[B! ãƒ¬ãƒãƒ¼ãƒˆ] mi1kmanã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

mi1kman id:mi1kman

ãƒ¬ãƒãƒ¼ãƒˆã«é–¢ã™ã‚‹mi1kmanã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (5)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ã€Œ2011å¹´ç‰ˆ 10å¤§è„…å¨ é€²åŒ–ã™ã‚‹æ”»æ’ƒï¼Žï¼Žï¼Žãã®å¯¾ç–ã§ååˆ†ã§ã™ã‹ï¼Ÿã€ã‚’å…¬é–‹ | ã‚¢ãƒ¼ã‚«ã‚¤ãƒ– | IPA ç‹¬ç«‹è¡Œæ”¿æ³•äºº æƒ…å ±å‡¦ç†æŽ¨é€²æ©Ÿæ§‹
æœ¬è§£èª¬æ›¸ã¯ã€2010å¹´ã«IPAã¸å±Šã‘å‡ºã®ã‚ã£ãŸã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æƒ…å ±ã‚„ä¸€èˆ¬å ±é“ã‚’åŸºã«ã—ã¦ã€æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£åˆ†é‡Žã®ç ”ç©¶è€…ã‚„å®Ÿå‹™æ‹…å½“è€…127äººã§æ§‹æˆã™ã‚‹ã€Œ10å¤§è„…å¨åŸ·ç†è€…ä¼šã€ã§çºã‚ãŸã‚‚ã®ã§ã™ã€‚ æœ¬è§£èª¬æ›¸ã¯3ç« æ§‹æˆã¨ãªã£ã¦ãŠã‚Šã€ç¬¬1ç« ã§ã¯2010å¹´ã«å®Ÿéš›ã«ç™ºç”Ÿã—ãŸã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®è¢«å®³äº‹ä¾‹ã‚’åŸºã«çµ„ç¹”ã¸ã®ãƒ“ã‚¸ãƒã‚¹ã‚¤ãƒ³ãƒ‘ã‚¯ãƒˆã‚’è€ƒå¯Ÿã—ã¦ã„ã¾ã™ã€‚ç¬¬2ç« ã§ã¯ã€2010å¹´ã«ã€Œç¤¾ä¼šçš„å½±éŸ¿ãŒå¤§ãã„ã‚‚ã®ã€ã€Œç‰¹å¾´çš„ã§ã‚ã£ãŸã‚‚ã®ã€ã€Œå°è±¡ãŒå¼·ã‹ã£ãŸã‚‚ã®ã€ãªã©ã®è¦³ç‚¹ã‹ã‚‰ã€Œ10å¤§è„…å¨åŸ·ç†è€…ä¼šã€ã®æ§‹æˆãƒ¡ãƒ³ãƒãƒ¼ã«ã‚ˆã‚‹æŠ•ç¥¨ã§é¸å®šã—ãŸ10ã®è„…å¨ã«ã¤ã„ã¦ã€è„…å¨ã®æ¦‚è¦ã¨å½±éŸ¿ã‚’è§£èª¬ã—ã¦ã„ã¾ã™ã€‚ç¬¬3ç« ã§ã¯ã€10ã®è„…å¨ã«å¯¾ã™ã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã®è€ƒãˆæ–¹ã‚„æ–¹å‘æ€§ã«ã¤ã„ã¦è§£èª¬ã—ã¦ã„ã¾ã™ã€‚ è¿‘å¹´ã®æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’å–ã‚Šå·»ãçŠ¶æ³ã®ç†è§£ã‚„ã€ä»Šå¾Œã®å¯¾ç–ã®å‚è€ƒã«ãªã‚‹ã“ã¨ã‚’æœŸå¾…ã—ã¾ã™ã€‚æ¬¡ã®PDFè³‡æ–™ã‚’ãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ã®ä¸Šã€å‚ç…§ä¸‹ã•ã„ã€‚ è³‡æ–™ã®ãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ 2010å¹´ã®ç‰¹å¾´
mi1kman 2011/03/24
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

