[B! vulnerability] drumscoã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

drumsco id:drumsco

vulnerabilityã«é–¢ã™ã‚‹drumscoã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (26)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

CVE-2022-21449: Psychic Signatures in Java
The long-running BBC sci-fi show Doctor Who has a recurring plot device where the Doctor manages to get out of trouble by showing an identity card which is actually completely blank. Of course, this being Doctor Who, the card is really made out of a special â€œpsychic paperâ€œ, which causes the person looking at it to see whatever the Doctor wants them to see: a security pass, a warrant, or whatever.
drumsco 2022/04/24
security

Java

vulnerability
ãƒªãƒ³ã‚¯
cve-2022-22965 Spring4Shell ã®å½±éŸ¿èª¿æŸ» | DevelopersIO
ã¯ã˜ã‚ã« ã“ã‚€ã‚ã§ã™ã€‚ Spring4Shell ã«ã¤ã„ã¦ã§ã™ã€‚ã©ã†ã›ãŠå‰ã‚‰èª¿æŸ»ã—ã¦ãŸã‚“ã ã‚ï¼Ÿã¨æ€ã£ãŸã‚ãªãŸã€å¤§æ£è§£ã§ã™ã€‚ çµè«– éžå¸¸ã«åºƒç¯„ãªå½±éŸ¿ãŒã‚ã‚Šã¾ã—ãŸãŒã€ç¾æ™‚ç‚¹ã§ã€Spring Framework æœ¬ä½“ã¸ã®ä¿®æ£ãƒ‘ãƒƒãƒãŒã™ã§ã«é©ç”¨ã•ã‚Œã¦ã„ã¾ã™ã€‚ãã®ãŸã‚ã“ã‚Œã«æº–ã˜ãŸã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã‚’å®Ÿæ–½ã™ã‚‹ã“ã¨ã§è„†å¼±æ€§ã‚’å›žé¿ã§ãã¾ã™ã€‚ spring-boot-2-6-6 spring-boot-2-5-12 spring-framework-5.3.18 Tomcat 9.0.62 ã¾ãŸã“ã‚Œã‚‰ã®ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆãŒã§ããªã„å ´åˆã€ä»¥ä¸‹ã®å¯¾å¿œã‚’å–ã‚‹ã“ã¨ã‚‚ã§ãã¾ã™ã€‚ ä¸è¦ãªãƒ‘ãƒ©ãƒ¡ãƒ¼ã‚¿ã®ãƒžãƒƒãƒ”ãƒ³ã‚°ã‚’è¡Œã‚ãªã„ã‚ˆã†ã«ã‚³ãƒ¼ãƒ‰ã‚’è¿½åŠ ã™ã‚‹ ï¼ˆBinding ã®ãƒ–ãƒ©ãƒƒã‚¯ãƒªã‚¹ãƒˆã¸ class.* ç³»ã‚’è¿½åŠ ï¼‰ Java8 ã¸ä¸€æ—¦ãƒ€ã‚¦ãƒ³ã‚°ãƒ¬ãƒ¼ãƒ‰ã™ã‚‹ Tomcat 9.0.62 ã¸ Update ã™ã‚‹ã“ã¨ã§è¨å®šå€¤è‡ªä½“ã®æ›¸ãæ›ãˆã‚’ã§ããªã„ã‚ˆ
drumsco 2022/04/11
Tomcatä¸Šã§ã®æ¤œè¨¼ãƒ‘ã‚¿ãƒ¼ãƒ³ä¾‹ã‚ã‚Šã€‚

security

vulnerability

Java

Spring
ãƒªãƒ³ã‚¯
Spring Coreã«ãŠã‘ã‚‹é‡å¤§ãªè„†å¼±æ€§: CVE-2022-22965 (åˆ¥å: Spring4Shell)
drumsco 2022/04/01
security

Java

Spring

vulnerability
ãƒªãƒ³ã‚¯
Spring Framework RCE, Early Announcement
Updates [04-13] "Data Binding Rules Vulnerability CVE-2022-22968" follow-up blog post published, related to the "disallowedFields" from the Suggested Workarounds [04-08] Snyk announces an additional attack vector for Glassfish and Payara. See also related Payara, upcoming release announcement [04-04] Updated Am I Impacted with improved description for deployment requirements [04-01] Updated Am I I
drumsco 2022/04/01
"ã“ã®è„†å¼±æ€§ã¯ã€JDK9ã§å®Ÿè¡Œã•ã‚Œã¦ã„ã‚‹SpringMVCãŠã‚ˆã³SpringWebFluxã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«å½±éŸ¿ã‚’ä¸Žãˆã¾ã™ã€‚ ç‰¹å®šã®ã‚¨ã‚¯ã‚¹ãƒ—ãƒã‚¤ãƒˆã§ã¯ã€ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚’WARãƒ‡ãƒ—ãƒã‚¤ãƒ¡ãƒ³ãƒˆã¨ã—ã¦Tomcatã§å®Ÿè¡Œã™ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚"

