-----BEGIN PGP SIGNED MESSAGE-----

                                                         JPCERT-WR-2007-1901
                                                                   JPCERT/CC
                                                                  2007-05-23

                 <<< JPCERT/CC REPORT 2007-05-23 >>>

$B!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=(B
$B"#(B05/13($BF|(B)$B!A(B05/19($BEZ(B) $B$N%;%-%e%j%F%#4XO">pJs(B
$B!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=(B

== $BL\(B  $B<!(B ==================================================================

$B!Z(B1$B![(BSamba $B$KJ#?t$N@H<e@-(B
$B!Z(B2$B![%[!<%`%Z!<%8!&%S%k%@!<IUB0$N(B CGI $B%5%s%W%k%W%m%0%i%`$K@H<e@-(B
$B!Z(B3$B![(Blibpng $B$K@H<e@-(B
$B!Z(B4$B![(BApache Tomcat $B$KJ#?t$N@H<e@-(B
$B!Z(B5$B![(BBEA JRockit $B$KJ#?t$N@H<e@-(B
$B!Z(B6$B![(BCA $B@=IJ$KJ#?t$N@H<e@-(B
$B!Z(B7$B![(BAdvance-Flow $B$K%/%m%9%5%$%H%9%/%j%W%F%#%s%0$N@H<e@-(B
$B!Z:#=5$N$R$H$/$A%a%b![@8BNG'>Z(B ($B%P%$%*%a%H%j%/%9G'>Z(B) $B$=$N(B1

  $B"(>R2p$9$k%;%-%e%j%F%#4XO">pJs$NA*Dj4p=`$O0J2<$N%Z!<%8$r$4Mw$/$@$5$$!#(B
        http://www.jpcert.or.jp/wr/

  $B"((BHTML $BHG$*$h$S(B XML $BHG$O0J2<$N%Z!<%8$r$4Mw$/$@$5$$!#(B
        http://www.jpcert.or.jp/wr/2007/wr071901.html
        http://www.jpcert.or.jp/wr/2007/wr071901.xml
============================================================================


$B!Z(B1$B![(BSamba $B$KJ#?t$N@H<e@-(B

    $B>pJs8;(B
      US-CERT Vulnerability Note VU#268336
      Samba command injection vulnerability
      http://www.kb.cert.org/vuls/id/268336

      US-CERT Vulnerability Note VU#773720
      Samba NDR MS-RPC heap buffer overflow
      http://www.kb.cert.org/vuls/id/773720

      CIAC Bulletin R-240
      Samba Security Update
      http://www.ciac.org/ciac/bulletins/r-240.shtml

    $B35MW(B
      Samba $B$K$O!"J#?t$N@H<e@-$,$"$j$^$9!#7k2L$H$7$F!"1s3V$NBh;0<T$,G$(B
      $B0U$N%3!<%I$^$?$O%3%^%s%I$r<B9T$9$k2DG=@-$,$"$j$^$9!#(B

      $BBP>]$H$J$k%P!<%8%g%s$O0J2<$NDL$j$G$9!#(B

      - Samba 3.0.0 $B$+$i(B 3.0.25rc3

      $B$3$NLdBj$O!";HMQ$7$F$$$k(B OS $B$N%Y%s%@$dG[I[85$,Ds6!$9$k=$@5:Q$_$N(B
      $B%P!<%8%g%s$K(B Samba $B$r99?7$9$k$3$H$G2r7h$7$^$9!#(BSamba 3.0.24 $B$G$O!"(B
      $B3:Ev$9$k%Q%C%A$rE,MQ$9$k$3$H$G$b2r7h$G$-$^$9!#>\:Y$K$D$$$F$O!"%Y(B
      $B%s%@$dG[I[85$,Ds6!$9$k>pJs$r;2>H$7$F$/$@$5$$!#(B

    $B4XO"J8=q(B ($BF|K\8l(B)
      Japan Vulnerability Notes JVNVU#773720
      Samba NDR MS-RPC $B$K$*$1$k%P%C%U%!%*!<%P!<%U%m!<$N@H<e@-(B
      http://jvn.jp/cert/JVNVU%23773720/index.html

