[B! security hole] kgbuã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

kgbu id:kgbu

security holeã«é–¢ã™ã‚‹kgbuã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (17)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ä»–äººã®ãƒ‰ãƒ¡ã‚¤ãƒ³ã®GoogleAppsãŒå–å¾—ã§ãã¦ã—ã¾ã†ã‚“ã ãŒï¼ˆæ±— - y-kawazã®æ—¥è¨˜
å‰ã‚¨ãƒ³ãƒˆãƒªï¼ˆä¸å¤ãƒ‰ãƒ¡ã‚¤ãƒ³ã§GoogleAppsã‚’ä½¿ã£ãŸã‚‰ï¼‰ã§GoogleAppsãƒã‚¿ã‚’æ›¸ã„ã¦ã„ã‚‹æœ€ä¸ã«æ›´ã«æ€ã„ã¤ã„ã¦ã—ã¾ã£ãŸãƒã‚¿ãŒã‚ã£ã¦ã€è©¦ã—ã¦ã¿ãŸã‚‰å‡ºæ¥ã¡ã‚ƒã£ãŸã®ã§è¿½åŠ ã§ãƒã‚¿ã«ã—ã¦ã¿ã¾ã™ã€‚ ãªã‚“ã¨GoogleAppsã§ã€è‡ªåˆ†æ‰€æœ‰ã§ãªã„ãƒ‰ãƒ¡ã‚¤ãƒ³ã§ã€Œãƒ‰ãƒ¡ã‚¤ãƒ³ã®æ‰€æœ‰æ¨©ã®ç¢ºèªã€ã‚‚ã‚¯ãƒªã‚¢ã—ãŸä¸Šã§ã®å–å¾—ãŒå‡ºæ¥ã¦ã—ã¾ã„ã¾ã—ãŸ(^^; ã“ã‚Œã¯è„†å¼±æ€§ã®ç™ºè¦‹ã ã¨æ€ã„ã¾ã™ã€‚ãŸã ã—ã€å¾Œè¿°ã™ã‚‹ã‚ˆã†ã«åŽ³å¯†ã«ã¯GoogleAppsã®è„†å¼±æ€§ã§ã¯ãªãã€ãƒ‰ãƒ¡ã‚¤ãƒ³ã®WEBã‚µã‚¤ãƒˆã®å•é¡Œã ã¨æ€ã„ã¾ã™ã€‚ã‚‚ã—ãã¯ã€Œhtmlã‚¢ãƒƒãƒ—ãƒãƒ¼ãƒ‰ã«å¯„ã‚‹ã‚µã‚¤ãƒˆæ‰€æœ‰è€…ã®ç¢ºèªã¨ã„ã†æ‰‹æ³•ã€ã«é–¢ã™ã‚‹è„†å¼±æ€§ã‹ã‚‚ã—ã‚Œã¾ã›ã‚“ã€‚ å–å¾—ãŒæˆåŠŸã™ã‚‹æ¡ä»¶ã¯ã€Œhttp://example.jp/googlehostedservice.htmlã®ãƒšãƒ¼ã‚¸ã‚’ç·¨é›†ã§ãã‚‹ã“ã¨ã€ã ã‘ã§ã™ã€‚ ãªã‚“ã æ™®é€šã¯å‡ºæ¥ãªã„ã‹ã‚‰å¹³æ°—ã§ã—ã‚‡ï¼Ÿã¨æ€ã„ã¾ã—ãŸã‚ˆãã€‚åƒ•ã‚‚ãã†æ€ã„ã¾ã—ãŸã€‚ã§ã™ãŒå¶ã«ã‚ã‚Šã¾ã™
kgbu 2009/11/09
vulnerability

