SecurityFocus.com Newsletter #128 2002-1-14->2002-1-18

To: bugtraq-jp@SECURITYFOCUS.COM
Subject: SecurityFocus.com Newsletter #128 2002-1-14->2002-1-18
From: SAKAI Yoriyuki <sakai@lac.co.jp>
Date: Sat, 26 Jan 2002 21:18:37 +0900
Delivered-To: mailing list bugtraq-jp@securityfocus.com
Delivered-To: moderator for bugtraq-jp@securityfocus.com
List-Help: <mailto:bugtraq-jp-help@securityfocus.com>
List-Id: <bugtraq-jp.list-id.securityfocus.com>
List-Post: <mailto:bugtraq-jp@securityfocus.com>
List-Subscribe: <mailto:bugtraq-jp-subscribe@securityfocus.com>
List-Unsubscribe: <mailto:bugtraq-jp-unsubscribe@securityfocus.com>
Mailing-List: contact bugtraq-jp-help@securityfocus.com; run by ezmlm
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

$B:d0f(B@$B%i%C%/$G$9!#(B

SecurityFocus.com Newsletter $BBh(B 128 $B9f$NOBLu$r$*FO$1$7$^$9!#(B
$BLu$N$J$$9`L\$K$D$$$F$O!VF|K\8lLu$J$7!W$H$7$F6hJL$7$F$"$j$^$9!#(B

- ---------------------------------------------------------------------------
SecurityFocus.com Newsletter $B$K4X$9$k(BFAQ:
http://www.securityfocus.com/popups/forums/securityfocusnews/intro.shtml
BugTraq-JP $B$K4X$9$k(B FAQ:
http://www.securityfocus.com/popups/forums/bugtraq-jp/faq.shtml
- ---------------------------------------------------------------------------
$B0zMQ$K4X$9$kHw9M(B:
$B!&$3$NOBLu$O(B Security-Focus.com $B$N5v2D$r3t<02qe$G9T$o(B
  $B$l$F$$$^$9!#(B
$B!&(BSecurityFocus.com Newsletter $B$NOBLu$r(B Netnews, Mailinglist,
  World Wide Web, $B=q@R(B, $B$=$NB>$N5-O?G^BN$G0zMQ$5$l$k>l9g$K$O%a!<%k$N(B
  $BA4J80zMQ$r$*4j$$$7$^$9!#(B
$B!&F|K\8lHG%K%e!<%9%l%?!<(B 1 $B9f$+$i(B 3 $B9f$^$G$K$O$3$NHw9M$,IU$$$F$$$^$;(B
  $B$s$,=`MQ$9$k$b$N$H$7$^$9!#(B
$B!&$^$?!"(BSecurity-Focus.com $BDs6!$N(B BugTraq-JP $B%"!<%+%$%V(B [*1] $B$X$N$$$+(B
  $B$J$k7A<0$N%O%$%Q!<%j%s%/$b>e5-$K=`$8$F$/$@$5$$!#(B
1) http://www.securityfocus.com/archive/79
- ---------------------------------------------------------------------------
- ---------------------------------------------------------------------------
$B$3$NOBLu$K4X$9$kHw9M(B:
$B!&$3$NOBLu$NE,MQ@.2L$K$D$$$F3t<02ql9g!"(BBUGTRAQ-JP $B$X(B Errata $B$H$7$F=$@5(B
  $BHG$r$4Ej9FD:$/$+!"Lul9g$K$O=$@5HG$r$G$-$k$@$1?WB.$KH/9T$7$^$9!#(B
- ---------------------------------------------------------------------------
- ---------------------------------------------------------------------------
$B86HG(B:
Date: Tue, 22 Jan 2002 09:09:46 -0700 (MST)
Message-ID: <Pine.LNX.4.43.0201220909060.5065-100000@mail>

SecurityFocus Newsletter #128
- ---------------------------------

This Issue is Sponsored by: CipherTrust Inc.

