Return-Path: owner-bugtraq-jp@SECURITYFOCUS.COM X-Mailer: Winbiff without EditX [Version 2.30PL4 (on Trial)] Mime-Version: 1.0 Content-Type: text/plain; charset=iso-2022-jp Message-ID: <200007280048.IID22528.BBTJL@lac.co.jp> Date: Fri, 28 Jul 2000 00:48:15 -0700 Reply-To: SAKAI Yoriyuki Sender: BUGTRAQ-JP List From: SAKAI Yoriyuki Subject: SecurityFocus.com Newsletter #51 2000-07-12 -> 2000-07-22 To: BUGTRAQ-JP@SECURITYFOCUS.COM -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 $B:d0f(B@$B%i%C%/$G$9!#(B SecurityFocus.com Newsletter $BBh(B 51 $B9f$NOBLu$r$*FO$1$7$^$9!#(B $BLu$N$J$$9`L\$K$D$$$F$O!VF|K\8lLu$J$7!W$H$7$F6hJL$7$F$"$j$^$9!#(B - - -------------------------------------------------------------------- SecurityFocus.com Newsletter $B$K4X$9$k(BFAQ: BugTraq-JP $B$K4X$9$k(B FAQ: - - -------------------------------------------------------------------- $B0zMQ$K4X$9$kHw9M(B: $B!&$3$NOBLu$O(B Security-Focus.com $B$N5v2D$r3t<02qe$G9T$o(B $B$l$F$$$^$9!#(B $B!&(BSecurityFocus.com Newsletter $B$NOBLu$r(B Netnews, Mailinglist, World Wide Web, $B=q@R(B, $B$=$NB>$N5-O?G^BN$G0zMQ$5$l$k>l9g$K$O%a!<%k$N(B $BA4J80zMQ$r$*4j$$$7$^$9!#(B $B!&F|K\8lHG%K%e!<%9%l%?!<(B 1 $B9f$+$i(B 3 $B9f$^$G$K$O$3$NHw9M$,IU$$$F$$$^$;(B $B$s$,=`MQ$9$k$b$N$H$7$^$9!#(B $B!&$^$?!"(BSecurity-Focus.com $BDs6!$N(B BugTraq-JP $B%"!<%+%$%V(B [*1] $B$X$N$$$+(B $B$J$k7A<0$N%O%$%Q!<%j%s%/$b>e5-$K=`$8$F$/$@$5$$!#(B 1) - - -------------------------------------------------------------------- - - -------------------------------------------------------------------- $B$3$NOBLu$K4X$9$kHw9M(B: $B!&$3$NOBLu$NE,MQ@.2L$K$D$$$F3t<02ql9g!"(BBUGTRAQ-JP $B$X(B Errata $B$H$7$F=$@5(B $BHG$r$4Ej9FD:$/$+!"Lul9g$K$O=$@5HG$r$G$-$k$@$1?WB.$KH/9T$7$^$9!#(B - - -------------------------------------------------------------------- - - -------------------------------------------------------------------- SecurityFocus.com Newsletter #51 - -------------------------------- I. FRONT AND CENTER 1. Moment's Notice: The Immediate Steps of Incident Handling 2. Microsoft: Winning the Hotfix Race 3. Sun: Introduction to IP Filter 4. Announcement: New Virus Focus Area 5. Call for writers: Small Office and Home Office Security II. BUGTRAQ SUMMARY 1. Virtual Vision FTP Browser Vulnerability 2. WircSrv MOTD Read Vulnerability 3. Microsoft Internet Explorer 5.01 / 5.5 DHTMLED ... 