[B! è„†å¼±æ€§] Kei_Nanigashiã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

Kei_Nanigashi id:Kei_Nanigashi

è„†å¼±æ€§ã«é–¢ã™ã‚‹Kei_Nanigashiã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (6)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

BIND 9ç³»ã«æ·±åˆ»åº¦ã®é«˜ã„è„†å¼±æ€§ãŒè¦‹ã¤ã‹ã‚‹
Internet Systems Consortium (ISC)ã‹ã‚‰BIND9ç³»ã«å˜åœ¨ã™ã‚‹è„†å¼±æ€§ãŒå…¬é–‹ã•ã‚ŒãŸã€‚å…¬é–‹ã•ã‚ŒãŸã®ã¯CVE-2012-3817ãŠã‚ˆã³CVE-2012-3868ã®2ä»¶ã®è„†å¼±æ€§ã€‚æ·±åˆ»åº¦ã¯ãã‚Œãžã‚Œã€ã€Œé‡å¤§ã€ã¨ã€Œé«˜ã€ã«è©•ä¾¡ã•ã‚Œã¦ã„ã‚‹ã€‚ CVE-2012-3817ã¯æ·±åˆ»åº¦ã€Œé‡å¤§ã€ã®è„†å¼±æ€§ã§ã€é«˜è² è·ç’°å¢ƒä¸‹ã«ãŠã‘ã‚‹ã‚ãƒ£ãƒƒã‚·ãƒ¥ãƒ‡ãƒ¼ã‚¿ã®å–ã‚Šæ‰±ã„ã«ä¸å…·åˆãŒã‚ã‚Šã€å¤–éƒ¨ã‹ã‚‰namedã«å¯¾ã™ã‚‹DoSæ”»æ’ƒã‚’å—ã‘ã‚‹ã¨ã„ã†ã‚‚ã®ã€‚å…·ä½“çš„ã«ã¯ã‚ãƒ£ãƒƒã‚·ãƒ¥DNSã‚µãƒ¼ãƒã«ãŠã„ã¦DNSSECæ¤œè¨¼æ©Ÿèƒ½ã‚’æœ‰åŠ¹ã«ã—ã¦ã„ã‚‹ã¨ã€DNSSECæ¤œè¨¼è¦æ±‚ã‚’å¤§é‡ã«å—ã‘å–ã£ãŸæ™‚ã«assertion failureã‚¨ãƒ©ãƒ¼ã‚’å¼•ãèµ·ã“ã—ã€namedãŒç•°å¸¸çµ‚äº†ã™ã‚‹å ´åˆãŒã‚ã‚‹ã€‚ã“ã®è„†å¼±æ€§ã¯ã€DNSSECæ¤œè¨¼æ©Ÿèƒ½ã‚’æœ‰åŠ¹ã«ã—ã¦ã„ã‚‹ã‚ãƒ£ãƒƒã‚·ãƒ¥DNSã‚µãƒ¼ãƒãŒå¯¾è±¡ã¨ãªã‚‹ã€‚ CVE-2012-3868ã¯æ·±åˆ»åº¦ã€Œé«˜ã€ã®è„†å¼±æ€§ã€‚ã“ã¡ã‚‰ã¯å¤§é‡ã®TCPå•ã„
Kei_Nanigashi 2012/07/26
ã‚ã‚Šã‹ã‚Šç¯„å›²åºƒã„ã€‚ã‚µãƒ¼ãƒç®¡ç†ã«é–¢ä¿‚ã™ã‚‹äººã¯ä¸€åº¦ç¢ºèªã—ãŸæ–¹ãŒã„ã„ã‹ã‚‚

