SecurityFocus.com Newsletter #68 2000-11-17->2000-11-23

To: BUGTRAQ-JP@SECURITYFOCUS.COM
Subject: SecurityFocus.com Newsletter #68 2000-11-17->2000-11-23
From: SAKAI Yoriyuki <sakai@LAC.CO.JP>
Date: Tue, 28 Nov 2000 16:36:40 +0900
Reply-To: SAKAI Yoriyuki <sakai@LAC.CO.JP>
Sender: BUGTRAQ-JP List <BUGTRAQ-JP@SECURITYFOCUS.COM>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

$B:d0f(B@$B%i%C%/$G$9!#(B

SecurityFocus.com Newsletter $BBh(B 68 $B9f$NOBLu$r$*FO$1$7$^$9!#(B
$BLu$N$J$$9`L\$K$D$$$F$O!VF|K\8lLu$J$7!W$H$7$F6hJL$7$F$"$j$^$9!#(B

- --------------------------------------------------------------------------
SecurityFocus.com Newsletter $B$K4X$9$k(BFAQ:
<URL: http://www.securityfocus.com/forums/sf-news/faq.html>
BugTraq-JP $B$K4X$9$k(B FAQ:
<URL: http://www.securityfocus.com/forums/bugtraq-jp/faq.html>
- --------------------------------------------------------------------------
$B0zMQ$K4X$9$kHw9M(B:
$B!&$3$NOBLu$O(B Security-Focus.com $B$N5v2D$r3t<02qe$G9T$o(B
  $B$l$F$$$^$9!#(B
$B!&(BSecurityFocus.com Newsletter $B$NOBLu$r(B Netnews, Mailinglist,
  World Wide Web, $B=q@R(B, $B$=$NB>$N5-O?G^BN$G0zMQ$5$l$k>l9g$K$O%a!<%k$N(B
  $BA4J80zMQ$r$*4j$$$7$^$9!#(B
$B!&F|K\8lHG%K%e!<%9%l%?!<(B 1 $B9f$+$i(B 3 $B9f$^$G$K$O$3$NHw9M$,IU$$$F$$$^$;(B
  $B$s$,=`MQ$9$k$b$N$H$7$^$9!#(B
$B!&$^$?!"(BSecurity-Focus.com $BDs6!$N(B BugTraq-JP $B%"!<%+%$%V(B [*1] $B$X$N$$$+(B
  $B$J$k7A<0$N%O%$%Q!<%j%s%/$b>e5-$K=`$8$F$/$@$5$$!#(B
1) <URL http://www.securityfocus.com/templates/archive.pike?list=79>
- --------------------------------------------------------------------------
- --------------------------------------------------------------------------
$B$3$NOBLu$K4X$9$kHw9M(B:
$B!&$3$NOBLu$NE,MQ@.2L$K$D$$$F3t<02ql9g!"(BBUGTRAQ-JP $B$X(B Errata $B$H$7$F=$@5(B
  $BHG$r$4Ej9FD:$/$+!"Lul9g$K$O=$@5HG$r$G$-$k$@$1?WB.$KH/9T$7$^$9!#(B
- --------------------------------------------------------------------------
- --------------------------------------------------------------------------
$B86HG(B:
Message-ID:  <Pine.GSO.4.21.0011270824500.14750-100000@mail>
Date:         Mon, 27 Nov 2000 08:28:32 -0800

SecurityFocus.com Newslettr #68
- -------------------------------

I. FRONT AND CENTER($BF|K\8lLu$J$7(B)
II. BUGTRAQ SUMMARY
     1. AT&T WinVNC Remote Desktop Default Configuration Vulnerability
     2. NetcPlus SmartServer3 Weak Encryption Vulnerability
     3. CGIForum Arbitrary File Disclosure Vulnerability
     4. NetcPlus BrowseGate Weak Encryption Vulnerability
     5. NetcPlus SmartServer3 DoS Vulnerability
     6. Koules Svgalib Buffer Overflow Vulnerability
     7. Oracle cmctl Buffer Overflow Vulnerability
     8. Adcycle Password Disclosure Vulnerability
     9. Unify eWave ServletExec JSP Source Disclosure Vulnerability
     10. BB4 Big Brother Multiple CGI Vulnerabilities
     11. Ethereal AFS Buffer Overflow Vulnerability
     12. Microsoft Windows 2000 Domain Account Lockout Bypass Vulnerability
     13. FreeBSD ppp deny_incoming Vulnerability
     14. NCSA HTTPd campas sample script Vulnerability
     15. Microsoft Windows Media Player .WMS Arbitrary Script Vulnerability
     16. Microsys CyberPatrol Insecure Registration Vulnerability
     17. IE 5.5 Index.dat Vulnerability
     18. Software602 602Pro LAN SUITE Buffer Overflow Vulnerability
     19. Microsoft Windows Media Player .ASX Buffer Overflow Vulnerability
     20. Balabit syslog-ng Incomplete Priority String Remote DoS Vulnerability
     21. HP EMS Arbitrary File Permission Change Vulnerability
     22. Quikstore Plaintext Administrator Password Vulnerability
     23. elvis-tiny File Overwrite Vulnerability
     24. Phorum PHP Source Disclosure Vulnerability
     25. Caucho Technology Resin 1.2 JSP Source Disclosure Vulnerability
     26. Microsoft NT 4.0 SynAttackProtect Denial of Service Vulnerability
     27. IBM HTTP Server Denial of Service Vulnerability
     28. Linux modprobe Buffer Overflow Vulnerability
     29. Alladin Ghostscript Symlink Vulnerability
     30. Alladin Ghostscript Arbitrary Shared Library Usage Vulnerability.
     31. Linux rcp Possible Local Arbitrary Command Execution Vulnerability
     32. Network Associates WebShield SMTP Content Filter Bypass Vulnerability
III. SECURITYFOCUS.COM NEWS ARTICLES
     1. Report: Carnivore Needs Work
     2. eBay Pulls Mitnick Memorabilia
IV.SECURITY FOCUS TOP 6 TOOLS
     1. Astaro Security Linux 1.715
     2. BUGS 4.0.0
     3. SILC (Secure Internet Live Conferencing) 20001124
     4. Bcrypt 4.0
     5. GuardDog 0.9.3
     6. IP Accounting Daemon 1.0

I. FRONT AND CENTER($BF|K\8lLu$J$7(B)
- ---------------------------------

II. BUGTRAQ SUMMARY
- -------------------

1. AT&T WinVNC Remote Desktop Default Configuration Vulnerability
BugTraq ID: 1961
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2000-11-19
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/1961
$B$^$H$a(B:

AT&T Labs Cambridge $B$+$iDs6!$5$l$F$$$k(B AT&T WinVNC (Virtual Network Computing)
$B$O%U%j!<%&%'%"%Q%C%1!<%8$G$"$j!"4{B8$N(BPC$B$N%G%9%/%H%C%W2hLL$r%j%b!<%H$+$i(B
$BMxMQ$G$-$k$h$&$K$9$k%=%U%H%&%'%"$G$"$k!#(B

$B$3$N%=%U%H%&%'%"$N%$%s%9%H!<%k2aDx$N%G%U%)%k%H>uBV$G$O!"%j%b!<%H$N967b(B
$BpJsEy$,B>$N@_Dj>pJs$H6&$K4^$^$l$F$$$k!#(B
$B%G%U%)%k%H>uBV$G!"$3$N%-!<$O(B Administrator $B$H(B SYSTEM $B%"%+%&%s%H$,%U%k(B
$B%3%s%H%m!<%k8"8B$r;}$A!"(BEverybody $B%"%+%&%s%H$,FCJL$N8"8B(B($BFI$_=P$7$*$h(B
$B$SJQ99(B)$B$r;}$D$h$&$K%$%s%9%H!<%kCf$K:n@.$5$l$k!#$J$*!"(BWindows 2000 $B$K$*(B
$B$$$F$O$3$N%-!<$O(B Standard User $B8"8B$r;}$A!"F1MM$NLdBj$r0z$-5/$3$;$k;v$r(B
$BN10U$5$l$?$$!#(B