security hole

security

èªè¨¼

webã‚µãƒ¼ãƒ“ã‚¹

wiki

dns

ãƒã‚¿
ãƒªãƒ³ã‚¯
Dealing with broken utf-8 with Ruby
kgbu 2009/09/19
Ruby

xss

bad knowhow

security hole

programming

knowhow

utf

ã‚ã¨ã§èªã‚€
ãƒªãƒ³ã‚¯
ä½•æ•…ã‹ã‚ãŸã‚Šå‰ã«ãªã‚‰ãªã„æ–‡å—ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³
(Last Updated On: 2018å¹´8æœˆ8æ—¥)ç§ãŒ4å¹´å‰ï¼ˆ2005å¹´ï¼‰ã«ã€ŒWebã‚¢ãƒ—ãƒªã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–å…¥é–€ã€ã‚’åŸ·ç†ã—ã¦ã„ãŸæ™‚ã«ã¯ã€æ—¢ã«å£Šã‚ŒãŸæ–‡å—ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ãªã©ã®ä¸æ£ãªæ–‡å—ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã‚’åˆ©ç”¨ã—ãŸJavaScriptã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã‚„SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³æ”»æ’ƒã¯æ¯”è¼ƒçš„åºƒãçŸ¥ã‚‰ã‚Œã¦ã„ã¾ã—ãŸã€‚ã“ã®å•é¡Œã¯å½“æ™‚ã®ã‚¹ãƒ©ãƒƒã‚·ãƒ¥ãƒ‰ãƒƒãƒˆã‚¸ãƒ£ãƒ‘ãƒ³ã§ã‚‚å–ã‚Šä¸Šã’ã‚‰ã‚Œã¦ã„ã¾ã—ãŸã€‚/.ã§å–ã‚Šä¸Šã’ã‚‰ã‚ŒãŸã®ã§ã€ãã“ã‚‰ä¸ã®Webã‚µã‚¤ãƒˆã¨ãƒ¦ãƒ¼ã‚¶ãŒè¢«å®³ã«åˆã†ã®ã§ã¯ï¼Ÿã¨ãƒ’ãƒ¤ãƒ’ãƒ¤ã—ãŸã®ã§è‰¯ãè¦šãˆã¦ã„ã¾ã™ã€‚ ä¸æ£ãªæ–‡å—ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã‚’åˆ©ç”¨ã—ãŸæ”»æ’ƒã¯ã€æ–‡å—ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã‚’åŽ³æ ¼ã«å–ã‚Šæ‰±ã„ã€æ–‡å—ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã‚’ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã™ã‚Œã°ç„¡ããªã‚Šã¾ã™ã€‚ã“ã‚Œã‚’æ€ ã‚‹ã¨ã€ã‚·ã‚¹ãƒ†ãƒ ã®ã©ã“ã§å•é¡ŒãŒç™ºç”Ÿã™ã‚‹ã‹äºˆæƒ³ã§ããªããªã‚Šã¾ã™ã€‚ã¤ã¾ã‚Šã€ã„ã„åŠ æ¸›ã«æ–‡å—ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã‚’å–ã‚Šæ‰±ã†ã¨å®‰å…¨ãªã‚·ã‚¹ãƒ†ãƒ ã¯ä½œã‚Œãªã„ã®ã§ã™ã€‚ å‚è€ƒï¼šã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢å‘ã‘ã«
kgbu 2009/09/11
è€³ã‚¤ã‚¿ã™ãŽã€‚ã‚ãŸã‚Šã¾ãˆã«ãªã‚‰ãªã„ã‹ã‚‰ã¨ã„ã£ã¦æ‰‹ã‚’æŠœãç†ç”±ã«ãªã‚‰ã‚“ãœï¼žè‡ªåˆ†

