-----BEGIN PGP SIGNED MESSAGE-----

                                                         JPCERT-WR-2007-2301
                                                                   JPCERT/CC
                                                                  2007-06-20

                 <<< JPCERT/CC REPORT 2007-06-20 >>>

$B!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=(B
$B"#(B06/10($BF|(B)$B!A(B06/16($BEZ(B) $B$N%;%-%e%j%F%#4XO">pJs(B
$B!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=(B

== $BL\(B  $B<!(B ==================================================================

$B!Z(B1$B![(B2007$BG/(B6$B7n(B Microsoft $B%;%-%e%j%F%#>pJs(B ($B6[5^(B4$B7o4^(B) $B$K$D$$$F(B
$B!Z(B2$B![(BIPv6 Type 0 $B%k!<%F%#%s%0%X%C%@$N;EMM$K@H<e@-(B
$B!Z(B3$B![(BYahoo!$B%a%C%;%s%8%c!<$KJ#?t$N@H<e@-(B
$B!Z(B4$B![(Blibexif $B$K@0?t%*!<%P!<%U%m!<$N@H<e@-(B
$B!Z(B5$B![(BApache Tomcat $B$KJ#?t$N%/%m%9%5%$%H%9%/%j%W%F%#%s%0$N@H<e@-(B
$B!Z(B6$B![(BOpenOffice.org $B$K%R!<%W%*!<%P!<%U%m!<$N@H<e@-(B
$B!Z(B7$B![(BdotProject $B$K%/%m%9%5%$%H%9%/%j%W%F%#%s%0$N@H<e@-(B
$B!Z(B8$B![!VAH?%Fb(B CSIRT $B9=C[;Y1g%^%F%j%"%k!W8x3+$K$D$$$F(B
$B!Z(B9$B![!V%0%C%I!&%W%i%/%F%#%9!&%,%$%I!!%W%m%;%9!&@)8f$H(B SCADA $B%;%-%e%j%F%#!W8x3+$K$D$$$F(B
$B!Z:#=5$N$R$H$/$A%a%b![%=!<%7%c%k%(%s%8%K%"%j%s%0(B

  $B"(>R2p$9$k%;%-%e%j%F%#4XO">pJs$NA*Dj4p=`$O0J2<$N%Z!<%8$r$4Mw$/$@$5$$!#(B
        http://www.jpcert.or.jp/wr/

  $B"((BHTML $BHG$*$h$S(B XML $BHG$O0J2<$N%Z!<%8$r$4Mw$/$@$5$$!#(B
        http://www.jpcert.or.jp/wr/2007/wr072301.html
        http://www.jpcert.or.jp/wr/2007/wr072301.xml
============================================================================


$B!Z(B1$B![(B2007$BG/(B6$B7n(B Microsoft $B%;%-%e%j%F%#>pJs(B ($B6[5^(B4$B7o4^(B) $B$K$D$$$F(B

    $B>pJs8;(B
      US-CERT Technical Cyber Security Alert TA07-163A
      Microsoft Updates for Multiple Vulnerabilities
      http://www.us-cert.gov/cas/techalerts/TA07-163A.html

      US-CERT Cyber Security Alert SA07-163A
      Microsoft Updates for Multiple Vulnerabilities
      http://www.us-cert.gov/cas/alerts/SA07-163A.html

      US-CERT Vulnerability Notes Database
      Search Results [ms07-jun] ($BA4(B5$B7o!&(B2007$BG/(B6$B7n(B19$BF|8=:_(B)
      http://www.kb.cert.org/vuls/byid?searchview&query=ms07-jun

      CIAC Bulletin R-268
      Vulnerability in Win 32 API (935839)
      http://www.ciac.org/ciac/bulletins/r-268.shtml

      CIAC Bulletin R-269
      Cumulative Security Update for Outlook Express and Windows Mail (929123)
      http://www.ciac.org/ciac/bulletins/r-269.shtml

      CIAC Bulletin R-270
      Cumulative Security Update for Internet Explorer (933566)
      http://www.ciac.org/ciac/bulletins/r-270.shtml

      CIAC Bulletin R-271
      Vulnerability in the Windows Schannel Security Package (935840)
      http://www.ciac.org/ciac/bulletins/r-271.shtml

