SecurityFocus.com Newsletter #87 2001-3-30->2001-4-4

To: BUGTRAQ-JP@SECURITYFOCUS.COM
Subject: SecurityFocus.com Newsletter #87 2001-3-30->2001-4-4
From: KAGEYAMA Tetsuya <t.kageym@LAC.CO.JP>
Date: Wed, 11 Apr 2001 14:56:38 +0900
Reply-To: KAGEYAMA Tetsuya <t.kageym@LAC.CO.JP>
Sender: BUGTRAQ-JP List <BUGTRAQ-JP@SECURITYFOCUS.COM>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

$B1F;3(B@$B%i%C%/$G$9!#(B

SecurityFocus.com Newsletter $BBh(B 87 $B9f$NOBLu$r$*FO$1$7$^$9!#(B
$BLu$N$J$$9`L\$K$D$$$F$O!VF|K\8lLu$J$7!W$H$7$F6hJL$7$F$"$j$^$9!#(B

- ---------------------------------------------------------------------------
SecurityFocus.com Newsletter $B$K4X$9$k(BFAQ:
<URL: http://www.securityfocus.com/forums/sf-news/faq.html>
BugTraq-JP $B$K4X$9$k(B FAQ:
<URL: http://www.securityfocus.com/forums/bugtraq-jp/faq.html>
- ---------------------------------------------------------------------------
$B0zMQ$K4X$9$kHw9M(B:
$B!&$3$NOBLu$O(B Security-Focus.com $B$N5v2D$r3t<02qe$G9T$o(B
  $B$l$F$$$^$9!#(B
$B!&(BSecurityFocus.com Newsletter $B$NOBLu$r(B Netnews, Mailinglist,
  World Wide Web, $B=q@R(B, $B$=$NB>$N5-O?G^BN$G0zMQ$5$l$k>l9g$K$O%a!<%k$N(B
  $BA4J80zMQ$r$*4j$$$7$^$9!#(B
$B!&F|K\8lHG%K%e!<%9%l%?!<(B 1 $B9f$+$i(B 3 $B9f$^$G$K$O$3$NHw9M$,IU$$$F$$$^$;(B
  $B$s$,=`MQ$9$k$b$N$H$7$^$9!#(B
$B!&$^$?!"(BSecurity-Focus.com $BDs6!$N(B BugTraq-JP $B%"!<%+%$%V(B [*1] $B$X$N$$$+(B
  $B$J$k7A<0$N%O%$%Q!<%j%s%/$b>e5-$K=`$8$F$/$@$5$$!#(B
1) <URL http://www.securityfocus.com/templates/archive.pike?list=79>
- ---------------------------------------------------------------------------
- ---------------------------------------------------------------------------
$B$3$NOBLu$K4X$9$kHw9M(B:
$B!&$3$NOBLu$NE,MQ@.2L$K$D$$$F3t<02ql9g!"(BBUGTRAQ-JP $B$X(B Errata $B$H$7$F=$@5(B
  $BHG$r$4Ej9FD:$/$+!"Lul9g$K$O=$@5HG$r$G$-$k$@$1?WB.$KH/9T$7$^$9!#(B
- ---------------------------------------------------------------------------
- ---------------------------------------------------------------------------
$B86HG(B:
Message-ID:  <Pine.GSO.4.30.0104091319140.27183-100000@mail>
Date:         Mon, 9 Apr 2001 13:20:27 -0600