BIND

è„†å¼±æ€§
ãƒªãƒ³ã‚¯
DNSè„†å¼±æ€§å•é¡Œã€Œå¹½éœŠãƒ‰ãƒ¡ã‚¤ãƒ³åã€ã€JPRSè©³ç´°ã‚’ç™ºè¡¨
æ—¥æœ¬ãƒ¬ã‚¸ã‚¹ãƒˆãƒªã‚µãƒ¼ãƒ“ã‚¹(JPRS)ã‹ã‚‰ã€åºƒç¯„å›²ã«å½±éŸ¿ãŒã‚ã‚‹DNSã‚µãƒ¼ãƒ“ã‚¹ã®è„†å¼±æ€§ã€Œå¹½éœŠãƒ‰ãƒ¡ã‚¤ãƒ³å (Ghost Domain Names)ã€ã«é–¢ã™ã‚‹æƒ…å ±ãŒç™ºè¡¨ã•ã‚ŒãŸã€‚ISCã¯2æœˆ7æ—¥(ç±³å›½æ™‚é–“)ã€BIND 9ç³»ã®ã™ã¹ã¦ãŒã“ã®å•é¡Œã®å½±éŸ¿ã‚’å—ã‘ã‚‹ã¨ã—ã¦ã€Œé‡è¦åº¦(Severity): é«˜(High)ã€ã§ã“ã®å•é¡Œã‚’å ±å‘Šã—ã¦ã„ã‚‹ãŒã€ä»Šå›žJPRSã‹ã‚‰ç™ºè¡¨ã•ã‚ŒãŸå†…å®¹ã¯ã€ã“ã®å•é¡Œã®å†…å®¹ã‚’ã‚ˆã‚Šè©³ã—ãæ—¥æœ¬èªžã§ç´¹ä»‹ã—ãŸã‚‚ã®ã¨ãªã£ã¦ã„ã‚‹ã€‚ ã€Œå¹½éœŠãƒ‰ãƒ¡ã‚¤ãƒ³å (Ghost Domain Names)ã€ã¨åä»˜ã‘ã‚‰ã‚ŒãŸã“ã®å•é¡Œã¯ã€è¦ªã‚¾ãƒ¼ãƒ³ã®NSãƒ¬ã‚³ãƒ¼ãƒ‰ã‚’å‰Šé™¤ã—ã¦ã‚‚ã€ãã‚ŒãŒã‚ãƒ£ãƒƒã‚·ãƒ¥DNSã‚µãƒ¼ãƒã«åæ˜ ã•ã‚Œãªã„ã‚ˆã†ã«ç´°å·¥ã§ãã‚‹ã‚±ãƒ¼ã‚¹ãŒã‚ã‚‹ã¨ã„ã†å†…å®¹ã«ãªã£ã¦ã„ã‚‹ã€‚ã“ã®ã‚„ã‚Šå–ã‚Šã‚’å®Ÿç¾ã™ã‚‹ãŸã‚ã®æ–¹æ³•ãŒãƒ—ãƒãƒˆã‚³ãƒ«ã¨ã—ã¦æ˜Žç¢ºã«è¦å®šã•ã‚Œã¦ã„ãªã„ã“ã¨ã«åŽŸå› ãŒã‚ã‚‹ã€‚å½±éŸ¿ã‚’å—ã‘ã‚‹ã®ã¯ã‚ãƒ£ãƒƒã‚·ãƒ¥DNSã‚µãƒ¼ãƒã®ã¿ã€‚å…¬è¡¨ã•ã‚ŒãŸæƒ…å ±ã«ã‚ˆã‚Œã°ã€ã“ã®è„†
Kei_Nanigashi 2012/02/21
å½±éŸ¿ç¯„å›²åºƒã„

DNS

è„†å¼±æ€§

JPRS
ãƒªãƒ³ã‚¯
Japan Vulnerability Notes
JVNVU#99084687: Siemensè£½å“ã«å¯¾ã™ã‚‹ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆï¼ˆ2024å¹´8æœˆï¼‰ã€€[2024/08/16 14:30] JVNVU#94517482: AVEVA Historianã«ãŠã‘ã‚‹SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã®è„†å¼±æ€§ã€€[2024/08/16 14:00] JVNVU#91739300: è¤‡æ•°ã®PTCè£½å“ã«ãŠã‘ã‚‹åˆ¶é™ã¾ãŸã¯èª¿æ•´ãªã—ã®ãƒªã‚½ãƒ¼ã‚¹ã®å‰²ã‚Šå½“ã¦ã®è„†å¼±æ€§ã€€[2024/08/16 14:00] JVNVU#99298639: Siemensè£½å“ã«å¯¾ã™ã‚‹ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆï¼ˆ2024å¹´7æœˆï¼‰ã€€[2024/08/14 17:45] JVNVU#98271228: Siemensè£½å“ã«å¯¾ã™ã‚‹ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆï¼ˆ2023å¹´12æœˆï¼‰ã€€[2024/08/14 17:45] JVNVU#94715153: Siemensè£½å“ã«å¯¾ã™ã‚‹ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆï¼ˆ2023å¹´4æœˆï¼‰ã€€[2024/08/14 17:45] JV
Kei_Nanigashi 2012/02/01
ã“ã‚Œ2.6ç³»å…¨æ»…ã£ã¦ã“ã¨ãªã®â€¦â€¦