      CIAC Bulletin R-272
      Vulnerabilities in Microsoft Visio (927051)
      http://www.ciac.org/ciac/bulletins/r-272.shtml

      CIAC Bulletin R-273
      Vulnerability in Windows Vista (931213)
      http://www.ciac.org/ciac/bulletins/r-273.shtml

    $B35MW(B
      Microsoft $B@=IJ$K$O!"J#?t$N@H<e@-$,$"$j$^$9!#7k2L$H$7$F!"1s3V$NBh(B
      $B;0<T$,G$0U$N%3!<%I$r<B9T$9$k$J$I$N2DG=@-$,$"$j$^$9!#(B

      $B>\:Y$K$D$$$F$O!"(BMicrosoft $B$,Ds6!$9$k>pJs$r;2>H$7$F$/$@$5$$!#(B

      $B$3$NLdBj$O!"(BMicrosoft Update$B!"(BWindows Update$B!"(BOffice Update $B$J$I(B
      $B$rMQ$$$F!"%;%-%e%j%F%#99?7%W%m%0%i%`$rE,MQ$9$k$3$H$G2r7h$7$^$9!#(B

    $B4XO"J8=q(B ($BF|K\8l(B)
      2007 $BG/(B 6 $B7n$N%;%-%e%j%F%#>pJs(B
      http://www.microsoft.com/japan/technet/security/bulletin/ms07-jun.mspx

      $B%^%$%/%m%=%U%H(B $B%;%-%e%j%F%#>pJs(B MS07-030 - $B=EMW(B
      Microsoft Visio $B$N@H<e@-$K$h$j!"%j%b!<%H$G%3!<%I$,<B9T$5$l$k(B (927051)
      http://www.microsoft.com/japan/technet/security/bulletin/ms07-030.mspx

      $B%^%$%/%m%=%U%H(B $B%;%-%e%j%F%#>pJs(B MS07-031 - $B6[5^(B
      Microsoft Windows Schannel $B$N%;%-%e%j%F%#(B $B%Q%C%1!<%8$N@H<e@-$K$h$j!"%j%b!<%H$G%3!<%I$,<B9T$5$l$k(B (935840)
      http://www.microsoft.com/japan/technet/security/bulletin/ms07-031.mspx

      $B%^%$%/%m%=%U%H(B $B%;%-%e%j%F%#>pJs(B MS07-032 - $B7Y9p(B
      Windows Vista $B$N@H<e@-$K$h$j!">pJsO3$($$$,5/$3$k(B (931213)
      http://www.microsoft.com/japan/technet/security/bulletin/ms07-032.mspx

      $B%^%$%/%m%=%U%H(B $B%;%-%e%j%F%#>pJs(B MS07-033 - $B6[5^(B
      Internet Explorer $BMQ$NN_@QE*$J%;%-%e%j%F%#99?7%W%m%0%i%`(B (933566)
      http://www.microsoft.com/japan/technet/security/bulletin/ms07-033.mspx

      $B%^%$%/%m%=%U%H(B $B%;%-%e%j%F%#>pJs(B MS07-034 - $B6[5^(B
      Outlook Express $B$*$h$S(B Windows $B%a!<%kMQ$NN_@QE*$J%;%-%e%j%F%#99?7%W%m%0%i%`(B (929123)
      http://www.microsoft.com/japan/technet/security/bulletin/ms07-034.mspx

      $B%^%$%/%m%=%U%H(B $B%;%-%e%j%F%#>pJs(B MS07-035 - $B6[5^(B
      Win32 API $B$N@H<e@-$K$h$j!"%3!<%I$,<B9T$5$l$k(B (935839)
      http://www.microsoft.com/japan/technet/security/bulletin/ms07-035.mspx

      Japan Vulnerability Notes JVNTA07-163A
      Microsoft $B@=IJ$K$*$1$kJ#?t$N@H<e@-(B
      http://jvn.jp/cert/JVNTA07-163A/index.html

      JPCERT/CC Alert 2007-06-13
      2007$BG/(B6$B7n(B Microsoft $B%;%-%e%j%F%#>pJs(B ($B6[5^(B 4$B7o4^(B) $B$K4X$9$kCm0U4-5/(B
      http://www.jpcert.or.jp/at/2007/at070014.txt

