[B! JPCERTCC] poolmmjpã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

poolmmjp id:poolmmjp

JPCERTCCã«é–¢ã™ã‚‹poolmmjpã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (6)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

JPCERT/CCã€æ³¨æ„å–šèµ·ã‚„ç·Šæ€¥å ±å‘Šã®RSSé…ä¿¡é–‹å§‹
Windows SQL Server 2005ã‚µãƒãƒ¼ãƒˆçµ‚äº†ã®4æœˆ12æ—¥ãŒè¿«ã‚‹ã€å ±å‘Šæ¸ˆã¿è„†å¼±æ€§ã®æ·±åˆ»åº¦ã‚‚é«˜ãã€æ—©æ€¥ãªç§»è¡Œã‚’
poolmmjp 2007/08/23
rss

JPCERTCC
ãƒªãƒ³ã‚¯
IPAãŸã‚“ã‹ã‚‰ãŠç¤¼ãŒï¼ - ã¼ãã¯ã¾ã¡ã¡ã‚ƒã‚“ï¼
ã¯ã˜ã‚ã¦ã®ã»ã†ã“ã IPAãŸã‚“ã‹ã‚‰ã®è¿”äº‹ IPAãŸã‚“ã‹ã‚‰ã¸ã‚“ã˜ã“ãªã„ ã®ã¤ã¥ãã§ã™ï¼ï¼ï¼ è¿”äº‹ããŸã‚ˆï¼ ãã¦ã¾ã—ãŸï¼žï¼œ Date: Thu, 01 Feb 2007 20:43:06 +0900 To: Hamachiya2 Subject: ã€IPA#32334280/IPA#11631745/IPA#92669403/IPA#94436430ã€‘ å±Šå‡ºã„ãŸã ã„ãŸä»¶ã«ã¤ã„ã¦ - ----------------------------------------------------------------- ã“ã®ãƒ¡ãƒ¼ãƒ«ã¯ã€ä»¥ä¸‹ã®å–æ‰±ã„ç•ªå·ã«é–¢ã™ã‚‹é€£çµ¡ã§ã™ã€‚ IPA#32334280/IPA#11631745/IPA#92669403/IPA#94436430 - ----------------------------------------------------------------
poolmmjp 2007/02/04
ãƒãƒžãƒãƒ¤ãƒ„ãƒ¼ã§å…¨éƒ¨å—ç†ã•ã‚ŒãŸã£ã¦ã“ã¨ã‹ã€‚

IPA

JPCERTCC

ã¯ã¾ã¡ã¡ã‚ƒã‚“
ãƒªãƒ³ã‚¯
ã¯ã˜ã‚ã¦ã®ã»ã†ã“ã - ã¼ãã¯ã¾ã¡ã¡ã‚ƒã‚“ï¼
ã“ã†ã§ã™ã‹ï¼ https://isec.ipa.go.jp/inq/servlet/InqMainServlet?id=index&gamenFlg=6 PGPã£ã¦ãªã«ï¼ ãªã‚“ã§ã™ã‹ã“ã‚Œï¼ ã“ã®ã¾ã¾é€ä¿¡ã—ã¡ã‚ƒã£ãŸã‘ã©ã€ã†ã¾ãå ±å‘Šã§ããŸã‹ã‚ã‹ã‚Šã¾ã›ã‚“ï¼žï¼œ (è¿½è¨˜) id:send ãŸã‚“ãŒã€ch.search.yahoo.com ã§åŒã˜ã“ã¨ã§ãã¦ãŸã‹ã‚‰ æœ¬å®¶search.yahoo.com ã¨ã‹ã‚‚ã‚ã‚ã›ã¦å†é€šå ±ã—ã¨ã„ãŸã‚ˆï¼ ã‘ã©ã€æµ·å¤–ã®ã‚µã‚¤ãƒˆã‚‚ IPA ã§ã‚ˆã‹ã£ãŸã®ã‹ãªâ€¦ï¼ (ãŠã¾ã‘) ã“ã®éš›ã ã‹ã‚‰ã¤ã„ã§ã«ã€ã¯ã¦ãªã‚‚ã”æ„›ç”¨ã® geotrust(SSLè¨¼æ˜Žæ›¸å±‹ã•ã‚“) ã®è„†å¼±æ€§ã‚‚é€šå ±ã—ã¨ãã¾ã—ãŸï¼
poolmmjp 2007/02/02
ã¯ã¾ã¡ã¡ã‚ƒã‚“ã‚¯ã‚ªãƒªãƒ†ã‚£

