-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256


                                                         JPCERT-WR-2017-1601
                                                                   JPCERT/CC
                                                                  2017-04-26

            <<< JPCERT/CC WEEKLY REPORT 2017-04-26 >>>

$B!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=(B
$B"#(B04/16($BF|(B)$B!A(B04/22($BEZ(B) $B$N%;%-%e%j%F%#4XO">pJs(B
$B!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=(B

== $BL\(B  $B<!(B ==================================================================

$B!Z(B1$B![(B2017$BG/(B4$B7n(B Oracle Critical Patch Update $B$K$D$$$F(B
$B!Z(B2$B![(BMozilla Firefox $B$KJ#?t$N@H<e@-(B
$B!Z(B3$B![J#?t$N%8%c%9%H%7%9%F%`@=IJ$KG$0U$N(B DLL $BFI$_9~$_$K4X$9$k@H<e@-(B
$B!Z(B4$B![J#?t$N(B VMware $B@=IJ$K@H<e@-(B
$B!Z(B5$B![J#?t$N(B Cisco $B@=IJ$K%5!<%S%91?MQK832(B (DoS) $B$N@H<e@-(B
$B!Z(B6$B![(BIBM Lotus Domino $B%5!<%P$K%P%C%U%!%*!<%P!<%U%m!<$N@H<e@-(B
$B!Z(B7$B![(BDrupal $B$K%"%/%;%9@)8BITHw$N@H<e@-(B
$B!Z(B8$B![(BSEIL $B%7%j!<%:%k!<%?$K%5!<%S%91?MQK832(B (DoS) $B$N@H<e@-(B
$B!Z(B9$B![(BWNC01WH $B$K(B OS $B%3%^%s%I%$%s%8%'%/%7%g%s$N@H<e@-(B
$B!Z(B10$B![(BNETGEAR ProSAFE Plus Configuration Utility $B$K%"%/%;%9@)8BITHw$N@H<e@-(B
$B!Z(B11$B![(BWordPress $BMQ%W%i%0%$%s(B Booking Calendar $B$KJ#?t$N@H<e@-(B
$B!Z:#=5$N$R$H$/$A%a%b![7Y;!D#$,!VJ?@.(B28$BG/$K$*$1$k%3%_%e%K%F%#%5%$%HEy$K5/0x$9$k;vHH$N8=>u$HBP:v$K$D$$$F!W$r8x3+(B

  $B"(>R2p$9$k%;%-%e%j%F%#4XO">pJs$NA*Dj4p=`$O0J2<$N%Z!<%8$r$4Mw$/$@$5$$!#(B
        https://www.jpcert.or.jp/wr/

  $B"((BHTML $BHG$*$h$S(B XML $BHG$O0J2<$N%Z!<%8$r$4Mw$/$@$5$$!#(B
        https://www.jpcert.or.jp/wr/2017/wr171601.html
        https://www.jpcert.or.jp/wr/2017/wr171601.xml
============================================================================


$B!Z(B1$B![(B2017$BG/(B4$B7n(B Oracle Critical Patch Update $B$K$D$$$F(B

    $B>pJs8;(B
      US-CERT Current Activity
      Oracle Releases Security Bulletin
      https://www.us-cert.gov/ncas/current-activity/2017/04/18/Oracle-Releases-Security-Bulletin

    $B35MW(B
      Oracle $B$+$iJ#?t$N@=IJ$*$h$S%3%s%]!<%M%s%H$K4^$^$l$k@H<e@-$KBP1~$7$?(B
      Oracle Critical Patch Update Advisory $B$,8x3+$5$l$^$7$?!#(B

      $B>\:Y$O!"(BOracle $B$,Ds6!$9$k>pJs$r;2>H$7$F$/$@$5$$!#(B

    $B4XO"J8=q(B ($BF|K\8l(B)
      Oracle
      Oracle Critical Patch Update Advisory - April 2017
      http://www.oracle.com/technetwork/jp/topics/ojkbcpuapr2017-3684180-ja.html

