[B! é“åŒ–] mi1kmanã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

mi1kman id:mi1kman

é“åŒ–ã«é–¢ã™ã‚‹mi1kmanã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (7)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

IPAãŸã‚“ã‹ã‚‰ãŠç¤¼ãŒï¼ - ã¼ãã¯ã¾ã¡ã¡ã‚ƒã‚“ï¼
ã¯ã˜ã‚ã¦ã®ã»ã†ã“ã IPAãŸã‚“ã‹ã‚‰ã®è¿”äº‹ IPAãŸã‚“ã‹ã‚‰ã¸ã‚“ã˜ã“ãªã„ ã®ã¤ã¥ãã§ã™ï¼ï¼ï¼ è¿”äº‹ããŸã‚ˆï¼ ãã¦ã¾ã—ãŸï¼žï¼œ Date: Thu, 01 Feb 2007 20:43:06 +0900 To: Hamachiya2 Subject: ã€IPA#32334280/IPA#11631745/IPA#92669403/IPA#94436430ã€‘ å±Šå‡ºã„ãŸã ã„ãŸä»¶ã«ã¤ã„ã¦ - ----------------------------------------------------------------- ã“ã®ãƒ¡ãƒ¼ãƒ«ã¯ã€ä»¥ä¸‹ã®å–æ‰±ã„ç•ªå·ã«é–¢ã™ã‚‹é€£çµ¡ã§ã™ã€‚ IPA#32334280/IPA#11631745/IPA#92669403/IPA#94436430 - ----------------------------------------------------------------
mi1kman 2007/02/04
4ã«ã¤ã„ã¦ï¼Œé•æ³•ãªæ‰‹æ®µã§å…¥æ‰‹ã—ãŸåŒ¿åã®å±Šå‡ºã‚’IPAãŒå—ç†ã™ã‚‹ã¨ï¼Œé€†ã«IPAãŒçŠ¯ç½ªè€…ã‚’å®ˆã‚‹ã“ã¨ã«ãªã‚‹ï¼Žã‚€ã—ã‚IPAã¯åŒ¿åã®å±Šå‡ºã‚’å—ã‘ä»˜ã‘ã‚‹ã¹ãã§ã¯ãªãï¼Œé•æ³•æ€§ã®åˆ¤æ–ã¯ç™ºè¦‹è€…è‡ªèº«ã§è¡Œã†ã—ã‹ãªã„ï¼Žã“ã®æè¨€ã¯ã‚€ã—ã‚å±é™ºï¼Ž

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

è„†å¼±æ€§

è²¬ä»»

é“åŒ–

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ”ã‚¨ãƒ

ã¯ã¾ã¡ã¡ã‚ƒã‚“

IPA

åŒ¿å

å±é™º
ãƒªãƒ³ã‚¯
ã¯ã¾ã¡ã¡ã‚ƒã‚“ãŒç‹™ã£ã¦ã„ã‚‹ã‚‚ã®
ã€Œã‚¯ãƒ¼ãƒ«ãªãƒãƒƒã‚«ãƒ¼ã€ã¨ã„ã†ç±³å›½ç™ºã®ã‚¤ãƒ¡ãƒ¼ã‚¸ã‚’è¶…ãˆã‚‹ æ—¥æœ¬ç™ºã®ã€Œã‹ã‚ã„ã„ãƒãƒƒã‚«ãƒ¼ã€ã¨ã„ã†ã‚¤ãƒ¡ãƒ¼ã‚¸ã®æ™®åŠãªã®ã§ã¯ã€‚ ãƒãƒƒã‚¯ã—ãªã„ã¨ç”Ÿãã¦ã„ãã®ãŒã¤ã‚‰ã„æ™‚ä»£ãªã®ã§ã™ã€‚
mi1kman 2007/02/01
å€‹äººçš„ã«ã¯ã€Œã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ”ã‚¨ãƒã€ã¨ã„ã†å‘¼ã³æ–¹ã‚’ææ¡ˆã—ãŸã„ï¼Ž

