SecurityFocus.com Newsletter #70 2000-11-30->2000-12-08

To: BUGTRAQ-JP@SECURITYFOCUS.COM
Subject: SecurityFocus.com Newsletter #70 2000-11-30->2000-12-08
From: SAKAI Yoriyuki <sakai@LAC.CO.JP>
Date: Wed, 13 Dec 2000 10:53:07 +0900
Reply-To: SAKAI Yoriyuki <sakai@LAC.CO.JP>
Sender: BUGTRAQ-JP List <BUGTRAQ-JP@SECURITYFOCUS.COM>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

$B:d0f(B@$B%i%C%/$G$9!#(B

SecurityFocus.com Newsletter $BBh(B 70 $B9f$NOBLu$r$*FO$1$7$^$9!#(B
$BLu$N$J$$9`L\$K$D$$$F$O!VF|K\8lLu$J$7!W$H$7$F6hJL$7$F$"$j$^$9!#(B

- ---------------------------------------------------------------------------
SecurityFocus.com Newsletter $B$K4X$9$k(BFAQ:
<URL: http://www.securityfocus.com/forums/sf-news/faq.html>
BugTraq-JP $B$K4X$9$k(B FAQ:
<URL: http://www.securityfocus.com/forums/bugtraq-jp/faq.html>
- ---------------------------------------------------------------------------
$B0zMQ$K4X$9$kHw9M(B:
$B!&$3$NOBLu$O(B Security-Focus.com $B$N5v2D$r3t<02qe$G9T$o(B
  $B$l$F$$$^$9!#(B
$B!&(BSecurityFocus.com Newsletter $B$NOBLu$r(B Netnews, Mailinglist,
  World Wide Web, $B=q@R(B, $B$=$NB>$N5-O?G^BN$G0zMQ$5$l$k>l9g$K$O%a!<%k$N(B
  $BA4J80zMQ$r$*4j$$$7$^$9!#(B
$B!&F|K\8lHG%K%e!<%9%l%?!<(B 1 $B9f$+$i(B 3 $B9f$^$G$K$O$3$NHw9M$,IU$$$F$$$^$;(B
  $B$s$,=`MQ$9$k$b$N$H$7$^$9!#(B
$B!&$^$?!"(BSecurity-Focus.com $BDs6!$N(B BugTraq-JP $B%"!<%+%$%V(B [*1] $B$X$N$$$+(B
  $B$J$k7A<0$N%O%$%Q!<%j%s%/$b>e5-$K=`$8$F$/$@$5$$!#(B
1) <URL http://www.securityfocus.com/templates/archive.pike?list=79>
- ---------------------------------------------------------------------------
- ---------------------------------------------------------------------------
$B$3$NOBLu$K4X$9$kHw9M(B:
$B!&$3$NOBLu$NE,MQ@.2L$K$D$$$F3t<02ql9g!"(BBUGTRAQ-JP $B$X(B Errata $B$H$7$F=$@5(B
  $BHG$r$4Ej9FD:$/$+!"Lul9g$K$O=$@5HG$r$G$-$k$@$1?WB.$KH/9T$7$^$9!#(B
- ---------------------------------------------------------------------------
- ---------------------------------------------------------------------------
$B86HG(B:
Message-ID:  <Pine.GSO.4.30.0012111001090.27871-100000@mail>
Date:         Mon, 11 Dec 2000 10:03:37 -0800

SecurityFocus.com Newsletter #70
- --------------------------------
I. FRONT AND CENTER($BF|K\8lLu$J$7(B)
     1. Inside the Stages Worm
     2. Chasing the Wind 3: From Out of the Blue
II. BUGTRAQ SUMMARY
     1. phpWebLog Administrator Authentication Bypass Vulnerability
     2. Microsoft PhoneBook Server Buffer Overflow
     3. RedHat Linux diskcheck Race Condition Vulnerability
     4. Serv-U FTP Directory Traversal Vulnerability
     5. Nokia IP440 Remote Denial of Service Vulnerability
     6. Apache Web Server with Php 3 File Disclosure Vulnerability
     7. Inktomi Search Source Disclosure Vulnerability
     8. Inktomi Search Information Disclosure Vulnerability
     9. Endymion MailMan WebMail Remote Arbitrary Command Execution Vuln.
     10. Microsoft Windows NT 4.0 RAS Administration Registry Key Vulnerability
     11. Microsoft Windows NT 4.0 MTS Package Administration Registry Key...
     12. Microsoft Windows NT 4.0 / 2000 SNMP Registry Key Modification...
     13. IBM DB2 Universal Database for Windows NT SQL DoS Vulnerability
     14. IBM DB2 Universal Database Known Default Password Vulnerability
     15. phpGroupWare Remote Include File Vulnerability
     16. APC apcupsd Local Denial of Service Vulnerability
     17. VPNet VSU Source Routed Session Vulnerability
     18. Cisco Catalyst Memory Leak Denial of Service Vulnerability
     19. VPNet VSU IP Bridging Vulnerability
     20. Lexmark Markvision Printer Driver Buffer Overflow Vulnerabilities
     21. Watchguard SOHO 2.2 Denial of Service Vulnerability
     22. IpSwitch IMail Denial of Service Vulnerability
     23. MetaProducts Offline Explorer File System Disclosure Vulnerability
     24. Keware Technologies HomeSeer Directory Traversal Vulnerability
     25. Austhex IRCd DNS Denial of Service Vulnerability
     26. BitchX DNS Buffer Overflow Vulnerability
III. SECURITYFOCUS.COM NEWS ARTICLES
     1. Hospital Records Hacked
     2. Scientists Pan Carnivore Review
IV.SECURITY FOCUS TOP 6 TOOLS
     1. Sysmon 0.90.9
     2. Integrity checking utility (ICU) 0.1
     3. httptunnel 3.0.5
     4. Exiscan 0.9
     5. Random Number Generator Pro 1.23
     6. M2Crypto 0.05

