SecurityFocus.com Newsletter #94 2001-5-18->2001-5-25

To: bugtraq-jp@securityfocus.com
Subject: SecurityFocus.com Newsletter #94 2001-5-18->2001-5-25
From: KAGEYAMA Tetsuya <t.kageym@lac.co.jp>
Date: Wed, 30 May 2001 11:24:52 +0900
Delivered-To: mailing list bugtraq-jp@securityfocus.com
Delivered-To: moderator for bugtraq-jp@securityfocus.com
List-Help: <mailto:bugtraq-jp-help@securityfocus.com>
List-Id: <bugtraq-jp.list-id.securityfocus.com>
List-Post: <mailto:bugtraq-jp@securityfocus.com>
List-Subscribe: <mailto:bugtraq-jp-subscribe@securityfocus.com>
List-Unsubscribe: <mailto:bugtraq-jp-unsubscribe@securityfocus.com>
Mailing-List: contact bugtraq-jp-help@securityfocus.com; run by ezmlm
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

$B1F;3(B@$B%i%C%/$G$9!#(B

SecurityFocus.com Newsletter $BBh(B 94 $B9f$NOBLu$r$*FO$1$7$^$9!#(B
$BLu$N$J$$9`L\$K$D$$$F$O!VF|K\8lLu$J$7!W$H$7$F6hJL$7$F$"$j$^$9!#(B

- ---------------------------------------------------------------------------
SecurityFocus.com Newsletter $B$K4X$9$k(BFAQ:
<URL: http://www.securityfocus.com/forums/sf-news/faq.html>
BugTraq-JP $B$K4X$9$k(B FAQ:
<URL: http://www.securityfocus.com/forums/bugtraq-jp/faq.html>
- ---------------------------------------------------------------------------
$B0zMQ$K4X$9$kHw9M(B:
$B!&$3$NOBLu$O(B Security-Focus.com $B$N5v2D$r3t<02qe$G9T$o(B
  $B$l$F$$$^$9!#(B
$B!&(BSecurityFocus.com Newsletter $B$NOBLu$r(B Netnews, Mailinglist,
  World Wide Web, $B=q@R(B, $B$=$NB>$N5-O?G^BN$G0zMQ$5$l$k>l9g$K$O%a!<%k$N(B
  $BA4J80zMQ$r$*4j$$$7$^$9!#(B
$B!&F|K\8lHG%K%e!<%9%l%?!<(B 1 $B9f$+$i(B 3 $B9f$^$G$K$O$3$NHw9M$,IU$$$F$$$^$;(B
  $B$s$,=`MQ$9$k$b$N$H$7$^$9!#(B
$B!&$^$?!"(BSecurity-Focus.com $BDs6!$N(B BugTraq-JP $B%"!<%+%$%V(B [*1] $B$X$N$$$+(B
  $B$J$k7A<0$N%O%$%Q!<%j%s%/$b>e5-$K=`$8$F$/$@$5$$!#(B
1) <URL http://www.securityfocus.com/templates/archive.pike?list=79>
- ---------------------------------------------------------------------------
- ---------------------------------------------------------------------------
$B$3$NOBLu$K4X$9$kHw9M(B:
$B!&$3$NOBLu$NE,MQ@.2L$K$D$$$F3t<02ql9g!"(BBUGTRAQ-JP $B$X(B Errata $B$H$7$F=$@5(B
  $BHG$r$4Ej9FD:$/$+!"Lul9g$K$O=$@5HG$r$G$-$k$@$1?WB.$KH/9T$7$^$9!#(B
- ---------------------------------------------------------------------------
- ---------------------------------------------------------------------------
$B86HG(B:
Message-ID: <Pine.GSO.4.30.0105281105030.12544-100000@mail>
Date: Mon, 28 May 2001 11:07:11 -0600 (MDT)

SecurityFocus.com Newsletter #94
- --------------------------------

I. FRONT AND CENTER($BF|K\8lLu$J$7(B)
     1. Secure Online Behavior, Part One: Developing Good Security Habits
     2. Over Your Shoulder: The Debate Over Internet and E-mail
        Surveillance in the Workplace
II. BUGTRAQ SUMMARY
     1. SCO OpenServer vi Insecure Temporary File Creation Vulnerability
     2. Microsoft Word RTF Template Macro Execution Vulnerability
     3. Spytech SpyAnywhere Unauthorized Administrator...
     4. Microsoft Word .asd Macro File Execution Vulnerability
     5. HP OpenView ECSD Buffer Overflow Vulnerability
     6. MIMAnet Source Viewer Directory Traversal Vulnerability
     7. MS Windows 2000 Debug Register Privilege Escalation Vulnerability
     8. Windows Media Player Internet Shortcut Execution Vulnerability
     9. Norton Anti-Virus 2000 POProxy.exe Buffer Overflow Vulnerability
     10. Beck IPC GmbH IPC@CHIP Network Information Discl...
     11. Beck IPC GmbH IPC@CHIP SYN Flood DoS Vulnerability
     12. Beck IPC GmbH IPC@CHIP Telnetd Known Default Password...
     13. Beck IPC GmbH IPC@CHIP Ftpd Default Account Privileges...
     14. Beck IPC GmbH IPC@CHIP TelnetD Login Account Brute ...
     15. Beck IPC GmbH IPC@CHIP Admin Account Lockout Vulnerability
     16. Beck IPC GmbH IPC@CHIP TelnetD Account Enumeration Vulnerability
     17. Beck IPC GmbH IPC@CHIP HTTP DoS Vulnerability
     18. Beck GmbH IPC@CHIP HTTPD File Disclosure Vulnerability
     19. Faust Informatics Freestyle Chat Directory...
     20. Faust Informatics Freestyle Chat MS-DOS Device Name DoS...
     21. Computer Associates InoculateIT Symbolic Link File...
III. SECURITYFOCUS.COM NEWS ARTICLES
     1. Report: FBI cybersleuths incompetent
     2. Eighteen months for 'White Hat' Hacker
IV.SECURITY FOCUS TOP 6 TOOLS
     1. Firestorm NIDS v0.1.1
     2. virusNotification v1.9
     3. SideKick
     4. Astaro Security Linux (ASL) v1.818
     5. twwwscan v1.2
     6. Windump v3.52

