[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
SecurityFocus Newsletter #327 2005-11-28->2005-12-02

To: bugtraq-jp@xxxxxxxxxxxxxxxxx
Subject: SecurityFocus Newsletter #327 2005-11-28->2005-12-02
From: Tsuneo Ogasawara <t.ogaswr@xxxxxxxxx>
Date: Fri, 10 Mar 2006 17:23:11 +0900
$B>.3^86(B@$B%i%C%/$G$9!#(B
(B 
(BSecurityFocus Newsletter $BBh(B 327 $B9f$NOBLu$r$*FO$1$7$^$9!#(B
$B"(Bh(B 326 $B9f$O7gHV$H$J$C$F$$$k$h$&$G$9!#(B
$BLu$N$J$$9`L\$K$D$$$F$O!VF|K\8lLu$J$7!W$H$7$F6hJL$7$F$"$j$^$9!#(B
(B 
(B---------------------------------------------------------------------------
(BBugTraq-JP $B$K4X$9$k(B FAQ ($BF|K\8l(B):
(Bhttp://www.securityfocus.com/archive/79/description
$B!&(BSecurityFocus Newsletter $B$NOBLu$O(B BugTraq-JP $B$G0lH$/$@$5$$(B
(B---------------------------------------------------------------------------
(BSecurityFocus Newsletter $B%"!<%+%$%V(B ($B1Q8l(B):
(Bhttp://www.securityfocus.com/archive/78
(BBugTraq $B$K4X$9$k(B FAQ ($B1Q8l(B):
(Bhttp://www.securityfocus.com/archive/1/description
(B---------------------------------------------------------------------------
$B0zMQ$K4X$9$kHw9M(B:
$B!&$3$NOBLu$O(B SecurityFocus $B$N5v2D$r3t<02qe$G9T$o$l$F$$$^$9!#(B
$B!&(BSecurityFocus Newsletter $B$NOBLu$r(B Netnews, Mailinglist, World Wide Web,
(B  $B=q@R(B, $B$=$NB>$N5-O?G^BN$G0zMQ$5$l$k>l9g$K$O%a!<%k$NA4J80zMQ$r$*4j$$$7$^$9!#(B
$B!&F|K\8lHG%K%e!<%9%l%?!<(B 1 $B9f$+$i(B 3 $B9f$^$G$K$O$3$NHw9M$,IU$$$F$$$^$;$s$,!"(B
(B  $B=`MQ$9$k$b$N$H$7$^$9!#(B
$B!&$^$?!"(BSecurityFocus $BDs6!$N(B BugTraq-JP $B%"!<%+%$%V(B [*1] $B$X$N$$$+$J$k7A<0$N(B
(B  $B%O%$%Q!<%j%s%/$b>e5-$K=`$8$F$/$@$5$$!#(B
(B1) http://online.securityfocus.com/archive/79
(B---------------------------------------------------------------------------
$B$3$NOBLu$K4X$9$kHw9M(B:
$B!&$3$NOBLu$NE,MQ@.2L$K$D$$$F3t<02ql9g!"(BBugTraq-JP $B$X(B Errata $B$H$7$F=$@5(B
(B  $BHG$r$4Ej9FD:$/$+!"4F=$l9g$K$O=$@5HG$r$G$-$k$@$1?WB.$KH/9T$7$^$9!#(B
(B---------------------------------------------------------------------------
(BThis translation is encoded and posted in ISO-2022-JP.
(B 
$B86HG(B:
(BDate: Tue, 06 Dec 2005 14:19:14 -0700
(BMessage-ID: <43960052.7060109@xxxxxxxxxxxxxxxxx>
(B 
(BSecurityFocus Newsletter #327
(B-----------------------------
(B
(BThis Issue is Sponsored By: Watchfire AppScan
(B
(BI. FRONT AND CENTER ($BF|K\8lLu$J$7(B)
(B     1. Evading NIDS, revisited
(B     2. Regaining control 
(BII. BUGTRAQ SUMMARY
(B     1. PBLang Bulletin Board System Multiple HTML Injection Vulnerabilities
(B     2. Athena PHP Website Administration Remote File Include Vulnerability
(B     3. PHPGreetz Remote File Include Vulnerability
(B     4. Q-News Remote File Include Vulnerability
(B     5. Unalz Archive Filename Buffer Overflow Vulnerability
(B     6. Enterprise Connector SQL Injection Vulnerabilities
(B     7. Zainu SQL Injection Vulnerabilities
(B     8. Babe Logger SQL Injection Vulnerabilities
(B     9. Top Music Module SQL Injection Vulnerabilities
(B     10. PHPWordPress Multiple SQL Injection Vulnerabilities
(B     11. Bedeng PSP SQL Injection Vulnerabilities
(B     12. Nelogic Nephp Publisher SQL Injection Vulnerabilities
(B     13. Softbiz Resource Repository Script SQL Injection Vulnerabilities
(B     14. BerliOS SourceWell SQL Injection Vulnerability
(B     15. AllWeb Search SQL Injection Vulnerability
(B     16. K-Search SQL Injection Vulnerabilities
(B     17. EdmoBBS SQL Injection Vulnerabilities
(B     18. JBB SQL Injection Vulnerabilities
(B     19. UGroup SQL Injection Vulnerabilities
(B     20. ShockBoard Offset Parameter SQL Injection Vulnerability
(B     21. Netzbrett P_Entry Parameter SQL Injection Vulnerability
(B     22. SimpleBBS Search Module Parameters SQL Injection Vulnerability
(B     23. ADC2000 NG Pro SQL Injection Vulnerabilities
(B     24. Simple Document Management System SQL Injection Vulnerabilities
(B     25. Nicecoder iDesk FAQ.PHP SQL Injection Vulnerability
(B     26. PDJK-support Suite Multiple SQL Injection Vulnerabilities
(B     27. Randshop Multiple SQL Injection Vulnerabilities
(B     28. KTools Remote Buffer Overflow Vulnerability
(B     29. FreeWebStat Multiple Cross-Site Scripting Vulnerabilities
(B     30. Cisco IOS HTTP Service HTML Injection Vulnerability
(B     31. PHP Web Statistik Content Injection Vulnerabilities
(B     32. Helpdesk Issue Manager Multiple SQL Injection Vulnerabilities
(B     33. OASYS Lite Search.ASP Cross-Site Scripting Vulnerability
(B     34. WebCalendar Multiple SQL Injection Vulnerabilities
(B     35. OKBSYS Lite Search.ASP Cross-Site Scripting Vulnerability
(B     36. WebCalendar Export_Handler.PHP File Corruption Vulnerability
(B     37. GuppY Error.PHP Remote File Include and Command Execution Vulnerability
(B     38. GuppY Multiple Local File Include and Information Disclosure Vulnerabilities
(B     39. PHP Doc System Local File Include Vulnerability
(B     40. SearchSolutions Multiple Products Cross-Site Scripting Vulnerabilities
(B     41. Microsoft Windows SynAttackProtect Predictable Hash Remote Denial of Service Vulnerability
(B     42. Gallery Multiple Input Validation Vulnerabilities
(B     43. Sun Java Runtime Environment Multiple Privilege Escalation Vulnerabilities
(B     44. Panda Software Antivirus Library ZOO Archive Heap Overflow Vulnerability
(B     45. ASP-Rider Default.ASP SQL Injection Vulnerability
(B     46. Cisco Security Agent Unspecified Local Privilege Escalation Vulnerability
(B     47. QNX Phgrafx Local Buffer Overflow Vulnerability
(B     48. Kadu Remote Denial of Service Vulnerability
(B     49. PHP Upload Center Index.PHP Directory Traversal Vulnerability