Linux

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

è„†å¼±æ€§
ãƒªãƒ³ã‚¯
ã‚°ãƒ¼ã‚°ãƒ«ã€ã€ŒAndroidã€ã®Wi-Fiã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è„†å¼±æ€§ã‚’ä¿®æ£--ãƒ¦ãƒ¼ã‚¶ãƒ¼ã«é †æ¬¡æä¾›ã‚’é–‹å§‹
Googleã¯ç±³å›½æ™‚é–“5æœˆ18æ—¥ã€ã€ŒAndroidã€ã«ãŠã„ã¦æš—å·åŒ–ã•ã‚Œã¦ã„ãªã„Wi-Fiãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚’ç¬¬3è€…ãŒå‚å—ã—ã€ã‚¹ãƒžãƒ¼ãƒˆãƒ•ã‚©ãƒ³ä¸Šã®ã‚«ãƒ¬ãƒ³ãƒ€ãƒ¼ã‚„é€£çµ¡å…ˆãƒ‡ãƒ¼ã‚¿ã«ã‚¢ã‚¯ã‚»ã‚¹å¯èƒ½ã™ã‚‹æã‚Œã®ã‚ã£ãŸè„†å¼±æ€§ã‚’ä¿®æ£ã—ãŸã€‚ Googleã®åºƒå ±æ‹…å½“è€…ã¯å£°æ˜Žã§ã€ã€Œä¸€å®šã®æ¡ä»¶ä¸‹ã§ã€ŽGoogle Calendarã€ã‚„ã€ŽContactsã€ãƒ‡ãƒ¼ã‚¿ã¸ã®ç¬¬3è€…ã«ã‚ˆã‚‹ã‚¢ã‚¯ã‚»ã‚¹ã‚’è¨±ã—ã¦ã—ã¾ã†ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è„†å¼±æ€§ã«å¯¾ã™ã‚‹ä¿®æ£ã‚’ã€ä»Šæ—¥ã‹ã‚‰é †æ¬¡ã€æä¾›é–‹å§‹ã™ã‚‹ã€ã¨è¿°ã¹ãŸã€‚ã€Œã“ã®ä¿®æ£ã«ã¤ã„ã¦ã¯ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ã¯ä½•ã‚‚ã™ã‚‹å¿…è¦ã¯ãªãã€ä»Šå¾Œæ•°æ—¥ã‹ã‘ã¦ä¸–ç•Œä¸ã«å‘ã‘ã¦æä¾›ã•ã‚Œã‚‹äºˆå®šã§ã‚ã‚‹ã€ï¼ˆGoogleå£°æ˜Žï¼‰ åŸºæœ¬çš„ã«ã¯ã“ã®ä¿®æ£ã«ã‚ˆã£ã¦ã€ã™ã¹ã¦ã®Androidæè¼‰ç«¯æœ«ã¯ã€HTTPSï¼ˆHyper Text Transfer Protocol Secureï¼‰ã‚’ä»‹ã—ã¦Google CalendarãŠã‚ˆã³Contactsã‚µãƒ¼ãƒã«æŽ¥ç¶šã™ã‚‹ã‚ˆã†ã«ãªã‚Šã€èª°ã‹ãŒä¿è·
Kei_Nanigashi 2011/05/19
ã“ã‚Œã¯è‡ªå‹•æ›´æ–°ã£ã¦ã“ã¨ã‹ï¼Ÿ

google

Android

è„†å¼±æ€§

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
Androidã‚¢ãƒ—ãƒªã‹ã‚‰æƒ…å ±æµå‡ºã®æã‚Œã€99.7ï¼…ã®ç«¯æœ«ã«å½±éŸ¿
Androidã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‹ã‚‰å€‹äººæƒ…å ±ãŒæµå‡ºã—ã€æ”»æ’ƒè€…ã«å‚å—ã•ã‚ŒãŸã‚Šæ”¹ã–ã‚“ã•ã‚ŒãŸã‚Šã™ã‚‹æã‚ŒãŒã‚ã‚‹ã¨ã„ã†ã€‚ãƒ‰ã‚¤ãƒ„ã®ç ”ç©¶è€…ãŒç™ºè¡¨ã—ãŸã€‚ ç±³GoogleãŒAndroidæè¼‰ç«¯æœ«ã§æä¾›ã—ã¦ã„ã‚‹ã‚«ãƒ¬ãƒ³ãƒ€ãƒ¼ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚„é€£çµ¡å…ˆã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®æƒ…å ±ãŒæš—å·åŒ–ã•ã‚Œãªã„ã¾ã¾è»¢é€ã•ã‚Œã€ä»–äººã«æƒ…å ±ã‚’å‚å—ã•ã‚ŒãŸã‚Šã€æ”¹ã–ã‚“ã•ã‚ŒãŸã‚Šã™ã‚‹æã‚ŒãŒã‚ã‚‹ã“ã¨ãŒæ˜Žã‚‰ã‹ã«ãªã£ãŸã¨ã€ãƒ‰ã‚¤ãƒ„ã®ç ”ç©¶è€…ãŒç™ºè¡¨ã—ãŸã€‚Androidã‚’æè¼‰ã—ãŸã‚¹ãƒžãƒ¼ãƒˆãƒ•ã‚©ãƒ³ã®99.7ï¼…ãŒã“ã®è„†å¼±æ€§ã®å½±éŸ¿ã‚’å—ã‘ã‚‹ã¨ã—ã¦ã„ã‚‹ã€‚ ãƒ‰ã‚¤ãƒ„ã®ã‚¦ãƒ«ãƒ å¤§å¦ã®ç ”ç©¶è€…ãŒå…¬é–‹ã—ãŸæƒ…å ±ã«ã‚ˆã‚‹ã¨ã€ã“ã®è„†å¼±æ€§ã¯Google Calendarã‚„Google Contactsãªã©ã€ŒClientLoginã€ã¨ã„ã†èªè¨¼ãƒ—ãƒãƒˆã‚³ãƒ«ã‚’ä½¿ã£ã¦ã„ã‚‹ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã§ã€æš—å·åŒ–ã•ã‚Œãªã„HTTPã‚’ä»‹ã—ã¦èªè¨¼ç”¨ãƒˆãƒ¼ã‚¯ãƒ³ï¼ˆauthTokenï¼‰ãŒã‚„ã‚Šå–ã‚Šã•ã‚Œã¦ã„ã‚‹å•é¡Œã«èµ·å› ã™ã‚‹ã€‚ã“ã‚Œã¯å…¬è¡†ç„¡ç·šLANã‚’ä»‹
Kei_Nanigashi 2011/05/18
Android