      Japan Vulnerability Notes JVNVU#268336
      Samba $B$K$*$1$k%3%^%s%I%$%s%8%'%/%7%g%s$N@H<e@-(B
      http://jvn.jp/cert/JVNVU%23268336/index.html

    $B4XO"J8=q(B ($B1Q8l(B)
      Samba - Security Announcement Archive
      CVE-2007-2446: Multiple Heap Overflows Allow Remote Code Execution
      http://samba.org/samba/security/CVE-2007-2446.html

      Samba - Security Announcement Archive
      CVE-2007-2447: Remote Command Injection Vulnerability
      http://samba.org/samba/security/CVE-2007-2447.html

      Samba - Security Updates and Information
      Samba Security Releases
      http://samba.org/samba/history/security.html

      Samba - Release Notes Archive
      Samba 3.0.25 Available for Download
      http://www.samba.org/samba/history/samba-3.0.25.html

      Red Hat Security Advisory RHSA-2007:0354-4
      Critical: samba security update
      http://rhn.redhat.com/errata/RHSA-2007-0354.html

      Debian Security Advisory DSA-1291-1
      samba -- several vulnerabilities
      http://www.debian.org/security/2007/dsa-1291

$B!Z(B2$B![%[!<%`%Z!<%8!&%S%k%@!<IUB0$N(B CGI $B%5%s%W%k%W%m%0%i%`$K@H<e@-(B

    $B>pJs8;(B
      Japan Vulnerability Notes JVN#81294906
      $B%[!<%`%Z!<%8!&%S%k%@!<IUB0$N(B CGI $B%5%s%W%k%W%m%0%i%`$K$*$1$k(B OS $B%3%^%s%I%$%s%8%'%/%7%g%s$N@H<e@-(B
      http://jvn.jp/jp/JVN%2381294906/index.html

    $B35MW(B
      $BF|K\(B IBM $B$,Ds6!$9$k%[!<%`%Z!<%8!&%S%k%@!<IUB0$N(B CGI $B%5%s%W%k%W%m(B
      $B%0%i%`$N0lIt$K$O!"(BOS $B%3%^%s%I%$%s%8%'%/%7%g%s$N@H<e@-$,$"$j$^$9!#(B
      $B7k2L$H$7$F!"@H<e@-$N$"$k(B CGI $B%5%s%W%k%W%m%0%i%`$r@_CV$7$F<B9T2DG=(B
      $B$K$7$F$$$k%5!<%P$K$*$$$F!"1s3V$NBh;0<T$,(B Web $B%5!<%P$N<B9T8"8B$GG$(B
      $B0U$N%3%^%s%I$r<B9T$9$k2DG=@-$,$"$j$^$9!#(B

      $BBP>]$H$J$k@=IJ$*$h$S%P!<%8%g%s$O0J2<$NDL$j$G$9!#(B

      - $B0J2<$N%P!<%8%g%s$K4^$^$l$k(B CGI $B%5%s%W%k%W%m%0%i%`(B anketo.cgi$B!"(B
        kansou.cgi$B!"$*$h$S(B order.cgi
        - $B%[!<%`%Z!<%8!&%S%k%@!<(B 11
        - $B%[!<%`%Z!<%8!&%S%k%@!<(B 10
        - $B%[!<%`%Z!<%8!&%S%k%@!<(B 10 $B%i%$%H(B
        - $B%[!<%`%Z!<%8!&%S%k%@!<(B V9
        - $B%[!<%`%Z!<%8!&%S%k%@!<(B V9 $B%i%$%H(B
        - $B%[!<%`%Z!<%8!&%S%k%@!<(B V8
        - $B%[!<%`%Z!<%8!&%S%k%@!<(B V8 $B%i%$%H(B
        - $B%[!<%`%Z!<%8!&%S%k%@!<(B V7
        - $B%[!<%`%Z!<%8!&%S%k%@!<(B V7 $B%i%$%H(B
        - $B%[!<%`%Z!<%8!&%S%k%@!<(B V6.5 with HotMedia
        - $B%[!<%`%Z!<%8!&%S%k%@!<(B V6.5 with HotMedia $B%i%$%H(B
        - $B%[!<%`%Z!<%8!&%S%k%@!<(B V6
        - $B%[!<%`%Z!<%8!&%S%k%@!<(B V6 $B%i%$%H(B
        - $B%[!<%`%Z!<%8!&%S%k%@!<(B 2001
        - $B%[!<%`%Z!<%8!&%S%k%@!<(B 2000
        - $B%[!<%`%Z!<%8!&%S%k%@!<(B V3
        - $B%[!<%`%Z!<%8!&%S%k%@!<(B V2 $B%P%j%e!<%Q%C%/(B

