From owner-ports-jp@jp.freebsd.org  Thu Mar  9 00:03:36 2000
Received: (from daemon@localhost)
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) id AAA70956;
	Thu, 9 Mar 2000 00:03:36 +0900 (JST)
	(envelope-from owner-ports-jp@jp.FreeBSD.org)
Received: from rins.st.ryukoku.ac.jp (rins.st.ryukoku.ac.jp [133.83.4.1])
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) with ESMTP id AAA70951
	for <ports-jp@jp.freebsd.org>; Thu, 9 Mar 2000 00:03:36 +0900 (JST)
	(envelope-from kjm@ideon.st.ryukoku.ac.jp)
Received: from ideon.st.ryukoku.ac.jp (ideon.st.ryukoku.ac.jp [133.83.36.5])
	by rins.st.ryukoku.ac.jp (8.9.3+3.2W/3.7W/RINS-1.9.6-NOSPAM) with ESMTP id AAA16547
	for <ports-jp@jp.freebsd.org>; Thu, 9 Mar 2000 00:03:35 +0900 (JST)
Received: from ideon.st.ryukoku.ac.jp (kjm@localhost [127.0.0.1])
	by ideon.st.ryukoku.ac.jp (8.9.3/3.7W/kjm-19990628) with ESMTP id AAA57637
	for <ports-jp@jp.freebsd.org>; Thu, 9 Mar 2000 00:03:34 +0900 (JST)
From: kjm@rins.ryukoku.ac.jp (KOJIMA Hajime /
    =?ISO-2022-JP?B?GyRCPi5FZ0glGyhC?=)
To: ports-jp@jp.freebsd.org
In-reply-to: Your message of "Wed, 08 Mar 2000 07:48:25 JST."
	<86vh2yo0qu.wl@cheerful.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=iso-2022-jp
Date: Thu, 09 Mar 2000 00:03:34 +0900
Message-ID: <57633.952527814@ideon.st.ryukoku.ac.jp>
Reply-To: ports-jp@jp.freebsd.org
Precedence: list
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+990727
X-Sequence: ports-jp 9063
Subject: [ports-jp 9063] uum/canuum/jserver (was Re: lynx should be forbidden)
Errors-To: owner-ports-jp@jp.freebsd.org
Sender: owner-ports-jp@jp.freebsd.org
X-Originator: kjm@ideon.st.ryukoku.ac.jp

<86vh2yo0qu.wl@cheerful.com>$B$K$*$$$F(B
FUJISHIMA Satsuki $B$5$s$,$*$C$7$c$k$K$O(B:
| www/lynx, lynx-current$B$,(Blocal user exploit$B$G(BFORBIDDEN$B$K$J$C$F$$$^$9!%(B
| japanese$B$bF1MM$K$7$?J}$,$$$$$G$7$g$&!%(B
| $B$D$$$G$K(Blynx-ssl$B$b$d$C$F$7$^$C$F$bC/$b:$$i$J$=$&$G$9!%(B
 
  $B%;%-%e%j%F%#J}LL$@$H(B

* canuum
* Wnn4.2 (uum $B$H(B jserver)

  $B$K(B buffer overflow $B$9$k7j$,$"$k(B ($B967b2DG=(B) $B$3$H$,CN$i$l$F$$$^$9$N$G!"(B
  $B$=$N$"$?$j$K$bI,MW$@$H;W$$$^$9!#FC$K(B canuum $B$H(B uum $B$O(B root $B$r<h$i$l(B
  $B$^$9!#(B 

  Shadow Penguin Security $B$,$^$@40A4I|3h$7$F$$$J$$$N$G!"(Blocal copy $B$X(B
  $B$N(B URL $B$r<($7$^$9!#(B

<http://shadowpenguin.backsection.net/>
<http://www.st.ryukoku.ac.jp/~kjm/security/memo/1999/1999-09-27.uum.txt>
<http://www.st.ryukoku.ac.jp/~kjm/security/memo/1999/1999-10-05.canuum.txt>
<http://www.st.ryukoku.ac.jp/~kjm/security/memo/2000/03-08.jserver.txt>
 
  uum $B$K$D$$$F$O(B wnn-users ML $B$K(B fix $B$,N.$l$F$$$?$h$&$G$9!#(B

<http://www.st.ryukoku.ac.jp/~kjm/security/memo/1999/1999-11-17.uum.txt>

  $B$,!"$3$l$N(B Wnn 4.2 ports $B$X$NH?1G$*$h$S(B canuum $B$X$NE,MQ$O$5$l$F$$$J(B
  $B$$$h$&$K8+$($^$9(B (canna $B$N%i%$%V%i%j$b(B buffer overflow $B$9$k$N$G!"(Buum
  $B$X$N(B fix $BJ,$rE,MQ$9$l$P:Q$`$o$1$8$c$J$$$G$9(B)$B!#(B
  
  $B<B$O$9$G$K(B fix $B$5$l$F$$$?$i$4$a$s$J$5$$!#(B

----
// $BLZ2<@'M:!VM}2J7O$N:nJ85;=Q!WCf8x?7=q(B 624 $B$rFI$b$&(B!!

$B>.Eg(B $BH%(B - KOJIMA Hajime
[Office] kjm@rins.ryukoku.ac.jp, http://www.st.ryukoku.ac.jp/~kjm/
         Phone: 077-543-7414  Fax: 077-543-0706