google

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

è„†å¼±æ€§
ãƒªãƒ³ã‚¯
Google Chromeã‚’ãƒãƒƒã‚ãƒ³ã‚°ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¼æ¥ãŒã€ŒæˆåŠŸã€ã¨ç™ºè¡¨
ä»VUPENã«ã‚ˆã‚‹ã¨ã€ãƒãƒƒã‚ãƒ³ã‚°ã«ä½¿ã£ãŸã‚³ãƒ¼ãƒ‰ã§ã¯Chromeã®ã‚µãƒ³ãƒ‰ãƒœãƒƒã‚¯ã‚¹ã‚„Windowsã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ©Ÿèƒ½ã‚’å…¨ã¦ã‹ã‚ã™ã“ã¨ãŒã§ãã‚‹ã¨ã„ã†ã€‚ ãƒ•ãƒ©ãƒ³ã‚¹ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¼æ¥VUPENã¯5æœˆ9æ—¥ã€Googleã®Webãƒ–ãƒ©ã‚¦ã‚¶ã€ŒChromeã€ã«å®Ÿè£…ã•ã‚Œã¦ã„ã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ©Ÿèƒ½ã‚’ã‹ã‚ã—ã¦åŒãƒ–ãƒ©ã‚¦ã‚¶ã‚’ãƒãƒƒã‚ãƒ³ã‚°ã™ã‚‹ã“ã¨ã«æˆåŠŸã—ãŸã¨ç™ºè¡¨ã—ãŸã€‚ VUPENã®ãƒ–ãƒã‚°ã«ã‚ˆã‚‹ã¨ã€ãƒãƒƒã‚ãƒ³ã‚°ã«ä½¿ã£ãŸã‚³ãƒ¼ãƒ‰ã¯åŒç¤¾ãŒç™ºè¦‹ã—ãŸæœªè§£æ±ºã®è„†å¼±æ€§ã‚’åˆ©ç”¨ã—ã¦ã€Google Chromeã®ã‚µãƒ³ãƒ‰ãƒœãƒƒã‚¯ã‚¹ã‚’ã¯ã˜ã‚ã€Windowsã®Address Space Layout Randomizationï¼ˆASLRï¼‰ã‚„ãƒ‡ãƒ¼ã‚¿å®Ÿè¡Œé˜²æ¢ï¼ˆDEPï¼‰ã¨ã„ã£ãŸã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ©Ÿèƒ½ã‚’å…¨ã¦ã‹ã‚ã™ã“ã¨ãŒã§ãã‚‹ã¨ã„ã†ã€‚ã‚³ãƒ¼ãƒ‰ã‚’å®Ÿè¡Œã—ãŸå¾Œã‚‚ã‚¯ãƒ©ãƒƒã‚·ãƒ¥ã‚’èª˜ç™ºã—ãªã„ãŸã‚ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ã«ã‚‚æ°—ä»˜ã‹ã‚Œã«ãã„ã¨ã—ã¦ã„ã‚‹ã€‚ ã“ã®ã‚³ãƒ¼ãƒ‰ã¯32ãƒ“ãƒƒãƒˆã¨64ãƒ“ãƒƒãƒˆã®å…¨Windowsã«
Kei_Nanigashi 2011/05/10
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

è„†å¼±æ€§

ãƒãƒƒã‚ãƒ³ã‚°

ãŠå½¹ç«‹ã¡

Chrome
ãƒªãƒ³ã‚¯
1