IPA

JPCERTCC

ã¯ã¾ã¡ã¡ã‚ƒã‚“
ãƒªãƒ³ã‚¯
IPAãŸã‚“ã‹ã‚‰ã®è¿”äº‹ - ã¼ãã¯ã¾ã¡ã¡ã‚ƒã‚“ï¼
Date: Tue, 30 Jan 2007 10:37:05 +0900 From: "IPA/vuln/Info" To: root@hamachiya.com ã¯ã¾ã¡ã‚„ï¼’æ§˜ ã‚¦ã‚§ãƒ–ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®è„†å¼±æ€§é–¢é€£æƒ…å ±ã‚’å±Šå‡ºã„ãŸã ãã€ã‚ã‚ŠãŒ ã¨ã†ã”ã–ã„ã¾ã™ã€‚ æœ¬ä»¶ã«ã¤ãã¾ã—ã¦ã€ã‚¬ã‚¤ãƒ‰ãƒ©ã‚¤ãƒ³ã®ä»¥ä¸‹ã®é …ç›®ã«è¨˜è¼‰ãŒã‚ã‚Šã¾ã™ã‚ˆ ã†ã«ã€å±Šå‡ºã®éš›ã«ã¯ç™ºè¦‹è€…æ§˜ã®æ°åã‚’ã”è¨˜å…¥é ‚ã„ã¦ãŠã‚Šã¾ã™ã€‚ ã“ã‚Œã¯ã€è²¬ä»»ã‚ã‚‹å±Šå‡ºã‚’ä¿ƒã™ãŸã‚ã§ã‚ã‚Šã€åŒ¿åã‚„ãƒãƒ³ãƒ‰ãƒ«ãƒãƒ¼ãƒ ã® å±Šå‡ºã¯å—ç†ã§ãã¾ã›ã‚“ã®ã§ã€å®Ÿåã§ã®å±Šå‡ºã«ã”å”åŠ›ã‚’ãŠé¡˜ã„è‡´ã—ã¾ã™ã€‚ ----------------------------------------------------------- ã€Œæƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ—©æœŸè¦æˆ’ãƒ‘ãƒ¼ãƒˆãƒŠãƒ¼ã‚·ãƒƒãƒ—ã‚¬ã‚¤ãƒ‰ãƒ©ã‚¤ãƒ³ã€P.17 Vï¼Žã‚¦ã‚§ãƒ–ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«ä¿‚ã‚‹è„†å¼±æ€§é–¢é€£æƒ…å ±å–æ‰± 2. ç™ºè¦‹è€…ã®å¯¾å¿œ 4) å±Šã‘å‡ºã‚‹æƒ…å ±ã®å†…å®¹ ãƒ»ç™ºè¦‹è€…
poolmmjp 2007/02/02
IPA

JPCERTCC

ã¯ã¾ã¡ã¡ã‚ƒã‚“
ãƒªãƒ³ã‚¯
IPAãŸã‚“ã‹ã‚‰ã¸ã‚“ã˜ã“ãªã„ - ã¼ãã¯ã¾ã¡ã¡ã‚ƒã‚“ï¼
ã¡ã‚‡ã£ã¨ã¤ã¾ã‚“ãªã„ã®ã§ã€ã¤ã¾ã‚‹ã‚ˆã†ã«ã—ã¦ã¿ã¾ã—ãŸï¼ https://isec.ipa.go.jp/inq/servlet/InqMainServlet?id=index&gamenFlg=6 ã“ã‚Œã§æ˜¨æ—¥ã¨åŒã˜å®šåž‹æ–‡ã®è¿”äº‹ãŒããŸã‚‰ããŸã§æ„‰å¿«ã‹ãªã€ã¨ã‹æ€ã£ã¦â€¦ï¼ ã‚ã€IPAã®ã‚µã‚¤ãƒˆã®XSSã®å˜åœ¨ã¨å®Ÿè¨¼ã‚³ãƒ¼ãƒ‰ã¯ã€ã‚‚ã¡ã‚ã‚“æœ¬ç‰©ã ã‚ˆï¼ ãƒ¢ã‚¶ã‚¤ã‚¯ã‹ã‘ãŸã‘ã©ï¼
poolmmjp 2007/02/02
ã•ã™ãŒã€‚ã¾ã™ã¾ã™èˆˆå‘³æ·±ã„ã€‚