I. FRONT AND CENTER($BF|K\8lLu$J$7(B)
     1. SecurityFocus is Hiring!
     2. The Simplest Security: A Guide To Better Password Practices
     3. Chasing the Wind, Episode Fourteen: A Bird in the Hand
     4. An Audit of Active Directory Security, Part Five
     5. Welcome to the Club, Macromedia
     6. Holistic$B!&(BEnterprise Anti-Virus Protection
     7. SecurityFocus Promotion
     8. Event Announcement
II. BUGTRAQ SUMMARY
     1. Shingo beep2 Arbitrary File Reading Vulnerability
     2. FreeWnn jserver JS_MKDIR Metacharacter Command Execution...
     3. Microsoft Internet Explorer 5 Clipboard Reading Vulnerability
     4. CDRDAO Home Directory Configuration File Symbolic Link...
     5. Palm Desktop For MacOS X Hotsync Insecure Backup Permissions...
     6. Alcatel  Speed Touch Home ADSL Unauthorized Remote Restart...
     7. Microsoft Backup for Windows 95 Buffer Overflow Vulnerability
     8. John Roy Pi3Web Long Request Buffer Overflow Vulnerability
     9. Microsoft Internet Explorer Arbitrary Program Execution...
     10. ETerm Home Environment Variable Buffer Overflow Vulnerability
     11. Sudo Unclean Environment Variable Root Program Execution...
     12. Groff Pre-Processor Buffer Overflow Vulnerability
     13. MDG Computer Services 4D/eCommerce Directory Traversal...
     14. Siemens Mobile Phone SMS Denial of Service Vulnerability
     15. PHP4 Session Files Local Information Disclosure Vulnerability
     16. MDG Computer Services Web Server 4D/eCommerce DoS Vulnerability
     17. NetGear RP114 Cable/DSL Web Safe Router WAN Port DoS...
     18. ClanLib Environment Variable Overflow Vulnerability
     19. SmoothWall Encrypted Password Hash World Read Vulnerability
     20. SmoothWall Configuration Files World Read Vulnerability
III. SECURITYFOCUS NEWS ARTICLES
     1. Will Microsoft's Trustworthy Computing Sell?
     2. Breakable
     3. Backing Up Oracle's 'Unbreakable' Vow
     4. Microsoft Store Offline After Insecurity Exposed
IV.SECURITYFOCUS TOP 6 TOOLS
     1. FileManager v0.97
     2. OpenAI v0.1a
     3. Bastille Linux v1.3.0.p9
     4. NARC v0.6
     5. Cisco IP Accounting Fetcher v1.3.1
     6. MailScanner v3.03-1

I. FRONT AND CENTER($BF|K\8lLu$J$7(B)
- ---------------------------------

II. BUGTRAQ SUMMARY
- -------------------
1. Shingo beep2 Arbitrary File Reading Vulnerability
BugTraq ID: 3859
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: Jan 11 2002 12:00A
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/3859
$B$^$H$a(B:

beep2 $B$O$$$/$D$+$N(B Linux $B$N%G%#%9%H%j%S%e!<%7%g%s$KF1:-$5$l$F$$$k%f!<%F%#(B
$B%j%F%#$G$"$k!#$3$N%W%m%0%i%`$O!"%3%^%s%I%i%$%s%Q%i%a!<%?$r$C$?2;$r:n@.$9$k!"7Y9p2;$r:n@.$9$k%W%m%0%i%`$G$"$k!#(B
$B$3$N%=%U%H%&%'%"$,(B setuid root $B$H$7$F%$%s%9%H!<%k$5$l$?>l9g!"G$0U$N%U%!(B
$B%$%k$NFI$_=P$7$,2DG=$G$"$k!#$3$l$O%3%^%s%I%i%$%s%Q%i%a!<%?$K!"FI$_=P$7(B
$B@h$N%U%!%$%kL>$r4^$a$k;v$G2. FreeWnn jserver JS_MKDIR Metacharacter Command Execution Vulnerability
BugTraq ID: 3860
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Jan 11 2002 12:00A
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/3860
$B$^$H$a(B:

FreeWnn 1.1.0 $B$O$+$J4A;zJQ49%7%9%F%`(B ($BF|K\8lJQ49%7%9%F%`(B) $B$G$"$k!#(B
$B$3$N%=%U%H%&%'%"$O(B jserver $B%W%m%0%i%`$,%5!<%P$H$7$F2TF0$7!"MM!9$J%/%i%$(B
$B%"%s%H$XJQ497k2L$rDs6!$9$k%/%i%$%"%s%H(B-$B%5!<%P7?%"%W%j%1!<%7%g%s$G$"$k!#(B
jserver $B$O%/%i%$%"%s%H$+$i(B JS_MKDIR $B%3%^%s%I$r2p$7!"(Bsystem ()$B4X?t$XFb(B
$BMF$NBEEv@-$NH=CG$,==J,$K9T$o$l$F$$$J$$$^$^$N>pJs$r\:Y$J35MW$OITL@$G$"$k!#$3$N%=%U%H%&%'%"$OF|K\@=$G$"$k!#(B

3. Microsoft Internet Explorer 5 Clipboard Reading Vulnerability
BugTraq ID: 3862
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Jan 12 2002 12:00A
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/3862
$B$^$H$a(B:

Microsoft Internet Explorer 5 $B$O(B Web $B$rMxMQ$7$F9=C[$5$l$k%"%W%j%1!<%7%g(B
$B%s8~$1$K!"%/%j%C%W%\!<%I$X%"%/%;%9$r5v2D$9$k5!G=$rDs6!$7$F$$$k!#(B IE 5
$B$KpJs$X$N%"%/%;%95!G=$rDs6!$7$F$$$k!#$3$N%*%V%8%'%/%H$O0l;~E*$K3J(B
$BG<$5$l$k%G!<%?NN0h$NDs6!$H!"E,@Z$J%"%/%;%98"8B$rJ];}$9$k%"%W%j%1!<%7%g(B
$B%s$K$h$k%/%j%C%W%\!<%IFb$N>pJs$NA`:n$r9T$&;v$rA0Ds$H$7$FDs6!$5$l$F$$$k!#(B
$B$7$+$70d48$K$b!"$3$N5!G=$rMxMQ$9$k0-0U$"$k(B Web $B%5%$%H$K$h$k=EMW$J>pJs$N(B
$B3+<($r>7$/@x:_E*$J2DG=@-$,$"$k!#(B
$B$3$N;EMM$O(B Microsoft $B$,L58z2=$9$kuBV$G$OM-8z2=$5$l$F(B
$B$*$j!"$3$N;EMM$rMQ$$$kA`:n$O%f!<%6$KBP$9$kDLCN$,9T$o$l$k;v$J$/pJs$NuBV$K$"$k!"(BWeb $B%5!<%P$XE>Aw2DG=$G$"$k(B($B%U%)!<%`$rMxMQ$9(B
$B$k%"%W%j%1!<%7%g%sFb$N1#$7JQ?t$d(B xmlhttp.send() $B4X?t$NMxMQ$,A[DjNc$H$7(B
$B$F5s$2$i$l$k(B)$B!#(B
$B$3$N;EMM$K4X$7$F(B Bugtraq $B$X$N:G=i$NEj9FpJs$NM-L5$r3NG'$7!">pJs$rH/8+$74. CDRDAO Home Directory Configuration File Symbolic Link Vulnerability
BugTraq ID: 3865
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: Jan 13 2002 12:00A
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/3865
$B$^$H$a(B:

CDRDAO $B$O%U%j!<$GMxMQ2DG=$G!"$+$D!"%*!<%W%s%=!<%9$H$7$F8x3+$5$l$F$$$k!"(B
$BMM!9$J(B UNIX $B$d(B Linux $B$GMxMQ2DG=$J(B CD $B$X$N%G!<%?$N=q$-9~$_$r9T$&%=%U%H%&%'(B
$B%"$G$"$k!#$3$N%=%U%H%&%'%"$O(B Andreas Mueller $B$K$h$C$FJ]uBV$r%U%!%$%k$XJ]B82DG=$G$"$k!#(B
$B$3$N%U%!%$%k$OE57?E*$K(B $HOME/.cdrdao $B$H$7$FJ]B8$5$l$k!#(B

$B$3$N%=%U%H%&%'%"$,%f!<%6$N%[!<%`%G%#%l%/%H%jFb$N(B .cdrdao $B%U%!%$%k$X@_Dj(B
$B>pJs$r3JG<$9$k:]!"(B.cdrdao $B$O(B root $B$K=jM-8"$,M?$($i$l$?>uBV$GJ]B8$5$l$F(B
$B$$$k$N$G$"$k!#$^$?!"IU$12C$($k$J$i$P$3$N%=%U%H%&%'%"$O$3$N%U%!%$%k$,;v(B
$BA0$KB8:_$7$F$$$k$+$I$&$+$r3NG'$7$F$$$J$$$N$G$"$k!#(B
$B$3$N%=%U%H%&%'%"$OE57?E*$K(B setuid root $B$H$7$F%$%s%9%H!<%k$5$l$F$$$k$?$a!"(B
$B%f!<%6$O$3$N%U%!%$%k$r$"$kJL$N%U%!%$%k$X$N%7%s%\%j%C%/%j%s%/$H$7$F@8@.(B
$B2DG=$G$"$j!"(Broot $B$K=jM-8"$,M?$($i$l$F$$$k%U%!%$%k$N>e=q$-$,2DG=$G$"$j!"(B
$B@x:_E*$K(B root $B$H$7$F$N%3%^%s%I$N5. Palm Desktop For MacOS X Hotsync Insecure Backup Permissions Vulnerability
BugTraq ID: 3863
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: Jan 12 2002 12:00A
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/3863
$B$^$H$a(B:

Palm Desktop $B$O(B Palm $B]$O(B umask $B$,(B 077 $B$G$"$k:]$K$b@8$8$k$HCN$i$l$F$$$k!#(B

$B$3$NLdBj$K$h$j!"%m!<%+%k$N967bpJs$NH4$-=P$7$r>7$/2DG=@-$,A[Dj$5$l$k!#(B

6. Alcatel  Speed Touch Home ADSL Unauthorized Remote Restart Vulnerability
BugTraq ID: 3851
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Jan 11 2002 12:00A
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/3851
$B$^$H$a(B:

Speed Touch Home ADSL $B%b%G%`$O%$%s%?!<%M%C%H$X$N9bB.DL?.5!G=$rDs6!$7!"(B
Alcatel $BuBV$K4Y$i$;(B
$B$F$7$^$&;v$,2DG=$JLdBj$,B8:_$7$F$$$k!#(B

$BB?$/$N%9%-%c%s%D!<%k$O%[%9%HFb$G2TF0Cf$N(B OS $B$rH=Dj$9$k5!G=$rHw$($F$$$k!#(B
$B$3$l$OMM!9$Jl9g!"Aw$j=P$5$l$k%Q%1%C%H(B
$B$ODL>o!"Ev3:%M%C%H%o!<%/Fb$NDL?.$G$OMxMQ$5$l$F$$$J$$$b$N$G$"$j!"DL>o$"(B
$B$jF@$J$$%X%C%@>pJs$r4^$s$G$$$k!#(B