      $B$3$NLdBj$O!"F|K\(B IBM $B$,Ds6!$9$k=$@5%W%m%0%i%`$r%[!<%`%Z!<%8!&%S(B
      $B%k%@!<$KE,MQ$9$k$3$H$G2r7h$7$^$9!#$J$*!"0J2<$N>l9g$O3:Ev$9$k(B CGI 
      $B%W%m%0%i%`$r<jF0$G=$@5$9$k$3$H$G2r7h$7$^$9!#(B

      - $B3:Ev$9$k(B CGI $B%W%m%0%i%`$r4{$K(B Web $B%5!<%P$KG[CV$7$F$$$k>l9g(B
      - $B%[!<%`%Z!<%8!&%S%k%@!<(B V3 $B$*$h$S(B V2 $B%P%j%e!<%Q%C%/$r;HMQ$7$F$$(B
        $B$k>l9g(B

      $B>\:Y$K$D$$$F$O!"F|K\(B IBM $B$,Ds6!$9$k>pJs$r;2>H$7$F$/$@$5$$!#(B

    $B4XO"J8=q(B ($BF|K\8l(B)
      $BF|K\(B IBM
      $B%[!<%`%Z!<%8!&%S%k%@!<$N%5%s%W%k(BCGI$B$N@H<e@-(B
      http://www-06.ibm.com/jp/software/internet/hpb/security/hpbcgifix_20070514/index.html

      $BF|K\(B IBM
      $B%@%&%s%m!<%I(B $B=$@5%W%m%0%i%`(B HPBCGIFIX
      http://www-06.ibm.com/jp/software/internet/hpb/security/hpbcgifix_20070514/hpbcgifix.html#01

      $BF|K\(B IBM
      $B%[!<%`%Z!<%8!&%S%k%@!<$N%5%s%W%k(B CGI $B$N=$@5J}K!(B
      http://www-06.ibm.com/jp/software/internet/hpb/security/hpbcgifix_20070514/hpbcgifix.html#02

      $BFHN)9T@/K!?M(B $B>pJs=hM}?d?J5!9=(B $B%;%-%e%j%F%#%;%s%?!<(B
      JVN#81294906 $B!V%[!<%`%Z!<%8!&%S%k%@!<!WIUB0$N(B CGI $B%5%s%W%k%W%m%0%i%`$K$*$1$k(B OS $B%3%^%s%I!&%$%s%8%'%/%7%g%s$N@H<e@-(B
      http://www.ipa.go.jp/security/vuln/documents/2007/JVN_81294906.html

$B!Z(B3$B![(Blibpng $B$K@H<e@-(B

    $B>pJs8;(B
      US-CERT Vulnerability Note VU#684664
      libpng denial of service vulnerability
      http://www.kb.cert.org/vuls/id/684664

    $B35MW(B
      PNG (Portable Network Graphics) $B7A<0$N2hA|=hM}%i%$%V%i%j$G$"$k(B
      libpng $B$K$O@H<e@-$,$"$j$^$9!#7k2L$H$7$F!"1s3V$NBh;0<T$,:Y9)$7$?(B 
      PNG $B2hA|$r%f!<%6$K3+$+$;$k$3$H$G%5!<%S%91?MQK832(B (DoS) $B967b$r9T(B
      $B$&2DG=@-$,$"$j$^$9!#(B