      JPCERT/CC Alert 2017-04-19
      2017$BG/(B 4$B7n(B Oracle Java SE $B$N%/%j%F%#%+%k%Q%C%A%"%C%W%G!<%H$K4X$9$kCm0U4-5/(B
      https://www.jpcert.or.jp/at/2017/at170017.html

$B!Z(B2$B![(BMozilla Firefox $B$KJ#?t$N@H<e@-(B

    $B>pJs8;(B
      US-CERT Current Activity
      Mozilla Releases Security Updates
      https://www.us-cert.gov/ncas/current-activity/2017/04/19/Mozilla-Releases-Security-Updates

    $B35MW(B
      Mozilla Firefox $B$K$O!"J#?t$N@H<e@-$,$"$j$^$9!#7k2L$H$7$F!"1s3V$NBh;0<T(B
      $B$,!"G$0U$N%3!<%I$r<B9T$7$?$j!"%5!<%S%91?MQK832(B (DoS) $B967b$r9T$C$?$j$9(B
      $B$k2DG=@-$,$"$j$^$9!#(B

      $BBP>]$H$J$k%P!<%8%g%s$O0J2<$NDL$j$G$9!#(B

      - Mozilla Firefox 53 $B$h$jA0$N%P!<%8%g%s(B
      - Mozilla Firefox ESR 52.1 $B$h$jA0$N%P!<%8%g%s(B
      - Mozilla Firefox ESR 45.9 $B$h$jA0$N%P!<%8%g%s(B

      $B$3$NLdBj$O!"3:Ev$9$k@=IJ$r(B Mozilla $B$,Ds6!$9$k=$@5:Q$_$N%P!<%8%g%s$K99(B
      $B?7$9$k$3$H$G2r7h$7$^$9!#>\:Y$O!"(BMozilla $B$,Ds6!$9$k>pJs$r;2>H$7$F$/$@$5(B
      $B$$!#(B

    $B4XO"J8=q(B ($BF|K\8l(B)
      Mozilla Japan
      Mozilla Foundation $B%;%-%e%j%F%#%"%I%P%$%6%j(B (2017 $BG/(B 4 $B7n(B 19 $BF|(B)
      http://www.mozilla-japan.org/security/announce/

$B!Z(B3$B![J#?t$N%8%c%9%H%7%9%F%`@=IJ$KG$0U$N(B DLL $BFI$_9~$_$K4X$9$k@H<e@-(B

    $B>pJs8;(B
      Japan Vulnerability Notes JVN#54268888
      $B2V;R$r4^$`J#?t$N@=IJ$K$*$1$kG$0U$N(B DLL $BFI$_9~$_$K4X$9$k@H<e@-(B
      https://jvn.jp/jp/JVN54268888/

    $B35MW(B
      $B2V;R$r4^$`J#?t$N%8%c%9%H%7%9%F%`@=IJ$K$O!"G$0U$N(B DLL $BFI$_9~$_$K4X$9$k(B
      $B@H<e@-$,$"$j$^$9!#7k2L$H$7$F!"Bh;0<T$,G$0U$N%3!<%I$r<B9T$9$k2DG=@-$,$"(B
      $B$j$^$9!#(B

      $BBP>]$H$J$k@=IJ$O0J2<$NDL$j$G$9!#(B

      - $B2V;R(B2017
      - $B2V;R(B2016
      - $B2V;R(B2015
      - $B2V;R(BPro 3
      - JUST Office 3 [Standard]
      - JUST Office 3 [$B%(%30u:~%Q%C%/(B]
      - JUST Office 3 & Tri-De DataProtect $B%Q%C%/(B
      - JUST Government 3
      - $B%8%c%9%H%8%c%s%W(B $B%/%i%9(B2
      - $B%8%c%9%H%U%m%s%F%#%"(B3
      - $B%8%c%9%H%9%/!<%k(B6 Premium
      - $B2V;R(BPolice 5
      - JUST Police 3
      - $B2V;R(B2017 $BBN83HG(B