vulnerability

æ–‡å—ã‚³ãƒ¼ãƒ‰

security hole

security

webåˆ¶ä½œ

ãã‚ã°ã‚‰ãã‚ã°ã‚‰

ã„ã¾ã•ã‚‰è¨Šã‘ãªã„

ã¾ã¨ã‚

ã‚ã‚‹ã‚ã‚‹

programming
ãƒªãƒ³ã‚¯
Ivan RistiÄ‡: SSL Threat Model
SSL is easy to use but also very easy to use incorrectly. The ecosystem, which is built of the specifications, the implementations, the CAs and the PKI, is full of traps, each of which is very easy to fall into. Once I started to spend significant time thinking about SSL I set out to build a model of the ecosystem, for my own education and to ensure that I understand it all. That's how I arrived t
kgbu 2009/09/10
è„…å¨ã®ãƒžãƒƒãƒ—ãŒã‚ã‚Œã°ã€è‡ªåˆ†ãŸã¡ã®å¯¾ç–ãŒã©ã‚Œãã‚‰ã„ã‚«ãƒãƒ¼ã—ã¦ã„ã‚‹ã‹ã‚’æŠŠæ¡ã™ã‚‹ã®ã«å½¹ç«‹ã¤ã—ã€ã‚¤ãƒ³ã‚·ãƒ‡ãƒ³ãƒˆã®åˆ†é¡žã«ã‚‚ä½¿ãˆãã†ã ã€‚ã¤ã‹ã€ã‚¤ãƒ³ã‚·ãƒ‡ãƒ³ãƒˆã®ã‚¿ã‚°ã®åˆ†æžã™ã‚‹ã¨ã“ã†ã„ã†ã‚‚ã®ãŒå‡ºã¦ãã‚‹ã“ã¨ã‚‚ã‚ã‚‹ã‹ã‚‚ãªã€‚

security

ssl

åˆ†æž

ã¾ã¨ã‚

vulnerability

security hole

ã‚ã¨ã§èªã‚€
ãƒªãƒ³ã‚¯
apache.org incident report for 8282009 - Apache Infrastructure Website
Posted on: 2009-09-02 08:56:09+00:00 Last week we posted about the security breach that caused us to temporarily suspend some services.Â All services have now been restored. We have analyzed the events that led to the breach, and continued to work on improving the security of our systems. NOTE: At no time were any Apache Software Foundation code repositories, downloads, or users put at risk by thi
kgbu 2009/09/02
8/28ã«èµ·ããŸä¾µå…¥ã®çµŒç·¯ã€åŽŸå› ã€å¯¾ç–ãªã©ã«ã¤ã„ã¦è©³ç´°ã«å…¬é–‹ã•ã‚Œã¦ã„ã‚‹ã€‚ãªã‹ãªã‹ã“ã†ã„ã†æƒ…å ±ã¯å¤–ã«å‡ºãªã„ã®ã§è²´é‡ã‹ã‚‚ã€‚

ä»–å±±ã®çŸ³

knowhow

vulnerability

security

ã‚¤ãƒ³ã‚·ãƒ‡ãƒ³ãƒˆå¯¾å¿œ

CentOS

security hole

éµç®¡ç†

ã‚µãƒ¼ãƒç®¡ç†

ã„ã¾ã•ã‚‰è¨Šã‘ãªã„
ãƒªãƒ³ã‚¯
I8jesus.com is for sale | HugeDomains
Working with hugedomains.com was a quick and easy process. We got to speak to multiple real people located in Colorado without having to wait on hold! Our only complaint was we felt we had to overpay more than this particular domain was worth, and we weren't able to negotiate it down to a level that we felt was fair. However, payment and delivery were seamless, and within a few hours we had all of
kgbu 2009/09/02
IE8ãªã©ã§portç•ªå·ãŒé•ã£ã¦ã‚‚same originã¨ã™ã‚‹ã‚ˆã†ãªå¤‰æ›´ãŒã‚ã‚‹ã¨ã€ã€ã€é€šå¸¸ã¨ã¯ç•°ãªã‚‹ãƒãƒ¼ãƒˆã§FTPã®ã‚µãƒ¼ãƒ“ã‚¹ã¨ã‹ãŒå‹•ã„ã¦ã„ã‚‹ã‚µãƒ¼ãƒã§ã¯ã€formã®POSTãƒ‡ãƒ¼ã‚¿ã«XSSã‚’ä»•è¾¼ã‚ã°cookieç‰ãŒç›—ã¾ã‚Œå¾—ã‚‹ã€‚ã¨ã„ã†è©±ã ã‚ã†ã‹ï¼Ÿ