4. Microsoft IIS 3.0 .htr Missing Variable DoS Vulnerability 5. Infopulse Gatekeeper Buffer Overflow Vulnerability 6. GAMSoft Telsrv DoS Vulnerability 7. Multiple Linux Vendor rpc.statd Remote Format String Vulnerability 8. Microsoft Outlook / Express GMT Field Buffer Overflow Vulnerability 9. CSM Alibaba Web Server DoS Vulnerability 10. NetZero ZeroPort 3.0 Weak Encryption Method Vulnerability 11. Univ. of Washington pop2d Remote File Read Vulnerability 12. CSM Alibaba Web Server Piped Command Vulnerability 13. Blackboard CourseInfo 4.0 Database Modification Vulnerability 14. O'Reilly WebSite 'webfind.exe' Buffer Overflow Vulnerability 15. Microsoft IIS 4.0/5.0 Source Fragment Disclosure Vulnerability 16. Mandrake Linux Usermode Package Vulnerability 17. L-Soft Listserv Web Archives Buffer Overflow Vulnerability 18. HP JetDirect Invalid FTP Command DoS Vulnerability 19. O'Reilly WebSite GET Buffer Overflow Vulnerability 20. CommuniGate Pro Arbitrary File Read Vulnerability 21. BB4 Big Brother CGI File Creation Vulnerability 22. Multiple Buffer Overflow Vulnerabilities in xconq 23. Nullsoft Winamp M3U Playlist Buffer Overflow Vulnerability 24. WEBactive HTTP Server Default Log Vulnerability 25. Default Sun Java Web Server Servlets Vulnerability 26. Microsoft IIS Internet IP Address Disclosure Vulnerability III. SECURITYFOCUS.COM NEWS ARTICLES 1. Update: MS Battles Outlook Bug (July 19, 2000) 2. Outlook Bug Exposes Net (July 18, 2000) 3. Hacking "Survivor" (July 23, 2000) IV.SECURITY FOCUS TOP 6 TOOLS 1. anomy sanitizer 1.21 (Linux and Solaris) 2. Narrow Security Scanner (Unix/Perl) 3. PScan (Problem Scanner) 1.2 (Linux, Solaris, Unix) 4. AntiVirus eXpert 2000 Desktop (Windows 95/98, Windows 2000/NT) 5. Big Brother 1.4h2 (Unix and Windows NT) 6. beecrypt 1.0.2 (Unix, Windows 2000/NT, and Windows 95/98) I. FRONT AND CENTER($BF|K\8lLu$J$7(B) - --------------------------------- II. BUGTRAQ SUMMARY - ------------------- 1. Virtual Vision FTP Browser Vulnerability BugTraq ID: 1471 $B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B $B8xI=F|(B: 2000-07-12 $B4XO"$9$k(B URL: http://www.securityfocus.com/bid/1471 $B$^$H$a(B: Virtual Visions FTP Browser $B$O(B $B%U%!%$%k$r%@%&%s%m!<%I$9$k:]$N(B HTML $B%$%s%?!<%U%'%$%9$rDs6!$9$k(B CGI $B%9%/%j%W%H$G$"$k!#FCJL$J%G%#%l%/%H%j;2(B $B>H$r9T$&$?$a$NJ8;z$r4^$`MW5a$r%9%/%j%W%H$KAw$k$3$H$K$h$C$F!"%U%!%$%k(B $B%7%9%F%`$NG$0U$N%G%#%l%/%H%j$K%"%/%;%9$9$k$3$H$,2DG=$G$"$k!