Bugtraq in Japanese
au$B7HBSEEOC$N%P!<%3!<%I(B$B%j!<%@$G%8%c%s%W@h(BURL$B$,56Au$5$l$k(B Apr 14 2005 08:17PM
Hiromitsu Takagi (private2 takagi-hiromitsu jp)
au$B7HBSEEOC$N%P!<%3!<%I%j!<%@$G%8%c%s%W@h(BURL$B$,56Au$5$l$k(B
=======================================================

$B0J2<$O!"(BJVN#9ADCBB12 http://jvn.jp/jp/JVN%239ADCBB12/ $B$N;vNc$K$D$$$F!"(B
$B%f!<%6$*$h$S3+H/<T$,CN$C$F$*$/$Y$-$H9M$($k$3$H$,$i$K$D$$$F!"H/8+<T$N
(B
$BN)>l$+$i$=$NH/8+FbMF$*$h$S9M;!$r8xI=$9$k$b$N$G$"$k!#(B

$B35MW(B
----
au$B7HBSEEOC$N!V%P!<%3!<%I%j!<%@!W5!G=$G(BQR$B%3!<%I$rFI$_<h$j!"$=$3$
K4^$^$l(B
$B$k(BURL$B$K(BEZweb$B$G%"%/%;%9$9$k:]!"FCDj$N(BQR$B%3!<%I$rFI$_<
h$k$H!"2hLL>e$GA*Br(B
$B$7$?$N$H$O0[$J$k(BURL$B$K%8%c%s%W$7$F$7$^$&!#$3$N5sF0$O!"%j%"%k@$3&
$GG[I[(B
$B$5$l$k0-0U$"$k(BQR$B%3!<%I$K$h$C$F!"%P!<%A%c%k@$3&$G56%5%$%H$KM6$o$
l$F$7$^(B
$B$&$H$$$&!"$$$o$P!V%f%S%-%?%9%U%#%C%7%s%0!W$N4m81@-$r$b$?$i$7$F$$$k!#
(B

$B$3$N5sF0$,@8$8$J$$$h$&=$@5$5$l$?!V%P!<%3!<%I%j!<%@!W(BBREW$B%"%W%j$
N?7%P!<(B
$B%8%g%s$,(BKDDI$B$h$jDs6!$5$l$F$$$k$N$G!"%f!<%6$O:G?7HG$r%@%&%s%m!<%
I$9$k$3(B
$B$H$G$3$NLdBj$r2r7h$G$-$k!#$^$?!"%@%&%s%m!<%I$7$J$$>l9g$G$b!"0J2<$K=R$
Y(B
$B$k$H$*$j!"$3$NLdBj$N860x$rCN$C$F;H$$J}$KCm0U$9$k$3$H$GHo32$r2sHr$G$-$
k!#(B

$BMzNr(B
----
2005$BG/(B2$B7n(B3$BF|(B IPA$B@H<e@->pJsFO=PAk8}$KFO$1=P$?!#(B
2005$BG/(B4$B7n(B14$BF|(B JVN$B$K$F8xI=$5$l$?!#(B

$BBP>](B
----
4$B7n(B14$BF|IU$N!V(Bau$B$+$i$N$*CN$i$;!W$K!"3:Ev5!<o$,5-$5$l$F$$$k
!#(B

$B%P!<%3!<%I(B (2$B<!85%3!<%I(B) $B%j!<%@!<$4MxMQ$K$"$?$C$F$NCm0UE@(B
http://www.au.kddi.com/news/information/au_info_20050414.html

$B!V%P!<%3!<%I%j!<%@!W(BBREW$B%"%W%j$N3:Ev%P!<%8%g%s$OITL@$G$"$k$,!">
/$J$/$H(B
$B$b!"H/8+<T$O!V(BBARCODE READER MEDIASEEK/KDDI Version 2.0.5h$B!W$HI=<($5$l(B
$B$k%P!<%8%g%s$K$*$$$F$3$N8=>]$r3NG'$7!"$^$?!"8=;~E@$G:G?7HG$N!V(BBARC
ODE
READER MEDIASEEK/KDDI Version 3.0.1a$B!W$HI=<($5$l$k$b$N$K$D$$$F!"$3$N8=(B
$B>]$,5/$-$J$$$3$H$r3NG'$7$?!#(B