security

security hole

http

javascript

cracking

ãƒã‚¿

xss

cookie

IE

ã‚ã¨ã§èª¿ã¹ãŸã„
ãƒªãƒ³ã‚¯
CPNI-957037: SSH é€šä¿¡ã«ãŠã„ã¦ä¸€éƒ¨ãƒ‡ãƒ¼ã‚¿ãŒæ¼ãˆã„ã™ã‚‹å¯èƒ½æ€§ - ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ›ãƒ¼ãƒ« memo
ã€‹ è£åˆ¤å“¡åˆ¶åº¦ã€ã„ã‚ˆã„ã‚ˆå§‹å‹• è£åˆ¤å“¡å€™è£œã€€ã©ã†ã—ã‚ˆã†ã€é€šçŸ¥ãã¡ã‚ƒã£ãŸ (asahi.com, 11/30) è£åˆ¤å“¡è¾žé€€ã€æœ€é«˜è£ã¯ã€ŒæŸ”è»Ÿã«åˆ¤æ–ã€ (asahi.com, 11/29) ç§ã®æ‰‹å…ƒã«ã¯æ¥ã¦ãªã„ãžâ€¦â€¦ã€‚ã¤ã¾ã‚‰ã‚“ã€è¶…ã¤ã¾ã‚‰ã‚“ã€‚ ã€‹ ã‚¤ãƒ³ãƒ‰åŒæ™‚å¤šç™ºãƒ†ãƒæ–¹é¢ã€‚ã¨ã‚Šã‚ãˆãšéŽ®åœ§ã•ã‚ŒãŸæ¨¡æ§˜ã€‚ ã‚¤ãƒ³ãƒ‰åŒæ™‚ãƒ†ãƒã€ï¼•ï¼˜æ™‚é–“çµŒã¦éŽ®åœ§ã€€æ»è€…ï¼‘ï¼•ï¼äººè¶…ã™ (asahi.com, 11/29)ã€ ã‚¤ãƒ³ãƒ‰åŒæ™‚ãƒ†ãƒã€€æ»è€…ï¼‘ï¼™ï¼•äººã« (asahi.com, 11/29) ã‚¤ãƒ³ãƒ‰åŒæ™‚ãƒ†ãƒï¼’æ—¥åŠã¶ã‚Šå…¨é¢éŽ®åœ§ã€æ»è€…ã¯ï¼‘ï¼™ï¼•äººã« (èªå£², 11/29) ã‚¤ãƒ³ãƒ‰åŒæ™‚ãƒ†ãƒï¼šè»ãŒå®Œå…¨åˆ¶åœ§ã€€æ»è€…ï¼’ï¼ï¼äººè¶…ã‚‚ (æ¯Žæ—¥, 11/29) ãƒ‘ã‚ã‚¹ã‚¿ãƒ³ã®é–¢ä¸Ž?! åŒæ™‚ãƒ†ãƒã€Œãƒ‘ã‚ã‚¹ã‚¿ãƒ³ã®é–¢ä¸Žæ˜Žç™½ã€ã€ã‚¤ãƒ³ãƒ‰å¤–ç›¸ãŒæŠ—è° (èªå£², 11/29) ãƒ‘ã‚ã‚¹ã‚¿ãƒ³åˆ†åãŒé–¢ä¸Žã®æƒ…å ±ã¨ã‚¤ãƒ³ãƒ‰å¤–ç›¸ã€ãƒ ãƒ³ãƒã‚¤ã®åŒæ™‚ãƒ†ãƒ (CNN, 11/28) ã€‹ ã‚¬ãƒ©ã‚¬ãƒ©ãƒ˜ãƒ“
kgbu 2008/11/28
è¦‹é€ƒã—ã¦ã„ãŸã€‚ã§ã‚‚ã€32bitã¨ã‹14bitã¨ã‹ãŒéžå¸¸ã«ä½Žã„ç¢ºçŽ‡ã§å–ã‚Šå‡ºã›ã¦ã—ã¾ã†ã€ã¨ã„ã†ã®ã¯ã€ã©ã†ã„ã†å ´åˆã«è‡´å‘½çš„ã‹ãªã€‚ä¸€å¿œè€ƒãˆã¦ãŠãã“ã¨ï¼žè‡ªåˆ†

ã‚ã¨ã§è©¦ã™

security

security hole

vulnerability

ssh

ã„ã¾ã•ã‚‰è¨Šã‘ãªã„
ãƒªãƒ³ã‚¯
https://dl.aircrack-ng.org/breakingwepandwpa.pdf
kgbu 2008/11/12
WPAãŒcrackã§ããŸã¨ã„ã†è«–æ–‡