security

vulnerability

Java

Spring

Spring Boot

Tomcat
ãƒªãƒ³ã‚¯
ç¶š Cloud Armor ã® WAF ãƒ«ãƒ¼ãƒ«ã§ Apache Log4j 2 ã®è„†å¼±æ€§å¯¾ç–
Apache Log4j 2 ã®è„†å¼±æ€§ã«å¯¾å¿œã—ãŸ Cloud Armor ã® WAF ãƒ«ãƒ¼ãƒ«ã«ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆãŒã‚ã‚Šã¾ã—ãŸã®ã§ã€åˆ¥ã‚¨ãƒ³ãƒˆãƒªã¨ã—ã¦ã”ç´¹ä»‹ã—ãŸã„ã¨æ€ã„ã¾ã™ã€‚ å…ƒã®è¨˜äº‹ã‚’æ›´æ–°ã—ã¦ã‚‚ã‚ˆã‹ã£ãŸã®ã§ã™ãŒã€ã™ã§ã«èªã¾ã‚ŒãŸæ–¹ã«ã¯æ›´æ–°ãŒä¼ã‚ã‚Šã«ãã„ã“ã¨ã¨ã€ãã‚‚ãã‚‚ Cloud Armor ã®ã€Œäº‹å‰ã«è¨å®šã•ã‚ŒãŸãƒ«ãƒ¼ãƒ«ã€ã®ãƒãƒ¥ãƒ¼ãƒ‹ãƒ³ã‚°ã«ã¤ã„ã¦ã¯å…ƒã®è¨˜äº‹ã§ã¯è§¦ã‚Œã¦ã„ãªã‹ã£ãŸã®ã§ã€åˆ¥ã®ã‚¨ãƒ³ãƒˆãƒªã¨ã—ã¦æ›¸ãã¾ã—ãŸã€‚ Cloud Armor ã® WAF ãƒ«ãƒ¼ãƒ«ã®æ›´æ–°å…ƒã®è¨˜äº‹ã§ã€ŒGoogle Cloud ã®ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã«ã‚ˆã‚‹ãƒ«ãƒ¼ãƒ«ã®ãƒãƒ¥ãƒ¼ãƒ‹ãƒ³ã‚°ã¯éšæ™‚ãŠã“ãªã‚ã‚Œã¦ã„ã‚‹ã€ã¨æ›¸ãã€å®Ÿéš›ã«è¨˜äº‹ã‚’æ›¸ãçµ‚ã‚ã£ãŸç›´å¾Œã«è©¦ã—ãŸã‚‰ã€åŸ·ç†æ™‚ç‚¹ã§ã¯ãƒ–ãƒãƒƒã‚¯ã§ãã¦ãªã‹ã£ãŸæ”»æ’ƒãƒ‘ã‚¿ãƒ¼ãƒ³ã‚‚ãƒ–ãƒãƒƒã‚¯ã•ã‚Œã‚‹ã‚ˆã†ã«ãªã£ãŸæ—¨ã‚’è¿½è¨˜ã—ã¾ã—ãŸãŒã€ã•ã‚‰ãªã‚‹æ›´æ–°ãŒã‚ã‚Šã¾ã—ãŸã®ã§ã”ç´¹ä»‹ã—ã¾ã™ã€‚ ãŸã¨ãˆã°ã€æ˜¨æ—¥ 2021 å¹´ 12 æœˆ 13 æ—¥æ™‚ç‚¹ã§ã¯ä»¥ä¸‹ã®ã‚ˆ
drumsco 2021/12/15
Google

GCP

security

vulnerability

Armor

Java
ãƒªãƒ³ã‚¯
Cloud Armor ã® WAF ãƒ«ãƒ¼ãƒ«ã§ Apache Log4j ã®è„†å¼±æ€§å¯¾ç–ã‚’ã™ã‚‹
(2021 å¹´ 12 æœˆ 14 æ—¥ 21:00 JST è¿½è¨˜ï¼šWAF ãƒ«ãƒ¼ãƒ«ã®ãƒãƒ¥ãƒ¼ãƒ‹ãƒ³ã‚°ã«ã¤ã„ã¦ç¶šç·¨ã‚’æ›¸ãã¾ã—ãŸ) Google Cloud Japan Advent Calendar 2021 ã® 12 æ—¥ç›®â€¦ã§ã¯ã‚ã‚Šã¾ã›ã‚“ã€‚ï¼ˆ12 æ—¥ç›®ã®è¨˜äº‹ã¯ã“ã¡ã‚‰ã§ã™ã€‚ãŠã€ãŸã¾ãŸã¾è„†å¼±æ€§é–¢é€£ã§ã™ãã€‚ï¼‰ å¹´ã®ç€¬ã‚‚å·®ã—è¿«ã£ãŸ 2021 å¹´ 12 æœˆ 10 æ—¥ï¼ˆé‡‘ï¼‰ã€Apache Log4j 2 ã®è„†å¼±æ€§ã«å¯¾ã™ã‚‹ã‚¼ãƒãƒ‡ã‚¤æ”»æ’ƒãŒå¯èƒ½ã§ã‚ã‚‹ã“ã¨ãŒæ˜Žã‚‰ã‹ã«ãªã‚Šã¾ã—ãŸã€‚ Google Cloud ã® WAF ã‚µãƒ¼ãƒ“ã‚¹ã§ã‚ã‚‹ Cloud Armor ã§ã‚‚ã€æœ¬è„†å¼±æ€§ã¸ã®å¯¾ç–ã®ä¸€ã¤ã¨ã—ã¦ä½¿ãˆã‚‹ WAF ãƒ«ãƒ¼ãƒ«ãŒãƒªãƒªãƒ¼ã‚¹ã•ã‚ŒãŸã®ã§ã”ç´¹ä»‹ã—ã¾ã™ã€‚ Cloud Armor WAF rule to help address Apache Log4j vulnerability | Google Cloud Blog
drumsco 2021/12/15
Google