I. FRONT AND CENTER($BF|K\8lLu$J$7(B)
- ---------------------------------

II. BUGTRAQ SUMMARY
- -------------------

1. phpWebLog Administrator Authentication Bypass Vulnerability
BugTraq ID: 2047
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2000-12-02
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/2047
$B$^$H$a(B:

phpWebLog $B$O(B Jason Hines $B$K$h$C$F=q$+$l$?%*!<%W%s%=!<%9$N(B Web News $B4I(B
$BM}%7%9%F%`$G$"$k!#$3$N%=%U%H%&%'%"$K$O4IM}MQ%$%s%?%U%'!<%9$+$iJ#?t%f!<(B
$B%6$,4IM}$G$-$F$7$^$($k$H$$$&LdBj$,$"$k!#(B

$BLdBj$O(B common.inc.php script $B$G@8$8$k!#(Bcommon.inc.php script $BFb$NG[Ns!"(B
$CONF $B$,ITE,@Z$K=i4|2=$5$l$F$$$k$?$a!"A4$F$NG[NsFb$NCM$r8@8l$N;EMM$H(B
$B$7$F!":G8e$NJQ?tFb$N:G=i$NJ8;zNsA4$F$XJQ49$7$F$7$^$&$N$G$"$k!#(B Sitekey
$B$K$h$k(B md5 $B%O%C%7%e$rG'>Z%9%-!<%`$H$7$FMxMQ$7$F$$$k$,!"(B$CONF $BFb$NCM$K4^(B
$B$^$l$F$$$kFbMF$N$?$a$K!"8@8lFb$NCM$N:G=i$NJ8;z$K@_Dj$5$l$F$7$^$&$N$G$"(B
$B$k!#0E9f2=%/%C%-!<$H$7$F(B Sitekey $B$N(B ROT-13 $BCM$N(B md5 $B%O%C%7%e$r99$J$kJL(B
$B$NG'>Z%9%-!<%`$H$7$FMxMQ$b$7$F$$$k!#$3$l$iLdBj$NAH$_9g$o$;$O0-0U$"$k%f!<(B
$B%6$,(B Sitekey $B$rN`?d$G$-$F$7$^$($k>u67$r$b$?$i$7(B($BDL>o!"4IM}7$$$F$7$^$&$N$G$"(B
$B$k!#(B

2. Microsoft PhoneBook Server Buffer Overflow
BugTraq ID: 2048
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2000-12-04
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/2048
$B$^$H$a(B:

Phone Book Service $B$O(B Windows NT 4 Option Pack $B$*$h$S(B Windows 2000 $BMQ(B
$B$N%*%W%7%g%s%3%s%]!<%M%s%H$G$"$k!#$J$*!"$3$l$O%G%U%)%k%H$G$O%$%s%9%H!<(B
$B%k$5$l$J$$!#(B

IIS 4 $B$*$h$S(B IIS 5 $BFb$K$"$k$3$N%5!<%S%9MQ$N(B URL $B$r=hM}$9$k%k!<%A%sFb$K(B
$B%P%C%U%!%*!<%P!<%U%m!<$,H/8+$5$l$?!#$3$NLdBj$rFM$$$?967b$,9T$o$l$?>l9g!"(B
$B967b(B $B%f!<%6(B (IIS4)$B!"$"$k(B
$B$$$O(B IWAM_$B%3%s%T%e!<%?L>(B $B%f!<%6(B (IIS5) $B$N8"8B$G%j%b!<%H$+$i%3%^%s%I%7%'(B
$B%k$rC%3. RedHat Linux diskcheck Race Condition Vulnerability
BugTraq ID: 2050
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: 2000-12-05
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/2050
$B$^$H$a(B:

diskcheck.pl $B$O(B Red Hat Inc. $B$+$iDs6!$5$l$F$$$k(B Red Hat Powertools $B$N(B
$B0lIt$G$"$k(B perl $B$G5-=R$5$l$?%9%/%j%W%H$G$"$k!#$3$N%=%U%H%&%'%"$K$O%7%9(B
$B%F%`>e$N0U?^$9$k%U%!%$%k$NFbMF$rGK2u$G$-$k>u67$r$b$?$i$7$F$7$^$&LdBj$,(B
$B$"$k!#(B

$BLdBj$O(B /tmp $B%U%!%$%k%7%9%F%`Fb$G$N%U%!%$%k$N@8@.;~$K@8$8$k!#$3$N%=%U%H(B
$B%&%'%"$OKh;~(B 1 $B2s5/F0$7!"$$$+$J$k%U%!%$%k%7%9%F%`$G$"$C$F$b(B 90% $B$N;HMQ(B
$BN($K6a$E$$$F$$$l$P%7%9%F%`4IM}e$NJL$N%U%!%$%k$K:n@.2DG=$G$"$j!"%U%!%$%kFbMF$N0l4S@-$rGK2u(B
$B$7$F$7$^$&2DG=@-$,$"$k!#(B

4. Serv-U FTP Directory Traversal Vulnerability
BugTraq ID: 2052
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2000-12-05
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/2052
$B$^$H$a(B:

FTP Serv-U $B$O(B CatSoft $B$+$iDs6!$5$l$k%$%s%?!<%M%C%H8~$1$N(B FTP $B%5!<%P$G$"(B
$B$k!#(B

$BG'>Z:Q$_$N%f!<%6$O$3$N%=%U%H%&%'%"$,%$%s%9%H!<%k$5$l$?%I%i%$%V$K$"$k(B ftproot
$B$X%"%/%;%92DG=$G$"$k!#FI$_=P$7!"=q$-9~$_!"Aw2DG=$G$"$k!#(B
$B$J$*!"$b$7(B "Hide hiddenn files" $B5!G=$,MxMQ2DG=$J>uBV$G$"$C$?>l9g$G$b!"(B
$BA4$F$N1#$7B0@-$r;}$D%U%!%$%k$O3+<($5$l$F$7$^$&!#(B

