-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

                                                         JPCERT-WR-2008-2301
                                                                   JPCERT/CC
                                                                  2008-06-18

                 <<< JPCERT/CC REPORT 2008-06-18 >>>

$B!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=(B
$B"#(B06/08($BF|(B)$B!A(B06/14($BEZ(B) $B$N%;%-%e%j%F%#4XO">pJs(B
$B!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=(B

== $BL\(B  $B<!(B ==================================================================

$B!Z(B1$B![(B2008$BG/(B6$B7n(B Microsoft $B%;%-%e%j%F%#>pJs(B ($B6[5^(B3$B7o4^(B) $B$K$D$$$F(B
$B!Z(B2$B![(BApple QuickTime $B$KJ#?t$N@H<e@-(B
$B!Z(B3$B![(BSNMPv3 $B$KG'>Z2sHr$N@H<e@-(B
$B!Z(B4$B![(BCitect $B<R@=(B CitectSCADA $B$K%P%C%U%!%*!<%P!<%U%m!<$N@H<e@-(B
$B!Z(B5$B![(BIcon Labs $B$N(B Iconfidant SSH $B%5!<%P$KJ#?t$N@H<e@-(B
$B!Z(B6$B![(BBackWeb Lite Install Runner $B$N(B ActiveX $B%3%s%H%m!<%k$K%P%C%U%!%*!<%P!<%U%m!<$N@H<e@-(B
$B!Z:#=5$N$R$H$/$A%a%b![(BMac OS X $B8~$1%;%-%e%j%F%#@_Dj%,%$%I(B

  $B"(>R2p$9$k%;%-%e%j%F%#4XO">pJs$NA*Dj4p=`$O0J2<$N%Z!<%8$r$4Mw$/$@$5$$!#(B
        http://www.jpcert.or.jp/wr/

  $B"((BHTML $BHG$*$h$S(B XML $BHG$O0J2<$N%Z!<%8$r$4Mw$/$@$5$$!#(B
        http://www.jpcert.or.jp/wr/2008/wr082301.html
        http://www.jpcert.or.jp/wr/2008/wr082301.xml
============================================================================


$B!Z(B1$B![(B2008$BG/(B6$B7n(B Microsoft $B%;%-%e%j%F%#>pJs(B ($B6[5^(B3$B7o4^(B) $B$K$D$$$F(B

    $B>pJs8;(B
      US-CERT Technical Cyber Security Alert TA08-162B
      Microsoft Updates for Multiple Vulnerabilities
      http://www.us-cert.gov/cas/techalerts/TA08-162B.html

      US-CERT Cyber Security Alert SA08-162B
      Microsoft Updates for Multiple Vulnerabilities
      http://www.us-cert.gov/cas/alerts/SA08-162B.html

      US-CERT Vulnerability Notes Database
      Search Results [ms08-jun] ($BA4(B1$B7o!&(B2008$BG/(B6$B7n(B17$BF|8=:_(B)
      http://www.kb.cert.org/vuls/byid?searchview&query=ms08-jun

      CIAC Bulletin S-311
      Cumulative Security Update for Internet Explorer
      http://www.ciac.org/ciac/bulletins/s-311.shtml

      CIAC Bulletin S-312
      Vulnerabilities in DirectX
      http://www.ciac.org/ciac/bulletins/s-312.shtml

      CIAC Bulletin S-313
      Vulnerability in WINS
      http://www.ciac.org/ciac/bulletins/s-313.shtml

      CIAC Bulletin S-314
      Vulnerability in Bluetooth Stack
      http://www.ciac.org/ciac/bulletins/s-314.shtml

    $B35MW(B
      Microsoft Windows$B!"(BMicrosoft Windows Server$B!"(BInternet Explorer 
      $B3F@=IJ$K$O!"J#?t$N@H<e@-$,$"$j$^$9!#7k2L$H$7$F!"1s3V$NBh;0<T$,G$(B
      $B0U$N%3!<%I$r<B9T$7$?$j!"4IM}<T8"8B$r<hF@$7$?$j!"%5!<%S%91?MQK832(B
      (DoS) $B967b$r9T$C$?$j$9$k2DG=@-$,$"$j$^$9!#(B