SecurityFocus.com Newsletter #87
- --------------------------------

I. FRONT AND CENTER($BF|K\8lLu$J$7(B)
     1.Designing Secure Networks Based on the Software Process Model
     2.Chasing the Wind, Part Five: the Devil in the Details
II. BUGTRAQ SUMMARY
     1. Rit Research Labs "The Bat!"  Concealed Attachment Vulnerability
     2. Caucho Technology Resin JavaBean Disclosure Vulnerability
     3. Gene6 BPFTP FTP Server User Credentials Disclosure Vulnerability
     4. Navision Financials Server DoS Vulnerability
     5. Ntpd Remote Buffer Overflow Vulnerability
III. SECURITYFOCUS.COM NEWS ARTICLES
     1. Pentagon computers attacked 715 times last year
     2. Report: Pentagon cyber defenses impaired
     3. Wired reporter forced to testify against cypherpunk
     4. Hacked? Call a lawyer
IV.SECURITY FOCUS TOP 6 TOOLS
     1. SILC (Secure Internet Live Conferencing) 20010409
     2. Bastille Linux 1.2.0.rc1
     3. AckCmd
     4. EnGarde Secure Linux v1.0.1
     5. SDSC/GT Secure FTP 1.1
     6. Viralator Proxy Virus Scanner 4-beta

I. FRONT AND CENTER($BF|K\8lLu$J$7(B)
- ---------------------------------

II. BUGTRAQ SUMMARY
- -------------------

1. Rit Research Labs "The Bat!"  Concealed Attachment Vulnerability
BugTraq ID: 2530
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2001-04-02
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/2530
$B$^$H$a(B:

"The Bat!" $B$O(B Rit Research Labs $B$,Ds6!$9$k(B Windows $B8~$1$N(B MUA $B$G$"$k!#(B

$B%j%b!<%H$+$i$N967b$rJ$$$1#$9$h$&$J!"B??t$N6uGr$r4^$`9*L/$KAH$_N)$F$i$l$?L>A0$r;}$D%U(B
$B%!%$%k$rE:IU$7$?EE;R%a!<%k%a%C%;!<%8$r:n@.$9$k$3$H$,2DG=$G$"$k!#(B

$B2C$($F!"0lEY%f!<%6$,$3$N%a%C%;!<%8$rI=<($9$k$H!"$3$N$N@7$H$J$k%f!<%6$O!"%U%!%$%k$Nl9g!"%f!<%6$KBP$7$F$I$s$J7Y9p$b=P$5$l$:$KE:IU$5$l$?%W%m%0%i%`$,e$N?<9o$J7k2L$r$b$?$i$92DG=@-$,$"(B
$B$k!#%f!<%6$,4IM}l9g!"%7%9%F%`A4BN5Z$S%m!<%+%k(B
$B%M%C%H%o!<%/$,4m81$KGx$5$l$k2DG=@-$,$"$k!#(B

2. Caucho Technology Resin JavaBean Disclosure Vulnerability
BugTraq ID: 2533
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2001-04-03
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/2533
$B$^$H$a(B:

Caucho Technology Resin $B$O!"(BJava $B5Z$S(B Java $B%9%/%j%W%H$r%5%]!<%H$7$F$$$k(B
$B%5!<%V%l%C%H5Z$S(B JSP $B$N%(%s%8%s$G$"$k!#(B

Resin $B$KB8:_$9$ke$KB8:_$9$k4{CN$N(B JavaBean $B%U%!%$%k$rC%o$N>u672<$G$O!"%/%i%$%"%s%H$K$h$k(B JavaBean $B%U%!%$%k$NMW5a$KBP$7$F$O!"(B
Web $B%5!<%P$O(B error 403 $B$N%a%C%;!<%8$rJV$9!#(B

Resin $B$K$OFCDj$N(B HTTP $B%j%/%(%9%H$N=hM}J}K!$K7g4Y$,$"$k$?$a!"%j%b!<%H$N(B
$B967buBV$,0z$-5/$3$5$l$k!#(B'.jsp' $B$NB8:_$K$h$C$F%j%/%(%9%H(B
$B$N2ro$N%G%#%l%/%H%j$NJ]8n$rL58z$K$9$k86(B
$B0x$H$J$k!#(B

$B$3$Nl9g(B) $B$K4^$^$l$k(B
$B5!L)$K$9$Y$->pJs$,!"967b3. Gene6 BPFTP FTP Server User Credentials Disclosure Vulnerability
BugTraq ID: 2534
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2001-04-03
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/2534
$B$^$H$a(B:

G6 FTP Server $B$O!"8=:_$O(B BPFTP Server $B$H$$$&L>A0$N(BGene6 $B$,Ds6!$9$k%$%s(B
$B%?!<%M%C%H(B FTP $B%5!<%P$G$"$k!#(B