$BJs9p$K$h$k$H!"(BOS $B$NH=Dj$r$3$N%b%G%`$r2TF0Cf$N%[%9%H$KBP$7$F;n$_$k%j%b!<(B
$B%H%f!<%6$O!"%b%G%`$N:F5/F0$r0z$-5/$3$9;v$,2DG=$G$"$k!#(B

DoS $B$K4Y$k4|4V$O967bl9g!"%b%G%`$NMxMQ7. Microsoft Backup for Windows 95 Buffer Overflow Vulnerability
BugTraq ID: 3864
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: Jan 12 2002 12:00A
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/3864
$B$^$H$a(B:

Microsoft Backup for Windows 95 $B$K$O967b$KMxMQ2DG=$J%P%C%U%!%*!<%P!<%U(B
$B%m!<$r@8$8$kLdBj$,B8:_$9$k$HJs9p$5$l$F$$$k!#(B

$B$"$k%7%9%F%`%P%C%/%"%C%W%U%!%$%k%;%C%HFb$K!"DL>o$"$jF@$J$$D9$$3HD%;R$r(B
$B;}$D%U%!%$%k$,4^$^$l$k:](B($BLs(B 128 $B8DA08e$NJ8;zNs$G$"$k(B)$B!"%U%!%$%k$N%P%C%/(B
$B%"%C%W;~$K%P%C%U%!%*!<%P!<%U%m!<$r0z$-5/$3$9;v$,2DG=$J$N$G$"$k!#(B
$B$3$N:]$KMxMQ$5$l$k3HD%;R$O!"%U%!%$%kL>$H$7$F@5Ev$G$"$k$He=q$-(B
$B$,2DG=$G$"$k!#$7$+$7!"%i%s%@%`$JCM$rM?$($k>l9g!"%"%W%j%1!<%7%g%s$N%/%i%C(B
$B%7%e$r>7$/7k2L$H$J$j!"$3$NLdBj$rMxMQ$9$kG$0U$N%3!<%I$N$H$7$F@5Ev$G$"$k$H8. John Roy Pi3Web Long Request Buffer Overflow Vulnerability
BugTraq ID: 3866
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Jan 14 2002 12:00A
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/3866
$B$^$H$a(B:

John Roy Pi3Web $B$O(B CGI $B$H(B ISAPI $B$NN>J}$N5!G=$rDs6!$9$kI8=`E*$J(B Web $B%5!<(B
$B%P$G$"$k!#$3$N%=%U%H%&%'%"$O%j%/%(%9%H$re=q$-$,2DG=$G$"(B
$B$j!"(BWeb $B%5!<%P$Nl9g!"%5!<%P$O%/%i%C%7%e$r5/$3$7$F$7$^(B
$B$&!#(B

9. Microsoft Internet Explorer Arbitrary Program Execution Vulnerability
BugTraq ID: 3867
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Jan 14 2002 12:00A
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/3867
$B$^$H$a(B:

Microsoft Internet Explorer $B$K$O!"0-0U$"$k(B Web $B%^%9%?$K$h$j!"G$0U$N%W%m(B
$B%0%i%`$,%"%/%;%985$N%/%i%$%"%s%H>e$Ge$G$N%W%m%0%i%`]$N%/%i%$%"%s%H%7%9%F%`>e$N(B
$B]$N%7%9%F%`>e$G$N]$r;XDj$7$F@_Dj$5$l$F$$$k(B CODEBASE
$BJQ?tCM$rH<$&%*%V%8%'%/%H$,!"(Bwindow.PoPup() $B$"$k$$$O(B window.Open() $B$rMx(B
$BMQ$7$F?7$7$$%*%V%8%'%/%HFb$KAH$_9~$^$l$k:]!";XDj$5$l$?BP>]$O]$O(B
Pull <osioniusx@yahoo.com> $B$K$h$j8xI=$5$l$F$$$k!#(B

$B$3$NLdBj$rMxMQ$9$k967b$K$h$j!"%j%b!<%H$N967b]$N%/%i%$%"%s%H(B
$B%3%s%T%e!<%?>e$GG$0U$N%W%m%0%i%`$Nu67$H(B
$BAH$_9g$o$5$l$?967b$,9T$o$l$k:]!"Nc$($P%H%m%$$NLZGO$N6/@)%@%&%s%m!<%I$H(B
$B]Z$5$l$F(B
$B$$$k!#(B

10. ETerm Home Environment Variable Buffer Overflow Vulnerability
BugTraq ID: 3868
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: Jan 13 2002 12:00A
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/3868
$B$^$H$a(B:

Eterm $B$O%U%j!<$GDs6!$5$l!"$+$D!"%*!<%W%s%=!<%9$H$7$F8x3+$5$l$F$$$kCuBV$G(B
$B%$%s%9%H!<%k$5$l$F$$$k!#%P%C%U%!%*!<%P!<%U%m!<$O(B $HOME $B4D6-JQ?t$NCM$,(B
4128 $B%P%$%H$ND9$5$G$"$k>uBV$G(B Eterm $B$,e=q$-$HG$0U$N%3!<%I$N11. Sudo Unclean Environment Variable Root Program Execution Vulnerability
BugTraq ID: 3871
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: Jan 14 2002 12:00A
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/3871
$B$^$H$a(B:

sudo $B$O%U%j!<$GDs6!$5$l!"%*!<%W%s%=!<%9$H$7$F8x3+$5$l$F$$$k%U%!%$%k$X$N(B
$B8"8B4IM}$r9T$&!"(BLinux $B$dMM!9$J(B UNIX $B8~$1$N%=%U%H%&%'%"%Q%C%1!<%8$G$"$k!#(B
$B$3$N%=%U%H%&%'%"$O(B Todd C. Miller $B$K$h$C$FJ]u67$K$*$$$F!"%W%m%0%i%`$N12. Groff Pre-Processor Buffer Overflow Vulnerability
BugTraq ID: 3869
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Jan 14 2002 12:00A
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/3869
$B$^$H$a(B:

groff $B$OMM!9$J(B Linux $B$GMxMQ$5$l$F$$$k!"J8=q@07AMQ%f!<%F%#%j%F%#$G$"$k!#(B

$B$3$N%=%U%H%&%'%"$O!"DL>o!"J8=q$N@07A$,I,MW$J:]$K(B LPRng ($B$"$k$$$OB>$NF1(B
$Be=q$-2DG=$K$J$k$H?d;!$5(B
$B$l$k!#$3$l$O6-3&%A%'%C%/$r==J,$K9T$C$F$$$J$$$?$a$G$"$k!#(B
$B967buBV$K$*$$$F!"%j%b!<(B
$B%H$+$i2DG=$G$"$k!#$3$NLdBj$rMxMQ$9$k967b$,@.8y$7$?>l9g!"967b13. MDG Computer Services 4D/eCommerce Directory Traversal Vulnerability
BugTraq ID: 3872
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Jan 14 2002 12:00A
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/3872
$B$^$H$a(B:

MDG Computer Services Web Server 4D/eCommerce $B$O!"%7%g%C%T%s%0%+!<%H%"(B
$B%W%j%1!<%7%g%s!"CmJ8MzNrEy$N5!G=$r4^$`!"EE;R>&]$N%[%9%H$KM?$($i$l$k:]$K!"$3$NLdBj$rMxMQ$9$k967b$r$r<($9(B URL $B$r;XDj$7$J$1$l$P$J$i$J$$E@$OCm5-$5$l(B
$B$M$P$J$i$J$$!#(B

$B$3$NLdBj$rMxMQ$9$k967b$,@.8y$7$?>l9g!"%Q%9%o!<%I%U%!%$%kEy$N=EMW$J%U%!(B
$B%$%k$N3+<($r0z$-5/$3$9;v$,2DG=$G$"$k!#$3$NLdBj$rMxMQ$7$F%"%/%;%9$K$O8"(B
$B8B$,I,MW$J%U%!%$%k$rF~l9g!"967bBP>]$N%3%s%T%e!<%?$X$N0J8e$N(B
$B967b$r14. Siemens Mobile Phone SMS Denial of Service Vulnerability
BugTraq ID: 3870
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Jan 13 2002 12:00A
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/3870
$B$^$H$a(B:

$B%7!<%a%s%9o$"$jF@$J$$J8;zNs$r(B
$B4^$`MM$K0-0U$r;}$C$FAH$_N)$F$i$l$?(B SMS $B%a%C%;!<%8$,AH$_N)$F$i$l$k:]!"(B
$BF1uBV$K4Y$k!#(B

$B0JA0$N%7!<%a%s%915. PHP4 Session Files Local Information Disclosure Vulnerability
BugTraq ID: 3873
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: Jan 13 2002 12:00A
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/3873
$B$^$H$a(B:

PHP $B$O%5!<%P%5%$%I%9%/%j%W%F%#%s%05!G=$rDs6!2DG=$J%$%s%?%W%j%?8@8l$G$"(B
$B$j!"(BHTML $B%U%!%$%kFb$Ko$K9-HO0O$GMxMQ$5$l$F$$$k!#(B

PHP4 $B$O(B Web $B%;%C%7%g%s$N%H%i%C%-%s%05!G=$rDs6!$7$F$$$k!#$3$N5!G=$O%f%K!<(B
$B%/$J%;%C%7%g%s(B ID $B$r:n@.$7!"Ev3:%;%C%7%g%s$K4XO"$9$k>pJs$r3JG<$9$k;v$,(B
$B2DG=$G$"$k!#%f!<%6>pJs$r3JG<$9$k$?$a$N$"$k%*%W%7%g%s$H$7$F!"0l;~%U%!%$(B
$B%k$NMxMQ$,5s$2$i$l$k!#0l;~%U%!%$%k$O(B /tmp $B$K3JG<$5$l!"DL>o!"(BWeb $B%5!<%P(B
$B%W%m%;%9$,=jM-$7$F$$$k!#0l;~%U%!%$%k$K$O$=$l$>$l!"(BPHP $B$K$h$C$FMxMQ$5$l(B
$B$k%;%C%7%g%s(B ID $B$r4^$`L>>N$,IU$1$i$l$F$$$k!#(B