$B%j%b!<%H$N967br7o$rA0Ds$K$7$?>l9g(B($B%Q%9%o!<%I$NCM$r6u$K$7!"(BAuthRequired$B%-!<$r(B0$B$K$9$k(B)$B!"(B
$B%?!<%2%C%H$H$J$k%3%s%T%e!<%?$O%l%8%9%H%j$X$N%"%/%;%98"8B$K4X$9$k%Q%C%A(B
$B$rE,MQ$7$F$$$J$$(B Windows NT 4.0 $B$,F0:n$7$F$$$k%7%9%F%`$G$"$kI,MW$,$"$k!#(B
$B%?!<%2%C%H$K%Q%C%A$,E,MQ$5$l$F$$$k>l9g!"$"$k$$$O(B Windows 2000 $B$,%?!<%2%C(B
$B%H$G$"$k>l9g!"(BAdministrator $B8"8B!"$"$k$$$O%M%C%H%o!<%/1[$7$KF1MM$N%"%/(B
$B%;%98"8B$rl9g!"%j%b!<%H$N967b2. NetcPlus SmartServer3 Weak Encryption Vulnerability
BugTraq ID: 1962
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: 2000-11-18
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/1962
$B$^$H$a(B:

SmartServer3 $B$O>.5,LO%M%C%H%o!<%/8~$1$NEE;R%a!<%k%5!<%P$G$"$k!#(B

$B$3$N%=%U%H%&%'%"$K$OG'>Z:Q$_$N%f!<%6$,B>$N%f!<%6$N%m%0%$%s>pJs$r;2>H$G(B
$B$-$F$7$^$$!"%Q%9%o!<%I>pJs$X$N%"%/%;%9$N2DG=@-$,$"$k$H$$$&@_7W>e$N8m$j(B
$B$,B8:_$7$F$$$k!#%G%U%)%k%H%$%s%9%H!<%k>uBV$G$O!"(BC:\ProgramFiles\smartserver3
$B%G%#%l%/%H%j$K@_Dj%U%!%$%k(B dialsrv.ini $B$H6&$K%$%s%9%H!<%k$5$l$k!#(B
$B$3$N@_Dj%U%!%$%k$O$9$Y$F$N(B Windows $B4D6-$G$NG'>Z$KDL$C$?%f!<%6$+$i%"%/(B
$B%;%92DG=$G$"$j!"0E9f2=:Q$_$N%Q%9%o!<%I$r4^$`>\:Y$J%f!<%6$N%m%0%$%s>pJs(B
$B$r4^$s$G$$$k!#$7$+$7!"$3$N%=%U%H%&%'%"$O%5!<%I%Q!<%F%#%f!<%F%#%j%F%#$r(B
$BMQ$$$k$3$H$GMF0W$KI|9f2DG=$J0E9f2=l9g!"8"8B$,I,MW$J%G!<%?$X$NIT@5%"%/%;%9(B
$B$,2DG=$G$"$k!#(B

$B0J2<$O(B Steven Alexander <steve@cell2000.net> $B$K$h$k@_Dj%U%!%$%kFb$G$N(B
$B%f!<%6%m%0%$%s>pJs$NC5::Nc$G$"$k!#(B

[USER1]
realname=Carl Jones
id=Carl
dir=CARL
pw=~:kC@nD3~:
extml=0
alertport=
alert=
UserActive=1
MailLimit=0
MailMAxWarn=0
MailMaxSize=20


3. CGIForum Arbitrary File Disclosure Vulnerability
BugTraq ID: 1963
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2000-11-20
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/1963
$B$^$H$a(B:

DCForum $B$O(B Markus Triska $B$N&6HMQ(B CGI $B%9%/%j%W%H$G$"$j!"(BWeb $B$r(B
$BMxMQ$7$?MxMQ$7$d$9$$%9%l%C%IIU$-$N%G%#%9%+%C%7%g%s%\!<%I5!G=$rDs6!$9$k(B
$B%=%U%H%&%'%"$G$"$k!#(B

$B$3$N%9%/%j%W%H$O(B thesection $BJQ?t$K%f!<%6$+$iM?$($i$l$?FbMF$K$D$$$F$N%A%'%C(B
$B%/$,ITE,Ev$G$"$k!#$3$N$?$a!"967bl9g!"%9%/%j%W%H$O;XDj$5$l$?%U%!%$%k$rC5$9$?(B
$B$a$K!"%"%W%j%1!<%7%g%s$N$?$a$NDL>o$J%G%#%l%/%H%j9=B$$rAL$l$F$7$^$&$N$G(B
$B$"$k!#$3$N7k2L!"%j%b!<%H$+$i%[%9%H>e$K$"$k(B nobody $B%f!<%6$GFI$_=P$72DG=(B
$B$J0U?^$9$k%U%!%$%k$r;2>H2DG=$G$"$k!#(B

4. NetcPlus BrowseGate Weak Encryption Vulnerability
BugTraq ID: 1964
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: 2000-11-18
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/1964
$B$^$H$a(B:

BrowseGate $B$OB?$/$NI8=`E*$J%W%m%H%3%k$r%5%]!<%H$7$F$$$k%W%m%-%7%5!<%P(B
$B$G$"$k!#(B

$B$3$N%=%U%H%&%'%"$K$OG'>Z$rDL$C$?%f!<%6$,B>$N%f!<%6$N0E9f2=$5$l$?%Q%9%o!<(B
$B%I$r;2>H$G$-$F$7$^$($k$H8@$&@_7W>e$N8m$j$,$"$k!#%G%U%)%k%H%$%s%9%H!<%k(B
$B>uBV$G!"$3$N%=%U%H%&%'%"$O(B C:\ProgramFiles\browsegate $B%G%#%l%/%H%j$X!"(B
$B@_Dj%U%!%$%k(B brwgate.ini $B$H6&$K%$%s%9%H!<%k$5$l$k!#(B
$B$3$N@_Dj%U%!%$%k$O$9$Y$F$N(B Windows $B4D6-$G$NG'>Z$KDL$C$?%f!<%6$+$i%"%/(B
$B%;%92DG=$G$"$j!"0E9f2=:Q$_$N%Q%9%o!<%I$r4^$s$G$$$k!#(B
$B%Q%9%o!<%I$O$3$N%U%!%$%k$N(B scrnsze $B%U%#!<%k%I$KB8:_$9$k!#$7$+$7!"0E9f2=(B
$Bl9g!"8D?M>pJs$X$NIT@5%"%/%;%9$,0z$-5/$3(B
$B$5$l$k2DG=@-$,$"$k!#(B

5. NetcPlus SmartServer3 DoS Vulnerability
BugTraq ID: 1965
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2000-11-18
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/1965
$B$^$H$a(B:

SmartServer3 $B$O>.5,LO%M%C%H%o!<%/8~$1$NEE;R%a!<%k%5!<%P$G$"$k!#(B

$B$3$N%=%U%H%&%'%"$G$O(B POP3 $B$*$h$S(B SMTP $B%5!<%S%9$,Ds6!$5$l!"(BDoS $B>uBV$K4Y(B
$B$kLdBj$rJz$($F$$$k!#DL>o$"$jF@$J$$D9$$J8;zNs$r(B POP3 $B%5!<%S%9$X(B USER$B!"$"(B
$B$k$$$O(B PASS $B%3%^%s%I$X$N0z?t$H$7$FM?$($?>l9g!"%5!<%P$N%5!<%S%9$O1~Ez$r(B
$BDd;_$7!"?7$7$$%3%M%/%7%g%s$N3NN)$rDd;_$7$F$7$^$&!#$^$?!"DL>o$"$jF@$J$$(B
$BD9$$J8;zNs$r(B SMTP $B%5!<%S%9$X(B HELO $B%3%^%s%I$KB3$1$FM?$($?>l9g$K$b!"%5!<(B
$B%P$N%5!<%S%9$O1~Ez$rDd;_$7!"?7$7$$%3%M%/%7%g%s$N3NN)$ODd;_$7$F$7$^$&!#(B
$B$I$A$i$N>l9g$G$"$C$F$b!"DL>oF0:n$X$NI|5l$O%5!<%P%5!<%S%9<+BN$N:F5/F0$,(B
$BI,MW$G$"$k!#(B