      @police
      $B%^%$%/%m%=%U%H<R$N%;%-%e%j%F%#=$@5%W%m%0%i%`$K$D$$$F(B(MS07-030,031,032,033,034,035)(6/13)
      http://www.cyberpolice.go.jp/important/2007/20070613_064528.html

$B!Z(B2$B![(BIPv6 Type 0 $B%k!<%F%#%s%0%X%C%@$N;EMM$K@H<e@-(B

    $B>pJs8;(B
      US-CERT Vulnerability Note VU#267289
      IPv6 Type 0 Route Headers allow sender to control routing
      http://www.kb.cert.org/vuls/id/267289

    $B35MW(B
      IPv6 Type 0 $B%k!<%F%#%s%0%X%C%@$N;EMM$K$O@H<e@-$,$"$j$^$9!#7k2L$H(B
      $B$7$F!"1s3V$NBh;0<T$,%5!<%S%91?MQK832(B (DoS) $B967b$r9T$&2DG=@-$,$"(B
      $B$j$^$9!#(B

      2007$BG/(B6$B7n(B19$BF|8=:_!"$3$NLdBj$r2r7h$9$k$?$a!"(BIETF $B$G(B IPv6 Type 0 
      $B%k!<%F%#%s%0%X%C%@$N;EMMJQ99$K$D$$$F5DO@$5$l$F$$$^$9!#(B

      $B$3$NLdBj$N2sHr:v$H$7$F$O!"(BIPv6 $B5!G=$,M-8z$J%[%9%H$*$h$S%k!<%?$G!"(B
      IPv6 Type 0 $B%k!<%F%#%s%0%X%C%@$N=hM}$rL58z$K@_Dj$9$kJ}K!$,$"$j$^(B
      $B$9!#>\:Y$K$D$$$F$O!"3F%Y%s%@$,Ds6!$9$k>pJs$r;2>H$7$F$/$@$5$$!#(B

    $B4XO"J8=q(B ($BF|K\8l(B)
      Japan Vulnerability Notes JVNVU#267289
      IPv6 Type0 $B%k!<%F%#%s%0%X%C%@$NLdBj(B
      http://jvn.jp/cert/JVNVU%23267289/index.html

      IIJ SEIL$B%7%j!<%:(B $B%;%-%e%j%F%#(B/$B@H<e@-(B $B>pJs(B
      IPv6$B%W%m%H%3%k;EMM$N@H<e@-$N(BSEIL$B%7%j!<%:$X$N1F6A$K$D$$$F(B
      http://www.seil.jp/seilseries/news/snote/snote_200705_01.html

      NEC$B@=IJ%;%-%e%j%F%#>pJs(B
      IPv6 Type 0 $B%k!<%F%#%s%0%X%C%@$K4X$9$kLdBj(B
      http://www.nec.co.jp/psirt/secinfo/nv07-001.html

    $B4XO"J8=q(B ($B1Q8l(B)
      IETF
      Deprecation of Type 0 Routing Headers in IPv6
      http://www.ietf.org/internet-drafts/draft-ietf-ipv6-deprecate-rh0-00.txt

      IETF
      IPv6 Type 0 Routing Header Processing
      http://www.ietf.org/internet-drafts/draft-savola-ipv6-rtheader-00.txt

      Red Hat Security Advisory RHSA-2007:0347-2
      Important: kernel security and bug fix update
      http://rhn.redhat.com/errata/RHSA-2007-0347.html

      Cisco Security Advisory 72372
      IPv6 Routing Header Vulnerability
      http://www.cisco.com/en/US/products/products_security_advisory09186a00807cb0fd.shtml

      Cisco Applied Intelligence Response 81722
      Identifying and Mitigating Exploitation of the IPv6 Routing Header Vulnerability
      http://www.cisco.com/en/US/products/products_security_response09186a00807cb0df.html

      Sun Security Community SECURIY BLOG
      IPv6 Routing Header Issues
      http://blogs.sun.com/security/entry/ipv6_routing_header_issues

      The FreeBSD Project Security Advisory FreeBSD-SA-07:03.ipv6
      IPv6 Routing Header 0 is dangerous
      http://security.freebsd.org/advisories/FreeBSD-SA-07:03.ipv6.asc

