-----BEGIN PGP SIGNED MESSAGE-----

                                                         JPCERT-WR-2006-3401
                                                                   JPCERT/CC
                                                                  2006-09-06

                 <<< JPCERT/CC REPORT 2006-09-06 >>>

$B!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=(B
$B"#(B08/27($BF|(B)$B!A(B09/02($BEZ(B) $B$N%;%-%e%j%F%#4XO">pJs(B
$B!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=(B

== $BL\(B  $B<!(B ===================================================================

$B!Z(B1$B![(B$BJ#?t$N%5%$%\%&%:@=IJ$K$*$1$k%G%#%l%/%H%j%H%i%P!<%5%k$N@H<e@-(B
$B!Z(B2$B![(B$B%5%$%\%&%:(B Office 6 $B$K$*$1$k>pJsO31L$N@H<e@-(B
$B!Z(B3$B![(BWebmin $B$*$h$S(B Usermin $B$KJ#?t$N@H<e@-(B
$B!Z(B4$B![(B$B!V(BTCP 139$BHV%]!<%H$X$N%9%-%c%sA}2C$K4X$9$kCm0U4-5/!W$r99?7(B
$B!Z(B5$B![(BJPCERT/CC REPORT XML $BHG$*$h$S(B HTML $BHG;n83Ds6!$N$*CN$i$;(B

  $B"(>R2p$9$k%;%-%e%j%F%#4XO">pJs$NA*Dj4p=`$O0J2<$N%Z!<%8$r$4Mw$/$@$5$$!#(B
        http://www.jpcert.or.jp/wr/

  $B"((BHTML $BHG$*$h$S(B XML $BHG$O0J2<$N%Z!<%8$r$4Mw$/$@$5$$!#(B
        http://www.jpcert.or.jp/wr/2006/wr063401.html
        http://www.jpcert.or.jp/wr/2006/wr063401.xml
=============================================================================


$B!Z(B1$B![(B$BJ#?t$N%5%$%\%&%:@=IJ$K$*$1$k%G%#%l%/%H%j%H%i%P!<%5%k$N@H<e@-(B

    $B>pJs8;(B
      JP Vendor Status Notes JVN#90420168
      $BJ#?t$N%5%$%\%&%:@=IJ$K$*$1$k%G%#%l%/%H%j%H%i%P!<%5%k$N@H<e@-(B
      http://jvn.jp/jp/JVN%2390420168/index.html

    $B35MW(B
      $BJ#?t$N%5%$%\%&%:@=IJ$K$O!"%G%#%l%/%H%j%H%i%P!<%5%k$N@H<e@-$,$"$j(B
      $B$^$9!#%5%$%\%&%:@=IJ$,@_CV$5$l$F$$$k4D6-$K$h$j0[$J$j$^$9$,!"7k2L(B
      $B$H$7$F!"1s3V$NBh;0<T$K$h$j%5!<%PFb$NFCDj$N%U%!%$%k$r1\Mw$5$l$k2D(B
      $BG=@-$,$"$j$^$9!#(B

      $BBP>]$H$J$k@=IJ$*$h$S%P!<%8%g%s$O0J2<$NDL$j$G$9!#(B

      - $B%5%$%\%&%:(B Office 6.5 (1.2) $B$*$h$S$=$l0JA0(B
      - $B%5%$%\%&%:(B $B%,%k!<%s(B 1.5 (4.0) $B$*$h$S$=$l0JA0(B
          $B=8Cf4IM}%7%9%F%`(B 1.5 (4.0) $B$*$h$S$=$l0JA0(B
          $B%o!<%/%0%k!<%W%7%9%F%`(B 1.5 (4.0) $B$*$h$S$=$l0JA0(B
          $B7G<(HD%5!<%P!<(B 1.0 (0.6) $B$*$h$S$=$l0JA0(B
          $B%U%!%$%k4IM}%5!<%P!<(B 1.0 (0.6) $B$*$h$S$=$l0JA0(B
          $B;\@_M=Ls%5!<%P!<(B 1.0 (0.6) $B$*$h$S$=$l0JA0(B
          $B%o!<%/%U%m!<(B 1.0 (1.0) $B$*$h$S$=$l0JA0(B
      - $B%5%$%\%&%:(B $B%a!<%k%o%$%:(B 3.0 (0.2) $B$*$h$S$=$l0JA0(B
      - $B%5%$%\%&%:(B $B%3%i%\%l%C%/%9(B 1.5 (0.5) $B$*$h$S$=$l0JA0(B
      - $B%5%$%\%&%:(B AG 1.2 (1.4) $B$*$h$S$=$l0JA0(B
      - $B%5%$%\%&%:(B AG $B%]%1%C%H(B 5.2 (0.7) $B$*$h$S$=$l0JA0(B
      - Share360 2.5 (0.2) $B$*$h$S$=$l0JA0(B