      $B$3$NLdBj$O!"3:Ev$9$k@=IJ$r3t<02q<R%8%c%9%H%7%9%F%`$,Ds6!$9$k=$@5:Q$_$N(B
      $B%P!<%8%g%s$K99?7$9$k$3$H$G2r7h$7$^$9!#>\:Y$O!"3t<02q<R%8%c%9%H%7%9%F%`(B
      $B$,Ds6!$9$k>pJs$r;2>H$7$F$/$@$5$$!#(B

    $B4XO"J8=q(B ($BF|K\8l(B)
      $B3t<02q<R%8%c%9%H%7%9%F%`(B
      $B2V;R$N@H<e@-$r0-MQ$7$?IT@5$J%W%m%0%i%`$N<B9T4m81@-$K$D$$$F(B
      https://www.justsystems.com/jp/info/js17002.html

$B!Z(B4$B![J#?t$N(B VMware $B@=IJ$K@H<e@-(B

    $B>pJs8;(B
      US-CERT Current Activity
      VMware Releases Security Updates
      https://www.us-cert.gov/ncas/current-activity/2017/04/18/VMware-Releases-Security-Updates

    $B35MW(B
      $BJ#?t$N(B VMware $B@=IJ$K$O!"@H<e@-$,$"$j$^$9!#7k2L$H$7$F!"1s3V$NBh;0<T$,!"(B
      $BG$0U$N%3!<%I$r<B9T$7$?$j!"%5!<%S%91?MQK832(B (DoS) $B967b$r9T$C$?$j$9$k2D(B
      $BG=@-$,$"$j$^$9!#(B

      $BBP>]$H$J$k@=IJ$*$h$S%P!<%8%g%s$O0J2<$NDL$j$G$9!#(B

      - VMware Unified Access Gateway 2.8.1 $B$h$jA0$N%P!<%8%g%s(B
      - VMware Horizon View 7.1.0 $B$h$jA0$N%P!<%8%g%s(B
      - VMware Horizon View 6.2.4 $B$h$jA0$N%P!<%8%g%s(B
      - VMware Horizon View Client for Windows 4.4.0 $B$h$jA0$N%P!<%8%g%s(B
      - VMware Workstation 12.5.3 $B$h$jA0$N%P!<%8%g%s(B

      $B$3$NLdBj$O!"3:Ev$9$k@=IJ$r(B VMware $B$,Ds6!$9$k=$@5:Q$_$N%P!<%8%g%s$K99?7(B
      $B$9$k$3$H$G2r7h$7$^$9!#>\:Y$O!"(BVMware $B$,Ds6!$9$k>pJs$r;2>H$7$F$/$@$5$$!#(B

    $B4XO"J8=q(B ($B1Q8l(B)
      VMware Security Advisories
      VMSA-2017-0008.2
      https://www.vmware.com/security/advisories/VMSA-2017-0008.html

$B!Z(B5$B![J#?t$N(B Cisco $B@=IJ$K%5!<%S%91?MQK832(B (DoS) $B$N@H<e@-(B

    $B>pJs8;(B
      US-CERT Current Activity
      Cisco Releases Security Updates
      https://www.us-cert.gov/ncas/current-activity/2017/04/19/Cisco-Releases-Security-Updates

    $B35MW(B
      $BJ#?t$N(B Cisco $B@=IJ$K$O!"@H<e@-$,$"$j$^$9!#7k2L$H$7$F!"1s3V$NBh;0<T$,%5!<(B
      $B%S%91?MQK832(B (DoS) $B967b$r9T$&2DG=@-$,$"$j$^$9!#(B

