[B! ShellShock] drumscoã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

drumsco id:drumsco

ShellShockã«é–¢ã™ã‚‹drumscoã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (9)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ç¬¬5å›žã€€å—é›£ã®æ¨™æº–ã‚³ãƒžãƒ³ãƒ‰ï½žbashã«ç¶šãstringsã¨wgetã‚‚ï¼Ÿï½ž | gihyo.jp
èª°ãŒä½¿ã†ã‹ã‚ã‹ã‚‰ãªã„ãƒ‹ãƒƒãƒãªã‚³ãƒžãƒ³ãƒ‰ã‚„ãƒ„ãƒ¼ãƒ«ã®é¡žã¯ã€è„†å¼±æ€§ãŒè¦‹ã¤ã‹ã£ã¦ã‚‚å½±éŸ¿ç¯„å›²ãŒãã‚ã‚ã¦é™å®šã•ã‚Œã‚‹ã“ã¨ãŒå¤šã„ã§ã™ã€‚ä¸€æ–¹ã§ã€æ¨™æº–ã‚³ãƒžãƒ³ãƒ‰ï¼ãƒ©ã‚¤ãƒ–ãƒ©ãƒªã®è„†å¼±æ€§ã¯ã€å½±éŸ¿ç¯„å›²ã‚’ç‰¹å®šã—ã¥ã‚‰ã„ã¨ã„ã†ã‚ˆã†ã«è¦‹ãˆã¾ã™ã€‚ ç‰¹ã«æ¨™æº–ãƒ©ã‚¤ãƒ–ãƒ©ãƒªã®å ´åˆã€ã‚ã‚‰ã‚†ã‚‹ã‚³ãƒžãƒ³ãƒ‰ã‹ã‚‰å‹•çš„ï¼é™çš„ãƒªãƒ³ã‚¯ã•ã‚Œã¦ã„ã‚‹ã‚±ãƒ¼ã‚¹ãŒè€ƒãˆã‚‰ã‚Œã¾ã™ã€‚ã¾ãŸã€ãƒ˜ãƒ³ã«å˜ç‹¬ã§å…¥ã‚Œæ›¿ãˆã¦ã—ã¾ã†ã¨ã€ã¾ã£ãŸããƒŽãƒ¼ãƒžãƒ¼ã‚¯ã ã£ãŸã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã®å‹•ä½œã«æ‚ªå½±éŸ¿ã‚’åŠã¼ã—ã‹ãã¾ã›ã‚“ã€‚ ã™ã§ã«11æœˆã ãŒã€ã¾ã ã¾ã è¦‹ã‚‰ã‚Œã‚‹Shellshockç‹™ã„ã®é€šä¿¡ï½žSMTPçµŒç”±ã‚‚ã‚ã‚‹ã‚ˆ 9æœˆæœ«ã«ç™ºè¦‹ã•ã‚Œã€10æœˆã«å…¥ã£ã¦ã‚„ã£ã¨å¯¾å‡¦å®Œäº†ã—ãŸæ„Ÿã®ã‚ã‚‹Shellshockã§ã™ãŒã€Webã‚µãƒ¼ãƒã®ãƒã‚°ã‚’ç¢ºèªã™ã‚‹ã¨ã€ã¾ã ã¾ã ç¢ºèªã•ã‚Œã¦ã„ã¾ã™ã€‚ 11æœˆæ™‚ç‚¹ã§ã‚‚ç¢ºèªã•ã‚ŒãŸã®ã¯ã€ãŸã¨ãˆã°ä»¥ä¸‹ã®ã‚ˆã†ãªãƒã‚°ã§ã™ï¼ˆå›³1â ï¼‰â ã€‚ å›³1ã€€11æœˆæ™‚ç‚¹ã§ã‚‚ç¢ºèªã•ã‚ŒãŸãƒã‚°ã®ä¾‹ bashã•ãˆå©ã‘ã‚Œã°è‰¯ã„ã®ã§ã€ã‚¢ã‚¿ãƒƒã‚¯ãƒ™ã‚¯
drumsco 2014/12/18
security