/tmp $B$O$I$NMM$J%f!<%6$KBP$7$F$bFI$_=P$72DG=$J%Q!<%_%C%7%g%s$,M?$($i$l$F(B
$B$$$k$?$a!"$3$l$i$N0l;~%U%!%$%k$NL>>N$KMxMQ$5$l$?%;%C%7%g%s%-!<$rH=FI2D(B
$BG=$G$"$k!#%;%C%7%g%s%-!<$,G'>Z5!9=$KMxMQ$5$l$F$$$?>l9g!"967bpJs$r!"8=:_9T$o$l$F$$$k(B Web $B%;%C%7%g%s$N>h$CH2DG=$G$"$k!#(B
$B$3$N7k2L!"$5$i$K!"=EMW$J>pJs$,3+<($5$l$k$H9M$($i$l$k!#(B


16. MDG Computer Services Web Server 4D/eCommerce DoS Vulnerability
BugTraq ID: 3874
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Jan 14 2002 12:00A
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/3874
$B$^$H$a(B:

MDG Computer Services Web Server 4D/eCommerce $B$O!"%7%g%C%T%s%0%+!<%H%"(B
$B%W%j%1!<%7%g%s!"CmJ8MzNrEy$N5!G=$r4^$`!"EE;R>&e$G(B DoS $B$r>7(B
$B$/;v$,$,2DG=$G$"$k!#G$0U$NJ8;z$+$i$J$k0[>o$KD9$$%j%/%(%9%H$r%[%9%H$KM?(B
$B$($?:]!"%5!<%P$O%/%i%C%7%e$9$k!#(B

$BDL>o5!G=$X$NI|5l$r9T$&$?$a$K$O!"%=%U%H%&%'%"$N:F5/F0$,I,MW$G$"$k!#(B

$B$3$NLdBj$OL$%A%'%C%/$N%P%C%U%!$KM3Mh$7$F$$$k!#>r7o$K9gCW$7$?>l9g$K$O!"(B
$BLdBj$rJz$($k967bBP>]$N%[%9%H$K$*$$$F!"G$0U$N%W%m%0%i%`$,17. NetGear RP114 Cable/DSL Web Safe Router WAN Port DoS Vulnerability
BugTraq ID: 3876
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Jan 15 2002 12:00A
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/3876
$B$^$H$a(B:

Netgear RP114 Cable/DSL Web Safe Router $B$O%f!<%6$K(B cable/DSL $B@\B3$r6&M-(B
$B2DG=$K$7!"$^$?(B NAT $B%k!<%F%#%s%05!G=$bDs6!$7$F$$$k@=IJ$G$"$k!#(B

$BFCDj$N>u672<$K$*$$$F!"(BNetgear RP114 $B%k!<%?$r(B DoS $B>uBV$K4Y$l$i$l$k2DG=@-(B
$B$,$"$k!#%k!<%?$,(B1024 $BL$K~$N%]!<%H$X$N%Q%1%C%H$r%I%m%C%W$9$k$h$&$K@_Dj$5(B
$B$l$F$$$k>l9g!"(BWAN $B%]!<%H$r%9%-%c%s$9$k;v$K$h$j(B DoS $B>uBV$K4Y$l$k;v$,2DG=(B
$B$G$"$k!#(B
$B%]!<%H%9%-%c%sCf$K$O!"(BWAN $B%]!<%H$r7PM3$9$kFbIt$+$i30It!"$"$k$$$O30It$+$i(B
$BFbIt$X$NA4$F$NDL?.$,ES@d$9$k!#(B

$B$^$?!"$3$N>r7o$OB>$N@_Dj$G$b:F8=$G$-$k$HJs9p$5$l$F$$$k!#$3$NLdBj$O!"(Bv3.26
$B0J30$N%U%!!<%`%&%'%"%j%j!<%9$K1F6A$9$k!#(B

18. ClanLib Environment Variable Overflow Vulnerability
BugTraq ID: 3877
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: Jan 15 2002 12:00A
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/3877
$B$^$H$a(B:

ClanLib $B$O%/%m%9%W%i%C%H%U%)!<%`$G$N%2!<%`3+H/$r2DG=$K$9$k%i%$%V%i%j$G(B
$B$"$k!#$3$N%i%$%V%i%j$O!"2hA|!"2;!";q8;4IM}$K4X78$9$kDc%l%Y%k$N6&DL4X?t(B
$B$rB??t4^$s$G$$$k!#$3$N%=%U%H%&%'%"$O(B Microsoft Windows $B$NB>!"2?r7o$,B8:_$9$k!#FCDj$N>u672<(B
$B$K$*$$$F!"(BClanLib $B$r;HMQ$7$F$$$k%=%U%H%&%'%"$O!"0[>o$KD9$$4D6-JQ?t$N$?(B
$B$a!"%/%i%C%7%e$9$k2DG=@-$,$"$k!#%$%s%9%H%i%/%7%g%s%]%$%s%?$,GK2u$5$l$?(B
$B>l9g!"G$0U$N%W%m%0%i%`$ro$N4D6-2<$G$O!"LdBj$rJz$($k%2!<%`$O%m!<%+%k%f!<%6$K$h$C$F$N$_;HMQ2D(B
$BG=$G$"$k!#$7$+$7!"B?$/$N0lHLE*$J%7%9%F%`$N@_Dj$G$O!"(Bsuid 'games' $B$"$k$$(B
$B$O(B sgid 'games' $B$G%2!<%`$,$N%P!<%8%g%s$bF1MM$NLdBj$rJz$($k2DG=@-$,$"$k!#5;=QE*$J>\:Y(B
$B$K$D$$$F$O!"8=;~E@$G$O8x3+$5$l$F$$$J$$!#(B