BPFTP Server $B$O(B UNC $B6&M-$N;HMQ$r%5%]!<%H$7$F$$$k!#(BUNC $B6&M-$O!"%f!<%6$,(B
$B6&M-;q8;$r<1JL$9$kJ}K!$G$"$j!"(B'//' $B$d(B '\\' $B$K$h$C$F%5!<%P$rFCDj$7!"(B'/'
$B$d(B '\' $B$K$h$C$F6&M-;q8;$r;XDj$9$k!#(BUNC $BL>$N7A<0$O(B
\\server\share\path\filename $B$N$h$&$J9=B$$K$J$C$F$$$k!#(B

BPFTP Server $B$KB8:_$9$k7g4Y$K$h$C$F!"%f!<%6$O!"2TF0$7$F$$$k%5!<%P>e$KB8(B
$B:_$9$k%f!<%6$N>ZL@=q$r3+<($9$k$3$H$,2DG=$G$"$k!#(B

$B%m%0%$%s$7$F$$$k(B FTP $B%f!<%6$,30It$N6&M-;q8;$K@\B3$7!"2~$6$s$5$l$?(B 'size'
$B%3%^%s%I$d(B 'mdtm' $B%3%^%s%I$rF~NO$7$?>l9g!"%f!<%6$O(B FTP $B%5!<%P$+$iK>$s$@(B
$B%[%9%H$KBP$7$F(B SMB $B@\B3$9$k$3$H$,2DG=$G$"$k!#$=$l$O@\B3$rMW5a$7$F$$$k0-(B
$B0U$"$k%[%9%H$X$N@\B3$H?dDj$5$l$k!#%5!<%P$+$i%[%9%H$KBP$9$k@\B3$,@.8y$9(B
$B$k>r7o$O!"%5!<%P$,!"$=$N%5!<%P>e$KB8:_$9$k%f!<%6$N>ZL@=q$rDs6!$7$F$$$k(B
$B$3$H$G$"$k!#$3$N>pJs$O!"%5!<%I%Q!<%F%#@=$N%M%C%H%o!<%/%f!<%F%#%j%F%#$r(B
$B;HMQ$7$F!"%[%9%H>e$NFbIt5Z$S30It$N%H%i%U%#%C%/$r4F;k$9$k$3$H$G!"MF0W$K(B
$B3MF@$9$k$3$H$,2DG=$G$"$k!#%O%C%7%e2=$5$l$?%Q%9%o!<%I$rEp$^$l$l$P!"%f!<(B
$B%6L>$d%Q%9%o!<%I$r2r@O$5$l$k2DG=@-$,$"$k!#(B

$B967bl9g!"%[%9%H$KBP$9$k99$J$k967b$r4. Navision Financials Server DoS Vulnerability
BugTraq ID: 2539
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2001-04-03
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/2539
$B$^$H$a(B:

Navision Financials $B%5!<%P$O!"%$%s%?!<%M%C%H7PM3$G$N;HMQ$,2DG=$J%3%s%](B
$B!<%M%s%H$r4^$`!":bL34IM}$N$?$a$N%7%9%F%`$G$"$k!#(BFinancials $B$O%j%b!<%H%[(B
$B%9%H$+$i$N%G!<%?$r=hM}$9$k$?$a$N%5!<%P%W%m%0%i%`$,4^$^$l$F$$$k!#$3$N%5(B
$B!<%P$O!"(B2407 $BHV%]!<%H$r;HMQ$9$k!#(B

$B$3$N%5!<%P$K$O!"(BDoS $B>uBV$K4Y$k/$J$/$H$b(B 2 $B$D$NJ}K!$G!"(BDoS $B>uBV$K4Y$l$k$3$H$,2DG=(B
$B$G$"$k!#$R$H$DL\$NJ}K!$O!"967b/$J$$%G!<%?$rAw?.$9$k$3$H$G$"$k!#Nc$($P!"(B10 $B8D$N@\B3$r3N(B
$BN)$7!"Ls(B 100 $B%P%$%H$N%G!<%?$r$=$l$>$l$N@\B3$r2p$7$FAw?.$9$k!#(B

