"$k!"$H@h$NJF9qBgE}NN>pJs%;%-%e%j%F%#C4Ev8\Ld$OH/8@$7$F$$$^$9!#(B
(B
(Bhttp://www.securityfocus.com/news/11345
(B
(B
(B--
$BK]Lu(B: LAC $BK]Lu%A!<%`(B
$B4F=$(B: $B>.3^8691M:(B (OGASAWARA Tsuneo)
(BLAC Co., Ltd.
(Bhttp://www.lac.co.jp/index.html
Attachment: smime.p7s
Description: S/MIME cryptographic signature
Prev by Date: SecurityFocus Newsletter #322 2005-10-24->2005-10-28
Previous by thread: SecurityFocus Newsletter #322 2005-10-24->2005-10-28
Index(es):
- Date
- Thread