SecurityFocus.com Newsletter #101 2001-7-6->2001-7-10

To: bugtraq-jp@securityfocus.com
Subject: SecurityFocus.com Newsletter #101 2001-7-6->2001-7-10
From: KAGEYAMA Tetsuya <t.kageym@lac.co.jp>
Date: Wed, 18 Jul 2001 16:58:52 +0900
Delivered-To: mailing list bugtraq-jp@securityfocus.com
Delivered-To: moderator for bugtraq-jp@securityfocus.com
List-Help: <mailto:bugtraq-jp-help@securityfocus.com>
List-Id: <bugtraq-jp.list-id.securityfocus.com>
List-Post: <mailto:bugtraq-jp@securityfocus.com>
List-Subscribe: <mailto:bugtraq-jp-subscribe@securityfocus.com>
List-Unsubscribe: <mailto:bugtraq-jp-unsubscribe@securityfocus.com>
Mailing-List: contact bugtraq-jp-help@securityfocus.com; run by ezmlm
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

$B1F;3(B@$B%i%C%/$G$9!#(B

SecurityFocus.com Newsletter $BBh(B 101 $B9f$NOBLu$r$*FO$1$7$^$9!#(B
$BLu$N$J$$9`L\$K$D$$$F$O!VF|K\8lLu$J$7!W$H$7$F6hJL$7$F$"$j$^$9!#(B

- ---------------------------------------------------------------------------
SecurityFocus.com Newsletter $B$K4X$9$k(BFAQ:
<URL: http://www.securityfocus.com/forums/sf-news/faq.html>
BugTraq-JP $B$K4X$9$k(B FAQ:
<URL: http://www.securityfocus.com/forums/bugtraq-jp/faq.html>
- ---------------------------------------------------------------------------
$B0zMQ$K4X$9$kHw9M(B:
$B!&$3$NOBLu$O(B Security-Focus.com $B$N5v2D$r3t<02qe$G9T$o(B
  $B$l$F$$$^$9!#(B
$B!&(BSecurityFocus.com Newsletter $B$NOBLu$r(B Netnews, Mailinglist,
  World Wide Web, $B=q@R(B, $B$=$NB>$N5-O?G^BN$G0zMQ$5$l$k>l9g$K$O%a!<%k$N(B
  $BA4J80zMQ$r$*4j$$$7$^$9!#(B
$B!&F|K\8lHG%K%e!<%9%l%?!<(B 1 $B9f$+$i(B 3 $B9f$^$G$K$O$3$NHw9M$,IU$$$F$$$^$;(B
  $B$s$,=`MQ$9$k$b$N$H$7$^$9!#(B
$B!&$^$?!"(BSecurity-Focus.com $BDs6!$N(B BugTraq-JP $B%"!<%+%$%V(B [*1] $B$X$N$$$+(B
  $B$J$k7A<0$N%O%$%Q!<%j%s%/$b>e5-$K=`$8$F$/$@$5$$!#(B
1) <URL http://www.securityfocus.com/templates/archive.pike?list=79>
- ---------------------------------------------------------------------------
- ---------------------------------------------------------------------------
$B$3$NOBLu$K4X$9$kHw9M(B:
$B!&$3$NOBLu$NE,MQ@.2L$K$D$$$F3t<02ql9g!"(BBUGTRAQ-JP $B$X(B Errata $B$H$7$F=$@5(B
  $BHG$r$4Ej9FD:$/$+!"Lul9g$K$O=$@5HG$r$G$-$k$@$1?WB.$KH/9T$7$^$9!#(B
- ---------------------------------------------------------------------------
- ---------------------------------------------------------------------------
$B86HG(B:
Message-ID: <Pine.GSO.4.30.0107160858360.19386-100000@mail>
Date: Mon, 16 Jul 2001 09:00:15 -0600 (MDT)