      $B>\:Y$K$D$$$F$O!"(BMicrosoft $B$,Ds6!$9$k>pJs$r;2>H$7$F$/$@$5$$!#(B

      $B$3$NLdBj$O!"(BMicrosoft Update $B$J$I$rMQ$$$F!"%;%-%e%j%F%#99?7%W%m(B
      $B%0%i%`$rE,MQ$9$k$3$H$G2r7h$7$^$9!#(B

    $B4XO"J8=q(B ($BF|K\8l(B)
      2008 $BG/(B 6 $B7n$N%;%-%e%j%F%#>pJs(B
      http://www.microsoft.com/japan/technet/security/bulletin/ms08-jun.mspx

      $B%^%$%/%m%=%U%H(B $B%;%-%e%j%F%#>pJs(B MS08-030 - $B6[5^(B
      Bluetooth $B%9%?%C%/$N@H<e@-$K$h$j!"%j%b!<%H$G%3!<%I$,<B9T$5$l$k(B (951376)
      http://www.microsoft.com/japan/technet/security/bulletin/ms08-030.mspx

      $B%^%$%/%m%=%U%H(B $B%;%-%e%j%F%#>pJs(B MS08-031 - $B6[5^(B
      Internet Explorer $BMQ$NN_@QE*$J%;%-%e%j%F%#99?7%W%m%0%i%`(B (950759)
      http://www.microsoft.com/japan/technet/security/bulletin/ms08-031.mspx

      $B%^%$%/%m%=%U%H(B $B%;%-%e%j%F%#>pJs(B MS08-032 - $B7Y9p(B
      ActiveX $B$N(B Kill Bit $B$NN_@QE*$J%;%-%e%j%F%#99?7%W%m%0%i%`(B (950760)
      http://www.microsoft.com/japan/technet/security/bulletin/ms08-032.mspx

      $B%^%$%/%m%=%U%H(B $B%;%-%e%j%F%#>pJs(B MS08-033 - $B6[5^(B
      DirectX $B$N@H<e@-$K$h$j!"%j%b!<%H$G%3!<%I$,<B9T$5$l$k(B (951698)
      http://www.microsoft.com/japan/technet/security/bulletin/ms08-033.mspx

      $B%^%$%/%m%=%U%H(B $B%;%-%e%j%F%#>pJs(B MS08-034 - $B=EMW(B
      WINS $B$N@H<e@-$K$h$j!"FC8"$,>:3J$5$l$k(B (948745)
      http://www.microsoft.com/japan/technet/security/bulletin/ms08-034.mspx

      $B%^%$%/%m%=%U%H(B $B%;%-%e%j%F%#>pJs(B MS08-035 - $B=EMW(B
      Active Directory $B$N@H<e@-$K$h$j!"%5!<%S%95qH]$,5/$3$k(B (953235)
      http://www.microsoft.com/japan/technet/security/bulletin/ms08-035.mspx

      $B%^%$%/%m%=%U%H(B $B%;%-%e%j%F%#>pJs(B MS08-036 - $B=EMW(B
      Pragmatic General Multicast (PGM) $B$N@H<e@-$K$h$j!"%5!<%S%95qH]$,5/$3$k(B (950762)
      http://www.microsoft.com/japan/technet/security/bulletin/ms08-036.mspx

      Japan Vulnerability Notes JVNTA08-162B
      Microsoft $B@=IJ$K$*$1$kJ#?t$N@H<e@-$KBP$9$k%"%C%W%G!<%H(B
      http://jvn.jp/cert/JVNTA08-162B/index.html