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ”ã‚¨ãƒ

ã¯ã¾ã¡ã¡ã‚ƒã‚“

é“åŒ–
ãƒªãƒ³ã‚¯
ã¯ã¾ã¡ã¡ã‚ƒã‚“ã«ç”˜ã‚„ã‹ã•ã‚Œã‚‹ãª - èŒãˆç†è«–ãƒ–ãƒã‚°
kyoumoeã®æ—¥è¨˜30æ³ - ã¯ã¾ã¡ã‚„ã‚’ç”˜ã‚„ã‹ã™ãª ä½•åº¦ã‚‚ä½•åº¦ã‚‚è¨€ã†ãŒã€ã“ã†ã„ã†ã®ã¯é«˜æ ¡ç”ŸãŒã€Œæ ¡å‰‡ãŒãŠã‹ã—ã„ã€ã¨è¨€ã£ã¦é«ªã‚’æŸ“ã‚ãŸã‚Šã€åˆ¶æœã®ã‚µã‚¤ã‚ºã‚’å¤‰ãˆãŸã‚Šã—ã¦ã‚‹ã®ã¨ä¸€ç·’ãªã‚“ã ã‚ˆã€‚ ã¯ã¾ã¡ã¡ã‚ƒã‚“ã“ã¨id:Hamachiya2æ°ãŒã€ã€Œã¯ã¦ãªã€ã¨ã‹ã€Œmixiã€ã¨ã‹è‰²ã€…ãªä¼æ¥ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®ç©´ã‚’æŒ‡æ‘˜ã™ã‚‹ã®ã¯ã€åŠ´åƒã‚„å¦æ¥ã§ã¯ãªã„ã®ã§ã€éŠã³ãŒå…¥ã£ã¦ã„ã¦ã‚‚åˆ¥ã«ã„ã„ã¨æ€ã†ã‘ã©â€¦ã€‚æœ¬æ¥ä¼æ¥ãŒè‡ªå‰ã§ä»•äº‹ã¨ã—ã¦ã‚„ã‚‹ã¹ãç¯„å›²ã®ã“ã¨ãªã®ã ã‹ã‚‰ã€ã‚€ã—ã‚ç”˜ã‚„ã‹ã•ã‚Œã¦ã„ã‚‹ã®ã¯ä¼æ¥ã§ã‚ã‚‹ã€‚ï¼ˆã ã‹ã‚‰1ç©´ã«ã¤ããƒãƒžãƒ1åŒ¹ã¨ã‹æ‰•ãˆã°ã„ã„ã¨æ€ã†ã€‚ãƒãƒžãƒæ¼ï¼‰ ã ã„ãŸã„ã€ã‚‚ã—ãƒã‚¿ã˜ã‚ƒãªãã¦ã‚¬ãƒãªå ±å‘Šã«ã—ãŸã‚‰ã€æ·±åˆ»ãªæ„Ÿã˜ãŒã—ã¦ä¼æ¥ã®ãƒ€ãƒ¡ãƒ¼ã‚¸ãŒå¢—ã™ã‚“ã˜ã‚ƒãªã„ã ã‚ã†ã‹ã€‚ã‚ˆãåˆ†ã‹ã‚“ãªã„ã‘ã©ã€‚ä¼æ¥ã«å†…å¯†ã«é€šå‘Šã™ã‚Œã°ãƒ€ãƒ¡ãƒ¼ã‚¸ã¯ãªã„ã‘ã©ã€ä»•äº‹ã˜ã‚ƒãªã„ã®ã«ãã“ã¾ã§ã¯ã§ããªã„ã—ã€ãƒ¦ãƒ¼ã‚¶ã«ç©´ãŒã‚ã£ãŸã“ã¨ã¯ä¼ã‚ã‚‰ãªã„ã€‚ ã¨ã“ã‚ã§ã€ãƒãƒƒãƒ—ãªãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ãŒã•ã‚Œ
mi1kman 2007/02/01
ã“ã‚Œã«ã¯å…¨ãåŒæ„ã§ããªã„ãªãï¼Œå…¨ç„¶ãƒãƒƒã‚¯ã˜ã‚ƒãªã„ã‚ˆï¼Žï¼žå®Ÿã¯ã¯ã¾ã¡ã¡ã‚ƒã‚“ã¯ãƒãƒƒã‚«ãƒ¼æ–‡åŒ–ã®ç²¾ç¥žã‚’ãµã¤ã†ã«ç¶™æ‰¿ã—ã¦ã„ã‚‹ã¨æ€ã†ã€‚/ã€Œã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ”ã‚¨ãƒã€ã¾ãŸã¯ã€Œãƒ”ã‚¨ãƒã‚®ãƒ¼ã‚¯ã€ã‚’ææ¡ˆã—ãŸã„ï¼Žï¼žã€ŒèŒãˆã‚®ãƒ¼ã‚¯ã€