      $B>\$7$/$O!"%Y%s%@$NDs6!$9$k>pJs$r3NG'$7$F$/$@$5$$!#(B

      $B$3$NLdBj$O!"%5%$%\%&%:$,Ds6!$9$k2~=$%W%m%0%i%`$rE,MQ$9$k$3$H$G2r(B
      $B7h$7$^$9!#(B

    $B4XO"J8=q(B ($BF|K\8l(B)
      $BFHN)9T@/K!?M(B $B>pJs=hM}?d?J5!9=(B $B%;%-%e%j%F%#%;%s%?!<(B
      JVN#90420168$B!'J#?t$N%5%$%\%&%:@=IJ$K$*$1$k%G%#%l%/%H%j!&%H%i%P!<%5%k$N@H<e@-(B
      http://www.ipa.go.jp/security/vuln/documents/2006/JVN_90420168_Cybozu.html

      $B%;%-%e%j%F%#$K4X$9$k$*CN$i$;(B
      $B%5%$%\%&%:@=IJ$N@H<e@-$K$D$$$F(B
      http://cybozu.co.jp/products/dl/notice_060901/

$B!Z(B2$B![(B$B%5%$%\%&%:(B Office 6 $B$K$*$1$k>pJsO31L$N@H<e@-(B

    $B>pJs8;(B
      JP Vendor Status Notes JVN#31125599
      $B%5%$%\%&%:(B Office 6 $B$K$*$1$k>pJsO31L$N@H<e@-(B
      http://jvn.jp/jp/JVN%2331125599/index.html

    $B35MW(B
      $B%5%$%\%&%:(B Office 6.5 (1.2) $B$*$h$S$=$l0JA0$K$O!">pJsO31L$N@H<e@-(B
      $B$,$"$j$^$9!#7k2L$H$7$F!"1s3V$NBh;0<T$K$h$jEPO?$5$l$F$$$k%f!<%6$*(B
      $B$h$S%0%k!<%W$K4X$9$k>pJs$r1\Mw$5$l$k2DG=@-$,$"$j$^$9!#(B

      $B>\$7$/$O!"%Y%s%@$NDs6!$9$k>pJs$r3NG'$7$F$/$@$5$$!#(B

      $B$3$NLdBj$O!"%5%$%\%&%:$,Ds6!$9$k2~=$%W%m%0%i%`$rE,MQ$9$k$3$H$G2r(B
      $B7h$7$^$9!#(B

    $B4XO"J8=q(B ($BF|K\8l(B)
      $BFHN)9T@/K!?M(B $B>pJs=hM}?d?J5!9=(B $B%;%-%e%j%F%#%;%s%?!<(B
      JVN#31125599$B!'!V%5%$%\%&%:(B Office 6$B!W$K$*$1$k>pJsO31L$N@H<e@-(B
      http://www.ipa.go.jp/security/vuln/documents/2006/JVN_31125599_Cybozu.html

      $B%;%-%e%j%F%#$K4X$9$k$*CN$i$;(B
      $B%5%$%\%&%:@=IJ$N@H<e@-$K$D$$$F(B
      http://cybozu.co.jp/products/dl/notice_060901/

$B!Z(B3$B![(BWebmin $B$*$h$S(B Usermin $B$KJ#?t$N@H<e@-(B

    $B>pJs8;(B
      JP Vendor Status Notes JVN#99776858
      Webmin $B$*$h$S(B Usermin $B$K%/%m%9%5%$%H%9%/%j%W%F%#%s%0$r4^$`J#?t$N@H<e@-(B
      http://jvn.jp/jp/JVN%2399776858/index.html

    $B35MW(B
      $B%&%'%V%Y!<%9$N%7%9%F%`4IM}%D!<%k$G$"$k(B Webmin $B$*$h$S(B Usermin $B$K(B
      $B$O!"%"%/%;%9@)8B$r2sHr$7$?%U%!%$%k$N<B9T$d%/%m%9%5%$%H%9%/%j%W%F%#(B
      $B%s%0$r4^$`J#?t$N@H<e@-$,$"$j$^$9!#7k2L$H$7$F!"1s3V$NBh;0<T$K$h$j(B
      $B%f!<%6$N%V%i%&%6>e$GG$0U$N%9%/%j%W%H$r<B9T$5$l$k$J$I!"MM!9$JLdBj(B
      $B$,@8$8$k2DG=@-$,$"$j$^$9!#(B