19. SmoothWall Encrypted Password Hash World Read Vulnerability
BugTraq ID: 3880
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: Jan 15 2002 12:00A
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/3880
$B$^$H$a(B:

SmoothWall $B$O%U%j!<$GMxMQ$G$-$k%*!<%W%s%=!<%9$N(B Linux $B%U%!%$%d%&%)!<%k(B
$B%=%j%e!<%7%g%s$G$"$k!#(BSmoothWall Project $B$K$h$j!"J]]$H$7!"%7%9%F%`(B
$B$KIT@5%"%/%;%9$r;n$_$k%f!<%6$,!"%Q%9%o!<%I%O%C%7%e$r%3%T!<$9$k$3$H$K$h(B
$B$j4IM}20. SmoothWall Configuration Files World Read Vulnerability
BugTraq ID: 3881
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: Jan 15 2002 12:00A
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/3881
$B$^$H$a(B:

SmoothWall $B$O%U%j!<$GMxMQ$G$-$k%*!<%W%s%=!<%9$N(B Linux $B%U%!%$%d%&%)!<%k(B
$B%=%j%e!<%7%g%s$G$"$k!#(BSmoothWall Project $B$K$h$j!"J]pJs$X$N%"%/%;%98"8B(B
$B$rC%$N%M%C%H%o!<%/;q8;$r4m81$KGx$9$3$H$K7R$,$k>pJs$rC%e$N5!L)>pJs$X$N%"%/%;(B
$B%98"8B$rC%pJs$rFI(B
$B$_=P$9;v$r5v$7$F$7$^$$!"$^$?!"%U%!%$%d%&%)!<%k$N%k!<%k%;%C%H$NFI$_=P$7(B
$B$d!"(Bnobody $B8"8B$K$h$j=q$-9~$_2DG=$JItJ,$rJQ99$5$l$F$7$^$&2DG=@-$,$"$k!#(B

21. IRIX nsd Cache Limit Denial of Service Attack
BugTraq ID: 3882
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: Jan 15 2002 12:00A
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/3882
$B$^$H$a(B:

IRIX unified name service daemon (nsd) $B$O!"(BDNS$B!"(BNIS$B!"(BLDAP $B$r4^$`B??t$N(B
$B%M%C%H%o!<%/8!:w%5!<%S%9$X$N0lHLE*$J%$%s%?!<%U%'%$%9$rDs6!$9$k!#(B

nsd $B$N$$$/$D$+$N%P!<%8%g%s$K$OLdBj$,B8:_$9$k!#(Bnsd $B%-%c%C%7%e$N%5%$%:$K(B
$B$h$k@)8B$,E,@Z$K$J$5$l$F$$$J$$!#FCDj$N>u672<$K$*$$$F!"%j%b!<%H$+$i$N96(B
$B7bCHq$7!"(BDoS $B>uBV$K4Y$i$;$k2DG=@-$,$"$k!#(B

III. SECURITYFOCUS NEWS AND COMMENTARY
- ------------------------------------------
1. Will Microsoft's Trustworthy Computing Sell?
$BCx6H0w$KBP$7!"%;%-%e%j%F%#%[!<%k$rJz$($J(B
$B$$@=IJ$r:n$k;v$,$G$-$J$1$l$P!"-Mh$OBfL5$7$K$J$k$@$m$&$H8l$C$?!#(B

http://www.securityfocus.com/news/310

2. Breakable
$BCxhttp://www.securityfocus.com/news/309

3. Backing Up Oracle's 'Unbreakable' Vow
$BCxhttp://www.securityfocus.com/news/308

4. Microsoft Store Offline After Insecurity Exposed
$BCxhttp://www.securityfocus.com/news/307


IV.SECURITYFOCUS TOP 6 TOOLS
- -----------------------------
1. FileManager v0.97
$B:nhttp://www.horsburgh.com/h_filemanager.html
$B%W%i%C%H%U%)!<%`(B: Linux$B!"(BUNIX
$B$^$H$a(B:

FileManager $B$O!"%U%!%$%k$d%G%#%l%/%H%j!"%j%b!<%H$+$i$N%3%^%s%I$NpJs$r$9$Y$FI=<($7!"%U%!%$%k$NI=(B
$B<(!":o=|!"L>A0$NJQ99!"%"%C%W%m!<%I!"%@%&%s%m!<%I$J$I$r9T$&$3$H$,$G$-$^(B
$B$9!#%G%#%l%/%H%j$NA`:n$r4JC1$K$7$F$/$l$^$9!#G$0U$N%3%^%s%I$r%f!<%6%"%+(B
$B%&%s%H$N8"8B$G2. OpenAI v0.1a
$B:nhttp://openai.sourceforge.net/downloads.html
$B%W%i%C%H%U%)!<%`(B: Linux$B!"(BPOSIX$B!"(BSolaris$B!"(BSunOS$B!"(BWindows 2000$B!"(BWindows 
95/98$B!"(BWindows NT$B!"(BWindows XP
$B$^$H$a(B:

OpenAI $B%5%$%H$O%*!<%W%s%=!<%9%W%m%8%'%/%H$d?M9)CNG=$r3. Bastille Linux v1.3.0.p9
$B:nhttp://bastille-linux.sourceforge.net/
$B%W%i%C%H%U%)!<%`(B: Linux
$B$^$H$a(B:

Bastille Linux$B$O(B Red Hat Linux 6.0/6.1$B$KBP$9$k$b$C$H$bJq3gE*$G=@Fp$G$"(B
$B$j!"650iE*$J%;%-%e%j%F%#6/2=%W%m%0%i%`$rL\I8$H$7$F$$$^$9!#$3$N%W%m%0%i(B
$B%`$,.$5$J%P%0$r=$@5$7$^$7$?!#$^$?!"(BAutomated Bastille $B$r:F$SAH$_9~$_!">.$5(B
$B$J%P%0$r=$@5$7$^$7$?!#(B

4. NARC v0.6
$B:nhttp://www.knowplace.org/netfilter/narc.html
$B%W%i%C%H%U%)!<%`(B: Linux
$B$^$H$a(B:

NARC (Netfilter Automatic Rules Configurator) $B$O!"(BBSD $B%i%$%;%s%9$N85$G(B
$BDs6!$5$l$k!"(BNetfilter/Iptables $B$rMxMQ$7$?%U%j!<$N%U%!%$%d%&%)!<%k%Q%C%1(B
$B!<%8$G$9!#(Biptables $B%D!<%k$r;H$$!"%U%!%$%d%&%)!<%k(B ($B%9%F!<%H%U%k%Q%1%C%H(B
$B%U%#%k%?(B) $B$N4JJX$J%;%C%H%"%C%W$rDs6!$7$^$9!#C1=c$J@_Dj%U%!%$%k$K4p$E$/(B 
Netfilter $B$N(B ($B>eMM!9$J5!G=$r?WB.$K%;%C%H%"%C(B
$B%W$G$-$k$3$H$,$rFCD9$G$9!#(B

5. Cisco IP Accounting Fetcher v1.3.1
$B:nhttp://kaeptnb.d2g.com/cipaf
$B%W%i%C%H%U%)!<%`(B: Perl (any system supporting perl)
$B$^$H$a(B:

Cisco IP Accounting Fetcher $B$O!"(BCisco $B%k!<%?$+$i%"%+%&%s%F%#%s%0%G!<%?(B
$B$rpJs$rpJs$r$^$H$a$i$l$^$9!#(BCSS $B$r%5(B
$B%]!<%H$7$?(B HTML $B7A<0$N=PNO$r%*%W%7%g%s$G@8@.$G$-$^$9!#$^$?!"FCDj$N%H%i(B
$B%U%#%C%/$rL5;k$G$-$^$9!#(B

6. MailScanner v3.03-1
$B:nhttp://www.sng.ecs.soton.ac.uk/mailscanner/downloads.shtml
$B%W%i%C%H%U%)!<%`(B: AIX$B!"(BFreeBSD$B!"(BHP-UX$B!"(BLinux$B!"(BNetBSD$B!"(BOpenBSD$B!"(BSunOS
$B$^$H$a(B:

MailScanner $B$O!"EE;R%a!<%k%&%$%k%9%9%-%c%J$G%9%Q%`%?%0IU$1%=%U%H(B ($BLuCm(B:
$B%9%Q%`%a!<%k$K0u$r$D$1$kLOMM(B) $B$G$9!#(Bsendmail$B$H(BExim MTA$B!"(BSophos$B$H(BMcAfee 
$B%"%s%A%&%#%k%9%9%-%c%J$r%5%]!<%H$7$^$9!#%$%s%9%H!<%k$9$k$N$,Hs>o$K4JC1(B
$B$G!"(Bsendmail.cf $B%U%!%$%k$rJQ99$9$kI,MW$O$"$j$^$;$s!#>/$J$$;q8;$GF0:n$9(B
$B$k$h$&$K@_7W$5$l$F$$$F!"9bIi2Y$KH<$&%a!<%k%7%9%F%`$NDd;_$r>7$/;v$O$"$j(B
$B$^$;$s!#(B
- --
$BLu(B: $B:d0f=g9T(B(SAKAI Yoriyuki), $B1F;3E0:H(B(KAGEYAMA Tetsuya)
$B4F=$(B: $B:d0f=g9T(B(SAKAI Yoriyuki)
LAC Co., Ltd.
http://www.lac.co.jp/security/

-----BEGIN PGP SIGNATURE-----
Version: PGP for Personal Edition 5.5.5J
Comment: SAKAI Yoriyuki

iQA/AwUBPFIgDZQwtHQKfXtrEQL4ggCgkK3dXIkpJnWAKqC1eSvyxSUrIcIAoI3y
057KQZiBqQvrxZQPLoCjb+vQ
=DyZE
-----END PGP SIGNATURE-----