$B$3$l$i(B 2 $B$D$N%7%J%j%*$K$h$C$F!"(BNavision Financials $B$KBP$9$k%j%b!<%H$+$i(B
$B$N(B DoS $B967b$,2DG=$G$"$j!"$3$N%7%9%F%`$K0MB8$7$F$$$k%"%W%j%1!<%7%g%s$b(B
DoS $B>uBV$K4Y$k2DG=@-$,$"$k!#(B

$BDL>o5!G=$NI|5l$K$O%5!<%P$N:F5/F0$,I,MW$G$"$k!#(B

5. Ntpd $B%j%b!<%H$+$i$N:F8=@-(B: Buffer Overflow Vulnerability
BugTraq ID: 2540
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2001-04-04
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/2540
$B$^$H$a(B:

NTP (Network Time Protocol) $B$O!"$"$k%3%s%T%e!<%?$H$"$k%7%9%F%`$H$N4V$G!"(B
$B$^$?$O!"$"$k%3%s%T%e!<%?$H?.Mj$G$-$k;~9o$rDs6!$9$k%5!<%P$H$N4V$G!";~4V(B
$B$rF14|$5$;$k$?$a$K;HMQ$5$l$F$$$k!#E>Aw%W%m%H%3%k$H$7$F!"(BUDP $B$,;HMQ$5$l(B
$B$k!#(B

UNIX $B%7%9%F%`$G$O!"(Bntpd $B$H8F$P$l$k(B NTP $B$r;HMQ$7$F$$$k%$%s%?!<%M%C%H>e$N(B
$B%?%$%`%5!<%P$H!"%7%9%F%`;~4V$rDj4|E*$KF14|$5$;$k$3$H$,2DG=$J%G!<%b%s$N(B
$B;HMQ$,2DG=$G$"$k!#(Bntpd $B$K$O%P%C%U%!%*!<%P!<%U%m!<$,H/@8$9$kr7o$GMxMQ$9$k$3$H$,2DG=$G$"$k!#(B

$B=hM}$N:GCf$K!"(Bntpd $B$O%?%$%`%5!<%P$r3MF@$7!"JVEz$rpJs$rCj=P$9$k$?$a$KB??t$N2r@O=hM}$,9T$o$l$k!#(B

$B$3$l$i$N=hM}$N$R$H$D$G!"%3%s%^$K$h$C$F6h@Z$i$l$?%U%#!<%k%I$N2r@O$r4^$`(B
$B$b$N$,$"$k!#(B

while (cp < reqend && *cp != ',')
  *tp++ = *cp++;

'tp' $B$O$3$N4X?t$K4^$^$l$k%m!<%+%kJQ?t$r;X$9%]%$%s%?$G$"$j!"(B'cp' $B$O%G!<(B
$B%b%s$,pJs$r%m!<%+%kJQ?t(B ($B%9%?(B
$B%C%/>e$KB8:_$9$k(B) $B$K%3%T!<$9$k$?$a%k!<%W$G$"$k!#(B

$B%k!<%W$,=*N;$9$k>r7o$,!"%Q%1%C%H$N%G!<%?$r40A4$K%3%T!<$9$k$+!"%G!<%?Fb(B
$B$K%3%s%^$,B8:_$9$k$+!"$G$7$+$J$$$?$a!"%W%m%0%i%`$N$3$NItJ,$,%9%?%C%/%*(B
$B!<%P!<%U%m!<$r0z$-5/$3$92DG=@-$,$"$k!#30It$+$iM?$($i$l$?%G!<%?$,!"(B'tp'
$B$,;X$7$F$$$k%m!<%+%kJQ?t$N%5%$%:$rD6$($F$$$k>l9g!"$3$N%k!<%W$O%3%T!<$r(B
$BDd;_$9$k$3$H$O$J$$!#(B