è«–æ–‡

ç„¡ç·šLAN

security hole

security

vulnerability

æš—å·

cracking

ã‚ã¨ã§èªã‚€
ãƒªãƒ³ã‚¯
Battered, but not broken: understanding the WPA crack
Academic researchers have found an exploitable hole in a popular form of wireless networking encryption. The hole is in a part of 802.11i that forms the basis of WiFi Protected Access (WPA), so it could affect routers worldwide. German graduate student Erik Tews will present a paper at next week's PacSec in Tokyo coauthored with fellow student and aircrack-ng team member Martin Beck that reveals h
kgbu 2008/11/12
ç„¡ç·šLAN

vulnerability

security

security hole

æš—å·

cracking

ã‚ã¨ã§èªã‚€
ãƒªãƒ³ã‚¯
Adventures with a certain Xen vulnerability (in the PVFB backend) version 1.0 Rafal Wojtczuk Invisible Things Lab [email protected] October 14, 2008 1 Introduction This paper documents the research by the author to understand the nature of and
kgbu 2008/10/24
Xenã®æ”»æ’ƒæ–¹æ³•ãªã©ã€‚SELinuxã«ã‚ˆã£ã¦é˜²ã’ã‚‹ã‚±ãƒ¼ã‚¹ã‚‚ã‚ã‚‹ã‚ˆã†ã ã€‚

vulnerability

xen

virtualization

security

security hole

tutorial

ã‚ã¨ã§èªã‚€

selinux
ãƒªãƒ³ã‚¯
è¡Œå‹•ã‚¿ãƒ¼ã‚²ãƒ†ã‚£ãƒ³ã‚°åºƒå‘Šã¯ã©ã“ã¾ã§è¨±ã•ã‚Œã‚‹ã®ã‹ ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆ-æœ€æ–°ãƒ‹ãƒ¥ãƒ¼ã‚¹:IT-PLUS
éºä¼åã‚’åŠ¹çŽ‡ã‚ˆãæ”¹å¤‰ã™ã‚‹ã‚²ãƒŽãƒ ç·¨é›†ç ”ç©¶ã®ç¬¬ä¸€äººè€…ã§ç±³ãƒ–ãƒãƒ¼ãƒ‰ç ”ç©¶æ‰€ã®ãƒ•ã‚§ãƒ³ãƒ»ãƒãƒ£ãƒ³ä¸»ä»»ç ”ç©¶å“¡ã¯ã€ã‚¨ãƒœãƒ©å‡ºè¡€ç†±ã‚„ã‚¸ã‚«ç†±ã®æ—©æœŸè¨ºæ–æŠ€è¡“ã‚’é–‹ç™ºã—ãŸã“ã¨ã‚’æ˜Žã‚‰ã‹ã«ã—ãŸã€‚ã‚¦ã‚¤ãƒ«ã‚¹ã®éºä¼æƒ…å ±ãŒâ€¦ç¶šã å—ç²¾åµã®ã‚²ãƒŽãƒ ç·¨é›†ã€ãªãœå•é¡Œã€€å„ªç”Ÿæ€æƒ³ã¨è¡¨è£ä¸€ä½“ ï¼»æœ‰æ–™ä¼šå“¡é™å®šï¼½ ã‚²ãƒŽãƒ ç·¨é›†é£Ÿå“ã€€è²©å£²å®¹èªã€æ¡ä»¶æº€ãŸã›ã°å®‰å…¨å¯©æŸ»ãªã— ï¼»æœ‰æ–™ä¼šå“¡é™å®šï¼½
kgbu 2008/10/20
visited linkã®è‰²ã‚’å–å¾—ã§ãã‚‹ã€ã£ã¦ã®ã¯å¯¾å‡¦ãŒã‚€ãšã‹ã—ãã†ã ãªã€‚åŒã˜ãƒ‰ãƒ¡ã‚¤ãƒ³å†…ã§ã—ã‹ãã®æƒ…å ±ã‚’åˆ©ç”¨ã§ããªã„ã€ã¨ã™ã‚‹ã“ã¨ã§å¯¾å‡¦ã«ãªã‚‹ã®ã ã‚ã†ã‹ã€‚ã‚¢ãƒ³ãƒ†ãƒŠã®é¡žã¯ãã‚Œã§ååˆ†æ©Ÿèƒ½ã™ã‚‹ã¯ãšã ã€‚