$B$3$NLdBj$rFM$$$?967b$N@.8y$O!"%j%b!<%H%f!<%6$,%7%9%F%`%U%!%$%k!"%Q%9%o!<(B
$B%I%U%!%$%kEy$K%"%/%;%9$r5v$7$F$7$^$&7k2L$H$J$j!"$3$l$O%[%9%H$N40A4$J8"(B
$B8BC%5. Nokia IP440 Remote Denial of Service Vulnerability
BugTraq ID: 2054
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2000-12-04
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/2054
$B$^$H$a(B:

Nokia $B@=$N(B IP440 integrated Firewall-1/IDS $B$K$OLdBj$,@8$8$k!#(B

$BB?$/$NJ8;zNs$r4^$`(B URL $B$rAuCV$N4IM}MQ%$%s%?%U%'!<%9$KAw$C$?>l9g!"4XO"$9(B
$B$k%P%C%U%!$N%*!<%P!<%U%m!<$,@8$8!"%;%0%a%s%F!<%7%g%s%U%)%k%H$r@8$8$k2D(B
$BG=@-$,$"$k!#$$$+$J$k%P%C%U%!%*!<%P!<%U%m!<$N>l9g$HF1MM!"$3$NLdBj$K$b0U(B
$B?^$9$k%3!<%I$NZ$K$D(B
$B$$$F$O$3$N;vNc$G$OJs9p$5$l$F$$$J$$!#(B
$B$J$*!"$3$NLdBj$rFM$$$?967b$r9T$&$?$a$K$O!"967bZ$5$l$F$$$J$1$l$P$J$i$J$$!#(B
$B$7$+$7!"$3$NLdBj$O967b6. Apache Web Server with Php 3 File Disclosure Vulnerability
BugTraq ID: 2060
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2000-12-06
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/2060
$B$^$H$a(B:

Apache Web Server $B$O(B PHP3 $B%9%/%j%W%H8@8l$HAH$_9g$o$;$FMQ$$$i$l$?>l9g!"(B
$BL$G'>Z$N%f!<%6$K%U%!%$%k$r3+<($7$F$7$^$&LdBj$,$"$k!#(B
PHP $B$Ne$N4{CN$N%U%!%$%k$K$D(B
$B$$$F!"FI$_=P$72DG=$G$"$k!#(B
$B$3$NLdBj$rFM$$$?967b$,@.8y$7$?>l9g!"=EMW$G:#8e$N5>@7$H$J$C$?%[%9%H$KBP(B
$B$9$k967b$rpJs$r3+<($7$F$7$^$&2DG=@-$,$"$k!#(B

7. Inktomi Search Source Disclosure Vulnerability
BugTraq ID: 2061
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2000-12-05
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/2061
$B$^$H$a(B:

Ultrseek server (Inktomi Search $B$H$7$FCN$i$l$k(B) $B%P!<%8%g%s(B 3.0 $B$K$OLd(B
$BBj$,B8:_$9$k!#(B
$B%f!<%6$,M?$($?CM$NBEEv@-$N3NG'$K<:GT$7$F$7$^$&$?$a!"0J2<$N7A<0$G%j%b!<(B
$B%H$+$iM?$($i$l$?(B URL $B$O!"(Bsomefile.html $B$N%=!<%9$r%"%/%;%985$KJV$7$F$7(B
$B$^$&!#(B

$BNc(B:
http://target:8765/somefile.html/

$B$3$N7k2L!"967b8. Inktomi Search Information Disclosure Vulnerability
BugTraq ID: 2062
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2000-12-05
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/2062
$B$^$H$a(B:

Ultrseek server (Inktomi Search $B$H$7$FCN$i$l$k(B) $B%P!<%8%g%s(B 3.0 $B$K$OLd(B
$BBj$,B8:_$9$k!#(B
$B%f!<%6$,M?$($?CM$NBEEv@-$N3NG'$K<:GT$7$F$7$^$&$?$a!"0J2<$N7A<0$G%j%b!<(B
$B%H$+$iM?$($i$l$?(B URL $B$O!"$b$7(B example $B$,B8:_$7$J$$>l9g!"=EMW$J%Q%9>pJs(B
$B$H%5!<%P$N@_Dj>pJs$r%(%i!<%a%C%;!<%8$H$7$F3+<($7$F$7$^$&!#(B
$B$3$N7k2L!"967bpJs$d%G%#%l%/%H(B
$B%j9=B$$K$D$$$F$N>pJs$rF~9. Endymion MailMan WebMail Remote Arbitrary Command Execution Vulnerability
BugTraq ID: 2063
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2000-12-06
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/2063
$B$^$H$a(B:

$B%P!<%8%g%s(B 3.0.26 $B0JA0$N(B Endymion MailMan Webmail $B%P!<%8%g%s(B 3.x $B$K$OLd(B
$BBj$,B8:_$9$k!#(B
$B$3$N%=%U%H%&%'%"$O(B Web $B>e$GMxMQ2DG=$JEE;R%a!<%k$N$?$a$N%$%s%?!<%U%'!<%9(B
$B$rDs6!$9$k!"9-$/MQ$$$i$l$F$$$k(B perl $B%9%/%j%W%H$G$"$k!#LdBjHO0O$N%P!<%8%g(B
$B%s$G$O(B perl $B$N(B open() $B4X?t$r%;%-%e%"$G$O$J$$J}K!$GMQ$$$F$$$k$?$a!"0-0U$r(B
$B;}$C$FAH$_N)$F$i$l$?!"%7%'%kMQ$N%a%?%-%c%i%/%?$r4^$`%f!<%6F~NO$r9T$&;v$K(B
$B$h$j!"(B CGI $B%9%/%j%W%H$N8"8B$G%7%'%k%3%^%s%I$ro!"8"8B$O(B nobody $B$G$"$k(B)
$B$3$N7k2L!"967be$G10. Microsoft Windows NT 4.0 RAS Administration Registry Key Vulnerability
BugTraq ID: 2064
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2000-12-06
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/2064
$B$^$H$a(B:

Remote Access Service (RAS) $B8~$1$N%5!<%I%Q!<%F%#MQ%D!<%k$N4IM}$rl9g$K$O!"%j%b!<%H$+$i967b2DG=$G$"$k!#(B
(Winreg $B$O%G%U%)%k%H$GM-8z$G$"$k(B)