      JPCERT/CC Alert 2008-06-11
      2008$BG/(B6$B7n(B Microsoft $B%;%-%e%j%F%#>pJs(B ($B6[5^(B 3$B7o4^(B) $B$K4X$9$kCm0U4-5/(B
      http://www.jpcert.or.jp/at/2008/at080010.txt

      @police
      $B%^%$%/%m%=%U%H<R$N%;%-%e%j%F%#=$@5%W%m%0%i%`$K$D$$$F(B(MS08-030,031,032,033,034,035,036)
      http://www.cyberpolice.go.jp/important/2008/20080611_105447.html

$B!Z(B2$B![(BApple QuickTime $B$KJ#?t$N@H<e@-(B

    $B>pJs8;(B
      US-CERT Technical Cyber Security Alert TA08-162C
      Apple Quicktime Updates for Multiple Vulnerabilities
      http://www.us-cert.gov/cas/techalerts/TA08-162C.html

      US-CERT Cyber Security Alert SA08-162C
      Apple QuickTime Updates for Multiple Vulnerabilities
      http://www.us-cert.gov/cas/alerts/SA08-162C.html

      US-CERT Vulnerability Note VU#132419
      Apple QuickTime "file: URL" arbitrary code execution
      http://www.kb.cert.org/vuls/id/132419

    $B35MW(B
      Apple QuickTime $B$K$O!"J#?t$N@H<e@-$,$"$j$^$9!#7k2L$H$7$F!"1s3V$N(B
      $BBh;0<T$,:Y9)$7$?2hA|$d%a%G%#%"%U%!%$%k$r1\Mw$5$;$k$3$H$G!"G$0U$N(B
      $B%3!<%I$r<B9T$7$?$j!"%5!<%S%91?MQK832(B (DoS) $B967b$r9T$C$?$j$9$k2D(B
      $BG=@-$,$"$j$^$9!#(B

      $BBP>]$H$J$k@=IJ$O0J2<$NDL$j$G$9!#(B

      - Apple Mac OS X $BHG(B QuickTime 7.5 $B$h$jA0$N%P!<%8%g%s(B 
      - Microsoft Windows $BHG(B QuickTime 7.5 $B$h$jA0$N%P!<%8%g%s(B 

      $B$J$*!"(BiTunes $B$J$I(B QuickTime $B$r;HMQ$9$k%=%U%H%&%'%"$r%$%s%9%H!<%k(B
      $B$7$F$$$k>l9g$b1F6A$r<u$1$^$9!#>\:Y$K$D$$$F$O!"(BApple $B$,Ds6!$9$k>p(B
      $BJs$r;2>H$7$F$/$@$5$$!#(B

      $B$3$NLdBj$O!"(BApple $B$,Ds6!$9$k=$@5:Q$_$N%P!<%8%g%s(B 7.5 $B$K(B QuickTime
      $B$r99?7$9$k$3$H$G2r7h$7$^$9!#(B

    $B4XO"J8=q(B ($BF|K\8l(B)
      Japan Vulnerability Notes JVNVU#132419
      Apple QuickTime $B$N(B file:URL $B$N=hM}$KG$0U$N%3!<%I<B9T$N@H<e@-(B
      http://jvn.jp/cert/JVNVU132419/index.html

      Japan Vulnerability Notes JVNTA08-162C
      Apple QuickTime $B$K$*$1$kJ#?t$N@H<e@-$KBP$9$k%"%C%W%G!<%H(B
      http://jvn.jp/cert/JVNTA08-162C/index.html

      @police
      QuickTime $B$N@H<e@-$K$D$$$F(B
      http://www.cyberpolice.go.jp/important/2008/20080611_144843.html

    $B4XO"J8=q(B ($B1Q8l(B)
      Apple - $B%5%]!<%H(B
      About the security content of QuickTime 7.5
      http://support.apple.com/kb/HT1991?locale=ja_JP