#(B $B6qBNNc$O0J2<$K<($9!#(B http://www.server.com/cgi-bin/ftp/ftp.pl?dir=../../../../../../etc 2. WircSrv MOTD Read Vulnerability BugTraq ID: 1472 $B%j%b!<%H$+$i$N:F8=@-(B: $BL$>\(B $B8xI=F|(B: 2000-07-17 $B4XO"$9$k(B URL: http://www.securityfocus.com/bid/1472 $B$^$H$a(B: WindowsNT $B$b$7$/$O(B $BB>$N(B Windows $B$GF0:n$9$k8D?MMQ(B IRC $B%5!<%P(B WircSrv $B$N$"$k%P!<%8%g%s$K$O!"FCDj$N%f!<%6$K$O%"%/%;%9$G$-$J$$$O$:$N%U%!%$%k$r(B $BFI$^$l$F$7$^$&LdBj$,$"$k!#$3$NLdBj$O!";vA0$K8"8B$rM?$($i$l$?(B IRCop (IRC $B%5!<%P$N%b%G%l!<%?(B)$B$K$N$_%"%/%;%92DG=$J%5!<%P$K%3%^%s%I$rM?$($i$l(B $B$k$?$a$K@8$8$k!#$3$N%3%^%s%I$O!"%f!<%6$K(B IRC $B%;%C%7%g%s(B ($B%m%0%$%sCf$N%f!<(B $B%6$KI=<($5$l$F$$$k(B) $BCf$KI=<($5$l$k(B MOTD (Message Of The Day) $B$X%"%/%;%9(B $B$G$-$k2DG=@-$,9M$($i$l$k!#$5$i$K!"C1$K;vA0$K=`Hw$5$l$?%U%!%$%k$X$N%"%/%;(B $B%9$r5v$9Be$o$j$K!"%5!<%P$,e(B $B$K$"$k$3$H$,CN$i$l$F$$$k%U%!%$%k$NFbMF$rFI$^$l$k2DG=@-$,$"$k!#$3$l$O!"(B $B%/%i%$%"%s%H$,(B Outlook $B$rMxMQ$7$F$$$k>l9g!"(BHTML $B%a!<%k$rDL$7$F$G$bl9g$K$OE,@Z$K%b%G%k$N@_Dj$rG'<1$7$J$$$N$G$"$k!#(BIFRAME ($B$*$=$i(B $B$/%m!<%+%k%U%!%$%k$+$iFI$`$h$&$K@_Dj$5$l$F$$$k(B) $B$NFbMF$O!"0J2<$N$h$&$J(B $B%W%m%0%i%`$rMxMQ$9$k$3$H$K$h$C$F!"(BWeb $B%5!<%P$+$i;2>H$G$-$F$7$^$&!#(B dh.DOM.all.I1.focus(); dh.DOM.all.I1.document.execCommand("selectall"); dh.DOM.all.I1.document.execCommand("copy"); r=document.all.S1.createTextRange(); r.execCommand("paste"); alert("Alert Message: "+S1.value); 4. Microsoft IIS 3.0 .htr Missing Variable Denial of Service Vulnerability BugTraq ID: 1476 $B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B $B8xI=F|(B: 2000-07-14 $B4XO"$9$k(B URL: http://www.securityfocus.com/bid/1476 $B$^$H$a(B: Microsoft IIS 3.0 $B$O!"B??t$N(B HTR $B%9%/%j%W%H$r4^$s$G=P2Y$5$l$?!#$=$N$&$A(B $B$N0l$D$K$O!"%[%9%H%^%7%s$r(B DoS $B$K4Y$i$9$?$a$KMQ$$$i$l$k2DG=@-$,$"$k!#(B $B$3$l$i$N%9%/%j%W%H$O!"(BIIS 3.0 $B$N$_$K4^$^$l$FG[I[$5$l$F$$$k$K$b$+$+$o$i$:!"(B 4.0 $B$d(B 5.0 $B$K%"%C%W%0%l!<%I$7$F$b>C$5$l$:$KJ];}$5$l$k$?$a!"%P!<%8%g%s$,(B 4.0 $B$d(B 5.0 $B$G$"$C$F$b(B 3.0 $B$+$i%"%C%W%0%l!<%I$G%$%s%9%H!<%k$7$?>l9g!"(B $BLdBj$,@8$8$k2DG=@-$,$"$k!#$3$NH(B $B$9$k$?$a$K;H$o$l!"DL>o$O0z?t$H$7$F%G%#%l%/%H%jL>$rM?$($i$l$kM=Dj$G$"$k!#(B $B$3$NJQ?t$K%9%Z!<%9$rM?$($i$l!"(BIIS $B$,MW5a$rl9g!"%9%/%j%W%H$O!"(B $B%7%9%F%`$N%j%=!<%9$r8O3i$7$F$7$^$&L58B%k!<%W$K4Y$k!#(B Microsoft $B$+$i$O$3$l0J>e$N>pJs$ODs<($5$l$F$$$J$$!