RAS $B$O(B Windows NT 4.0 $B$G$O%G%U%)%k%H$G$O%$%s%9%H!<%k$5$l$J$$!#(B

11. Microsoft Windows NT 4.0 MTS Package Administration Registry Key Vuln
BugTraq ID: 2065
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2000-12-06
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/2065
$B$^$H$a(B:

Microsoft Transaction Server (MTS) $B$O%H%i%s%6%/%7%g%s$r9T$&$?$a$N0lO"(B
$B$N%=%U%H%&%'%"%b%8%e!<%k$G$"$j!"%H%i%s%6%/%7%g%s$rZ$N%f!<%6$+$i$N=q$-9~$_%"%/%;%9$r6X;_$G$-$kMM$K(B
$BE,@Z$J@_Dj$,;\$5$l$F$$$J$$!#$3$NZ$N%f!<%6$,(B MTS $B%Q%C%1!<%8$N$l$N(B
$B%f!<%6$N%"%+%&%s%HFb$N%;%-%e%j%F%#$N%3%s%F%-%9%H$K$*$$$F$N12. Microsoft Windows NT 4.0/2000 SNMP Registry Key Modification Vulnerability
BugTraq ID: 2066
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: 2000-12-06
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/2066
$B$^$H$a(B:

Windows NT 4 $B$*$h$S(B Windows 2000 $B$G$O(B SNMP $B%W%m%H%3%k$r!"4IM}$H4IM}%9%F!<%7%g%s(B
$B$N8GM->pJs$,3JG<$5$l$F$$$k!#$7$+$7!"0d48$J;v$K$3$l$i>pJs$OA4$F$N%f!<%6(B
$B$KBP$7$FFI$_=P$72DG=$J$N$G$"$k!#$3$N$?$a!"0-0U$"$k%f!<%6$O$$$+$J$k%3%_%e(B
$B%K%F%#$KBP$7$F$G$b5"B0$9$k4IM}%9%F!<%7%g%s$N?6$j$,2DG=$J$N$G$"$k!#(B
$B%-!<$N@_Dj$OE57?E*$K!"4IM}]$H$J$k%3%s%T%e!<%?$K%m(B
$B%0%*%s$r9T$C$?!"$$$+$J$k%f!<%6$KBP$7$FJT=82DG=$K$J$C$F$$$k$N$G$"$k!#(B
$B$3$N$?$a!"$3$N%Q%i%a!<%?%-!<$rJT=8$9$k;v$K$h$j!"%f!<%6$O<+J,<+?H$,4IM}(B
$B8"8B$r;}$D?7$7$$%3%_%e%K%F%#$r@8@.2DG=$J;v$,N`?d$5$l$k!#(B
$B$3$NLdBj$rFM$$$?967b$,@.8y$7$?>l9g!"%f!<%6$O%M%C%H%o!<%/>e$N5!4o72!"$=(B
$B$NB>(B SNMP $B$G4IM}$5$l$F$$$k;q8;$N$9$Y$F$N@)8f8"$rC%13. IBM DB2 Universal Database for Windows NT SQL DoS Vulnerability
BugTraq ID: 2067
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2000-12-05
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/2067
$B$^$H$a(B:

IBM DB2 Unicersal Database $B$OJ,;67?%G!<%?%Y!<%9%"%W%j%1!<%7%g%s$G$"$k!#(B
$BFCDj$N%/%(%j$Nl9g!"%5!<%P$OuBV$K4Y$C$F$7$^$&!#(B
$B0J2<$O(B NSLCHINA $B$K$h$C$FEj9F$5$l$?H`$i$N%"%I%P%$%6%j$K<($5$l$?Nc$G$"$k!#(B

connect reset;
connect to sample user db2admin using db2admin;
select * from employee where year(birthdate)=1999 and firstnme<'';

$B$J$*!"$3$N5sF0$KBP$7$F$I$NMM$J>uBV$,@8$8$k$+$OL$>\$G$"$k!#DL>oF0:n$X$N(B
$BI|5l$K$O%"%W%j%1!<%7%g%s$N:F5/F0$,I,MW$G$"$k!#(B

14. IBM DB2 Universal Database Known Default Password Vulnerability
BugTraq ID: 2068
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2000-12-05
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/2068
$B$^$H$a(B:

IBM DB2 Unicersal Database $B$OJ,;67?%G!<%?%Y!<%9%"%W%j%1!<%7%g%s$G$"$k!#(B
$B$3$N%=%U%H%&%'%"$K$O%G!<%?%Y!<%9$K%"%/%;%92DG=$J%G%U%)%k%H$N%f!<%6L>$H(B
$B%Q%9%o!<%I$,B8:_$9$k!#$3$N%=%U%H%&%'%"$N%$%s%9%H!<%k;~$K!"4IM}Z$N%f!<%6$,%G%U%)%k%H$N%f!<%6L>$H%Q%9%o!<%I$r4{CN$N>l9g!"%G!<%?%Y!<(B
$B%9$K%"%/%;%9$9$k2DG=@-$r$b$?$i$9$3$l$i%Q%9%o!<%I$K$D$$$F!"JQ99$r5a$a$k(B
$B%W%m%s%W%H$r<($5$l$J$$$N$G$"$k!#(B

15. phpGroupWare Remote Include File Vulnerability
BugTraq ID: 2069
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2000-12-06
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/2069
$B$^$H$a(B:

phpGroupWare $B$O(B Joseph Engo $B$,85!93+H/$r9T$C$?!"%U%j!<$KG[I[$5$l$F$$$k(B
$B%^%k%A%f!<%6$N%0%k!<%W%&%'%"$G$"$k!#$3$N%=%U%H%&%'%"$K$O%j%b!<%H$+$i0-(B
$B0U$"$k%3!<%I$re$N8m$j$K$h$j!"CM$r=16. APC apcupsd Local Denial of Service Vulnerability
BugTraq ID: 2070
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: 2000-12-06
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/2070
$B$^$H$a(B:

$BFCDj$N%P!<%8%g%s$N(B APC $B$J(B
$BMM!9$JL5DdEEEE8;AuCV$r1?MQ$9$k$?$a$N(B UNIX $B>e$GF0:n$9$k%G!<%b%s%W%m%0%i(B
$B%`$G$"$k(B
$B$3$N%=%U%H%&%'%"$O?tB?$/$N(B Linux $B$"$k$$$O(B UNIX $B>e$GF0:n$9$k!#(B
$B%-!<$H$J$k@_Dj%U%!%$%k!"(B/var/run/apcupsd.pid $B$O%5!<%S%9$N:F5/F0;~!"$"(B
$B$k$$$ODd;_;~$K$I$N%7%9%F%`%W%m%;%9$rDd;_$5$;$l$P$h$$$N$+$r!"%G!<%b%sMQ(B
$B$N%9%/%j%W%H$K0FFb$9$k%U%!%$%k$G$"$k!#(B
$B%G%U%)%k%H$G!"$3$N%U%!%$%k$O$$$+$J$k%f!<%6$KBP$7$F=q$-9~$_2DG=$J>uBV$K(B
$B$J$C$F$$$k!#$3$N$?$a!"0-0U$"$k%m!<%+%k$N%f!<%6$O$3$N%U%!%$%k$r!"1F6A$r(B
$Be$GL\E*$H$7$?%W%m%0%i%`$K4X78$9$k%W%m%;%9(B ID $B$r<($9MQ$K(B
$B=q$-49$(2DG=$J$N$G$"$k!#$3$N7k2L!"(Bapcupsd $B0J30$N$3$l$i%W%m%;%9$OITN8$K(B
$BDd;_$5$l$F$7$^$$!"%7%9%F%`$,%/%i%C%7%e$9$k2DG=@-$,$"$k!#(B

17. VPNet VSU Source Routed Session Vulnerability
BugTraq ID: 2071
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2000-12-06
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/2071
$B$^$H$a(B:

VPNos $B$O(B VPNet technologies $Be$N%3%s%T%e!<%?$H$N%;%C%7%g%s$r=i4|2=$9$k$?(B
$B$a$N!"$$$+$J$k%"%/%;%9%3%s%H%m!<%k$H%-!<%M%4%7%(!<%7%g%s$N%P%$%Q%9$,2D(B
$BG=$J$N$G$"$k!#(B
$B$3$N$?$a!"FbIt%M%C%H%o!<%/>e$N%3%s%T%e!<%?$H(B ICMP $B$H(B TCP $B$NN>J}$G!"DL?.(B
$B$,2DG=$K$J$C$F$7$^$&$N$G$"$k!#$3$N>uBV$O!"0-0U$"$k%f!<%6$,DL?.2DG=$K$J$j!"(B
$B%W%i%$%Y!<%H%M%C%H%o!<%/Fb$N%[%9%H$r967b$G$-F@$F$7$^$($k>u67$r$b$?$i$7$F(B
$B$7$^$&!#(B

18. Cisco Catalyst Memory Leak Denial of Service Vulnerability
BugTraq ID: 2072
$B%j%b!<%H$+$i$N:F8=@-(B: $BL$>\(B
$B8xI=F|(B: 2000-12-06
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/2072
$B$^$H$a(B:

Cisco Catalyst $B$O%m!<%+%k%(%j%"%M%C%H%o!<%/$G;HMQ$5$l$k9bB.%9%$%C%A$G$"(B
$B$k!#(B
$B%j%b!<%H$+$i4IM}$9$k$?$a$N(B Catalyst $B%U%!!<%`%&%'%"$KAH$_9~$^$l$F$$$k(B
Telnet $B%5!<%P$K$O!"(BDoS $B$K4Y$k2DG=@-$N$"$k%a%b%j%j!<%/$NLdBj$,B8:_$9$k!#(B
Telnet $B%5!<%S%9$,5/F0$5$l$k:]$K$OI,$:!"%a%b%j;q8;$,8e$K3+J|$5$l$k$3$H$J(B
$B$/3d$jEv$F$i$l$k!#$=$N$?$a!"B??t$N%/%i%$%"%s%H$,(B Catalyst Telnet $B%5!<%P(B
$B$K@\B3$9$k$3$H$K$h$C$F%a%b%j$r8O3i$5$;$k$3$H$,2DG=$G$"$j!"$3$N7k2L!"%G%P(B
$B%$%9$r5!G=Dd;_$K4Y$i$;$F$7$^$&!#(B
$B%G%P%$%9$N19. VPNet VSU IP Bridging Vulnerability
BugTraq ID: 2073
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2000-12-05
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/2073
$B$^$H$a(B:

VPNos $B$O(B VPNet Technologies $B$K$h$C$FDs6!$5$l$k(B VPNet VPN Service Units
$B$N$?$a$K@_7W$5$l$?%*%Z%l!<%F%#%s%0%7%9%F%`$G$"$k!#$3$N%U%!!<%`%&%'%"$K(B
$B$O%f!<%6$K%"%/%;%9$,@)8B$5$l$?;q8;$NMxMQ$r5v$7$F$7$^$&LdBj$rJz$($k!#(B
$BLdBj$O%U%!!<%`%&%'%"$N%V%j%C%85!G=$K@8$8!"(BVSU $B$H$7$F%Q%V%j%C%/%M%C%H%o!<(B
$B%/$HF10l%;%0%a%s%H>e$K$"$k%7%9%F%`$r0-MQ$9$k$3$H$G!"(BVSU $B$K%;%-%e%"$G$J(B
$B$$%H%i%U%#%C%/$rN.$9$3$H$,2DG=$G$"$k!#$3$l$O!"%^%7%s$N%$%s%?!<%U%'%$%9(B
$B$K%m!<%+%k$+$i(B VSU $B$X$N(B 2 $BHVL\$N%"%I%l%9$rDI2C$9$k$3$H$K$h$C$F$,$D$1$i$l$?(B IP
$B%"%I%l%9$rG'<1$9$k$h$&$K%k!<%F%#%s%0%F!<%V%k$K%(%s%H%j$rDI2C$9$kI,MW$,(B
$B$"$k!#$3$Ne$K$"$k%7%9%F%`$X%"%/%;%92DG=$G@x:_E*$K@)8B$5$l$?;q8;(B
$B$rMxMQ$9$k$3$H$,2DG=$G$"$k!#(B