IPA

ã‚ã¨ã§èªã‚€

ãƒ¬ãƒãƒ¼ãƒˆ
ãƒªãƒ³ã‚¯
è‡ªå‹•SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã‚„æ–°ç¨®ã®ã‚¨ãƒ³ãƒ‰ãƒ¦ãƒ¼ã‚¶ãƒ¼æ”»æ’ƒãŒå¢—åŠ - IBM X-Force | ã‚¨ãƒ³ã‚¿ãƒ¼ãƒ—ãƒ©ã‚¤ã‚º | ãƒžã‚¤ã‚³ãƒŸã‚¸ãƒ£ãƒ¼ãƒŠãƒ«
ç±³IBMã®ISSãƒãƒ¼ãƒ ã¯2æœˆ2æ—¥(ç¾åœ°æ™‚é–“)ã€å¹´é–“ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒˆãƒ¬ãƒ³ãƒ‰ã‚’ã¾ã¨ã‚ãŸãƒ¬ãƒãƒ¼ãƒˆã®æœ€æ–°ç‰ˆã€Œ2008 X-Force Trend and Riskã€ã‚’ç™ºè¡¨ã—ãŸã€‚ æœ€æ–°ãƒ¬ãƒãƒ¼ãƒˆã§ã¯ã€ŒWebã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚’ç‹™ã£ãŸã‚µã‚¤ãƒˆã¸ã®æ”»æ’ƒã€ã€Œã‚¨ãƒ³ãƒ‰ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚’æ”»æ’ƒã™ã‚‹æ–°ãŸãªè„†å¼±æ€§ã®åˆ©ç”¨ã€ã¨ã„ã†2ã¤ã®ãƒˆãƒ¬ãƒ³ãƒ‰ãŒã¿ã‚‰ã‚ŒãŸã¨å ±å‘Šã—ã¦ã„ã‚‹ã€‚ã¾ãŸè„†å¼±æ€§ã®ä»¶æ•°ãŒå‰å¹´æ¯”13.5%å¢—åŠ ã—ã€ã‚¹ãƒ‘ãƒ é€ä¿¡å…ƒ/ãƒžãƒ«ã‚¦ã‚§ã‚¢æä¾›ã‚µã‚¤ãƒˆã¨ã—ã¦ãã‚Œã¾ã§1ä½ã ã£ãŸç±³å›½ã‚’æŠœã„ã¦ä¸å›½ã‚„ãƒ–ãƒ©ã‚¸ãƒ«ãŒæ€¥æµ®ä¸Šã™ã‚‹ãªã©ã€ç¬¬ä¸‰å›½ã®å°é ãŒç›®ç«‹ã£ã¦ã„ã‚‹ã€‚ 2ã¤ã®ä¸»è¦ãƒˆãƒ¬ãƒ³ãƒ‰ã®ã†ã¡ã€Webã‚µã‚¤ãƒˆã¸ã®æ”»æ’ƒã¯æœ€çµ‚çš„ã«ã‚¨ãƒ³ãƒ‰ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®ãƒžã‚·ãƒ³ã¸ã®ä¾µå…¥ã‚’ç›®çš„ã¨ã—ãŸã‚‚ã®ã ã€‚ç‰¹ã«Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³çµŒç”±ã§ã®ä¾µå…¥ã«é‡ç‚¹ã‚’ç½®ã„ã¦ã„ã‚‹ã¨ã„ã†ã€‚Webã«ã‚¢ã‚¯ã‚»ã‚¹ã—ãŸãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚’ãƒžãƒ«ã‚¦ã‚§ã‚¢ã®ä»•æŽ›ã‘ã‚‰ã‚ŒãŸã‚µã‚¤ãƒˆã¸ã¨èª˜å°Žã—ã€ã‚µã‚¤ãƒˆæ”»æ’ƒã«åˆ©ç”¨ã™ã‚‹ã¨ã„ã†ã‚‚ã®ã ã€‚ã ãŒã“ã†ã—ãŸWebã‚¢ãƒ—ãƒª
mi1kman 2009/02/04
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

IBM

X-Force

ãƒ¬ãƒãƒ¼ãƒˆ

ã‚ã¨ã§èªã‚€
ãƒªãƒ³ã‚¯
http://japan.internet.com/webtech/20081225/6.html
mi1kman 2008/12/26
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ãƒ¬ãƒãƒ¼ãƒˆ

ã‚ã¨ã§èªã‚€
ãƒªãƒ³ã‚¯
ãƒ‹ãƒ¥ãƒ¼ã‚¹ãƒªãƒªãƒ¼ã‚¹ | ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã®ãƒ©ãƒƒã‚¯
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ•™è‚²ãƒ»è¨“ç·´ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å°‚é–€å®¶ã®è‚²æˆã‚„ç¤¾å“¡ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å•“ç™ºã€äº‹æ•…ã‚’å‰æã¨ã—ãŸè¨“ç·´ã‚’é€šã—ã¦ã€å®‰å…¨ãªæƒ…å ±ç®¡ç†ã‚’æ”¯æ´ã„ãŸã—ã¾ã™ã€‚ è©³ã—ãè¦‹ã‚‹
mi1kman 2008/12/23
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

SQLã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³

ãƒžãƒ«ã‚¦ã‚§ã‚¢

ãƒ¬ãƒãƒ¼ãƒˆ
ãƒªãƒ³ã‚¯
Memcached Injection
Memcached Injection N T T ã‚³ ãƒŸ ãƒ¥ ãƒ‹ ã‚± ãƒ¼ ã‚· ãƒ§ ãƒ³ ã‚ºæ ªå¼ä¼šç¤¾ IT ãƒžãƒã‚¸ãƒ¡ãƒ³ãƒˆã‚µãƒ¼ãƒ“ã‚¹äº‹æ¥éƒ¨ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚ªãƒšãƒ¬ãƒ¼ã‚·ãƒ§ãƒ³ã‚»ãƒ³ã‚¿ 2008 å¹´ 12 æœˆ 19 æ—¥ Ver. 1.0 SR-20080310 1. 2. 3. 4. èª¿æŸ»æ¦‚è¦ .............................................................................................................................. 3 MEMCACHED ã¨ã¯ ................................................................................................................
mi1kman 2008/12/21
ã“ã‚Œã¯ã‚ˆã„ãƒ¬ãƒãƒ¼ãƒˆ/æŸç¤¾ã®æ¤œè¨¼ãƒ¬ãƒãƒ¼ãƒˆã¨ã¯å¤§é•ã£ã‚´ãƒ›ãƒ³ã‚´ãƒ›ãƒ³/å†…å®¹ã¨ã—ã¦ã¯CRLF Injectionã®ãƒãƒªã‚¨ãƒ¼ã‚·ãƒ§ãƒ³

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

memcached

ãƒ¬ãƒãƒ¼ãƒˆ

NTTComSOC
ãƒªãƒ³ã‚¯
1