ShellShock

UNIX
ãƒªãƒ³ã‚¯
Platform for Information Security Tools & Services
drumsco 2014/09/29
security

Testing

ShellShock

CVE-2014-6721
ãƒªãƒ³ã‚¯
ã‚¦ã‚§ãƒ–ã‚¢ãƒ—ãƒªã«ãŠã‘ã‚‹Bashè„†å¼±æ€§ã®å³æ»æ¡ä»¶ #ShellShock - ã‚ã‚‚ãŠãã°
æ¡ä»¶1. /bin/shã®å®Ÿä½“ãŒbashã®ãƒ‡ã‚£ã‚¹ãƒˆãƒªãƒ“ãƒ¥ãƒ¼ã‚·ãƒ§ãƒ³ RHEL CentOS Scientific Linux Fedora Amazon Linux openSUSE Arch Linux (è‡ªã‚‰è¨å®šã—ãŸå ´åˆ: Debian, Ubuntu) æ¡ä»¶2. å‹•ä½œç’°å¢ƒ CGI (ãƒ¬ãƒ³ã‚¿ãƒ«ã‚µãƒ¼ãƒã§ã‚ã‚ŠãŒã¡ãªCGIãƒ¢ãƒ¼ãƒ‰ã®PHPç‰ã‚‚å«ã‚€) Passenger(Ruby) æ¡ä»¶3. ãƒ—ãƒã‚°ãƒ©ãƒ å†…å®¹ Passengerã¯å…¨æ»äº¡ *1 systemã‚„ `command`ã€ '| /usr/lib/sendmail' ãªã©ã§å¤–éƒ¨ã‚³ãƒžãƒ³ãƒ‰å®Ÿè¡Œ *2 PHPã®mailã‚„mb_send_mailã€ãã®ä»–ãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯ç‰ã‚’ä»‹ã—ãŸãƒ¡ãƒ¼ãƒ«é€ä¿¡ *3 ä»¥ä¸‹ã¯æ¡ä»¶1ãŒä¸è¦ æ˜Žç¤ºçš„ã«bashã‚’å‘¼ã¶ å…ˆé ã§ #!/bin/bash ã‚„ #!/usr/bin/env bash ã—ã¦ã„ã‚‹ãƒ—ãƒã‚°ãƒ©ãƒ ã‚’å®Ÿè¡Œ (rbenv
drumsco 2014/09/27
security

bash

Phusion Passenger

CGI

rbenv

PHP

Rails

shell

shellshock
ãƒªãƒ³ã‚¯
CVE-2014-6271ã®bashã®è„†å¼±æ€§ã«å¯¾å¿œã™ã‚‹æ–¹æ³• - Qiita
Deleted articles cannot be recovered. Draft of this article would be also deleted. Are you sure you want to delete this article?
drumsco 2014/09/26
security

shell

CVE-2014-6721

ShellShock
ãƒªãƒ³ã‚¯
BASHã®è„†å¼±æ€§ã§CGIã‚¹ã‚¯ãƒªãƒ—ãƒˆã«ã‚¢ãƒ¬ã•ã›ã¦ã¿ã¾ã—ãŸ
ç’°å¢ƒå¤‰æ•°ã«ä»•è¾¼ã¾ã‚ŒãŸã‚³ãƒ¼ãƒ‰ã‚’å®Ÿè¡Œã—ã¦ã—ã¾ã†BASHã®è„†å¼±æ€§ãŒ CGIã‚¹ã‚¯ãƒªãƒ—ãƒˆã«å½±éŸ¿ã‚’ä¸Žãˆã‚‹ã‹è©¦ã—ã¦ã¿ãŸã‚‰çµæžœã¯æ‚²æƒ¨ãªæ„Ÿã˜ã« Tweet 2014å¹´9æœˆ25æ—¥ å¶‹ç”°å¤§è²´ ã“ã®è¨˜äº‹ã¯2014å¹´ã®ã‚‚ã®ã§ã™ æœã‹ã‚‰ Bash specially-crafted environment variables code injection attack ãªã‚‹ã‚‚ã®ã§é¨’ãŽã«ãªã£ã¦ã„ãŸã®ã§ã€ã•ã£ããæ‰‹å…ƒã® Apacheã§è©¦ã—ã¦ã¿ã¾ã—ãŸã€‚ /hoge.cgiã¨ã„ã†URIã§å®Ÿè¡Œã•ã‚Œã‚‹ã‚ˆã†ã«ã€ä¸€è¡Œã®ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‚’å‡ºåŠ›ã™ã‚‹ã ã‘ã® CGIã‚¹ã‚¯ãƒªãƒ—ãƒˆã‚’è¨ç½®ã—ã¾ã™ã€‚ã„ã£ã‘ã‚“ã€ãªã‚“ã®å…¥åŠ›ã‚‚ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆå´ã‹ã‚‰å—ã‘ä»˜ã‘ã¦ã„ãªã„ãŸã‚å±é™ºã®ã‚ã‚Šã‚ˆã†ã‚‚ãªãè¦‹ãˆã¾ã™ã€‚ #!/bin/sh echo "Content-type: text/plain" echo echo "Hi! I'm an ordinary CGI script w
drumsco 2014/09/26
security

