Return-Path: owner-bugtraq-jp@SECURITYFOCUS.COM X-Mailer: Winbiff [Version 2.20 PL4] Mime-Version: 1.0 Content-Type: text/plain; charset=iso-2022-jp Message-ID: <199911301133.GJG42261.LJBBT@lac.co.jp> Date: Tue, 30 Nov 1999 11:33:42 +0900 Reply-To: SAKAI Yoriyuki Sender: BUGTRAQ-JP List From: SAKAI Yoriyuki Subject: Security Focus Newsletter #17 1999-11-21 -> 1999-11-27 X-To: bugtraq-jp@securityfocus.com To: BUGTRAQ-JP@SECURITYFOCUS.COM -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 $B:d0f(B@$B%i%C%/$G$9!#(B Security Focus Newsletter $BBh(B 17 $B9f$NOBLu$r$*FO$1$7$^$9!#(B $BLu$N$J$$9`L\$K$D$$$F$O!VF|K\8lLu$J$7!W$H$7$F6hJL$7$F$"$j$^$9(B Security Focus Newsletter $B$K4X$9$k(BFAQ: BugTraq-JP $B$K4X$9$k(B FAQ: - ---------------------------------------------------------------------- - ---------------------------------------------------------------------- $B0zMQ$K4X$9$kHw9M(B: $B!&$3$NOBLu$O(B Security Focus $B$N5v2D$r3t<02qe$G9T$o$l$F(B $B$$$^$9!#(B $B!&(BSecurity Focus Newsletter $B$NOBLu$r(B Netnews, Mailinglist, World Wide Web, $B=q@R(B, $B$=$NB>$N5-O?G^BN$G0zMQ$5$l$k>l9g$K$O%a!<%k$N(B $BA4J80zMQ$r$*4j$$$7$^$9!#(B $B!&F|K\8lHG%K%e!<%9%l%?!<(B 1 $B9f$+$i(B 3 $B9f$^$G$K$O$3$NHw9M$,IU$$$F$$$^$;(B $B$s$,=`MQ$9$k$b$N$H$7$^$9!#(B $B!&$^$?!"(BSecurity Focus $BDs6!$N(B BugTraq-JP $B%"!<%+%$%V(B [*1] $B$X$N$$$+$J$k(B $B7A<0$N%O%$%Q!<%j%s%/$b>e5-$K=`$8$F$/$@$5$$!#(B 1) - ---------------------------------------------------------------------- - ---------------------------------------------------------------------- $B$3$NOBLu$K4X$9$kHw9M(B: $B!&$3$NOBLu$NE,MQ@.2L$K$D$$$F3t<02qe0L(B6$B0L$N%D!<%k(B 1. SecurityFocus.com Pager (Win95/98/NT) 2. Lookout (Windows 2000, Windows 95/98 and Windows NT) 3. cgicheck99 0.4 (Any system supporting rebol) 4. HookProtect (Windows 95/98 and Windows NT) 5. Sun Enterprise Network Security Service Early Access 1 (Java) 6. Pandora for Linux v4 beta 2 (Linux) IX. $B%9%]%s%5!<>pJs(B($BF|K\8lLu$J$7(B) X. Security Focus Newsletter $B$N9XFI!&9XFI2r=|>pJs(B($BF|K\8lLu$J$7(B) I. $B=i$a$K(B - ----------- CORE-SDI $B$NDs6!$K$h$k!"(BSecurity Focus $B$,$*Aw$j$9$k=54)%K%e!<%:%l%?!<$N(B $BBh(B 17 $B9f$X$h$&$3$=!