      $BBP>]$H$J$k%P!<%8%g%s$O0J2<$NDL$j$G$9!#(B

      - Webmin Version 1.290 $B$*$h$S$=$l0JA0(B
      - Usermin Version 1.220 $B$*$h$S$=$l0JA0(B

      $B$3$NLdBj$O!";HMQ$7$F$$$k(B OS $B$N%Y%s%@$dG[I[85$,Ds6!$9$k=$@5:Q$_$N(B
      $B%Q%C%1!<%8$K(B Webmin $B$^$?$O(B Usermin $B$r99?7$9$k$3$H$G2r7h$7$^$9!#(B

    $B4XO"J8=q(B ($BF|K\8l(B)
      $BFHN)9T@/K!?M(B $B>pJs=hM}?d?J5!9=(B $B%;%-%e%j%F%#%;%s%?!<(B
      JVN#99776858$B!'!V(BWebmin$B!W$*$h$S!V(BUsermin$B!W$K%/%m%9%5%$%H!&%9%/%j%W%F%#%s%0$r4^$`J#?t$N@H<e@-(B
      http://www.ipa.go.jp/security/vuln/documents/2006/JVN_99776858_webmin.html

    $B4XO"J8=q(B ($B1Q8l(B)
      Security Alerts
      Remote source code access and XSS bug
      http://www.webmin.com/security.html

$B!Z(B4$B![(B$B!V(BTCP 139$BHV%]!<%H$X$N%9%-%c%sA}2C$K4X$9$kCm0U4-5/!W$r99?7(B

    $B>pJs8;(B
      TCP 139$BHV%]!<%H$X$N%9%-%c%sA}2C$K4X$9$kCm0U4-5/(B
      http://www.jpcert.or.jp/at/2006/at060012.txt

    $B35MW(B
      2006$BG/(B8$B7n(B24$BF|$K8x3+$7$?!V(BTCP 139$BHV%]!<%H$X$N%9%-%c%sA}2C$K4X$9$k(B
      $BCm0U4-5/!W$K4X$7$F!"Cm0U4-5/8x3+0J9_$b7QB3E*$K(B TCP 139$BHV%]!<%H$N(B
      $B%9%-%c%s$NA}2C798~$r4QB,$7$F$$$k$?$a!"Cm0U4-5/$r99?7$7$^$7$?!#(B

      $B>\$7$/$O!"Ev3:Cm0U4-5/J8=q$r;2>H$7$F$/$@$5$$!#(B

$B!Z(B5$B![(BJPCERT/CC REPORT XML $BHG$*$h$S(B HTML $BHG;n83Ds6!$N$*CN$i$;(B

    $B>pJs8;(B
      JPCERT/CC$B%l%]!<%H(B
      http://www.jpcert.or.jp/wr/

    $B35MW(B
      JPCERT/CC REPORT $B$O!"=>Mh%F%-%9%H7A<0$N$_Ds6!$7$F$*$j$^$7$?$,!"(B
      $BFI<T$N3'MM$+$iD:$$$?$40U8+!&$4MWK>$r8!F$$7$?7k2L!"K\9f(B 
      (2006-09-06$B9f(B) $B$h$j(B XML $B7A<0$*$h$S(B HTML $B7A<0$G$N;n83Ds6!$r3+;O$$(B
      $B$?$7$^$7$?!#(B

      $B$J$*!";n83Ds6!$N7A<0$*$h$S7ABV$OJQ99$5$l$k2DG=@-$,$"$j$^$9!#M=$a(B
      $B$4N;>5$/$@$5$$!#(B

      $B$^$?!"(B2006$BG/(B8$B7n(B30$BF|0JA0H/9TJ,$N(B HTML $B7A<0$*$h$S(B XML $B7A<0$NDs6!M=(B
      $BDj$OL$Dj$G$9!#(B

      $BFI<T$N3'MM$N$40U8+!"$446A[$r$*BT$A$7$F$*$j$^$9!#(B

    $B4XO"J8=q(B ($BF|K\8l(B)
      JPCERT/CC REPORT 2006-09-06 $B9f(B (XML $B7A<0(B)
      http://www.jpcert.or.jp/wr/2006/wr063401.xml

      JPCERT/CC REPORT 2006-09-06 $B9f(B (XML $B7A<0(B) $B$N(B PGP $B=pL>(B
      http://www.jpcert.or.jp/wr/2006/wr063401.xml.asc

      JPCERT/CC REPORT 2006-09-06 $B9f(B (HTML $B7A<0(B)
      http://www.jpcert.or.jp/wr/2006/wr063401.html

      JPCERT/CC REPORT 2006-09-06 $B9f(B (HTML $B7A<0(B) $B$N(B PGP $B=pL>(B
      http://www.jpcert.or.jp/wr/2006/wr063401.html.asc