SecurityFocus.com Newsletter #101
- --------------------------------

I. FRONT AND CENTER($BF|K\8lLu$J$7(B)
     1. Basic Security Mechanisms for Wireless Networks
     2. Hardening HTAccess, Part One
     3. Chasing the Wind, Episode Eight: Still Waters
     4. What's in a name?
II. BUGTRAQ SUMMARY
     1. Basilix Webmail File Disclosure Vulnerability
     2. Trend Micro Interscan Applet Trap '//' Bypass Vulnerability
     3. Multiple Vendor Small TCP MSS Denial of Service Vulnerability
     4. Trend Micro Interscan Applet Trap Encoding Bypass Vulnerability
     5. Trend Micro Interscan Applet Trap '0' IP Bypass Vulnerability
     6. Cayman-DSL Router Portscan Denial of Service Vulnerability
     7. Tripwire Insecure Temporary File Symbolic Link Vulnerability
     8. OpenSSL PRNG Internal State Disclosure Vulnerability
     9. xloadimage Buffer Overflow Vulnerability
     10. FreeBSD exec() Inherited Signal Handler Vulnerability
     11. Apache Autoindexing Module Possible Directory Index Disclosur...
III. SECURITYFOCUS.COM NEWS ARTICLES
     1. Tool makes hackers obsolete
     2. Mueller a tech-savy FBI pick
IV.SECURITY FOCUS TOP 6 TOOLS
     1. Vlad v0.9.1
     2. IRPAS v0.8
     3. DEMARC v1.04-01
     4. MD5crack v0.9.5
     5. tsocks v1.7
     6. Advanced NT Security Explorer v2.0

I. FRONT AND CENTER($BF|K\8lLu$J$7(B)
- ---------------------------------

II. BUGTRAQ SUMMARY
- -------------------
1. Basilix Webmail File Disclosure Vulnerability
BugTraq ID: 2995
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2001-07-06
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/2995
$B$^$H$a(B:

Basilix $B$O(B Web $B%a!<%k%"%W%j%1!<%7%g%s$G$"$k!#%U%!%$%k$NE:IU!"%"%I%l%9D"!"(B
$BB?8@8lBP1~!"%F!<%^$N%5%]!<%H$N$J$I$N5!G=$rDs6!$9$k!#(B

$B$r;X(B
$BDj$7$F(B PHP $B$N%$%s%/%k!<%I%U%!%$%k$r3+$/!#(BBasilix $B$O0-0U$"$k%f!<%6$NF~NO(B
$B$rE,@Z$K%U%#%k%?$7$J$$!#(B

lang.inc $B%U%!%$%kCf$KLdBj$,B8:_$9$k!#%j%b!<%H$+$i$N967bpJs(B
$B$r3+<($9$k2DG=@-$,$"$k!#$^$?!"%j%b!<%H$+$i$N967b2. Trend Micro Interscan Applet Trap '//' Bypass Vulnerability
BugTraq ID: 2996
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: 2001-07-09
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/2996
$B$^$H$a(B:

Trend Micro Interscan Applet Trap $B$O%2!<%H%&%'%$$G!"0-0U$"$k(B Java $B%"%W(B
$B%l%C%H!"(BJavaScript$B!"%;%-%e%"$G$J$$(B ActiveX $B%3%s%H%m!<%k$rAK;_$9$k$?$a$K(B
$B;HMQ$5$l$k%W%m%0%i%`$G$"$k!#%"%W%l%C%H$d$=$NN`$r1\Mw$7$F$7$^$&$N$rKI$0(B
$B$?$a$K!"LdBj$N$"$k(B Web $B%5%$%H$O<+F0E*$KKI8f$9$Y$-%j%9%H$KDI2C$5$l$k!#(B
Applet Trap $B$O!"$^$?!"4IM}http://www.example.com//target

$B$3$Nl9g!"L$=pL>$N0-0U$"$k(B Java $B%"%W%l%C%H$d(B ActiveX
$B%3%s%H%m!<%k$Ne$N6<0R$r0z$-5/$3$92DG=@-$,(B
$B$"$k!#0-0U$"$k%3!<%I$N3. Multiple Vendor Small TCP MSS Denial of Service Vulnerability
BugTraq ID: 2997
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2001-07-07
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/2997
$B$^$H$a(B:

$B$$$/$+$N(B TCP $B%9%?%C%/$No!"(BIPv4 $B$r;HMQ(B
$B$7$?%$!<%5%M%C%H>e$G$O(B 1460 $B%P%$%H!"(BIPv6 $B$r;HMQ$7$?%$!<%5%M%C%H>e$G$O(B 
1440 $B%P%$%H$G$"$k!#(B