      $BBP>]$H$J$k@=IJ$O0J2<$NDL$j$G$9!#(B

      - Cisco ASA 1000V Cloud Firewall
      - Cisco ASA 5500 Series Adaptive Security Appliances
      - Cisco ASA 5500-X Series Next-Generation Firewalls
      - Cisco ASA 5500-X Series with FirePOWER Services
      - Cisco ASA Services Module for Cisco Catalyst 6500 Series Switches
      - Cisco ASA Services Module for Cisco 7600 Series Routers
      - Cisco ASA for Firepower 9300 Series
      - Cisco Adaptive Security Virtual Appliance (ASAv)
      - Cisco Firepower 9300 ASA Security Module
      - Cisco ISA 3000 Industrial Security Appliance
      - Cisco Advanced Malware Protection (AMP) for Networks, 7000 Series Appliances
      - Cisco Advanced Malware Protection (AMP) for Networks, 8000 Series Appliances
      - Cisco Firepower 4100 Series Security Appliances
      - Cisco FirePOWER 7000 Series Appliances
      - Cisco FirePOWER 8000 Series Appliances
      - Cisco Firepower 9300 Series Security Appliances
      - Cisco FirePOWER Threat Defense for Integrated Services Routers (ISRs)
      - Cisco Industrial Security Appliance 3000
      - Cisco Sourcefire 3D System Appliances
      - Cisco Virtual Next-Generation Intrusion Prevention System (NGIPSv) for VMware
      - Cisco Unified Communications Manager (CallManager)
      - Cisco IOS
      - Cisco IOS XE

      $B$3$NLdBj$O!"3:Ev$9$k@=IJ$r(B Cisco $B$,Ds6!$9$k=$@5:Q$_$N%P!<%8%g%s$K99?7(B
      $B$9$k$3$H$G2r7h$7$^$9!#>\:Y$O!"(BCisco $B$,Ds6!$9$k>pJs$r;2>H$7$F$/$@$5$$!#(B

    $B4XO"J8=q(B ($B1Q8l(B)
      Cisco Security Advisory
      Cisco ASA Software DNS Denial of Service Vulnerability
      https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-asa-dns

      Cisco Security Advisory
      Cisco ASA Software IPsec Denial of Service Vulnerability
      https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-asa-ipsec

      Cisco Security Advisory
      Cisco ASA Software SSL/TLS Denial of Service Vulnerability
      https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-asa-tls

      Cisco Security Advisory
      Cisco ASA Software Internet Key Exchange Version 1 XAUTH Denial of Service Vulnerability
      https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-asa-xauth

      Cisco Security Advisory
      Cisco IOS and IOS XE Software EnergyWise Denial of Service Vulnerabilities
      https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-energywise

      Cisco Security Advisory
      Cisco Firepower Detection Engine Pragmatic General Multicast Protocol Decoding Denial of Service Vulnerability
      https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-fpsnort

      Cisco Security Advisory
      Cisco Unified Communications Manager Denial of Service Vulnerability
      https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-ucm

$B!Z(B6$B![(BIBM Lotus Domino $B%5!<%P$K%P%C%U%!%*!<%P!<%U%m!<$N@H<e@-(B

    $B>pJs8;(B
      CERT/CC Vulnerability Note VU#676632
      IBM Lotus Domino server mailbox name stack buffer overflow
      https://www.kb.cert.org/vuls/id/676632

    $B35MW(B
      IBM Lotus Domino $B%5!<%P$K$O!"%P%C%U%!%*!<%P!<%U%m!<$N@H<e@-$,$"$j$^$9!#(B
      $B7k2L$H$7$F!"%f!<%6$,(B Domino IMAP $B%5!<%P$N8"8B$GG$0U$N%3!<%I$r<B9T$9$k(B
      $B2DG=@-$,$"$j$^$9!#(B

      $BBP>]$H$J$k%P!<%8%g%s$O0J2<$NDL$j$G$9!#(B

      - IBM Domino 9.0.1 $B$+$i(B 9.0.1 Feature Pack 8 Interim Fix 1 $B$^$G(B
      - IBM Domino 9.0 $B$+$i(B 9.0 Interim Fix 7 $B$^$G(B
      - IBM Domino 8.5.3 $B$+$i(B 8.5.3 Fix Pack 6 Interim Fix 16 $B$^$G(B
      - IBM Domino 8.5.2 $B$+$i(B 8.5.2 Fix Pack 4 $B$^$G(B
      - IBM Domino 8.5.1 $B$+$i(B 8.5.1 Fix Pack 5 $B$^$G(B