security

security hole

browser

privacy

ãƒžãƒ¼ã‚±ãƒ†ã‚£ãƒ³ã‚°

å€‹äººæƒ…å ±

åºƒå‘Š
ãƒªãƒ³ã‚¯
How To Write Shared Libraries
kgbu 2008/10/06
howto

library

linux

kernel

OS

security

vulnerability

security hole

knowhow

ã„ã¾ã•ã‚‰è¨Šã‘ãªã„
ãƒªãƒ³ã‚¯
SET NAMESã¯ç¦æ¢
(Last Updated On: 2018å¹´8æœˆ13æ—¥)MySQLã«ã¯æ–‡å—ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã‚’å¤‰æ›´ã™ã‚‹ã€ŒSET NAMESã€SQLæ–‡ãŒç”¨æ„ã•ã‚Œã¦ã„ã¾ã™ã€‚ï¼ˆPostgreSQLã‚‚åŒæ§˜ã®SQLæ–‡ã€SET CLIENT_ENCODINGãŒã‚ã‚Šã¾ã™ï¼‰ã“ã®æ©Ÿèƒ½ã¯SQLã‚³ãƒ³ã‚½ãƒ¼ãƒ«ã‹ã‚‰ã¯ä½¿ã£ã¦ã‚ˆã„æ©Ÿèƒ½ã§ã™ãŒã€ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‹ã‚‰ã¯ä½¿ã£ã¦ã¯ãªã‚‰ãªã„æ©Ÿèƒ½ã§ã™ã€‚SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã«è„†å¼±ã«ãªã‚‹å ´åˆãŒã‚ã‚Šã¾ã™ã€‚ Ruby on Railsã®æœ¬ã‚’èªã‚“ã§ã„ã¦ã€ActiveRecordã‚’èª¬æ˜Žã—ã¦ã„ã‚‹éƒ¨åˆ†ã«MySQLã®æ–‡å—ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã‚’å¤‰æ›´ã™ã‚‹å ´åˆã®ä¾‹ã¨ã—ã¦SET NAMESãŒåˆ©ç”¨ã•ã‚Œã¦ã„ã¾ã—ãŸã€‚ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‹ã‚‰ã¯SET NAMESã¯ä½¿ã£ã¦ã¯ãªã‚‰ãªã„äº‹ã‚’å‘¨çŸ¥ã•ã›ã‚‹ã®ã¯çµæ§‹æ™‚é–“ãŒå¿…è¦ã‹ãªã¨æ€ã„ã¾ã—ãŸã€‚ PHPã‚‚5.2ã®é€”ä¸ã‹ã‚‰MySQLãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã«libmysqlã®æ–‡å—ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°è¨å®šAPIã®ãƒ©ãƒƒãƒ‘ãƒ¼é–¢æ•°ãŒ
kgbu 2008/10/02
phpãªã©ã®ã‚¹ã‚¯ãƒªãƒ—ãƒˆè¨€èªžã§ã®æ–‡å—encodingã¨ã€ï¼¤ï¼¢ã®æ–‡å—encodingã®ä¸æ•´åˆã‚’å¼•ãèµ·ã“ã™ã‹ã‚‰ãƒ€ãƒ¡ã€‚ä¸æ•´åˆãŒã‚ã‚‹ã¨ã€injectionæ”»æ’ƒã«å¯¾å‡¦ã—ãšã‚‰ããªã‚‹ã—ã€ç¬¬ä¸€ãƒ‡ãƒ¼ã‚¿ãŒä¸æ£ã«ãªã‚‹ã€‚æ–‡å—ã‚³ãƒ¼ãƒ‰ã®è¨å®šã¨æ¤œå‡ºãŒåŸºæœ¬ã€‚