      OpenBSD 4.0 errata
      012: SECURITY FIX: April 23, 2007
      http://openbsd.org/errata40.html#012_route6

      OpenBSD 3.9 errata
      022: SECURITY FIX: April 23, 2007
      http://openbsd.org/errata39.html#022_route6

      Linux
      Linux Kernel ChangeLog 2.6.20.9
      http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.20.9

      Linux
      Linux Kernel ChangeLog 2.6.21
      http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.21

$B!Z(B3$B![(BYahoo!$B%a%C%;%s%8%c!<$KJ#?t$N@H<e@-(B

    $B>pJs8;(B
      US-CERT Vulnerability Note VU#932217
      Yahoo! Webcam view utilities ActiveX control vulnerable to arbitrary code execution
      http://www.kb.cert.org/vuls/id/932217

      US-CERT Vulnerability Note VU#949817
      Yahoo! Webcam image upload ActiveX control vulnerable to arbitrary code execution
      http://www.kb.cert.org/vuls/id/949817

    $B35MW(B
      Yahoo!$B%a%C%;%s%8%c!<$K4^$^$l$kJ#?t$N(B ActiveX $B%3%s%H%m!<%k$K$O!"(B
      $B%P%C%U%!%*!<%P!<%U%m!<$N@H<e@-$,$"$j$^$9!#7k2L$H$7$F!"1s3V$NBh;0(B
      $B<T$,:Y9)$7$?(B HTML $BJ8=q$r%f!<%6$K1\Mw$5$;$k$3$H$GG$0U$N%3!<%I$r<B(B
      $B9T$7$?$j!"%5!<%S%91?MQK832(B (DoS) $B967b$r9T$C$?$j$9$k2DG=@-$,$"$j(B
      $B$^$9!#(B

      $BBP>]$H$J$k%P!<%8%g%s$O!"0J2<$N$H$*$j$G$9!#(B

      - 2007$BG/(B6$B7n(B8$BF|0JA0$K%@%&%s%m!<%I$5$l$?(B Windows $B%W%i%C%H%U%)!<%`(B
        $B8~$1$N(B Yahoo!$B%a%C%;%s%8%c!<(B

      $B$3$NLdBj$O!"(BYahoo $B$,Ds6!$9$k=$@5:Q$_$N%P!<%8%g%s$K(B Yahoo!$B%a%C%;(B
      $B%s%8%c!<$r99?7$9$k$3$H$G2r7h$7$^$9!#(B

    $B4XO"J8=q(B ($BF|K\8l(B)
      Yahoo!$B%a%C%;%s%8%c!<(B
      $B%"%C%W%G!<%H$N$*CN$i$;(B
      http://messenger.yahoo.co.jp/notice/security070608.html

      Japan Vulnerability Notes JVNVU#949817
      Yahoo! Messenger $B$N(B Yahoo! Webcam image upload ActiveX $B%3%s%H%m!<%k$K%P%C%U%!%*!<%P!<%U%m!<$N@H<e@-(B
      http://jvn.jp/cert/JVNVU%23949817/index.html

      Japan Vulnerability Notes JVNVU#932217
      Yahoo! Messenger $B$N(B Yahoo! Webcam view utilities ActiveX $B%3%s%H%m!<%k$K%P%C%U%!%*!<%P!<%U%m!<$N@H<e@-(B
      http://jvn.jp/cert/JVNVU%23932217/index.html

$B!Z(B4$B![(Blibexif $B$K@0?t%*!<%P!<%U%m!<$N@H<e@-(B

    $B>pJs8;(B
      Common Vulnerabiliities and Exposures
      CVE-2006-4168
      http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4168

    $B35MW(B
      libexif $B$K$O!"@0?t%*!<%P!<%U%m!<$N@H<e@-$,$"$j$^$9!#7k2L$H$7$F!"(B
      $B1s3V$NBh;0<T$,:Y9)$7$?2hA|%U%!%$%k$r%f!<%6$K3+$+$;$k$3$H$GG$0U$N(B
      $B%3!<%I$r<B9T$9$k2DG=@-$,$"$j$^$9!#(B

