tito Memo(2004-04-02)

2004-04-02

* ethereal-0.10.3

セキュリティーホールEthereal: enpa-sa-00013が報告されていたのでいまさらながら。rpmの配布は古い?ようなのでソースからビルドする。make rpm-packageしたときに

RPM build errors:
    File not found by glob: /tmp/ethereal-0.10.3-root/usr/lib/libwiretap.so*
    File not found by glob: /tmp/ethereal-0.10.3-root/usr/lib/libethereal.so*

というエラーが出るので

--- packaging/rpm/SPECS/ethereal.spec.in~	Fri Apr  2 00:03:35 2004
+++ packaging/rpm/SPECS/ethereal.spec.in	Thu Apr  1 08:05:19 2004
@@ -26,7 +26,7 @@
 
 %install
 rm -rf $RPM_BUILD_ROOT
-mkdir -p $RPM_BUILD_ROOT/{etc,usr/X11R6/bin,usr/X11R6/man/man1,usr/bin,usr/man/man1,lib}
+mkdir -p $RPM_BUILD_ROOT/{etc,usr/X11R6/bin,usr/X11R6/man/man1,usr/bin,usr/man/man1,usr/lib}
 
 # can't use make install here. It would put manuf directly into /etc
 cp ethereal $RPM_BUILD_ROOT/usr/X11R6/bin
@@ -41,6 +41,8 @@
 cp mobileipv4.xml $RPM_BUILD_ROOT/etc
 cp nasreq.xml $RPM_BUILD_ROOT/etc
 cp sunping.xml $RPM_BUILD_ROOT/etc
+cp wiretap/.libs/libwiretap.so.0.0.1 $RPM_BUILD_ROOT/usr/lib
+cp epan/.libs/libethereal.so.0.0.1 $RPM_BUILD_ROOT/usr/lib
 %clean
 rm -rf $RPM_BUILD_ROOT

の修正をしてから

$ configure
$ make rpm-package

できたrpmをインストールした。ただしソース玉のspecはディストリビューションのパッケージの流儀とは違うので、普通はまずディストリビュータのupdateを確認するべき。

関連
RedHat9 Updated Ethereal packages fix security issues
Debian 見つからない。BTSにはあがっている。 2004-04-16追記 これ失敗。結局redhatのsrpmをもらってきて.specからgnome関連のpackageの記述を削除してビルドした。ethereal.spec

* そんなんどーでもいーだろうが

UFJのCMを深く検証してみる[von_yosukeyan の日記]
で、どこなんですか?(結局気になってるやつ)

* spam powerd by javascript

私のアドレスを詐称したらしいメールが宛て先不明のエラーになって飛んできた。見るとjavasciprtが本文を生成するタイプ。気になってperlに置き換えて本文を解読してみた。単なるspamだった。メールでjavascriptが動作することをspamerが期待できるぐらい世の中って危ないメーラつかわれているのかなぁ。スクリプトをみる

メールから抜粋

text part
------=_NextPart_001_003F_01C41934.881CDF27
Content-Type: text/html;
        charset="utf-8"
Content-Transfer-Encoding: quoted-printable
 
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; charset=3Dutf-8">
<STYLE></STYLE>
</HEAD>
<BODY><B>This message</B> has an attach that you will be interest=
ed in</BODY></HTML>
------=_NextPart_001_003F_01C41934.881CDF27--
 
------=_NextPart_000_003E_01C41934.881CDF27
Content-Type: text/html;
        name="truncates.html"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: attachment;
        filename="truncates.html"
 