ã¯ã¾ã¡ã¡ã‚ƒã‚“

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ”ã‚¨ãƒ

é“åŒ–
ãƒªãƒ³ã‚¯
ã¯ã¦ãªãƒ–ãƒã‚° | ç„¡æ–™ãƒ–ãƒã‚°ã‚’ä½œæˆã—ã‚ˆã†
ã†ã¾ãã„ã‹ãªã„æ—¥ã«ä»•è¾¼ã‚€ãƒ©ãƒš ã€Œã‚ãã€ä»Šæ—¥ã®ã‚ãŸã—ãƒ€ãƒ¡ãƒ€ãƒ¡ã â€¦ã€ ãã†ã„ã†æ—¥ã¯ä½•ã‹ã§å–ã‚Šè¿”ã—ãŸããªã‚‹ã€‚é•·ã€…ã¨å¤œæ›´ã‹ã—ã—ã¦æœ¬ã‚’èªã‚“ã ã‚Šã€åˆºç¹ã‚’ã—ãŸã‚Šâ€¦æ—¥ä¸ã®è‡ªåˆ†ã®ãƒŸã‚¹ã‚’å–ã‚Šæˆ»ã™ãŒå¦‚ãã€æ„å‘³ã®ã‚ã‚‹ã“ã¨ã‚’ã—ãŸããªã‚‹ã®ã§ã™ã€‚ ã†ã¾ãã„ã‹ãªã‹ã£ãŸæ—¥ã®ã‚ãŸã—ã®æœ€è¿‘ã®ãƒªãƒ™ãƒ³ã‚¸æ–¹æ³•ã€‚ç¾Žå‘³ã—ã„ãƒ©ãƒšã‚’â€¦
mi1kman 2007/01/31
XSSä»¥å¤–ã®XSSã‚ˆã‚Šã‚‚è„…å¨ã®é«˜ã„å•é¡Œï¼Œã‚ã‚‹ã„ã¯ProofOfConceptã§ã¯ãªãä»–ã®åˆ©ç”¨è€…ã«å®Ÿéš›ã«è¢«å®³ã‚’ä¸Žãˆã‚‹ã‚ˆã†ãªã‚‚ã®ã§ã‚ã£ã¦ã‚‚ã“ã®äººã¯ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ã‚’ã—ãŸã®ã ã‚ã†ã‹ï¼Žâ†‘ç¢ºã‹ã«ãã†ã ã£ãŸï¼Žï¼žã™ã‚Šæ›¿ã‚ã‚‹å¯èƒ½æ€§

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

è„†å¼±æ€§

ã¯ã¾ã¡ã¡ã‚ƒã‚“

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ”ã‚¨ãƒ

é“åŒ–
ãƒªãƒ³ã‚¯
IPAãŸã‚“ã‹ã‚‰ã¸ã‚“ã˜ã“ãªã„ - ã¼ãã¯ã¾ã¡ã¡ã‚ƒã‚“ï¼
ã¡ã‚‡ã£ã¨ã¤ã¾ã‚“ãªã„ã®ã§ã€ã¤ã¾ã‚‹ã‚ˆã†ã«ã—ã¦ã¿ã¾ã—ãŸï¼ https://isec.ipa.go.jp/inq/servlet/InqMainServlet?id=index&gamenFlg=6 ã“ã‚Œã§æ˜¨æ—¥ã¨åŒã˜å®šåž‹æ–‡ã®è¿”äº‹ãŒããŸã‚‰ããŸã§æ„‰å¿«ã‹ãªã€ã¨ã‹æ€ã£ã¦â€¦ï¼ ã‚ã€IPAã®ã‚µã‚¤ãƒˆã®XSSã®å˜åœ¨ã¨å®Ÿè¨¼ã‚³ãƒ¼ãƒ‰ã¯ã€ã‚‚ã¡ã‚ã‚“æœ¬ç‰©ã ã‚ˆï¼ ãƒ¢ã‚¶ã‚¤ã‚¯ã‹ã‘ãŸã‘ã©ï¼
mi1kman 2007/01/31
ã“ã‚Œã§ã¯åŒ—é¢¨ã¨å¤ªé™½ã§ï¼ŒIPAã¯å¢—ã€…æ…‹åº¦ã‚’ç¡¬ç›´ã•ã›ã‚‹ã ã‘ã§ã¯ï¼Žãƒ¢ã‚¶ã‚¤ã‚¯ã«ã—ã¦ã‚‚ã™ã§ã«å½¹ã«ç«‹ã£ã¦ã„ãªã„ã—ï¼Ž

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ”ã‚¨ãƒ

é“åŒ–

è„†å¼±æ€§

ã¯ã¾ã¡ã¡ã‚ƒã‚“
ãƒªãƒ³ã‚¯
IPAãŸã‚“ã‹ã‚‰ã®è¿”äº‹ - ã¼ãã¯ã¾ã¡ã¡ã‚ƒã‚“ï¼
Date: Tue, 30 Jan 2007 10:37:05 +0900 From: "IPA/vuln/Info" To: root@hamachiya.com ã¯ã¾ã¡ã‚„ï¼’æ§˜ ã‚¦ã‚§ãƒ–ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®è„†å¼±æ€§é–¢é€£æƒ…å ±ã‚’å±Šå‡ºã„ãŸã ãã€ã‚ã‚ŠãŒ ã¨ã†ã”ã–ã„ã¾ã™ã€‚ æœ¬ä»¶ã«ã¤ãã¾ã—ã¦ã€ã‚¬ã‚¤ãƒ‰ãƒ©ã‚¤ãƒ³ã®ä»¥ä¸‹ã®é …ç›®ã«è¨˜è¼‰ãŒã‚ã‚Šã¾ã™ã‚ˆ ã†ã«ã€å±Šå‡ºã®éš›ã«ã¯ç™ºè¦‹è€…æ§˜ã®æ°åã‚’ã”è¨˜å…¥é ‚ã„ã¦ãŠã‚Šã¾ã™ã€‚ ã“ã‚Œã¯ã€è²¬ä»»ã‚ã‚‹å±Šå‡ºã‚’ä¿ƒã™ãŸã‚ã§ã‚ã‚Šã€åŒ¿åã‚„ãƒãƒ³ãƒ‰ãƒ«ãƒãƒ¼ãƒ ã® å±Šå‡ºã¯å—ç†ã§ãã¾ã›ã‚“ã®ã§ã€å®Ÿåã§ã®å±Šå‡ºã«ã”å”åŠ›ã‚’ãŠé¡˜ã„è‡´ã—ã¾ã™ã€‚ ----------------------------------------------------------- ã€Œæƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ—©æœŸè¦æˆ’ãƒ‘ãƒ¼ãƒˆãƒŠãƒ¼ã‚·ãƒƒãƒ—ã‚¬ã‚¤ãƒ‰ãƒ©ã‚¤ãƒ³ã€P.17 Vï¼Žã‚¦ã‚§ãƒ–ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«ä¿‚ã‚‹è„†å¼±æ€§é–¢é€£æƒ…å ±å–æ‰± 2. ç™ºè¦‹è€…ã®å¯¾å¿œ 4) å±Šã‘å‡ºã‚‹æƒ…å ±ã®å†…å®¹ ãƒ»ç™ºè¦‹è€…
mi1kman 2007/01/30
ã¯ã¾ã¡ã¡ã‚ƒã‚“ã¨è¨€ãˆã©ï¼Œã•ã™ãŒã«æœ€åˆã‹ã‚‰FullDisclosureã™ã‚‹ã®ã¯æ€–ã‹ã£ãŸã®ã‹ãªï¼Ž<s>ã¤ã‹å±Šå‡ºåˆ¶åº¦ã¯ç™ºè¦‹è€…ã®ä¿è·ã®ãŸã‚ã«ã‚ã‚‹ã‚ã‘ã§ï¼Œ</s>ãŸã¨ãˆå¤§å…¬é–‹ã—ã¦ï¼Œã¯ã¾ã¡ã¡ã‚ƒã‚“ãŒä¸åˆ©ç›Šã‚’è¢«ã£ã¦ã‚‚IPAã¯ç—›ãã‚‚ç—’ãã‚‚ãªã„è¨³ã§ï¼Ž

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

è„†å¼±æ€§

ã¯ã¾ã¡ã¡ã‚ƒã‚“

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ”ã‚¨ãƒ

é“åŒ–
ãƒªãƒ³ã‚¯
ã¯ã˜ã‚ã¦ã®ã»ã†ã“ã - ã¼ãã¯ã¾ã¡ã¡ã‚ƒã‚“ï¼
ã“ã†ã§ã™ã‹ï¼ https://isec.ipa.go.jp/inq/servlet/InqMainServlet?id=index&gamenFlg=6 PGPã£ã¦ãªã«ï¼ ãªã‚“ã§ã™ã‹ã“ã‚Œï¼ ã“ã®ã¾ã¾é€ä¿¡ã—ã¡ã‚ƒã£ãŸã‘ã©ã€ã†ã¾ãå ±å‘Šã§ããŸã‹ã‚ã‹ã‚Šã¾ã›ã‚“ï¼žï¼œ (è¿½è¨˜) id:send ãŸã‚“ãŒã€ch.search.yahoo.com ã§åŒã˜ã“ã¨ã§ãã¦ãŸã‹ã‚‰ æœ¬å®¶search.yahoo.com ã¨ã‹ã‚‚ã‚ã‚ã›ã¦å†é€šå ±ã—ã¨ã„ãŸã‚ˆï¼ ã‘ã©ã€æµ·å¤–ã®ã‚µã‚¤ãƒˆã‚‚ IPA ã§ã‚ˆã‹ã£ãŸã®ã‹ãªâ€¦ï¼ (ãŠã¾ã‘) ã“ã®éš›ã ã‹ã‚‰ã¤ã„ã§ã«ã€ã¯ã¦ãªã‚‚ã”æ„›ç”¨ã® geotrust(SSLè¨¼æ˜Žæ›¸å±‹ã•ã‚“) ã®è„†å¼±æ€§ã‚‚é€šå ±ã—ã¨ãã¾ã—ãŸï¼
mi1kman 2007/01/30
ãŒã‚“ã°ã‚Œï¼ãŒã‚“ã°ã‚Œï¼

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

é“åŒ–

ã¯ã¾ã¡ã¡ã‚ƒã‚“

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ”ã‚¨ãƒ
ãƒªãƒ³ã‚¯
1