      $BBP>]$H$J$k%P!<%8%g%s$O0J2<$NDL$j$G$9!#(B

      - libexif 0.6.16 $B$h$jA0$N%P!<%8%g%s(B

      $B$3$NLdBj$O!";HMQ$7$F$$$k(B OS $B$N%Y%s%@$dG[I[85$,Ds6!$9$k=$@5:Q$_$N(B
      $B%P!<%8%g%s$K(B libexif $B$r99?7$9$k$3$H$G2r7h$7$^$9!#(B

    $B4XO"J8=q(B ($B1Q8l(B)
      The libexif C EXIF library
      http://libexif.sourceforge.net/

$B!Z(B5$B![(BApache Tomcat $B$KJ#?t$N%/%m%9%5%$%H%9%/%j%W%F%#%s%0$N@H<e@-(B

    $B>pJs8;(B
      Japan Vulnerability Notes JVN#07100457
      Apache Tomcat $B$K$*$1$k%/%m%9%5%$%H%9%/%j%W%F%#%s%0$N@H<e@-(B
      http://jvn.jp/jp/JVN%2307100457/index.html

      Japan Vulnerability Notes JVN#64851600
      Apache Tomcat $BIUB0$N%5%s%W%k%W%m%0%i%`$K$*$1$k%/%m%9%5%$%H%9%/%j%W%F%#%s%0$N@H<e@-(B
      http://jvn.jp/jp/JVN%2364851600/index.html

    $B35MW(B
      Apache Tomcat $B$N(B Web Application Manager $B$*$h$SIUB0$N%5%s%W%k%W(B
      $B%m%0%i%`(B jsp-examples $B$K$O!"J#?t$N%/%m%9%5%$%H%9%/%j%W%F%#%s%0$N(B
      $B@H<e@-$,$"$j$^$9!#7k2L$H$7$F!"1s3V$NBh;0<T$,%f!<%6$N%V%i%&%6>e$G(B
      $BG$0U$N%9%/%j%W%H$r<B9T$9$k2DG=@-$,$"$j$^$9!#(B

      $BBP>]$H$J$k%P!<%8%g%s$O0J2<$N$H$*$j$G$9!#(B

      - Apache Tomcat 4.0.0 $B$+$i(B 4.0.6
      - Apache Tomcat 4.1.0 $B$+$i(B 4.1.36
      - Apache Tomcat 5.0.0 $B$+$i(B 5.0.30
      - Apache Tomcat 5.5.0 $B$+$i(B 5.5.24
      - Apache Tomcat 6.0.0 $B$+$i(B 6.0.13 

      2007$BG/(B6$B7n(B19$BF|8=:_!"$3$NLdBj$KBP$9$k=$@5%W%m%0%i%`$ODs6!$5$l$F$$(B
      $B$^$;$s!#2sHr:v$J$I>\:Y$K$D$$$F$O!"%Y%s%@$dG[I[85$,Ds6!$9$k>pJs$r(B
      $B;2>H$7$F$/$@$5$$!#(B

    $B4XO"J8=q(B ($BF|K\8l(B)
      $BFHN)9T@/K!?M(B $B>pJs=hM}?d?J5!9=(B $B%;%-%e%j%F%#%;%s%?!<(B
      JVN#07100457 $B!V(BApache Tomcat$B!W$K$*$1$k%/%m%9%5%$%H!&%9%/%j%W%F%#%s%0$N@H<e@-(B
      http://www.ipa.go.jp/security/vuln/documents/2007/JVN_07100457.html

      $BFHN)9T@/K!?M(B $B>pJs=hM}?d?J5!9=(B $B%;%-%e%j%F%#%;%s%?!<(B
      JVN#64851600 $B!V(BApache Tomcat$B!WIUB0$N%5%s%W%k%W%m%0%i%`$K$*$1$k%/%m%9%5%$%H!&%9%/%j%W%F%#%s%0$N@H<e@-(B
      http://www.ipa.go.jp/security/vuln/documents/2007/JVN_64851600.html

    $B4XO"J8=q(B ($B1Q8l(B)
      Apache Tomcat
      Apache Tomcat 4.x vulnerabilities
      http://tomcat.apache.org/security-4.html