$B!Z(B3$B![(BSNMPv3 $B$KG'>Z2sHr$N@H<e@-(B

    $B>pJs8;(B
      US-CERT Technical Cyber Security Alert TA08-162A
      SNMPv3 Authentication Bypass Vulnerability
      http://www.us-cert.gov/cas/techalerts/TA08-162A.html

      US-CERT Vulnerability Note VU#878044
      SNMPv3 improper HMAC validation allows authentication bypass
      http://www.kb.cert.org/vuls/id/878044

      CIAC Bulletin S-315
      SNMP Version 3 Authentication Vulnerability
      http://www.ciac.org/ciac/bulletins/s-315.shtml

    $B35MW(B
      $B%M%C%H%o!<%/5!4o$J$I$N4IM}$K9-$/MxMQ$5$l$F$$$k%W%m%H%3%k(B SNMP
      (Simple Network Management Protocol) $B$N%P!<%8%g%s(B 3 $B$r<BAu$7$?J#(B
      $B?t$N@=IJ$K!"G'>Z$r2sHr$5$l$k@H<e@-$,H/8+$5$l$^$7$?!#7k2L$H$7$F!"(B
      $BG'>Z5!G=$K$h$jJ]8n$5$l$F$$$k5!4o$N@_Dj>pJs$,O31L$7$?$j!"Bh;0<T$,(B
      $B%M%C%H%o!<%/5!4o$N@_Dj$rJQ99$7$?$j$9$k2DG=@-$,$"$j$^$9!#(B

      Cisco $B@=IJ!"(BJuniper $B@=IJ!"(BNET-SNMP$B!"(BUCD-SNMP $B$J$I$G(B SNMPv3 $B$NG'(B
      $B>Z5!G=$rMxMQ$7$F$$$k>l9g!"$3$NLdBj$N1F6A$r<u$1$k$3$H$,3NG'$5$l$F(B
      $B$$$^$9!#(B

      $B$3$NLdBj$O!";HMQ$7$F$$$k@=IJ$N%Y%s%@$dG[I[85$,Ds6!$9$k=$@5:Q$_$N(B
      $B%P!<%8%g%s$K!"3:Ev$9$k@=IJ$r99?7$9$k$3$H$G2r7h$7$^$9!#(B

      $B%Q%C%A$rE,MQ$9$k$N$,:$Fq$J>l9g!"$b$7$/$O%Q%C%A$,8x3+$5$l$F$$$J$$(B
      $B>l9g$O!"%k!<%?$J$I$N%Q%1%C%H%U%#%k%?%j%s%05!G=$K$h$j!"(B $B%5!<%S%9(B
      $B$X$N%"%/%;%9$r@)8B$9$k$J$I$N2sHr:v$r$48!F$2<$5$$!#(B

      $B>\:Y$K$D$$$F$O!"%Y%s%@$dG[I[85$,Ds6!$9$k>pJs$r;2>H$7$F$/$@$5$$!#(B

    $B4XO"J8=q(B ($BF|K\8l(B)
      Japan Vulnerability Notes JVNVU#878044
      SNMPv3 $B<BAu$NITE,@Z$J(B HMAC $B=hM}$K$h$kG'>Z2sHr$N@H<e@-(B
      http://jvn.jp/cert/JVNVU878044/index.html

      Japan Vulnerability Notes JVNTA08-162A
      SNMPv3 $B$K$*$1$kG'>Z2sHr$N@H<e@-(B
      http://jvn.jp/cert/JVNTA08-162A/index.html

      JPCERT/CC Alert 2008-06-11
      SNMPv3 $B$r<BAu$7$?J#?t@=IJ$NG'>Z2sHr$N@H<e@-$K4X$9$kCm0U4-5/(B
      http://www.jpcert.or.jp/at/2008/at080011.txt

    $B4XO"J8=q(B ($B1Q8l(B)
      Net-SNMP
      SECURITY RELEASE: Multple Net-SNMP Versions Released
      http://sourceforge.net/forum/forum.php?forum_id=833770