$B8=>](B
----
$B0J2<$N(B1$B9T$NFbMF$r(BQR$B%3!<%I$H$7$F:n@.$9$k$H?^(B1$B$N2hA|$
,F@$i$l$k!#(B

MEBKM:TITLE:http://www.au.kddi.com/;URL:http://i.nttdocomo.co.jp/;;

$B?^(B1: http://takagi-hiromitsu.jp/security/bugtraq-jp/20050415-1/fig/1.png

$B$3$N(BQR$B%3!<%I$rEv3:(BBREW$B%"%W%j!V%P!<%3!<%I%j!<%@!<!W$GFI<h$
k$H!"7HBSEEOC(B
$B$O?^(B2$B$N2hLL$H$J$k!#(B

$B?^(B2: http://takagi-hiromitsu.jp/security/bugtraq-jp/20050415-1/fig/2.jpg

$B%8%c%s%W@h$H$7$FI=<($5$l$F$$$k(B1$B$DL\$N$b$N$,!V(Bhttp://www.au.k
ddi.com/$B!W(B
$B$H$J$C$F$$$k$3$H$r3NG'$7$D$D!"!VA*Br!W%\%?%s$r2!$9!#$9$k$H!"%a%K%e!<$
,(B
$B8=$l$k!J?^(B3$B!K!#(B

$B?^(B3: http://takagi-hiromitsu.jp/security/bugtraq-jp/20050415-1/fig/3.jpg

$B$3$3$G!V(BURL$B$r;2>H$9$k!W$rA*Br$9$k$H!"!V(BURL$B$X@\B3$7$^$9!#$
h$m$7$$$G$9$+!)!W(B
$B$H$$$&3NG'2hLL$,8=$l$k!J?^(B4$B!K!#(B

$B?^(B4: http://takagi-hiromitsu.jp/security/bugtraq-jp/20050415-1/fig/4.jpg

$B!V$O$$!W%\%?%s$r2!$9$H!"(Bwww.au.kddi.com $B$G$O$J$/(B i.nttdocomo.co.jp $B$X(B
$B%8%c%s%W$7$F$7$^$&!#(B

$BLdBjE@$H860x(B
------------
$B0lHL$K!"7HBSEEOC$N(BWeb$B%V%i%&%6$K$O%"%I%l%9%P!<$,$J$$!#0lIt$N7HBS
EEOC2q(B
$B<R$N%V%i%&%6$G$O!"%a%K%e!<$+$i(BURL$B$r3NG'$G$-$k$h$&$K$J$C$F$$$k$b
$N$b$"(B
$B$k$,!"%"%I%l%9%P!<$,$J$$$?$a!"7HBSEEOC$N%f!<%6$O!":#8+$F$$$k%Z!<%8$,$
I(B
$B$3$N%I%a%$%s$N%5%$%H$G$"$k$+$rIaCJ0U<1$;$:$K;H$&$N$,DLNc$H$J$C$F$$$k!
#(B
$BFC$K!"(Bau$B$N%V%i%&%6$G$O!"%a%K%e!<$K$b8=:_$N(BURL$B$r3NG'$9$k5!
G=$,MQ0U$5$l(B
$B$F$$$J$$!#(B