I. FRONT AND CENTER($BF|K\8lLu$J$7(B)
- ---------------------------------

II. BUGTRAQ SUMMARY
- -------------------
1. SCO OpenServer vi Insecure Temporary File Creation Vulnerability
BugTraq ID: 2752
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: 2001-05-22
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/2752
$B$^$H$a(B:

SCO OpenServer $B$N$$$/$D$+$N%P!<%8%g%s$KF1:-$5$l$F$$$k(B vi $B$Nl9g$G$b!"(B/tmp $B%G%#%l%/%H(B
$B%j$NFbMF$r;vA0$K3NG'$9$k$3$H$J$7$K0l;~%U%!%$%k$r:n@.$7$F$7$^$&$N$G$"$k!#(B
$B$3$N$?$a!"%?!<%2%C%H$N%m!<%+%k$N;q8;$K%"%/%;%92DG=$J0-0U$"$k%f!<%6$O!"(B
$B%7%s%\%j%C%/%j%s%/$rMxMQ$7$?967be=q$-$,2DG=$G$"$k!#(B

$B$J$*!"967be=q$-$5(B
$B$l$k%U%!%$%k$O(B vi $B$r2. Microsoft Word RTF Template Macro Execution Vulnerability
BugTraq ID: 2753
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2001-05-21
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/2753
$B$^$H$a(B:

Microsoft Word $B$K$O!"%^%/%m$r4^$`J8=q$r3+$/A0$K%f!<%6$KF0:n$NB39T$K$D$$(B
$B$F$NN;>5$rF@$k$H$$$&%;%-%e%j%F%#5!G=$rHw$($F$$$k!#$7$+$7!"$3$N5!G=$K$O(B
$B%m!<%+%k$N%f!<%68"8B$GJ8=q$K4^$^$l$k%^%/%m$rl9g!"%?!<%2%C%H$H$J$C$?%3%s%T%e!<%?$X$N(B
$B$5$i$J$k967b$NJd=u3. Spytech SpyAnywhere Unauthorized Administrator Access Vulnerability
BugTraq ID: 2755
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2001-05-22
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/2755
$B$^$H$a(B:

SpyAnywhere $B$O!"%f!<%6$,;XDj$7$?%]!<%HHV9f$GBT$AZ=hM}$KLdBj$,B8:_$9$k!#G'>Z%j%/%(%9%HFb$N(B loginpass
$B%U%#!<%k%I$K(B 1 $BJ8;z$N$_M?$($i$l$?>l9g!"%f!<%6$O4IM}l9g!"%?!<%2%C%H$H$J$C$?%3%s%T%e!<%?$N8"(B
$B8B$rA4$FC%4. Microsoft Word .asd Macro File Execution Vulnerability
BugTraq ID: 2760
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: 2001-05-23
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/2760
$B$^$H$a(B:

Microsoft Word $B$K$O!"%^%/%m$r4^$`J8=q$r3+$/A0$K%f!<%6$KF0:n$NB39T$K$D$$(B
$B$F$NN;>5$rF@$k$H$$$&%;%-%e%j%F%#5!G=$rHw$($F$$$k!#$7$+$7!"$3$N5!G=$K$O(B
$B%m!<%+%k$N%f!<%6$,CN$jF@$k$3$H$J$/(B .asd $B$r3HD%;R$K;}$D%U%!%$%kFb$N%^%/(B
$B%m$rl=j$KJ]B8(B
$B$5$l$k!#$b$7$b(B Word $B$,J8=q:n@.Cf$K5!G=ITA4(B ($BNc$($P%/%i%C%7%e$J$I(B) $B$r0z$-(B
$B5/$3$7$?>l9g!"I|5lMQ%U%!%$%k$O<:$o$l$?%U%!%$%k$r:FEY85$KLa$9$?$a$KMQ$$$i(B
$B$lF@$k$N$G$"$k!#$^$?(B Word $B$,5/F0$9$k:]$K$O!"%G%U%)%k%H$NJ]B8@hFb$N(B .asd
$B%U%!%$%k$N=j:_$r<+F0E*$K3NG'$9$kMM$K$J$C$F$$$k!#(B

$B$7$+$7%U%!%$%kFb$K4^$^$l$k%^%/%m$N%A%'%C%/5!9=$KO3$l$,$"$k$?$a!"(BWord $B$O(B
$BI|5lMQ%U%!%$%kFb$N%^%/%m$KBP$9$k%A%'%C%/$r<:GT$7$F$7$^$&$N$G$"$k!#$b$7!"(B
$B%^%/%m$,4^$^$l$?I|5lMQ$N%U%!%$%k$,%G%U%)%k%H$NJ]B8@h$KB8:_$9$k>l9g!"(BWord
$B$O5/F0;~$K%f!<%6$KDLCN$9$k$3$H$J$/%^%/%m$rl9g!"%?!<%2%C%H$X$N$5$i$J$k967b$,0z$-5/(B
$B$3$5$l$k2DG=@-$,$"$j!"%?!<%2%C%H$H$J$C$?%3%s%T%e!<%?$N8"8B$rA4$FC%5. HP OpenView ECSD Buffer Overflow Vulnerability
BugTraq ID: 2761
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: 2001-05-23
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/2761
$B$^$H$a(B:

HP OpenView Network Node Manager (NNM) $B$O(B HP $B$K$h$C$FG[I[$5$l$F$$$k%7%9(B
$B%F%`4IM}MQ%=%U%H%&%'%"%Q%C%1!<%8$G$"$k!#$3$N%Q%C%1!<%8$O4k6H%7%9%F%`8~(B
$B$1$NMxMQ$rA[Dj$7$F@_7W$5$l!"%j%b!<%H$+$i$N4IM}5!G=$rDs6!$7$F$$$k!#(B

$B$3$N%=%U%H%&%'%"$N%3%s%]!<%M%s%H!"(BEvent Correlation Services $B%G!<%b%s(B
(ecsd) $B$NF~NO$N:3J$r$b$?$i$92DG=@-(B
$B$rUT$`LdBj$,B8:_$9$k!#$3$NLdBj$O$3$N%=%U%H%&%'%"$r2TF0$5$;$F$$$k%7%9%F(B
$B%`$N%m!<%+%k;q8;$K%"%/%;%92DG=$J%f!<%6$,4IM}o!"$3$N%G!<%b%s$O4IM}%N!<%I$KBP$9$k%a%C%;!<%8DLCNMQ%Q%C%1!<%8$H$7$F(B
$B5!G=$7$F$*$j!"4IM}%9%F!<%7%g%s$X$N%a%C%;!<%8$NAw$j=P$7$H%9%F!<%7%g%s$+(B
$B$i$N%a%C%;!<%8$Ne$NCM$r>e=q$-$G$-!"%m!<%+%k$N(B
$B%f!<%6$K$h$k0U?^E*$J%3!<%I$N6. MIMAnet Source Viewer Directory Traversal Vulnerability
BugTraq ID: 2762
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2001-05-23
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/2762
$B$^$H$a(B:

MIMAnet Source Viewer $B$O%U%j!<$GG[I[$5$l$F$$$k(B CGI $B%9%/%j%W%H$G$"$j!"%5(B
$B!<%PFb$KJ]B8$5$l$F$$$k%W%m%0%i%`$N%=!<%9%3!<%I$r;2>H$9$k5!G=$rDs6!$7$F(B
$B$$$k!#(B

$B$3$N%=%U%H%&%'%"$O(B loc $B$H8F$P$l$k;XDj$5$l$?%U%!%$%k$r3+$/:]$N%U%!%$%kL>(B
$B$H$7$FMxMQ$5$l$k0z?t$rH2DG=$G$"$k!#(B

$B$3$N>uBV$O967bpJs$r3+<($7$F$7$^$&7k2L$r$b(B
$B$?$i$9!#Nc$($P%7%9%F%`MQ$N%Q%9%o!<%I%U%!%$%k$,%7%c%I%&2=$5$l$F$$$J$$>l(B
$B9g!"%Q%9%o!<%I%O%C%7%e$OK\Mh$=$&$G$"$C$F$O$J$i$J$$$K$b4X$o$i$:967b7. MS Windows 2000 Debug Register Privilege Escalation Vulnerability
BugTraq ID: 2764
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: 2001-05-24
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/2764
$B$^$H$a(B:

Windows 2000 $B$N%G%P%C%0%l%8%9%?$N$N%W%m%;%9$K$b1F6A$r5Z$\$9$h$&$K(B DR $B%l%8%9(B
$B%?$rJL8D$N$"$k%W%m%;%9$,@_Dj$G$-F@$F$7$^$&LdBj$,B8:_$9$k$N$G$"$k!#$3$N(B
$B$?$a%m!<%+%k$+$i8"8B$r;}$?$J$$%W%m%;%9$,4pK\E*$K0U?^$9$k%W%m%;%9$N$$$:(B
$B$l$KBP$7$F$G$b%V%l!<%/%]%$%s%H$r@8@.$G$-$F$7$^$($k2DG=@-$,B8:_$9$k$N$G(B
$B$"$k!#$b$7$"$k%W%m%;%9$,%V%l!<%I%]%$%s%H$r;}$A!"$=$l$rl9g!"%V%l!<%/%]%$%s%HNc30$K$h$k5!G=Dd;_$,9T$o$l$k$3$H$K$J$k$N(B
$B$G$"$k!#$3$N$?$a!"8"8B$r$b$?$J$$%W%m%;%9$,%7%9%F%`>e$N0U?^$9$k%W%m%;%9(B
$B$rCfCG$5$;$i$l$F$7$^$($k$N$G$"$k!#(B

$B$3$NLdBj$O(B DoS $B$K1~MQ$5$l$k2DG=@-$,$"$k!#$7$+$7!"$=$l0J>e$K$h$j=EBg$J1F(B
$B6A$,A[Dj$5$l$k!#FCDj$N%W%m%;%9$OL>A0$D$-%Q%$%W$r4IM}$G$-F@$kMM$K$J$C$F(B
$B$$$k!#$3$l$i%Q%$%W$O$=$l$>$lFH<+$NB>$N7hDjE*$J%W%m%;%9$K$h$C$F?.Mj$5$l(B
$BF@$kL>A0$r;}$C$F$$$k!#$b$7$"$k%f!<%6$,$3$NMM$J=EMW$J%Q%$%W$N5!G=$rDd;_(B
$B$G$-$k0U?^E*$J%W%m%;%9$r:n@.2DG=$J>l9g!"967b$N%W%m%;%9$K$H$C$F?.(B
$BMj$5$lF@$kFH<+$NL>A0$HF1$8L>A0$N%Q%$%W$r@8@.$G$-$k2DG=@-$,B8:_$9$k$N$G(B
$B$"$k!#:n@.$5$l$?%W%m%0%i%`$K5r$k$,!"B>$N8"8B$r;}$D%W%m%;%9$K$h$C$F?.Mj(B
$B$5$l$?DL?.%A%c%M%k(B ($BL>A0$D$-%Q%$%W(B) $B$N!VL5L>2=!W(B(impersonating) $B$K$h$C(B
$B$F8"8B$r>:3J$5$;$k$3$H$,2DG=$G$"$k!#(B