GCP

Armor

security

vulnerability

Java

WAF
ãƒªãƒ³ã‚¯
Apache Log4j 2 Vulnerability Security Advisory Â |Â Google Cloud
Accelerate your digital transf ormation Whether your business is early in its journey or well on its way to digital transf ormation, Google Cloud can help solve your toughest challenges.
drumsco 2021/12/15
security

CVE

vulnerability

Java

Google

GCP
ãƒªãƒ³ã‚¯
Log4j2 è„†å¼±æ€§å•é¡Œã«ãŠã‘ã‚‹ SpringBoot ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®æ¤œè¨¼ | DevelopersIO
å…ˆæ—¥é¨’ãŽã«ãªã£ã¦ã„ãŸ CVE-2021-44228 ã«ã¤ã„ã¦ã®ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³å´ã®å¯¾å¿œã«ã¤ã„ã¦è¨˜è¼‰ã„ãŸã—ã¾ã™ã€‚ ç·©å’Œç–ã¨ã—ã¦ã™ã§ã« AWS WAF ã§ã® Rule ã® Update ç‰ãŒè¡Œã‚ã‚Œã¦ã„ã‚‹ãŸã‚ã€AWS ã‚µãƒ¼ãƒ“ã‚¹ã®è©³ç´°ã«ã¤ã„ã¦ã¯åˆ¥é€”è¨˜äº‹ã‚’å¾¡è¦§ãã ã•ã„ã€‚ Log4jã®è„†å¼±æ€§å¯¾ç–ã¨ã—ã¦AWS WAFã®ãƒžãƒãƒ¼ã‚¸ãƒ‰ãƒ«ãƒ¼ãƒ«ã«ã€ŒLog4JRCEã€ãŒè¿½åŠ ã•ã‚Œã¾ã—ãŸ ã“ã“ã§ã¯ SpringBoot ã‚’ãƒ™ãƒ¼ã‚¹ã¨ã—ãŸã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã¸ã®å½±éŸ¿ã¨å¯¾å¿œå¯å¦ã®åˆ¤æ–ã«ã¤ã„ã¦ã©ã®ã‚ˆã†ãªèª¿æŸ»ã‚’è¡Œã£ãŸã‹ã‚’è¨˜è¼‰ã—ã¾ã™ã€‚ ã²ã¨ã¾ãšçµè«– Spring å´ã‹ã‚‰è¦‹è§£ãŒã™ã§ã«å‡ºã¦ã„ã¾ã™ã€‚ Log4J2 Vulnerability and Spring Boot ä»¥ä¸‹æŠœç²‹ã—ã¾ã™ã€‚ Spring Boot users are only affected by this vulnerability if they haveÂ switc
drumsco 2021/12/12
security