      $BBP>]$H$J$k@=IJ$*$h$S%P!<%8%g%s$O0J2<$NDL$j$G$9!#(B

      - libpng-0.90 $B$+$i(B libpng-1.0.24 $B$^$G(B
      - libpng-1.2.0 $B$+$i(B libpng-1.2.16 $B$^$G(B 

      $B$3$NLdBj$O!";HMQ$7$F$$$k(B OS $B$N%Y%s%@$dG[I[85$,Ds6!$9$k=$@5:Q$_$N(B
      $B%P!<%8%g%s$K(B libpng $B$r99?7$9$k$3$H$G2r7h$7$^$9!#(B

      $B$J$*!"(Blibpng $B8x<0%5%$%H$N>pJs$K$h$k$H(B libpng-1.2.17 $B$*$h$S(B 
      libpng-1.0.25 $B$K$O%P%0$,4^$^$l$F$$$k$?$a!":G?7HG$K99?7$9$k$3$H$r(B
      $B?d>)$7$^$9!#>\:Y$K$D$$$F$O!"%Y%s%@$dG[I[85$,Ds6!$9$k>pJs$r;2>H$7(B
      $B$F$/$@$5$$!#(B

    $B4XO"J8=q(B ($BF|K\8l(B)
      Japan Vulnerability Notes JVNVU#684664
      libpng $B$K$*$1$k%5!<%S%91?MQK832(B (DoS) $B$N@H<e@-(B
      http://jvn.jp/cert/JVNVU%23684664/index.html

    $B4XO"J8=q(B ($B1Q8l(B)
      Libpng Security Advisory 15 May 2007
      http://nchc.dl.sourceforge.net/sourceforge/libpng/libpng-1.2.18-ADVISORY.txt

      libpng Home Page
      http://www.libpng.org/pub/png/libpng.html

      Red Hat Security Advisory RHSA-2007:0356-2
      Moderate: libpng security update
      http://rhn.redhat.com/errata/RHSA-2007-0356.html

$B!Z(B4$B![(BApache Tomcat $B$KJ#?t$N@H<e@-(B

    $B>pJs8;(B
      CIAC Bulletin R-243
      Tomcat Security Update
      http://www.ciac.org/ciac/bulletins/r-243.shtml

    $B35MW(B
      Apache Tomcat $B$K$O!"%/%m%9%5%$%H%9%/%j%W%F%#%s%0$r4^$`J#?t$N@H<e(B
      $B@-$,$"$j$^$9!#7k2L$H$7$F!"1s3V$NBh;0<T$,%f!<%6$N%V%i%&%6>e$GG$0U(B
      $B$N%9%/%j%W%H$r<B9T$9$k$J$I$N2DG=@-$,$"$j$^$9!#(B

      $B$3$NLdBj$O!";HMQ$7$F$$$k(B OS $B$N%Y%s%@$dG[I[85$,Ds6!$9$k=$@5:Q$_$N(B
      $B%P!<%8%g%s$K(B Apache Tomcat $B$r99?7$9$k$3$H$G2r7h$7$^$9!#>\:Y$K$D$$$F$O!"(B
      $B%Y%s%@$dG[I[85$,Ds6!$9$k>pJs$r;2>H$7$F$/$@$5$$!#(B

    $B4XO"J8=q(B ($B1Q8l(B)
      Apache Tomcat
      Apache Tomcat 4.x vulnerabilities
      http://tomcat.apache.org/security-4.html

      Apache Tomcat
      Apache Tomcat 5.x vulnerabilities
      http://tomcat.apache.org/security-5.html

      Apache Tomcat
      Apache Tomcat 6.x vulnerabilities
      http://tomcat.apache.org/security-6.html

      Red Hat Security Advisory RHSA-2007:0327-5
      Important: tomcat security update
      http://rhn.redhat.com/errata/RHSA-2007-0327.html

$B!Z(B5$B![(BBEA JRockit $B$KJ#?t$N@H<e@-(B

    $B>pJs8;(B
      BEA - Dev2Dev Security Advisory (BEA07-171.00)
      Non-trusted Applets may be able to exploit serialization condition to elevate privileges
      http://dev2dev.bea.com/pub/advisory/240

