[B! vulnerability] kirara_397ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

kirara_397 id:kirara_397

vulnerabilityã«é–¢ã™ã‚‹kirara_397ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (92)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

GoogleãŒç™ºè¦‹ã—ãŸã€ŒCPUã®è„†å¼±æ€§ã€ã¨ã¯ä½•ãªã®ã‹ã€‚ã‚²ãƒ¼ãƒžãƒ¼ã«æ§ãã€Œæ£ã—ãæã‚Œã‚‹ã€ãã®æ–¹æ³•ã¾ã¨ã‚ - 4Gamer.net
GoogleãŒç™ºè¦‹ã—ãŸã€ŒCPUã®è„†å¼±æ€§ã€ã¨ã¯ä½•ãªã®ã‹ã€‚ã‚²ãƒ¼ãƒžãƒ¼ã«æ§ãã€Œæ£ã—ãæã‚Œã‚‹ã€ãã®æ–¹æ³•ã¾ã¨ã‚ ãƒ©ã‚¤ã‚¿ãƒ¼ï¼šç±³ç”° è¡ ä¸€èˆ¬ãƒ¡ãƒ‡ã‚£ã‚¢ã«ã‚‚ãƒ‹ãƒ¥ãƒ¼ã‚¹ã¨ã—ã¦å–ã‚Šä¸Šã’ã‚‰ã‚ŒãŸã®ã§ï¼Œ2017å¹´æœ«ã‹ã‚‰ã«ã‚ã‹ã«é¨’ãŒã‚Œã ã—ãŸã€ŒCPUã®è„†å¼±æ€§ã€ã«ã¤ã„ã¦ã¯ï¼Œ4Gamerèªè€…ã‚‚å¤šããŒèžãåŠã‚“ã§ã„ã‚‹ã“ã¨ã ã‚ã†ã€‚æµ·å¤–ã§ã¯ï¼Œã€ŒSpectreã€ï¼ˆã‚¹ãƒšã‚¯ã‚¿ãƒ¼ï¼‰ã‚„ã€ŒMeltdownã€ï¼ˆãƒ¡ãƒ«ãƒˆãƒ€ã‚¦ãƒ³ï¼‰ã¨ã„ã£ãŸãŠã©ã‚ãŠã©ã‚ã—ã„åå‰ãŒä»˜ã„ã¦ã„ã‚‹ã®ã§ï¼Œãã¡ã‚‰ã‚’ç›®ã«ã—ãŸã¨ã„ã†èªè€…ã‚‚ã„ã‚‹ã¨æ€ã†ã€‚ ã€ŒIntelè£½ã®CPUã ã‘ãŒæŒã¤è„†å¼±æ€§ã§ï¼ŒAMDè£½ã®CPUãªã‚‰å•é¡Œãªã„ã€ã‹ã‚‰å§‹ã¾ã£ã¦ï¼Œã€Œã„ã‚„ã„ã‚„AMDè£½ã®CPUã‚‚åŒæ§˜ã®è„†å¼±æ€§ã‚’æŠ±ãˆã¦ã„ã‚‹ã€ï¼Œã•ã‚‰ã«ã¯ã€Œãƒ¡ãƒ¢ãƒªãƒšãƒ¼ã‚¸ãƒ³ã‚°æ–¹å¼ã®ä»®æƒ³è¨˜æ†¶ã‚’ä½¿ã†CPUã®ã™ã¹ã¦ãŒæŒã¤è„†å¼±æ€§ã§ã‚ã‚‹ã€ãªã©ã¨ï¼Œæƒ…å ±ãŒéŒ¯ç¶œã—ã¦ã„ã‚‹ã®ã§ï¼Œä½•ã‚’ä¿¡ã˜ãŸã‚‰ã„ã„ã®ã‹åˆ†ã‹ã‚‰ãªã„ã¨ã„ã†äººã‚‚å¤šã„ã®ã§ã¯ãªã‹ã‚ã†ã‹ã€‚ãã‚‚ãã‚‚ï¼Œãƒ¡ãƒ¢ãƒªãƒšãƒ¼ã‚¸ãƒ³ã‚°æ–¹å¼
kirara_397 2018/01/05
vulnerability

commentary

CPU
ãƒªãƒ³ã‚¯
ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ã®è„†å¼±æ€§ã‚¹ã‚ãƒ£ãƒŠ OpenVAS ã‚’ä½¿ã£ã¦ã¿ã‚‹ - CUBE SUGAR CONTAINER
ä»Šå›žã¯ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ã®è„†å¼±æ€§ã‚¹ã‚ãƒ£ãƒŠã§ã‚ã‚‹ OpenVAS ã‚’ä½¿ã£ã¦ã¿ã‚‹ã“ã¨ã«ã™ã‚‹ã€‚ è„†å¼±æ€§ã‚¹ã‚ãƒ£ãƒŠã¨ã„ã†ã®ã¯ã€ãƒ›ã‚¹ãƒˆã«æ—¢çŸ¥ã®è„†å¼±æ€§ãŒå«ã¾ã‚Œãªã„ã‹ã©ã†ã‹ã‚’è‡ªå‹•ã§ã‚¹ã‚ãƒ£ãƒ³ã—ã¦ãã‚Œã‚‹ãƒ„ãƒ¼ãƒ«ã€‚ æ³¨æ„: è„†å¼±æ€§ã‚¹ã‚ãƒ£ãƒ³ã¯ãƒãƒ¼ãƒˆã‚¹ã‚ãƒ£ãƒ³ã‚„ãƒšãƒãƒˆãƒ¬ãƒ¼ã‚·ãƒ§ãƒ³ã‚’å«ã‚€ãŸã‚å¤–éƒ¨ã®ã‚µãƒ¼ãƒã«ã¯å®Ÿè¡Œã—ãªã„ã“ã¨ ä½¿ã£ãŸç’°å¢ƒã¯æ¬¡ã®é€šã‚Šã€‚OS ã¯ Ubuntu 16.04 LTS ã«ã—ãŸã€‚ $ lsb_release -a No LSB modules are available. Distributor ID: Ubuntu Description: Ubuntu 16.04.3 LTS Release: 16.04 Codename: xenial $ uname -r 4.4.0-89-generic ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç”¨é€”ã ã¨ Kali Linux ã‚’ä½¿ã†ã“ã¨ã‚‚å¤šã„ã¿ãŸã„ã€‚ ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ« Ubuntu ã§ OpenVA
kirara_397 2017/08/09
OSS

vulnerability

tool

security

analysis
ãƒªãƒ³ã‚¯
50,000 ãƒ‰ãƒ«ã®ä¾¡å€¤ãŒã‚ã‚‹ Twitter ã‚¢ã‚«ã‚¦ãƒ³ãƒˆãŒç›—ã¾ã‚ŒãŸãã®çµŒç·¯ : ã«ã½ãŸã‚“ç ”ç©¶æ‰€
ã²ã‚ã—ã¾ã•ã‚“ (å»£å³¶ã•ã‚“) ã¯ã€ã“ã‚Œã¾ã§ãŸã£ãŸ 1 æ–‡å—ã® Twitter ã‚¢ã‚«ã‚¦ãƒ³ãƒˆ @N ã‚’æŒã£ã¦ã„ã¾ã—ãŸã€‚ ä½•æ•…ã€ŒæŒã£ã¦ã„ã¾ã—ãŸã€ã¨ã€éŽåŽ»å½¢ãªã®ã‹ã¨ã„ã†ã¨ã€ã©ã†ã‚„ã‚‰å…ˆæ—¥ã€å·§å¦™ãªç½ ã«ã€æœ¬äººã§ã¯ãªã 2 ç¤¾ã®æœ‰å IT é–¢é€£ä¼æ¥ãŒãƒãƒ¡ã‚‰ã‚ŒãŸã“ã¨ã«ã‚ˆã£ã¦ã€ã²ã‚ã—ã¾ã•ã‚“ã®ç¨€å°‘ãªãã®ã‚¢ã‚«ã‚¦ãƒ³ãƒˆãŒç¬¬ä¸‰è€…ã«ã‚ˆã£ã¦ç›—ã¾ã‚Œã¦ã—ã¾ã£ãŸãã†ãªã®ã§ã™ã€‚ 2014/02/26 è¿½è¨˜: è¨˜äº‹æŽ²è¼‰æ™‚ç‚¹ã§ã¯ã€ŒæŒã£ã¦ã„ã¾ã—ãŸã€ã¨éŽåŽ»å½¢ã§è¡¨ç¾ã—ã¦ã„ã¾ã™ãŒã€ã²ã‚ã—ã¾ã•ã‚“æœ¬äººã«ã‚ˆã‚‹ãƒ„ã‚¤ãƒ¼ãƒˆã§ã€2014/02/25 ã®æ˜¼éŽãŽ (æ—¥æœ¬æ™‚é–“ 2014/02/26 ã®æ—©æœ) ã«ã€ã“ã®äº‹ä»¶ã«ã‚ˆã£ã¦ç›—ã¾ã‚Œã¦ã—ã¾ã£ãŸã‚¢ã‚«ã‚¦ãƒ³ãƒˆ @N ãŒã‚ˆã†ã‚„ãå–ã‚Šæˆ»ã•ã‚ŒãŸã“ã¨ãŒã‚ã‹ã‚Šã¾ã—ãŸã€‚ Order has been restored. â€” Naoki Hiroshima (@N) February 25, 2014 è§£æ±ºã¾ã§ä¸€ãƒ¶æœˆä»¥ä¸Šã¨ã„ã†ç›¸å½“ãª
kirara_397 2014/01/30
social

hack

security

vulnerability

example
ãƒªãƒ³ã‚¯
Facebookã®è„†å¼±æ€§ã€ç™ºè¦‹è€…ãŒZuckerberg CEOã®ã‚¦ã‚ªãƒ¼ãƒ«ã‚’ä½¿ã£ã¦è¨¼æ˜Ž
ãƒ‘ãƒ¬ã‚¹ãƒãƒŠã®ITç ”ç©¶è€…ãŒç±³Facebookã®Mark Zuckerbergæœ€é«˜çµŒå–¶è²¬ä»»è€…ï¼ˆCEOï¼‰ã®ã‚¦ã‚ªãƒ¼ãƒ«ã«ãƒã‚°å ±å‘Šã‚’ç›´æŽ¥æ›¸ãè¾¼ã‚“ã ã“ã¨ã‚’ã€è¤‡æ•°ã®ç±³ãƒ¡ãƒ‡ã‚£ã‚¢ï¼ˆVentureBeatã€PCMag.comãªã©ï¼‰ãŒç¾åœ°æ™‚é–“2013å¹´8æœˆ18æ—¥ã«å ±ã˜ãŸã€‚åŒç ”ç©¶è€…ã¯ã€Facebookã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒãƒ¼ãƒ ã«è„†å¼±æ€§ã‚’å ±å‘Šã—ãŸãŒç„¡è¦–ã•ã‚ŒãŸã®ã§ã€è¨¼æ˜Žã®ãŸã‚ã«ã‚„ã‚€ãªãå®Ÿè¡Œã—ãŸã¨ã—ã¦ã„ã‚‹ã€‚ Zuckerbergæ°ã®ã‚¦ã‚ªãƒ¼ãƒ«ã«æŠ•ç¨¿ã—ãŸKhalil Shreatehæ°ã¯ã€è‡ªèº«ã®ãƒ–ãƒã‚°ã§ã“ã®ä»¶ã«ã¤ã„ã¦è©³ã—ãèª¬æ˜Žã—ã¦ã„ã‚‹ã€‚åŒæ°ã¯ã€ãŸã¨ãˆå‹é”æ‰¿èªã•ã‚Œã¦ã„ãªãã¦ã‚‚åˆ¥ã®Facebookãƒ¦ãƒ¼ã‚¶ãƒ¼ã®ã‚¦ã‚ªãƒ¼ãƒ«ã«æŠ•ç¨¿ã§ãã¦ã—ã¾ã†æ·±åˆ»ãªè„†å¼±æ€§ã‚’Facebookä¸Šã«ç™ºè¦‹ã—ã€Facebookã®ãƒ›ãƒ¯ã‚¤ãƒˆãƒãƒƒãƒˆãƒ—ãƒã‚°ãƒ©ãƒ ã‚’é€šã˜ã¦å ±å‘Šã—ãŸã€‚ã—ã‹ã—é›»åãƒ¡ãƒ¼ãƒ«ã§èª¬æ˜Žã‚’ç¹°ã‚Šè¿”ã—ãŸã®ã¡ã€8æœˆ14æ—¥ã«Facebookã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒãƒ¼ãƒ ã‹ã‚‰ã€Œã“ã‚Œã¯ãƒã‚°
kirara_397 2013/08/20
SNS

security

vulnerability

bad

*news
ãƒªãƒ³ã‚¯
è„†å¼±æ€§ã‚¹ã‚ãƒ£ãƒŠã€ŒOpenVASã€ã§ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒã‚§ãƒƒã‚¯ | ã•ãã‚‰ã®ãƒŠãƒ¬ãƒƒã‚¸
ã“ã‚Œã‚‰ã¯ãã‚Œãžã‚ŒåŒä¸€ã®ãƒžã‚·ãƒ³ã§å®Ÿè¡Œã•ã›ã‚‹ã“ã¨ã‚‚ã§ãã‚‹ã—ã€ç•°ãªã‚‹ãƒžã‚·ãƒ³ã§å®Ÿè¡Œã•ã›ã‚‹ã“ã¨ã‚‚å¯èƒ½ã ã€‚ãªãŠã€Greenbone Security DesktopãŠã‚ˆã³OpenVAS CLIã«ã¤ã„ã¦ã¯LinuxãŠã‚ˆã³Windowså‘ã‘ã®ãƒã‚¤ãƒŠãƒªãŒãƒªãƒªãƒ¼ã‚¹ã•ã‚Œã¦ã„ã‚‹ãŒã€ãã‚Œä»¥å¤–ã®ã‚³ãƒ³ãƒãƒ¼ãƒãƒ³ãƒˆã«ã¤ã„ã¦ã¯åŸºæœ¬çš„ã«ã¯Linuxå‘ã‘ã¨ãªã£ã¦ã„ã‚‹ã€‚ãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ãƒšãƒ¼ã‚¸ã§ã¯ã‚½ãƒ¼ã‚¹ã‚³ãƒ¼ãƒ‰ã®ã»ã‹ã€CentOS 6ãŠã‚ˆã³Fedora 15ï½ž18ã€Red Hat Enterprise 6å‘ã‘ãƒã‚¤ãƒŠãƒªãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã®å…¥æ‰‹æ–¹æ³•ãŒæ¡ˆå†…ã•ã‚Œã¦ã„ã‚‹ã€‚ãªãŠã€Debian GNU/Linuxã‚„Fedoraãªã©ã¯ãã®å…¬å¼ãƒªãƒã‚¸ãƒˆãƒªã§OpenVASã®ãƒã‚¤ãƒŠãƒªãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ãŒæä¾›ã•ã‚Œã¦ã„ã‚‹ã€‚ãŸã ã—ã€å¿…ãšã—ã‚‚æœ€æ–°ã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ãŒæä¾›ã•ã‚Œã¦ã„ã‚‹ã‚ã‘ã§ã¯ãªã„ã®ã§ã€ãã‚Œã‚‰ã‚’åˆ©ç”¨ã™ã‚‹éš›ã¯æ³¨æ„ã—ã¦ã»ã—ã„ã€‚ ä»Šå›žã¯ã€CentOS 6.3ã‚’ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã—ãŸ1å°ã®ã‚µãƒ¼
kirara_397 2013/05/22
OSS

vulnerability

security

tool
ãƒªãƒ³ã‚¯
ã€ŒUPnPï¼ˆlibupnpï¼‰ã«è„†å¼±æ€§ãƒ»WANã‹ã‚‰æ”»æ’ƒå¯èƒ½ã€ã¨ã„ã†è©±ã®ä¸èº«ã‚’èª¿æŸ»ã—ã¦ã¿ãŸ
ã€ŒUPnPã«è„†å¼±æ€§ãŒè¦‹ã¤ã‹ã‚Šã€å±é™ºã ã€ã¨ã„ã†ãƒ‹ãƒ¥ãƒ¼ã‚¹ãŒã„ã‚ã„ã‚ãªWebã‚µã‚¤ãƒˆã«æŽ²è¼‰ã•ã‚Œã¦ã„ã¾ã™ãŒã€ä¾‹ã«ã‚ˆã£ã¦ã¾ãŸä½•è¨€ã£ã¦ã‚‹ã‹ã‚ˆãåˆ†ã‹ã‚‰ãªã„éƒ¨åˆ†ãŒå¤šã‹ã£ãŸã®ã§ã€èª¿ã¹ãŸã“ã¨ã‚’æ›¸ã„ã¦ãŠãã¾ã™ã€‚ ç›®æ¬¡ 1. æ¦‚è¦2. æ—¥æœ¬èªžã‚µã‚¤ãƒˆã®æƒ…å ±æº3. ã€Œlibupnpã®è„†å¼±æ€§ã€ã¯ã€ŒUPnPãƒ‘ã‚±ãƒƒãƒˆã‚’ä½¿ã£ãŸãƒãƒƒãƒ•ã‚¡ã‚ªãƒ¼ãƒãƒ•ãƒãƒ¼ã€4. ã€ŒWANã‹ã‚‰æ”»æ’ƒå¯èƒ½ã€ã¨ã„ã†ãƒ‹ãƒ¥ãƒ¼ã‚¹ã®æ„å‘³5. ã€ŒWANã‹ã‚‰ã®SSDPãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’å—ã‘ä»˜ã‘ã‚‹ã€ãƒ«ãƒ¼ã‚¿ãƒ¼ã¨ã¯ï¼Ÿ6. ã€Œlibupnpã€ã¨ã€ŒSSDPãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’å—ã‘ä»˜ã‘ã¦ã—ã¾ã†è„†å¼±æ€§ã€ã®é–¢ä¿‚ã«ã¤ã„ã¦7. ã€ŒWANã‹ã‚‰ã®SSDPã‚’å—ã‘å–ã‚‹ã“ã¨ã€è‡ªä½“ã®å•é¡Œ8. ä½•ãŒã‚ã£ãŸã‹ã‚‰ãƒ‹ãƒ¥ãƒ¼ã‚¹ã«ãªã£ãŸï¼Ÿ9. ï¼‘æœˆï¼’ï¼™æ—¥ã«ã‚ã£ãŸã“ã¨10. æœ¬å½“ã®ãƒ‹ãƒ¥ãƒ¼ã‚¹ã¯ã€ŒRapid7ã®ãƒ›ãƒ¯ã‚¤ãƒˆãƒšãƒ¼ãƒ‘ãƒ¼ã€ã®å…¬é–‹11. ãƒ›ãƒ¯ã‚¤ãƒˆãƒšãƒ¼ãƒ‘ãƒ¼ã®ä¸èº«12. ã˜ã‚ƒãã©ã†ã—ã¦è„†å¼±æ€§æƒ…å ±ãŒå‡ºãŸã®ã‹13. çµè«–ï¼šè¦‹ã¤ã‹ã£ãŸã®ã¯ã€Œè„†
kirara_397 2013/01/31
security

vulnerability

network
ãƒªãƒ³ã‚¯
ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®è„†å¼±æ€§ã‚’ç·©å’Œã™ã‚‹MSå…¬å¼ãƒ„ãƒ¼ãƒ«ã€ŒEMETã€v3.0ãŒç„¡å„Ÿå…¬é–‹
kirara_397 2012/05/20
MS

vulnerability

app

tool

*news

security

office

IE
ãƒªãƒ³ã‚¯
JVNVU#723755: Wi-Fi Protected Setup ã«è„†å¼±æ€§
Wi-Fi Protected Setup (WPS) ã® PIN èªè¨¼ã®ä»•æ§˜ã«ã¯ã€è„†å¼±æ€§ãŒå˜åœ¨ã—ã¾ã™ã€‚ Wi-Fi Protected Setup (WPS) ã® PIN èªè¨¼ã®ä»•æ§˜ã«ã¯ã€ãƒ–ãƒ«ãƒ¼ãƒˆãƒ•ã‚©ãƒ¼ã‚¹æ”»æ’ƒãŒå®¹æ˜“ã«ãªã‚‹å•é¡ŒãŒå˜åœ¨ã—ã¾ã™ã€‚ ã¾ãŸã€è¤‡æ•°ã®ç„¡ç·šãƒ«ãƒ¼ã‚¿ã«ãŠã„ã¦ã¯ã€ãƒ–ãƒ«ãƒ¼ãƒˆãƒ•ã‚©ãƒ¼ã‚¹æ”»æ’ƒã«å¯¾å¿œã™ã‚‹æ©Ÿèƒ½ãŒãªã„ãŸã‚ã€æ”»æ’ƒãŒã•ã‚‰ã«å®¹æ˜“ã«ãªã£ã¦ã„ã¾ã™ã€‚ (2012å¹´1æœˆ6æ—¥ - è¿½è¨˜) JPCERT/CC ã§ã¯ã€æ”»æ’ƒãƒ„ãƒ¼ãƒ«ãŒå…¬é–‹ã•ã‚Œã¦ã„ã‚‹ã“ã¨ã‚’ç¢ºèªã—ã¦ã„ã¾ã™ã€‚
kirara_397 2012/01/11
Wi-Fi

vulnerability

security

*news
ãƒªãƒ³ã‚¯
JVNVU#568153: Adobe Reader ãŠã‚ˆã³ Acrobat ã® JPX ãƒ‡ãƒ¼ã‚¿å‡¦ç†ã«ãŠã‘ã‚‹è¤‡æ•°ã®è„†å¼±æ€§
Adobe Reader ãŠã‚ˆã³ Acrobat ã«ã¯ã€JPX ãƒ‡ãƒ¼ã‚¿ã®å‡¦ç†ã«ãŠã„ã¦è¤‡æ•°ã®è„†å¼±æ€§ãŒå˜åœ¨ã—ã¾ã™ã€‚ Adobe Reader ãŠã‚ˆã³ Acrobat (Pro, Pro Extended, and Standard) version 9.1.1 ãŠã‚ˆã³ãã‚Œä»¥å‰ Adobe Reader ãŠã‚ˆã³ Acrobat (Pro, 3D, and Standard) version 8.1.5 ãŠã‚ˆã³ãã‚Œä»¥å‰ Adobe Reader ãŠã‚ˆã³ Acrobat (Pro, 3D, and Standard) version 7.1.2 ãŠã‚ˆã³ãã‚Œä»¥å‰ Adobe Reader ãŠã‚ˆã³ Acrobat ã¯ã€Porta ble Document Format (PDF) ãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆã‚’é–²è¦§ãŠã‚ˆã³ç·¨é›†ã™ã‚‹ãŸã‚ã®ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã§ã™ã€‚ã¾ãŸã€ã‚¦ã‚§ãƒ–ãƒ–ãƒ©ã‚¦ã‚¶ã«ãŠã„ã¦ PDF ãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆã‚’é–²è¦§ã™ã‚‹ãŸã‚ã®ãƒ—ãƒ©
kirara_397 2009/06/18
Adobeãã®2

Adobe

pdf

vulnerability
ãƒªãƒ³ã‚¯
JVNTA09-161A: Adobe Reader ãŠã‚ˆã³ Acrobat ã«ãŠã‘ã‚‹è„†å¼±æ€§
Adobe Reader ãŠã‚ˆã³ Acrobat (Pro, Pro Extended, and Standard) version 9.1.1 ãŠã‚ˆã³ãã‚Œä»¥å‰ Adobe Reader ãŠã‚ˆã³ Acrobat (Pro, 3D, and Standard) version 8.1.5 ãŠã‚ˆã³ãã‚Œä»¥å‰ Adobe Reader ãŠã‚ˆã³ Acrobat (Pro, 3D, and Standard) version 7.1.2 ãŠã‚ˆã³ãã‚Œä»¥å‰
kirara_397 2009/06/18
Adobeãã®1

Adobe

pdf

vulnerability
ãƒªãƒ³ã‚¯
7æœˆã¯ã€ŒTwitterãƒã‚°æœˆé–“ã€ã€Web 2.0ã®å®‰å…¨ã‚’è€ƒãˆã‚‹ãã£ã‹ã‘ã«
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç ”ç©¶è€…ãŒ7æœˆã‚’ã€ŒTwitterãƒã‚°æœˆé–“ã€ï¼ˆMoTBï¼‰ã¨å®šã‚ã€ã‚µãƒ¼ãƒ‰ãƒ‘ãƒ¼ãƒ†ã‚£ãƒ¼ãŒæä¾›ã™ã‚‹Twitterã‚µãƒ¼ãƒ“ã‚¹ã®æ–°ãŸãªè„†å¼±æ€§ã«ã¤ã„ã¦ã€æ¯Žæ—¥1ä»¶ãšã¤æƒ…å ±ã‚’å…¬é–‹ã™ã‚‹ã¨å®£è¨€ã—ãŸã€‚ ãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆã‚’è¨ˆç”»ã—ã¦ã„ã‚‹ã®ã¯ã€2006å¹´7æœˆã«å®Ÿæ–½ã•ã‚ŒãŸã€Œãƒ–ãƒ©ã‚¦ã‚¶ãƒã‚°æœˆé–“ã€ã«ã‚‚ã‹ã‹ã‚ã£ãŸç ”ç©¶è€…ã®ã‚¢ãƒ“ãƒ–ãƒ»ãƒ©ãƒ•æ°ã€‚ã€Œãƒ–ãƒ©ã‚¦ã‚¶ãƒã‚°æœˆé–“ã¯å¤§ããªæˆåŠŸã‚’åŽã‚ã€ãã®ãŠã‹ã’ã§ãƒ¡ãƒ¼ã‚«ãƒ¼å„ç¤¾ãŒè‡ªç¤¾è£½å“ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å•é¡Œã«ä¸€å±¤æ³¨æ„ã‚’æ‰•ã†ã‚ˆã†ã«ãªã£ãŸã€ã¨ä¸»å¼µã—ã€ã“ã‚Œã«ã‚ã‚„ã‹ã£ã¦Twitterãƒã‚°æœˆé–“ã®å®Ÿæ–½ã‚’æ€ã„ã¤ã„ãŸã¨ã—ã¦ã„ã‚‹ã€‚ Twitterã‚µãƒ¼ãƒ“ã‚¹ã®è„†å¼±æ€§æƒ…å ±ã¯ã€Œtwit pwn.comã€ã®ã‚µã‚¤ãƒˆã§å…¬é–‹ã™ã‚‹äºˆå®šã€‚è„†å¼±æ€§ã‚’æ‚ªç”¨ã•ã‚Œã‚Œã°Twitterãƒ¯ãƒ¼ãƒ ã®ä½œæˆã‚‚å¯èƒ½ã«ãªã‚‹ãŸã‚ã€å¯¾è±¡ã¨ãªã‚‹ã‚µãƒ¼ãƒ‰ãƒ‘ãƒ¼ãƒ†ã‚£ãƒ¼ãƒ—ãƒãƒã‚¤ãƒ€ãƒ¼ã¨Twitterã«ã¯ã€ä¸€èˆ¬å…¬é–‹ã®å°‘ãªãã¨ã‚‚24æ™‚é–“å‰ã«æƒ…å ±ã‚’æä¾›ã™ã‚‹ã¨ã—ã¦ã„ã‚‹ã€‚ ã“ã‚Œã«ã‚ˆã£ã¦Twitterã®A
kirara_397 2009/06/18
"è„†å¼±æ€§ã‚’æ‚ªç”¨ã•ã‚Œã‚Œã°Twitterãƒ¯ãƒ¼ãƒ ã®ä½œæˆã‚‚å¯èƒ½ã«ãªã‚‹"

Twitter

security

vulnerability

*news

Web2.0
ãƒªãƒ³ã‚¯
JVN#87239696: iPhone OS ã«ãŠã‘ã‚‹ã‚µãƒ¼ãƒ“ã‚¹é‹ç”¨å¦¨å®³ (DoS) ã®è„†å¼±æ€§
Apple ãŒæä¾›ã™ã‚‹ iPhone OS ã«ã¯ã€ã‚µãƒ¼ãƒ“ã‚¹é‹ç”¨å¦¨å®³ (DoS) ã®è„†å¼±æ€§ãŒå˜åœ¨ã—ã¾ã™ã€‚
kirara_397 2009/06/18
2.2.1 ã¾ã§ã€‚3.0ãŒãƒªãƒªãƒ¼ã‚¹ã•ã‚ŒãŸé€”ç«¯ã«ã“ã‚Œã ã‚ˆï¼

iPhone

OS

vulnerability
ãƒªãƒ³ã‚¯
é«˜æœ¨æµ©å…‰ï¼ è‡ªå®…ã®æ—¥è¨˜ - æ—¥æœ¬èˆªç©ºã®EV SSLå°Žå…¥ã®ãƒŠãƒ³ã‚»ãƒ³ã‚¹
â– SSLã‚’è¦ã™ã‚‹ãƒ¢ãƒã‚¤ãƒ«ç’°å¢ƒã§ã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãƒžãƒãƒ¼ã‚¸ãƒ£ã®ä½¿ã„æ–¹ã«æ³¨æ„ Basicèªè¨¼ã®è©± ã“ã®æ—¥è¨˜ã«SSLã‚’å°Žå…¥ã—ãŸ*1ã€‚åŸºæœ¬çš„ã«ã¯è‡ªåˆ†ç”¨ï¼ˆç·¨é›†æ™‚ã®å®‰å…¨ã‚’ç¢ºä¿ã™ã‚‹ï¼‰ã®ã‚‚ã®ã§ã€Firefoxã¨Safariï¼ˆMac OSç‰ˆã®Safariï¼‰ã‹ã‚‰ã—ã‹ä½¿ãˆãªã„*2*3ã€‚ã“ã‚Œã«ã‚ˆã‚Šã€å¤–å‡ºå…ˆã®å…¬è¡†ç„¡ç·šLANã‹ã‚‰ã§ã‚‚æ—¥è¨˜ã‚’ç·¨é›†ã§ãã‚‹ã‚ˆã†ã«ãªã£ãŸã€‚ ã“ã‚Œã¾ã§ã¯ã€è‡ªå®…ã®ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ã§ã—ã‹ãƒã‚°ã‚¤ãƒ³ã—ãªã„ã‚ˆã†ã«ã—ã¦ã€http:// ã®ã¾ã¾Basicèªè¨¼ã‚’ä½¿ã£ã¦ã„ãŸã€‚ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãŒç”Ÿã®ã¾ã¾é€ä¿¡ã•ã‚Œã‚‹ãŒã€è‡ªå®…ã®é€šä¿¡ç’°å¢ƒã¯ã¾ã‚ä¿¡é ¼ã§ãã‚‹ã®ã§ã€ï¼ˆãã®å…ˆã®é€šä¿¡è·¯ä¸Šã§ç›—è´ã•ã‚Œã‚‹ãƒªã‚¹ã‚¯ãŒã‚ã‚‹ã«ã—ã¦ã‚‚ï¼‰ãƒªã‚¹ã‚¯ã¯å—å®¹ã§ãã‚‹ã¨è€ƒãˆã¦ããŸã€‚ã—ã‹ã—ã€å¤–å‡ºå…ˆã§å…¬è¡†ç„¡ç·šLANã‚’ä½¿ã†ã¨ãªã‚‹ã¨ã€ãã®ãƒªã‚¹ã‚¯ã¯å—å®¹ã§ããªã„ã€‚6æ—¥ã®æ—¥è¨˜ã€Œå…¬è¡†ç„¡ç·šLANã§ä½¿ã†ã¨å±ãªã„iPod touchã‚¢ãƒ—ãƒªã«æ³¨æ„ã€ã«ã‚‚æ›¸ã„ãŸã‚ˆã†ã«ã€å…¬è¡†ç„¡ç·šLANå†…ã®é€šä¿¡ã¯ç°¡å˜ã«å‚å—ã•
kirara_397 2008/12/25
SSL

mobile

password

vulnerability
ãƒªãƒ³ã‚¯
http://japan.internet.com/webtech/20081213/11.html
kirara_397 2008/12/13
5.01ã‹ã‚‰ã§ã™ã‹!?

IE

vulnerability

*news
ãƒªãƒ³ã‚¯
CPNI-957037: SSH é€šä¿¡ã«ãŠã„ã¦ä¸€éƒ¨ãƒ‡ãƒ¼ã‚¿ãŒæ¼ãˆã„ã™ã‚‹å¯èƒ½æ€§ - ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ›ãƒ¼ãƒ« memo
ã€‹ è£åˆ¤å“¡åˆ¶åº¦ã€ã„ã‚ˆã„ã‚ˆå§‹å‹• è£åˆ¤å“¡å€™è£œã€€ã©ã†ã—ã‚ˆã†ã€é€šçŸ¥ãã¡ã‚ƒã£ãŸ (asahi.com, 11/30) è£åˆ¤å“¡è¾žé€€ã€æœ€é«˜è£ã¯ã€ŒæŸ”è»Ÿã«åˆ¤æ–ã€ (asahi.com, 11/29) ç§ã®æ‰‹å…ƒã«ã¯æ¥ã¦ãªã„ãžâ€¦â€¦ã€‚ã¤ã¾ã‚‰ã‚“ã€è¶…ã¤ã¾ã‚‰ã‚“ã€‚ ã€‹ ã‚¤ãƒ³ãƒ‰åŒæ™‚å¤šç™ºãƒ†ãƒæ–¹é¢ã€‚ã¨ã‚Šã‚ãˆãšéŽ®åœ§ã•ã‚ŒãŸæ¨¡æ§˜ã€‚ ã‚¤ãƒ³ãƒ‰åŒæ™‚ãƒ†ãƒã€ï¼•ï¼˜æ™‚é–“çµŒã¦éŽ®åœ§ã€€æ»è€…ï¼‘ï¼•ï¼äººè¶…ã™ (asahi.com, 11/29)ã€ ã‚¤ãƒ³ãƒ‰åŒæ™‚ãƒ†ãƒã€€æ»è€…ï¼‘ï¼™ï¼•äººã« (asahi.com, 11/29) ã‚¤ãƒ³ãƒ‰åŒæ™‚ãƒ†ãƒï¼’æ—¥åŠã¶ã‚Šå…¨é¢éŽ®åœ§ã€æ»è€…ã¯ï¼‘ï¼™ï¼•äººã« (èªå£², 11/29) ã‚¤ãƒ³ãƒ‰åŒæ™‚ãƒ†ãƒï¼šè»ãŒå®Œå…¨åˆ¶åœ§ã€€æ»è€…ï¼’ï¼ï¼äººè¶…ã‚‚ (æ¯Žæ—¥, 11/29) ãƒ‘ã‚ã‚¹ã‚¿ãƒ³ã®é–¢ä¸Ž?! åŒæ™‚ãƒ†ãƒã€Œãƒ‘ã‚ã‚¹ã‚¿ãƒ³ã®é–¢ä¸Žæ˜Žç™½ã€ã€ã‚¤ãƒ³ãƒ‰å¤–ç›¸ãŒæŠ—è° (èªå£², 11/29) ãƒ‘ã‚ã‚¹ã‚¿ãƒ³åˆ†åãŒé–¢ä¸Žã®æƒ…å ±ã¨ã‚¤ãƒ³ãƒ‰å¤–ç›¸ã€ãƒ ãƒ³ãƒã‚¤ã®åŒæ™‚ãƒ†ãƒ (CNN, 11/28) ã€‹ ã‚¬ãƒ©ã‚¬ãƒ©ãƒ˜ãƒ“
kirara_397 2008/11/18
SSH

vulnerability
ãƒªãƒ³ã‚¯
CPNI-957037: SSH é€šä¿¡ã«ãŠã„ã¦ä¸€éƒ¨ãƒ‡ãƒ¼ã‚¿ãŒæ¼ãˆã„ã™ã‚‹å¯èƒ½æ€§
SSHï¼ˆSecure Shellï¼‰ã¯ã€ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚’ä»‹ã—ã¦ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆä¸Šã«ç½®ã‹ã‚Œã¦ã„ã‚‹ã‚µãƒ¼ãƒã«ãƒã‚°ã‚¤ãƒ³ã—ãŸã‚Šã€ ã‚³ãƒžãƒ³ãƒ‰ã‚’å®Ÿè¡Œã—ãŸã‚Šã™ã‚‹ãŸã‚ã®ãƒ—ãƒã‚°ãƒ©ãƒ ãŠã‚ˆã³é€šä¿¡ãƒ—ãƒãƒˆã‚³ãƒ«ã§ã€ãƒ‡ãƒ¼ã‚¿ã¯æš—å·åŒ–ã•ã‚ŒãŸçŠ¶æ…‹ã§é€šä¿¡ãŒè¡Œãªã‚ã‚Œã¾ã™ã€‚ SSH ã§ä½¿ç”¨ã•ã‚Œã‚‹é€šä¿¡æ–¹å¼ã®ä¸€éƒ¨ã«å¯¾ã™ã‚‹æ”»æ’ƒæ–¹æ³•ãŒå ±å‘Šã•ã‚Œã¦ã„ã¾ã™ã€‚ å ±å‘Šã•ã‚ŒãŸæ”»æ’ƒæ–¹æ³•ã§ã¯ã€SSH ãŒãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã§ä½¿ç”¨ã™ã‚‹é€šä¿¡æ–¹å¼ã«ãŠã„ã¦ã€ã²ã¨ã¤ã®æš—å·åŒ–ãƒ–ãƒãƒƒã‚¯ã‹ã‚‰ 32 ãƒ“ãƒƒãƒˆã®å¹³æ–‡ã‚’å–ã‚Šå‡ºã™ã“ã¨ãŒã§ãã‚‹ã¨ã•ã‚Œã¦ã„ã¾ã™ã€‚ ã“ã®æ”»æ’ƒãŒè¡Œãªã‚ã‚Œã‚‹ã¨ã€SSH ã‚»ãƒƒã‚·ãƒ§ãƒ³ãŒåˆ‡ã‚Œã‚‹ã“ã¨ãŒã‚ã‚Šã¾ã™ã€‚RFC 4251 ã§ã¯ã€é€šä¿¡ã‚¨ãƒ©ãƒ¼ãŒç™ºç”Ÿã—ãŸéš›å†æŽ¥ç¶šã™ã¹ãã¨ã•ã‚Œã¦ã„ã‚‹ãŸã‚ã€è‡ªå‹•çš„ã«å†æŽ¥ç¶šã™ã‚‹å®Ÿè£…ã®å ´åˆã€æ”»æ’ƒã«ã‚ˆã‚‹å½±éŸ¿ãŒå¤§ãããªã‚‹å¯èƒ½æ€§ãŒã‚ã‚Šã¾ã™ã€‚
kirara_397 2008/11/18
SSH

vulnerability
ãƒªãƒ³ã‚¯
IT news, careers, business technology, reviews
Heads on: Appleâ€™s Vision Pro delivers a glimpse of the future
kirara_397 2008/11/08
Wi-Fi

security

vulnerability

*news
ãƒªãƒ³ã‚¯
ã€Œã‚¯ãƒªãƒƒã‚¯ä¹—ã£å–ã‚Šã€ã®è„…å¨ãŒå‡ºç¾ã€ä¸»è¦ãªãƒ–ãƒ©ã‚¦ã‚¶ã«å½±éŸ¿ã‹
ãƒ¦ãƒ¼ã‚¶ãƒ¼ã¯è‡ªåˆ†ãŒè¦‹ã¦ã„ã‚‹Webãƒšãƒ¼ã‚¸ã®ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã‚’ã‚¯ãƒªãƒƒã‚¯ã—ãŸã¤ã‚‚ã‚Šã§ã‚‚ã€å®Ÿéš›ã«ã¯åˆ¥ã®ãƒšãƒ¼ã‚¸ã®ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã‚’ã‚¯ãƒªãƒƒã‚¯ã•ã›ã‚‰ã‚Œã¦ã„ã‚‹å¯èƒ½æ€§ãŒã‚ã‚‹ã¨ã„ã†ã€‚ Webã‚µã‚¤ãƒˆä¸Šã§ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®ã‚¯ãƒªãƒƒã‚¯æ“ä½œãŒä¹—ã£å–ã‚‰ã‚Œã‚‹ã€Œã‚¯ãƒªãƒƒã‚¯ã‚¸ãƒ£ãƒƒã‚ãƒ³ã‚°ã€ã¨ã„ã†æ–°ãŸãªè„†å¼±æ€§ãŒå ±å‘Šã•ã‚ŒãŸã€‚ä¸»è¦ãªWebãƒ–ãƒ©ã‚¦ã‚¶ã®ã»ã¨ã‚“ã©ãŒå½±éŸ¿ã‚’å—ã‘ã‚‹ã¨ã•ã‚Œã€US-CERTãŒç ”ç©¶è€…ã®å ±å‘Šã‚„å ±é“ã‚’å¼•ç”¨ã—ã¦æ³¨æ„ã‚’å‘¼ã³æŽ›ã‘ã¦ã„ã‚‹ã€‚ ãã‚Œã«ã‚ˆã‚‹ã¨ã€ã‚¯ãƒªãƒƒã‚¯ã‚¸ãƒ£ãƒƒã‚ãƒ³ã‚°æ”»æ’ƒã§ã¯ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ãŒWebãƒšãƒ¼ã‚¸ä¸Šã§ã»ã¨ã‚“ã©æ°—ä»˜ã‹ãªã„ãƒªãƒ³ã‚¯ã‚„ãƒœã‚¿ãƒ³ãªã©ã‚’ã‚¯ãƒªãƒƒã‚¯ã•ã›ã‚‰ã‚Œã‚‹æã‚ŒãŒã‚ã‚‹ã€‚ã¤ã¾ã‚Šã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ã¯è‡ªåˆ†ãŒè¦‹ã¦ã„ã‚‹Webãƒšãƒ¼ã‚¸ã®ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã‚’ã‚¯ãƒªãƒƒã‚¯ã—ãŸã¤ã‚‚ã‚Šã§ã‚‚ã€å®Ÿéš›ã«ã¯åˆ¥ã®ãƒšãƒ¼ã‚¸ã®ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã‚’ã‚¯ãƒªãƒƒã‚¯ã•ã›ã‚‰ã‚Œã¦ã„ã‚‹å¯èƒ½æ€§ãŒã‚ã‚‹ã¨ã„ã†ã€‚ ã“ã®è„†å¼±æ€§ã¯ã€Internet Explorerï¼ˆIEï¼‰ã‚„Firefoxã€Safariã€Operaãªã©ã®ä¸»è¦ãƒ–ãƒ©ã‚¦ã‚¶ã¨Adob
kirara_397 2008/09/29
å‚è€ƒâ†’ http://slashdot.jp/security/article.pl?sid=08/09/27/0419211

security

browser

vulnerability

*news
ãƒªãƒ³ã‚¯
ãƒ¦ãƒ¼ã‚¶ã®ã‚¯ãƒªãƒƒã‚¯ã‚’ä¹—ã£å–ã‚‹ã€Œã‚¯ãƒªãƒƒã‚¯ã‚¸ãƒ£ãƒƒã‚¯ã€ | ã‚¹ãƒ©ãƒ‰
ZDNetï¼ˆæ—¥æœ¬èªžè¨³ï¼‰ã«ã¦ã€å¤šãã®ãƒ–ãƒ©ã‚¦ã‚¶ã‚„Adobe Flashã«å˜åœ¨ã™ã‚‹ã‚¯ãƒªãƒƒã‚¯ã‚¸ãƒ£ãƒƒã‚¯ï¼ˆClickjackingï¼‰ã«å¯¾ã™ã‚‹è„†å¼±æ€§ã«ã¤ã„ã¦å ±ã˜ã‚‰ã‚Œã¦ã„ã‚‹ï¼ˆæœ¬å®¶/.ã‚ˆã‚Šï¼‰ã€‚ã“ã®è„†å¼±æ€§ã¯IEã€Firefoxã€Safariã€Operaãªã©å¤šããƒ–ãƒ©ã‚¦ã‚¶ã‚„Adobe Flashã«å˜åœ¨ã—ã€å½±éŸ¿ã‚’å—ã‘ãªã„ãƒ–ãƒ©ã‚¦ã‚¶ã¯Lynxãã‚‰ã„ã ãã†ã ã€‚ ã‚¯ãƒªãƒƒã‚¯ã‚¸ãƒ£ãƒƒã‚¯ã•ã‚Œã‚‹ã¨ã€ãƒ¦ãƒ¼ã‚¶ã®ã‚¯ãƒªãƒƒã‚¯å…¨ã¦ãŒã‚¯ãƒªãƒƒã‚¯ã‚¸ãƒ£ãƒƒã‚¯ã®ã‚¯ãƒªãƒƒã‚¯ã¨ãªã‚Šã€ãƒ¦ãƒ¼ã‚¶ã®æ„å›³ã‚„å‹•ä½œã¨ã¯ç„¡é–¢ä¿‚ã«ãƒšãƒ¼ã‚¸ä¸Šã®ãƒªãƒ³ã‚¯ã‚„ãƒœã‚¿ãƒ³ã‚’ã‚¯ãƒªãƒƒã‚¯ã—ãŸã“ã¨ã«ãªã£ã¦ã—ã¾ã†ã€‚ã“ã®ãŸã‚ã€Flashã‚²ãƒ¼ãƒ ãªã©ã¯æ ¼å¥½ã®ã‚¿ãƒ¼ã‚²ãƒƒãƒˆã¨ãªã‚Šå¾—ã‚‹ã€‚æ”»æ’ƒã¯ãƒ–ãƒ©ã‚¦ã‚¶ã®æ ¹æœ¬çš„ãªæ¬ é™¥ã‚’çªã„ãŸã‚‚ã®ã§ã€DHTMLã‚’åˆ©ç”¨ã—ã¦ã„ã‚‹ã¨ã®ã“ã¨ã€‚ã¾ãŸã€JavaScriptã¯å¿…é ˆã§ã¯ãªã„ãŸã‚ã€JavaScriptã‚’ç„¡åŠ¹ã«ã—ã¦ã‚‚å®Œå…¨ã«ã¯é˜²ã’ãªã„ãã†ã ã€‚ ã‚¯ãƒªãƒƒã‚¯ã‚¸ãƒ£ãƒƒã‚¯ã¯OWASP NYC AppSec 2
kirara_397 2008/09/27
security

browser

vulnerability

*news
ãƒªãƒ³ã‚¯
JVNVU#800113: è¤‡æ•°ã® DNS å®Ÿè£…ã«ã‚ãƒ£ãƒƒã‚·ãƒ¥ãƒã‚¤ã‚ºãƒ‹ãƒ³ã‚°ã®è„†å¼±æ€§
æœ€è¿‘ã®ç ”ç©¶ã§ã€ã„ã¾ã¾ã§ã«çŸ¥ã‚‰ã‚Œã¦ã„ã‚‹ã‚ˆã‚Šã‚‚åŠ¹çŽ‡çš„ã«ã‚ãƒ£ãƒƒã‚·ãƒ¥ãƒã‚¤ã‚ºãƒ‹ãƒ³ã‚°ã‚’è¡Œã†æ‰‹æ³•ãŒè¦‹ã¤ã‹ã£ã¦ã„ã¾ã™ã€‚ DNSã‚ãƒ£ãƒƒã‚·ãƒ¥ã‚µãƒ¼ãƒãŒå¯¾è±¡ã«ãªã‚‹ã¨ã¨ã‚‚ã«ã€PCãªã©ã‚‚æ”»æ’ƒå¯¾è±¡ã«ãªã‚‹å¯èƒ½æ€§ãŒã‚ã‚‹ã“ã¨ã«æ³¨æ„ã—ã¦ãã ã•ã„ã€‚ ã‚ãƒ£ãƒƒã‚·ãƒ¥ãƒã‚¤ã‚ºãƒ‹ãƒ³ã‚°æ”»æ’ƒã¯ã€å½é€ ã—ãŸresponseãƒ‘ã‚±ãƒƒãƒˆã‚’é€ã‚Šè¾¼ã‚€ã“ã¨ã«ã‚ˆã‚Šè¡Œã‚ã‚Œã¾ã™ã€‚query ãƒ‘ã‚±ãƒƒãƒˆã®é€ä¿¡å…ƒãƒãƒ¼ãƒˆã‚’ query ã”ã¨ã«ãƒ©ãƒ³ãƒ€ãƒ ã«å¤‰æ›´ã™ã‚‹ã“ã¨ã«ã‚ˆã‚Šã€ã‚ãƒ£ãƒƒã‚·ãƒ¥ãƒã‚¤ã‚ºãƒ‹ãƒ³ã‚°æ”»æ’ƒãŒæˆåŠŸã™ã‚‹ç¢ºçŽ‡ã‚’å°ã•ãã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ ã‚ãƒ£ãƒƒã‚·ãƒ¥ãƒã‚¤ã‚ºãƒ‹ãƒ³ã‚°æ”»æ’ƒã«ã‚ˆã‚ŠDNSã‚ãƒ£ãƒƒã‚·ãƒ¥ã‚µãƒ¼ãƒã«å½ã®DNSæƒ…å ±ã‚’ã‚ãƒ£ãƒƒã‚·ãƒ¥ã•ã›ã‚‹ã“ã¨ãŒã§ãã€ãã®DNSã‚ãƒ£ãƒƒã‚·ãƒ¥ã‚µãƒ¼ãƒã‚’ä½¿ã£ã¦ã„ã‚‹ãƒŽãƒ¼ãƒ‰ãŒã€å½ã®ã‚µã‚¤ãƒˆã«èª˜å°Žã•ã‚Œã‚‹å¯èƒ½æ€§ãŒã‚ã‚Šã¾ã™ã€‚ ãƒ‘ãƒƒãƒã‚’é©ç”¨ã™ã‚‹ ãŠä½¿ã„ã®è£½å“ãƒ™ãƒ³ãƒ€ã‹ã‚‰æä¾›ã•ã‚Œã¦ã„ã‚‹ãƒ‘ãƒƒãƒã‚’é©ç”¨ã—ã¦ãã ã•ã„ã€‚ ã‚µãƒ¼ãƒè£½å“ã ã‘ã§ãªãã€ãƒãƒ¼ãƒ ã‚µãƒ¼ãƒã« query ã‚’æŠ•ã’ã‚‹å´ã®ãƒŽãƒ¼ãƒ‰
kirara_397 2008/07/30
DNS

vulnerability
ãƒªãƒ³ã‚¯
1 2 3 4 5 æ¬¡ã®ãƒšãƒ¼ã‚¸