      Apache Tomcat
      Apache Tomcat 5.x vulnerabilities
      http://tomcat.apache.org/security-5.html

      Apache Tomcat
      Apache Tomcat 6.x vulnerabilities
      http://tomcat.apache.org/security-6.html

$B!Z(B6$B![(BOpenOffice.org $B$K%R!<%W%*!<%P!<%U%m!<$N@H<e@-(B

    $B>pJs8;(B
      CIAC Bulletin R-275
      OpenOffice.org Heap Overflow
      http://www.ciac.org/ciac/bulletins/r-275.shtml

    $B35MW(B
      OpenOffice.org $B$K$O!"%R!<%W%*!<%P!<%U%m!<$N@H<e@-$,$"$j$^$9!#7k(B
      $B2L$H$7$F!"Bh;0<T$,:Y9)$7$?(B RTF $BJ8=q$r%f!<%6$K3+$+$;$k$3$H$GG$0U(B
      $B$N%3!<%I$r<B9T$9$k2DG=@-$,$"$j$^$9!#(B

      $BBP>]$H$J$k%P!<%8%g%s$O0J2<$NDL$j$G$9!#(B

      - OpenOffice.org 2.2.1 $B$h$jA0$N%P!<%8%g%s(B

      $B$3$NLdBj$O!";HMQ$7$F$$$k(B OS $B$N%Y%s%@$dG[I[85$,Ds6!$9$k=$@5:Q$_$N(B
      $B%P!<%8%g%s$K(B OpenOffice.org $B$r99?7$9$k$3$H$G2r7h$7$^$9!#$J$*!"(B
      2007$BG/(B6$B7n(B19$BF|8=:_!"F|K\8lHG$N=$@5:Q$_$N%P!<%8%g%s$O8x3+$5$l$F$$(B
      $B$^$;$s!#>\:Y$K$D$$$F$O!"%Y%s%@$dG[I[85$,Ds6!$9$k>pJs$r;2>H$7$F$/(B
      $B$@$5$$!#(B

    $B4XO"J8=q(B ($B1Q8l(B)
      OpenOffice.org Security Bulletin
      Manipulated RTF files can lead to heap overflows and arbitrary code execution
      http://www.openoffice.org/security/CVE-2007-0245.html

      Red Hat Security Advisory RHSA-2007:0406-5
      Important: openoffice.org security update
      http://rhn.redhat.com/errata/RHSA-2007-0406.html

      Debian Security Advisory DSA-1307-1
      openoffice.org -- heap overflow
      http://www.debian.org/security/2007/dsa-1307

$B!Z(B7$B![(BdotProject $B$K%/%m%9%5%$%H%9%/%j%W%F%#%s%0$N@H<e@-(B

    $B>pJs8;(B
      Japan Vulnerability Notes JVN#63602912
      dotProject $B$K$*$1$k%/%m%9%5%$%H%9%/%j%W%F%#%s%0$N@H<e@-(B
      http://jvn.jp/jp/JVN%2363602912/index.html

    $B35MW(B
      $B%W%m%8%'%/%H4IM}%D!<%k$G$"$k(B dotProject $B$K$O!"%/%m%9%5%$%H%9%/%j(B
      $B%W%F%#%s%0$N@H<e@-$,$"$j$^$9!#7k2L$H$7$F!"1s3V$NBh;0<T$,%f!<%6$N(B
      $B%V%i%&%6>e$GG$0U$N%9%/%j%W%H$r<B9T$7$?$j!"%;%C%7%g%s!&%O%$%8%c%C(B
      $B%/$r9T$C$?$j$9$k2DG=@-$,$"$j$^$9!#(B

      $BBP>]$H$J$k%P!<%8%g%s$O0J2<$NDL$j$G$9!#(B

      - dotProject 2.0.4 $B$*$h$S$=$l0JA0$N%P!<%8%g%s(B

      $B$3$NLdBj$O!"G[I[85$,Ds6!$9$k=$@5:Q$_$N%P!<%8%g%s(B 2.1 RC2 $B$K(B
      dotProject $B$r99?7$9$k$3$H$G2r7h$7$^$9!#(B