$B$=$N7k2L!"%G!<%?%0%i%`Cf$NFCDj$N%U%#!<%k%I$,Bg$-$9$.$k>l9g!"%]%$%s%?(B
'tp' $B$,;X$7$F$$$k%m!<%+%kJQ?t$N<~JU$N%a%b%j$,!"D62a$7$?%G!<%?$K$h$C$F>e(B
$B=q$-$5$l$k2DG=@-$,$"$k!#(B

$B967be$G$O!"967be$GG$0U$N%W%m%0%i%`$re=q$-$9$k$H$$$&0lHLE*$J%P%C%U%!%*!<%P!<%U%m!<$N967bJ}K!$Gl(B
$B9g$,B?$$!#$3$N@7$H$J$k%[%9(B
$B%H$r40A4$K@)8f$9$k$h$&$JG$0U$N%3%^%s%I$,e!"(BUDP $B$O%3%M%/%7%g%s%l%97?$N%W%m%H%3%k$G$"$k!#$3$l$O!"967b1. Pentagon computers attacked 715 times last year
$BCxhttp://www.securityfocus.com/templates/article.html?id=188

2. Report: Pentagon cyber defenses impaired
$BCxpJs%;%-%e%j%F%#(B-- DOD $B6[5^BP:vG=NO$N8~>e!W$O!"O"K.5D2q$ND4::Ev6I$N0l(B
$B9T@/It$G$"$k2q7W8!::1!$,!"@h=5H/9T$7$?Js9p=q$G$"$k!#$=$NCf$GEv6I$O!"KI(B
$B1RD#$,:G?7$N%=%U%H%&%(%"$N2A$r=P$7$F$$$k$N$G$"$k(B

http://www.securityfocus.com/templates/article.html?id=187

3. Wired reporter forced to testify against cypherpunk
$BCxe$2$F$*$i$:!"$^$?H`<+?H(B
$B$3$N;v7o$K$O$"$^$j@Q6KE*$K2pF~$r$7$F$$$J$$!#(B

McCullagh $B;a$O!"5!L)$H$7$F;}$C$F$$$k(B Bell $B;a$N;v7o$K4X$9$k>pJs$r8x3+$9(B
$B$k$h$&$K6/@)$5$l$?5?$$$r>ZL@$9$k$3$H$rMW5a$7$F$$$k>$4->u$NGK4~$r5a$a$?(B
$B$,!"H]G'$5$l$F=*$o$C$?!#(B

http://www.securityfocus.com/templates/article.html?id=186

4. Hacked? Call a lawyer
$BCx/$J$/$H$b8=$*$h$S857Y;!Ev6I$H%;%-%e%j%F%#4k6H(B
$B$N:G9b8"Mxc$7$J$1$l$P$J$i$J$$!#!W$H=R$Y$?!#(B

http://www.securityfocus.com/templates/article.html?id=185

IV.SECURITY FOCUS TOP 6 TOOLS
- -----------------------------
1. SILC (Secure Internet Live Conferencing) 20010409
$B%W%i%C%H%U%)!<%`(B: Linux
$B:nhttp://silc.pspt.fi/

SILC (Secure Internet Live Conferencing) $B$O!"%$%s%?!<%M%C%H$N%;%-%e%"$G(B
$B$J$$%A%c%s%M%k$r7PM3$7$F!"%;%-%e%"$J%+%s%U%!%l%s%9%5!<%S%9$rDs6!$9$k%W(B
$B%m%H%3%k$G$9!#(BSILC $B$O(B IRC $B$KI=LL>e;w$F$O$$$^$9$,!"FbIt$OA4$/0c$$$^$9!#(B
SILC $B$NL\E*$O%;%-%e%"$J%+%s%U%!%l%s%9%5!<%S%9$rDs6!$9$k$3$H$K$"$j$^$9!#(B
$B6/NO$J0E9f$rMxMQ$7$F!"$9$Y$F$NDL?.FbMF$r%;%-%e%"$K$7$^$9!#(B