$B$3$NLdBj$rFM$$$?967b$,@.8y$7$?>l9g!"0U?^E*$J%3%^%s%I$,6. Koules Svgalib Buffer Overflow Vulnerability
BugTraq ID: 1967
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: 2000-11-20
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/1967
$B$^$H$a(B:

Koules $B$O(B Jan Hubicka $B$No0lHL%f!<%6$K$h$C$F%3%s%=!<%k>e$Gl9g!"(Broot $B8"8B$NC%7. Oracle cmctl Buffer Overflow Vulnerability
BugTraq ID: 1968
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: 2000-11-20
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/1968
$B$^$H$a(B:

cmctl $B$O!!(BOracle 8i $B%$%s%9%H!<%k%W%m%0%i%`Fb$N(B Connection Control Manager
$B$G$"$k!#$3$N%=%U%H%&%'%"$O8"8B$r>:3J$5$;$F$7$^$($kLdBj$rJz$($F$$$k!#(B

$BLdBj$O%f!<%6$,M?$($?%3%^%s%I%i%$%s0z?t$N(B cmctl $B$N$NCM$r>e=q$-$7$F$7$^$&$N$G$"$k!#(B($BNc$($P%j%?!<%s%"%I%l%9$,$=(B
$B$l$G$"$k(B)

$B$3$N7k2L!"%f!<%6$,M?$($?%7%'%k%3!<%I$N8. Adcycle Password Disclosure Vulnerability
BugTraq ID: 1969
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2000-11-20
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/1969
$B$^$H$a(B:

Adcycle $B$O(B Adcycle.com $B$+$iDs6!$5$l$F$$$k%P%J!<9-9p4IM}%D!<%k$G$"$k!#(B
$B$3$N%=%U%H%&%'%"$O(B MySQL $B%G!<%?%Y!<%9$K!"%/%j%C%/2DG=$J9-9p%P%J!<$r4IM}(B
$B$7!"I=<($G$-$k$h$&$K$9$k$?$a$K@\B3$5$l$F$$$k!#(B

$B%$%s%9%H!<%k;~$K!"$3$N%=%U%H%&%'%"$O%G!<%?%Y!<%9@_DjMQ$N%9%/%j%W%H(B build.cgi
$B$,%j%b!<%H$N%f!<%6$KBP$7$F$G$b%"%/%;%92DG=$JMM$K8"8B$rM?$($?$^$^$K$7$F(B
$B$$$k!#$3$N%9%/%j%W%H$O(B Adcycle $B$N(B MySQL $B%G!<%?%Y!<%9$X@\B3$9$k$?$a$N@_(B
$BDj$rJd=u$9$k$h$&$K@_7W$5$l$F$$$k!#(B

$B$3$N5!G=$N0lIt$H$7$F!"(Bbuid.cgi $B$O@5$7$$4IM}o!"$3$N%9%/%j%W%H$O%$%s%9%H!<%k$N40N;A0$KMxMQ$G$-$J$$>uBV$K$5$l$k!#(B
$B$7$+$7!"%$%s%9%H!<%k@h$N(B httpd $B$N%W%m%;%9$K$h$C$Fl9g!"(BAdCycle $B%F!<%V%k$NFbMF$O(B
$B>C5n$5$l$F$7$^$&!#$3$l$O%G!<%?$NB;<:!"$"$k$$$O(B DoS $B$r>7$/!#(B

9. Unify eWave ServletExec JSP Source Disclosure Vulnerability
BugTraq ID: 1970
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2000-11-21
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/1970
$B$^$H$a(B:

Unify eWave ServletExec $B$OCxL>$J(B Web $B%5!<%P!"Nc$($P(B Microsoft IIS$B!"(BApache$B!"(B
Netscape Enterprise Server$BEy$X$N(B Java/Java Servlet $B%(%s%8%s$rDs6!$9$k%W(B
$B%i%0%$%s$G$"$k!#(B

ServletExec $B$O(B HTTP $B%j%/%(%9%H$K0J2<$K<($9J8;zNs$N(B1$B$D$,IU2C$5$l$?>l9g!"(B
JSP $B%U%!%$%k$N%=!<%9%3!<%I$rJV$7$F$7$^$&!#(B

.
%2E
+
%2B
\
%5C
%20
%00

$BNc$($P!"0J2<$N(B URL $BI=5-$K$h$C$F!";XDj$5$l$?(B JSP $B$N%=!<%9$rF~http://target/directory/jsp/file.jsp.

$B$3$NLdBj$rFM$$$?967b$,@.8y$7$?>l9g!"(BJSP $B$G:n@.$5$l$?%Z!<%8$K4^$^$l$k=E(B
$BMW$J>pJs$,8x3+$5$l$F$7$^$&2DG=@-$,$"$k!#(B

10. BB4 Big Brother Multiple CGI Vulnerabilities
BugTraq ID: 1971
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2000-11-20
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/1971
$B$^$H$a(B:

BB4 Technologies $B$+$iDs6!$5$l$F$$$k(B Big Brother Network Monitor $B$O6/?Y(B
$B$G!"B?5!G=$J%M%C%H%o!<%/%b%K%?%j%s%0%Q%C%1!<%8$G$"$k!#$7$+$7!"%j%b!<%H(B
$B$+$i%"%+%&%s%H$NM-L5$rD4::$G$-$F$7$^$($kLdBj$,B8:_$9$k!#(B

$BLdBj$O$3$N%=%U%H%&%'%"$K4^$^$l$k!"(BBig Brother Display Server$B>e$GF0:n$9(B
$B$k(B CGI $B%Q%C%1!<%8$KB8:_$9$k!#(BCGI $B$O%5!<%P>e$G%M%C%H%o!<%/$N>uBV$NE}7W$r(B
$BF@$k$?$a$KMxMQ$5$l!"(BWeb $B%V%i%&%67PM3$G%"%/%;%92DG=$J%$%s%?%U%'!<%9$rDs(B
$B6!$7$F$$$k!#$7$+$7!"F~NOCM$KBP$9$ke$GF0:n$9$k(B CGI $B%W%m(B
$B%0%i%`$rMxMQ$7$FC5$k;v$,2DG=$J$N$G$"$k!#$3$N>pJs$rF~11. Ethereal AFS Buffer Overflow Vulnerability
BugTraq ID: 1972
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2000-11-18
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/1972
$B$^$H$a(B:

Ethereal $B$O(B Gerald Combs $B$Ne$NB>$NCM$r>e=q$-(B
$B2DG=$G$"$k!#$J$*!"$3$NLdBj$O0-0U$"$k%f!<%6$K$h$kCm0U?<$/AH$_N)$F$i$l$?(B
$B%Q%1%C%H$K4^$^$l$?%3!<%I$N12. Microsoft Windows 2000 Domain Account Lockout Bypass Vulnerability
BugTraq ID: 1973
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2000-11-21
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/1973
$B$^$H$a(B:

$BFCDj$N>u672<$K$*$$$F!"%Q%9%o!<%I$KBP$9$kAmEv$j967b$rKI$0$?$a$N%]%j%7$G$"(B
$B$k!"%m!<%+%k%^%7%s>e$N%I%a%$%s%"%+%&%s%H$N%m%C%/%"%&%H%]%j%7$rL58z2=$7!"(B
$B2sHr2DG=$G$"$k!#%I%a%$%s%"%+%&%s%H$N%m%C%/%"%&%H%]%j%7$NL\E*$O%m%0%$%s<:(B
$BGT$,2?EY$+B3$$$?8e!"%"%+%&%s%H$rMxMQ$G$-$J$$>uBV$K$9$k;v$G$"$k!#$b$7!"%](B
$B%j%7$,@_Dj$5$l$F$$$J$$>l9g!"%I%a%$%s%"%+%&%s%H$N%Q%9%o!<%I$O$"$k2s?t$NHO(B
$B0O$GN`?d$G$-$F$7$^$($k2DG=@-$,$"$k!#(B