shell

CVE-2014-6721

ShellShock
ãƒªãƒ³ã‚¯
Bash è„†å¼±æ€§ â€“ ShellShock- (2) CVE-2014-6271 / CVE-2014-7169 ã¯ä½•ãŒå±é™ºã§å•é¡Œãªã®ã‹ã‚’æ¤œè¨¼ã—ã¦ã¿ã¾ã—ãŸ â€“ CLARA ONLINE techblog
drumsco 2014/09/26
security

shell

CVE-2014-6721

ShellShock
ãƒªãƒ³ã‚¯
bashã®è„†å¼±æ€§(CVE-2014-6271) #ShellShock ã®é–¢é€£ãƒªãƒ³ã‚¯ã‚’ã¾ã¨ã‚ã¦ã¿ãŸ - piyolog
bashã«è„†å¼±æ€§ãŒç¢ºèªã•ã‚ŒãŸã¨ã—ã¦é¨’ãŽã«ãªã£ã¦ã„ã¾ã™ã€‚ã“ã“ã§ã¯CVE-2014-6271ã«é–¢ã™ã‚‹æƒ…å ±ã‚’ã¾ã¨ã‚ã¾ã™ã€‚ #è¨˜è¼‰å†…å®¹ã«ã¤ã„ã¦ã€èª¤ã£ã¦ã„ã‚‹ã€è¿½è¨˜ã—ãŸæ–¹ãŒã„ã„ç‰æƒ…å ±ãŒã”ã–ã„ã¾ã—ãŸã‚‰@piyokangoã¾ã§ã”é€£çµ¡ãŠé¡˜ã„ã—ã¾ã™ã€‚ è„†å¼±æ€§æƒ…å ± è„†å¼±æ€§ã®æ„›ç§° ShellShock Bashbug CVEç•ªå· Bashå‘¨ã‚Šã§ç™ºè¡Œã•ã‚Œã¦ã„ã‚‹CVEã¯6ã¤ã€‚ãã®å†…è©³ç´°ãŒä¸æ˜Žãªã®ãŒ2ã¤ã€‚(CVE-2014-6277,CVE-2014-6278) CVE ç™ºè¦‹è€… æƒ³å®šè„…å¨ ç‰¹è¨˜ CVE-2014-6271 Stephane Chazelasæ° ä»»æ„ã®ã‚³ãƒ¼ãƒ‰å®Ÿè¡Œ ShellShockã®ç™ºç«¯ã¨ãªã£ãŸãƒã‚°ã€‚ CVE-2014-7169 Tavis Ormandyæ° ä»»æ„ã®ã‚³ãƒ¼ãƒ‰å®Ÿè¡Œ CVE-2014-6271ä¿®æ£æ¼ã‚Œã«ã‚ˆã‚‹è„†å¼±æ€§ CVE-2014-7186 Redhat DoS ãƒ¡ãƒ¢ãƒªç ´å£Š(Out-of-Bo
drumsco 2014/09/26
security