    $B4XO"J8=q(B ($BF|K\8l(B)
      $BFHN)9T@/K!?M(B $B>pJs=hM}?d?J5!9=(B $B%;%-%e%j%F%#%;%s%?!<(B
      JVN#63602912 $B!V(BdotProject$B!W$K$*$1$k%/%m%9%5%$%H!&%9%/%j%W%F%#%s%0$N@H<e@-(B
      http://www.ipa.go.jp/security/vuln/documents/2007/JVN_63602912.html

    $B4XO"J8=q(B ($B1Q8l(B)
      dotProject.net
      dotProject 2.1.0 rc2 Released 21st May
      http://www.dotproject.net/index.php?name=News&file=article&sid=135

      dotProject.net
      Release Notes - 2.1.0 - rc2
      http://docs.dotproject.net/index.php/Release_Notes_-_2.1.0_-_rc2

$B!Z(B8$B![!VAH?%Fb(B CSIRT $B9=C[;Y1g%^%F%j%"%k!W8x3+$K$D$$$F(B

    $B>pJs8;(B
      JPCERT Coordination Center
      $BAH?%Fb(B CSIRT $B9=C[;Y1g%^%F%j%"%k(B
      http://www.jpcert.or.jp/csirt_material/

    $B35MW(B
      JPCERT/CC $B$O(B 2007$BG/(B6$B7n(B14$BF|!"AH?%E*$J%$%s%7%G%s%HBP1~BN@)$G$"$k(B
      $B!VAH?%Fb(B CSIRT$B!W$N9=C[$r;Y1g$9$kL\E*$G!VAH?%Fb(B CSIRT $B9=C[;Y1g%^(B
      $B%F%j%"%k!W$r8x3+$7$^$7$?!#(B

      $B$3$N%^%F%j%"%k$G$O!"!VG'CN!W$GAH?%Fb(B CSIRT $B$NI,MW@-$rGD0.$7!"(B
      $B!VM}2r!W$GA4BNE*$J%$%a!<%8$r$D$+$_!"!V<BA)!W$G<B:]$K9=C[3hF0$r9T(B
      $B$J$($k$h$&$K(B 3$B$D$N%+%F%4%j$G9=@.$7$F$$$^$9!#(B

$B!Z(B9$B![!V%0%C%I!&%W%i%/%F%#%9!&%,%$%I!!%W%m%;%9!&@)8f$H(B SCADA $B%;%-%e%j%F%#!W8x3+$K$D$$$F(B

    $B>pJs8;(B
      JPCERT Coordination Center
      $B%0%C%I!&%W%i%/%F%#%9!&%,%$%I!!%W%m%;%9!&@)8f$H(B SCADA $B%;%-%e%j%F%#(B
      http://www.jpcert.or.jp/research/index.html#scada

    $B35MW(B
      JPCERT/CC $B$O(B 2007$BG/(B6$B7n(B14$BF|!"@)8f7O%7%9%F%`$N3+H/!&@_7W$J$i$S$K%f!<(B
      $B%6!<$,(B SCADA $B$r;HMQ$9$k$K$"$?$C$F%;%-%e%j%F%#MW7o$H;EMM$N%,%$%I(B
      $B$H$J$j!"$^$?!"@)8f7O%7%9%F%`3+H/<T$,%*!<%W%s7O%7%9%F%`$r<h$j9~$b(B
      $B$&$H$9$k>l9g$N<j0z$-$H$b$J$k!V%0%C%I!&%W%i%/%F%#%9!&%,%$%I!!%W%m(B
      $B%;%9!&@)8f$H(B SCADA $B%;%-%e%j%F%#!W$r8x3+$7$^$7$?!#(B


$B!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=(B
$B"#:#=5$N$R$H$/$A%a%b(B
$B!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=(B

$B!{%=!<%7%c%k%(%s%8%K%"%j%s%0(B

      $B%=!<%7%c%k%(%s%8%K%"%j%s%0$H$O!"%3%s%T%e!<%?$K?/F~$9$k$?$a$J$I$K!"(B
      $B?M$N?4M}E*!&<R2qE*$J<eE@$dLUE@$r;HMQ$9$k<jK!$G$9!#(B