8. Windows Media Player Internet Shortcut Execution Vulnerability
BugTraq ID: 2765
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2001-05-23
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/2765
$B$^$H$a(B:

Windows Media Player $B$O%G%8%?%k%*!<%G%#%*$d%S%G%*%3%s%F%s%D$r4U>^$KMxMQ(B
$B$5$l$k%"%W%j%1!<%7%g%s$G$"$k!#(B

$BDL>o!"%3%s%F%s%D$N%$%s%?!<%M%C%H%7%g!<%H%+%C%H$,:n@.$5$l!"%f!<%6$N%7%9(B
$B%F%`>e$N(B MSIE Internet $B%-%c%C%7%eFb$NJ]B8$5$l$k!#$7$+$7!"$3$N%=%U%H%&%'(B
$B%"$N$G(B
temporary internet files $B%U%)%k%@$K$3$N%=%U%H%&%'%"$K$h$C$F:n@.$5$l$F$7(B
$B$^$&$N$G$"$k!#(B

IE $B$,%-%c%C%7%e$+$i%U%!%$%k$r3+$/:]!"%;%-%e%j%F%#$N8"8B!V%$%s%?!<%M%C%H!W(B
$B$H$7$F3+$+$l!"(BHTML $B$d$=$NCf$K4^$^$l$k%9%/%j%W%H72$N2DG=$J=hM}$K$O@)8B$,(B
$B2C$($i$l$k$N$G$"$k!#$7$+$7!"$3$N%-%c%C%7%e>l=j0J30$N%m!<%+%k%7%9%F%`Fb$K(B
$B3JG<$5$l$k%U%!%$%k$O(B IE $B$K$h$C$F%$%s%?!<%M%C%H8"8B$h$j$bB?$/$N8"8B$,M?$((B
$B$i$l$k!V%m!<%+%k%3%s%T%e!<%?!W$H$7$F3+$+$l$F$7$^$&$N$G$"$k!#(B

$B$3$N%=%U%H%&%'%"$,%$%s%?!<%M%C%H%7%g!<%H%+%C%H$r:n@.$9$k:]!"(BMS IE $B$N%-(B
$B%c%C%7%eNN0h0J30$K$=$l$i$rJ]B8$7$F$7$^$&!#$3$N$?$a!"%7%g!<%H%+%C%H$,3+(B
$B$+$l$?:]!"$3$l$i$O%m!<%+%k%3%s%T%e!<%?$H$7$Fl=j$X$NAjBP%Q%9$K4X$9$k>pJs$,4{CN$G$J(B
$B$1$l$P$J$i$J$$$N$G$"$k!#(B

temporary internet files $B%U%)%k%@$X$NAjBP%Q%9$K4X$9$k>pJs$O%?!<%2%C%H$,(B
$BMxMQ$7$F$$$k(B OS $B$K0MB8$7$F$$$k!#(BWindows 95, 98, Me $B$G$O9-$/CN$i$l$?%G%U(B
$B%)%k%H$N>l=j$G$"$k!#$7$+$7!"(BWindowsNT 4.0 $B$H(B Windows 2000 $B$G$O%7%9%F%`(B
$BKh$KMM!9$J;vNc$,A[Dj2DG=$J%f!<%6Kh$N8DJL$N@_Dj%U%)%k%@Fb$K(B temporary 
internet files $B%U%)%k%@$,0LCV$7$F$$$k!#(B

$B$3$NLdBj$rFM$$$?967b$,@.8y$7$?>l9g!"%?!<%2%C%H$X$N$5$i$J$k967b$rJd=u$9(B
$B$k2DG=@-$,$"$k!#(B

9. Norton Anti-Virus 2000 POProxy.exe Buffer Overflow Vulnerability
BugTraq ID: 2766
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$k(B
$B8xI=F|(B: 2001-05-24
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/2766
$B$^$H$a(B:

Norton Anti-Virus 2000 $B$O9-HO0O$KMxMQ$5$l$F$$$k>&6H%Y!<%9$N%&%$%k%9BP:v(B
$B%"%W%j%1!<%7%g%s%=%U%H%&%'%"$G$"$k!#$3$N%Q%C%1!<%8Fb$K4^$^$l$k(B POProxy 
$B$O(B e-mail protection $B%*%W%7%g%s$rA*Br$9$k$3$H$GMxMQ$5$l$k%Q%C%1!<%8$KBP(B
$B$7$FIT2DJ,$JEE;R%a!<%k%9%-%c%J5!G=$G$"$k!#(B

$B$3$N%=%U%H%&%'%"$O%]!<%HHV9f(B 110 $B$G%3%M%/%7%g%s$rBT$Ae$NJ8;zNs$r967be$G10. Beck IPC GmbH IPC@CHIP Network Information Disclosure Vulnerability
BugTraq ID: 2767
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2001-05-24
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/2767
$B$^$H$a(B:

IPC@CHIP $B$O(B Beck IPC GmbH $B$K$h$jDs6!$5$l$F$$$k%7%s%0%k%A%C%W$NAH$_9~$_(B
$B7?(B Web $B%5!<%P$G$"$k!#(B

IPC@CHIP $B$K$O%j%b!<%H%f!<%6$,(B ChipCfg.cgi $B$K%"%/%;%9$G$-$F$7$^$($kLdBj(B
$B$,B8:_$9$k!#$3$N(B CGI $B%W%m%0%i%`$XFCJL$KAH$_N)$F$i$l$?(B URL $B$r;XDj$9$k$3(B
$B$H$G!"=EMW$J%M%C%H%o!<%/$K4X$9$k>pJs$r%f!<%6$XJV$7$F$7$^$&$N$G$"$k!#$3(B
$B$N(B CGI $B%W%m%0%i%`$O%G%U%)%k%H$GAH$_9~$^$l!":o=|$OIT2DG=$G$"$k!#(B

$B0d48$K$b!"$h$j>\:Y$J5;=QE*$J35MW$O8x3+$5$l$F$$$J$$!#(B

$B$3$NLdBj$rFM$$$?967b$,@.8y$7$?>l9g!"%?!<%2%C%H$H$J$k%[%9%H$X$N$5$i$J$k(B
$B967b$r0z$-5/$3$911. Beck IPC GmbH IPC@CHIP SYN Flood DoS Vulnerability
BugTraq ID: 2768
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2001-05-24
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/2768
$B$^$H$a(B:

IPC@CHIP $B$O(B Beck IPC GmbH $B$K$h$jDs6!$5$l$F$$$k%7%s%0%k%A%C%W$NAH$_9~$_(B
$B7?(B Web $B%5!<%P$G$"$k!#(B

$BBgNL$N(B TCP SYN $B%Q%1%C%H$rAwIU$9$k$3$H$K$h$jLdBj$rJz$($k%5!<%P$X$N967b$,(B
$B@.N)$7$F$7$^$$!"967bo$K:F=i4|2=$5$l$k$^$G\:Y$J5;=QE*$J35MW$ODs6!$5$l$F$$$J$$!#(B

12. Beck IPC GmbH IPC@CHIP Telnetd Known Default Password Vulnerability
BugTraq ID: 2769
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2001-05-24
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/2769
$B$^$H$a(B:

IPC@CHIP $B$O(B Beck IPC GmbH $B$K$h$jDs6!$5$l$F$$$k%7%s%0%k%A%C%W$NAH$_9~$_(B
$B7?(B Web $B%5!<%P$G$"$k!#(B

$B$3$NAuCV$KM=$aAH$_9~$^$l$F$$$k(B telnet $B%5!<%S%9$N%G%U%)%k%H%"%+%&%s%H$K(B
$B$OHs>o$KN`?d$,MF0W$J%Q%9%o!<%I(B tel $B$,=P2Y;~$K@_Dj$5$l$F$$$k!#(B

$B>/$J$/$H$b(B 2 $B$D$N?7$7$$(B telnet $B%"%/%;%9MQ$N%"%+%&%s%H$,:n@.$5$l$k$3$NAu(B
$BCV$N%$%s%9%H!<%k;~$KE,@Z$K@_Dj$,@.$5$l$F$$$J$$>l9g!"$3$NLdBj$O%j%b!<%H$N(B
$B%f!<%6$K$h$k$3$NAuCV$X$N%"%/%;%9$d@_DjJQ99$r0z$-5/$3$92DG=@-$,$"$j!"$^$?!"(B
$BF0:n$NK832$r0z$-5/$3$92DG=@-$,B8:_$9$k!#(B

13. Beck IPC GmbH IPC@CHIP Ftpd Default Account Privileges Vulnerability
BugTraq ID: 2770
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2001-05-24
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/2770
$B$^$H$a(B:

IPC@CHIP $B$O(B Beck IPC GmbH $B$K$h$jDs6!$5$l$F$$$k%7%s%0%k%A%C%W$NAH$_9~$_(B
$B7?(B Web $B%5!<%P$G$"$k!#(B

$B$3$NAuCV$KAH$_9~$^$l$F$$$k(B ftpd $B$K$O%f!<%6$,A4$F$N8"8B$rC%l9g!"%5!<%S%9$OA4$F$N8"8B$r5v2D$7$F$7$^$&$N$G$"$k!#(B

$B>/$J$/$H$b(B 2 $B$D$N?7$7$$(B telnet $B%"%/%;%9MQ$N%"%+%&%s%H$,:n@.$5$l$k$3$NAu(B
$BCV$N%$%s%9%H!<%k;~$KE,@Z$K@_Dj$,@.$5$l$F$$$J$$>l9g!"$3$NLdBj$OAuCV$X$N(B
$B%j%b!<%H%f!<%6$N@\B3!"(Banonymous $B%"%+%&%s%H$G$N%m%0%$%s!"$=$7$F4IM}l9g!"AuCV$NA4$F$N8"8B$NC%7$/2DG=@-(B
$B$,B8:_$9$k!#(B

14. Beck IPC GmbH IPC@CHIP TelnetD Login Account Brute Force Vulnerability
BugTraq ID: 2771
$B%j%b!<%H$+$i$N:F8=@-(B: Yes
$B8xI=F|(B: 2001-05-24
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/2771
$B$^$H$a(B:

IPC@CHIP $B$O(B Beck IPC GmbH $B$K$h$jDs6!$5$l$F$$$k%7%s%0%k%A%C%W$NAH$_9~$_(B
$B7?(B Web $B%5!<%P$G$"$k!#(B