      Red Hat Security Advisory RHSA-2008:0528-4
      Moderate: ucd-snmp security update
      https://rhn.redhat.com/errata/RHSA-2008-0528.html

      Cisco Security Advisory 107408
      SNMP Version 3 Authentication Vulnerabilities
      http://www.cisco.com/en/US/products/products_security_advisory09186a00809ac83b.shtml

      Cisco Applied Mitigation Bulletin 107407
      Identifying and Mitigating Exploitation of the SNMP Version 3 Authentication Vulnerabilities
      http://www.cisco.com/en/US/products/products_applied_mitigation_bulletin09186a00809adfc8.html

$B!Z(B4$B![(BCitect $B<R@=(B CitectSCADA $B$K%P%C%U%!%*!<%P!<%U%m!<$N@H<e@-(B

    $B>pJs8;(B
      US-CERT Vulnerability Note VU#476345
      Citect CitectSCADA buffer overflow
      http://www.kb.cert.org/vuls/id/476345

    $B35MW(B
      Citect $B<R@=(B CitectSCADA $B$K$O!"%P%C%U%!%*!<%P!<%U%m!<$N@H<e@-$,$"(B
      $B$j$^$9!#7k2L$H$7$F!"1s3V$NBh;0<T$,:Y9)$7$?%j%/%(%9%H$r=hM}$5$;$k(B
      $B$3$H$G!"G$0U$N%3!<%I$r<B9T$7$?$j!"%5!<%S%91?MQK832(B (DoS) $B967b$r(B
      $B9T$C$?$j$9$k2DG=@-$,$"$j$^$9!#(B

      $BBP>]$H$J$k@=IJ$*$h$S%P!<%8%g%s$O0J2<$NDL$j$G$9!#(B

      - CitectSCADA v6
      - CitectSCADA v7
      - CitectFacilities v7

      $B$3$NLdBj$O!"(BCitect $B$,Ds6!$9$k=$@5:Q$_$N%P!<%8%g%s$K!"3:Ev$9$k@=(B
      $BIJ$r99?7$9$k$3$H$G2r7h$7$^$9!#(B

    $B4XO"J8=q(B ($BF|K\8l(B)
      Japan Vulnerability Notes JVNVU#476345
      Citect $B<R@=(B CitectSCADA $B$K$*$1$k%P%C%U%!%*!<%P!<%U%m!<$N@H<e@-(B
      http://jvn.jp/cert/JVNVU476345/index.html

    $B4XO"J8=q(B ($B1Q8l(B)
      Citect
      CitectSCADA
      http://www.citect.com/index.php?option=com_content&task=view&id=40&Itemid=44

$B!Z(B5$B![(BIcon Labs $B$N(B Iconfidant SSH $B%5!<%P$KJ#?t$N@H<e@-(B

    $B>pJs8;(B
      US-CERT Vulnerability Note VU#626979
      Icon Labs SSH server vulnerabilities
      http://www.kb.cert.org/vuls/id/626979

    $B35MW(B
      Icon Labs $B$N(B Iconfidant SSH $B%5!<%P$K$O!"J#?t$N@H<e@-$,$"$j$^$9!#(B
      $B7k2L$H$7$F!"1s3V$NBh;0<T$,%5!<%S%91?MQK832(B (DoS) $B$r9T$&2DG=@-$,(B
      $B$"$j$^$9!#(B

      $BBP>]$H$J$k%P!<%8%g%s$O0J2<$NDL$j$G$9!#(B

      - Iconfidant SSH 2.3.8 $B$h$jA0$N%P!<%8%g%s(B

      $B$J$*!"(BIconfidant SSH $B%5!<%P$r;HMQ$7$F$$$k@=IJ$b1F6A$r<u$1$k2DG=(B
      $B@-$,$"$j$^$9!#0lIt$N(B Cisco $B@=IJ$K$b1F6A$r5Z$\$7$^$9!#>\$7$/$O2<(B
      $B5-4XO"J8=q$r;2>H$7$F$/$@$5$$!#(B