(B     50. Fantastic Scripts Fantastic News News.PHP SQL Injection Vulnerability
(B     51. Xaraya Directory Traversal Vulnerability
(B     52. DotClear Unspecified Trackback Vulnerability
(B     53. Linux Kernel PTraced Child Auto-Reap Local Denial of Service Vulnerability
(B     54. PHP Upload Center Directory Traversal Vulnerability
(B     55. Linux Kernel Time_Out_Leases PrintK Local Denial of Service Vulnerability
(B     56. DMANews Multiple SQL Injection Vulnerabilities
(B     57. Perl Perl_sv_vcatpvfn Format String Integer Wrap Vulnerability
(B     58. DRZES HMS Register_domain.PHP Cross-Site Scripting Vulnerability
(B     59. Entergal MX Multiple SQL Injection Vulnerabilities
(B     60. BosDates Multiple SQL Injection Vulnerabilities
(B     61. Post Affiliate Pro Index.PHP SQL Injection Vulnerability
(B     62. GhostScripter Amazon Shop Search.PHP SQL Injection Vulnerability
(B     63. KBase Express Multiple SQL Injection Vulnerabilities
(B     64. ltwCalendar Calendar.PHP SQL Injection Vulnerability
(B     65. Orca Knowledgebase Knowledgebase.PHP SQL Injection Vulnerability
(B     66. Orca Blog Blog.PHP SQL Injection Vulnerability
(B     67. Orca Ringmaker Ringmaker.PHP SQL Injection Vulnerability
(B     68. FAQ System Multiple SQL Injection Vulnerabilities
(B     69. Survey System Survey.PHP SQL Injection Vulnerability
(B     70. Linux Kernel PTrace CLONE_THREAD Local Denial of Service Vulnerability
(B     71. N-13 News SQL Injection Vulnerability
(B     72. DRZES HMS Multiple SQL Injection Vulnerabilities
(B     73. NuFW Malformed Packet Remote Denial Of Service Vulnerability
(B     74. pcAnywhere Authentication Denial of Service Vulnerability
(B     75. Apple Mac OS X Security Update 2005-009 Multiple Vulnerabilities
(B     76. CenterICQ Malformed Packet Handling Remote Denial of Service Vulnerability
(B     77. SocketKB Index.PHP SQL Injection Vulnerability
(B     78. PHPAlbum Local File Include Vulnerability
(B     79. Softbiz B2B Trading Marketplace Multiple SQL Injection Vulnerabilities
(B     80. Softbiz FAQ Multiple SQL Injection Vulnerabilities
(B     81. Atlantis Knowledge Base Search.PHP SQL Injection Vulnerability
(B     82. FAQRing Answer.PHP SQL Injection Vulnerability
(B     83. WSN Knowledge Base Multiple SQL Injection Vulnerabilities
(B     84. O-Kiraku Nikki Nikki.PHP SQL Injection Vulnerability
(B     85. 88Scripts Event Calendar Index.PHP SQL Injection Vulnerability
(B     86. Instant Photo Gallery Multiple SQL Injection Vulnerabilities
(B     87. Microsoft Internet Explorer CSS Import Cross-Domain Restriction Bypass Vulnerability
(B     88. Tradesoft CMS Multiple SQL Injection Vulnerabilities
(B     89. WebCalendar Multiple SQL Injection Vulnerabilities
(B     90. Drupal Image Upload HTML Injection Vulnerability
(B     91. Citrix Multiple Applications Login Form Cross-Site Scripting Vulnerability
(B     92. Lore Article.PHP SQL Injection Vulnerability
(B     93. Astaro Security Linux ISAKMP IKE Traffic Denial of Service Vulnerability
(B     94. DotClear Session.PHP SQL Injection Vulnerability
(B     95. Avaya TN2602AP IP Media Resource 320 Remote Denial of Service Vulnerability
(B     96. FastJar Archive Extraction Directory Traversal Vulnerability
(B     97. Microsoft Windows CreateRemoteThread Local Denial of Service Vulnerability
(B     98. MXChange Multiple Unspecified Input Validation Vulnerabilities
(B     99. WebCalendar Layers_Toggle.PHP HTTP Response Splitting Vulnerability
(B     100. Drupal View User Profile Authorization Bypass Vulnerability
(BIII. SECURITYFOCUS NEWS
(B     1. Federal flaw database commits to grading system
(B     2. Mac OS X security under scrutiny
(B     3. Texas puts Sony BMG in its sights
(B     4. Sony BMG's copy-protection problems grow
(B     5. Skype under scrutiny for bugs
(B     6. Say hello to the Skype Trojan
(B     7. Shared music abuse bug hits iTunes
(B     8. US cybersecurity all at sea
(B
(B
(BI. FRONT AND CENTER ($BF|K\8lLu$J$7(B)
(B----------------------------
(B
(BII.BUGTRAQ SUMMARY
(B--------------------
(B1. PBLang Bulletin Board System Multiple HTML Injection Vulnerabilities
(BBugTraq ID: 15573
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2005-11-26
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/15573
$BMWLs(B: 
(BPBLang $B$K$O!"(BHTML $B%?%0$rA^F~2DG=$JJ#?t$NLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#$3(B
$B$l$i$NLdBj$O!"%f!<%6$,;XDj$7$?F~NOCM$rF0E*$K@8@.$7$?%3%s%F%s%D$G;HMQ$9$k(B
$BA0$K!"F~NOCM$N%5%K%?%$%:=hM}$,E,@Z$KZMQ>pJs$N@`$N967b$,0z$-5/$3$5$l$k2DG=@-$b$"$j$^$9!#(B
(B
(BPBLang 4.65 $B$K$*$$$F$bJL$N;w$?(B HTML $B%?%0$rA^F~$5$l$kLdBj$,;XE&$5$l$F$$$^(B
$B$9!#$3$NLdBj$O!"0J2<$N(B BID $B$G;XE&$5$l$F$$$kLdBj$H4X78$7$F$$$k2DG=@-$,$"(B
$B$j$^$9!#(B
(B- 14728, PBLang Bulletin Board System Multiple Remote Vulnerabilities
(B- 14766, PBLang Bulletin Board System HTML Injection Vulnerability
(B
(B2. Athena PHP Website Administration Remote File Include Vulnerability
(BBugTraq ID: 15574
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2005-11-26
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/15574
$BMWLs(B: 
(BAthena PHP Website Administration $B$K$O!"%j%b!<%H$+$i%U%!%$%k$,%$%s%/%k!<(B
$B%I$5$l$k5?$$$,$"$j$^$9!#$3$NLdBj$O!"%f!<%6$,;XDj$7$?F~NOCM$N%5%K%?%$%:=h(B
$BM}$,E,@Z$Ke$G(B Web $B%5!<%P%W%m%;(B
$B%9$N8"8B$r;HMQ$7!"G$0U$N(B PHP $B%3!<%I$r%j%b!<%H$+$ihttp://www.securityfocus.com/bid/15575
$BMWLs(B: 
(BphpGreetz $B$K$O!"%j%b!<%H$+$i%U%!%$%k$,%$%s%/%k!<%I$5$l$k5?$$$,$"$j$^$9!#(B
$B$3$NLdBj$O!"%f!<%6$,;XDj$7$?F~NOCM$N%5%K%?%$%:=hM}$,E,@Z$Ke$G(B Web $B%5!<%P%W%m%;(B
$B%9$N8"8B$r;HMQ$7!"G$0U$N(B PHP $B%3!<%I$r%j%b!<%H$+$ihttp://www.securityfocus.com/bid/15576
$BMWLs(B: 