      $B$3$NLdBj$O!"(BIBM Lotus Domino $B%5!<%P$r(B IBM $B$,Ds6!$9$k=$@5:Q$_$N%P!<%8%g%s(B
      $B$K99?7$9$k$3$H$G2r7h$7$^$9!#>\:Y$O!"(BIBM $B$,Ds6!$9$k>pJs$r;2>H$7$F$/$@$5(B
      $B$$!#(B

    $B4XO"J8=q(B ($BF|K\8l(B)
      Japan Vulnerability Notes JVNVU#91685026
      IBM Lotus Domino $B$N(B IMAP $B%5!<%P$K%9%?%C%/%Y!<%9$N%P%C%U%!%*!<%P!<%U%m!<$N@H<e@-(B
      https://jvn.jp/vu/JVNVU91685026/

    $B4XO"J8=q(B ($B1Q8l(B)
      IBM
      Security Bulletin: IBM Domino server IMAP EXAMINE command stack buffer overflow (CVE-2017-1274)
      https://www-01.ibm.com/support/docview.wss?uid=swg22002280

$B!Z(B7$B![(BDrupal $B$K%"%/%;%9@)8BITHw$N@H<e@-(B

    $B>pJs8;(B
      US-CERT Current Activity
      Drupal Releases Security Updates
      https://www.us-cert.gov/ncas/current-activity/2017/04/19/Drupal-Releases-Security-Updates

    $B35MW(B
      Drupal $B$K$O!"%"%/%;%9@)8BITHw$N@H<e@-$,$"$j$^$9!#7k2L$H$7$F!"1s3V$NBh(B
      $B;0<T$,!"%;%-%e%j%F%#@)8B$r2sHr$7$F>pJs$r<hF@$9$k2DG=@-$,$"$j$^$9!#(B

      $BBP>]$H$J$k%P!<%8%g%s$O0J2<$NDL$j$G$9!#(B

      - Drupal 8.2.8 $B$h$jA0$N%P!<%8%g%s(B
      - Drupal 8.3.1 $B$h$jA0$N%P!<%8%g%s(B

      $B$3$NLdBj$O!"(BDrupal $B$r(B Drupal $B$,Ds6!$9$k=$@5:Q$_$N%P!<%8%g%s$K99?7$9$k(B
      $B$3$H$G2r7h$7$^$9!#>\:Y$O!"(BDrupal $B$,Ds6!$9$k>pJs$r;2>H$7$F$/$@$5$$!#(B

    $B4XO"J8=q(B ($B1Q8l(B)
      Drupal
      Drupal Core - Critical - Access Bypass - SA-CORE-2017-002
      https://www.drupal.org/SA-CORE-2017-002

$B!Z(B8$B![(BSEIL $B%7%j!<%:%k!<%?$K%5!<%S%91?MQK832(B (DoS) $B$N@H<e@-(B

    $B>pJs8;(B
      Japan Vulnerability Notes JVN#86171513
      SEIL $B%7%j!<%:%k!<%?$K$*$1$k%5!<%S%91?MQK832(B (DoS) $B$N@H<e@-(B
      https://jvn.jp/jp/JVN86171513/

    $B35MW(B
      SEIL $B%7%j!<%:%k!<%?$K$O!"%5!<%S%91?MQK832(B (DoS) $B$N@H<e@-$,$"$j$^$9!#7k(B
      $B2L$H$7$F!"1s3V$NBh;0<T$,!":Y9)$7$?%Q%1%C%H$rAw?.$9$k$3$H$G!"%5!<%S%91?(B
      $BMQK832(B (DoS) $B967b$r9T$&2DG=@-$,$"$j$^$9!#(B