      $B$3$NLdBj$O!"(BIcon Labs $B$,Ds6!$9$k=$@5:Q$_$N(B SSH server 2.3.8 $B$K(B 
      Iconfidant SSH $B%5!<%P$r99?7$9$k$3$H$G2r7h$7$^$9!#(B

    $B4XO"J8=q(B ($B1Q8l(B)
      Icon Labs
      Icon Labs Releases Update of its Iconfidant SSH Development Toolkit for VxWorks and Embedded Linux to Address Security Vulnerabilities
      http://www.icon-labs.com/news/read.asp?newsID=77

      Cisco Security Advisory 100706
      Cisco Security Advisory: Cisco Service Control Engine Denial of Service Vulnerabilities
      http://www.cisco.com/warp/public/707/cisco-sa-20080521-sce.shtml

$B!Z(B6$B![(BBackWeb Lite Install Runner $B$N(B ActiveX $B%3%s%H%m!<%k$K%P%C%U%!%*!<%P!<%U%m!<$N@H<e@-(B

    $B>pJs8;(B
      US-CERT Vulnerability Note VU#216153
      BackWeb Lite Install Runner ActiveX stack buffer overflows
      http://www.kb.cert.org/vuls/id/216153

    $B35MW(B
      BackWeb Lite Install Runner $B$N(B ActiveX $B%3%s%H%m!<%k$K$O!"%P%C%U%!(B
      $B%*!<%P!<%U%m!<$N@H<e@-$,$"$j$^$9!#7k2L$H$7$F!"1s3V$NBh;0<T$,:Y9)(B
      $B$7$?(B HTML $BJ8=q$r1\Mw$5$;$k$3$H$G!"%f!<%6$N8"8B$GG$0U$N%3!<%I$r<B(B
      $B9T$9$k2DG=@-$,$"$j$^$9!#(B

      $BBP>]$H$J$k%P!<%8%g%s$O0J2<$NDL$j$G$9!#(B

      - BackWeb 8.1.1.87 $B$h$jA0$N%P!<%8%g%s(B

      $B$J$*!"(BBackWeb $B$r;HMQ$7$F$$$k(B Logitech $B<R@=IJ$b1F6A$r<u$1$k2DG=@-(B
      $B$,$"$j$^$9!#(B

      $B$3$NLdBj$O!"3F%Y%s%@$,Ds6!$9$k=$@5:Q$_$N%P!<%8%g%s$K!"3:Ev$9$k@=(B
      $BIJ$r99?7$9$k$3$H$G2r7h$7$^$9!#$^$?!"%^%$%/%m%=%U%H$N%;%-%e%j%F%#(B
      $B>pJs(B (MS08-032) $B$K$h$k$H!"%^%$%/%m%=%U%H$,Ds6!$9$k%;%-%e%j%F%#99(B
      $B?7%W%m%0%i%`$O!"$3$N(B ActiveX $B%3%s%H%m!<%k$rL58z$K$7$^$9!#>\:Y$K(B
      $B$D$$$F$O!"2<5-4XO"J8=q$r;2>H$7$F$/$@$5$$!#(B

    $B4XO"J8=q(B ($BF|K\8l(B)
      $B%^%$%/%m%=%U%H(B $B%;%-%e%j%F%#>pJs(B MS08-032 - $B7Y9p(B
      ActiveX $B$N(B Kill Bit $B$NN_@QE*$J%;%-%e%j%F%#99?7%W%m%0%i%`(B (950760)
      http://www.microsoft.com/japan/technet/security/bulletin/ms08-032.mspx

      Logitech
      Desktop Messenger
      http://www.logitech.com/index.cfm/494/3041

    $B4XO"J8=q(B ($B1Q8l(B)
      BackWeb Press Release
      Important Security Update
      http://backweb.com/news_events/press_releases/051608.php