(BQ-News $B$K$O!"%j%b!<%H$+$i%U%!%$%k$,%$%s%/%k!<%I$5$l$k5?$$$,$"$j$^$9!#$3(B
$B$NLdBj$O!"%f!<%6$,;XDj$7$?F~NOCM$N%5%K%?%$%:=hM}$,E,@Z$Ke$G(B Web $B%5!<%P%W%m%;(B
$B%9$N8"8B$r;HMQ$7!"G$0U$N(B PHP $B%3!<%I$r%j%b!<%H$+$ihttp://www.securityfocus.com/bid/15577
$BMWLs(B: 
(Bunalz $B$K$O!"%P%C%U%!%*!<%P!<%U%m!<$,H/@8$9$k5?$$$,$"$j$^$9!#$3$NLdBj$O!"(B
$BD9$$L>A0$,IU$1$i$l$?%U%!%$%k$r4^$`(B ALZ $B%"!<%+%$%V$r2rE`$9$k:]$K0z$-5/$3(B
$B$5$l$^$9!#(B
(B
$B$3$NLdBj$,MxMQ$5$l$k$H!"0-0U$"$k%"!<%+%$%V$r2rE`$9$k%f!<%6$N%;%-%e%j%F%#(B
$B%3%s%F%-%9%HFb$GG$0U$N%3!<%I$,http://www.securityfocus.com/bid/15578
$BMWLs(B: 
(BEnterprise Connector $B$K$O!"(BSQL $B9=J8$rCmF~2DG=$JJ#?t$NLdBj$,B8:_$9$k5?$$(B
$B$,$"$j$^$9!#$3$l$i$NLdBj$O!"%f!<%6$K$h$kF~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0(B
$B$K!"F~NOCM$KBP$9$k%5%K%?%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967bhttp://www.securityfocus.com/bid/15579
$BMWLs(B: 
(BZainu $B$K$O(B SQL $B9=J8$rCmF~2DG=$JJ#?t$NLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#$3$l(B
$B$i$NLdBj$O!"%f!<%6$K$h$kF~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NOCM$KBP$9(B
$B$k%5%K%?%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967bhttp://www.securityfocus.com/bid/15580
$BMWLs(B: 
(BBabe Logger $B$K$O!"(BSQL $B9=J8$rCmF~2DG=$JJ#?t$NLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#(B
$B$3$l$i$NLdBj$O!"%f!<%6$K$h$kF~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NOCM$K(B
$BBP$9$k%5%K%?%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967bhttp://www.securityfocus.com/bid/15581
$BMWLs(B: 
(BPHP-Nuke $B$N(B Top Music Module $B$K$O(B SQL $B9=J8$rCmF~2DG=$JJ#?t$NLdBj$,B8:_$9(B
$B$k5?$$$,$"$j$^$9!#$3$l$i$NLdBj$O!"%f!<%6$K$h$kF~NOCM$r(B SQL $B%/%(%j$G;HMQ(B
$B$9$kA0$K!"F~NOCM$KBP$9$k%5%K%?%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967bhttp://www.securityfocus.com/bid/15582
$BMWLs(B: 
(BPHPWordPress $B$K$O(B SQL $B9=J8$rCmF~2DG=$JJ#?t$NLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#(B
$B$3$l$i$NLdBj$O!"%f!<%6$K$h$kF~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NOCM$K(B
$BBP$9$k%5%K%?%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967b$N%P!<%8%g%s$b1F6A$rhttp://www.securityfocus.com/bid/15583
$BMWLs(B: 
(BBedeng PSP $B$K$O!"(BSQL $B9=J8$rCmF~2DG=$JJ#?t$NLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#(B
$B$3$l$i$NLdBj$O!"%f!<%6$K$h$kF~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NOCM$K(B
$BBP$9$k%5%K%?%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967bhttp://www.securityfocus.com/bid/15584
$BMWLs(B: 
(BNelogic Nephp Publisher $B$K$O!"(BSQL $B9=J8$rCmF~2DG=$JJ#?t$NLdBj$,B8:_$9$k5?(B
$B$$$,$"$j$^$9!#$3$l$i$NLdBj$O!"%f!<%6$K$h$kF~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$k(B
$BA0$K!"F~NOCM$KBP$9$k%5%K%?%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967bhttp://www.securityfocus.com/bid/15585
$BMWLs(B: 
(BSoftbiz Resource Repository Script $B$K$O!"(BSQL $B9=J8$rCmF~2DG=$JJ#?t$NLdBj(B
$B$,B8:_$9$k5?$$$,$"$j$^$9!#$3$l$i$NLdBj$O!"%f!<%6$K$h$kF~NOCM$r(B SQL $B%/%((B
$B%j$G;HMQ$9$kA0$K!"F~NOCM$KBP$9$k%5%K%?%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967bhttp://www.securityfocus.com/bid/15586
$BMWLs(B: 
(BBerliOS SourceWell $B$K$O!"(BSQL $B9=J8$rCmF~2DG=$JLdBj$,B8:_$9$k5?$$$,$"$j$^(B
$B$9!#$3$NLdBj$O!"%f!<%6$,;XDj$7$?F~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NO(B
$BCM$N%5%K%?%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967bhttp://www.securityfocus.com/bid/15587
$BMWLs(B: 
(BAllWeb Search $B$K$O!"(BSQL $B9=J8$rCmF~2DG=$JLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#$3(B
$B$NLdBj$O!"%f!<%6$,;XDj$7$?F~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NOCM$N%5(B
$B%K%?%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967bhttp://www.securityfocus.com/bid/15588
$BMWLs(B: 
(BK-Search $B$K$O!"(BSQL $B9=J8$rCmF~2DG=$JJ#?t$NLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#(B
$B$3$l$i$NLdBj$O!"%f!<%6$K$h$kF~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NOCM$K(B
$BBP$9$k%5%K%?%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967bhttp://www.securityfocus.com/bid/15589
$BMWLs(B: 
(BedmoBBS $B$K$O(B SQL $B9=J8$rCmF~2DG=$JJ#?t$NLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#$3(B
$B$l$i$NLdBj$O!"%f!<%6$K$h$kF~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NOCM$KBP(B
$B$9$k%5%K%?%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967bhttp://www.securityfocus.com/bid/15590
$BMWLs(B: 
(BJBB $B$K$O(B SQL $B9=J8$rCmF~$5$l$kJ#?t$NLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#$3$l$i(B
$B$NLdBj$O!"%f!<%6$K$h$kF~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NOCM$KBP$9$k(B
$B%5%K%?%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967bhttp://www.securityfocus.com/bid/15591
$BMWLs(B: 
(BUGroup $B$K$O(B SQL $B9=J8$rCmF~2DG=$JJ#?t$NLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#$3$l(B
$B$i$NLdBj$O!"%f!<%6$K$h$kF~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NOCM$KBP$9(B
$B$k%5%K%?%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967bhttp://www.securityfocus.com/bid/15592
$BMWLs(B: 
(BShockBoard $B$K$O!"(BSQL $B9=J8$rCmF~2DG=$JLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#$3$N(B
$BLdBj$O!"%f!<%6$,;XDj$7$?F~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NOCM$N%5%K(B
$B%?%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967bhttp://www.securityfocus.com/bid/15593
$BMWLs(B: 
(BNetzbrett $B$K$O!"(BSQL $B9=J8$rCmF~2DG=$JLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#$3$NLd(B
$BBj$O!"%f!<%6$,;XDj$7$?F~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NOCM$N%5%K%?(B
$B%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967bhttp://www.securityfocus.com/bid/15594
$BMWLs(B: 
(BSimpleBBS $B$K$O!"(BSQL $B9=J8$rCmF~2DG=$JLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#$3$NLd(B
$BBj$O!"%f!<%6$,;XDj$7$?F~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NOCM$N%5%K%?(B
$B%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967bhttp://www.securityfocus.com/bid/15595
$BMWLs(B: 
(BADC2000 NG Pro $B$K$O!"(BSQL $B9=J8$rCmF~2DG=$JJ#?t$NLdBj$,B8:_$9$k5?$$$,$"$j(B
$B$^$9!#$3$l$i$NLdBj$O!"%f!<%6$K$h$kF~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~(B
$BNOCM$KBP$9$k%5%K%?%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967bhttp://www.securityfocus.com/bid/15596
$BMWLs(B: 
(BSimple Document Management System (SDMS) $B$K$O!"(BSQL $B9=J8$rCmF~2DG=$JJ#?t(B
$B$NLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#$3$l$i$NLdBj$O!"%f!<%6$K$h$kF~NOCM$r(B SQL 
$B%/%(%j$G;HMQ$9$kA0$K!"F~NOCM$KBP$9$k%5%K%?%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967bhttp://www.securityfocus.com/bid/15597
$BMWLs(B: 
(BNicecoder iDesk $B$K$O!"(BSQL $B9=J8$rCmF~2DG=$JLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#(B
$B$3$NLdBj$O!"%f!<%6$,;XDj$7$?F~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NOCM$N(B
$B%5%K%?%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967b$N(B
$B%P!<%8%g%s$b1F6A$rhttp://www.securityfocus.com/bid/15598
$BMWLs(B: 
(BPDJK-support Suite $B$K$O!"(BSQL $B9=J8$rCmF~2DG=$JJ#?t$NLdBj$,B8:_$9$k5?$$$,(B
$B$"$j$^$9!#$3$l$i$NLdBj$K$h$j!"%j%b!<%H$N967b7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967b$N%P!<%8%g%s$b1F6A$rhttp://www.securityfocus.com/bid/15599
$BMWLs(B: 
(BRandshop $B$K$O(B SQL $B9=J8$rCmF~2DG=$JJ#?t$NLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#$3(B
$B$l$i$NLdBj$O!"%f!<%6$K$h$kF~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NOCM$KBP(B
$B$9$k%5%K%?%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967bhttp://www.securityfocus.com/bid/15600
$BMWLs(B: 
(Bktools $B$K$O!"%j%b!<%H$+$i$N967b$K$h$j%P%C%U%!%*!<%P!<%U%m!<$,H/@8$9$k5?(B
$B$$$,$"$j$^$9!#(B
(B
$B967bhttp://www.securityfocus.com/bid/15601
$BMWLs(B: 
(BFreeWebStat $B$K$O!"%/%m%9%5%$%H%9%/%j%W%F%#%s%0$K4XO"$9$kJ#?t$NLdBj$,B8:_(B
$B$9$k5?$$$,$"$j$^$9!#$3$l$i$NLdBj$O!"%f!<%6$,;XDj$7$?F~NOCM$N%5%K%?%$%:=h(B
$BM}$,E,@Z$KZMQ>pJs$N@`(B
$B$N%P!<%8%g%s$b1F6A$rhttp://www.securityfocus.com/bid/15602
$BMWLs(B: 
(BCisco IOS HTTP $B%5!<%S%9$O(B HTML $B%?%0$rA^F~$5$l$kLdBj$,B8:_$9$k5?$$$,$"$k(B
$B$3$H$,Js9p$5$l$F$$$^$9!#(B
(B
$B967bH$7$F$/$@$5$$!#(B
(B
(B31. PHP Web Statistik Content Injection Vulnerabilities
(BBugTraq ID: 15603
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2005-11-28
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/15603
$BMWLs(B: 
(BPHP Web Statistik $B$O!"%3%s%F%s%D$rCmF~$5$l$kJ#?t$NLdBj$,B8:_$9$k5?$$$,$"(B
$B$j$^$9!#$3$l$i$NLdBj$O!"%f!<%6$,;XDj$7$?F~NOCM$N%5%K%?%$%:=hM}$,E,@Z$KZMQ>pJs$N@`http://www.securityfocus.com/bid/15604
$BMWLs(B: 
(BHelpdesk Issue Manager $B$K$O!"(BSQL $B9=J8$rCmF~2DG=$JJ#?t$NLdBj$,B8:_$9$k5?(B
$B$$$,$"$j$^$9!#(B
(B
$B967b$,@.8y$9$k$H!"%"%W%j%1!<%7%g%s$KBP$9$k6<0R$,>7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967bhttp://www.securityfocus.com/bid/15605
$BMWLs(B: 
(BOASYS Lite $B$K$O!"%/%m%9%5%$%H%9%/%j%W%F%#%s%0967b$rZMQ>pJs$N@`http://www.securityfocus.com/bid/15606
$BMWLs(B: 
(BWebCalendar $B$K$O(B SQL $B9=J8$rCmF~2DG=$JJ#?t$NLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#(B
$B$3$l$i$NLdBj$O!"%f!<%6$K$h$kF~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NOCM$K(B
$BBP$9$k%5%K%?%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967bhttp://www.securityfocus.com/bid/15607
$BMWLs(B: 
(BOKBSYS Lite $B$K$O!"%/%m%9%5%$%H%9%/%j%W%F%#%s%0967b$rZMQ>pJs$N@`http://www.securityfocus.com/bid/15608
$BMWLs(B: 
(BWebCalendar $B$K$O!"%U%!%$%k$,GK2u$5$l$kLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#$3$N(B
$BLdBj$O!"%f!<%6$,;XDj$7$?F~NOCM$NBEEv@-3NG'$,E,@Z$Khttp://www.securityfocus.com/bid/15609
$BMWLs(B: 
(BGuppY $B$K$O!"%j%b!<%H$+$i%U%!%$%k$,%$%s%/%k!<%I$5$l$k5?$$$,$"$j$^$9!#(B
(B
(B'error.php' $B%9%/%j%W%H$K;XDj$5$l$k%G!<%?$,E,@Z$K%5%K%?%$%:$5$l$J$$$?$a!"(B
$B967be$G(B Web $B%5!<%P%W%m%;(B
$B%9$N8"8B$r;HMQ$7!"G$0U$N(B PHP $B%3!<%I$r%j%b!<%H$+$ihttp://www.securityfocus.com/bid/15610
$BMWLs(B: 
(BGuppY $B$O!"%m!<%+%k$G%U%!%$%k$,%$%s%/%k!<%I$5$l$?$j!">pJs$,3+<($5$l$?$j$9(B
$B$kJ#?t$NLdBj$N1F6A$re$G(B Web $B%5!<%P%W(B
$B%m%;%9$N8"8B$GG$0U$N%5!<%P%5%$%I%9%/%j%W%H%3!<%I$re$NG$0U$N%U%!%$%k$r(B Web 
$B%5!<%P$N8"8B$GFI$_H$K4X$9$kJ8;zNs$*$h$S(B NULL $BJ8;z$r;HMQ$7$F!"G$0U$N%U%!%$%k$r3+<((B
$B$9$k$3$H$,2DG=$G$9!#(B
(B
(BGuppY 4.5.9 $B0JA0$N%P!<%8%g%s$K$*$$$F!"$3$NLdBj$N1F6A$rhttp://www.securityfocus.com/bid/15611
$BMWLs(B: 
(BPHP Doc System $B$K$O!"%m!<%+%k$G%U%!%$%k$,%$%s%/%k!<%I$5$l$k5?$$$,$"$j$^(B
$B$9!#$3$NLdBj$O!"%f!<%6$,;XDj$7$?F~NOCM$N%5%K%?%$%:=hM}$,E,@Z$K$N%P!<%8%g%s$b1F6A$rhttp://www.securityfocus.com/bid/15612
$BMWLs(B: 
(BSearchSolutions SearchFeed$B!"(BRevenuePilot$B!"$*$h$S(B Google API $B$O%/%m%9%5%$(B
$B%H%9%/%j%W%F%#%s%0967b$rZMQ>pJs$N@`(B
$Bhttp://www.securityfocus.com/bid/15613
$BMWLs(B: 
(BMicrosoft Windows $B$K$O!"%5!<%S%9ITG=>uBV$K4Y$k5?$$$,$"$j$^$9!#(B
(B
$B$3$NLdBj$O!"(B'SynAttackProtect' $B$N%O%C%7%e%F!<%V%k4IM}$rC4$&4X?t$K$*$1$k(B
$B@_7W>e$NITHw$KM3Mh$7$^$9!#(BTCP/IP $B%9%?%C%/$K$h$j;HMQ$5$l$k$3$NLdBj$N$"$k(B
$B4X?t$K$h$jM=B,2DG=$J%O%C%7%e$,:n@.$5$l$k$?$a!"F10l$N%O%C%7%eCM$,4XO"IU$1(B
$B$i$l$?BgNL$N(B SYN $B%Q%1%C%H$r967buBV$K4Y$k>l9g$,$"$j$^$9!#(B
(B
(B42. Gallery Multiple Input Validation Vulnerabilities
(BBugTraq ID: 15614
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2005-12-01
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/15614
$BMWLs(B: 
(BGallery $B$K$O!"%/%m%9%5%$%H%9%/%j%W%F%#%s%0967b$rpJs$,3+<($5(B