#(B 5. Infopulse Gatekeeper Buffer Overflow Vulnerability BugTraq ID: 1477 $B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B $B8xI=F|(B: 2000-07-13 $B4XO"$9$k(B URL: http://www.securityfocus.com/bid/1477 $B$^$H$a(B: Infopulse GateKeeper proxy $B%5!<%P$O!"(B2000 $BHV%]!<%H$+$i!"(B4096 $BJ8;z$r1[$((B $B$kJ8;zNs$rF~NO$5$l$?>l9g!"%/%i%C%7%e$9$k2DG=@-$,$"$k!#(B $B$^$?!"G$0U$N%W%m%0%i%`$ro$N5!G=$r2sI|$9$k$K$O%5!<%P$N:F5/F0$,I,MW$G$"$k!#(B 6. GAMSoft Telsrv DoS Vulnerability BugTraq ID: 1478 $B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B $B8xI=F|(B: 2000-07-17 $B4XO"$9$k(B URL: http://www.securityfocus.com/bid/1478 $B$^$H$a(B: telsrv telnet $B%5!<%P(B $B$KBP$9$k(B DoS $B967b$,2DG=$G$"$k!#967b$NMW5a$KBP$7!"Ls(B 4550 $BJ8;z$rAw$k$3$H$K$h$C$F2DG=$G$"$k!#(B $BDL>o$N5!G=$r2sI|$9$k$K$O%5!<%P$N:F5/F0$,I,MW$G$"$k!#(B 7. Multiple Linux Vendor rpc.statd Remote Format String Stack Overwrite Vulnerability BugTraq ID: 1480 $B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B $B8xI=F|(B: 2000-07-16 $B4XO"$9$k(B URL: http://www.securityfocus.com/bid/1480 $B$^$H$a(B: $BB??t$NCxL>$J(B Linux $B$N%G%#%9%H%j%S%e!<%7%g%s$K4^$^$l$k(B nfs-utils $B%Q%C%1!<(B $B%8$K$Oe$Ge=q$-$9$k$3$H$,2DG=$G$"$k!#(B $B$3$NA`:n$rE,@Z$K9T$&$H!"(Brpc.statd $B%W%m%0%i%`$K!"$=$l$re$GG$0U$N%W%m%0%i%`$r$C$F!"0-0U$r;}$C$?%f!<%6$,!"(BGMT $B$N;~9oCM$K0[>o$KD9$$CM(B $B$r4^$s$GFCJL$KAH$_N)$F$i$l$?EE;R%a!<%k$rAw$C$?>l9g$K$O!"G$0U$N%W%m%0%i(B $B%`$r Outlook $B$N(B MIME attached message format $B$H$7$F(B MIME $B7A<0$NE:IU%U%!%$%k$H(B $B$7$FFCJL$J7A<0$N(B GMT $B%U%#!<%k%I$r4^$a$F$b$3$NLdBj$r:F8=$G$-$k2DG=@-$,$"$k!#(B $B$3$l$O!"EE;R%a!<%k%/%i%$%"%s%H$,E:IU%U%!%$%k$r3+$$$?$j!"%W%m%0%i%`$ruBV$K4Y$i$;$k$3$H$,2DG=$G$"$k!#0[>o$KD9$$(B GET $BMW5a(B (8000 $B%P%$%H$h$j$bBg$-$$(B) $B$r%5!<%P$KAw$k$3$H$K$h$C$F!"1~Ez$rDd;_(B $B$G$-$k$N$G$"$k!#DL>o$N5!G=$r2sI|$9$k$K$O:F5/F0$,I,MW$G$"$k!#(B 10. NetZero ZeroPort 3.0 Weak Encryption Method Vulnerability BugTraq ID: 1483 $B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B $B8xI=F|(B: 2000-07-18 $B4XO"$9$k(B URL: http://www.securityfocus.com/bid/1483 $B$^$H$a(B: Netzero $B$O!"L5NA$N%$%s%?%M%C%H%5!<%S%9%W%m%P%$%@$G$"$j!"$=$N%f!<%6$O!"(B $B%M%C%H%o!<%/$K%m%0%$%s$9$k$?$a$K(B ZeroPort $B$H$$$&%"%W%j%1!<%7%g%s$r$H%Q%9%o!<%I$O(B id.dat $B$H$$$&%F%-%9%H%U%!(B $B%$%kCf$K%m!<%+%k$KJ]B8$5$l!"ITE,@Z$J0E9f$G0E9f2=$5$l$k!#(BSave Password $B%*%W%7%g%s$,MxMQ$5$l$k>l9g$K$O!"