      BEA - Dev2Dev Security Advisory (BEA07-173.00)
      An Application started through Java Web Start may be able to elevate its privileges
      http://dev2dev.bea.com/pub/advisory/241

      BEA - Dev2Dev Security Advisory (BEA07-172.00)
      Buffer Overflow in processing GIF images
      http://dev2dev.bea.com/pub/advisory/242

      BEA - Dev2Dev Security Advisory (BEA07-174.00)
      Non-trusted Applets may be able to elevate privileges
      http://dev2dev.bea.com/pub/advisory/243

    $B35MW(B
      BEA $B$,Ds6!$9$k(B JRockit $B$K$O!"J#?t$N@H<e@-$,$"$j$^$9!#7k2L$H$7$F!"(B
      $B1s3V$NBh;0<T$,K\Mh<B9T$,5v2D$5$l$F$$$J$$%7%9%F%`%/%i%9$,<B9T$9$k(B
      $B$J$I$N2DG=@-$,$"$j$^$9!#(B

      $B$3$NLdBj$O!"(BJPCERT/CC REPORT 2007-05-09$B9f!Z(B3$B![$G>R2p$7$?!V(BJava
      Web Start $B$K8"8B>:3J$N@H<e@-!W$HF10l$N@H<e@-$r4^$s$G$$$^$9!#(B

      $BBP>]$H$J$k%P!<%8%g%s$O0J2<$NDL$j$G$9!#(B

      - BEA JRockit R26.0.0 1.4.2_07 $B$h$jA0$N%P!<%8%g%s(B
      - BEA JRockit R26.0.0 1.5.0_04 $B$h$jA0$N%P!<%8%g%s(B

      $B$J$*!"(BJRockit 7.0 SP6 RP1 JDK 1.3.1_20 $B$O$3$l$i$N@H<e@-$N1F6A$r(B
      $B<u$1$^$;$s!#(B

      $B$3$NLdBj$O!"(BBEA $B$,Ds6!$9$k=$@5:Q$_$N%P!<%8%g%s$K(B JRockit $B$r99?7(B
      $B$9$k$3$H$G2r7h$7$^$9!#(B

    $B4XO"J8=q(B ($BF|K\8l(B)
      JPCERT/CC REPORT 2007-05-09
      $B!Z(B3$B![(BJava Web Start $B$K8"8B>:3J$N@H<e@-(B
      http://www.jpcert.or.jp/wr/2007/wr071701.html#3

$B!Z(B6$B![(BCA $B@=IJ$KJ#?t$N@H<e@-(B

    $B>pJs8;(B
      US-CERT Vulnerability Note VU#680616
      Computer Associates eTrust AntiVirus Server buffer overflow
      http://www.kb.cert.org/vuls/id/680616

      US-CERT Vulnerability Note VU#788416
      Computer Associates AntiVirus InoTask buffer overflow vulnerability
      http://www.kb.cert.org/vuls/id/788416

      CIAC Bulletin R-241
      CA Anti-Virus for the Enterprise Securitiy Notice
      http://www.ciac.org/ciac/bulletins/r-241.shtml

    $B35MW(B
      CA Anti-Virus for the Enteprise$B!"(BCA Threat Manager $B$J$I$N(B CA $B@=(B
      $BIJ$K$O!"J#?t$N@H<e@-$,$"$j$^$9!#7k2L$H$7$F!"1s3V$NBh;0<T$,G$0U$N(B
      $B%3!<%I$r<B9T$7$?$j!"%5!<%S%91?MQK832(B (DoS) $B967b$r9T$C$?$j$9$k2D(B
      $BG=@-$,$"$j$^$9!#(B

      $BBP>]$H$J$k@=IJ$*$h$S%P!<%8%g%s$O0J2<$NDL$j$G$9!#(B

      - CA Anti-Virus for the Enterprise ($B5l(B eTrust Antivirus) r8
      - CA Threat Manager for the Enterprise
         ($B5l(B eTrust Integrated Threat Management) r8
      - CA Anti-Spyware for the Enterprise ($B5l(B eTrust PestPatrol) r8
      - CA Protection Suites r3