$B$l$kLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#$3$l$i$NLdBj$O!"%f!<%6$,;XDj$7$?F~NOCM(B
$B$N%5%K%?%$%:=hM}$,E,@Z$KZMQ>pJs$N@`pJs$,3+<($5$l$kLdBj$rMxMQ$7$F!"LdBj$N$"$k(B Web $B%5!<%P%"%W%j%1!<(B
$B%7%g%s$N%;%-%e%j%F%#%3%s%F%-%9%HFb$G!"G'>ZMQ>pJs$*$h$S$9$Y$F$N%3%s%F%s%D(B
$B$r3+<($9$k2DG=@-$,$"$j$^$9!#%5%$%H$N4IM}\:Y$ODs6!$5$l$F$$$^$;$s!#(B
(B
$B%Y%s%@$O!"%P!<%8%g%s(B 2.0.2 $B$G$3$NLdBj$r2r7h$7$F$$$^$9!#(B
(B
(B43. Sun Java Runtime Environment Multiple Privilege Escalation Vulnerabilities
(BBugTraq ID: 15615
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2005-11-28
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/15615
$BMWLs(B: 
(BSun JRE $B$K$O$5$^$6$^$J8"8B>:3J$,0z$-5/$3$5$l$k5?$$$,$"$j$^$9!#(B
(B
$B$3$l$i$NLdBj$O!"%j%b!<%H$N(B Java $B%"%W%j%1!<%7%g%s$,1F6A$re$N>\:Y>pJs$O8=;~E@$G$O8x3+$5$l$F$$$^$;$s!#>\:Y>pJs$,8x3+$5$lhttp://www.securityfocus.com/bid/15616
$BMWLs(B: 
(BPanda Software $B%"%s%A%&%$%k%9@=IJ$K$O%R!<%WNN0h$G%*!<%P!<%U%m!<$,H/@8$9(B
$B$k5?$$$,$"$j$^$9!#%"%s%A%&%$%k%9%i%$%V%i%j$,(B ZOO $B%"!<%+%$%V%U%!%$%k$r2r(B
$BE`$9$k$H$-$K$3$NLdBj$,H/@8$7$^$9!#(B
(B
$B$3$NLdBj$NMxMQ$,@.8y$9$k$H!"LdBj$N$"$k%"%W%j%1!<%7%g%s$N%;%-%e%j%F%#%3%s(B
$B%F%-%9%HFb$GG$0U$N%3!<%I$,e$N%G%9%/%H%C%W!"%2!<%H%&%'%$!"$*$h$S%5!<%P8~$1$N(B
$B%"%s%A%&%$%k%9%"%W%j%1!<%7%g%s$K1F6A$r5Z$\$92DG=@-$,$"$j$^$9!#B?$/$N%5!<(B
$B%I%Q!<%F%#@=$N%"%W%j%1!<%7%g%s$,LdBj$N$"$k%i%$%V%i%j$r;HMQ$7$F$$$k2DG=@-(B
$B$,$"$j!"$3$NLdBj$N1F6A$rhttp://www.securityfocus.com/bid/15617
$BMWLs(B: 
(BASP-Rider $B$K$O!"(BSQL $B9=J8$rCmF~2DG=$JLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#$3$NLd(B
$BBj$O!"%f!<%6$,;XDj$7$?F~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NOCM$N%5%K%?(B
$B%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967bhttp://www.securityfocus.com/bid/15618
$BMWLs(B: 
(BCisco Security Agent $B$K$O%m!<%+%k$G8"8B>:3J$,0z$-5/$3$5$l$kL$FCDj$NLdBj(B
$B$,B8:_$9$k5?$$$,$"$j$^$9!#(BMicrosoft Windows $B%W%i%C%H%U%)!<%`>e$GLdBj$N$"(B
$B$k%P!<%8%g%s$N(B Cisco Security Agent $B$rl9g$N$_!"$3$NLdBj$N1F(B
$B6A$r\:Y$O!"8=;~E@$G$O8xI=$5$l$F$$$^$;$s!#99$J$k>\:Y$,8x3+(B
$B$5$lhttp://www.securityfocus.com/bid/15619
$BMWLs(B: 
(BQNX Phgrafx $B$K$O!"%m!<%+%k$G$N967b$K$h$j%P%C%U%!%*!<%P!<%U%m!<$,H/@8$9$k(B
$B5?$$$,$"$j$^$9!#(B
(B
$BLdBj$N$"$k%f!<%F%#%j%F%#$K(B setuid-superuser $B8"8B$,IUM?$5$l$F$*$j!"967b$K(B
$B@.8y$9$k$H4IM}(B
$B$N%P!<%8%g%s$b1F6A$rhttp://www.securityfocus.com/bid/15620
$BMWLs(B: 
(BKadu $B$K$O!"%j%b!<%H$+$i$N967b$K$h$j%5!<%S%9ITG=>uBV$K4Y$k5?$$$,$"$j$^$9!#(B
(B
$B%/%i%$%"%s%H$,(B Gadu-Gadu $B%5!<%P$+$i$N0U?^E*$K:n@.$5$l$?%a%C%;!<%8$r=hM}(B
$B$9$k:]$K$3$NLdBj$,H/@8$9$k$3$H$,Js9p$5$l$F$$$^$9!#(B
(B
(BKadu 0.4.2 $B$*$h$S(B 0.5.0pre. $B$K$*$$$F!"$3$NLdBj$N1F6A$r$N%P!<%8%g%s$b1F6A$rhttp://www.securityfocus.com/bid/15621
$BMWLs(B: 
(BPHP Upload Center $B$K$O!"%G%#%l%/%H%j%H%i%P!<%5%k967b$rhttp://www.securityfocus.com/bid/15622
$BMWLs(B: 
(BFantastic News $B$K$O!"(BSQL $B9=J8$rCmF~2DG=$JLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#(B
(B
$B967b$,@.8y$9$k$H!"%"%W%j%1!<%7%g%s$KBP$9$k6<0R$,>7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967bhttp://www.securityfocus.com/bid/15623
$BMWLs(B: 
(BXaraya $B$K$O!"%G%#%l%/%H%j%H%i%P!<%5%k967b$rHJ8;z(B
$BNs$r;XDj$7$F!"(BWeb $B%5!<%P$NG$0U$N>l=j$K%U%!%$%k$rCV$/$3$H$,2DG=$G$"$k$3$H(B
$B$,Js9p$5$l$F$$$^$9!#(B
(B
$B967bl9g!"$3$NLdBj$O%j%b!<%H$+$i%3%s%T%e!<%?$KBP$9$k4m81$r>7$/(B
$B2DG=@-$,$"$j$^$9!#%G!<%?$NGK2u$d%5!<%S%9ITG=>uBV$K4Y$i$;$k$J$I$N$[$+$N96(B
$B7b$b2DG=$H$J$j$^$9!#(B
(B
(BXaraya 1.0.0 RC4 $B0JA0$K$*$$$F$3$NLdBj$N1F6A$rhttp://www.securityfocus.com/bid/15624
$BMWLs(B: 
(BDotClear $B$K$O!"%H%i%C%/%P%C%/$K4X$9$kL$FCDj$N%;%-%e%j%F%#>e$NLdBj$,B8:_(B
$B$9$k5?$$$,$"$j$^$9!#(B
(B
$B$3$l0J>e$N>\:Y$O8x3+$5$l$F$$$^$;$s!#>\:Y$,8x3+$5$lC$9$k%P!<%8%g%s(B 1.2.2 $B$r%j%j!<%9$7$F$$$^$9!#(B
(B
(B53. Linux Kernel PTraced Child Auto-Reap Local Denial of Service Vulnerability
(BBugTraq ID: 15625
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: 2005-11-29
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/15625
$BMWLs(B: 
(BLinux Kernel $B$K$O!"%m!<%+%k$G%5!<%S%9ITG=>uBV$K4Y$k5?$$$,$"$j$^$9!#(B
(B
(Bptrace $B$5$l$F$$$k>l9g$K%+!<%M%k$OITE,@Z$K%W%m%;%9$r<+F0E*$K<}=8$9$k$?$a!"(B
$BIT@5$J%]%$%s%?$H$J$jF@$^$9!#$3$N%]%$%s%?$KBP$7$F$5$i$KA`:n$,9T$o$l$k$H%+!<(B
$B%M%k$,%/%i%C%7%e$9$k7k2L$H$J$j$^$9!#(B
(B
$B$3$NLdBj$O!"%m!<%+%k%f!<%6$,%+!<%M%k$r%/%i%C%7%e$5$;!"@55,%f!<%6$X$N99$J(B
$B$k%5!<%S%9$N5qH]$r>7$/$3$H$r5v$7$F$7$^$$$^$9!#(B
(B
(BLinux Kernel 2.6.15 $B$h$jA0$N%P!<%8%g%s$K$*$$$F!"$3$NLdBj$N1F6A$rhttp://www.securityfocus.com/bid/15626
$BMWLs(B: 
(BPHP Upload Center $B$K$O!"%G%#%l%/%H%j%H%i%P!<%5%k967b$rpJs$r4^$`%U%!%$%k$r(B
$B3+<($9$k2DG=@-$,$"$j$^$9!#$3$NJ}K!$GpJs$O!"$3$N%=%U%H%&%'%"$*(B
$B$h$S%[%9%H%3%s%T%e!<%?$KBP$7$F99$J$k967b$r;n$_$k$?$a$Nhttp://www.securityfocus.com/bid/15627
$BMWLs(B: 
(BLinux Kernel $B$K$O!"%m!<%+%k$G%5!<%S%9ITG=>uBV$K4Y$k5?$$$,$"$j$^$9!#(B
(B
$B$3$NLdBj$O!"B??t$N%U%!%$%k%m%C%/$N%j!<%9$rCHq$9$k$3$H$K$h$j0z$-5/$3$5$l$^$9!#%j!<%9$,%?%$%`%"%&%H$9$k$H!"%$%Y%s(B
$B%H$,%m%0$5$l!"%+!<%M%k%a%b%j$,>CHq$5$l$^$9!#(B
(B
$B$3$NLdBj$K$h$j!"%m!<%+%k$N967bj$K>CHq$5$l!"(B
$B7k2L$H$7$F%a%b%jITB-$N>uBV$H$J$j!"@55,%f!<%6$X$N%5!<%S%95qH]$r>7$/$3$H$,(B
$B5v$5$l$F$7$^$$$^$9!#(B
(B
(BLinux Kernel 2.6.15-rc3 $B$h$jA0$N%P!<%8%g%s$K$*$$$F!"$3$NLdBj$N1F6A$rhttp://www.securityfocus.com/bid/15628
$BMWLs(B: 
(BDMANews $B$K$O(B SQL $B9=J8$rCmF~2DG=$JJ#?t$NLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#$3(B
$B$l$i$NLdBj$O!"%f!<%6$K$h$kF~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NOCM$KBP(B
$B$9$k%5%K%?%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967b$N%P!<%8%g(B