IPA

JPCERTCC

ã¯ã¾ã¡ã¡ã‚ƒã‚“
ãƒªãƒ³ã‚¯
æƒ…å ±å‡¦ç†æŽ¨é€²æ©Ÿæ§‹ï¼šé‡è¦ãªãŠçŸ¥ã‚‰ã›ï¼šé
ï¼‘ï¼Žæ¦‚è¦ ã€€ä»Šèˆ¬ã€æ¬¡ã®2.a)ã®IPAã‚»ãƒŸãƒŠãƒ¼å—ä»˜ãƒ•ã‚©ãƒ¼ãƒ ã«ãŠã„ã¦ã€ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒ»ã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°(æ³¨)ã®ãœã„å¼±æ€§ãŒç™ºè¦‹ã•ã‚Œã¾ã—ãŸã€‚ã“ã®ãœã„å¼±æ€§ã‚’æ‚ªç”¨ã•ã‚ŒãŸå ´åˆã€å½“è©²ãƒ•ã‚©ãƒ¼ãƒ ã«ã¦ç”³ã—è¾¼ã¿ã‚’ã—ã‚ˆã†ã¨ã—ãŸæ–¹ã®ãƒ–ãƒ©ã‚¦ã‚¶ä¸Šã§ä¸æ£ãªã‚¹ã‚¯ãƒªãƒ—ãƒˆãŒå®Ÿè¡Œã•ã‚Œã¦ã—ã¾ã†å¯èƒ½æ€§ãŒã‚ã‚Šã¾ã—ãŸã€‚å½“è©²è„†å¼±æ€§ã‚’ç¢ºèªã—ãŸæ™‚ã«ã¯ã€å½“è©²ã‚»ãƒŸãƒŠãƒ¼ã¯ã€å‹Ÿé›†å®šå“¡ï¼ˆï¼—ï¼åï¼‰ã‚’è¶…ãˆã‚‹ãŠç”³ã—è¾¼ã¿ã¨ãªã£ã¦ã„ã¾ã—ãŸã€‚å‹Ÿé›†ã‚’ç· ã‚åˆ‡ã‚‰ã›ã¦ã„ãŸã ãã¨ã¨ã‚‚ã«ã€è‡³æ€¥åŒå—ä»˜ãƒ•ã‚©ãƒ¼ãƒ ã‚’ç‚¹æ¤œã—ã€å†ç™ºé˜²æ¢ç–ã‚’è¬›ãšã‚‹ãŸã‚ã€ï¼‘æœˆï¼“ï¼‘æ—¥åˆå‰ï¼‘ï¼‘æ™‚ã«åŒå—ä»˜ãƒ•ã‚©ãƒ¼ãƒ ã®ãƒšãƒ¼ã‚¸ã‚’é–‰ã˜ã•ã›ã¦ã„ãŸã ãã¾ã—ãŸã€‚ ã€€ä½µã›ã¦ã€å½“è©²è„†å¼±æ€§ãŒç™ºè¦‹ã•ã‚ŒãŸå—ä»˜ãƒ•ã‚©ãƒ¼ãƒ ã®ãƒ—ãƒã‚°ãƒ©ãƒ ã‚’å…±æœ‰ã™ã‚‹ä»–ã®å—ä»˜ãƒ•ã‚©ãƒ¼ãƒ ã®ãƒšãƒ¼ã‚¸ã«ã¤ã„ã¦ã‚‚ã€ç‚¹æ¤œã®ãŸã‚ãƒšãƒ¼ã‚¸ã‚’é–‰ã˜ã•ã›ã¦ã„ãŸã ãã¾ã—ãŸã€‚ç‚¹æ¤œã®çµæžœã€ãã®å—ä»˜ãƒ•ã‚©ãƒ¼ãƒ ã«ãŠã„ã¦ã‚‚ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆãƒ»ã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚°ã®è„†å¼±æ€§ãŒç¢ºèªã•ã‚Œã¾ã—ãŸã®ã§ã€æ”¹ä¿®ã—ãŸä¸Šã€è„†å¼±æ€§æ¤œæŸ»ã‚’è¡Œ
poolmmjp 2007/02/02
ã¯ã¾ã¡ã¡ã‚ƒã‚“ã®ä»¶

IPA

JPCERTCC

XSS

ã¯ã¾ã¡ã¡ã‚ƒã‚“
ãƒªãƒ³ã‚¯
1