20. Lexmark Markvision Printer Driver Buffer Overflow Vulnerabilities
BugTraq ID: 2075
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: 2000-12-07
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/2075
$B$^$H$a(B:

MarkVision $B$O(B Unix $B%7%9%F%`$G(B Lexmark $B%W%j%s%?$r;HMQ$9$k$?$a$K@_7W$5$l(B
$B$?%I%i%$%P%=%U%H%&%'%"%Q%C%1!<%8$G$"$k!#$3$l$O(B Lexmark International
$B$h$jG[I[$5$l$F$$$k!#%I%i%$%P$K$O8"8B$N>:3J$K7R$,$kLdBj$,B8:_$9$k!#(B
MarkVision $B%Q%C%1!<%8$K4^$^$l$k%P%$%J%jCf$KLdBj$,@8$8$k!#(Bcat_network$B!"(B
cat_parallel$B!"(Bcat_serial $B%Q%C%1!<%8Cf$K%9%?%C%/>e$NJQ?t$r>e=q$-$7$F$7$^(B
$B$&%P%C%U%!%*!<%P!<%U%m!<$Ne$NLdBj$N$?$a$K!"0-0U$"$k%f!<%6$O8"8B$r>:3J$9$k$?$a$K(B
$BMxMQ2DG=$G!"%I%i%$%P$,%$%s%9%H!<%k$5$l$?%7%9%F%`$K4IM}21. Watchguard SOHO 2.2 Denial of Service Vulnerability
BugTraq ID: 2082
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2000-12-08
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/2082
$B$^$H$a(B:

SOHO 2.2 $B$O(B Watchguard Technologies Inc. $B$K$h$jDs6!$5$l$kCxL>$J%Q!<%=%J(B
$B%k%U%!%$%d%&%)!<%k$G$"$k!#(B
$B%U%!!<%`%&%'%"$N%P!<%8%g%s(B 2.2.1 $B0JA0$K$KIU?o$9$k(BWatchguard SOHO 2.2 $B%U(B
$B%!%$%d%&%)!<%k$K$O!"%j%b!<%H$+$i$N967be$G(B
DoS $B967b$re(B) $B$N(BGET $B%j%/%(%9%H$r%U%!%$%d%&%)!<%k$KM?$($i$l!"%U%!%$(B
$B%d%&%)!<%k$N:F5/F0!"$"$k$$$O40A4$J%7%c%C%H%@%&%s$,2DG=$G$"$k!#(B
$B:F5/F0$,9T$o$l$k>l9g$K$O!"%U%!%$%d%&%)!<%k$O(B 1 $BJ,4V$+$i(B 5 $BJ,4V$KEO$jF0(B
$B:nITG=$G$"$k!#%7%c%C%H%@%&%s$5$l$?>l9g!"EE8;$N:FEjF~$,I,MW$,$"$k!#$^$?(B
$B967b$,:]8B$J$/B3$1$i$l$?>l9g$K$O!"%U%!%$%d%&%)!<%k$O1J1s$K%M%C%H%o!<%/(B
$B$+$i8IN)$7$?$^$^$G$"$k!#$J$*!"%U%!%$%d%&%)!<%k$N%m%0$K$O:F5/F0$7$?:]$K(B
$B5-O?$5$l$k%a%C%;!<%80J30$O2?$b5-O?$5$l$J$$$3$H$KCm0U$9$Y$-$G$"$k!#(B

22. IpSwitch IMail Denial of Service Vulnerability
BugTraq ID: 2083
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2000-12-07
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/2083
$B$^$H$a(B:

IpSwitch IMail $B$O(B Web $B7PM3$G%/%i%$%"%s%H$K%5!<%S%9$rDs6!$9$kEE;R%a!<%k(B
$B%5!<%P$G$"$k!#(B($BLuCm(B: Web$B%a!<%k%5!<%P$@$1$G$O$J$/!"$3$N@=IJ$ODL>o$N(B
MUA $B$+$i$bMxMQ2DG=$G$9(B)
IMail $B$O(BSMTP$B!"(BPOP3$B!"(BIMAP4$B!"(BLDAP $B$J$IB?$/$NEE;R%a!<%k%W%m%H%3%k$KBP1~$7(B
$B$F$$$k!#(B
IMail $B%5!<%P$N(B SMTP $B%5!<%S%9$O(B DoS $B$K4Y$k2DG=@-$,$"$k!#(B80 $B%P%$%H0J>e(B 130
$B%P%$%HL$K~$ND9$5$G(B BASE64 $B7A<0$KId9f2=$7$?(B SMTP AUTH $B%Q%9%o!<%I$rM?$($k(B
$B$3$H$K$h$j!"(BIMail $B%5!<%P$O1~Ez$rDd;_$7!"?75,$N@\B3$r3NN)$9$k$3$H$,ITG=$K(B
$B$J$k!#(B
$BD9$5$,(B 136 $B%P%$%H$rD6$($?>l9g!"%5!<%P$O%Q%9%o!<%I$,D9$9$.$k$HJs9p$9$k!#(B
$B$3$N$h$&$J?6$kIq$$$,5/$3$kM}M3$OL$>\$G$"$k!#(B

23. MetaProducts Offline Explorer File System Disclosure Vulnerability
BugTraq ID: 2084
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2000-12-07
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/2084
$B$^$H$a(B:

MetaProducts Offline Explorer $B$O!"%*%U%i%$%s;~$K(BWeb $B%5%$%H$d(B FTP $B%5%$%H(B
$B$r$^$H$a$F1\Mw$9$k$?$a$K!"%3%s%F%s%D$r%@%&%s%m!<%I$9$k%"%W%j%1!<%7%g%s(B
$B$G$"$k!#(B
Offline Explorer $B$O%$%s%9%H!<%k$5$l$F$$$k%7%9%F%`$N%G%#%l%/%H%j9=B$$r$9(B
$B$Y$FI=<($7$F$7$^$&2DG=@-$,$"$k!#(B
$B%G%U%)%k%H$G$O!"(BOffline Explorer $B$O(B 800 $BHV%]!<%H$G%3%M%/%7%g%s$rBT$AZ$b9T$&$3$H$J$/%G%#%l%/%H%j(B
$B$r8!:w$7FbMFI=<($,2DG=$G$"$k!#(B

$BNc(B:
http://target:800/C:/
$B$3$N(B URL $B$K$h$j(B C $B%I%i%$%V$N%G%#%l%/%H%j9=B$$,I=<($5$l$k!#(B

24. Keware Technologies HomeSeer Directory Traversal Vulnerability
BugTraq ID: 2085
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2000-12-07
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/2085
$B$^$H$a(B:

Keware Technologies HomeSeer $B$O(B Web $B%$%s%?!<%U%'%$%9$rMxMQ$7$FB?MM$J2H(B
$BDmMQIJ$dEE5$@=IJ$r%m!<%+%k$K!"$^$?$O%j%b!<%H$K4IM}$G$-$k2HDmMQ<+F02=%"(B
$B%W%j%1!<%7%g%s$G$"$k!#(B
$B%j%b!<%H%f!<%6$O!"(B/ $B%G%#%l%/%H%j>e$K$"$k(B HomeSeer $B%G%#%l%/%H%j$N30It$K(B
$B$"$k!"$$$+$J$k4{CN$N%U%!%$%k$X$b%"%/%;%9$9$k$3$H$,2DG=$G$"$k!#(B'../'$B$H$$(B
$B$&J8;zNs$H4{CN$N%U%!%$%kL>$+$i$J$kFCJL$KAH$_N)$F$i$l$?(B HTTP $B%j%/%(%9%H(B
$B$rAw?.$9$k$3$H$K$h$C$F!"FI$_=P$78"8B$N$"$kFCDj$N%U%!%$%k$NFbMF$rI=<($9(B
$B$k!#(B
$B$3$Nl9g!"%j%b!<%H%f!<%6$O%7%9%F%`%U%!%$%k(B
$B$d%Q%9%o!<%I%U%!%$%k$J$I$X$N%"%/%;%98"$rC%25. Austhex IRCd DNS Denial of Service Vulnerability
BugTraq ID: 2086
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2000-12-06
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/2086
$B$^$H$a(B:

Austex IRCd $B$O(B Austnet IRC Network $B$N$?$a$K(B Roger Yerramsetti $B$K$h$C$F(B
$B@_7W$5$l$?(B IRC $B%G!<%b%s$G$"$k!#$3$l$K$O%G!<%b%s$r%j%b!<%H$+$i%/%i%C%7%e(B
$B$G$-$kLdBj$,B8:_$9$k!#(B
$B%G!<%b%s$N0lIt$G$"$k(B DNS $BL>A02r7h$N%W%m%0%i%`ItJ,$KLdBj$,@8$8$k!#(BIP $B%"%I(B
$B%l%9$N5U0z$-%k!<%A%s$K%P%C%U%!%*!<%P!<%U%m!<$,B8:_$9$k!#(BIP $B%"%I%l%9$NL>(B
$BA02r7h$r;n$_$?8e(B IRCd $B$K(B 128 $B%P%$%H$N(B A Record $B$rJV$9$?$a!"%G!<%b%s$ODd(B
$B;_$9$k!#<+?H$N(B DNS $B%5!<%P$rMxMQ$G$-$k0-0U$"$k%f!<%6$O(B IRC $B%G!<%b%s$r%/(B
$B%i%C%7%e2DG=$G(B DoS $B$K4Y$i$;!"@55,$N%f!<%6$O%5!<%S%9$rMxMQIT2DG=$H$J$k!#(B
$B$3$N$N(B IRC $B%G!<%b%s$K$b1F6A$9$k2DG=@-$,$"$k!#(B

26. BitchX DNS Buffer Overflow Vulnerability
BugTraq ID: 2087
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2000-12-06
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/2087
$B$^$H$a(B:

BitchX $B$O(B Colten Edwards $B$K$h$C$F:n@.$5$l$?CxL>$J(B Internet Relay Chat
$B$N%/%i%$%"%s%H$G$"$k!#$3$N%=%U%H%&%'%"$K$O%"%/%;%9$r@)8B$5$l$?;q8;$rMx(B
$BMQ$G$-$k2DG=@-$,$"$kLdBj$,B8:_$9$k!#(B
$B%W%m%0%i%`$N(B DNS $BL>A02r7hItJ,$KLdBj$,@8$8$k!#%j%>%k%P$N%W%m%0%i%`%3!<%I(B
$B$K4^$^$l$k%P%C%U%!%*!<%P%U%m!<$N$?$a$K!"56B$$5$l$?(B DNS $B%Q%1%C%H$r@8@.$5(B
$B$l$?>l9g!"%9%?%C%/>e$NJQ?t$r>e=q$-$5$l$F$7$^$&2DG=@-$,$"$k!#$3$NLdBj$N(B
$B$?$a!"0-0U$"$k%f!<%6$K(B BitchX $B%/%i%$%"%s%H$N(B UID $B$b$7$/$O(B GID $B$G%j%b!<(B
$B%H$+$i%W%m%0%i%`$r1. Hospital Records Hacked
$BCxh$C/$J$/$H$b(B 7 $B7nH>$P$^$GB3$$$?!#1=$K$h$l$P!"Bg(B
$B3X0eNE%;%s%?!<$O45http://www.securityfocus.com/templates/article.html?id=122

2. Scientists Pan Carnivore Review
$BCxJ$r3e:S$9$kBe$o$j$K!"(B5 $B?M$N2J3Xhttp://www.securityfocus.com/templates/article.html?id=121

IV.SECURITY FOCUS TOP 6 TOOLS
- -----------------------------
1. Sysmon 0.90.9
(BSDI, Digital UNIX/Alpha, FreeBSD, HP-UX, Linux, NetBSD, SCO $B$*$h$S(B
Solaris)
$B:nhttp://www.sysmon.org/

Sysmon $B$O9b@-G=$G@53N$J%M%C%H%o!<%/4F;k$r$9$k$?$a$K@_7W$5$l$?%M%C%H%o!<(B
$B%/4F;k%D!<%k$G$9!#8=:_!"(BSMTP$B!"(BIMAP$B!"(BHTTP$B!"(BTCP$B!"(BUDP$B!"(BRadius$B!"(BNNTP$B!"(BPOP3
$B%5!<%P$N4F;k$r4^$a$?8!::$,%5%]!<%H$5$l$F$$$^$9!#$^$?!"%[%9%H$d%k!<%?$K(B
ping $B%3%^%s%I$r2. Integrity checking utility (ICU) 0.1
(FreeBSD, Linux, NetBSD, OpenBSD, Solaris $B$*$h$S(B UNIX)
$B:nhttp://nitzer.dhs.org/ICU/ICU.html

ICU (Integrity Checking Utility) $B$O!"(BICU $B%5!<%P$+$i%j%b!<%H>e$N%[%9%H$G(B
AIDE $B%U%!%$%k%7%9%F%`$N40A4@-$r%A%'%C%/$7EE;R%a!<%k$G%l%]!<%H$9$k(B PERL
$B8@8l$G=q$+$l$?%W%m%0%i%`$G$9!#$3$l$O(B SSH $B$N5!G=$rMxMQ$7$F$$$^$9!#(B

3. httptunnel 3.0.5
(AIX, BSDI, Digital UNIX/Alpha, FreeBSD, HP-UX, IRIX, Linux,
NetBSD, OpenBSD, SCO, Solaris, SunOS, True64 UNIX, UNIX, Ultrix $B$*$h$S(B
Unixware)
$B:nhttp://www.nocrew.org/software/httptunnel.html

httptunnel $B$O!"@)8B$5$l$?%U%!%$%d%&%)!<%k$N8e$m$K$"$k8IN)$7$?%3%s%T%e!<(B
$B%?$+$i%$%s%?!<%M%C%H>e$K$"$k%7%9%F%`$X%"%/%;%9$9$k$?$a$K(B HTTP $B%W%m%-%7$r(B
$BDL$7$FAPJ}8~$N%G!<%?%A%c%s%M%k$rMxMQ$G$-$k$h$&$K$7$^$9!#(B

4. Exiscan 0.9
(Linux, Solaris, UNIX)
$B:nhttp://duncanthrax.net/exiscan/

Exiscan $B$O(B Exim MTA $B$rMxMQ$7$FF0:n$9$k!"EE;R%a!<%k7PM3$G46@w$9$k%&%$%k%9(B
$B$N%9%-%c%J$G$9!#(BPerl $B8@8l$G=q$+$l!"Hs>o$K7Z$/F0:n$9$k$h$&$K@_7W$5$l$F$$(B
$B$^$9!#(BExiscan $B$O(B McAfee $B$N(B UVSCAN$B!"(BSophos Sweep$B!"(BTrend Micro $B$N(B FileScan$B!"(B
AVP $B%&%$%k%9%9%-%c%K%s%0%(%s%8%s$r%5%]!<%H$7$F$$$^$9!#(BExiscan $B$O(B MS-TNEF
$B$d(B SMIME (signed) $B7A<0$N%a%C%;!<%8$NFbMF$b%9%-%c%s$9$k$3$H$,2DG=$G$9!#(B

5. Random Number Generator Pro 1.23
(Windows 2000, Windows 95/98 $B$*$h$S(B Windows NT)
$B:nhttp://www.segobit.com/rng.zip

Random Number Generator $B$OMp?t$r@8@.$9$k$?$a$N(B Windows $B%"%W%j%1!<%7%g%s(B
$B$G$9!#>e8B$H2<8B!"?t$NA}2C$r@_Dj$9$k$3$H$,$G$-$^$9!#@5$N?t$bIT$N?t$b;X(B
$BDj$G$-$^$9!#@8@.$7$?Mp?t$+$i?t$r$N%"%W(B
$B%j%1!<%7%g%s$GMxMQ$9$k$?$a$NJT=8$d%/%j%C%W%\!<%I$X$NE=$jIU$1$,2DG=$G$9!#(B
Random Number Generator $B$O$9$Y$F$NMp?t$r0u:~$G$-!"%U%!%$%k$KJ]B8$9$k$3(B
$B$H$,$G$-$^$9!#(BRandom Number Generator $B$OF1;~$K(B9999 $B8D$NMp?t$r@8@.$G$-$^(B
$B$9!#(B

6. M2Crypto 0.05
(Linux, Solaris, UNIX, Windows 2000 $B$*$h$S(B Windows NT)
$B:nhttp://www.post1.com/home/ngps/m2/

M2Crypto $B$O(B Python$B!"(BOpenSSL$B!"(BSWIG $B$+$i:n@.$5$l$^$7$?!#(BPython $B%W%m%0%i%^(B
$B$O(B DH$B!"(BDSA$B!"(BRSA$B!"BP>N0E9f!"%a%C%;!<%8%@%$%8%'%9%H!"(BHMAC$B!"(BSSL$B!"(BS/MIME $B$N(B
$B5!G=$r4JC1$K;HMQ$G$-$^$9!#(B

- --
Translated by SAKAI Yoriyuki, KAGEYAMA Tetsuya
Little eArth Corporation - LAC Co., Ltd.
http://www.lac.co.jp/security/

-----BEGIN PGP SIGNATURE-----
Version: PGP for Personal Edition 5.5.5J
Comment: SAKAI Yoriyuki

iQA/AwUBOjZX85QwtHQKfXtrEQJ3tQCg1fcB1yIbGpdfZg/S6CpJLLnN/QgAn09u
ppku7JeEmydO3m8yLiT5lHzk
=RBFK
-----END PGP SIGNATURE-----