#(B http://www.core-sdi.com II. $B:#=5$N(B BUGTRAQ $B$+$i(B 1999-11-21 $B$+$i(B 1999-11-27 $B$^$G(B - -------------------------------------------------------- 1. NetTerm FTP Server Multiple Vulnerabilities BugTraq ID: 819 $B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B $B8xI=F|(B: 1999-11-22 $B4XO"$9$k(BURL: http://www.securityfocus.com/bid/819 $B$^$H$a(B: InterSoft $B$,Ds6!$9$k(B internet suite $B$K4^$^$l$k(B FTP $B%5!<%P$K$OB?$/$N0J(B $B2<$K<($9%f!<%6$KBP$7$F(B C $B%I%i%$%V$N%k!<%H%G%#%l%/%H%j$X(B $B$N=q$-9~$_!"FI$_=P$78"8B$rM?$($F$7$^$C$F$$$k!#=q$-9~$_8"8B$K$O>e=q$-!"(B $B:o=|8"8B$b4^$^$l$k!#$b$7$b(B "Out of the box" $B%*%W%7%g%s$,@_Dj$5$l$F$$$?(B $B>l9g!"F?L>$N%j%b!<%H%f!<%6$O(B OS $B$N%U%!%$%k$He$ND9$5$N0z?t$rM?$($?>l9g!"%5!<%P(B $B$ODd;_$7$F$7$^$&!#$5$i$K%f!<%6%"%+%&%s%H$NG'>ZMQ$N(B PASS $B%3%^%s%I$N0z?t(B $B$O(B 16 $BJ8;z$G@Z$i$l$F$7$^$&$,!"$3$N@)8B$OF?L>%f!<%6$K$OE,MQ$5$l$F$$$J$$!#(B ($BEE;R%a!<%k$N%"%I%l%9$r%Q%9%o!<%I$H$7$F@5$7$/%f!<%6$G%m%0%$%s$r9T$C$?>l9g!"(B 1024 $BJ8;z0J>e$N%Q%9%o!<%I$rM?$($k$3(B $B$H$G%5!<%P$rDd;_$5$;$F$7$^$&!#(B $B=>$C$F$3$N%*!<%P!<%U%m!<$rMxMQ$7$?967b$*$h$S0U?^E*$J%3!<%I$Nl9g!"(BIE 5 $B%/%i%$%"%s%H$O(B XML $B%j%@%$%l%/%H$r<+J,$N%I%a%$%s(B $B$=$N$b$N$K8~$1$F$7$^$&!#(B($B9=B$BN$O%"%/%;%9$7$F$-$?%3%s%T%e!<%?$=$N$b$N(B $B$d!"=jB0$9$k%I%a%$%s$N>l9g$b9M$($i$l$k(B) 3. Sun Java IDE Webserver IP Restriction Failure Vulnerability BugTraq ID: 816 $B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B $B8xI=F|(B: 1999-11-23 $B4XO"$9$k(BURL: http://www.securityfocus.com/bid/816 $B$^$H$a(B: $B;n83L\E*$N(B http $B%5!<%P5!G=$r4^$`(B Java $B3+H/MQ%"%W%j%1!<%7%g%s$,Ds6!$5$l(B $B$F$$$k!#$3$N%"%W%j%1!<%7%g%s$N(B http $B%5!<%P$OFCDj$N(B IP $B%"%I%l%9$+$i$N%j(B $B%/%(%9%H$K1~Ez$9$kMM$K@_Dj2DG=$G$"$k$,!"@_Dj5!9=$,%"%/%;%9@)8B$K<:GT$7!"(B $B$9$Y$F$N%j%/%(%9%H$re$N$I$N$h$&$J%U%!%$%k$G$"$C$F$bFI$_=P$72DG=$G$"$j!"%k!<%H(B $B%G%#%l%/%H%j$^$G$bl9g!"%"%/%;%985$K4X78$J$/$I$N$h$&$J%j%/%(%9%H$KBP(B $B$7$F$b1~Ez$7$F$7$^$&!#(B 4. Vermillion FTPd CWD DoS Vulnerability BugTraq ID: 818 $B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B $B8xI=F|(B: 1999-11-22 $B4XO"$9$k(BURL: http://www.securityfocus.com/bid/818 $B$^$H$a(B: Vermillion FTP Daemon (VFTPD) $B$,(B 504 $BJ8;z0J>e$NO"B3$7$?(B CWD $B%3%^%s%I$r(B $Bl9gDd;_$7$F$7$^$&LdBj$,H/8+$5$l$?!#(B 5. Mdaemon WebConfig Overflow DoS Vulnerability BugTraq ID: 820 $B%j%b!<%H$+$i$N:F8=@-(B: $BL$>\(B $B8xI=F|(B: 1999-11-24 $B4XO"$9$k(BURL: http://www.securityfocus.com/bid/820 $B$^$H$a(B: Windows $BMQ$N%a!<%k%5!<%P!"(BMDaemon $B$K$O>.5,LO$N(B Web $B%5!<%P$,(B Web $B$r2p$7(B $B$?%j%b!<%H$+$i$N4IM}MQ$KHw$($i$l$F$$$k!#$3$N(B Web $B%5!<%P$K$O(B GET $B%3%^%s(B $B%I$ro$KD9$$(B URL $B$r(B $BM?$($?>l9g!"%5!<%S%9$ODd;_$7$F$7$^$&!#(B 6. Cabletron SSR ARP Flood DoS Vulnerability BugTraq ID: 821 $B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B $B8xI=F|(B: 1999-11-24 $B4XO"$9$k(BURL: http://www.securityfocus.com/bid/821 $B$^$H$a(B: $B%U%!!<%`%&%'%"%j%S%8%g%s(B 2.x $B$N(B Cabletron SmartSwitch Router 8000 $B$K$O(B $B;HMQITG=967b$rl9g!"(BICMP $B%j%/%(%9%H$K$h$C$F!"(BARP $B%j%/%(%9%H$r0n$l$5$;2D(B $BG=$G$"$k!#=>$C$F967b$N4V%k!<%?$r$[$\4V0c$$$J$/Dd;_$5$;$i$l$k!#(B 7. Netscape Navigator Long ASP Argument Vulnerability BugTraq ID: 822 $B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B $B8xI=F|(B: 1999-11-26 $B4XO"$9$k(BURL: http://www.securityfocus.com/bid/822 $B$^$H$a(B: Netscape Communicato7 4.7 $B$O(B ASP $B$rMxMQ$7$?%Z!<%8$X$N%j%/%(%9%H$K$*$$$F!"(B 800 $BJ8;z$r1[$($k0z?t$,M?$($i$l$?>l9g!"Dd;_$7$F$7$^$&8=>]$,H/8+$5$l$?!#(B $B0z?t$H$7$FM?$($i$l$?%G!<%?$N0lIt$O(B EIP $B$H(B EBP $B%l%8%9%?$XM?$($i$l$k$?$a!"(B $B0U?^E*$J%3!<%I$Ne$N%j%s%/7PM3$G(B $B$N%P%C%U%!%*!<%P!<%U%m!<$d!"EE;R%a!<%k$K$h$k%P%C%U%!%*!<%P!<%U%m!<$b%j(B $B%b!<%H$+$i$N967b$H%Q%9%o!<%I$,M?$($i$l$k$^$G%m%C%/$9$k5!G=$,$"$k!#(B $B%f!<%6L>$rM?$($k5!G=$K$*$$$F!"$$$+$J$k%f!<%6$bD9$$%f!<%6L>$rM?$($k$3$H(B $B$,2DG=$G$"$j!"%P%C%U%!$r0n$l$5$;$k;v$,2DG=$G$"$k!#=>$C$F(B root $B$K(B suid $B8"8B$rM?$($FF0:n$9$k(B xlock(1) $B$K$*$$$F$O!"$3$N%P%C%U%!%*!<%P!<%U%m!<$+(B $B$i(B root $B8"8B$N$r%3%^%s%I%i%$(B $B%s0z?t$H$7$FM?$($k5!9=$,%f!<%6$+$iM?$($i$l$?%G!<%?$NBEEv@-%A%'%C%/(B $B$r9T$C$F$$$J$$$?$a$KH/@8$9$k!#=>$C$F(B root $B$K(B suid $B8"8B$rM?$($FF0:n(B $B$9$k(B su(1) $B$K$*$$$F$O$3$N%P%C%U%!%*!<%P!<%U%m!<$+$i(B root $B8"8B$NpJs$rF@$i$l$k$H;W$$$^$9$+(B?) SANS 31% / 30 $BI<(B BlackHat 15% / 15 $BI<(B TISC 4% / 4 $BI<(B CSI 5% / 5 $BI<(B Chaos Communications Congress 6% / 6 $BI<(B Defcon 30% / 29 $BI<(B $BA4EjIe0L(B6$B0L$N%D!<%k(B 1999-11-21 $B$+$i(B 1999-11-27 $B$^$G(B - -------------------------------------------- 1. Security Focus Pager $BCx(B $BJ}$GJQ99$r$*CN$i$;$7$^$9!#(B($BDLCNJ}K!$O@_Dj2DG=$G$9(B) 2. Lookout $BCxuBV$rBT$A$N%3%s%T%e!<%?$+$i$N(B $BDL?.$rBT$A$&$1$^$9!#(BLookout $B$K$OCM$r4^$`J8;zNs$r%P%C%U%!$r4JC1$K%F%9%H$9(B $B$k$?$a$KAw=P2DG=$G$9!#(B 3. cgicheck99 0.4 $BCx$N%j%b!<%H$+$i:F8=2D(B $BG=$Je$4MxMQ$/$@$5$$!#(B http://www.rebol.com 4. HookProtect $BCxe$N%f!<(B $B%6$N9TF0$r%b%K%?%j%s%0$9$kE@$K$"$j$^$9!#(B($BNc$($PJ8;z$NF~NO!"%"%W%j%1!<(B $B%7%g%s$N5/F0!"?7$7$$%&%#%s%I%&$N%*!<%W%s!"%$%s%?!<%M%C%H$X$N@\B3Ey$,$"(B $B$j$^$9(B) 5. Pandora for Linux v4 beta 2 $BCxuBV$G%]%$%s%H$*$h(B $B$S%/%j%C%/F0:n$G(B Windows NT $BHG$N(B Novell Netware $B$N4F::$r9T$&%D!<%k$G$9!#(B $B%9%W!<%U%#%s%0F0:n$O8=:_F0:n$7$^$9$,!"(BSP3 $B$G$O5!G=Dd;_>uBV$,B?!9@8$8$F(B $B$7$^$C$F$$$^$9!#(B($B8=:_=$@5Cf$G$9(B) $B%*%U%i%$%s>uBV$N%W%m%0%i%`$+$iCj=P$7$?%Q%9%o!<%I$N%O%C%7%e$+$i%5!<%P$X(B $B$N@\B35!G=$,$"$j$^$9!#$^$?!"%?!<%2%C%H$H$J$k%5!<%P$rC5:w$7!"%m%0%$%s$9(B $B$k$3$H$J$/%5!<%P$X@\B3$7!"%f!<%6%"%+%&%s%H$rF~h$Ce$GF0:n(B $B$9$k%;%-%e%j%F%#%D!<%k$rDs6!$7$^$9!#$3$N%D!<%k$OAH?%Fb$N%7%9%F%`$H%M%C(B $B%H%o!<%/$r@h?JE*$G0[$J$kFC@-$r;}$C$?4k6HFb%M%C%H%o!<%/Kh$K4F::$7!"%;%-%e(B $B%"$+$I$&$+$rH=CG$9$kL\E*$K$4MxMQD:$1$^$9!#(B SENSS $B%=%U%H%&%'%"$O$^$@40@.$7$F$$$^$;$s!#$3$N@=IJ$O%"!<%j!<%"%/%;%9(B 1 $B%j%j!<%9$G$9!#pJs(B($BF|K\8lLu$J$7(B) - -------------------------------- X. Security Focus Newsletter $B$N9XFI!&9XFI2r=|>pJs(B($BF|K\8lLu$J$7(B) - --------------------------------------------------------------- $BLuCm(B:$BF|K\8lHG(B Security Focus Newsletter $B$O(B BugTraq-JP $B$GG[Aw$5$l$^$9!#(B $BF|K\8lHG$@$1$N9XFI!&9XFI2r=|J}K!$ODs6!$5$l$F$$$^$;$s!#(B $B0J2<$NFbMF$O1Q8lHG(B Security Focus Newsletter $B$N9XFI!&9XFI2r=|J}K!$G$9!#(B $B$J$*(B BugTraq-JP $B$N(B FAQ $B$O$3$A$i$N(B URL $B$r$4;2>H$/$@$5$$!#(B http://www.securityfocus.com/forums/bugtraq-jp/faq.html Translated by SAKAI Yoriyuki / LAC -----BEGIN PGP SIGNATURE----- Version: PGPfreeware 5.5.3i for non-commercial use iQA/AwUBOEK49ZQwtHQKfXtrEQIjtgCg9addzL5c4bnMN63bn1LabRBTnQAAoOJ4 uOW+bCQ+k1oBu6ryFpVYZr3q =PMyd -----END PGP SIGNATURE-----