vulnerability

security

security hole

æ–‡å—ã‚³ãƒ¼ãƒ‰

db

WAF

php
ãƒªãƒ³ã‚¯
SELinux Reveals Bugs in other code.
kgbu 2008/10/02
SELinuxã‚’å°Žå…¥ã™ã‚‹ã¨ã€æ‚ªã„ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°ã‚¹ã‚¿ã‚¤ãƒ«ã‚„ã€ãƒã‚°ãŒæ˜Žã‚‰ã‹ã«ãªã£ã¦ã—ã¾ã†ã¨ã„ã†è©±ã€‚execmod, execstackã¨ã‹ã€æœ¬æ¥ã¯ä¸è¦ãªã®ã«ä½¿ã‚ã‚Œã¦ã„ã‚‹ã®ã‚’ç™ºè¦‹ã—ãŸã‚‰bugã¨ã—ã¦ãƒ¬ãƒãƒ¼ãƒˆã—ã¦æ¬²ã—ã„ã¨ã‚‚ã€‚

selinux

programming

ã‚ã¨ã§èªã‚€

linux

security hole

library
ãƒªãƒ³ã‚¯
RHSA-2008:0855 - Security Advisory
Topic Updated openssh packages are now available for Red Hat Enterprise Linux 4, Red Hat Enterprise Linux 5, and Red Hat Enterprise Linux 4.5 Extended Update Support. This update has been rated as having critical security impact by the Red Hat Security Response Team. Description OpenSSH is OpenBSD's SSH (Secure SHell) protocol implementation. Last week Red Hat detected an intrusion on certain of i
kgbu 2008/08/23
Fedoraãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆã‚‚ã‚„ã‚‰ã‚ŒãŸã¨ã„ã†ã‚‚ã®ã‚‰ã—ã„

security hole

vulnerability

ssh
ãƒªãƒ³ã‚¯
2008-02-11 - himainuã®æ—¥è¨˜ [SELinux] æ”»æ’ƒã‚³ãƒ¼ãƒ‰ã®æ¤œè¨¼ (CVE-2008-0600)
æ–°ã—ã‚ã®SELinuxã®æƒ…å ±æºãŒã‚ã¾ã‚Šãªã„æ°—ãŒã—ã¾ã™ã€‚å’Œæ›¸ã®SELinuxæ›¸ç±ã‚‚ã™ã£ã‹ ã‚Šå¤ããªã£ã¦ã—ã¾ã„ã¾ã—ãŸã€‚ ãªã‚“ã¨ã‹ã›ãã°ã¨æ€ã£ã¦ã„ãŸã®ã§ã™ãŒã€ãã®ä¸€ç’°ã¨ã—ã¦ã€ æ—¥çµŒLinuxã«é€£è¼‰ã—ãŸã€ã€Œæ–°SELinuxå…¥é–€ã€å…¨ï¼‘ï¼’å›žãŒã€ITProã‚ˆã‚Šå…¬é–‹ã•ã‚Œã¦ã„ ã¾ã™ã€‚ http://itpro.nikkeibp.co.jp/article/COLUMN/20070827/280411/ æ¯”è¼ƒçš„æ–°ã—ã„SELinuxãŒãƒ™ãƒ¼ã‚¹ãªã®ã§ã€CentOS5ã‚„ã‚‰RedhatEL5ã‚„ã‚‰ã® SELinuxã«ä½¿ãˆã‚‹ã¨æ€ã„ã¾ã™ã€‚ LWN.netã‚ˆã‚Šã€‚ã‚ªãƒ¼ã‚¹ãƒˆãƒ©ãƒªã‚¢ã®Linux conferenceã§ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®è©±ãŒã‚ã£ ãŸã‚‰ã—ã„ã€‚ http://lwn.net/Articles/266358/ SELinuxã«ã¤ã„ã¦ã‚‚ã€ä¾‹ã¨ã—ã¦æŒ™ã’ã‚‰ã‚Œã¦ã„ãŸã€‚ A system running SELinux may, in
kgbu 2008/02/11
æ–°ãŸã«ç™ºè¦‹ã•ã‚ŒãŸLinux kernelã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ›ãƒ¼ãƒ«ã«å¯¾ã—ã¦ã€SELinuxãŒã©ã®ç¨‹åº¦æœ‰åŠ¹ã‹è©¦é¨“ã—ã¦ã„ã‚‹ã€‚ã‚ã‚ªã‚¹ã‚¯ãƒ‘ã‚½ã‚³ãƒ³ã®è¨å®šãªã‚‰ã°ã€çµæ§‹å®‰å…¨ã‚‰ã—ã„ã€‚é€šå¸¸ã®targetedã®è¨å®šã ã¨å•é¡Œã‚ã‚Šã€‚