Java

logging

vulnerability
ãƒªãƒ³ã‚¯
1å¹´ä»¥ä¸Šã‚‚æ¤œå‡ºã§ããªã‹ã£ãŸã€Œå²ä¸Šæœ€å¤§ç´šã®é«˜åº¦ãªæ”»æ’ƒã€ã€åŒã˜å¼±ç‚¹ã¯ä¸–ç•Œä¸ã«
1å¹´ä»¥ä¸Šã‚‚æ¤œå‡ºã§ããªã‹ã£ãŸã€Œå²ä¸Šæœ€å¤§ç´šã®é«˜åº¦ãªæ”»æ’ƒã€ã€åŒã˜å¼±ç‚¹ã¯ä¸–ç•Œä¸ã«ï¼šã“ã®é ƒã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç•Œéšˆã§ï¼ˆ1/2 ãƒšãƒ¼ã‚¸ï¼‰ ç±³é€£é‚¦æ”¿åºœæ©Ÿé–¢ã‚„å¤§æ‰‹ä¼æ¥ãŒSolarWindsã®ç®¡ç†ã‚½ãƒ•ãƒˆçµŒç”±ã§ã‚µã‚¤ãƒãƒ¼æ”»æ’ƒã‚’å—ã‘ãŸäº‹ä»¶ã¯ã€èª¿æŸ»ãŒé€²ã‚€ã»ã©äº‹æ…‹ã®æ·±åˆ»ã•ã¨å½±éŸ¿ã®å¤§ãã•ãŒæµ®ã‹ã³ä¸ŠãŒã£ã¦ã„ã‚‹ã€‚ä¿¡é ¼ã§ãã‚‹ã¨æ€ã£ã¦ã„ãŸå–å¼•å…ˆãŒè¸ã¿å°ã«ã•ã‚ŒãŸã‚µãƒ—ãƒ©ã‚¤ãƒã‚§ãƒ¼ãƒ³æ”»æ’ƒã¯ã€åŽ³é‡ãªã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã«å®ˆã‚‰ã‚ŒãŸã¯ãšã®çµ„ç¹”ã§ã•ãˆè¦‹æŠœã‘ãªã‹ã£ãŸã€‚åŒã˜ã‚ˆã†ãªå¼±ç‚¹ã¯è‡³ã‚‹æ‰€ã«ã‚ã‚‹ã€‚ ä¸€é€£ã®äº‹ä»¶ãŒç™ºè¦šã—ãŸã®ã¯2020å¹´12æœˆã€‚ã ãŒSolarWindsã®ã“ã‚Œã¾ã§ã®èª¿æŸ»ã«ã‚ˆã‚Œã°ã€æœ€åˆã®ä¸æ£ã‚¢ã‚¯ã‚»ã‚¹ã¯2019å¹´9æœˆã«ç™ºç”Ÿã—ã¦ã„ãŸã€‚åŒå¹´10æœˆã«ãƒªãƒªãƒ¼ã‚¹ã•ã‚ŒãŸåŒç¤¾ã®ç®¡ç†ã‚½ãƒ•ãƒˆã€ŒOrionã€ã®æ›´æ–°ç‰ˆã«ã¯å®Ÿé¨“çš„ãªæ”»æ’ƒã‚³ãƒ¼ãƒ‰ãŒä»•è¾¼ã¾ã‚Œã€2020å¹´2æœˆã«ã¯ãƒ•ãƒ«æ©Ÿèƒ½ã‚’è£…å‚™ã—ãŸãƒžãƒ«ã‚¦ã‚§ã‚¢ã€ŒSunburstã€ãŒå°Žå…¥ã•ã‚Œã¦ã€3æœˆã‹ã‚‰åŒãƒžãƒ«ã‚¦ã‚§ã‚¢ã®æ‹¡æ•£ãŒå§‹ã¾ã£ãŸã€‚ S
drumsco 2021/01/27
security

vulnerability

ã‚ã¨ã§èªã‚€
ãƒªãƒ³ã‚¯
Virus Bulletin :: Home
The Q3 2024 VBSpam test measures the performance of ten full em ail security solutions and one openâ€‘source solution VB100 is an efficacy certification covering Windows endpoint security products and their ability to protect against common threats. An indispensable source of reference for anyone concerned with computer security, the Bulletin is the forum through which leading security researchers pu
drumsco 2019/09/04
security

virus

vulnerability

malware
ãƒªãƒ³ã‚¯
Consumer
This website uses cookies to ensure you get the best experience on our website. Please note that by continuing to use this site you consent to the terms of our Privacy and Data Protection Policy . Some of our partner services are located in the United States. According to the case law of the European Court of Justice, there is currently no adequate data protection in the USA. There is a risk that
drumsco 2019/09/04
security

Testing

malware

vulnerability
ãƒªãƒ³ã‚¯
Zoom Zero Day: 4+ Million Webcams & maybe an RCE? Just get them to visit your website!
CVE-NumbersDOS Vulnerability â€” Fixed in Client version 4.4.2 â€” CVE-2019â€“13449Information Disclosure (Webcam) â€” Unfixed â€”CVE-2019â€“13450UPDATE â€” July 9th (am)As far as I can tell this vulnerability also impacts Ringcentral. Ringcentral for their web conference system is a white labeled Zoom system. UPDATE â€” July 9th (pm)According to Zoom, they will have a fix shipped by midnight tonight pacific time
drumsco 2019/07/10
security

vulnerability
ãƒªãƒ³ã‚¯
VMware Knowledge Base
drumsco 2019/04/25
CVE-2018-3646 (57138)