MSS $B$NBg$-$5$r1[$($?%G!<%?$,(B TCP $B%=%1%C%H$K=q$-9~$^$l$?>l9g!"(BIP $B$KEO$5(B
$B$l$kA0$KJ#?t%;%0%a%s%H$KJ,3d$5$l$k!#Nc$H$7$F!"$"$k%"%W%j%1!<%7%g%s$,(B 
MSS $B$,(B 256 $B%P%$%H$K@_Dj$7$F(B TCP $B%=%1%C%H$K(B 2048 $B%P%$%H$r=q$/$H!"A4It$G(B
8 $B$D$N%;%0%a%s%H$,Aw?.$5$l$k!#(BIPv4 $B$r;HMQ$7$F$$$k>l9g!"$3$l$O(B IP $B%X%C%@(B
$B$H(B TCP $B%X%C%@$N%G!<%?$K(B 320 $B%P%$%HDI2C$9$l$P$*$-$k!#(BIPv6 $B$r;HMQ$9$k>l9g!"(B
$B$=$NNL$O(B480$B%P%$%H$KA}2C$9$k!#5pBg$J%Q%1%C%H$rAw?.$9$k$3$H$O!"$7$P$7$P%G(B
$B!<%?$rAw?.$9$k%7%9%F%`$NIi2Y$K1F6A$rM?$($kA}2C$r0UL#$9$k!#(B

$BB?$/$N>l9g!"(BMSS $B$K$O>.$5$J:G>.CM$N$_$,@_Dj$5$l$k$?$a!"(BTCP $B%9%?%C%/$N.$5$JCM(B ($BNc$($P(B 1) $B$K@_Dj$7!"(B
TCP $B%5!<%S%9$r7PM3$7$F5pBg$J%G!<%?$r%j%/%(%9%H$9$k$3$H$K$h$j!"967be$K9bIi2Y$r3]$1!"8z2LE*$K(B DoS $B$r0z$-5/$3$9$3$H$,2DG=$G$"$k!#(B

4. Trend Micro Interscan Applet Trap Encoding Bypass Vulnerability
BugTraq ID: 2998
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: 2001-07-09
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/2998
$B$^$H$a(B:

Trend Micro Interscan Applet Trap $B$O%2!<%H%&%'%$$G!"0-0U$"$k(B Java $B%"%W(B
$B%l%C%H!"(BJavaScript$B!"%;%-%e%"$G$J$$(B ActiveX $B%3%s%H%m!<%k$rAK;_$9$k$?$a$K(B
$B;HMQ$5$l$k%W%m%0%i%`$G$"$k!#%"%W%l%C%H$d$=$NN`$r1\Mw$7$F$7$^$&$N$rKI$0(B
$B$?$a$K!"LdBj$N$"$k(B Web $B%5%$%H$O<+F0E*$KKI8f$9$Y$-%j%9%H$KDI2C$5$l$k!#(B
Applet Trap $B$O!"$^$?!"4IM}l9g!"L$=pL>$N0-0U$"$k(B Java $B%"%W%l%C%H$d(B ActiveX
$B%3%s%H%m!<%k$Ne$N6<0R$r0z$-5/$3$92DG=@-$,(B
$B$"$k!#0-0U$"$k%3!<%I$N5. Trend Micro Interscan Applet Trap '0' IP Bypass Vulnerability
BugTraq ID: 3000
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: 2001-07-09
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/3000
$B$^$H$a(B:

Trend Micro Interscan Applet Trap $B$O%2!<%H%&%'%$$G!"0-0U$"$k(B Java $B%"%W(B
$B%l%C%H!"(BJavaScript$B!"%;%-%e%"$G$J$$(B ActiveX $B%3%s%H%m!<%k$rAK;_$9$k$?$a$K(B
$B;HMQ$5$l$k%W%m%0%i%`$G$"$k!#%"%W%l%C%H$d$=$NN`$r1\Mw$7$F$7$^$&$N$rKI$0(B
$B$?$a$K!"LdBj$N$"$k(B Web $B%5%$%H$O<+F0E*$KKI8f$9$Y$-%j%9%H$KDI2C$5$l$k!#(B
Applet Trap $B$O!"$^$?!"4IM}http://00127.0.0.0 $B$"$k$$$O(B http://127.00.0.0

