[2022-03-31 10:00 PDTæ›´æ–°] è„…å¨ã«é–¢ã™ã‚‹æƒ…å ±: Apache Log4jã«æ–°ãŸãªè„†å¼±æ€§(CVE-2021-44228) 実際ã®æ‚ªç”¨ã‚‚確èªè¡¨2 Log4jã®ã‚¨ã‚¯ã‚¹ãƒ—ãƒã‚¤ãƒˆè©¦è¡Œã®ã‚³ãƒ¼ãƒ«ãƒãƒƒã‚¯URLã§è¦‹ã‚‰ã‚ŒãŸä¸Šä½ãƒ‰ãƒ¡ã‚¤ãƒ³ã¨IPアドレス 脆弱ãªã‚µãƒ¼ãƒãƒ¼ã®ç™ºè¦‹ ç§ãŸã¡ãŒè¦³æ¸¬ã—ãŸã‚¤ãƒ³ãƒã‚¦ãƒ³ãƒ‰ã®ã‚¨ã‚¯ã‚¹ãƒ—ãƒã‚¤ãƒˆè©¦è¡Œã®å¤šãã¯ã€ã‚¨ã‚¯ã‚¹ãƒ—ãƒã‚¤ãƒˆæˆåŠŸã‚’é€ä¿¡è€…ã«é€šçŸ¥ã™ã‚‹ã‚¢ã‚¦ãƒˆãƒã‚¦ãƒ³ãƒ‰ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’é€ä¿¡ã™ã‚‹ã ã‘ã®ã‚‚ã®ã§ã—ãŸã€‚ã“れらã®è©¦ã¿ã®ã™ã¹ã¦ãŒã‚¹ã‚ャンを目的ã¨ã—ã¦ã„ãŸã®ã‹ã€æ‚ªæ„ã®ã‚るアクターã®åµå¯Ÿæ´»å‹•ã®ä¸€ç’°ã§ã‚ã£ãŸã®ã‹ã¯ç¢ºèªã§ãã¦ã„ã¾ã›ã‚“。ãã®ãªã‹ã«ã¯ã‚³ãƒ¼ãƒ«ãƒãƒƒã‚¯URLã¨ã®æœ€åˆã®ã‚„ã‚Šã¨ã‚ŠãŒè„†å¼±ãªã‚µãƒ¼ãƒãƒ¼ã§ã‚ã‚‹ã“ã¨ã‚’示ã™ã¨ã„ã†ã ã‘ã®ã‚¨ã‚¯ã‚¹ãƒ—ãƒã‚¤ãƒˆè©¦è¡Œã‚‚ã‚ã‚Šã€ãã®å¤šãã¯ã€ä»¥ä¸‹ã®ã‚³ãƒ¼ãƒ«ãƒãƒƒã‚¯URLã«è¦‹ã‚‰ã‚Œã‚‹ã‚ˆã†ãªã€Œã‚«ãƒŠãƒªã‚¢ãƒˆãƒ¼ã‚¯ãƒ³ã€ã‚’使用ã—ã¦ã„ã¾ã—ãŸã€‚ x[hostname].l4j.2sk9753uabgse6xz75tooe5ix.canarytokens[.]com ãŸã ã—ã€ã‚¢ã‚¯ã‚¿ãƒ¼ãŒã‚³ãƒ¼ãƒ«ãƒãƒƒã‚¯URLã‹ã‚‰Javaクラスをãƒãƒ¼ãƒ‰ã—ã¦å®Ÿè¡Œã™ã‚‹ã“ã¨ã«ã‚ˆã‚Š
![[2022-03-31 10:00 PDTæ›´æ–°] è„…å¨ã«é–¢ã™ã‚‹æƒ…å ±: Apache Log4jã«æ–°ãŸãªè„†å¼±æ€§(CVE-2021-44228) 実際ã®æ‚ªç”¨ã‚‚確èª](https://cdn-ak-scissors.b.st-hatena.com/image/square/1a2b7b2619f16b9f2c94d1a4a72203b7fd1baa37/height=288;version=1;width=512/https%3A%2F%2Funit42.paloaltonetworks.jp%2Fwp-content%2Fuploads%2F2022%2F12%2FUnit42-blog-2by1-characters-r4d1-2020_Vulnerability-yellow.png)
Log4jã®æ·±åˆ»ãªè„†å¼±æ€§CVE-2021-44228ã«ã¤ã„ã¦ã¾ã¨ã‚ã¦ã¿ãŸ - piyolog
「やã°ã™ãŽã‚‹ã€ã€€Javaライブラリ「Log4jã€ã«ã‚¼ãƒãƒ‡ã‚¤è„†å¼±æ€§ã€ä»»æ„ã®ãƒªãƒ¢ãƒ¼ãƒˆã‚³ãƒ¼ãƒ‰ã‚’実行å¯èƒ½ã€€iCloudã‚„Steamã€Minecraftãªã©åºƒç¯„囲ã®Java製å“ã«å½±éŸ¿ã‹
マイナンãƒãƒ¼ã®ãƒãƒ¼ã‚¿ãƒ«ã‚µã‚¤ãƒˆã§JavaãŒå¿…é ˆã¨ãªã£ãŸç†ç”± | スラド IT
ã“ã‚ŒãŒã‚¢ãƒƒãƒ—ルã®ãƒãƒƒã‚¯æ„ŸæŸ“元。水飲ã¿å ´æ”»æ’ƒã§ãƒ•ã‚§ã‚¤ã‚¹ãƒ–ックã€ãƒ„イッターãªã©40社ã«è¢«å®³ï¼Ÿï¼ˆå‹•ç”»ï¼‰è¿½è¨˜ï¼šãƒžã‚¤ã‚¯ãƒã‚½ãƒ•ãƒˆã‚‚
IE6〜9ã«ã‚¼ãƒãƒ‡ã‚¤æ”»æ’ƒ | スラド ã‚»ã‚ュリティ
{{#tags}}- {{label}}
{{/tags}}