(Bjnetz.prop $BCf$K$b5u$H(B $B%Q%9%o!<%I$,J]B8$5$l$k!#(B $B0-0U$r;}$C$?%f!<%6$,A0=R$N%U%!%$%k$K%"%/%;%9$7$?>l9g!"%f!<%6L>$H%Q%9%o(B $B!<%I$O!"(BBrian Carrier $B$K$h$C$FDs6!$5$l$?967b%D!<(B $B%k$rMQ$$$k$+!"C1=c$JCV$-49$($r$9$k$3$H$K$h$C$FI|9f2=$G$-$k!#(B @Stake/L0pht $B%"%I%P%$%6%j$G!"(BBrian Carrier $B$O%f!<%6L>$H%Q%9%o!<%I$N2rFI(B $BJ}K!$r2r@b$7$F$$$k!#(B $B8EE5E*$J49;z0E9f$K!"J?J8$NJ8;z$H0E9fJ8$NJ8;z$H$N4V$K(B 1 $BBP(B 1 $B$GBP1~$E$1(B $B$? ? M | SP ! " # $ % & ' ( ) * + , - . / $BI=Cf$NJ8;z$O!"(BASCII $B$NJ?J8$NJ8;z$rI=$7!"(BSP $B$O%9%Z!<%9$rI=$9!#(B $BD9$5(B n $B$NJ8;zNs(B P $B$r0E9f2=$9$k$K$O!"I=Cf$G3FJ8;z$rC5$7!"$=$NNs$N:G>e9T(B $B$K$"$kJ8;z$r(B C_i $B$K!"$=$N9T$N:GA0Ns$K$"$kJ8;z$r(B C_(i+n) $B$KCV$/!#(B $B6qBNNc(B: E(a) = ag E(aa) = aagg E(aqAQ1!) = aaaaaagTf7QM E(`abcdefghijklmno) = 1aMQf7gT94LWe6yCgggggggggggggggg $BD9$5(B 2n $B$NJ8;zNs(B C $B$rJ#9g2=$9$k$K$O!">e$NI=$G!"(BC_i $B$r:G>e9T$+$i!"(B C_(i+n) $B$r:GA0Ns$+$iC5$7!"$=$N8rE@$K$"$kJ8;z$GCV$-49$($k!#(B $B6qBNNc(B: D(af) = A D(aaff) = AA D(aaMMQQfgfgfg) = AaBbCc 11. Univ. of Washington pop2d Remote File Read Vulnerability BugTraq ID: 1484 $B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B $B8xI=F|(B: 2000-07-14 $B4XO"$9$k(B URL: http://www.securityfocus.com/bid/1484 $B$^$H$a(B: ipop2d $B$N(B 4.55 $B0J9_$N0lO"$N%P!<%8%g%s$K$O!"e$G(B pop $B%"%+%&%s%H$r$b$D%f!<%6$J$i!"%U%!%$%k%7%9%F%`>e$NFI$_(B $B9~$_8"8B$,$J$s$G$"$l%U%!%$%k$r;2>H2DG=$H$J$k!#(Bshell $B$rMxMQ$G$-$k%"%+%&(B $B%s%H$K$O$3$Ne$G$Ne$NB>$N%f!<%6$K$D$$$F$N>pJs$rC%pJs$r3+<($7$F$7$^$&$+$b$7$l$J$$!#(B $B$3$l$O@x:_E*$K!"$=$N%^%7%s$N$h$j=EMW$J;q8;$X%"%/%;%9$9$k$?$a$KMQ$$$i$l(B $B$k2DG=@-$,$"$k!#(B $B$3$Ne$N%"%+%&%s%H$r;}(B $B$?$J$1$l$P$J$i$J$$!#$3$N%"%+%&%s%H$O(B shell $B$X$N%"%/%;%9$OI,MW$J$$!#(B ipop2d $B$H(B imap $B%Q%C%1!<%8$O!"B?e$G&firstname=&lastname=&course_id=&password1=&password2= $B0J2<$N(B URL $B$G$O!"%f!<%6$N>uBV$r(B Student ($BCM$O(B "S")$B!"(BTeacher Assistant ($BCM$O(B "T")$B!"(BInstructor ($BCM$O(B "G") $B$N$$$:$l$K$G$bJQ99$G$-$k!#(B http://target/bin/common/user_update_admin.pl?user_id=&course_id=&role=&available_ind=Y 14. O'Reilly WebSite 'webfind.exe' Buffer Overflow Vulnerability BugTraq ID: 1487 $B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B $B8xI=F|(B: 2000-07-19 $B4XO"$9$k(B URL: http://www.securityfocus.com/bid/1487 $B$^$H$a(B: O'Reilly WebSite Professional $B$O!"