      JPCERT/CC REPORT DTD
      http://www.jpcert.or.jp/wr/wr.dtd


$B!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=(B
$B"#:#=5$N0l8}%a%b(B
$B!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=(B

$B!{(B$B8D?M7@Ls$N%a!<%k%5!<%S%9$r6HL3$K;HMQ$7$J$$(B

      $B8D?M$G7@Ls$7$?%a!<%k%5!<%S%9$r6HL3>e$N5!L)>pJs$N<h$j07$$$K;HMQ$9(B
      $B$k$3$H$O!">pJs4IM}$NLL$GHs>o$KBg$-$J%j%9%/$,$"$j$^$9!#>pJs4IM}@U(B
      $BG$<TEy$+$iFCJL$K5v2D$rF@$F$$$J$$8B$j$O!"8D?M$G7@Ls$7$?%a!<%k%5!<(B
      $B%S%9$r6HL3$G;HMQ$7$J$$$3$H$r$*4+$a$7$^$9!#(B

      - $B;HMQ$9$k%5!<%S%9$K$h$C$F$O!"!V>pJs!W$rBh;0<T$KDs6!$9$k>l9g$,$"(B
        $B$k!#(B
        $B"*(B $B5!L)>pJs$d8D?M>pJs$NO31L$K$D$J$,$k2DG=@-$,$"$k!#(B

      - $B4k6H$H7@Ls4X78$K$J$$Bh;0<T$N4IM}$9$k%5!<%P>e$G5!L)>pJs$d8D?M>p(B
        $BJs$r4IM}$9$k$3$H$K$J$k!#(B
        $B"*(B $B>pJsO31L$N:]!"@UG$$N=j:_$,ITL@NF$K$J$j!"AH?%$H$7$F$NBP1~$,(B
           $BCY$l$k2DG=@-$,$"$k!#(B

    $B;29MJ88%(B ($BF|K\8l(B)
      JPCERT/CC REPORT 2004-12-08$B9f$N!V0l8}%a%b!W(B
      $BEE;R%a!<%k%/%i%$%"%s%H$NA*Br(B
      http://www.jpcert.or.jp/wr/2004/wr044801.txt

      JPCERT/CC REPORT 2005-05-11$B9f$N!V0l8}%a%b!W(B
      $B%U%j!<%a!<%k%5!<%S%9(B
      http://www.jpcert.or.jp/wr/2005/wr051801.txt


$B!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=(B
$B"#(BJPCERT/CC $B$+$i$N$*4j$$(B
$B!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=(B

$B!~K\%l%]!<%H$K4X$9$k$*Ld$$9g$o$;$O(B editor@jpcert.or.jp $B08$K$*4j$$CW$7$^(B
  $B$9!#$?$@$7!"(BJPCERT/CC $B$G$O!"Ds6!$9$k>pJs$K$D$$$F6qBNE*$JFbMF$=$N$b$N$K(B
  $B$D$$$F$N$4<ALd$K$O$*Ez$($G$-$J$$>l9g$b$"$j$^$9!#$^$?%P%C%/%J%s%P!<$O!"(B
  $B0J2<$N(B URL $B$+$i$4MxMQ$$$?$@$1$^$9!#(B

        http://www.jpcert.or.jp/wr/

$B!~K\%a!<%j%s%0%j%9%H$N9XFI?=9~$d9XFIDd;_!"$^$?EPO?$7$?EE;R%a!<%k%"%I%l%9(B
  $B$NJQ99$J$I$K$D$-$^$7$F$O!"0J2<$N(B URL $B$r$4;2>H$/$@$5$$!#(B

        http://www.jpcert.or.jp/announce.html

$B!~(BJPCERT/CC $B$X$N%;%-%e%j%F%#%$%s%7%G%s%H$NJs9pJ}K!$K$D$$$F$O0J2<$N(B URL
  $B$r$4;2>H$/$@$5$$!#(B

        http://www.jpcert.or.jp/form/

$B0J>e!#(B
__________

2006 (C) JPCERT/CC

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
Charset: noconv

iQCVAwUBRQdVIYx1ay4slNTtAQHVZQP/WeubFg//T58r8HxJmVvMOFduyErzuiUw
l/EllfzE8H1pg2LmGWSE9fuPzLLs6+CM3kl246Dr+6xsX0KJxCc3kEGbhsp6ITYo
iypvEaiCt5i27Z7s2IFx/fM3blRtjooIEswzQlQ3gUEA+Of/P/BEkMUI6FLiILfD
C46xmMFbwXk=
=Aujf
-----END PGP SIGNATURE-----