$B%s$b1F6A$rhttp://www.securityfocus.com/bid/15629
$BMWLs(B: 
(BPerl $B$K$O!"%U%)!<%^%C%H%9%H%j%s%0$NLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#$3$NLd(B
$BBj$O!";XDj$5$l$?%U%)!<%^%C%H$KJQ49$7$F=PNO$r9T$&4X?t$G=q<0;XDj;R$,%W%m%0(B
$B%i%_%s%08@8l$K$h$jE,@Z$K=hM}$5$l$J$$$3$H$KM3Mh$7$^$9!#(B
(B
$B967beITE,@Z$JJ}K!$G;XDj$5$l$?%U%)!<%^%C%H$KJQ49$7$F=PNO$r9T$&4X(B
$B?t$r;HMQ$7$F$$$k$9$Y$F$N%"%W%j%1!<%7%g%s$,$3$NLdBj$N1F6A$rhttp://www.securityfocus.com/bid/15630
$BMWLs(B: 
(BDRZES HMS $B$K$O!"%/%m%9%5%$%H%9%/%j%W%F%#%s%0967b$rZMQ>pJs$N@`$N%P!<%8%g%s(B
$B$b1F6A$rhttp://www.securityfocus.com/bid/15631
$BMWLs(B: 
(BEntergal MX $B$K$O!"(BSQL $B9=J8$rCmF~2DG=$JJ#?t$NLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#(B
$B$3$l$i$NLdBj$O!"%f!<%6$K$h$kF~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NOCM$K(B
$BBP$9$k%5%K%?%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967b$N%P!<%8%g%s$b1F6A(B
$B$rhttp://www.securityfocus.com/bid/15632
$BMWLs(B: 
(BBosDates $B$K$O(B SQL $B9=J8$rCmF~2DG=$JJ#?t$NLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#$3(B
$B$l$i$NLdBj$O!"%f!<%6$K$h$kF~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NOCM$KBP(B
$B$9$k%5%K%?%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967b$N%P!<%8%g%s$b1F6A(B
$B$rhttp://www.securityfocus.com/bid/15633
$BMWLs(B: 
(BPost Affiliate Pro $B$K$O!"(BSQL $B9=J8$rCmF~2DG=$JLdBj$,B8:_$9$k5?$$$,$"$j$^(B
$B$9!#$3$NLdBj$O!"%f!<%6$,;XDj$7$?F~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NO(B
$BCM$N%5%K%?%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967b$N%P!<%8%g%s$b1F(B
$B6A$rhttp://www.securityfocus.com/bid/15634
$BMWLs(B: 
(BGhostScripter Amazon Shop $B$K$O!"(BSQL $B9=J8$rCmF~2DG=$JLdBj$,B8:_$9$k5?$$$,(B
$B$"$j$^$9!#$3$NLdBj$O!"%f!<%6$,;XDj$7$?F~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"(B
$BF~NOCM$N%5%K%?%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967b$N%P!<%8%g%s$b1F(B
$B6A$rhttp://www.securityfocus.com/bid/15635
$BMWLs(B: 
(BKBase Express $B$K$O!"(BSQL $B9=J8$rCmF~2DG=$JJ#?t$NLdBj$,B8:_$9$k5?$$$,$"$j$^(B
$B$9!#$3$l$i$NLdBj$O!"%f!<%6$K$h$kF~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NO(B
$BCM$KBP$9$k%5%K%?%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967b$N%P!<%8%g%s$b1F(B
$B6A$rhttp://www.securityfocus.com/bid/15636
$BMWLs(B: 
(BltwCalendar $B$K$O!"(BSQL $B9=J8$rCmF~2DG=$JLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#$3$N(B
$BLdBj$O!"%f!<%6$,;XDj$7$?F~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NOCM$N%5%K(B
$B%?%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967b$N%P!<%8%g%s$b1F(B
$B6A$rhttp://www.securityfocus.com/bid/15637
$BMWLs(B: 
(BOrca Knowledgebase $B$K$O!"(BSQL $B9=J8$rCmF~2DG=$JLdBj$,B8:_$9$k5?$$$,$"$j$^(B
$B$9!#$3$NLdBj$O!"%f!<%6$,;XDj$7$?F~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NO(B
$BCM$N%5%K%?%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967b$N%P!<%8%g%s$b1F6A$r(B
$Bhttp://www.securityfocus.com/bid/15638
$BMWLs(B: 
(BOrca Blog $B$K$O!"(BSQL $B9=J8$rCmF~2DG=$JLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#$3$NLd(B
$BBj$O!"%f!<%6$,;XDj$7$?F~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NOCM$N%5%K%?(B
$B%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967b$N%P!<%8%g%s$b1F6A$r(B
$Bhttp://www.securityfocus.com/bid/15639
$BMWLs(B: 
(BOrca Ringmaker $B$K$O!"(BSQL $B9=J8$rCmF~2DG=$JLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#(B
$B$3$NLdBj$O!"%f!<%6$,;XDj$7$?F~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NOCM$N(B
$B%5%K%?%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967b$N%P!<%8%g%s$b1F6A$r(B
$Bhttp://www.securityfocus.com/bid/15640
$BMWLs(B: 
(BFAQ System $B$K$O(B SQL $B9=J8$rCmF~2DG=$JJ#?t$NLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#(B
$B$3$l$i$NLdBj$O!"%f!<%6$K$h$kF~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NOCM$K(B
$BBP$9$k%5%K%?%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967b$N%P!<%8%g%s$b1F6A(B
$B$rhttp://www.securityfocus.com/bid/15641
$BMWLs(B: 
(BSurvey System $B$K$O!"(BSQL $B9=J8$rCmF~2DG=$JJ#?t$NLdBj$,B8:_$9$k5?$$$,$"$j$^(B
$B$9!#$3$NLdBj$O!"%f!<%6$,;XDj$7$?F~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NO(B
$BCM$N%5%K%?%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967b$N%P!<%8%g%s$b1F6A(B
$B$rhttp://www.securityfocus.com/bid/15642
$BMWLs(B: 
(BLinux Kernel $B$K$O!"%m!<%+%k$G%5!<%S%9ITG=>uBV$K4Y$kLdBj$,B8:_$9$k5?$$$,(B
$B$"$j$^$9!#(B
(B
(B'CLONE_THREAD' $B0z?t$,4XO"IU$1$i$l$F$$$k(B 'clone' $B%7%9%F%`%3!<%k$r2p$7$F%W(B
$B%m%;%9$,:n@.$5$l$?%$%s%9%?%s%9$,(B ptrace $B$5$l$k>l9g!"%+!<%M%k$O;XDj$5$l$?(B
$B%W%m%;%9$r%H%l!<%9$7$F$$$J$$$3$H$r@5$7$/3NG'$7$^$;$s!#(B
(B
$B$3$NLdBj$O!"%m!<%+%k%f!<%6$,%+!<%M%k$r%/%i%C%7%e$5$;!"@55,%f!<%6$X$N99$J(B
$B$k%5!<%S%9$N5qH]$r>7$/$3$H$r5v$7$F$7$^$$$^$9!#(B
(B
(BLinux Kernel 2.6.14.2 $B$h$jA0$N%P!<%8%g%s$K$*$$$F!"$3$NLdBj$N1F6A$rhttp://www.securityfocus.com/bid/15643
$BMWLs(B: 
(BN-13 News $B$K$O!"(BSQL $B9=J8$rCmF~2DG=$JLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#(B
(B
$B967b$,@.8y$9$k$H!"%"%W%j%1!<%7%g%s$KBP$9$k6<0R$,>7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967bhttp://www.securityfocus.com/bid/15644
$BMWLs(B: 
(BDRZES HMS $B$K$O(B SQL $B9=J8$rCmF~2DG=$JJ#?t$NLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#(B
$B$3$l$i$NLdBj$O!"%f!<%6$,;XDj$7$?F~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NO(B
$BCM$N%5%K%?%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967bhttp://www.securityfocus.com/bid/15645
$BMWLs(B: 
(BNuFW $B$K$O!"%j%b!<%H$+$i$N967b$K$h$j%5!<%S%9ITG=>uBV$K4Y$k2DG=@-$,$"$j$^(B
$B$9!#$3$NLdBj$O!"G'>Z$5$l$F$$$k%f!<%6$+$iAw?.$5$l$?0U?^E*$K:n@.$5$l$?%M%C(B