$B$3$Nl9g!"L$=pL>$N0-0U$"$k(B Java $B%"%W%l%C%H$d(B ActiveX
$B%3%s%H%m!<%k$Ne$N6<0R$r0z$-5/$3$92DG=@-$,(B
$B$"$k!#0-0U$"$k%3!<%I$N6. Cayman-DSL Router Portscan Denial of Service Vulnerability
BugTraq ID: 3001
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2001-07-09
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/3001
$B$^$H$a(B:

Cayman-DSL Model 3220-H $B%k!<%?$O(B DoS $B$K4Y$k\:Y$OITL@$G$"$k$,:G=i$NJs9p$K$h$k$H!"$3$N%k!<%?$O!"MM!9$J%U%i%0$,@_Dj(B
$B$5$l$?B??t$N(B TCP $B%Q%1%C%H$r$3$N%G%P%$%9$+$i%j%b!<%H%7%9%F%`$XDL2a$5$;$?(B
$B>l9g!"IT0BDj$K$J$k$H$N$3$H$G$"$k!#$3$NLdBj$O%9%-%c%s%D!<%k$G$"$k(B nmap 
$B$r;HMQ$7$F$3$N%k!<%?$N%m!<%+%k%M%C%H%o!<%/B&$+$i%j%b!<%H%7%9%F%`$r%9%-(B
$B%c%s$7$F$$$k:]$KH/8+$5$l$?!#(B

$B860x$OF1;~$KJ#?t$N@\B3$r;n$_$r07$&:]$N=hM}G=NOITB-$N$?$a$G$"$k2DG=@-$,(B
$B$"$k!#(B

$B967b7. Tripwire Insecure Temporary File Symbolic Link Vulnerability
BugTraq ID: 3003
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: 2001-07-09
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/3003
$B$^$H$a(B:

Tripwire $B$O!"(BTripwire Development Team $B$K$h$j3hH/$K3+H/J]e(B
$B=q$-$7!"$=$N7k2L(B DoS $B$K4Y$i$9$?$a$d!"@x:_E*$K$O!"$h$j9b$$8"8B$NC%o$NF0:n$K$*$$$F!"(BTripwire $B$O%7%9%F%`$N%G%#%l%/%H%j$r7($J$/D4$Y!"8=9T(B
$B%U%!%$%k$N%G!<%?%Y!<%9$r9=C[$9$k!#$3$N%W%m%0%i%`$O$=$N:]!"%7%9%F%`$N%U(B
$B%!%$%k$N40A4@-$r8!::$9$k$?$a$K(B Unix $B%U%!%$%k%7%9%F%`B0@-$J$I$NB0@-$d%G(B
$B!<%?%Y!<%9$N%O%C%7%eCM$HHf3S$9$k$?$a$K%a%C%;!<%8%@%$%8%'%9%H$r7W;;$9$k!#(B

Tripwire $B$,%G%#%l%/%H%j$rD4::$9$k:]!"(B/tmp $B%G%#%l%/%H%j$K%U%!%$%k$r%;%-(B
$B%e%"$G$J$$J}K!$G@8@.$9$k!#(BTripwire $B$O!"%U%!%$%k$N@8@.$r;n$_$kA0$K!"(B
O_CREAT $B%U%i%0$H6&$K(B O_EXCL $B%U%i%0$N;HMQ$K<:GT$9$k!#IU$12C$($F!"$3$N%W(B
$B%m%0%i%`$O!"0l;~%U%!%$%k$N@8@.$K!"$h$j%;%-%e%"$J(B mkstemp() $B%7%9%F%`%3!<(B
$B%k$NBe$o$j$K(B mktemp() $B%7%9%F%`%3!<%k$r;HMQ$9$k!#(B

$B%m!<%+%k$N967bA0$r?dB,$7!"(Broot $B$,(B
$B=jM-$9$k%U%!%$%k$r>e=q$-$9$k$?$a$KB??t$N%7%s%\%j%C%/%j%s%/$r@8@.$9$k$3(B
$B$H$,2DG=$G$"$k!#(B

8. OpenSSL PRNG Internal State Disclosure Vulnerability
BugTraq ID: 3004
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2001-07-10
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/3004
$B$^$H$a(B:

OpenSSL PRNG ($B5<;wMp?t%8%'%M%l!<%?(B pseudo-random number generator) $B$K$h(B
$B$j;HMQ$5$l$k%i%s%@%`%M%9%W!<%k$H4XO"$9$k$+$-:.$<4X?t$K$O!"967buBV$r:F9=C[$5$l$F$7$^$&$H$$$&7g4Y$N1F6A$r/$J$$(B
$B%P%$%H(B) $B$NO"B3$9$k3F%0%k!<%W$4$H$K!"%0%m!<%P%k%O%C%7%e$K$h$j=i4|2=$5$l(B
$B$?%m!<%+%k%P%C%U%!$N9b0L$N(B 10 $B%P%$%H$,%0%m!<%P%k$N(B state $B$H$=$N%+%&%s%?(B
$B$N(B 10 $B%P%$%H$r85$K%O%C%7%e2=$5$l$k!#%O%C%7%e2=$5$l$?7k2L$N:G=i$N(B 10 $B%P(B
$B%$%H$,%0%m!<%P%k$N(B state $B$H(B XOR $B1i;;$5$l!";D$j$N(B 10 $B%P%$%H$,%8%'%M%l!<(B
$B%?$N=PNO$H$7$FDs6!$5$l$k!#(B

$B%O%C%7%e4X?t$NF~NO$K;H$o$l$k%0%m!<%P%k%O%C%7%e$+$i$N%G!<%?NL;R$,!"%8%'(B
$B%M%l!<%?$N=PNO$K$b$^$?;H$o$l!"$3$l$O0lHL$KHkL)$G$"$k$H$O9M$($k$3$H$,=P(B
$BMh$J$$$?$a!"l9g$K$D$$$F(B
$BAmEv$j2r@O$r5v$7$F$7$^$&!#(B

$B967buBV$rCN$k$3$H$,2DG=$J>l9g!"967b9. xloadimage Buffer Overflow Vulnerability
BugTraq ID: 3006
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2001-07-10
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/3006
$B$^$H$a(B:

xloadimage $B$O(B X11 $B%5!<%P>e$NMM!9$J7A<0$N2hA|$rI=<($9$k$?$a$N%f!<%F%#%j(B
$B%F%#$G$"$k!#(B

xloadimage $B$K$O!"(BFaces Project $B2hA|7A<0$Ne$N%a%b%j$N<~JU$r>e=q$-$9$k!#(B
xloadimage $B$N4X?t$N%9%?%C%/%U%l!<%`$,>e=q$-$5$lGK2u2DG=$G!"4X?t$O%7%'%k(B
$B%3!<%I$KLa$C$F$7$^$&!#$7$+$7!"(Bxloadimage $B$O(B setuid $B$G$O$J$$$?$a!"%m!<%+(B
$B%k$K$Oe$K967bMQ%U%!%$%k$rCV$$$?>l9g!"$3$N10. FreeBSD exec() Inherited Signal Handler Vulnerability
BugTraq ID: 3007
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: 2001-07-10
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/3007
$B$^$H$a(B:

Unix $B%7%9%F%`$K$*$$$F!"(Bfork() $B$O?75,%W%m%;%9$r@8@.$9$k$?$a$K;HMQ$5$l$k(B
$BJ}K!$G$"$k!#(Bfork() $B%7%9%F%`%3!<%k$O8F$S=P$7$?%W%m%;%9$NJ#@=$7!";R%W%m%;(B
$B%9$H$7$F@8@.$9$k!#(B

$B0lEY@8@.$5$l$k$H!";R%W%m%;%9$O(B exec() $B%7%9%F%`%3!<%k$r;HMQ$7!";R%W%m%;(B
$B%9$N%$%a!<%8$r%U%!%$%k%7%9%F%`>e$N5$5$l$k;q8;$,$I$3$G$"$k$+L@<(E*$K;XDj$9$k$3$H$,2DG=$G$"$k!#(B

FreeBSD $B$N(B exec() $B$N5$5(B
$B$l$k$3$H$+$iKI$,$J$$!#$=$N7k2L!"(Bsetuid $B%W%m%;%9$,%f!<%6$,F~NO$7$?%7%0%J(B
$B%k%O%s%I%i$NAH$G=*N;$9$k!#(B

$B$3$N$?$a!"G$0U$N%3!<%I$r:3J$9$k$3$H$,2DG=$G$"$k!#(B

11. Apache Autoindexing Module Possible Directory Index Disclosure Vulnerability
BugTraq ID: 3009
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2001-07-10
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/3009
$B$^$H$a(B:

Apache $B$N(B AutoIndex $B%b%8%e!<%k$O!"(BWeb $B%3%s%F%s%D$N(B / $B%G%#%l%/%H%j0J2<$N(B
$B%G%#%l%/%H%j72$N%$%s%G%C%/%9$r<+F0E*$K:n@.$9$k5!G=$rDs6!$9$k!#(B

$BDL>o!"%G%#%l%/%H%jCf$K%$%s%G%C%/%9%U%!%$%k$,B8:_$9$k(B (DirectoryIndex $B%G(B
$B%#%l%/%F%#%V$K$h$j;XDj$5$l$k(B) $B>l9g!"%G%#%l%/%H%j$,%j%/%(%9%H$5$l$?$H$-!"(B
$B%/%i%$%"%s%H$K=PNO$9$k!#$=$N$h$&$J%U%!%$%k$,B8:_$;$:!"(BAutoIndexing $B$,M-(B
$B8z$G$"$k>l9g!"(BWeb $B%5!<%P%/%i%$%"%s%H$K%G%#%l%/%H%j$N(B HTML $B7A<0$N%$%s%G(B
$B%C%/%9$rI=<($9$k!#(B

$B4IM}l9g!"(BAutoIndex $B%b%8%e!<%k$O(B 
index.html $B$r2sHr2DG=$G$"$k$H9M$($i$l$F$$$k!#(B

$B$3$Nl9g!"967bpJs$r3+<($7$F$7$^$$!"FC$K!"(B
index.html $B$,MxMQ$5$l$F$$$k>l9g$O>099$G$"$k!#(B

III. SECURITYFOCUS.COM NEWS AND COMMENTARY
- ------------------------------------------
1. Tool makes hackers obsolete
$BCxhttp://www.securityfocus.com/templates/article.html?id=224

2. Mueller a tech-savy FBI pick
$BCxhttp://www.securityfocus.com/templates/article.html?id=223

IV.SECURITY FOCUS TOP 6 TOOLS
- -----------------------------
1. Vlad v0.9.1
$B:nhttp://www.securityfocus.com/tools/1659
$B%W%i%C%H%U%)!<%`(B: FreeBSD$B!"(BLinux$B!"(BOpenBSD
$B$^$H$a(B:

VLAD the Scanner $B$O(B SANS $B$N>e0L(B 10 $B$KA*$P$l$?!"%7%9%F%`$r6<$+$96&DL$N(B
$B@He$GF0:n$,$9$G$K3NG'$5$l$F$$$^$9!#$3$N%W%m%0%i%`$O\:Y$K4X$7$F$O(B 
README $B$r$4Mw2<$5$$(B)$B!#(B VLAD $B$O(B MS00-078 $B$H$7$FJs9p$5$l$?(B IIS Unicode 
$B%P%0$N%A%'%C%/$,$G$-$k$h$&!"%"%C%W%G!<%H$,$9$G$K9T$o$l$^$7$?!#(B

2. IRPAS v0.8
$B:nhttp://www.securityfocus.com/tools/2111
$B%W%i%C%H%U%)!<%`(B: Linux
$B$^$H$a(B:

IRPAS $B$O%k!<%F%#%s%0%W%m%H%3%kMxMQ$7$?967b%D!<%k$N%Q%C%1!<%8$G$9!#%k!<(B
$B%F%#%s%0%W%m%H%3%k%9%-%c%J$N(B ASS$B!"(BIGRP $B$H(B IRDP $BMQ$N7PO)CmF~%D!<%k!"(BHSRP
$B>h$C3. DEMARC v1.04-01
$B:nhttp://www.securityfocus.com/tools/2113
$B%W%i%C%H%U%)!<%`(B: UNIX
$B$^$H$a(B:

DEMARC $B$O0l$D$N6/NO$J(B Web $B%$%s%?!<%U%'%$%9$+$iA4%M%C%H%o!<%/$r4F;k$9$k(B
$B$3$H$,=PMh$k!V$9$Y$F$r4^$s$@!W%M%C%H%o!<%/4F;k%W%m%0%i%`$G$9!#0l$D$N%W(B
$B%m%0%i%`$,%U%!%$%k$N40A4@-%A%'%C%/$7!"JL$N%W%m%0%i%`$,@\B3>u67$r4F;k$7(B
$B$7$F%M%C%H%o!<%/$N>uBV$rGD0.$7!"$5$i$KJL$N%W%m%0%i%`$,?/F~$N;n$_$r8!CN(B
$B$9$kBe$o$j$K!"(BDEMARC $B$O$3$N;0$D$N%5!<%S%9$r0l$D$N%Q%o%U%k$J%/%i%$%"%s%H(B
$B%5!<%P%W%m%0%i%`$KE}9g$7$^$7$?!#(B

4. MD5crack v0.9.5
$B:nhttp://www.securityfocus.com/tools/2112
$B%W%i%C%H%U%)!<%`(B: N/A
$B$^$H$a(B:

MD5 $B$O0lJ}8~%O%C%7%e%"%k%4%j%:%`$G!"$I$s$JD9$5$N%F%-%9%H$b:G=*E*$K$O(B 
128 $B%S%C%H$N%S%C%HNs$K$7$F$7$^$$$^$9!#@8@.$5$l$?%O%C%7%e$O!"$7$P$7$P%I(B
$B%-%e%a%s%H$N=pL>$K;HMQ$5$l!"%=%U%H%&%'%"$d%O!<%I%&%'%"$N%(%i!<$K$h$k%*(B
$B%j%8%J%k%3%s%F%s%D$NJQ99!"Bh;0Z$9$kJ}K!$H$7$F;H$o$l(B
$B$F$$$^$9!#:#F|!"B??t$N%"%W%j%1!<%7%g%s(B ($BB?$/$O%M%C%H%o!<%/$G;HMQ$5$l$k(B)
$B$,DL?.Cf$NJ?J8$N%Q%9%o!<%I$r;H$o$J$$G'>Z$NL\E*$G(B MD5 $B$r;HMQ$7$F$$$^$9!#(B
$B$3$N$h$&$J>l9g!"%/%i%$%"%s%H$OE57?E*$K$O%M%C%H%o!<%/7PM3$G%5!<%P$K%Q%9(B
$B%o!<%I%O%C%7%e$rAw?.$7!"%5!<%P$,;}$D%/%i%$%"%s%H$N%Q%9%o!<%I%O%C%7%e$H(B
$B$D$^$j(B 2 $B$D$N%O%C%7%e$rHf3S$7$^$9!#$=$l$>$l$,0lCW$7$?>l9g!"%5!<%P$O%/%i(B
$B%$%"%s%H$O@5$7$$%Q%9%o!<%I$rCN$C$F$$$k$HH=CG$7!"%5!<%P$,40A4$K4V0c$C$F(B
$B$$$k$+$b$7$l$^$;$s$,!"G'>Z%W%m%;%9$O=*N;$7$^$9!#(BMD5 $B$OM}O@E*$K85$KLa$9(B
$B$3$H$,=PMh$^$;$s!#$D$^$j!"%O%C%7%e$+$i%*%j%8%J%k$N%F%-%9%H$r?dB,$9$k$3(B
$B$H$O=PMh$^$;$s(B ($B%Q%9%o!<%I$N$h$&$JC;$$J8;zNs$G$5$($b$G$9(B)$B!#$7$+$7!"%O%C(B
$B%7%e$N7k2L$H$7$FF@$i$l$kJ8;zNs$N?t$O8GDj$5$l$F$$$k(B (2^128) $B$?$a!"B??t$N(B
$BJ8;zNs$,F1$8%O%C%7%e$rM?$($F$7$^$$$^$9!#$3$N$h$&$J>WFM$NM=B,2DG=@-$K$D(B
$B$$$F$ND4::$O!"F1$8(B MD5 $B%7%0%M%A%c$rM?$($kJL$N%F%-%9%H$rG$0U$KA*Br$9$k$3(B
$B$H$O=PMh$J$$$H8=:_$^$G>ZL@$7$F$-$^$7$?!#$R$I$$>l9g$K$O!"Bh;0/$7MQ?4$9$k$3$H$G!"M-(B
$BL>$JCB@8F|967b$,LrN)$?$:$K$J$C$F$7$^$$$^$9!#%i%s%@%`$J>WFM$,0UL#$N$"$k(B
$Bl9g$b!"$3$l$O(BMD5 $B$K4p$E$$$?%Q%9%o!<%IG'>Z%9%-!<(B
$B%`$KBP$9$k6<0R$+$b$7$l$^$;$s!#(B

5. tsocks v1.7
$B:nhttp://www.securityfocus.com/tools/1440
$B%W%i%C%H%U%)!<%`(B: Linux$B!"(BSolaris
$B$^$H$a(B:

SOCKS V4 proxy ($BDL>o%U%!%$%"%&%)!<%k>e$K$"$k(B) tsocks $B$O(B TCP $B%3%M%/%7%g(B
$B%s$r3+;O$9$k$?$a$K%"%W%j%1!<%7%g%s$N8F$S=P$7$rEpD0$7$F!"D>@\%"%/%;%9$,(B
$B2DG=$+!"$b$7$/$O(B SOCKS $B%5!<%P$,I,MW$+$I$&$+$rH=CG$7$^$9!#(BSOCKS $B%5!<%P$,(B
$BI,MW$G$"$l$P!"@\B3$O(B SOCKS $B%5!<%P$H=hM}$r9T$$!"%"%W%j%1!<%7%g%s$XF)2aE*(B
$B$K@\B3$7$^$9!#$3$N$?$a!"(BSOCKS $B$r;H$&4{B8$N%"%W%j%1!<%7%g%s$O:F%3%s%Q%$(B
$B%k$r$7$?$j!"=$@5$7$?$j$9$kI,MW$O$"$j$^$;$s!#(Btsocks $B$O(B libc $B$N(B connect 
$B$N8F$S=P$7$KBP$9$k%i%C%Q!<%i%$%V%i%j$G$9!#JQ99E@(B: Solaris 2.6$B!"(B2.7$B!"(B2.8 
$B$K$*$1$k%3%s%Q%$%k$N=$@5!"(Bmakefile $B$NLdBj$N=$@5!#%=%1%C%H%*%W%7%g%s$N@_(B
$BDj$K4X$9$k%P%0$H(B unsolved symbols $B$NLdBj$,=$@5$5$l$^$7$?!#$9$Y$F$N%"%W(B
$B%j%1!<%7%g%s$,(B TCP DNS $B$r6/@)E*$K;HMQ$9$k%5%]!<%H$,DI2C$5$l$?$N$G!"F)2a(B
$BE*$K%W%m%-%7@\B3$,9T$o$l$^$9!#(B

6. Advanced NT Security Explorer v2.0
$B:nhttp://www.securityfocus.com/tools/1319
$B%W%i%C%H%U%)!<%`(B: Windows NT
$B$^$H$a(B:

Advanced NT Security Explorer $B$O!"%7%9%F%`Cf$N%;%-%e%j%F%#%[!<%k$rC5$5(B
$B$J$1$l$P$J$i$J$$(B NT $B$N%7%9%F%`4IM}l9g!"%Q%9%o!<%I$O%;%-%e%"$G$J(B
$B$$$HH=CG$5$l!"JQ99$9$Y$-;~4|$KMh$F$$$^$9!#(B

$B%f!<%6$O%M%C%H%o!<%/>e$NJL$N%3%s%T%e!<%?$+$i%O!<%I%G%#%9%/%I%i%$%V$K%"(B
$B%/%;%9$G$-!"%Q%9%o!<%I%O%C%7%e$,J];}$5$l$F$$$k(B SAM $B%l%8%9%H%j%-!<$r%3%T(B
$B!<$G$-$^$9!#$^$?!"%f!<%6$O%M%C%H%o!<%/$rEpD0$7!"%9%K%C%U%!$N7k2L$+$i%Q(B
$B%9%o!<%I%O%C%7%e$r:F@8$9$k$3$H$b$G$-$^$9!#(BAdvanced NT Security Explorer
(ANTExp) $B$O%7%9%F%`%;%-%e%j%F%#$r40A4$K$9$khttp://www.lac.co.jp/security/

-----BEGIN PGP SIGNATURE-----
Version: PGP for Personal Edition 5.5.5J
Comment: KAGEYAMA Tetsuya

iQA/AwUBO1TCwM32EXDdoEFfEQIF2wCgv1+kwW/KA3sd7sm4366hUtIFe3gAnRcC
61ul03oeuOy3fEQA5DjNiATg
=izLZ
-----END PGP SIGNATURE-----