VMware

MacOS

vulnerability
ãƒªãƒ³ã‚¯
CPUã®æ–°ãŸãªè„†å¼±æ€§ SPOILERã®è«–æ–‡ã‚’èªã‚€ - FPGAé–‹ç™ºæ—¥è¨˜
arxiv.org GIGAZINEã§ã‚‚ç´¹ä»‹ã•ã‚ŒãŸæ–°ãŸãªCPUã®è„†å¼±æ€§ã®è«–æ–‡"SPOILER"ãŒç™ºè¡¨ã•ã‚ŒãŸã€‚GIGAZINEãŒã“ã®ã‚ˆã†ãªè¨˜äº‹ã‚’å…¬é–‹ã™ã‚‹ã®ã¯çã—ã„ãªã¨æ€ã„ã¤ã¤ã€é¢ç™½ãã†ãªã®ã§èªã‚“ã§ã¿ã‚‹ã“ã¨ã«ã—ãŸã€‚ ã¡ãªã¿ã«ã€ç†è€…ã¯ä¾‹ã«ã‚ˆã£ã¦ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®å°‚é–€å®¶ã§ã¯ãªã„ã—ã€CPUã‚¢ãƒ¼ã‚ãƒ†ã‚¯ãƒãƒ£ã«ã—ã¦ã‚‚ãƒ‡ã‚¹ã‚¯ãƒˆãƒƒãƒ—ã‚¯ãƒ©ã‚¹ã®æœ¬æ ¼çš„ãªã‚‚ã®ã¯è¨è¨ˆçµŒé¨“ãŒãªã„ã®ã§ã€ã„ã¾ã„ã¡æœ¬æ–‡ã‹ã‚‰èªã¿å–ã‚Œãªã„éƒ¨åˆ†ãŒã‚ã£ãŸã‚Šã¨ã‹ã€é–“é•ã£ã¦ã„ã‚‹éƒ¨åˆ†ãŒã‚ã‚‹ã‹ã‚‚ã—ã‚Œãªã„ã€‚ ã“ã®æ”»æ’ƒæ‰‹æ³•ã‚‚ã€CPUã®é«˜é€ŸåŒ–ã‚’é”æˆã™ã‚‹ãŸã‚ã®æ§˜ã€…ãªæ©Ÿæ§‹ã‚’æ‚ªç”¨ã™ã‚‹æ‰‹æ³•ã¨ãªã£ã¦ã„ã‚‹ã€‚ SPOILERãŒå¯¾è±¡ã¨ã™ã‚‹ã®ã¯ã€ã‚¹ãƒˆã‚¢å‘½ä»¤ã®å†…å®¹ã‚’ãƒãƒ¼ãƒ‰å‘½ä»¤ã§ãƒ•ã‚©ãƒ¯ãƒ¼ãƒ‰ã™ã‚‹ãŸã‚ã®MOB(Memory Order Buffer)ã®æ©Ÿæ§‹ã ã€‚ä¾‹ãˆã°ä»¥ä¸‹ã®ã‚ˆã†ãªã‚³ãƒ¼ãƒ‰ã‚’æ›¸ã„ãŸå ´åˆã€ sw a0, 0(sp) lw a1, 0(sp) ã‚¹ãƒˆã‚¢å‘½ä»¤ã¯ã€æŠ•æ©Ÿå®Ÿè¡Œã‚’ã—ã¦ã—ã¾ã†ã¨ãƒ¡ãƒ¢ãƒªã®
drumsco 2019/03/12
vulnerability

CPU

hardware

security
ãƒªãƒ³ã‚¯
è„†å¼±æ€§è¨ºæ–ãƒ»è„†å¼±æ€§æ¤œæŸ»ãƒ„ãƒ¼ãƒ«ï¼•é¸ | ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ãƒ†ã‚¹ãƒˆãƒ»ç¬¬ä¸‰è€…æ¤œè¨¼ãªã‚‰ã‚¦ã‚§ãƒ–ãƒ¬ãƒƒã‚¸
åŠ¹çŽ‡çš„ãªè„†å¼±æ€§è¨ºæ–ã®ä»•çµ„ã¿ã‚’æ§‹ç¯‰ã™ã‚‹ã«ã¯ã€ç›®çš„ã«å¿œã˜ãŸæ‰‹æ³•ã‚’é©æé©æ‰€ã«æ´»ç”¨ã™ã‚‹ã“ã¨ãŒæ±‚ã‚ã‚‰ã‚Œã¾ã™ã€‚ãã“ã§ä»Šå›žã¯ã€è„†å¼±æ€§è¨ºæ–ã®æ‰‹æ³•ã€æ´»ç”¨åº¦ã®é«˜ã„è„†å¼±æ€§è¨ºæ–ãƒ„ãƒ¼ãƒ«ã‚’ãƒ”ãƒƒã‚¯ã‚¢ãƒƒãƒ—ã—ã¦ç´¹ä»‹ã—ã¾ã™ã€‚è„†å¼±æ€§è¨ºæ–ãƒ„ãƒ¼ãƒ«ã¯ã€å°‘ãªã„äººçš„è² æ‹…ã§è„†å¼±æ€§è¨ºæ–ã‚’è¡Œã†ãŸã‚ã«é‡è¦ãªå½¹å‰²ã‚’æžœãŸã—ã¾ã™ã€‚ è„†å¼±æ€§è¨ºæ–ãƒ»è„†å¼±æ€§æ¤œæŸ»ã®æ‰‹æ³•ã‚’æŠŠæ¡ã™ã‚‹ è„†å¼±æ€§è¨ºæ–ã®æ‰‹æ³•ã‚’å¤§ããåˆ†é¡žã™ã‚‹ã¨ã€æ‰‹å‹•è¨ºæ–ã¨ãƒ„ãƒ¼ãƒ«è¨ºæ–ã®2ç¨®é¡žãŒã‚ã‚Šã¾ã™ã€‚ãã‚Œãžã‚Œã®ãƒ¡ãƒªãƒƒãƒˆã€ãƒ‡ãƒ¡ãƒªãƒƒãƒˆã‚’ã¾ãšã¯æŠ¼ã•ãˆã¦ãŠãã¾ã—ã‚‡ã†ã€‚ â—†æ‰‹å‹•ã«ã‚ˆã‚‹è„†å¼±æ€§è¨ºæ– æ‰‹å‹•è¨ºæ–ã¯ã€ãã®åã®é€šã‚ŠäººãŒæ‰‹å‹•ã§è¡Œã†è¨ºæ–ã§ã™ã€‚å®Ÿéš›ã«äººã®ç›®ã§ç¢ºèªã—ãªãŒã‚‰è¡Œã†ãŸã‚ã€ç´°ã‹ãæŸ”è»Ÿãªå¯¾å¿œãŒå¯èƒ½ãªç‚¹ãŒãƒ¡ãƒªãƒƒãƒˆã§ã™ã€‚ä¸€æ–¹ãƒ‡ãƒ¡ãƒªãƒƒãƒˆã¯ã€ãƒ†ã‚¹ãƒˆã«è¦ã™ã‚‹æ™‚é–“ãŒãƒ„ãƒ¼ãƒ«ã«æ¯”ã¹ã¦ã‹ã‹ã‚‹ã“ã¨ã€äººå“¡ã®ç¢ºä¿ãŒå¿…è¦ãªãŸã‚ã‚³ã‚¹ãƒˆã‚‚é«˜ããªã‚‹ã“ã¨ã§ã™ã€‚ â—†ãƒ„ãƒ¼ãƒ«ã«ã‚ˆã‚‹è„†å¼±æ€§è¨ºæ– ãƒ†ã‚¹ãƒˆã‚’è‡ªå‹•åŒ–ã§ãã‚‹ãƒ„ãƒ¼ãƒ«ã‚’ç”¨ã„ãŸè¨ºæ–æ–¹æ³•ã§ã™ã€‚æ‰‹å‹•è¨ºæ–ã«æ¯”
drumsco 2018/12/03
security