$B8=:_$N2hLL$N%"%I%l%9$r3NG'$G$-$J$$!J3NG'$7$K$/$$!K$3$H$O!"%U%#%C%7%s%
0(B
$B:>5=$J$I!"56%5%$%H$KqY$5$l$d$9$/$J$k4m81@-$r$b$?$i$7$+$M$J$$$H$3$m$G$
"(B
$B$k$,!"7HBSEEOC$G$O0lHLE*$K!"%a!<%k$O%F%-%9%H%a!<%k$G$"$k!J(BHTML$B%
a!<%k5!(B
$BG=$,$J$$!K$?$a!"%a!<%k$GM6$o$l$?%8%c%s%W@h$O%F%-%9%H$H$7$F(BURL$B$,
$O$C$-(B
$B$j$H8+$($k$h$&$K$J$C$F$$$k$&$(!"$5$i$K!"%a!<%k$+$i(BWeb$B%5%$%H$X$N
%"%/%;(B
$B%9$,H/@8$9$kD>A0$NCJ3,$G!"%8%c%s%W@h(BURL$B$rI=<($5$;$F!"K\Ev$K$3$3
$X%"%/(B
$B%;%9$7$F$h$$$+$r3NG'$9$k5!G=$,Ek:\$5$l$F$$$k$N$,DLNc$G$"$k!#(B

$B$3$N$h$&$K!"7HBSEEOC$N(BWeb$B%V%i%&%6$G$O!"%8%c%s%WA0$K%8%c%s%W@h$N
%5%$%H(B
$B$N%I%a%$%sL>$r3NG'$9$k$H$$$&;H$$J}$r%f!<%6$K=,47IU$1$k$3$H$K$h$C$F!"5
6(B
$B%5%$%H$X$NM6F3$rKI;_$7$F$$$k$N$,8=>u$G$"$k$H8@$($k!#(B

$B$7$+$7$J$,$i!"!V%P!<%3!<%I%j!<%@!W$NEv3:%P!<%8%g%s$G$O!"?^(B4 $B$N$h$&$K!"(B
$B%8%c%s%WA0$N3NG'%9%F%C%W$OB8:_$9$k$b$N$N!"K\Ev$N%8%c%s%W@h(BURL$B$,
I=<($5(B
$B$l$J$$!#(B

$B$^$?!"?^(B2 $B$K<($7$?$h$&$K!"(BQR$B%3!<%I$rFI<h$C$?D>8e$N2hLL$G$O!"%j%s%/@h$,(B

$B$"$?$+$b(B http://www.au.kddi.com/ $B$G$"$k$+$N$h$&$KI=<($5$l$F$$$k$,!"$3(B
$B$NItJ,$NK\Ev$N%8%c%s%W@h$O(B http://i.nttdocomo.co.jp/ $B$H$J$C$F$$$k!#$3(B
$B$N$h$&$J8=>]$,5/$-$k860x$O<!$NDL$j$G$"$k!#(B

$B:#2s;HMQ$7$?(BQR$B%3!<%I$N%G!<%?$O!"(B
MEBKM:TITLE:http://www.au.kddi.com/;URL:http://i.nttdocomo.co.jp/;;
$B$G$"$k$,!"$3$l$O!"(BNTT$B%I%3%b$N7HBSEEOCMQ$N=q<0$K$7$?$,$C$F=q$$$?
$b$N$G(B
$B$"$j!"KAF,$N!V(BMEBKM:$B!W$O!V%V%C%/%^!<%/EPO?5!G=!W$r;X$9!#(B

$B;qNA(B: NTT$B%I%3%b$N%P!<%3!<%I5!G=$K$*$1$k!V%V%C%/%^!<%/EPO?5!G=!W(B
http://www.nttdocomo.co.jp/mc-user/i/barcode/s2.html#3_1_3

$B!V(BTITLE:$B!W0J9_$K5-=R$9$kItJ,$OI=Bj$G$"$j!"!V(BURL:$B!W0J9_$,%
8%c%s%W@h$N(B
URL$B$G$"$k!#$3$l$r(BNTT$B%I%3%b$N7HBSEEOC$GFI<h$C$?$H$-$NI=<($r?^(B
5$B$K<($9$,!"(B
$B$3$N$h$&$K!"!V(BTITLE:$B!W$G;XDj$7$?ItJ,$O%j%s%/$H$7$F$G$O$J$/!"$=$
N$^$^%F(B
$B%-%9%H$H$7$FI=<($5$l$k$N$,K\Mh$N5sF0$G$"$k!#(B