shell

CVE-2014-6721

ShellShock
ãƒªãƒ³ã‚¯
ã€ŒBashã€ã«é‡å¤§ãªè„†å¼±æ€§ã€Heartbleedä»¥ä¸Šã«å±é™ºã¨ã®è¦‹æ–¹ã‚‚
UNIXãŠã‚ˆã³Linuxã§åºƒãä½¿ã‚ã‚Œã¦ã„ã‚‹ã‚·ã‚§ãƒ«ã€ŒBourne Again Shellï¼ˆBashï¼‰ã€ã«é‡å¤§ãªè„†å¼±æ€§ã€ŒCVE-2014-6271ã€ãŒç¢ºèªã•ã‚Œã€ç±³Red Hatãªã©ãŒæ³¨æ„ã‚’å‘¼ã³ã‹ã‘ã¦ã„ã‚‹ã€‚åŒè„†å¼±æ€§ã¯æ”»æ’ƒè€…ã«ä»»æ„ã®ã‚³ãƒžãƒ³ãƒ‰ã®å®Ÿè¡Œã‚’è¨±å¯ã—ã¦ã—ã¾ã†ãŠãã‚ŒãŒã‚ã‚‹ã€‚ Red HatãŒç¾åœ°æ™‚é–“2014å¹´9æœˆ24æ—¥ã«å…¬é–‹ã—ãŸãƒ–ãƒã‚°è¨˜äº‹ã«ã‚ˆã‚‹ã¨ã€æ”»æ’ƒè€…ã¯ä¸€å®šã®æ¡ä»¶ã®ã‚‚ã¨ã€ç‰¹åˆ¥ã«ç´°å·¥ã—ãŸç’°å¢ƒå¤‰æ•°ã‚’ä½¿ã£ã¦è„†å¼±æ€§ã‚’çªãã€ç’°å¢ƒå¤‰æ•°ã«å«ã¾ã‚Œã‚‹ä¸æ£ãªã‚³ãƒžãƒ³ãƒ‰ã‚’ãƒªãƒ¢ãƒ¼ãƒˆã§å®Ÿè¡Œã§ãã‚‹ã€‚ Bashã®é–‹ç™ºå…ƒã‹ã‚‰ã™ãã«ãƒ‘ãƒƒãƒãŒãƒªãƒªãƒ¼ã‚¹ã•ã‚ŒãŸãŒã€Red Hatã¯9æœˆ25æ—¥ã«ã€ŒCVE-2014-6271ã®ãƒ‘ãƒƒãƒã¯ä¸ååˆ†ã€ã¨ã™ã‚‹æŒ‡æ‘˜ã‚’è¿½è¨˜ã—ã¦ã„ã‚‹ã€‚ è¤‡æ•°ã®æµ·å¤–ãƒ¡ãƒ‡ã‚£ã‚¢ã®å ±é“ï¼ˆç±³New York Timesã€è‹±Financial Timesãªã©ï¼‰ã«ã‚ˆã‚‹ã¨ã€å•é¡Œã®è„†å¼±æ€§ã¯ã€ŒShellshockã€ã¨åä»˜ã‘ã‚‰ã‚Œã€ç±³å›½ç«‹æ¨™æº–æŠ€è¡“ç ”
drumsco 2014/09/26
security

shell

CVE-2014-6721

ShellShock
ãƒªãƒ³ã‚¯
Bash specially-crafted environment variables code injection attack
This article was originally published on the Red Hat Customer Portal. The information may no longer be current. Update 2014-09-30 19:30 UTC Questions have arisen around whether Red Hat products are vulnerable toÂ CVE-2014-6277Â andÂ CVE-2014-6278.Â We have determined thatÂ RHSA-2014:1306,Â RHSA-2014:1311,Â andÂ RHSA-2014:1312Â successfully mitigate the vulnerability and no additional actions need to be ta
drumsco 2014/09/26
security

shell

CVE-2014-6721

ShellShock
ãƒªãƒ³ã‚¯
1