      $BEEOC$d%a!<%k$G!"4k6H$N=>6H0w$KBP$7$FF1N=$d>pJs%7%9%F%`4IM}<T$J$I(B
      $B$N4X78<T$rL>>h$j!"(BID $B$d%Q%9%o!<%I$r:><h$9$k!V$J$j$9$^$7!W$d!";v(B
      $BL3=j$NGQ4~J*$+$i>pJs$r:><h$9$k!V$4$_$"$5$j!W$J$I$,BeI=E*$G$9!#(B

      $B%=!<%7%c%k%(%s%8%K%"%j%s%0$O8E$/$+$i$"$k<jK!$G$9$,!":G6a$G$b!"FC(B
      $BDj$N4k6H$KBP$7$F<RFb$N4X78<T$rAu$C$?%&%$%k%9IU$-%a!<%k$rAw?.$9$k(B
      $B$J$I$N%=!<%7%c%k%(%s%8%K%"%j%s%0$rMQ$$$?967b$,H/@8$7$F$$$^$9!#0z(B
      $B$-B3$-!"$3$N$h$&$J967b$K$OCm0U$,I,MW$G$9!#(B

    $B;29MJ88%(B ($BF|K\8l(B)
      JPCERT/CC Alert 2007-06-14
      ID $B$d%Q%9%o!<%I$rJ9$-=P$=$&$H$9$kEEOC$K4X$9$kCm0U4-5/(B
      http://www.jpcert.or.jp/at/2007/at070015.txt

      $BAmL3>J(B $B<R0w!&?&0wA4HL$N$?$a$N>pJs%;%-%e%j%F%#BP:v(B
      $B%=!<%7%c%k%(%s%8%K%"%j%s%0$NBP:v(B
      http://www.soumu.go.jp/joho_tsusin/security/business/work05.htm

      $BFHN)9T@/K!?M(B $B>pJs=hM}?d?J5!9=(B
      $B9qFb$K$*$1$k%=!<%7%c%k!&%(%s%8%K%"%j%s%0$N<BBVD4::(B (PDF)
      http://www.ipa.go.jp/security/fy11/report/contents/intrusion/socialeng/socialeng.pdf


$B!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=(B
$B"#(BJPCERT/CC $B$+$i$N$*4j$$(B
$B!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=(B

$B!~K\%l%]!<%H$K4X$9$k$*Ld$$9g$o$;$O(B editor@jpcert.or.jp $B08$K$*4j$$CW$7$^(B
  $B$9!#$?$@$7!"(BJPCERT/CC $B$G$O!"Ds6!$9$k>pJs$K$D$$$F6qBNE*$JFbMF$=$N$b$N$K(B
  $B$D$$$F$N$4<ALd$K$O$*Ez$($G$-$J$$>l9g$b$"$j$^$9!#$^$?%P%C%/%J%s%P!<$O!"(B
  $B0J2<$N(B URL $B$+$i$4MxMQ$$$?$@$1$^$9!#(B

        http://www.jpcert.or.jp/wr/

$B!~K\%a!<%j%s%0%j%9%H$N9XFI?=9~$d9XFIDd;_!"$^$?EPO?$7$?EE;R%a!<%k%"%I%l%9(B
  $B$NJQ99$J$I$K$D$-$^$7$F$O!"0J2<$N(B URL $B$r$4;2>H$/$@$5$$!#(B

        http://www.jpcert.or.jp/announce.html

$B!~(BJPCERT/CC $B$X$N%;%-%e%j%F%#%$%s%7%G%s%H$NJs9pJ}K!$K$D$$$F$O0J2<$N(B URL
  $B$r$4;2>H$/$@$5$$!#(B

        http://www.jpcert.or.jp/form/

$B0J>e!#(B
__________

2007 (C) JPCERT/CC
-----BEGIN PGP SIGNATURE-----

iQCVAwUBRniHO4x1ay4slNTtAQHM7gP/VHXHeqgcBT7Rw12ssN/FHx9iCaWuNXEl
O+CTx1LrWS3BYbDzAkJvunoDpimvDCuC9KLjDitawMB7D5gp42l1nvAFWST6JePb
0LjsJQVg/X/avq4LfO/BGYE3Olg6c6A2Yid6lKPOEVYoWbWAkgHzWyPZVa9XYm86
Y3pfe6eAvnE=
=TJpV
-----END PGP SIGNATURE-----