<script language=3D"JavaScript">
Zaire =3D new Array(136,
181,38,78,76,231,147,117,65,159,167,
145,4,115,25,19,157,115,15,25,93,
67,114,31,92,100,54,226,15,239,27,
69,119,216,220,119,229,203,220,97,144,
19,101,21,236,209,165,62,62,72,95,
209,133,11,142,44,179,137,213,25,245,
67,165,1,50,173,34,211,208,187,96,
126,65,12,74,18,171,241,5,133,253,
11,102,97,139,205,95,3,217,238,183,
24,92,55,37,182,4,71,87,93,67,
15,33,56,37,18,202,59,161,23,71,
95,244,246,45,166,215,156,44,220,78,
42,51,221,163,246,31,17,126,32,178,
254,109,142,24,147,183,241,56,232,32,
202,11,84,201,90,166,192,205,23,114,
73,117,43,21,188,241,127,231,253,28,
102,118,156,204,95,4,218,231,222,22,
55,24,21,151,61,57,51,3,6,67,
101,59,80,31,216,59,161,113,47,85,
233,146,80,200,252,222,8,237,59,94,
40,167,215,184,53,55,93,89,211,227,
97,235,111,139,164,244,63,155,65,199,
103,56,212,70,183,172,220,126,112,66,
16,74,21,177,150,126,224,253,1,119,
97,151,218,95,27,220,254,211,24,80,
86,57,173,14,71,30,90,14,27,54,
82,35,52,233,27,241,29,71,92,248,
224,70,160,224,177,10,140,34,67,55,
212,209,144,30,10,105,66,188,230,108,
252,111,237,213,150,91,248,81,166,16,
59,208,87,173,192,211,11,108,88,117,
38,18,179,148,22,245,144,11,3,119,
145,209,95,6,192,249,207,24,70,55,
57,176,109,81,86,8,68,68,56,53,
81,18,171,38,206,6,52,64,239,251,
77,199,234,222,30,248,33,75,56,208,
180,146,121,98,67,0,128,192,18,142,
22,147,176,154,45,129,47,194,103,53,
189,85,170,178,213,126,102,67,0,74,
15,176,152,120,255,253,27,112,0,145,
209,43,96,181,249,222,118,85,86,63,
161,31,34,82,93,67,3,42,47,86,
27,204,45,161,103,41,80,157,225,75,
197,153,169,22,224,57,42,47,221,189,
154,119,29,98,55,211,231,97,235,29,
153,197,238,36,232,44,195,2,32,179,
52,141,130,234,46,4,44,1,34,30,
171,148,22,248,156,22,106,101,138,190,
62,30,208,138,211,119,69,86,54,170,
9,34,68,21,29,67,101,62,64,14,
220,45,196,104,71,64,245,247,35,204,
252,185,12,130,83,100,25,235,129,237,
119,1,108,37,182,226,9,232,0,142,
197,251,75,142,51,195,20,60,189,81,
172,163,210,126,107,67,117,40,30,216,
129,121,225,147,22,102,100,249,215,49,
24,218,138,207,112,80,34,87,176,4,
69,91,4,68,68,60,50,68,14,200,
32,175,0,9,118,206,194,56,160,133,
209,57,195,27,126,69,164,222,166,105,
73,39,94,131,144,72,194,38,187,139,
135,73,171,4,232,51,17,239,48,221,
220,255,49,81,120,117,25,50,130,180,
11,150,232,112,3,67,182,242,16,62,
168,136,184,126,87,70,71,212,125,32,
45,108,40,110,7,14,96,60,182,74,
233,82,19,100,135,157,44,247,206,137,
113,207,25,111,26,234,156,183,35,44,
3,0,154,202,6,212,96,185,159,149,
90,248,81,182,119,68,194,87,185,206,
241,42,82,96,119,84,24,183,156,115,
185,215,6,98,107,156,190,62,108,217,
229,212,115,45,89,22,218,113,45,117,
63,39,58,81,64,42,42,181,101,139,
26,5,102,131,191,9,188,219,140,97,
161,127,54,25,234,207,219,93,120,79,
16,205,189,35,146,45,174,219,183,97,
244,3,244,121,121,151,46,129,146,167,
83,53,48,55,24,101,245,219,10,214,
175,108,46,42,229,252,13,114,152,160,
150,50,45,6,73,135,33,107,112,59,
105,38,10,14,96,122,255,7,161,68,
2,52,129,211,35,232,203,155,57,145,
87,98,15,236,129,236,120,107,90,21,
132,158,74,194,42,189,151,215,10,188,
9,168,37,29,231,61,153,207,253,49,
81,105,123,2,47,149,189,20,138,175,
55,78,79,175,251,27,112,186,203,165,
4,62,6,73,233,71,15,25,108,102,
44,0,24,124,100,134,98,140,44,91,
59,213,198,110,236,135);
Rensselaer =3D new Array(180,
221,82,35,32,217,158,127,76,149,170,
155,56,17,118,119,228,77,2,19,80,
73,78,111,124,5,90,139,104,129,38,
103,20,189,178,3,128,185,254,95,172,
117,10,123,152,241,214,87,68,45,98,
243,176,41,174,79,220,229,186,107,200,
97,134,71,116,157,18,227,224,153,94,
63,12,85,106,91,248,209,54);
waxen =3D 907;
aluminum =3D 79;
var remember =3D "";
for(balking =3D 0; balking < waxen; balking++)
  remember =3D remember + String.fromCharCode(Zaire[balking] ^ Rens=
selaer[balking % aluminum]);
document.write(remember);
</script>
 
------=_NextPart_000_003E_01C41934.881CDF27--

perlスクリプトで置き換えて実行してみた。

#!/usr/local/bin/perl
 
@Zaire = (136,
181,38,78,76,231,147,117,65,159,167,
145,4,115,25,19,157,115,15,25,93,
67,114,31,92,100,54,226,15,239,27,
69,119,216,220,119,229,203,220,97,144,
19,101,21,236,209,165,62,62,72,95,
209,133,11,142,44,179,137,213,25,245,
67,165,1,50,173,34,211,208,187,96,
126,65,12,74,18,171,241,5,133,253,
11,102,97,139,205,95,3,217,238,183,
24,92,55,37,182,4,71,87,93,67,
15,33,56,37,18,202,59,161,23,71,
95,244,246,45,166,215,156,44,220,78,
42,51,221,163,246,31,17,126,32,178,
254,109,142,24,147,183,241,56,232,32,
202,11,84,201,90,166,192,205,23,114,
73,117,43,21,188,241,127,231,253,28,
102,118,156,204,95,4,218,231,222,22,
55,24,21,151,61,57,51,3,6,67,
101,59,80,31,216,59,161,113,47,85,
233,146,80,200,252,222,8,237,59,94,
40,167,215,184,53,55,93,89,211,227,
97,235,111,139,164,244,63,155,65,199,
103,56,212,70,183,172,220,126,112,66,
16,74,21,177,150,126,224,253,1,119,
97,151,218,95,27,220,254,211,24,80,
86,57,173,14,71,30,90,14,27,54,
82,35,52,233,27,241,29,71,92,248,
224,70,160,224,177,10,140,34,67,55,
212,209,144,30,10,105,66,188,230,108,
252,111,237,213,150,91,248,81,166,16,
59,208,87,173,192,211,11,108,88,117,
38,18,179,148,22,245,144,11,3,119,
145,209,95,6,192,249,207,24,70,55,
57,176,109,81,86,8,68,68,56,53,
81,18,171,38,206,6,52,64,239,251,
77,199,234,222,30,248,33,75,56,208,
180,146,121,98,67,0,128,192,18,142,
22,147,176,154,45,129,47,194,103,53,
189,85,170,178,213,126,102,67,0,74,
15,176,152,120,255,253,27,112,0,145,
209,43,96,181,249,222,118,85,86,63,
161,31,34,82,93,67,3,42,47,86,
27,204,45,161,103,41,80,157,225,75,
197,153,169,22,224,57,42,47,221,189,
154,119,29,98,55,211,231,97,235,29,
153,197,238,36,232,44,195,2,32,179,
52,141,130,234,46,4,44,1,34,30,
171,148,22,248,156,22,106,101,138,190,
62,30,208,138,211,119,69,86,54,170,
9,34,68,21,29,67,101,62,64,14,
220,45,196,104,71,64,245,247,35,204,
252,185,12,130,83,100,25,235,129,237,
119,1,108,37,182,226,9,232,0,142,
197,251,75,142,51,195,20,60,189,81,
172,163,210,126,107,67,117,40,30,216,
129,121,225,147,22,102,100,249,215,49,
24,218,138,207,112,80,34,87,176,4,
69,91,4,68,68,60,50,68,14,200,
32,175,0,9,118,206,194,56,160,133,
209,57,195,27,126,69,164,222,166,105,
73,39,94,131,144,72,194,38,187,139,
135,73,171,4,232,51,17,239,48,221,
220,255,49,81,120,117,25,50,130,180,
11,150,232,112,3,67,182,242,16,62,
168,136,184,126,87,70,71,212,125,32,
45,108,40,110,7,14,96,60,182,74,
233,82,19,100,135,157,44,247,206,137,
113,207,25,111,26,234,156,183,35,44,
3,0,154,202,6,212,96,185,159,149,
90,248,81,182,119,68,194,87,185,206,
241,42,82,96,119,84,24,183,156,115,
185,215,6,98,107,156,190,62,108,217,
229,212,115,45,89,22,218,113,45,117,
63,39,58,81,64,42,42,181,101,139,
26,5,102,131,191,9,188,219,140,97,
161,127,54,25,234,207,219,93,120,79,
16,205,189,35,146,45,174,219,183,97,
244,3,244,121,121,151,46,129,146,167,
83,53,48,55,24,101,245,219,10,214,
175,108,46,42,229,252,13,114,152,160,
150,50,45,6,73,135,33,107,112,59,
105,38,10,14,96,122,255,7,161,68,
2,52,129,211,35,232,203,155,57,145,
87,98,15,236,129,236,120,107,90,21,
132,158,74,194,42,189,151,215,10,188,
9,168,37,29,231,61,153,207,253,49,
81,105,123,2,47,149,189,20,138,175,
55,78,79,175,251,27,112,186,203,165,
4,62,6,73,233,71,15,25,108,102,
44,0,24,124,100,134,98,140,44,91,
59,213,198,110,236,135);
 
@Rensselaer = (180,
221,82,35,32,217,158,127,76,149,170,
155,56,17,118,119,228,77,2,19,80,
73,78,111,124,5,90,139,104,129,38,
103,20,189,178,3,128,185,254,95,172,
117,10,123,152,241,214,87,68,45,98,
243,176,41,174,79,220,229,186,107,200,
97,134,71,116,157,18,227,224,153,94,
63,12,85,106,91,248,209,54);
 
$waxen = 907;
$aluminum = 79;
$remember = "";
 
for($balking = 0; $balking < $waxen; $balking++){
    $remember .= pack('c', $Zaire[$balking] ^ $Rensselaer[$balking % $aluminum]);
}
 
print $remember;

* 福祉と設備２００１春季号大型回転ドア特集

via セキュリティホール memo

[ツッコミを入れる]

[]

tito Memo

2004-04-02

* ethereal-0.10.3

* PHS AirH"関連

* そんなんどーでもいーだろうが

* spam powerd by javascript

* 福祉と設備２００１春季号大型回転ドア特集