Windows 2000 $B%I%a%$%s$G$O$J$$%I%a%$%sFb$KB0$9$k!"(BNTLM $BG'>Z$r;H$C$F$$$k(B
Windows 2000 $B$O%f!<%6$N%/%l%G%s%7%c%k$,%m!<%+%k$K%-%c%C%7%e$5$l$F$$$k>l9g!"(B
$B%I%a%$%s%"%+%&%s%H$N%m%C%/%"%&%H%]%j%7$N2r$H%Q%9%o!<%I$r%O%C%7%e2=$7(B
$B$F5-O?$7$F$*$j!"%I%a%$%s%3%s%H%m!<%i$,MxMQ$G$-$J$$>uBV$GG'>Z$r9T$&>uBV(B
$B$KMQ$$$i$l$k!#(BNTLM $B$rMxMQ$7$F$$$J$$(B Windows 2000 $B%7%9%F%`$GG'>Z$r9T$&>l(B
$B9g$K$O$3$NLdBj$N1F6A$rZ$,l9g!"%I%a%$%s%"%+%&%s%H$HF10l$N8"8B$r(B
$BF~Z$O%m!<%+%k$=$N$b$N$X(B
$B$NG'>Z$N0LCV$r@j$a$k;v$O$G$-$:!"%I%a%$%s%l%Y%k$G$N%m%C%/%"%&%H%]%j%7$,(B
$BA[Dj$G$-$k$?$a!"%m!<%+%k%^%7%s$=$N$b$N$X$N8BDj$5$l$?1F6A$7$+5Z$\$5$J$$!#(B

13. FreeBSD ppp deny_incoming Vulnerability
BugTraq ID: 1974
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2000-11-14
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/1974
$B$^$H$a(B:

ppp $B$O(B UNIX $B%7%9%F%`>e$G(B point-to-point $B7?%M%C%H%o!<%/@\B3$r7$-!"%2!<%H%&%'%$1[$7$NFbIt%M%C%H%o!<(B
$B%/$X$N967b$r$b$?$i$92DG=@-$,$"$k!#(B

14. NCSA HTTPd campas sample script Vulnerability
BugTraq ID: 1975
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 1997-07-15
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/1975
$B$^$H$a(B:

Campas $B$O$9$G$K5l<0$H$J$C$?(B Web $B%5!<%P%Q%C%1!<%8$G$"$k(B NCSA HTTPd $B$N(B
$B4v$D$+$N%P!<%8%g%s$K4^$^$l$k%5%s%W%k(B CGI $B%9%/%j%W%H$G$"$k!#(B
$B%9%/%j%W%H$rF1:-$7$F$$$k%P!<%8%g%s$H9M$($i$l$k%5!<%P$O!"$9$G$KJ]e$G%3%^%s%I$Nl9g!"(BWeb $B%5!<%P$r4m81$J(B
$B>uBV$KGx$7!"(BWeb $B%5!<%P$,%"%/%;%92DG=$J$$$+$J$k%U%!%$%k$,FI$_=P$72DG=$H(B
$B$J$j!"%G%#%l%/%H%j0lMw$,15. Microsoft Windows Media Player .WMS Arbitrary Script Vulnerability
BugTraq ID: 1976
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2000-11-22
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/1976
$B$^$H$a(B:

Windows Media Player $B$O%G%8%?%k%*!<%G%#%*!"%S%G%*$r;kD0$9$k$?$a$N%"%W%j(B
$B%1!<%7%g%s$G$"$k!#(B

Windows Media Player 7 $B$ruBV$Gl9g!"(BActive X $B%3%s%]!<%M%s%H(B
$B$,$$$+$J$k9T0Y$buBV$K$J$C$F$7$^$&$N$G$"$k!#%$%s%?!<%M%C%H%;%-%e(B
$B%j%F%#@_Dj$K$b0MB8$9$k$,!"$3$NLdBj$O%9%-%s$,(B Web $B%5%$%H>e$K$"$k>l9g$G$b(B
$BF1MM$N7k2L$r$b$?$i$9!#%9%/%j%W%H$O%f!<%6$,(B Web $B%5%$%H$K%"%/%;%9$7$?>l9g(B
$B$K<+F0E*$K=hM}$5$l$k!#(B

$B0U?^E*$J%9%/%j%W%H$N16. Microsys CyberPatrol Insecure Registration Vulnerability
BugTraq ID: 1977
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2000-11-22
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/1977
$B$^$H$a(B:

CyberPatrol $B$O(B Microsys $B$J(B Web $B%"%/%;%9@)8BMQ%=%U%H%&%'%"(B
$B$G$"$k!#(B

$B$3$N%=%U%H%&%'%"$N%/%i%$%"%s%H%=%U%H%&%'%"$+$i(B Microsys $BpJs$rAw$kJ}K!$K$OLdBj$,$"$j!"%j%b!<(B
$B%H$N967b\:Y$r4^$`HkL)$N>pJs$rF~pJs$r4^$`(B
$BA4$F$N>pJs$r%9%/%i%s%V%k$7$F$$$k!#$7$+$7!"%9%K%U%!$N%$%s%9%H!<%k$K$h$k(B
$BD4::$K$h$j!"%/%l%8%C%H%+!<%I>pJs0J30$NA4$F$N>pJs$OJ?J8$GpJs$rF~\:Y$K$D$$$F$O(B Reference $B%;%/%7%g%s$K$"$k%*%j%8%J%k$N(B
BugTraq $B$X$NEj9F$r;2>H$5$l$?$$(B)
$BIU$12C$($k$J$i$P!"$3$N>pJs$O%W%m%-%77?%U%!%$%d%&%)!<%k$N%m%0%U%!%$%k$r(B
$BD4$Y$k;v$K$h$C$F$bF~17. IE 5.5 Index.dat Vulnerability
BugTraq ID: 1978
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2000-11-23
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/1978
$B$^$H$a(B:

IE 5.5 ($BB>$N%P!<%8%g%s$K$bF1MM$NLdBj$,A[Dj2DG=$G$"$k(B) $B$G$O$9$G$K%"%/%;(B
$B%9$7$?(B URL $B$H%-%c%C%7%eFb$N%U%)%k%@L>$r(B index.dat $B$H8F$P$l$k%m!<%+%k$N(B
$B%U%!%$%k$K5-O?$7$F$$$k!#$3$N%U%!%$%k$O0J2<$K<($94{CN$N>l=j$K5-O?$5$l$F(B
$B$$$k!#(B

Windows 9x:
 C:/WINDOWS/Temporary Internet Files/Content.IE5/

Windows 2000:
C:/Documents and Settings/USERNAME/Local Settings/Temporary Internet Files/Content.IE5/

$B$3$N%U%!%$%k$O(B IE $B$N%;%-%e%j%F%#%a%+%K%:%`$G$O%m!<%+%k%3%s%F%s%D$H$7$F(B
$BpJs(B ($B3:Ev$9$k(B BugTraq ID $B$N(B Credit $B%;%/%7%g%s$N(B MS00-055 $B$r;2>H$5$l(B
$B$?$$(B) $B$r8x3+$7$?$,!"$7$+$7!"(BIE $B$KBP$7$FHs(B HTML $B7A<0$NJ8=q$r!"%*%V%8%'%/(B
$B%H%?%0$K$*$$$FJ8=q%?%$%W$r(B text/html$B$HDj5A$7!"(BDATA $B%U%#!<%k%I$K%U%!%$%k(B
$B$r;XDj$7$?>e$G6/@)E*$K2re5-$rMxMQ$7!"%j%b!<%H$+$i$N%3!<%I$O?.Mj$5$l$F$$$k%U%!%$%k$XCmF~2DG=$G(B
$B$"$j!"$NN`?d$r4^$`Hs>o$K(B
$BB?$/$NL\E*$KMxMQ2DG=$G$"$k!#$3$N>pJs$rMxMQ$7!"967b@7e$G2DG=$G$"$k!#(B

18. Software602 602Pro LAN SUITE Buffer Overflow Vulnerability
BugTraq ID: 1979
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2000-11-22
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/1979
$B$^$H$a(B:

602Pro LAN SUITE $B$O%M%C%H%o!<%/Fb$K%3%M%/%7%g%s!"EE;R%a!<%k!"%U%!%/%7(B
$B%_%j$N6&M-5!G=$rDs6!$9$k%"%W%j%1!<%7%g%s$G$"$k!#AH$_9~$_:Q$_$N(B HTTP $B%5!<(B
$B%P$rMxMQ$7$F%j%b!<%H$+$i$N4IM}5!G=$,MxMQ2DG=$G$"$k!#(B

602Pro LAN SUITE $B$N%j%b!<%H$+$i$N4IM}MQ%3%s%]!<%M%s%H(B (webprox.dll) $B$,(B
GET $B%j%/%(%9%H$rl9g!"%[%9%H$NA48"8B$,C%19. Microsoft Windows Media Player .ASX Buffer Overflow Vulnerability
BugTraq ID: 1980
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2000-11-22
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/1980
$B$^$H$a(B:

Windows Media Player $B$O%G%8%?%k%*!<%G%#%*!"%S%G%*$r;kD0$9$k$?$a$N%"%W%j(B
$B%1!<%7%g%s$G$"$k!#$3$N%=%U%H%&%'%"$N(B Active Stream Redirector (ASX)
$B%3%s%]!<%M%s%HFb$N%j%b!<%H$+$iF@$i$l$?%G!<%?$rI,MW$H$7$F$$$kItJ,$G0BA4(B
$B$G$O$J$$%P%C%U%!$N%3%T!<$,9T$o$l$F$$$kLdBj$,$"$k!#(B
ASX $B$O%f!<%6$K%9%H%j!<%_%s%07A<0$N%a%G%#%"$rFbIt!"$"$k$$$O30It$K$"$k%5(B
$B%$%H$+$i:F@8$G$-$k5!G=$rDs6!$7$F$$$k!#(B.ASX $B7A<0$N%U%!%$%k$O%a%?%U%!%$%k(B
$B$G$"$j!"%9%H%j!<%_%s%0%a%G%#%"$NFbMF$r%V%i%&%6$+$i(B Windows Media Player
$B$X%j%@%$%l%/%H$9$k$?$a$N$b$N$G$"$k!#(B

Windows Media Player $B$K$h$C$F2re$N%P%C%U%!$X%3%T!<$5$l$k!#$=$7$F%G!<%?$,%3%T!<(B
$B$5$l$?:]!"%G!<%?$NNL$,M=$aDj5A$5$l$?8BEYFb$KG<$^$C$F$$$k$+$I$&$+$O3N$+$a(B
$B$i$l$J$$$N$G$"$k!#$3$N7k2L!"$$$+$J$k8BEY$rD62a$7$?%G!<%?$O%a%b%jNN0h$r(B
$B1[$($F%3%T!<$5$l!"%W%m%0%i%`$N%9%?%C%/>e$K$"$k6a@\$7$?%a%b%jFbMF$r>e=q(B
$B$-$G$-$F$7$^$($k$N$G$"$k!#(B

$B%3%T!<$5$l$?FbMF$K0M$k$,!"(BDoS $B>uBV$KGx$9;v$,2DG=$G$"$j!"$"$k$$$O!"0U?^(B
$BE*$J%3!<%I$,%?!<%2%C%H$H$J$C$?%[%9%H>e$GoF0:n$X$NI|5l$O%"%W%j%1!<%7%g%s$N:F5/F0$,I,MW$G$"$k!#(B

$B%f!<%6$,0-0U$"$k(B .ASX $B7A<0$N%U%!%$%k$r%m!<%+%k$N%3%s%T%e!<%?$X8m$C$F%@(B
$B%&%s%m!<%I$7$F$7$^$C$?>l9g!"%3!<%I$rM-8z$K$9$k$?$a$K$O(B Windows Explorer
$B>e$G%U%!%$%k$r0lEY%/%j%C%/$9$k$@$1$G$h$$!#$3$l$O(B Windows Explorer $B$,%V(B
$B%i%&%:Cf$K(B Web $B%I%-%e%a%s%H$r<+F0E*$K%W%l%S%e!<$9$k$?$a$N(B Web View $B%*%W(B
$B%7%g%s$K$h$k$?$a$G$"$k!#(B($B$3$N5!G=$O%G%U%)%k%H$GM-8z$K$J$C$F$$$k(B)
$BIU$12C$($k$J$i$P!"2~cb$5$l$?(B .ASX $B7A<0$N%U%!%$%k$O(B HTML $BJ8=q$K4^$a$i$l!"(B
$B%V%i%&%6!"$"$k$$$O(B HTML $B$r2r20. Balabit syslog-ng Incomplete Priority String Remote DoS Vulnerability
BugTraq ID: 1981
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2000-11-23
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/1981
$B$^$H$a(B:

syslog-ng $B$O(B UNIX $B%7%9%F%`$N(B syslogd $B$NCV$-49$(%W%m%0%i%`$G$"$k!#%m%0%a%C(B
$B%;!<%8$NE83+4X?t$K%_%9$,$"$k$?$a!"%j%b!<%H$+$i(B SIGSEGV $B$G$N=*N;$r%m%0%a%C(B
$B%;!<%8$KFCDj$NJ8;zNs$r4^$a$k$3$H$G0z$-5/$3$72DG=$G$"$k!#(B

$B%m%0%a%C%;!<%8$K$O$=$l$>$l%W%i%$%*%j%F%#%l%Y%k$,BP1~IU$1$i$l!"M%@h=g0L(B
n $BHVL\$r<($9(B <n> $B$H8@$&=q<0$G$"$k!#%m%0%a%C%;!<%8$rE83+$9$k4X?t$O(B left
$B$H$$$&JQ?t$r%m%0%a%C%;!<%8Cf$NJ8;zNs$N8D?t$r3JG<$9$k$?$a$KMxMQ$7$F$$$k!#(B
$B$b$7%W%i%$%*%j%F%#%l%Y%k$,(B > $B$G=*$o$C$F$$$J$+$C$?>l9g!"(Bleft $B$NCM$O(B -1
$B$H!"%P%0$N$?$a$K@_Dj$5$l$F$7$^$&!#$3$N$?$a!"%W%m%0%i%`$O(B left=0 $B$H$J$k(B
$B$+$I$&$+$NI>2A$K$h$C$F%a%C%;!<%8$N=*$o$j$rH=Dj$9$k:]!"%a%C%;!<%8$N=*$o(B
$B$j$rH=FI$G$-$J$$$N$G$"$k!#(B

$B%P!<%8%g%s(B 1.4.7 $B$H(B 1.4.8 $B$K$*$$$F$OA4$F$N(B \r $B$H(B \n $B$r%9%Z!<%9$KCV$-49(B
$B$(!">e5-$NLdBj2<$G$3$NCV$-49$(=hM}$,9T$o$l$?>l9g!"%W%m%0%i%`$O%"%/%;%9(B
$BITG=$J%a%b%j$K=q$-9~$`$3$H$K$J$k$?$a!"%;%0%a%s%F!<%7%g%s%U%)%k%H$r@8$8(B
$B$k!#Nc$($P!"J8;zNs(B <6 $B$r4^$_!"(B \n $B$G=*$o$kJ8;zNs$,%m%0$X$NF~NO$K$"$k>l(B
$B9g!"(Bsyslog-ng $B$r%/%i%C%7%e$5$;$F$7$^$&!#(B

1.4.7 $B$h$j0JA0$N%P!<%8%g%s$G$bF1MM$NJ}K!$G967b2DG=$G$"$k!#$7$+$7!"8=:_(B
$B>\:Y$J>pJs$K$D$$$F$OMxMQIT2DG=$G$"$k!#(B

21. HP EMS Arbitrary File Permission Change Vulnerability
BugTraq ID: 1982
$B%j%b!<%H$+$i$N:F8=@-(B: $BL$>\(B
$B8xI=F|(B: 2000-11-21
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/1982
$B$^$H$a(B:

EMS $B$O(B Event Monitoring System $B$NF,;z8l$G!"(BHP-UX $B%7%9%F%`$N$?$a$N(B
ServiceControl $B4IM}%Q%C%1!<%8Fb$N(B 1 $B%3%s%]!<%M%s%H$G$"$k!#(B
EMS $B$O%7%9%F%`>pJs<}=8!">c328!CN!"2TF0>u67Js9p$N$?$a$KMxMQ$5$l$k!#(B

HP-UX Security Advisory HPSBUX0011-131 $B$,EA$($k$H$3$m$K$h$k$H!"(B EMS $B$K(B
$B$O!"%7%9%F%`%U%!%$%k$r07$&:]$K%m!<%+%k$+$i967b2DG=$J%;%-%e%j%F%#>e$Ne$NG$0U$N%U%!%$%k$N%Q!<%_%C%7%g%s$rJQ99$9$k$3$H$,2DG=$G$"$k!#(BHP $B$O$3(B
$B$N%Q!<%_%C%7%g%s$,@53N$K2?$G$"$k$+$r8x3+$7$F$$$J$$$,!"8"8B$N>:3J$KMxMQ(B
$B$5$l$k2DG=@-$,$"$k!#8=;~E@$G$O5;=QE*$J>pJs$N>\:Y$O8x3+$5$l$F$$$J$$!#(B

ServiceControl $B$r;HMQ$9$k(B HP-UX $B%7%9%F%`$N4IM})$5$l$F$$$k(B ($B>\:Y$O3:Ev$9$k(B BugTraq ID $B$N(B Solutions
$B%;%/%7%g%s!"$b$7$/$O%"%I%P%$%6%j$r;2>H$5$l$?$$(B)$B!#(B

22. Quikstore Plaintext Administrator Password Vulnerability
BugTraq ID: 1983
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 1999-04-20
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/1983
$B$^$H$a(B:

QuikStore $B$OCmJ84IM}!":_8K4IM}$J$I!"(BWeb $B%5%$%H$G$NEE;R>&pJs$,J]B8$5$l$F$$$k!#(B
$B8=9T$N%P!<%8%g%s$N!"FCDj$N(B QuikStore $B$K$O!"4IM}A0$H%Q%9%o!<%I$,J?(B
$BJ8$G(B quikstore.cfg $B$H$$$&L>A0$N@_Dj%U%!%$%k$KJ]B8$5$l$F$$$k!#%G%U%)%k%H(B
$B$G$N%$%s%9%H!<%k>uBV$G$O%;%-%e%"$G$J$/!"$3$N@_Dj%U%!%$%k$O$$$+$J$k8"8B(B
$B$G$bFI$_=P$72DG=$G$"$j!"%j%b!<%H$+$i$N967bA0$H%Q%9%o!<%I$rMxMQ$7(B
$B$F!"?/F~u67!">&IJ@bL@!"2A3JI=<($J$I$N>pJs$r2~$6$s$5$l!"8\5R$N(B
$B%/%l%8%C%H%+!<%IHV9f$J$I$N>pJs$,<}=8$5$l$k2DG=@-$,$"$k!#$3$N>pJs$r<9I.(B
$B;~E@$G$O!"\$G$"$k$,!"%P!<%8%g%s(B 2.10.05
$B$H(B 2.11 $B$K$O1F6A$,$J$$$3$H$,3NG'$5$l$F$$$k!#$$$+$J$k8"8B$G$bFI$_=P$72D(B
$BG=$J%U%!%$%k$K4IM}A0$H%Q%9%o!<%I$rJ]B8$9$k%$%s%9%H!<%k=hM}$K$3$N(B
$BLdBj$OM3Mh$7$F$$$k!#$3$NLdBj$OE,@Z$J%U%!%$%k$N%Q!<%_%C%7%g%s$K@_Dj$9$k(B
$B$3$H$G=$@5$9$k$3$H$,2DG=$G$"$k$,!"%Q%9%o!<%I$H%"%+%&%s%H>pJs$rJ?J8$GJ](B
$BB8$9$k$3$H$O0lHLE*$KMFG'$G$-$k23. elvis-tiny File Overwrite Vulnerability
BugTraq ID: 1984
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: 2000-09-13
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/1984
$B$^$H$a(B:

Elvis-tiny $B$O%3%s%Q%/%H$J(B vi $B8_49$N%F%-%9%H%(%G%#%?$G$"$k!#(B

$B$3$N%W%m%0%i%`$,@8@.$9$k0l;~%U%!%$%k$NL?L>5,B'$KLdBj$,$"$k$?$a!"e=q$-$r$9$k$?$a$NE,;~967b(B ($BLuCm(B: properly-timed attack) $B$r5v$7$F$7(B
$B$^$&6%9g>r7o(B ($BLuCm(B: race condition) $B$,B8:_$9$k!#1F6A$r:3J!"(BDoS$B!"%[%9%H$X$N$5$i$J$k967b$KF3$/2DG=@-$,$"$k!#(B

24. Phorum PHP Source Disclosure Vulnerability
BugTraq ID: 1985
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2000-11-23
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/1985
$B$^$H$a(B:

Phorum $B$O(B PHP $B8@8l$G5-=R$5$l$?(B Web $B>e$G%U%)!<%i%`$r9T$&$?$a$N%Q%C%1!<%8(B
$B$G$"$k!#4IM}%9%/%j%W%H$N%U%)!<%i%`%;%/%7%g%s$Ne$N$$$+$J$k(B PHP $B%9%/%j%W%H$N%=!<%9$rI=<($5$;$k$3$H$,2D(B
$BG=$G$"$k!#$3$l$O(B common.php $B%U%!%$%k$N(B 2 $B2U=j$G%U%!%$%kL>$H$7$F;2>H$5$l(B
$B$k%f!<%6F~NO$K$h$C$F2DG=$G$"$k!#0J2<$K6qBNNc$r5s$2$k!#(B

if($num || $f){
    if($f) $num=$f;
    if(file_exists("$admindir/forums/$num.php")){
      include "$admindir/forums/$num.php";
    }

$B$3$N(B $f $B$O%U%)!<%`$rDL$7$F$N%f!<%6F~NO$NFI$_=P$7$G$"$j!"A*Br$7$?%U%)!<(B
$B%i%`L>$r0UL#$9$k!#$7$+$7(B $f $B$K$O$$$+$J$kCM$bF~NO2DG=$G!"1~Ez$9$k(B PHP
$B%U%!%$%k$NFbMF$r%V%i%&%6$KI=<($7$F$7$^$&!#$3$N$?$a!"(Bmaster.php $B$KJ]B8$5(B
$B$l$F$$$k(B MySql $B$N%Q%9%o!<%I$J$I$N$h$&$J5!L)$K$7$J$1$l$P$J$i$J$$>pJs$r3+(B
$B<($7$F$7$^$&2DG=@-$,$"$k!#(B

25. Caucho Technology Resin 1.2 JSP Source Disclosure Vulnerability
BugTraq ID: 1986
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2000-11-23
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/1986
$B$^$H$a(B:

Resin $B$O(B Java $B$H(BJava $B%9%/%j%W%H$KBP1~$9$k%5!<%V%l%C%H$H(B JSP $B%(%s%8%s$G(B
$B$"$k!#(B

ServletExec $B$OFCDj$NJ8;z$rIU2C$5$l$?(B HTTP $B%j%/%(%9%H$,M?$($i$l$?:]!"(BJSP
$B%U%!%$%k$N%=!<%9%W%m%0%i%`$rJV$7$F$7$^$&!#$3$Nl9g!"(BJSP $B%Z!<%8$K4^$^$l$k5!L)$K$7$J$1$l$P$J$i$J$$>pJs$r(B
$B8x3+$7$F$7$^$&2DG=@-$,$"$k!#(B

26. Microsoft NT 4.0 SynAttackProtect Denial of Service Vulnerability
BugTraq ID: 1987
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2000-11-22
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/1987
$B$^$H$a(B:

Microsoft $B$,8x3+$7$F$$$kJ8=q!"(B"Security Considerations for Network Attacks"
(http://www.microsoft.com/TechNet/security/dosrv.asp) $B$G$O(B Windows NT
$B$r(B DoS $B967b$+$iKI1R$9$k$?$a$N:GM%NI;vNc$,<($5$l$F$$$k!#$3$NJ8>O$K$O!"%M%C(B
$B%H%o!<%/%9%?%C%/$r6/8G$K$9$k$?$a$K?d>)$5$l$F$$$k%l%8%9%H%j$N@_Dj$,B??t(B
$B5-=R$5$l$F$$$k!#?d>)$5$l$k@_Dj$N(B 1 $B$D$G$"$k(B "SynAttackProtect" $B$O(B
Windows NT $B$r%j%b!<%H$+$i967b2DG=$J(B DoS $B$KBP$7$F5ul9g!"(BWindows NT 4.0 $B$O(B DoS
$B967b$KBP$9$kl9g!"%/%i%C%7%e$7$F$7$^$&!#(B
$BDL>o$N5!G=$r2sI|$9$k$?$a$K$O:F5/F0$,I,MW$G$"$k!#(B
$B860x$K$D$$$F$N>\:Y$OITL@$G$"$k!#(B

27. IBM HTTP Server Denial of Service Vulnerability
BugTraq ID: 1988
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2000-11-23
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/1988
$B$^$H$a(B:

IBM HTTP Server $B$O(B Apache $B$r4p$K3+H/$5$l$?(B Web $B%5!<%P$G$"$k!#$3$N(B Windows
NT $B%P!<%8%g%s$K$OLdBj$,$"$k!#(B

IBM HTTP Server $B$O(B DoS $B>uBV$K4Y$k2DG=@-$,$"$k!#Ls(B 219$BJ8;z$+$i$J$kDL>o0J(B
$B>e$KD9$$(B GET $B%j%/%(%9%H$rAw?.$9$k$3$H$K$h$j!"%5!<%P$O%(%i!<%a%C%;!<%8$r(B
$B=P$7!"1~Ez$rDd;_$9$k!#DL>o$N5!G=$r2sI|$9$k$?$a$K$O%"%W%j%1!<%7%g%s$N:F(B
$B5/F0$,I,MW$G$"$k!#(B

$B$3$Nl9g!"G$0U$N%3%^%s%I$NZ$O$J$5$l$F$$$J$$!#(B

$B0J2<$O(B benjurry <benjurry@yeah.net> $B$K$h$C$FDs6!$5$l$?%(%i!<%a%C%;!<%8(B
$B$NNc$G$"$k!#(B

***STOP:0x0000001e(0X00000005,0X804B3A51,0X00000000,0X00000000)KMODE_EXCEPTION_NOT_HANDLED.
***Address 804B3A51 base at 80400000,Datastamp 384D9B17-ntoskrnl.exe

28. Linux modprobe Buffer Overflow Vulnerability
BugTraq ID: 1989
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: 2000-11-23
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/1989
$B$^$H$a(B:

Modutils $B$OB??t$N(B Linux $B%7%9%F%`$KEk:\$5$l$k%m!<%@%V%k%+!<%M%k%b%8%e!<(B
$B%k$rMxMQ$9$k$?$a$N%D!<%k$r4^$s$@%3%s%]!<%M%s%H$G$"$k!#$3$N%D!<%k$N(B 1 $B$D(B
modprobe $B$O!"(B($B%3%^%s%I%i%$%s$+$i(B) $B6!5k$5$l$?(B "$BL>A0(B"$B$KBP1~$9$k%b%8%e!<%k(B
$B$NAH$r<+F0E*$K%m!<%I$9$k!#(B

$B:G6a(B (2000 $BG/(B 11 $B7n(B 23 $BF|8=:_!"(BBugtraq ID 1936 $B$r;2>H(B) $B$N(B modprobe $B$K4^(B
$B$^$l$k@$4V$r$K$.$o$;$?$Nl9g!"967b:3J(B
$B$9$k$3$H$,2DG=$G$"$k!#(B

29. Alladin Ghostscript Symlink Vulnerability
BugTraq ID: 1990
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: 2000-11-22
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/1990
$B$^$H$a(B:

$BB??t$N%W%i%C%H%U%)!<%`$GMxMQ$G$-$k(B PostScript $B%$%s%?%W%j%s%?$G$"$k(B
Alladin Ghostscript $B$NFCDj$N%P!<%8%g%s$Ke$KB8:_$9$k%U%!%$%k$X%7(B
$B%s%\%j%C%/%j%s%/967b$rpJs(B ($BNc(B: /etc/passwd) $B$rFI$_=P$7!"$b$7$/$O>e=q$-$5$l(B
$B$k@x:_E*2DG=@-$,$"$k!#$3$N:3J!"(BDoS$B!"%?!<%2%C%H$H$J$k(B
$B%[%9%H$X$N$5$i$J$k967b$r$b$?$i$92DG=@-$,$"$k!#(B

30. Alladin Ghostscript Arbitrary Shared Library Usage Vulnerability.
BugTraq ID: 1991
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: 2000-11-22
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/1991
$B$^$H$a(B:

$BB??t$N%W%i%C%H%U%)!<%`$GMxMQ$G$-$k(B PostScript $B%$%s%?%W%j%s%?$G$"$k(B
Alladin Ghostscript $B$NFCDj$N%P!<%8%g%s$Ke$G0-0U$"(B
$B$k%W%m%0%i%`$r:3J$G$-$k2DG=@-$,$"$k!#(B

31. Linux rcp Possible Local Arbitrary Command Execution Vulnerability
BugTraq ID: 1992
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: 2000-11-22
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/1992
$B$^$H$a(B:

"remote copy" $B$NF,;z8l$G$"$k(B rcp $B$O!"(BBerkeley $BM3Mh$N(B "r-services" $B%j%b!<(B
$B%H%"%/%;%9%f!<%F%#%j%F%#$N(B 1 $B%3%s%]!<%M%s%H$G$"$k!#(B
$B$3$l$O!"(Brhosts $B$H(B hosts.equiv $BG'>Z$r$N(B OS $B$N%P!<%8%g%s$G$bF1MM$N2DG=@-$,$"$k(B) $B$K$O!"8=9T(B
$BHG$G$O$J$$8E$$(B Linux $B%7%9%F%`$dFCJL$K@_Dj$5$l$F$$$k%7%9%F%`>e$G!"%m!<%+(B
$B%k$+$i(B root $B8"8B$rC%l9g!"@\B3$rl9g!"(B
$B@\B3$r$NM-8z$H$J$C$F$$$k8"8B$H%f!<%6$Nl9g$K@\B3$r32. Network Associates WebShield SMTP Content Filter Bypass Vulnerability
BugTraq ID: 1993
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2000-11-23
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/1993
$B$^$H$a(B:

Network Associates WebShield SMTP $B$O%$%s%?!<%M%C%H%2!<%H%&%'%$$N$?$a$K(B
$B@_7W$5$l$?EE;R%a!<%k$N%&%$%k%9%9%-%c%J$G$"$k!#(B

WebShield SMTP $B$G;HMQ$5$l$k%3%s%F%s%D%U%#%k%?%j%s%0$N;EAH$_$O!"4IM}l9g!"%3(B
$B%s%F%s%D%U%#%k%?%j%s%0$r2sHr$9$k$3$H$,2DG=$G$"$k!#(B
$B$3$N1. Report: Carnivore Needs Work
$BCxJ$K$h$jDs=P$5$l$?Ap0F$K$h$k$H!"(BFBI $B$N(B"Carnivore" $B%$%s%?(B
$B!<%M%C%H4F;k%D!<%k$O0lHLE*$K$O9-9pJ*$H$7$F8+$J$5$l$k$,!"4F::5-O?$NFbMF(B
$BJd6/$dFbIt$N%;%-%e%j%F%#\:Y$,5-=R$5$l$F$*$j!"%7%9%F%`(B
$B$N2TF0$rB3$1$k$3$H$r?d>)$7$F$$$k!#$7$+$7!"Js9p=q$K$O%7%9%F%`$N?.Mj@-$H(B
$B%;%-%e%j%F%#$N$?$a$NB??t$N4+9p$,5-:\$5$l$F$$$k!#(B

http://www.securityfocus.com/templates/article.html?id=118

2. eBay Pulls Mitnick Memorabilia
$BCx&IJ$NN.$l$K=*;_Id$rBG$C$?!#(B
$BH`$OO"K.$N4F;k2<$K$"$khttp://www.securityfocus.com/templates/article.html?id=117