selinux

security

security hole

linux

kernel

åˆ†æž

ãŠå½¹ç«‹ã¡
ãƒªãƒ³ã‚¯
è€ƒãˆã‚‹æ ªå¼æŠ•è³‡:ãƒ†ãƒ©ãƒ¡ãƒ³ãƒˆæ ªå¼ä¼šç¤¾ãŒæå‡ºã—ãŸå½ã®å¤§é‡ä¿æœ‰å ±å‘Šæ›¸
å··ã§è©±é¡Œã«ãªã£ã¦ã„ã‚‹1/25(é‡‘)ä»˜ã®ãƒ†ãƒ©ãƒ¡ãƒ³ãƒˆã®5ï¼…ãƒ«ãƒ¼ãƒ«ã§ã™ãŒã€ æ‰‹ã£å–ã‚Šæ—©ãå®Ÿç‰©ã‚’è¦‹ãŸã„æ–¹ã®ãŸã‚ã«ä¸‹è¨˜URIã«è¨˜å¿µã¨ã—ã¦ ä¿ç®¡ã—ã¦ãŠãã¾ã—ãŸã€‚èˆˆå‘³ã‚ã‚‹æ–¹ã¯ã”è¦§ä¸‹ã•ã„ã€‚ å®Ÿç‰©ã‚’è¦‹ã¦ã„ãŸã ã‘ã‚Œã°åˆ†ã‹ã‚‹ã¨æ€ã†ã®ã§ã€ã“ã‚Œä»¥ä¸Šã®ã‚³ãƒ¡ãƒ³ãƒˆã¯ç„¡ç”¨ã‹ãªã¨â€¦ã€‚(^^; XBRLã§æå‡ºã™ã‚‹ã‚ˆã†ã«ãªã‚Œã°ã€ãƒã‚§ãƒƒã‚¯ãŒå®¹æ˜“ã«ãªã£ã¦ã“ã†ã„ã†äº‹ä¾‹ã¯ãã£ã¨æ¸›ã£ã¦è¡Œãã®ã§ã—ã‚‡ã†ã€‚ ãƒ†ãƒ©ãƒ¡ãƒ³ãƒˆæ ªå¼ä¼šç¤¾ãŒæå‡ºã—ãŸå½ã®å¤§é‡ä¿æœ‰å ±å‘Šæ›¸
kgbu 2008/01/26
æå‡ºæ›¸é¡žã®è¦æ ¼åŒ–ã¯ã€ç´ äººhackã¯å¼¾ã‘ã‚‹ã‹ã‚‚ã—ã‚Œãªã„ãŒã€æœ¬æ°—ãªã®ã¯ç„¡ç†ã‹ã‚‚ã€‚å¤§ä½“ã€æ³•ã«ã¯ãšã‚Œãªã„ã¨ã„ã†ç¯„å›²ã§ã‚‚ã‹ãªã‚Šã®ã“ã¨ãŒã‚„ã‚Œã¡ã‚ƒã†ã“ã¨ã¯ãƒ©ã‚¤ãƒ–ãƒ‰ã‚¢ã¨ã‹ã®æ´å²ãŒè¨¼æ˜Žã—ã¦ã„ã‚‹ã¨ã„ã†æ„Ÿã˜ï¼ˆæ±—

security

ãƒ†ãƒ©ãƒ¡ãƒ³ãƒˆäº‹ä»¶

hack

å¸‚å ´

è¨¼åˆ¸

è¦åˆ¶

security hole

ã‚ã‚‹ã‚ã‚‹

XBRL
ãƒªãƒ³ã‚¯
1