vulnerability
ãƒªãƒ³ã‚¯
Wi-Fiã‚’æš—å·åŒ–ã™ã‚‹WPA2ã«è„†å¼±æ€§ç™ºè¦‹ ï½žå¯¾å¿œã®ã‚ã‚‰ã‚†ã‚‹æ©Ÿå™¨ãŒå½±éŸ¿
drumsco 2017/10/16
security

Wi-Fi

vulnerability
ãƒªãƒ³ã‚¯
NTTãƒ‰ã‚³ãƒ¢ Wi-Fi STATION L-02F ã®è„†å¼±æ€§ã«é–¢ã™ã‚‹æ³¨æ„å–šèµ·
å„ä½ JPCERT-AT-2017-0034 JPCERT/CC 2017-09-12 <<< JPCERT/CC Alert 2017-09-12 >>> NTTãƒ‰ã‚³ãƒ¢ Wi-Fi STATION L-02F ã®è„†å¼±æ€§ã«é–¢ã™ã‚‹æ³¨æ„å–šèµ· https://www.jpcert.or.jp/at/2017/at170034.html I. æ¦‚è¦ NTTãƒ‰ã‚³ãƒ¢ãŒæä¾›ã™ã‚‹ LG Electronics è£½ Wi-Fi STATION L-02F ã«ã¯è„†å¼±æ€§ãŒ ã‚ã‚Šã¾ã™ã€‚è„†å¼±æ€§ã‚’æ‚ªç”¨ã•ã‚ŒãŸå ´åˆã€ãƒªãƒ¢ãƒ¼ãƒˆã‹ã‚‰ã®æ”»æ’ƒã«ã‚ˆã£ã¦ã€ä»»æ„ã®ã‚³ãƒ¼ ãƒ‰ã‚’å®Ÿè¡Œã•ã‚ŒãŸã‚Š (CVE-2017-10845)ã€æ©Ÿå™¨ã«ä¿å˜ã•ã‚Œã¦ã„ã‚‹è¨å®šæƒ…å ±ã‚’å–å¾— ã•ã‚Œã‚‹ (CVE-2017-10846) å¯èƒ½æ€§ãŒã‚ã‚Šã¾ã™ã€‚è„†å¼±æ€§ã®è©³ç´°ã«ã¤ã„ã¦ã¯ã€JVN ã®æƒ…å ±ã‚’å‚ç…§ã—ã¦ãã ã•ã„ã€‚ JVN#68922465 Wi-Fi STATION L-02
drumsco 2017/09/12
security