$B!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=(B
$B"#:#=5$N$R$H$/$A%a%b(B
$B!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=(B

$B!{(BMac OS X $B8~$1%;%-%e%j%F%#@_Dj%,%$%I(B

      Apple $B$O!"(BMac OS X $B$N%;%-%e%j%F%#$r6/2=$9$k$?$a$N@_Dj%,%$%I!V(BMac
      OS X Security Configuration Guides$B!W$r8x3+$7$F$$$^$9!#(B

      $B$3$N%,%$%I$O(B Mac OS X $B$NMM!9$J%;%-%e%j%F%#@_Dj$K$D$$$FLVMeE*$K5-(B
      $B=R$7$F$*$j!"(BMac OS X 10.5 (Leopard)$B!"(BMac OS X 10.4 (Tiger)$B!"(BMac
      OS X 10.3 (Panther)$B!"$=$l$>$l$N%5!<%P!"%/%i%$%"%s%H8~$1$K(B PDF $B$G(B
      $BJ8=q$,Ds6!$5$l$F$$$^$9!#(B

      $B$?$@$7!"$3$N%,%$%I$O>e5i(B Mac OS X $B%f!<%6$rBP>]$H$7$F$*$j!"@_Dj%_(B
      $B%9$K$h$C$F!"?<9o$J1F6A$,=P$k2DG=@-$,$"$j$^$9!#(BApple $B$O!"@_Dj$N:](B
      $B$K$O==J,$K%F%9%H$r9T$&$3$H$r?d>)$7$F$$$^$9!#(B

    $B;29MJ88%(B ($B1Q8l(B)
      Apple - Support
      Mac OS X Security Configuration Guides
      http://www.apple.com/support/security/guides/


$B!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=(B
$B"#(BJPCERT/CC $B$+$i$N$*4j$$(B
$B!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=!=(B

$B!~K\%l%]!<%H$K4X$9$k$*Ld$$9g$o$;$O(B editor@jpcert.or.jp $B08$K$*4j$$CW$7$^(B
  $B$9!#$?$@$7!"(BJPCERT/CC $B$G$O!"Ds6!$9$k>pJs$K$D$$$F6qBNE*$JFbMF$=$N$b$N$K(B
  $B$D$$$F$N$4<ALd$K$O$*Ez$($G$-$J$$>l9g$b$"$j$^$9!#$^$?%P%C%/%J%s%P!<$O!"(B
  $B0J2<$N(B URL $B$+$i$4MxMQ$$$?$@$1$^$9!#(B

        http://www.jpcert.or.jp/wr/

$B!~K\%a!<%j%s%0%j%9%H$N9XFI?=9~$d9XFIDd;_!"$^$?EPO?$7$?EE;R%a!<%k%"%I%l%9(B
  $B$NJQ99$J$I$K$D$-$^$7$F$O!"0J2<$N(B URL $B$r;2>H$7$F$/$@$5$$!#(B

        http://www.jpcert.or.jp/announce.html

$B!~(BJPCERT/CC $B$X$N%;%-%e%j%F%#%$%s%7%G%s%H$NJs9pJ}K!$K$D$$$F$O0J2<$N(B URL
  $B$r;2>H$7$F$/$@$5$$!#(B

        http://www.jpcert.or.jp/form/

$B0J>e!#(B
__________

2008 (C) JPCERT/CC
-----BEGIN PGP SIGNATURE-----

iQCVAwUBSFhllIx1ay4slNTtAQiEmwP+N/sAL0+OKcWJxrQlewDBxW8PZZebiu1H
j8Xf305w6hUgyjrxt3LgOSNhJzZgL64Q5QN7QzQEbRREdGYq6htlt/nDuUozgEMc
208Ezw6V9h9ac+6V5TpTno4B4RSnI61I79ADy56+mtlxYkCflFUEo/wxj6v7xw4Q
DEDAvIt9psQ=
=1+JL
-----END PGP SIGNATURE-----