$B%H%o!<%/%Q%1%C%H$,E,@Z$K=hM}$5$l$J$$$3$H$KM3Mh$7$^$9!#(B
(B
$B$3$NLdBj$K$h$j!"(B'nuauth' $B%"%W%j%1!<%7%g%s$,%/%i%C%7%e$7!"8eB3$N%f!<%6$X(B
$B$N%5!<%S%95qH]$r>7$/2DG=@-$,$"$j$^$9!#(B
(B
(BNuFW 1.0.16 $B$h$jA0$N%P!<%8%g%s$H3+H/HG(B 1.1 $B$,$3$NLdBj$N1F6A$rhttp://www.securityfocus.com/bid/15646
$BMWLs(B: 
(BSymantec pcAnywhere $B$K$O%P%C%U%!%*!<%P!<%U%m!<$,H/@8$9$k5?$$$,$"$j$^$9!#(B
$B$3$N7g4Y$OG'>Z$NA0$K0z$-5/$3$5$l$k$?$a!"$3$NLdBj$OM-8z$JG'>ZMQ>pJs$N$J$$(B
$B%j%b!<%H$N967buBV$K4Y$i$5$l$k$3$H$,3NG'$5$l$F$$$^$9!#%5%]!<%H%P!<%8%g%s(B 11.0.1 $B$*(B
$B$h$S(B 11.5.1 $B$,$3$NLdBj$N1F6A$rhttp://www.securityfocus.com/bid/15647
$BMWLs(B: 
(BMac OS X $B$K$*$1$k%m!<%+%k$*$h$S%j%b!<%H$GMxMQ2DG=$JJ#?t$NLdBj$r2r7h$9$k(B
$B$?$a$K!"(BApple $B$O(B Security Update 2005-008 $B$r%j%j!<%9$7$^$7$?!#(B
(B
$B$3$N%;%-%e%j%F%#%"%C%W%G!<%H$G$O!"0J2<$NLdBj$,2r7h$5$l$^$7$?!#(B
(B
(BApache2 $B$K$*$$$FFCDj$N@_Dj$G%/%m%9%5%$%H%9%/%j%W%F%#%s%0967b$rZ$,2sHr$5$l$k5?$$$,$"$kLdBj(B
(B
(BCoreFoundation $B$K$*$$$F!"%5!<%S%9ITG=>uBV$K4Y$k!"$"$k$$$OG$0U$N%3!<%I$,(B
$BZ$G0-0U$N$"$k(B HTTP $B%5!<%P$K@\B3$9$k$H$-$KG$0U$N%3!<(B
$B%I$,:3J$,0z$-5/$3$5$l$k5?$$$,$"$kLdBj(B
(B
(BOpenSSL $B$K$*$$$F(B SSLv2 $B%W%m%H%3%k$r6/@)E*$K;HMQ$5$l$kLdBj(B
(B
(Bpasswordserver $B$K$*$$$F%m!<%+%k%f!<%6$,8"8B$r>:3J$5$;$k$3$H$,5v$5$l$F$7(B
$B$^$&2DG=@-$,$"$kLdBj(B
(B
(BSafari $B$K$*$$$F@55,I=8=$r=hM}$9$k$H$-$KG$0U$N%3!<%I$,l=j$K%U%!%$%k$,%@%&(B
$B%s%m!<%I$5$l$F$7$^$&$3$H$r5v$9%G%#%l%/%H%j%H%i%P!<%5%k967b$rpJs$rI=<((B
$B$9$k$3$H$r5v$7$F$7$^$&5?$$$,$"$kLdBj(B
(B
(BSafari $B$K$*$$$F(B WebKit $B%Y!<%9$N%"%W%j%1!<%7%g%s$,;HMQ$5$l$F$$$k(B Web $B%5%$(B
$B%H$K%"%/%;%9$9$k$H$-$K!"%j%b!<%H$+$i%3!<%I$,:3J$,0z$-5/$3$5$l$k5?$$$,$"$kLd(B
$BBj(B
(B
(Bsyslog $B$K$*$$$F%7%9%F%`%m%0%(%s%H%j$,56Au$5$l$k2DG=@-$,$"$kLdBj(B
(B
$B$3$l$i$NLdBj$O!"99$KJ,@O$5$lhttp://www.securityfocus.com/bid/15649
$BMWLs(B: 
(BCenterICQ $B$K$O!"%j%b!<%H$+$i$N967b$K$h$j%5!<%S%9ITG=>uBV$K4Y$k5?$$$,$"$j(B
$B$^$9!#(B
(B
$B%/%i%$%"%s%H$,%$%s%?!<%M%C%H$KD>@\@\B3$7$F$$$k%3%s%T%e!<%?>e$Ghttp://www.securityfocus.com/bid/15650
$BMWLs(B: 
(BSocketKB $B$K$O!"(BSQL $B9=J8$rCmF~2DG=$JLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#$3$NLd(B
$BBj$O!"%f!<%6$,;XDj$7$?F~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NOCM$N%5%K%?(B
$B%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967bhttp://www.securityfocus.com/bid/15651
$BMWLs(B: 
(BPHPAlbum $B$K$O!"%m!<%+%k$G%U%!%$%k$,%$%s%/%k!<%I$5$l$k5?$$$,$"$j$^$9!#(B
(B
$B967be$G(B Web $B%5!<%P%W%m%;(B
$B%9$N8"8B$r;HMQ$7!"G$0U$N%5!<%P%5%$%I%9%/%j%W%H%3!<%I$re$NG$0U$N%U%!%$%k$r(B Web $B%5!<(B
$B%P$N8"8B$GFI$_http://www.securityfocus.com/bid/15652
$BMWLs(B: 
(BSoftbiz B2B Trading Marketplace $B$K$O!"(BSQL $B9=J8$rCmF~2DG=$JJ#?t$NLdBj$,B8(B
$B:_$9$k5?$$$,$"$j$^$9!#$3$l$i$NLdBj$O!"%f!<%6$K$h$kF~NOCM$r(B SQL $B%/%(%j$G(B
$B;HMQ$9$kA0$K!"F~NOCM$KBP$9$k%5%K%?%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967b$N%P!<%8%g%s$b1F6A$rhttp://www.securityfocus.com/bid/15653
$BMWLs(B: 
(BSoftbiz FAQ $B$K$O(B SQL $B9=J8$rCmF~2DG=$JJ#?t$NLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#(B
$B$3$l$i$NLdBj$O!"%f!<%6$K$h$kF~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NOCM$K(B
$BBP$9$k%5%K%?%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967b$N%P!<%8%g%s$b1F6A$rhttp://www.securityfocus.com/bid/15654
$BMWLs(B: 
(BAtlantis Knowledge $B$K$O!"(BSQL $B9=J8$rCmF~2DG=$JLdBj$,B8:_$9$k5?$$$,$"$j$^(B
$B$9!#$3$NLdBj$O!"%f!<%6$,;XDj$7$?F~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NO(B
$BCM$N%5%K%?%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967b$N%P!<%8%g%s$b1F6A$rhttp://www.securityfocus.com/bid/15655
$BMWLs(B: 
(BFAQRing $B$K$O!"(BSQL $B9=J8$rCmF~2DG=$JLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#$3$NLdBj(B
$B$O!"%f!<%6$,;XDj$7$?F~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NOCM$N%5%K%?%$(B
$B%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967b$N%P!<%8%g%s$b1F6A$rhttp://www.securityfocus.com/bid/15656
$BMWLs(B: 
(BWSN Knowledge Base $B$K$O!"(BSQL $B9=J8$rCmF~2DG=$JJ#?t$NLdBj$,B8:_$9$k5?$$$,(B
$B$"$j$^$9!#$3$l$i$NLdBj$O!"%f!<%6$K$h$kF~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"(B
$BF~NOCM$KBP$9$k%5%K%?%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967b$N%P!<%8%g%s$b1F6A$rhttp://www.securityfocus.com/bid/15657
$BMWLs(B: 
(BO-Kiraku Nikki $B$K$O!"(BSQL $B9=J8$rCmF~2DG=$JLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#(B
$B$3$NLdBj$O!"%f!<%6$,;XDj$7$?F~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NOCM$N(B
$B%5%K%?%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967b$N%P!<%8%g%s$b1F6A$rhttp://www.securityfocus.com/bid/15658
$BMWLs(B: 
(B88Scripts Event Calendar $B$K$O!"(BSQL $B9=J8$rCmF~2DG=$JLdBj$,B8:_$9$k5?$$$,(B
$B$"$j$^$9!#$3$NLdBj$O!"%f!<%6$,;XDj$7$?F~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"(B
$BF~NOCM$N%5%K%?%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967b$N%P!<%8%g%s$b1F6A$rhttp://www.securityfocus.com/bid/15659
$BMWLs(B: 
(BInstant Photo Gallery $B$K$O!"(BSQL$B9=J8$rCmF~2DG=$JJ#?t$NLdBj$,B8:_$9$k5?$$(B
$B$,$"$j$^$9!#$3$l$i$NLdBj$O!"%f!<%6$K$h$kF~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0(B
$B$K!"F~NOCM$KBP$9$k%5%K%?%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967b$N%P!<%8%g%s$b1F6A$rhttp://www.securityfocus.com/bid/15660
$BMWLs(B: 
(BMicrosoft Internet Explorer $B$K$O!"%/%m%9%I%a%$%s%;%-%e%j%F%#%b%G%k$r?/32(B
$B$9$k$3$H$r5v$7$F$7$^$&5?$$$,$"$j$^$9!#(B
(B
(BCSS $B%U%!%$%k$r@5$7$/2rpJs$rhttp://www.securityfocus.com/bid/15661
$BMWLs(B: 
(BTradesoft CMS $B$O!"(BSQL $B9=J8$rCmF~2DG=$JJ#?t$NLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#(B
$B$3$l$i$NLdBj$O!"%f!<%6$K$h$kF~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NOCM$K(B