vulnerability

docomo

ssh
ãƒªãƒ³ã‚¯
ãƒ‰ã‚³ãƒ¢ã‹ã‚‰ã®ãŠçŸ¥ã‚‰ã› : ã€ŒWi-Fi STATION L-02Fã€ã‚’ã”åˆ©ç”¨ã®ãŠå®¢æ§˜ã¸ã€ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆå®Ÿæ–½ã®ãŠé¡˜ã„ | ãŠçŸ¥ã‚‰ã› | NTTãƒ‰ã‚³ãƒ¢
ãŠå®¢æ§˜ã®è¨å®šã«ã‚ˆã‚Šã€ãŠå®¢æ§˜æƒ…å ±ãŒã€Œéžè¡¨ç¤ºã€ã¨ãªã£ã¦ãŠã‚Šã¾ã™ã€‚ãŠå®¢æ§˜æƒ…å ±ã‚’è¡¨ç¤ºã™ã‚‹ã«ã¯dã‚¢ã‚«ã‚¦ãƒ³ãƒˆã§ãƒã‚°ã‚¤ãƒ³ã—ã¦ãã ã•ã„ã€‚ ãŠå®¢æ§˜æƒ…å ±è¡¨ç¤ºã«ã¤ã„ã¦ã¸ ãŠå®¢æ§˜æƒ…å ±è¡¨ç¤ºã«ã¤ã„ã¦ã¸ ãƒ‰ã‚³ãƒ¢ã‹ã‚‰ã®ãŠçŸ¥ã‚‰ã› ã€ŒWi-Fi STATION L-02Fã€ã‚’ã”åˆ©ç”¨ã®ãŠå®¢æ§˜ã¸ã€ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆå®Ÿæ–½ã®ãŠé¡˜ã„ 2017å¹´7æœˆ10æ—¥ (2017å¹´11æœˆ6æ—¥æ›´æ–°) å¹³ç´ ã¯ã€NTTãƒ‰ã‚³ãƒ¢ã®å•†å“ãƒ»ã‚µãƒ¼ãƒ“ã‚¹ã‚’ã”åˆ©ç”¨ã„ãŸã ãã€èª ã«ã‚ã‚ŠãŒã¨ã†ã”ã–ã„ã¾ã™ã€‚ ã“ã‚Œã¾ã§ã«ã€ŒWi-Fi STATION L-02Fã€ã«ãŠã„ã¦ã€ç«¯æœ«å†…ã®ç‰¹å®šã®è¨å®šã«ã‚ˆã‚Šã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¸Šã®è„†å¼±æ€§ãŒä»¥ä¸‹ã®ã¨ãŠã‚Šåˆ¤æ˜Žã—ã¦ãŠã‚Šã¾ã™ã€‚ ã“ã‚Œã‚‰äº‹è±¡ã¯ã€ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã‚’è¡Œã£ã¦ã„ãŸã ãã“ã¨ã§äºˆé˜²ãŠã‚ˆã³æ”¹å–„ãŒã§ãã¾ã™ã®ã§ã€é€Ÿã‚„ã‹ã«ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã‚’å®Ÿæ–½ã„ãŸã ãã¾ã™ã‚ˆã†ãŠé¡˜ã„ç”³ã—ä¸Šã’ã¾ã™ã€‚ Wi-Fi STATION L-02Fã®è£½å“ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆæƒ…å ±
drumsco 2017/09/12
docomo

security

vulnerability

ssh
ãƒªãƒ³ã‚¯
YahooãŒã¾ãŸã‚‚ã‚„ãƒãƒƒã‚ãƒ³ã‚°ã•ã‚Œã¦ã„ãŸã“ã¨ãŒç™ºè¦š
By KÄrlis DambrÄns Yahoo.com(Yahoo)ã¯2016å¹´9æœˆã«è‡ªç¤¾ã®ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã‹ã‚‰5å„„äººä»¥ä¸Šã®ãƒ¦ãƒ¼ã‚¶ã‚¢ã‚«ã‚¦ãƒ³ãƒˆæƒ…å ±ãŒç›—ã¾ã‚Œã¦ã„ãŸã“ã¨ã‚’ç™ºè¡¨ã€åŒå¹´12æœˆã«ã¯åˆ¥ä»¶ã¨ã—ã¦ã•ã‚‰ã«10å„„äººåˆ†ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚¢ã‚«ã‚¦ãƒ³ãƒˆæƒ…å ±ãŒç›—ã¾ã‚Œã¦ã„ãŸã“ã¨ã‚’ç™ºè¡¨ã—ã¾ã—ãŸã€‚éŽåŽ»ã«2ä»¶ã®å¤§è¦æ¨¡ãƒãƒƒã‚ãƒ³ã‚°ã‚’å—ã‘ã¦ã„ãŸã“ã¨ã‚’æ˜Žã‹ã—ãŸã°ã‹ã‚Šã®Yahooã§ã™ãŒã€æ–°ã—ã„ãƒãƒƒã‚ãƒ³ã‚°ã®ç—•è·¡ãŒè¦‹ã¤ã‹ã£ã¦ãŠã‚Šã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚¢ã‚«ã‚¦ãƒ³ãƒˆæƒ…å ±ã¯ã•ã‚‰ã«æµå‡ºã—ã¾ãã£ã¦ã„ãŸã“ã¨ãŒåˆ¤æ˜Žã—ã¦ã„ã¾ã™ã€‚ Yahoo Hacked Once Again! Quietly Warns Affected Users About New Attack http://thehackernews.com/2017/02/yahoo-hack.html YahooãŒç¤¾å†…èª¿æŸ»ã‚’è¡Œã£ãŸã¨ã“ã‚ã€ãƒãƒƒã‚«ãƒ¼ãŒãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãªã—ã§ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã«ãƒã‚°ã‚¤ãƒ³ã™ã‚‹ãŸã‚ã€å½é€ ã•ã‚ŒãŸ
drumsco 2017/02/17
security