      $BBP>]$H$J$k%P!<%8%g%s$O0J2<$NDL$j$G$9!#(B

      - SEIL/x86 Fuji 1.70 $B$+$i(B 5.62 $B$^$G(B
      - SEIL/BPV4 5.00 $B$+$i(B 5.62 $B$^$G(B
      - SEIL/X1 1.30 $B$+$i(B 5.62 $B$^$G(B
      - SEIL/X2 1.30 $B$+$i(B 5.62 $B$^$G(B
      - SEIL/B1 1.00 $B$+$i(B 5.62 $B$^$G(B

      $B$3$NLdBj$O!"3:Ev$9$k@=IJ$N%U%!!<%`%&%'%"$r3t<02q<R%$%s%?!<%M%C%H%$%K%7(B
      $B%"%F%#%V$,Ds6!$9$k=$@5:Q$_$N%P!<%8%g%s$K99?7$9$k$3$H$G2r7h$7$^$9!#>\:Y(B
      $B$O!"3t<02q<R%$%s%?!<%M%C%H%$%K%7%"%F%#%V$,Ds6!$9$k>pJs$r;2>H$7$F$/$@$5(B
      $B$$!#(B

    $B4XO"J8=q(B ($BF|K\8l(B)
      SEIL
      $B:Y9)$5$l$?(BIPv4 UDP$B%Q%1%C%H$N<u?.$K$h$j0lIt5!G=$,Dd;_$9$k@H<e@-(B
      https://www.seil.jp/support/security/a01783.html

$B!Z(B9$B![(BWNC01WH $B$K(B OS $B%3%^%s%I%$%s%8%'%/%7%g%s$N@H<e@-(B

    $B>pJs8;(B
      Japan Vulnerability Notes JVN#48790793
      WNC01WH $B$K$*$1$k(B OS $B%3%^%s%I%$%s%8%'%/%7%g%s$N@H<e@-(B
      https://jvn.jp/jp/JVN48790793/

    $B35MW(B
      WNC01WH $B$K$O!"(BOS $B%3%^%s%I%$%s%8%'%/%7%g%s$N@H<e@-$,$"$j$^$9!#7k2L$H$7(B
      $B$F!"4IM}2hLL$K%"%/%;%92DG=$JBh;0<T$,G$0U$N%3!<%I$r<B9T$9$k2DG=@-$,$"$j(B
      $B$^$9!#(B

      $BBP>]$H$J$k%P!<%8%g%s$O0J2<$NDL$j$G$9!#(B

      - WNC01WH $B%U%!!<%`%&%'%"(B Ver.1.0.0.9 $B$*$h$S$=$l0JA0(B

      $B$3$NLdBj$O!"(BWNC01WH $B$N%U%!!<%`%&%'%"$r3t<02q<R%P%C%U%!%m!<$,Ds6!$9$k=$(B
      $B@5:Q$_$N%P!<%8%g%s$K99?7$9$k$3$H$G2r7h$7$^$9!#>\:Y$O!"3t<02q<R%P%C%U%!(B
      $B%m!<$,Ds6!$9$k>pJs$r;2>H$7$F$/$@$5$$!#(B

    $B4XO"J8=q(B ($BF|K\8l(B)
      $B3t<02q<R%P%C%U%!%m!<(B
      $B%M%C%H%o!<%/%+%a%i(B WNC01WH $B$K4X$9$kJ#?t$N@H<e@-(B
      http://buffalo.jp/support_s/s20161201.html

$B!Z(B10$B![(BNETGEAR ProSAFE Plus Configuration Utility $B$K%"%/%;%9@)8BITHw$N@H<e@-(B

    $B>pJs8;(B
      Japan Vulnerability Notes JVN#08740778
      NETGEAR ProSAFE Plus Configuration Utility $B$K$*$1$k%"%/%;%9@)8BITHw$N@H<e@-(B
      https://jvn.jp/jp/JVN08740778/

    $B35MW(B
      NETGEAR ProSAFE Plus Configuration Utility $B$K$O!"%"%/%;%9@)8BITHw$N@H(B
      $B<e@-$,$"$j$^$9!#7k2L$H$7$F!"Ev3:@=IJ$K%"%/%;%92DG=$JBh;0<T$,%9%$%C%A$N(B
      $B@_Dj$rJQ99$9$k2DG=@-$,$"$j$^$9!#(B

      $BBP>]$H$J$k%P!<%8%g%s$O0J2<$NDL$j$G$9!#(B

      - ProSAFE Plus Configuration Utility $B%P!<%8%g%s(B 2.3.29 $B$h$jA0$N%P!<%8%g%s(B

      $B$3$NLdBj$O!"(BProSAFE Plus Configuration Utility $B$r(B NETGEAR $B$,Ds6!$9$k=$(B
      $B@5:Q$_$N%P!<%8%g%s$K99?7$9$k$3$H$G2r7h$7$^$9!#>\:Y$O!"(BNETGEAR $B$,Ds6!$9(B
      $B$k>pJs$r;2>H$7$F$/$@$5$$!#(B

    $B4XO"J8=q(B ($BF|K\8l(B)
      $B%M%C%H%.%"%8%c%Q%s9gF12q<R(B
      $B!Z=EMW![(B NETGEAR ProSAFE Plus Configuration Utility $B$K$*$1$k%"%/%;%9@)8BITHw$N@H<e@-(B
      https://www.netgear.jp/supportInfo/NewSupportList/183.html

$B!Z(B11$B![(BWordPress $BMQ%W%i%0%$%s(B Booking Calendar $B$KJ#?t$N@H<e@-(B

    $B>pJs8;(B
      Japan Vulnerability Notes JVN#18739672
      WordPress $BMQ%W%i%0%$%s(B Booking Calendar $B$K$*$1$k%G%#%l%/%H%j%H%i%P!<%5%k$N@H<e@-(B
      https://jvn.jp/jp/JVN18739672/

      Japan Vulnerability Notes JVN#54762089
      WordPress $BMQ%W%i%0%$%s(B Booking Calendar $B$K$*$1$k%/%m%9%5%$%H%9%/%j%W%F%#%s%0$N@H<e@-(B
      https://jvn.jp/jp/JVN54762089/

    $B35MW(B
      WordPress $BMQ%W%i%0%$%s(B Booking Calendar $B$K$O!"J#?t$N@H<e@-$,$"$j$^$9!#(B
      $B7k2L$H$7$F!"1s3V$NBh;0<T$,!"%f!<%6$N%V%i%&%6>e$GG$0U$N%9%/%j%W%H$r<B9T(B
      $B$7$?$j!"%5!<%P>e$N%U%!%$%k$r<hF@$7$?$j$9$k2DG=@-$,$"$j$^$9!#(B

      $BBP>]$H$J$k%P!<%8%g%s$O0J2<$NDL$j$G$9!#(B

      - Booking Calendar 7.1 $B$*$h$S$=$l0JA0(B

      $B$3$NLdBj$O!"(BBooking Calendar $B$r3+H/<T$,Ds6!$9$k=$@5:Q$_$N%P!<%8%g%s$K(B
      $B99?7$9$k$3$H$G2r7h$7$^$9!#>\:Y$O!"3+H/<T$,Ds6!$9$k>pJs$r;2>H$7$F$/$@$5(B
      $B$$!#(B

    $B4XO"J8=q(B ($B1Q8l(B)
      WP Booking Calendar
      Changelog
      http://wpbookingcalendar.com/changelog/


$B!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=(B
$B"#:#=5$N$R$H$/$A%a%b(B
$B!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=(B

$B!{7Y;!D#$,!VJ?@.(B28$BG/$K$*$1$k%3%_%e%K%F%#%5%$%HEy$K5/0x$9$k;vHH$N8=>u$HBP:v$K$D$$$F!W$r8x3+(B