      $B$3$NLdBj$O!"@=IJ$N<+F0%3%s%F%s%D99?75!G=$rMQ$$$F=$@5:Q$_$N%P!<%8%g(B
      $B%s$K99?7$9$k$3$H$G2r7h$7$^$9!#>\:Y$K$D$$$F$O!"(BCA $B$,Ds6!$9$k>pJs(B
      $B$r;2>H$7$F$/$@$5$$!#(B

    $B4XO"J8=q(B ($B1Q8l(B)
      CA Security Advisor
      CA Anti-Virus for the Enterprise, CA Threat Manager, and CA Anti-Spyware for the Enterprise Console Login and File Mapping Vulnerabilities
      http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=139626

      CA SupportConnect
      CA Anti-Virus for the Enterprise, CA Threat Manager for the Enterprise, CA Anti-Spyware for the Enterprise Security Notice
      http://supportconnectw.ca.com/public/antivirus/infodocs/caav-secnotice050807.asp

$B!Z(B7$B![(BAdvance-Flow $B$K%/%m%9%5%$%H%9%/%j%W%F%#%s%0$N@H<e@-(B

    $B>pJs8;(B
      Japan Vulnerability Notes JVN#92832583
      Advance-Flow $B$K$*$1$k%/%m%9%5%$%H%9%/%j%W%F%#%s%0$N@H<e@-(B
      http://jvn.jp/jp/JVN%2392832583/index.html

    $B35MW(B
      $B3t<02q<R(B OSK $B$NDs6!$9$kEE;R>5G'%7%9%F%`(B Advance-Flow $B$K$O!"%/%m(B
      $B%9%5%$%H%9%/%j%W%F%#%s%0$N@H<e@-$,$"$j$^$9!#7k2L$H$7$F!"1s3V$NBh(B
      $B;0<T$,%f!<%6$N%V%i%&%6>e$GG$0U$N%9%/%j%W%H$r<B9T$9$k2DG=@-$,$"$j(B
      $B$^$9!#(B

      $BBP>]$H$J$k@=IJ$*$h$S%P!<%8%g%s$O0J2<$NDL$j$G$9!#(B

      - Advance-Flow Ver 4.41 $B$*$h$S$=$l0JA0(B
      - Advance-Flow $B%U%)!<%`=8(B Ver 4.41 $B$*$h$S$=$l0JA0(B 

      $B$3$NLdBj$O!"3t<02q<R(B OSK $B$,Ds6!$9$k0J2<$N=$@5:Q$_$N%P!<%8%g%s$K3:(B
      $BEv$9$k@=IJ$r99?7$9$k$3$H$G2r7h$7$^$9!#(B

      - Advance-Flow Ver 4.42 $B0J9_(B
      - Advance-Flow $B%U%)!<%`=8(B Ver 4.42 $B0J9_(B

    $B4XO"J8=q(B ($BF|K\8l(B)
      $B3t<02q<R(B OSK - $B@H<e@-$K4X$9$k>pJs8x3+(B
      JVN#92832583 $B!Z%/%m%9%5%$%H%9%/%j%W%F%#%s%0![?=@A%U%)!<%`$NF~NO0h$KFCDj$NJ8;zNs$rF~NO$9$k$3$H$G%9%/%j%W%H$r<B9T2DG=$K$9$k(B
      http://www.evalue.jp/support/security/IPA_92832583.asp

      $BFHN)9T@/K!?M(B $B>pJs=hM}?d?J5!9=(B $B%;%-%e%j%F%#%;%s%?!<(B
      JVN#92832583 $B!V(BAdvance-Flow$B!W$K$*$1$k%/%m%9%5%$%H!&%9%/%j%W%F%#%s%0$N@H<e@-(B
      http://www.ipa.go.jp/security/vuln/documents/2007/JVN_92832583.html


$B!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=(B
$B"#:#=5$N$R$H$/$A%a%b(B
$B!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=(B