2. Bastille Linux 1.2.0.rc1
$B%W%i%C%H%U%)!<%`(B: Linux
$B:nhttp://bastille-linux.sourceforge.net/

Bastille Linux$B$O(B Red Hat Linux 6.0/6.1$B$KBP$9$k$b$C$H$bJq3gE*$G=@Fp$G$"(B
$B$j!"650iE*$J%;%-%e%j%F%#6/2=%W%m%0%i%`$rL\I8$H$7$F$$$^$9!#$3$N%W%m%0%i(B
$B%`$,.$5$J%P%0$r=$@5$7$^$7$?!#$^$?!"(BAutomated Bastille $B$r:F$SAH$_9~$_!">.$5(B
$B$J%P%0$r=$@5$7$^$7$?!#(B

3. AckCmd
$B%W%i%C%H%U%)!<%`(B: Windows 2000
$B:nhttp://ntsecurity.nu/toolbox/ackcmd/

AckCmd $B$O!"(BWindows 2000 $B$r%j%b!<%H$+$iMxMQ$G$-$kFCJL$J%3%^%s%I%W%m%s%W(B
$B%H$G$9!#(BTCP $B$N(B ACK $B%;%0%a%s%H$@$1;HMQ$7$FDL?.$7$^$9!#$3$N$?$a!">l9g$K$h(B
$B$C$F$O%U%!%$%d%&%)!<%k$r1[$($F!"%/%i%$%"%s%H%3%s%]!<%M%s%H$O%5!<%P%3%s(B
$B%]!<%M%s%H$KD>@\@\B3$9$k$3$H$,$G$-$^$9!#(B

4. EnGarde Secure Linux v1.0.1
$B%W%i%C%H%U%)!<%`(B: Linux
$B:nhttp://www.EnGardeLinux.org/download.html

EnGarde Secure Linux $B$O!"9bEY$J%;%-%e%j%F%#5;=Q$r&$N0lHLE*$J%$%s%?!<%M%C%H$G$N(B
$B%5!<%P$H$7$F;HMQ2DG=$G$9!#(B

5. SDSC/GT Secure FTP 1.1
$B%W%i%C%H%U%)!<%`(B: FreeBSD$B!"(BLinux$B!"(BNetBSD$B!"(BOpenBSD$B!"(BSolaris$B!"(BUNIX$B!"(B
Windows 2000$B!"(BWindows 95/98$B!"(BWindows NT
$B:nhttp://www.glub.com/products/secureftp/

Secure FTP $B$O!"(BSSL $B7PM3$G(B FTP $B%G!<%b%s$H%;%-%e%"$K@\B3$9$k$?$a$N%/%i%$(B
$B%"%s%H%Q%C%1!<%8$G$9!#(B

6. Viralator Proxy Virus Scanner 4-beta
$B%W%i%C%H%U%)!<%`(B: n/a
$B:nhttp://viralator.loddington.com

Viralator $B$O!"%M%C%H%o!<%/$N(B Squid $B%W%m%-%7%5!<%P$K%&%$%k%9%9%-%c%J$rO"(B
$BF0$5$;$k$?$a$N%$%s%?!<%U%'%$%9$G$9!#%f!<%6$,%@%&%s%m!<%I$r$9$kA0$K!"%W(B
$B%m%-%7$O%U%!%$%k$r(B Viralator $B%9%/%j%W%H$KEO$7!"%&%$%k%9%9%-%c%J(B ($B:G=i$N(B
$B%j%j!<%9$G$O(B Onoculate) $B$r-Mh!"3HD%$5$l$k5!G=$K$O!"B>$N$N=hM}5!G=$,DI2C$5$l$^$7$?!#(B

Translated by ICHINOSE Sayo, KAGEYAMA Tetsuya, KOMATSU Misa
LAC Co., Ltd. Computer Security Laboratory
http://www.lac.co.jp/security/
-----BEGIN PGP SIGNATURE-----
Version: PGP for Personal Edition 5.5.5J
Comment: KAGEYAMA Tetsuya

iQA/AwUBOtNzSs32EXDdoEFfEQJ1AACfZ6gpPhyLEmC2361ewsXFPDmQhtsAoNb2
0YJgheL+Rn1kSmhsZecLOgKo
=D811
-----END PGP SIGNATURE-----