vulnerability

Yahoo!
ãƒªãƒ³ã‚¯
ã€ãŠçŸ¥ã‚‰ã›ã€‘ä¸æ£ã‚¢ã‚¯ã‚»ã‚¹ã«ã‚ˆã‚‹ãŠå®¢æ§˜å¥‘ç´„æƒ…å ±æµå‡ºã«é–¢ã™ã‚‹ãŠè©«ã³ã¨ã”å ±å‘Š | æ–°ç€æƒ…å ±ï½œ ãƒ¬ãƒ³ã‚¿ãƒ«ã‚µãƒ¼ãƒãƒ¼ã®ã‚«ã‚´ãƒ¤ãƒ»ã‚¸ãƒ£ãƒ‘ãƒ³
å¼Šç¤¾ã‚·ã‚¹ãƒ†ãƒ ã¸ã®ä¸æ£ã‚¢ã‚¯ã‚»ã‚¹ã«é–¢ã™ã‚‹FAQ ãŠå®¢æ§˜å„ä½ ã‚«ã‚´ãƒ¤ãƒ»ã‚¸ãƒ£ãƒ‘ãƒ³æ ªå¼ä¼šç¤¾ ä»£è¡¨å–ç· å½¹ åŒ—å·è²žå¤§ ä¸æ£ã‚¢ã‚¯ã‚»ã‚¹ã«ã‚ˆã‚‹ãŠå®¢æ§˜å¥‘ç´„æƒ…å ±æµå‡ºã«é–¢ã™ã‚‹ãŠè©«ã³ã¨ã”å ±å‘Š ã“ã®ãŸã³ã€å¼Šç¤¾ãŒãŠå®¢æ§˜ã«æä¾›ã—ã¦ãŠã‚Šã¾ã™å¥‘ç´„æƒ…å ±ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã‚µãƒ¼ãƒãƒ¼ã«å¯¾ã—ç¬¬ä¸‰è€…ã«ã‚ˆã‚‹ ä¸æ£ã‚¢ã‚¯ã‚»ã‚¹ãŒã‚ã£ãŸã“ã¨ãŒç™ºè¦šã—ã€ä¸æ£ã‚¢ã‚¯ã‚»ã‚¹ã®å…¨å®¹è§£æ˜Žãªã‚‰ã³ã«è¢«å®³çŠ¶æ³ã®èª¿æŸ»ã‚’é€²ã‚ã¦ã¾ ã„ã‚Šã¾ã—ãŸã€‚ èª¿æŸ»ã®çµæžœã€ã‚µãƒ¼ãƒãƒ¼ã«ä¿ç®¡ã—ã¦ã„ãŸãŠå®¢æ§˜ã®ã‚¯ãƒ¬ã‚¸ãƒƒãƒˆã‚«ãƒ¼ãƒ‰æƒ…å ±ã‚’å«ã‚€å€‹äººæƒ…å ±ãŒä¸æ£ã‚¢ã‚¯ã‚» ã‚¹ã«ã‚ˆã‚Šå¤–éƒ¨ã«æµå‡ºã—ãŸå¯èƒ½æ€§ãŒã‚ã‚‹ã“ã¨ãŒåˆ¤æ˜Žã„ãŸã—ã¾ã—ãŸï¼ˆä»¥ä¸‹ã€ã€Œæœ¬ä»¶ã€ã¨ã„ã„ã¾ã™ï¼‰ã€‚ æœ¬ä»¶ã®è©³ç´°ã«ã¤ãã¾ã—ã¦ã¯ã€ä¸‹è¨˜ã®ã¨ãŠã‚Šã”å ±å‘Šã„ãŸã—ã¾ã™ã¨ã¨ã‚‚ã«ã€ã€€ãŠå®¢æ§˜ãªã‚‰ã³ã«ã”é–¢ä¿‚è€…ã® çš†æ§˜ã«ã€å¤šå¤§ãªã‚‹ã”ä¸å®‰ã¨ã”è¿·æƒ‘ã‚’ãŠæŽ›ã‘ã„ãŸã—ã¾ã™ã“ã¨ã€ã“ã“ã«æ·±ããŠè©«ã³ç”³ã—ä¸Šã’ã¾ã™ã€‚ è¨˜ 1.äº‹æ¡ˆæ¦‚è¦ (1)æµå‡ºã®å¯¾è±¡æœŸé–“ï¼š2015å¹´4æœˆ1æ—¥ï½ž2016å¹´9æœˆ21æ—¥ â€»è„†å¼±
drumsco 2016/11/10
security

vulnerability
ãƒªãƒ³ã‚¯
1 2 æ¬¡ã®ãƒšãƒ¼ã‚¸