$B$3$NAuCV$KAH$_9~$^$l$F$$$k(B telnet $B%5!<%S%9$O%m%0%$%s$"$k$$$O7+$jJV$7$N(B
$B%m%0%$%s<:8z$X$N1~Ez$K4X$o$i$:!"7+JV$5$l$k%j%b!<%H$N%f!<%6$K$h$k@\B39T(B
$B0Y$r5v2D$7$F$7$^$&!#$3$l$O967b$KBP$9$kAmEv(B
$B$j967b$,2DG=$J>r7o$r>7$-!"AuCVFb$N%"%+%&%s%H$NC%7$/2DG=@-$dAuCV5!(B
$BG=$NC%15. Beck IPC GmbH IPC@CHIP Admin Account Lockout Vulnerability
BugTraq ID: 2772
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2001-05-24
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/2772
$B$^$H$a(B:

IPC@CHIP $B$O(B Beck IPC GmbH $B$K$h$jDs6!$5$l$F$$$k%7%s%0%k%A%C%W$NAH$_9~$_(B
$B7?(B Web $B%5!<%P$G$"$k!#(B

$B$3$NAuCV$N(B telnet $B%5!<%S%9$X@\B3$r9T$&$3$H$N$_$G!"AuCV$N4IM}16. Beck IPC GmbH IPC@CHIP TelnetD Account Enumeration Vulnerability
BugTraq ID: 2773
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2001-05-24
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/2773
$B$^$H$a(B:

IPC@CHIP $B$O(B Beck IPC GmbH $B$K$h$jDs6!$5$l$F$$$k%7%s%0%k%A%C%W$NAH$_9~$_(B
$B7?(B Web $B%5!<%P$G$"$k!#(B

$B$3$NAuCV$KAH$_9~$^$l$F$$$k(B telnet $B%5!<%S%9$O%j%b!<%H$N%f!<%6$K$h$k@5Ev(B
$B$J(B telnet $B%"%+%&%s%HL>$NN`?d$r2DG=$K$7$F$7$^$&LdBj$,B8:_$9$k!#(B

$B%j%b!<%H$N%f!<%6$,(B telnet $B%5!<%S%9$X@\B3$r;n$_$k:]!"%f!<%6$,M?$($k%m%0(B
$B%$%s(B ID $B$KIU?o$7$F(B 2 $Bl9g!"%f!<%6$K$O(B Password: $B$H$$$&%W%m%s%W%H$,<($5$l!"(B
$BIT@5$J(B telnet $BMQ$N%"%+%&%s%HL>$r;XDj$7$?>l9g$K$O%7%9%F%`$O(B User Unknown
$B$H$$$&1~Ez$,<($5$l$k!#(B

$B%Q%9%o!<%I$KBP$9$kAmEv$j967b$rAH$_9g$o$;$k$3$H$G!"$3$NAuCV$,LdBj$rJz$((B
$B$k$HJs9p$5$l$?E@$+$iN`?d$9$k$H!"$3$NLdBj$O%j%b!<%H$N967be$N0U?^$9$k%"%+%&%s%H$NC%7$/$3$H$r2DG=$K$7$F$7$^$&!#$3$NLdBj$r(B
$BFM$/E,@Z$J967b$r9T$C$?>l9g!"$3$NLdBj$OAuCV$NDL>oF0:n$rAK32$9$k4m81@-$r(B
$B4^$s$G$$$k!#(B

17. Beck IPC GmbH IPC@CHIP HTTP DoS Vulnerability
BugTraq ID: 2774
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2001-05-24
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/2774
$B$^$H$a(B:

IPC@CHIP $B$O(B Beck IPC GmbH $B$K$h$jDs6!$5$l$F$$$k%7%s%0%k%A%C%W$NAH$_9~$_(B
$B7?(B Web $B%5!<%P$G$"$k!#(B

$B$3$NAuCV$K$O(B DoS $B>uBV$K4Y$kLdBj$,B8:_$9$k!#DL>o$"$jF@$J$$D9$$(B HTTP $B%j%/(B
$B%(%9%H$rM?$($k$3$H$G!"AuCV$N1~Ez$rDd;_2DG=$G$"$k!#(BDoS $B>uBV$OC;;~4V$K<+(B
$BF0I|5l$9$k$HJs9p$5$l$F$$$k!#(B

$B967bl9g!"(BDoS $B>uBV$K4Y$k4|4V$O96(B
$B7b18. Beck GmbH IPC@CHIP HTTPD File Disclosure Vulnerability
BugTraq ID: 2775
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2001-05-21
$B4XO"$9$k(BURL:
http://www.securityfocus.com/bid/2775
$B$^$H$a(B:

IPC@CHIP $B$O(B Beck IPC GmbH $B$K$h$jDs6!$5$l$F$$$k%7%s%0%k%A%C%W$NAH$_9~$_(B
$B7?(B Web $B%5!<%P$G$"$k!#(B

$B%G%U%)%k%H$G!"$3$NAuCV$KAH$_9~$^$l$F$$$k(B httpd $B%5!<%S%9$OAuCVFb$Nl=j$KB8:_$9$k!"Nc$($P%f!<%6(B ID
$B$d%Q%9%o!<%I$H8@$C$?=EBg$J>pJs$r4^$`%U%!%$%k(B ($BNc$($P(B /chip.ini) $B$KBP$7(B
$B$F%j%/%(%9%H$rM?$($k$3$H$,2DG=$G$"$k!#(B

$B$3$N>pJs$K$h$j%G%P%$%9$N%;%-%e%j%F%#$r40A4$K6<$+$7!"%j%b!<%H$+$i$N967b(B
$Bo$NF0:n$rK832$5$l$F$7$^$&2DG=@-$,$"$k!#(B

19. Faust Informatics Freestyle Chat Directory Traversal Vulnerability
BugTraq ID: 2776
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2001-05-25
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/2776
$B$^$H$a(B:

Faust Informatics $Bo$N(B Web $B%5!<%P$N;HMQ$9$k%G%#%l(B
$B%/%H%j$NHO0O30$N%U%!%$%k$X$NMW5a$r5v$7$F$7$^$&(B($B$3$l$O$9$J$o$A!"(B 
../../../scandisk.log $B$H$$$C$?$3$H$r5v$7$F$7$^$&(B)$B!#(B

$B$3$NLdBj$,MxMQ$5$l$F$7$^$C$?>l9g!"%?!<%2%C%H%[%9%H$X$N$5$i$J$k967b$K7R(B
$B$,$k62$l$N$"$k>pJs$rC%20. Faust Informatics Freestyle Chat MS-DOS Device Name DoS Vulnerability
BugTraq ID: 2777
$B%j%b!<%H$+$i$N:F8=@-(B: $B$"$j(B
$B8xI=F|(B: 2001-05-25
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/2777
$B$^$H$a(B:

Freestyle Chat $B%5!<%P$K$O@55,%f!<%6$N%"%/%;%9$r5qH]$G$-$F$7$^$&LdBj$,B8(B
$B:_$9$k!#(B

MS-DOS $B$N%G%P%$%9L>(B 'AUX' $B$r4^$`$h$&$J%j%/%(%9%H$rAw?.$9$k$3$H$G!"(B Web 
$B%5!<%P$N=hM}$rDd;_$5$;$k$3$H$,2DG=$G$"$k!#(B

$BDL>o5!G=$NI|5l$K$O21. Computer Associates InoculateIT Symbolic Link File Overwriting Vulnerability
BugTraq ID: 2778
$B%j%b!<%H$+$i$N:F8=@-(B: $B$J$7(B
$B8xI=F|(B: 2001-05-25
$B4XO"$9$k(B URL:
http://www.securityfocus.com/bid/2778
$B$^$H$a(B:

InnoculateIT $B$O(B Computer Associates $Be$G$bF0:n$9$k$h$&$K(B
$B@_7W$5$l$F$$$k!#(BLinux $B%W%i%C%H%[!<%`>e$GF0:n$5$;$F$$$k>l9g!"1F6A$,$"$k(B
$B$H$$$&LdBj$,Js9p$5$l$F$*$j!"B>$N%W%i%C%H%[!<%`$K$D$$$F$O8=:_L$>\$G$"$k!#(B

$BDL>o$N=hM}$K$*$$$F$O!"$3$N%=%U%H%&%'%"%Q%C%1!<%8$O%"%C%W%G!<%H$,KhHU9T(B
$B$o$l$k$h$&$K@_Dj$,9T$o$l$k!#$3$l$O(B cron $B$rDL$8$F%9%/%j%W%H$r)$K1h$C$?@_Dj$,9T$o$l!"(Broot $B$K$h$C$F=jM-$5$l$F$$$k%U%!%$%k$X%7(B
$B%s%\%j%C%/%j%s%/$,D%$i$l$F$$$?>l9g!"(Bftp $B%@%&%s%m!<%I%W%m%0%i%`$O$=$N%U(B
$B%!%$%k$r8aA0(B 1 $B;~$K(B root $B$N(B crontab $B$rDL$8$F>e=q$-$7$F$7$^$&!#(B

III. SECURITYFOCUS.COM NEWS AND COMMENTARY
- ------------------------------------------
1. Report: FBI cybersleuths incompetent
$BCx;v$7$F$$$k%*%j%8%J%j%F(B
$B%#$N$J$$%5%$%P!http://www.securityfocus.com/templates/article.html?id=208

2. Eighteen months for 'White Hat' Hacker
$BCxpJs41$G$"$k(B Max Butler $B$O!"(B
$B7nMKF|$K!"73$HKI1R4X78$N@AIi6Hu$G!"D(Lr(B 18 $B%v7n$NH=7h$,(B
$B2<$5$l$?!#(B

$B7:$r2<$9:]$K!"O"K.:[H=41$G$"$k(B James Ware $B$O!"J[8n?M$N(B Jennifer Granick
$B$,!"6u73$dB>$N%o!<%`$GHo32$rpJs41$H$7$F$N>yJb$5$l$&$k7:4|$r$bG'$a$J$+$C$?!#(B

http://www.securityfocus.com/templates/article.html?id=207

IV.SECURITY FOCUS TOP 6 TOOLS
- -----------------------------
1. Firestorm NIDS v0.1.1
$B%W%i%C%H%U%)!<%`(B: Linux
$B:nhttp://www.securityfocus.com/tools/2056

Firestorm $B$O%M%C%H%o!<%/?/F~8!CN%;%s%5$G$9!#%^%k%A%9%l%C%IBP1~$+$D9bB.(B
$B$GF0:n$7!"%M%C%H%o!<%/>e$N$[$H$s$I$9$Y$F$NE@$K@\B32DG=$G$9!#(B

2. virusNotification v1.9
$B%W%i%C%H%U%)!<%`(B: UNIX
$B:nhttp://www.securityfocus.com/tools/2054

virusNotification $B$O!"(BMcAfee $B%"%s%A%&%$%k%9%=%U%H%&%(%"$N?7$7$$(B DAT $B$,(B
$B8x3+$5$l$?$H$-!"8!CN$7!"%@%&%s%m!<%I$7!"EE;R%a!<%k$GCN$i$;$k$?$a$K(B ($Bl=j(B ($B%m(B
$B!<%+%k!"%j%b!<%H$H$b(B)$B!"A02s$H:G?7$N(B DAT $B$H$NJQ99E@$r%j%9%H$GI=<($7$^$9!#(B
$B:G?7$N(B DAT $B$G(B Top Threats $B%j%9%H(B $B$d(B Virus Alerts $B%Z!<%8>e$G$I$s$J%&%$%k(B
$B%9$,Js9p$5$l$F$bEE;R%a!<%k$GCN$i$;$F$/$l$^$9!#(B

3. SideKick
$B%W%i%C%H%U%)!<%`(B: Solaris
$B:nhttp://www.securityfocus.com/tools/2053

SideKick $B$O!"%U%!%$%k$N(B MD5 $B%7%0%M%A%c$r<+F0E*$K<}=8$9$k$?$a$K3+H/$5$l(B
$B$?%D!<%k$G$9!#(BSideKick $B$O!"(BSet-UID $B$d(B Set-GID $B%Q!<%_%C%7%g%s$,@_Dj$5$l(B
$B$?(B "rootkits" $B$K$h$jCV$-49$($i$l$k2DG=@-$,$"$k%U%!%$%k$N%7%0%M%A%c$rDL(B
$B>o$H$O0c$&J}K!$G<}=8$9$k$3$H$b2DG=$G$9!#(BSideKick $B$O%*%W%7%g%s$G(B sfpC 
($BLuCm(B: Solaris Fingerprint Database Companion) $B$r;HMQ$7!"<+F0E*$K%U%!%$(B
$B%k$N(BMD5 $B%7%0%M%A%c$r<}=8$7=hM}$9$k$3$H$b$G$-$^$9!#$^$?!"(BSideKick $B$O!"J,(B
$B;6$7$?%7%0%M%A%c$N<}=8$r%9%?%s%I%"%m%s$G9T$($^$9!#(BSidekick $B$O$3$3$G%@%&(B
$B%s%m!<%I$G$-$^$9!#(B

4. Astaro Security Linux (ASL) v1.818
$B%W%i%C%H%U%)!<%`(B: Linux
$B:nhttp://www.securityfocus.com/tools/1831

Astaro Security Linux $B$O?7$?$J%U%!%$%d%&%)!<%k%=%j%e!<%7%g%s$G$9!#%9%F(B
$B!<%H%U%k%$%s%9%Z%/%7%g%s!"%Q%1%C%H%U%#%k%?%j%s%0!"%3%s%F%s%D%U%#%k%?%j(B
$B%s%0!"%&%$%k%9%9%9%-%c%K%s%0!"(BIPSec $B$rMxMQ$7$?(B VPN $B$J$I$N5!G=$rHw$($F$$(B
$B$^$9!#(BWeb $B%V%i%&%6$GMxMQ$G$-$k4IM}%D!<%k$H%$%s%?!<%M%C%H7PM3$G%"%C%W%0(B
$B%l!<%I$G$-$k$?$a!"MF0W$K4IM}$G$-$^$9!#$^$?!"$[$H$s$I$9$Y$F$N%G!<%b%s$,(B
$B%A%'%s%8%k!<%H$5$l!"MM!9$J8"8B$+$iJ]8n$5$l$k$3$H$K$h$C$FFCJL$K6/2=$5$l(B
$B$?!"(BLinux 2.4 $B%G%#%9%H%j%S%e!<%7%g%s$,%Y!<%9$H$J$C$F$$$^$9!#(B

5. twwwscan v1.2
$B%W%i%C%H%U%)!<%`(B: Windows 2000$B!"(BWindows 95/98$B!"(BWindows NT
$B:nhttp://www.securityfocus.com/tools/1886

twwwscan $B$N%P!<%8%g%s$,99?7$5$l$^$7$?!#(B-v $B%*%W%7%g%s$N%5%]!<%H!"(Bhtml $B7A(B
$B<0$N%l%]!<%H$rH/9T$9$k5!G=$N%5%]!<%H!"(BCVE $B>pJs$N%5%]!<%H!"(BNT/2000 IIS
$B$N40A4$G>\:Y$J%Q%C%A>pJs$,DI2C$5$l$^$7$?!#%P%0%A%'%C%/$r=*$($?:G?7(B(2000
$BG/(B 12 $B7n(B 23 $BF|$^$G(B) $B$N(B WWW $B%;%-%e%j%F%#%[!<%k>pJs$,(B 300 $B$"$j$^$9!#(B

6. Windump v3.52
$B%W%i%C%H%U%)!<%`(B: Windows 2000$B!"(BWindows 95/98$B!"(BWindows NT
$B:nhttp://www.securityfocus.com/tools/1170

Windump 2.03 $B$O!"$9$P$i$7$$(B Windump 2.02 $B%]!<%H$NF0E*$K%m!<%I2DG=$J%P!<(B
$B%8%g%s$G$9!#$3$N2~B$$5$l$?%"%W%j%1!<%7%g%s$O(B .exe $B$H(B .sys $B$N(B 2 $B$D$N$_$+(B
$B$i9=@.$5$l$^$9!#(B

Translated by ARAI Yuu, KAGEYAMA Tetsuya, KOMATSU Misa, SAKAI Yoriyuki
LAC Co., Ltd. Computer Security Laboratory
http://www.lac.co.jp/security/

-----BEGIN PGP SIGNATURE-----
Version: PGP for Personal Edition 5.5.5J
Comment: KAGEYAMA Tetsuya

iQA/AwUBOxPbIs32EXDdoEFfEQLYlACgn1FgWl4L43giovXNDczBqIAiO38AoPrf
xHAssHebQgMj/4Tipv1mbAj+
=1jkm
-----END PGP SIGNATURE-----