IV.SECURITY FOCUS TOP 6 TOOLS
- -----------------------------
1. Astaro Security Linux 1.715
(Linux)
$B:nhttp://www.astaro.com/products/download.html

Astaro Security Linux $B$O?7$?$J%U%!%$%d%&%)!<%k%=%j%e!<%7%g%s$G$9!#%9%F(B
$B!<%H%U%k%$%s%9%Z%/%7%g%s!"%Q%1%C%H%U%#%k%?%j%s%0!"%3%s%F%s%D%U%#%k%?%j(B
$B%s%0!"%&%$%k%9%9%9%-%c%K%s%0!"(BIPSec $B$rMxMQ$7$?(B VPN $B$J$I$N5!G=$rHw$($F$$(B
$B$^$9!#(BWeb $B%V%i%&%6$GMxMQ$G$-$k4IM}%D!<%k$H%$%s%?!<%M%C%H7PM3$G%"%C%W%0(B
$B%l!<%I$G$-$k$?$a!"MF0W$K4IM}$G$-$^$9!#$^$?!"$[$H$s$I$9$Y$F$N%G!<%b%s$,(B
$B%A%'%s%8%k!<%H$5$l%1%$%Q%S%j%F%#$h$jJ]8n$5$l$k$3$H$K$h$C$FFCJL$K6/2=$5(B
$B$l$?(B Linux 2.4 $B%G%#%9%H%j%S%e!<%7%g%s$,%Y!<%9$H$J$C$F$$$^$9!#(B

2. BUGS 4.0.0

$B:nhttp://www.bcrypt.com

BUGS $B$O6/NO$JHkL)800E9f%"%k%4%j%:%`$H$=$N%"%W%j%1!<%7%g%s$G$9!#;HMQ$9$k(B
$B$3$H$OFq$7$/$J$/!"%5%s%W%k%"%W%j%1!<%7%g%s$H%I%-%e%a%s%H$,$"$j$^$9!#$3(B
$B$N0E9f$N%i%$%V%i%j$O%U%j!<$GMxMQ$9$k$3$H$,$G$-$^$9!#%^%k%A%W%i%C%H%U%)(B
$B!<%`$KBP1~$7!"%*!<%W%s%=!<%9$G!"%U%!%$%k0E9f2=%"%W%j%1!<%7%g%s!"%;%-%e(B
$B%"$J%A%c%C%H!"%;%-%e%"$J(B"more"$B%3%^%s%I!"%m%0%$%s%"%W%j%1!<%7%g%s$J$I$+(B
$B$i$J$k%Q%C%1!<%8$,Ds6!$5$l$F$$$^$9!#(B

3. SILC (Secure Internet Live Conferencing) 20001124
$B:nhttp://silc.pspt.fi/ >

SILC (Secure Internet Live Conferencing) $B$O!"%;%-%e%"$G$J$$%A%c%s%M%k$N(B
$B>e$N%$%s%?!<%M%C%H$G%;%-%e%"$J%+%s%U%!%l%s%9%5!<%S%9$rDs6!$9$k%W%m%H%3(B
$B%k$G$9!#FbIt$OA4$/0c$$$^$9$,!"(BSILC $B$O(B IRC $B$KI=LL>e;w$F$O$$$^$9!#(BSILC $B$N(B
$BL\E*$O%;%-%e%"$J%+%s%U%!%l%s%9%5!<%S%9$rDs6!$9$k$3$H$K$"$j$^$9!#6/NO$J0E(B
$B9f$rMxMQ$7$F!"$9$Y$F$NDL?.FbMF$r%;%-%e%"$K$7$^$9!#(B

4. Bcrypt 4.0
(Windows 2000, Windows 95/98 and Windows NT)
$B:nhttp://www.bcrypt.com

$B$3$l$O$9$G$K9-$/CN$i$l$F$$$k(B bcrypt Windows $BHG%=%U%H%&%'%"$N?7$7$$(B Windows
$BHG%"%W%j%1!<%7%g%s$G$9!#$3$N%P!<%8%g%s$G$O?7$7$$0E9f2=%i%$%V%i%j$H?7$7(B
$B$/8_49@-$rJ]$A!"0E9f2=!"I|9f2=!"%-!<@8@.!"%U%!%$%k$N1#JC5!G=$,MxMQ$G$-(B
$B$kMM$K$J$C$F$$$^$9!#(BBUGS v3.4.0 $B$NDs6!$9$kF0E*%W%i%$%Y!<%H%-!<0E9f2=%"(B
$B%k%4%j%:%`$rMxMQ$7$?(B Windows GUI $B$rDs6!$7$F$$$^$9!#$^$?!"%f!<%6$,MxMQ$7(B
$B$d$9$/!"%*!<%W%s%=!<%9$G!"J#?t$N%W%i%C%H%U%)!<%`$GF0:n$7$^$9!#(B
$B5. GuardDog 0.9.3
(Linux)
$B:nhttp://www.simonzone.com/software/guarddog

GuardDog $B$O(B Linux $B>e$G(B KDE $B$N%f!<%6%U%l%s%I%j$J%U%!%$%d%&%)!<%k@8@.4IM}(B
$B%f!<%F%#%j%F%#$G$9!#5v$9%W%m%H%3%k$rC1=c$K;XDj$9$k$@$1$G$h$/!"%]!<%HHV(B
$B9f$NCN<1$OI,MW$"$j$^$;$s!#%/%i%$%"%s%H$GMxMQ$G$-!"8=:_$N$H$3$m!"%k!<%?(B
$B$d%2!<%H%&%'%$$N@_Dj$O%5%]!<%H$7$F$$$^$;$s!#(BGenerates $B$O(B ipchains $B$N$?(B
$B$a$N%9%/%j%W%H$G$9!#(BSane $B$O?7$7$$%U%!%$%d%&%)!<%k$N%G%U%)%k%H$G!"(BRedhat
$B$d(B Mandrake $B$N$?$a$N(B RPM $B%Q%C%1!<%8$,$"$j!"(Bglitch $B$N=$@5$rI=<($7$^$9!#(B

6. IP Accounting Daemon 1.0
(FreeBSD, Linux, Unix)
$B:nhttp://www.simon.org.ua/ipa/ >

IP Accounting Daemon (ipa) $B$O(B $B@_Dj2DG=$J(B IP $B%"%+%&%s%F%#%s%0%G!<%b%s$G(B
$B$9!#(BIP $B%U%!%$%d%&%)!<%k$d(B IP $B%U%#%k%?$N%"%+%&%s%F%#%s%05,B'$K4p$E$$$?(B
IP $B%"%+%&%s%F%#%s%05!G=$rDs6!$7$^$9!#;~4VFb$KDL2a$G$-$k%"%+%&%s%H$N@)(B
$B8f$r4^$a$?B??t$N%;%/%7%g%s$H%*%W%7%g%s$+$i$J$k%U%l%-%7%V%k$K@_Dj$G$-$k(B
$B%3%s%U%#%0%l!<%7%g%s%U%!%$%k$,$"$j$^$9!#(B

- --
Translated by SAKAI Yoriyuki, KAGEYAMA Tetsuya
Little eArth Corporation - LAC Co., Ltd.
http://www.lac.co.jp/security/

-----BEGIN PGP SIGNATURE-----
Version: PGP for Personal Edition 5.5.5J
Comment: SAKAI Yoriyuki

iQA/AwUBOiLh+JQwtHQKfXtrEQJYdgCgm3OwZB97xELeTiB/7RPvcJwtDSUAoPrc
cHiBbe+7HJkRcmhJw2nkM1VR
=4xLX
-----END PGP SIGNATURE-----