$B?^(B5: http://takagi-hiromitsu.jp/security/bugtraq-jp/20050415-1/fig/5.jpg

au$B$N7HBSEEOC$N%P!<%3!<%I5!G=$N;EMM$K$O!"$3$N!V(BMEBKM:$B!W$N=q<0$OB
8:_$7(B
$B$J$$$,!"Ev3:%=%U%H%&%'%"!V(BBARCODE READER MEDIASEEK/KDDI Version
2.0.5h$B!W$O!"(BNTT$B%I%3%b;EMM$N!V(BMEBKM:$B!W$b2r<a$9$k$h$&$K:n$i
$l$F$$$k!#(B

$B;qNA(B: au$B$N%P!<%3!<%I5!G=$K$*$1$k=q<0(B
http://www.au.kddi.com/ezfactory/tec/two_dimensions/index.html

$BDL>o$N;HMQ$K$*$$$F$O!"FI$_<h$j7k2L$N2hLL$O?^(B6$B$N$h$&$K$J$k!#$3$l
$O!"(B
$B!V(BTITLE:$B!WMs$K(BURL$B$G$J$$%F%-%9%H!V(Bau by KDDI$B!W$r5-F~$7$?(BQR$B%3!<%I$rFI<h$C(B
$B$?$H$-$N2hLL$G$"$k!#%?%$%H%kItJ,$,%j%s%/$H$J$j!"%8%c%s%W@h$O!V(BURL:
$B!WMs(B
$B$K;XDj$7$?(BURL$B$H$J$C$F$$$k!#(B

$B?^(B6: http://takagi-hiromitsu.jp/security/bugtraq-jp/20050415-1/fig/6.jpg

$B$7$+$7$J$,$i!"%?%$%H%kItJ,$,(BURL$B7A<0$G$"$k>l9g$K$*$$$F$bF1MM$KF0
:n$7$F(B
$B$7$^$&$?$a!"?^(B2 $B$N$h$&$K!"$"$?$+$b(B www.au.kddi.com $B$X$N%j%s%/$G$"$k$+(B
$B$N$h$&$K8mG'$5$;$k7A$G!"(Bi.nttdocomo.co.jp $B$X$N%j%s%/$rI=<($5$;$k$3$H$,(B
$B$G$-$F$7$^$&!#$3$l$O!"(BPC$BMQ$N(BHTML$B%a!<%k$G:r:#2#9T$7$F$$$k%
U%#%C%7%s%0:>(B
$B5=$N<j8}$HF1$8;EAH$_$G$"$k!#(B

$B$^$?$3$N$H$-!"?^(B2$B$N$h$&$K!"2hLL$K$O56$N%8%c%s%W@h$H!"K\J*$N%8%c
%s%W@h(B
$B$N(B2$B$D$,JB$s$GI=<($5$l$k$3$H$K$J$k$,!"$3$NI=<($O!"!V(BMEBKM:$B
!W5!G=$r;HMQ(B
$B$;$:$K!"C1$K(B2$B$D$N(BURL$B$,5-:\$5$l$F$$$k(BQR$B%3!<%I$N>l9g$
H0c$o$J$$I=<(7A<0$G(B
$B$"$k$?$a!"!V(BMEBKM:$B!W$K$h$j56Au$5$l$F$$$k$N$+!"DL>o$N(B2$B$D$N
(BURL$B$J$N$+!"6h(B
$BJL$,$D$+$J$$!#(B

$B$7$?$,$C$F!"%f!<%6$,%8%c%s%W@h$r8mG'$7$?$^$^%"%/%;%9$r5v2D$7$F$7$^$&$
*(B
$B$=$l$,$"$k!#(B

$B2sHr:v(B
------
$B$3$&$7$?5sF0$N;v<B$rCN$C$F$$$l$P!"?^(B2$B$NCJ3,$G!"(B2$B$D$N(BUR
L$B$,I=<($5$l$F$$(B
$B$k$H$-$K$O!"(B2$B$DL\$N(BURL$B$,2x$7$$%"%I%l%9$G$J$$$+$rL\;k3NG'$
9$k$3$H$G!"$=(B
$B$N(BQR$B%3!<%I$,%8%c%s%W@h56Au$r4k$s$@$b$N$G$O$J$$$+$H5?$&$3$H$,$G$
-$k!#(B