(BO'Reilly & Associates $B$,G[I[$9$k(B web $B%5!<%P%Q%C%1!<%8$G$"$k!#$3$N(B web $B%5!<%P$N$"$k%P!<%8%g%s(B (2.X$B$N0lO"$N%P(B $B!<%8%g%s(B) $B$O!"%j%b!<%H$+$i%P%C%U%!%*!<%P!<%U%m!<$rA0$N8!:w%(%s%8%s$G$"$k!#$3$N%W%m%0%i%`$O!"%j%b!<%H%f!<%6$,$=$N(B $B%5!<%P>e$GG$0U$N%3%^%s%I$re=q$-$5$l$kLdBj$NJQ?t$O!"(B $B%f!<%6$,8!:w$9$k(B'keywords'$B$+$iGI@8$9$k(B QUERY_STRING $B$G$"$k!#(B 15. Microsoft IIS 4.0/5.0 Source Fragment Disclosure Vulnerability BugTraq ID: 1488 $B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B $B8xI=F|(B: 2000-07-17 $B4XO"$9$k(B URL: http://www.securityfocus.com/bid/1488 $B$^$H$a(B: Microsoft IIS 4.0 $B$H(B 5.0 $B$O!"K\Mh%"%/%;%9$G$-$J$$$O$:$N%=!<%9%3!<%I$N0l(B $BIt$r8x3+$7$F$7$^$&!#$3$l$O4{CN$N(B.asp ($B$b$7$/$O(B .asa$B!"(B .ini$B!"$J$I(B) $B%U%!%$(B $B%k$KBP$9$kMW5a$K(B "+.htr" $B$rIU2C$9$k$3$H$K$h$C$F9T$o$l$k!#$3$NJ8;zNs$rIU(B $B2C$9$k$3$H$K$h$C$F!"$3$NMW5a$O(B ISM.DLL $B$,=hM}$9$kMM$K$J$k$?$a!"$3$N@h$N(B $B=hM}$K$*$$$F!"(B +.htr $B$r\:Y$K$D$$$F$OL@$i$+$G$O$J$$!#(B root $B8"8B$,%^%7%s$r%7%c%C%H%@%&%s$9$k$?$a$KI,MW$H$5$l$k>l9g!"$3$NLdBj$O!"(B usermode $B%Q%C%1!<%8$N(B setuid $B%3%s%]!<%M%s%H$N(B 1 $B$D$KM3Mh$9$k2DG=@-$,$"$k!#(B $B$3$l$O!"(B'userhelper'$B%W%m%0%i%`Cf$K$bLdBj$,$"$k$3$H$r<($9$@$m$&!#(B 17. L-Soft Listserv 1.8c and 1.8d Web Archives Long QUERY_STRING Buffer Overflow Vulnerability BugTraq ID: 1490 $B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B $B8xI=F|(B: 2000-07-17 $B4XO"$9$k(B URL: http://www.securityfocus.com/bid/1490 $B$^$H$a(B: L-Soft $B$,Ds6!$9$k(B Listserv $B%Q%C%1!<%8$N(B web $B%"!<%+%$%V(B (wa, wa.exe) $B%3(B $B%s%]!<%M%s%H$K$OLdBj$,$"$k!#%^%7%s8l$N%W%m%0%i%`$r(B wa, wa.exe $B $B$HF~NO$9$k$b$N$G$"$k!#(B 18. HP JetDirect Invalid FTP Command DoS Vulnerability BugTraq ID: 1491 $B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B $B8xI=F|(B: 2000-07-19 $B4XO"$9$k(B URL: http://www.securityfocus.com/bid/1491 $B$^$H$a(B: HP JetDirect $B$N%U%!!<%`%&%'%"$K$O!"(BDoS $B967b$KBP$9$ko$N5!G=$r2sI|$9$k$K$O!"0lEY%G%P%$%9$NEE8;$r@Z$kI,MW$,$"$k!#(B 19. O'Reilly WebSite GET Buffer Overflow Vulnerability BugTraq ID: 1492 $B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B $B8xI=F|(B: 2000-07-17 $B4XO"$9$k(B URL: http://www.securityfocus.com/bid/1492 $B$^$H$a(B: O'Reilly WebSite Web $B%5!<%P$N%P!<%8%g%s(B 2.5 $B0JA0(B (2.5 $B$O4^$^$J$$(B) $B$K$O!"(B $B%P%C%U%!%*!<%P!<%U%m!<$,@8$8$k!#D9$$(B GET $BMW5a!"