$BBP$9$k%5%K%?%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967bhttp://www.securityfocus.com/bid/15662
$BMWLs(B: 
(BWebCalendar $B$K$O(B SQL $B9=J8$rCmF~2DG=$JJ#?t$NLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#(B
(B
$B$3$NLdBj$K$h$j!"%j%b!<%H$N967b7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967b$N%P!<%8%g%s$b1F(B
$B6A$rhttp://www.securityfocus.com/bid/15663
$BMWLs(B: 
(BDrupal $B$K$O!"(BHTML $B%?%0$rA^F~2DG=$JLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#$3$NLdBj(B
$B$O!"%f!<%6$,;XDj$7$?F~NOCM$rF0E*$K@8@.$7$?%3%s%F%s%D$G;HMQ$9$kA0$K!"F~NO(B
$BCM$N%5%K%?%$%:=hM}$,E,@Z$KZMQ>pJs$N@`$N967b$,0z$-5/$3$5$l$k2DG=@-$b$"$j$^$9!#(B
(B
$B$3$NLdBj$O!"(BWeb $B%V%i%&%6$K(B Microsoft Internet Explorer $B$r;HMQ$9$k$H$-$K(B
$B8B$jH/@8$7$^$9!#(B
(B
(B91. Citrix Multiple Applications Login Form Cross-Site Scripting Vulnerability
(BBugTraq ID: 15664
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2005-12-01
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/15664
$BMWLs(B: 
(BCitrix MetaFrame Secure Access Manager $B$*$h$S(B Citrix NFuse Elite $B$K$O!"(B
$B%/%m%9%5%$%H%9%/%j%W%F%#%s%0967b$rZMQ>pJs$N@`http://www.securityfocus.com/bid/15665
$BMWLs(B: 
(BLore $B$K$O!"(BSQL $B9=J8$rCmF~2DG=$JLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#$3$NLdBj$O!"(B
$B%f!<%6$,;XDj$7$?F~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NOCM$N%5%K%?%$%:=h(B
$BM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967bhttp://www.securityfocus.com/bid/15666
$BMWLs(B: 
(BAstaro Security Linux $B$O!"0U?^E*$K:n@.$5$l$?(B IKE $B%H%i%U%#%C%/$r=hM}$9$k(B
$B:]$K%5!<%S%9ITG=>uBV$K4Y$k5?$$$,$"$j$^$9!#(B
(B
$B0U?^E*$K:n@.$5$l$?%Z%$%m!<%I$,4XO"IU$1$i$l$?%Q%1%C%H$,(B IKE $B8r49$N:]$KAw(B
$B?.$5$l$k$H%G!<%b%s$,%/%i%C%7%e$7$F$3$NLdBj$,H/@8$9$k$H?dB,$5$l$^$9!#(B
(B
(B94. DotClear Session.PHP SQL Injection Vulnerability
(BBugTraq ID: 15667
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2005-12-01
$B4XO"$9$k(B URL: http://www.securityfocus.com/bid/15667
$BMWLs(B: 
(BDotClear $B$K$O!"(BSQL $B9=J8$rCmF~2DG=$JLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#$3$NLd(B
$BBj$O!"%f!<%6$,;XDj$7$?F~NOCM$r(B SQL $B%/%(%j$G;HMQ$9$kA0$K!"F~NOCM$N%5%K%?(B
$B%$%:=hM}$,E,@Z$K7$+$l$?$j!"%G!<%?$,3+<((B
$B$5$l$?$jA`:n$5$l$?$j$9$k2DG=@-$,$"$j$^$9!#$^$?!"967bhttp://www.securityfocus.com/bid/15668
$BMWLs(B: 
(BAvaya TN2602AP IP Media Resource 320 $B$K$O!"%j%b!<%H$+$i%5!<%S%9ITG=>uBV(B
$B$K4Y$k5?$$$,$"$j$^$9!#(B
(B
$B967b$,@.8y$9$k$H!"%a%b%j%j!<%/$,0z$-5/$3$5$l%/%i%C%7%e$9$k$?$a$K%5!<%S%9(B
$BITG=>uBV$K4Y$k2DG=@-$,$"$j$^$9!#(B
(B
(BAvaya TN2602AP IP Media Resource 320 $B$N(B vintage 9 $B%U%!!<%`%&%'%"$h$jA0$N(B
$B%P!<%8%g%s$,$3$NLdBj$N1F6A$rhttp://www.securityfocus.com/bid/15669
$BMWLs(B: 
(BFastJar $B$K$O!"%G%#%l%/%H%j%H%i%P!<%5%k967b$re=q$-$9$k$3$H$,2DG=$G$9!#>e(B
$B=q$-$5$l$k%U%!%$%k$K$h$C$F$O!"%7%9%F%`%/%i%C%7%e$dIT@5%"%/%;%9$,$,0z$-5/(B
$B$3$5$l$k2DG=@-$,$"$j$^$9!#$=$NB>$N967b$rhttp://www.securityfocus.com/bid/15671
$BMWLs(B: 
(BMicrosoft Windows$B$K$O!"%m!<%+%k$+$i$N967b$K$h$j%5!<%S%9ITG=>uBV$K4Y$k5?(B
$B$$$,$"$j$^$9!#$3$NLdBj$rMxMQ$9$k967buBV(B
$B$K4Y$i$;$k!"$"$k$$$OG$0U$N%W%m%;%9$r=*N;$9$k2DG=@-$,$"$j$^$9!#(B
(B
$B%W%m%;%9$,(B 'CreateRemoteThread' $B4X?t$r8F$S=P$7$F$3$NLdBj$r0z$-5/$3$9$3$H(B
$B$,2DG=$G$"$k$3$H$,Js9p$5$l$F$$$^$9!#(B
(B
$B$3$N967b$O%m!<%+%k$N8"8B$N$J$$%f!<%6$K$h$jhttp://www.securityfocus.com/bid/15672
$BMWLs(B: 
(BMXChange $B$K$O!"F~NOCM$NBEEv@-3NG'$K4XO"$9$kJ#?t$NLdBj$,B8:_$9$k5?$$$,$"(B
$B$j$^$9!#$3$l$i$NLdBj$O!"%f!<%6$,;XDj$7$?F~NOCM$N%5%K%?%$%:=hM}$,E,@Z$Khttp://www.securityfocus.com/bid/15673
$BMWLs(B: 
(BWebCalendar $B$K$O!"(BHTTP $B1~EzJ,3d$NLdBj$,B8:_$9$k5?$$$,$"$j$^$9!#$3$NLdBj(B
$B$O!"%f!<%6$,;XDj$7$?F~NOCM$N%5%K%?%$%:=hM}$,E,@Z$K$N%P!<%8%g%s$b1F(B
$B6A$rhttp://www.securityfocus.com/bid/15674
$BMWLs(B: 
(BDrupal $B$K$O!"G'>Z$,2sHr$5$l$kLdBj$,B8:_$7$^$9!#$3$NLdBj$O!"%"%W%j%1!<%7%g(B
$B%s$,(B PHP5 $B$N85$Gl9g$NL$FCDj$N%(%i!<$KM3Mh$7$^$9!#(B
(B
$B967bpJs$,O31L$9$k2DG=@-$,$"$j$^$9!#(B
(B
(B
(BIII.SECURITYFOCUS NEWS ARTICLES
(B--------------------------------
(B1. Federal flaw database commits to grading system
$BCxe$N7g4Y$K$D$$$F?<9oEY$N(B
$B%i%s%-%s%0$r$D$1$F$$$^$9!#(B
(B
(Bhttp://www.securityfocus.com/news/11360
(B
(B2. Mac OS X security under scrutiny
$BCxhttp://www.securityfocus.com/news/11359
(B
(B3. Texas puts Sony BMG in its sights
$BCxhttp://www.securityfocus.com/news/11358
(B
(B4. Sony BMG's copy-protection problems grow
$BCxe$N(B
$BLdBj$,B8:_$9$k$3$H$rH/8+$7!"J#?t$N5D0w$,%G%8%?%k%a%G%#%"$X$N2aEY$N@)Ls$K(B
$B$D$$$FHsFq$7$F$$$kCf!"(BSony BMG $B$OE9J^$+$i(B CD $B$r2s<}$7!"2~A1$5$l$?=|5n%D!<(B
$B%k$r8x3+$7!">CHqhttp://www.securityfocus.com/news/11357
(B
(B5. Skype under scrutiny for bugs
$BCxe$NLdBj$O!"%Y%s%@$K$H$C$F:G0-$N%?(B
$B%$%_%s%0$G5/$3$j$^$7$?!#(B
(B
(Bhttp://www.securityfocus.com/news/11354
(B
(B6. Say hello to the Skype Trojan
$BCxhttp://www.securityfocus.com/news/11348
(B
(B7. Shared music abuse bug hits iTunes
$BCxhttp://www.securityfocus.com/news/11347
(B
(B8. US cybersecurity all at sea
$BCxc>J$K$h$k%"%a%j%+9qFb$N%5%$%P!<%;%-%e%j%F%#%j%9%/$N4IM}$OIT==(B
$BJ,$G$"$k!"$H@h$NJF9qBgE}NN>pJs%;%-%e%j%F%#C4Ev8\Ld$OH/8@$7$F$$$^$9!#(B
(B
(Bhttp://www.securityfocus.com/news/11345
(B
(B
(B--
$BK]Lu(B: LAC $BK]Lu%A!<%`(B
$B4F=$(B: $B>.3^8691M:(B (OGASAWARA Tsuneo)
(BLAC Co., Ltd.
(Bhttp://www.lac.co.jp/index.html
Attachment: smime.p7s
Description: S/MIME cryptographic signature
Prev by Date: SecurityFocus Newsletter #325 2005-11-14->2005-11-18
Next by Date: $B=*N;$N$*CN$i$;(B
Previous by thread: SecurityFocus Newsletter #325 2005-11-14->2005-11-18
Next by thread: $B=*N;$N$*CN$i$;(B
Index(es):
- Date
- Thread