      2017$BG/(B4$B7n(B20$BF|!"7Y;!D#$O!VJ?@.(B28$BG/$K$*$1$k%3%_%e%K%F%#%5%$%HEy$K5/0x$9(B
      $B$k;vHH$N8=>u$HBP:v$K$D$$$F!W$r8x3+$7$^$7$?!#$3$N;qNA$O!"%3%_%e%K%F%#%5(B
      $B%$%H$*$h$S=P2q$$7O%5%$%H$GHo32$r<u$1$?;yF8$K4X$9$k$b$N$G!"%3%_%e%K%F%#(B
      $B%5%$%H$K$*$1$kHo32$,A}2C798~$G$"$k$3$H$J$I!"A4BN$N798~$HHo32$N8=>u!":#(B
      $B8e$NBP:v$J$I$,$^$H$a$i$l$F$$$^$9!#(B

    $B;29MJ88%(B ($BF|K\8l(B)
      $B7Y;!D#(B
      $BJ?@.(B28$BG/$K$*$1$k%3%_%e%K%F%#%5%$%HEy$K5/0x$9$k;vHH$N8=>u$HBP:v$K$D$$$F(B
      https://www.npa.go.jp/cyber/statics/h28/h28_community.pdf

      $B7Y;!D#(B
      $BJ?@.(B28$BG/$K$*$1$k%3%_%e%K%F%#%5%$%HEy$K5/0x$9$k;vHH$N8=>u$HBP:v$K$D$$$F(B $B;qNA(B
      https://www.npa.go.jp/cyber/statics/h28/h28_community_shiryou.pdf

      $B7Y;!D#(B
      $B;29M;qNA(B
      https://www.npa.go.jp/cyber/statics/h28/h28_community_sankou.pdf


$B!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=(B
$B"#(BJPCERT/CC $B$+$i$N$*4j$$(B
$B!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=(B

$B!~K\%l%]!<%H$K4X$9$k$*Ld$$9g$o$;$O(B editor@jpcert.or.jp $B08$K$*4j$$CW$7$^(B
  $B$9!#$?$@$7!"(BJPCERT/CC $B$G$O!"Ds6!$9$k>pJs$K$D$$$F6qBNE*$JFbMF$=$N$b$N$K(B
  $B$D$$$F$N$4<ALd$K$O$*Ez$($G$-$J$$>l9g$b$"$j$^$9!#$^$?%P%C%/%J%s%P!<$O!"(B
  $B0J2<$N(B URL $B$+$i$4MxMQ$$$?$@$1$^$9!#(B

        https://www.jpcert.or.jp/wr/

$B!~K\%a!<%j%s%0%j%9%H$N9XFI?=9~$d9XFIDd;_!"$^$?EPO?$7$?EE;R%a!<%k%"%I%l%9(B
  $B$NJQ99$J$I$K$D$-$^$7$F$O!"0J2<$N(B URL $B$r;2>H$7$F$/$@$5$$!#(B

        https://www.jpcert.or.jp/announce.html

$B!~(BJPCERT/CC $B$X$N%;%-%e%j%F%#%$%s%7%G%s%H$NJs9pJ}K!$K$D$$$F$O0J2<$N(B URL
  $B$r;2>H$7$F$/$@$5$$!#(B

        https://www.jpcert.or.jp/form/

$B0J>e!#(B
__________

2017 (C) JPCERT/CC
-----BEGIN PGP SIGNATURE-----

iQEcBAEBCAAGBQJY/+IXAAoJEDF9l6Rp7OBIHN0H/2z8ZSEDf60sl/8BUefAtb5C
T8ahOtaFDmY8b1BSo5bFn7WgyG3tUzfyMR8VsLm3OMgJoMpXn3pmTQgIE0m1Ecqe
iOsXUeGUhHBqyqfbRYxTckqeGNj3huokQiN68a+0xXrnhZ6U4RKVClfGVNjAxlIs
2HpsRB5EXyGiz5hs2A5u4yyzJbQy2gju5WtCy/PEWT3lEgI7vg1c5/cx1VqOfdiZ
UWRYTR/Gy7Tjhkd0mRXlC4OFanCWOP8rCJt+6bVkyogikgdrsuRfNLnu7CtqQlMc
a2jdT9FbgBOpL2esahfBBF4K0dHgioWCGIATT/+wM+BQgDZEJDLeu0UKij/4rcQ=
=HRDO
-----END PGP SIGNATURE-----