$b$7$/$O!"(B"Referrer" $B%/%i%$%"%s%H%X%C%@$rAw$k$3$H$K$h$C$F!"l9g!"%"%I%l%9$NLa$jCM$r=q$-49$(!"%W%m%0%i%`$re$NG$0U$N%U%!%$%k$rFI$_9~$`$?$a$K!"$3$Nl9g!"G$0U$N%U%!%$(B $B%k$K%"%/%;%9$G$-$k!#$3$Ne$G%U%!%$%k$rFI$a$k$?$a!"(B $BG$0U$N%3%^%s%I$re$GMxMQ$G$-$kB??M?t@oN,%2!<%`$G$"(B $B$k!#$3$l$O!"4D6-JQ?t$N(B DISPLAY $B$d(B USER $B$N%9%?%C%/%*!<%P!<%U%m!<$5$;$k$b(B $B$N$r4^$a$?B??t$N%P%C%U%!%*!<%P!<%U%m!<$N4m81@-$rUT$s$G$$$k!#(B Redhat Linux$B$N(B Xconq $B%Q%C%1!<%8$O!"967be$K$J$kJ8;zNs$rF~NO$9$k$3$H$K$h$C$F!"%"%W%j%1!<%7%g(B $B%s$r%/%i%C%7%e$5$;$?$j!"F~NO$7$?%G!<%?$K$h$kG$0U$N%W%m%0%i%`$re$N(B ACL $B$d%m!<%+%k(B $B%f!<%6$r8+$D$1$k$N$K;H$&$3$H$,$G$-$k!#(B 26. Microsoft IIS Internet IP Address Disclosure Vulnerability BugTraq ID: 1499 $B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B $B8xI=F|(B: 2000-07-13 $B4XO"$9$k(B URL: http://www.securityfocus.com/bid/1499 $B$^$H$a(B: $B%j%b!<%H%f!<%6$,!"(BHTTP 1.0 $B$KL@5-$5$l$F$$$k$,NN0h$,Dj5A$5$l$F$$$J$$4pK\(B $BG'>Z$K$h$C$F@)8B$5$l$?NN0h(B ($BLuCm(B: realm) $B$K%"%/%;%9$r;n$_$k>l9g!"(B Microsoft IIS $B$O!"$=$N%[%9%H$NFbIt(BIP $B%"%I%l%9$r4^$s$@(B Access Denied $B%(%i!<(B $B%a%C%;!<%8$rJV$92DG=@-$,$"$k!#(B IIS $B$,%U%!%$%"%&%)!<%k$d(B NAT $B$N8e$m$K$"$k>l9g$5$(!"@5$7$$FbIt(B IP $B%"%I%l(B $B%9$r%j%b!<%H%f!<%6$K3+<($7$F$7$^$&$@$m$&!#(B $BNc(B telnet target 80 Trying target... Connected to target. Escape character is '^]'. HEAD /directory HTTP/1.0[CRLF] [CRLF] HTTP/1.1 401 Access Denied WWW-Authenticate: Basic realm="" Content-Type: text/html III. SECURITYFOCUS.COM NEWS AND COMMENTARY - ------------------------------------------ 1. Update: MS Battles Outlook Bug (July 19, 2000) Microsoft Explorer $B$r%"%C%W%G!<%H$9$l$P!"EE;R%a!<%k5/8;$NBg:.Mp$r0z$-5/(B $B$3$962$l$N$"$k?7$7$/H/8+$5$l$?(B Outlook $B$N%;%-%e%j%F%#%[!<%k$r:I$2$k!#(B http://www.securityfocus.com/news/62 2. Outlook Bug Exposes Net (July 18, 2000) $B$$$?$k$H$3$m$G;H$o$l$F$$$k(B Microsoft $B@=$N%a!<%k%W%m%0%i%`$N5pBg$J%;%-%e(B $B%j%F%#%[!<%k$,EE;R%a!<%k5/8;$NBg:.Mp$r0z$-5/$3$7$&$k!#(B http://www.securityfocus.com/news/61 3. Hacking "Survivor" (July 23, 2000) "Survivor" $B$NHkL)$rK=O*$7$?%/%i%C%+!<$r(B CBS $B$,HsFq!#H`$i$O!"$=$NEg$+$i(B Web $B%A!<%`$r0z$-N%$9$h$&EjI<$9$Y$-$+(B? ($BLuCm(B: $B86J8$G$O(B hack, hacking $B$H$$$&8l6g$,MQ$$$i$l$F$$$^$9$,!"0-0U$"$k(B $B9TF0$O(B hack $B$G$O$J$$$H$$$&Lu>N$rJQ99$7!"(B $B0[>o$JD9$5$N(B MIME $B%X%C%@%U%#!