$B$^$?!"?^(B3$B$NCJ3,$G!"!V(BURL$B$r;2>H$9$k!W$G$O$J$/!V%"%I%l%9D"$
KEPO?$9$k!W$r(B
$BA*Br$7!"0lC6%"%I%l%9D"$KEPO?$7$?$&$($G!"%"%I%l%9D"$+$i(BURL$B$K%8%c
%s%W$9(B
$B$k$h$&$K$9$l$P!"%"%I%l%9D"$G$OK\J*$N(BURL$B$rL\;k3NG'$G$-$k!#(B

$B=$@5FbMF(B
--------
4$B7n(B14$BF|$K%j%j!<%9$5$l$?:G?7%P!<%8%g%s$G$O!"?^(B2$B$NItJ,$,?^
(B7$B$N$h$&$KI=<((B
$B$5$l$k$h$&$K$J$C$?!#(B

$B?^(B7: http://takagi-hiromitsu.jp/security/bugtraq-jp/20050415-1/fig/7.jpg

$B$D$^$j!"(BNTT$B%I%3%b$N=q<0$KHsBP1~$H$J$C$?!#$3$l$K$h$j!"(BTITLE:
$BMs$K5-=R$5(B
$B$l$?(BURL$B$O!"C1FH$N(BURL$B$H$7$F2r<a$5$l$k$3$H$H$J$j!"(Bhttp:/
/www.au.kddi.com/
$B$H$7$FI=<($5$l$k%j%s%/$N%8%c%s%W@h$O(B http://www.au.kddi.com/ $B$H$J$k$h(B
$B$&$K2~A1$5$l$?!#(B

$B$^$?!"(Bhttp://www.au.kddi.com/news/information/au_info_20050414.htm
l $B$K(B
$B5-$5$l$F$$$k$h$&$K!"%8%c%s%WD>A0$N@\B33NG'2hLL$K!"%8%c%s%W@h$N(BURL
$B$,I=(B
$B<($5$l$k$h$&$K2~A1$5$l$?!#(B

$B6<0R$H9M;!(B
----------
$B:#8e!"K\3JE*$J%f%S%-%?%9<R2q$,E~Mh$9$l$P!"%A%i%79-9p$d393Q$N%]%9%?!<$
J(B
$B$I$K5-:\$5$l$?(BQR$B%3!<%I$+$i!"7HBSEEOC$GL\E*$N(BWeb$B%5%$%H$X%"
%/%;%9$9$k$H(B
$B$$$C$?$3$H$,F|>o2=$7$F$/$k$H9M$($i$l$k!#(B

$B$3$N$H$-!"6d9T$dCxL>$J%M%C%H%7%g%C%W$X$N%8%c%s%WMQ$N(BQR$B%3!<%I$rF
I$_<h$C(B
$B$?$D$b$j$,!"%U%#%C%7%s%0:>5=MQ$N56%5%$%H$X$HM6F3$5$l$F$7$^$&$H$$$C$?;
v(B
$BBV$,5/$-$+$M$J$$!#K\J*$N%]%9%?!<$K56%5%$%H$N(BURL$B$r5-$7$?(BQR$B
%3!<%I$N%7!<(B
$B%k$rE=$i$l$FM6F3$5$l$k$H$$$&62$l$b$"$k$N$G!"(BQR$B%3!<%I2hA|$,7G:\$
5$l$?G^(B
$BBN$NJ*M}E*$J??56$r8+6K$a$k$H$$$&BP=h$O8=<BE*$G$J$$!#(B

$B7HBSEEOC%f!<%6$N<+1R:v$O!"(BPC$B$N>l9g$HF1MM$K!"%8%c%s%W@h$N(BURL
$B$,?.Mj$G$-(B
$B$k%I%a%$%s$N%5%$%H$K$J$C$F$$$k$+$r3NG'$9$k$3$H$K?T$-$k!#(B