$B!{@8BNG'>Z(B ($B%P%$%*%a%H%j%/%9G'>Z(B) $B$=$N(B1

      $B@8BNG'>Z$O!"=>Mh$N(B ID/$B%Q%9%o!<%I$rMxMQ$7$?!V$=$N?M$N$_$,CN$k>pJs(B
      $B$K4p$E$/G'>Z(B($BCN<1G'>Z(B)$B!W$d!"%9%^!<%H%+!<%I$d(B USB $B%H!<%/%s$rMxMQ(B
      $B$7$?!V$=$N?M$N$_$,;}$DJ*$K4p$E$/G'>Z(B($B=jM-J*G'>Z(B)$B!W$H$O0[$J$j!"K\(B
      $B?M<+?H$N@8BNE*FCD'$rMxMQ$9$kG'>ZJ}<0$G$9!#$=$N$?$a!"G'>Z>pJs$rL5(B
      $B$/$7$?$jEp$^$l$?$j$9$k2DG=@-$,Dc$/!"MxMQ<T$K$H$C$FMxJX@-$N9b$$G'(B
      $B>ZJ}<0$H$5$l$F$$$^$9!#(B

      $B7HBSEEOC$d(B PC $B$J$I$r;O$a!"6bM;5!4X$N(B ATM $B$J$I$G$b@8BNG'>Z5;=Q$N(B
      $BMxMQ$,9-$,$C$F$$$^$9!#(B

    $B;29MJ88%(B ($BF|K\8l(B)
      $BFHN)9T@/K!?M(B $B>pJs=hM}?d?J5!9=(B $B%;%-%e%j%F%#%;%s%?!<(B
      $B%P%$%*%a%H%j%/%9I>2A$K4X$9$kD4::(B
      http://www.ipa.go.jp/security/fy16/reports/biometrics/index.html


$B!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=(B
$B"#(BJPCERT/CC $B$+$i$N$*4j$$(B
$B!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=(B

$B!~K\%l%]!<%H$K4X$9$k$*Ld$$9g$o$;$O(B editor@jpcert.or.jp $B08$K$*4j$$CW$7$^(B
  $B$9!#$?$@$7!"(BJPCERT/CC $B$G$O!"Ds6!$9$k>pJs$K$D$$$F6qBNE*$JFbMF$=$N$b$N$K(B
  $B$D$$$F$N$4<ALd$K$O$*Ez$($G$-$J$$>l9g$b$"$j$^$9!#$^$?%P%C%/%J%s%P!<$O!"(B
  $B0J2<$N(B URL $B$+$i$4MxMQ$$$?$@$1$^$9!#(B

        http://www.jpcert.or.jp/wr/

$B!~K\%a!<%j%s%0%j%9%H$N9XFI?=9~$d9XFIDd;_!"$^$?EPO?$7$?EE;R%a!<%k%"%I%l%9(B
  $B$NJQ99$J$I$K$D$-$^$7$F$O!"0J2<$N(B URL $B$r$4;2>H$/$@$5$$!#(B

        http://www.jpcert.or.jp/announce.html

$B!~(BJPCERT/CC $B$X$N%;%-%e%j%F%#%$%s%7%G%s%H$NJs9pJ}K!$K$D$$$F$O0J2<$N(B URL
  $B$r$4;2>H$/$@$5$$!#(B

        http://www.jpcert.or.jp/form/

$B0J>e!#(B
__________

2007 (C) JPCERT/CC
-----BEGIN PGP SIGNATURE-----

iQCVAwUBRlOa6Ix1ay4slNTtAQE9nQP/fdWKkIRrZaOA8dpES2sL9m0lYHikoQWJ
gfuBaAssIL53qRYFX+BkZ670C/gklW3RP6olQUfBJxvxWruCBOF6kMiSKtWrbXcF
/IEgrkndWAPYpxbVinicubqjv7d0oCQtt2LdAzcaNNvxT5pUnLhBRc7expCW7d/6
++eXZSqVABQ=
=N93c
-----END PGP SIGNATURE-----