<%k%I$rC;$/@07A$7$?$j!"(BJavascript $B$H(B Java $B$r;HMQ$G$-$J$$$h$&$K$7$F(B HTML $B$r0BA4$K$7$?$j$7$^$9!#$3$N%=%U%H%&%(%"$G(B $B$O!"0lEY$@$12rAw$5$l$k%a%C%;!<%8$r8!::$9$k3+H/HG$N%5%]!<%H$,2C$($i$l$^$7$?!#(B $B%P%0$,=$@5$5$l!"$^$?=*N;%3!<%I$b$h$j0UL#$"$k$b$N$K$J$j$^$7$?!#(B 2. Narrow Security Scanner (Unix/Perl) $B:n URL: http://www.securityfocus.com/data/tools/pscan.tar.gz C $B%W%m%0%i%`Cf$N30It$+$i967b$K;H$o$l$k%P%C%U%!%*!<%P!<%U%m!<$KK0$-K0$-(B $B$7$F$$$^$;$s$+(B? $B$h$/$"$k4V0c$$$rHr$1$k$?$a$K%=!<%9%3!<%I$r4F;k$7$?$$$G(B $B$9$+(B? $B$=$s$J$"$J$?$K$O(B PScan $B$G$9!#(B What PScan $B$N5!G=(B: printf $B7?$N4X?t$GLdBj$K$J$j$($kMxMQ$,$"$k$+$I$&$+(B C $B8@8l$N%=!<%9%U%!(B $B%$%k$r8!::$7$^$9!#(B $BNc(B: sprintf(buffer, variable); Bad! Possible security breach! sprintf(buffer, "%s", variable); Ok 4. AntiVirus eXpert 2000 Desktop (Windows 95/98, Windows 2000/NT) $B:ne$N%3%s%T%e!<%?%&%#%k%9$r9b@:EY$G8!=P$G$-$^$9!#CxL>$J05=L%"!<%+%$%V(B $B$NFbMF$bD4$Y$k$3$H$,$G$-$^$9!#46@w$7$?%U%!%$%k$K%"%/%;%9$9$kA0$KoCs%b%8%e!<%k$,$"$j$^$9!#$I$s$J%a!<%k%/%i%$%"%s%H$K$bBP1~$9$k(B Mail Monitor $B5!G=$,$"$j$^$9!#<+F0E*$K$5$l$F$$$J$$(B ActiveX $B$,2AHG$K$O@55,HG$N5!G=$r$9$Y$F4^$_$^$9!#(B 5. Big Brother 1.4h2 (Unix and Windows NT) $B:npJs$,$?$@=8$a$i$l!"%G%P%$%9$,>p(B $BJsDs6!$9$k(B SNMP $B$H$O0c$$!"(BBig Brother $B$O3F%m!<%+%k%7%9%F%`$,<+?H$N>pJs(B $B$rCf1{$K%V%m!<%I%-%c%9%H$7$^$9!#F1;~$K!"(BBig Brother $B$O$9$Y$F$N%M%C%H%o(B $B!<%/$K$D$J$,$l$?%7%9%F%`$KCf1{$+$i>pJs$r=8$a$K9T$-$^$9!#$3$l$O3W?7E*$J(B $B%M%C%H%o!<%/4F;k$N9b$$8zN($H>iD9$JJ}K!$rDs6!$7$^$9!#(B 1.3b $B$+$i(B 1.4h1$B$^$G$N%P!<%8%g%s$N(B BBDISPLAY $B$r;H$&:]$N%P%0$,=$@5$5$l$F(B $B$$$^$9!#(B 6. beecrypt 1.0.2 (Unix, Windows 2000/NT, and Windows 95/98) $B:n$J%"%k%4(B $B%j%:%`$N&MQL\E*$N$I$A$i$G$b%U%j!<$G;H$&$3$H$,$G(B $B$-$^$9!#(BBeeCrypt $B$NMxMQ$K$OFC5v$NLdBj$bCx:n8"$NLdBj$b$"$j$^$;$s!#%i%$%V(B $B%i%jCf$N9=B$$O!"(BJava $B$d$=$N%;%-%e%j%F%#$d0E9f%/%i%9$H8r49$G$-$k$h$&$K$J(B $B$C$F$$$^$9!#(BWindows 2000 $B$N%(%s%H%m%T!<%P%0$,=$@5$5$l$^$7$?!#$h$jM%$l$?(B sparc v9 $B$N%"%;%s%V%i%3!<%I$,IU$12C$($i$l$^$7$?!#(B - -- Translated by SAKAI Yoriyuki, KAGEYAMA Tetsuya Little eArth Corporation - LAC Co., Ltd. http://www.lac.co.jp/security/ -----BEGIN PGP SIGNATURE----- Version: PGP for Personal Edition 5.5.5J iQA/AwUBOYE6vZQwtHQKfXtrEQLOWACg0V5qzytScHdcIRu+IeWGGMptBxUAniSH KrJLcF2CgbK207TaC/GvyzNJ =7UUf -----END PGP SIGNATURE-----