$B$7$+$7$J$,$i7HBSEEOC$K$O%"%I%l%9%P!<$,B8:_$;$:!"%8%c%s%W8e$G$O$J$/!"%
8%c(B
$B%s%WA0$K(BURL$B$r3NG'$;$6$k$rF@$J$$!#Ev3:!V%P!<%3!<%I%j!<%@!W$N$3$N
5sF0$O!"(B
$B%8%c%s%WA0$N(BURL$B3NG'$r8mG'$5$;$k$b$N$G$"$k$?$a!"%f!<%6$,$=$N$^$^
56%5%$(B
$B%H$K%Q%9%o!<%IEy$N=EMW>pJs$rF~NO$7$F$7$^$&$*$=$l$,$"$C$?!#(B

$B:,K\E*$JLdBj2r7h$N$?$a$K$O!"7HBSEEOC$N(BWeb$B%V%i%&%6$K%"%I%l%9%P!<
$r@_$1(B
$B$k$Y$-$G$"$k!#$=$l$,EvLL<B8=$7$J$$$N$G$"$l$P!"$=$l$^$G$N4V$O!"30It$+$
i(B
$B$NF~NO$K$h$C$F;XDj$5$l$k(BURL$B$K%8%c%s%W$9$k5!G=$r;}$D%=%U%H%&%'%"
$r:n@.(B
$B$9$k:]$K$O!"I,$:!"%8%c%s%WA0$K%8%c%s%W@h$N(BURL$B$rI=<($7$F!"%f!<%6
$K3NG'(B
$B$r5a$a$k$h$&@_7W$9$kI,MW$,$"$k!#(B

$B$3$N8xI=$NI,MW@-$HBEEv@-(B
------------------------
au$B$+$i$NH/I=J8!V%P!<%3!<%I(B (2$B<!85%3!<%I(B) $B%j!<%@!<$4MxMQ$K$"$?$C$F$NCm(B
$B0UE@!W$G$O!"$J$<$3$N;v>]$KCm0U$7$J$/$F$O$J$i$J$$$N$+$,@bL@$5$l$F$*$i$
:!"(B
$B0-0U$"$kBh;0<T$+$i$N967b$KBP$7$F<e$$$H$$$&@-<A$r;}$DLdBjE@$G$"$k$3$H$
,(B
$B%f!<%6$K$o$+$j$K$/$/$J$C$F$$$k!#(BQR$B%3!<%I$r2p$7$?%U%#%C%7%s%0:>5
=$N$*$=(B
$B$l$,$"$k$3$H$O!"%f!<%6$KEA$($kI,MW$,$"$k$H9M$($k!#(B

$B$3$&$7$?<oN`$N@H<e@-$O8=;~E@$G$ODA$7$$$b$N$G$"$k$?$a!"$3$&$7$?@_7W$d<
B(B
$BAu$,$3$N$h$&$J7|G0$r@8$8$5$;$k$b$N$G$"$k$3$H$r!"3+H/<T$K9-$/CN$i$;$k$
3(B
$B$H$G!"N`;w$N@H<e@-$,:#8e:F$S@8$8$J$$$h$&B%$90U5A$OBg$-$$$H9M$($k!#(B

$B$3$N@H<e@-$,0-MQ$5$l$k$K$OJ#?t$N%W%m%;%9$rF'$`I,MW$,$"$j!"$^$?!"MxMQ<
T(B
$B$K$h$kG=F0E*$JA`:n$,I,MW$H$J$k$b$N$G$"$k$N$G!"8=;~E@$GD>$A$K967b$N8=<
B(B
$B@-$,9b$$$b$N$G$O$J$$$H9M$($k!#$^$?!"%f!<%6$N8=<BE*$J2sHr:v$bB8:_$9$k!
#(B
$B@H<e@-$r8xI=$9$k$3$H$K$h$C$F@8$:$k%j%9%/$h$j$b!";v<B$r8xI=$9$k$3$H$K$
h$C(B
$B$F>-Mh$N0BA4$r3NJ]$9$kD94|E*$J%a%j%C%H$NJ}$,>e2s$k$HH=CG$9$k!#(B

$B0J>e(B
--
$B9bLZ(B $B9@8w!w<+Bp(B

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus