[B! openssh] hibomaã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

hiboma id:hiboma

opensshã«é–¢ã™ã‚‹hibomaã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (6)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

CentOS 5.4ã«OpenSSH-LPKã‚’å°Žå…¥ã™ã‚‹ - ãƒ‘ãƒ³ãƒ€ã®ãƒ¡ãƒ¢å¸³
CentOS 5.4ã«OpenSSH-LPKã‚’å°Žå…¥ã—ãŸæ™‚ã®ãƒ¡ãƒ¢ã€‚ 2012-12-17 è¿½è¨˜ï¼šCentOS 6 ã§ã¯æ¨™æº–ãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã®ã¿ã§LPKå¯¾å¿œãŒå¯èƒ½ã«ãªã£ãŸã€‚ â†’ CentOS6.3 ã« openssh-ldap ã‚’å°Žå…¥ã™ã‚‹ - ãƒ‘ãƒ³ãƒ€ã®ãƒ¡ãƒ¢å¸³ 1. OpenSSH-LPKã¨ã¯ï¼Ÿ LPKã¯ LDAP Public Keys ã®ç•¥ã§ã€ãã®åã®é€šã‚ŠSSHã®èªè¨¼ã«ç”¨ã„ã‚‹RSAå…¬é–‹éµã‚’LDAPã§ç®¡ç†ã™ã‚‹æ©Ÿèƒ½ã®äº‹ã€‚ éžå¸¸ã«ä¾¿åˆ©ãªæ©Ÿèƒ½ãªã®ã ãŒæ®‹å¿µãªãŒã‚‰æ¨™æº–ã®OpenSSHã§ã¯å¯¾å¿œã—ã¦ãŠã‚‰ãšã€ãƒ‘ãƒƒãƒç‰ã§æä¾›ã•ã‚Œã¦ã„ã‚‹ã®ãŒç¾çŠ¶ã ã€‚å½“ç„¶ã€CentOSã®yumã§ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã§ãã‚‹ãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã«ã‚‚å«ã¾ã‚Œã¦ã„ãªã„ã®ã§ã€ã‚½ãƒ¼ã‚¹ã‹ã‚‰ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã™ã‚‹ã‹ã‚µãƒ¼ãƒ‰ãƒ‘ãƒ¼ãƒ†ã‚£è£½ã®rpmã‚’åˆ©ç”¨ã™ã‚‹ã—ã‹ãªã„ã€‚å°Žå…¥ã™ã‚‹ã‹ã©ã†ã‹ã¯æ…Žé‡ã«æ¤œè¨Žã™ã‚‹ã¹ãã ã€‚ 2. è¦ä»¶ã¨ä»®å®š ä»Šå›žã®è¦ä»¶ã¯ä»¥ä¸‹ã®é€šã‚Šã€‚ LDAPã§RSAå…¬é–‹éµã‚’ç®¡ç†ã—ã€ãã®R
hiboma 2011/10/25
ldap

openssh

ssh
ãƒªãƒ³ã‚¯
yebo blog: OpenSSH 5.9ãŒãƒªãƒªãƒ¼ã‚¹
2011/09/07 OpenSSH 5.9ãŒãƒªãƒªãƒ¼ã‚¹ OpenSSH 5.9ãŒãƒªãƒªãƒ¼ã‚¹ã•ã‚ŒãŸã€‚å®Ÿé¨“æ®µéšŽã®ãƒ¡ã‚«ãƒ‹ã‚ºãƒ ã¨ã—ã¦æ¨©é™åˆ†é›¢ã•ã‚ŒãŸåãƒ—ãƒã‚»ã‚¹ã®ã‚µãƒ³ãƒ‰ãƒœãƒƒã‚¯ã‚¹åŒ–ãŒå®Ÿè£…ã•ã‚Œã€OpenBSDã®systrace sandboxã€Mac OS X/Darwinã®seabelt sandboxã€ãã®ä»–rlimit sandboxãªã©ã«å¯¾å¿œã—ãŸã€‚ãã®ä»–ã€SHA256ã®HMACã€X11ãƒ•ã‚©ãƒ¯ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ãŒæ‹’å¦ã•ã‚ŒãŸå ´åˆã®è¦å‘Šãªã©ã€‚ ãƒ¡ãƒ¼ãƒ«ã§é€ä¿¡ BlogThis! Twitter ã§å…±æœ‰ã™ã‚‹ Facebook ã§å…±æœ‰ã™ã‚‹ Google ãƒã‚ºã§å…±æœ‰ã™ã‚‹ æŠ•ç¨¿è€… zubora æŠ•ç¨¿æ™‚é–“ 06:22 ãƒ©ãƒ™ãƒ«: Open Source, Security 0 ã‚³ãƒ¡ãƒ³ãƒˆ: ã‚³ãƒ¡ãƒ³ãƒˆã‚’æŠ•ç¨¿
hiboma 2011/09/07
openssh
ãƒªãƒ³ã‚¯
OpenSSH ã® Fingerprint ã‚’ AA ã«ã™ã‚‹æ–°æ©Ÿèƒ½ã‚’è©¦ã—ã¦ã¿ãŸ
OpenSSH ã« "Fingerprint ASCII Visualisation" ã¨ã„ã†æ©Ÿèƒ½ãŒã¤ã„ãŸã‚‰ã—ã„ http://www.st.ryukoku.ac.jp/~kjm/security/memo/2008/07.html#20080722_OpenSSH å¤šåˆ†ã€‚ã‚µãƒ¼ãƒã®å…¬é–‹éµã® Fingerprint ã‚’ã‚¢ã‚¹ã‚ãƒ¼ã‚¢ãƒ¼ãƒˆåŒ–ã—ã¦ã€ãã®ãƒ“ã‚¸ãƒ¥ã‚¢ãƒ«ã‚’è¦šãˆã¦ã‚µãƒ¼ãƒã®ãªã‚Šã™ã¾ã—ã‚’é˜²ãŽã¾ã—ã‚‡ã†ï¼ã¨ã„ã†æŠ€è¡“ã ã¨æ€ã„ã¾ã™ã€‚ä½†ã—experimentalã€‚ ã¨ã‚Šã‚ãˆãšæ‰‹å…ƒã§ make ã—ã¦ã¿ã‚‹ $ tar -zxvf openssh-5.1p1.tar.gz $ cd openssh-5.1p1 $ ./configure $ make Macã§ã‚‚å•é¡Œãªãmakeã§ããŸã€‚ VisualHostKey ã‚ªãƒ—ã‚·ãƒ§ãƒ³ã¯ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã§ã‚ªãƒ•ãªã®ã ã‘ã©ã€è¨å®šå¤‰ãˆã‚‹ã®ãŒé¢å€’ãªã®ã§ ssh ã« -o "VisualH
hiboma 2011/06/07
VisualHostKey // ãƒ¯ãƒã‚¿

openssh

ssh
ãƒªãƒ³ã‚¯
yebo blog: OpenSSHã®0dayã‚¨ã‚¯ã‚¹ãƒ—ãƒã‚¤ãƒˆç¶šå ±: å˜ãªã‚‹å™‚ã ã£ãŸ
2009/07/09 OpenSSHã®0dayã‚¨ã‚¯ã‚¹ãƒ—ãƒã‚¤ãƒˆç¶šå ±: å˜ãªã‚‹å™‚ã ã£ãŸ 7æ—¥ã«æµã‚ŒãŸOpenSSHã®0dayã‚¨ã‚¯ã‚¹ãƒ—ãƒã‚¤ãƒˆã®ç¶šå ±ã€‚OpenSSHã®ãƒ¡ãƒ³ãƒ†ãƒŠãƒ¼ã§ã‚ã‚‹ãƒ€ãƒŸã‚¢ãƒ³ãƒ»ãƒŸãƒ©ãƒ¼æ° (Damien Miller) ãŒã€ã“ã®ä»¶ã«é–¢ã—ã¦ãƒ¡ãƒ¼ãƒ«ã‚’å‡ºã—ã¦ã„ã‚‹ã€‚ã€Œç§ã¯éžå…¬é–‹æƒ…å ±ã‚’æŒã£ã¦ã„ãªã„ã€‚è¨€ã‚ã‚Œã¦ã„ã‚‹sshd 0dayã®è¢«å®³è€…ã®ä¸€äººã¨ãƒ¡ãƒ¼ãƒ«ã‚’äº¤æ›ã—ãŸã‘ã©ã€æ”»æ’ƒãŒsshdé–¢é€£ã ã£ãŸã‹ã®è¨¼æ‹ ãŒæä¾›ã•ã‚Œãªã‹ã£ãŸã€‚ç§ã¯å½¼ãŒæä¾›ã—ãŸãƒ‘ã‚±ãƒƒãƒˆã¨ãƒ¬ãƒ¼ã‚¹ã‚’è§£æžã—ãŸã‘ã©ã€å˜ãªã‚‹ãƒ–ãƒ«ãƒ¼ãƒˆãƒ•ã‚©ãƒ¼ã‚¹æ”»æ’ƒã®ã‚ˆã†ã«è¦‹ãˆã‚‹ãã€‚ãªã‚“ã§ã€çµå±€ã®ã¨ã“ã‚0dayãŒå˜åœ¨ã™ã‚‹ã‹ã©ã†ã‹ã¯è¿½æ±‚ã—ã¦ã„ãªã„ã€‚ä»Šã¾ã§ã®ã¨ã“ã‚è¨¼æ‹ ã¯åŒ¿åã®å™‚ã®ã¿ã§ã€è¨¼æ˜Žã§ããªã„ä¾µå…¥ã®è¨˜éŒ²ã ã‘ã ã€ã¨ã®ã“ã¨ã€‚çµå±€ã€ã¨ã‚“ã ãŠé¨’ãŒã›å™‚ã ã£ãŸã€‚ æŠ•ç¨¿è€… zubora æŠ•ç¨¿æ™‚é–“ 07:03 ãƒ©ãƒ™ãƒ«: Open Source, Security 0 ã‚³ãƒ¡ãƒ³ãƒˆ: ã‚³ãƒ¡ãƒ³
hiboma 2009/07/09
openssh

ssh
ãƒªãƒ³ã‚¯
yebo blog: OpenSSH 4.3ã«0dayã®ã‚¨ã‚¯ã‚¹ãƒ—ãƒã‚¤ãƒˆ
2009/07/08 OpenSSH 4.3ã«0dayã®ã‚¨ã‚¯ã‚¹ãƒ—ãƒã‚¤ãƒˆ SANSã«ã‚ˆã‚‹ã¨ã€0dayã®OpenSSHã®ã‚¨ã‚¯ã‚¹ãƒ—ãƒã‚¤ãƒˆãŒæ´»å‹•ã—ã¦ã„ã‚‹å™‚ãŒå‡ºãŸã€‚SANSã®èª¿æŸ»ã§ã¯ã€0pen0wnã¨ã„ã†day-openssh-remote-exploit.html">ã‚¨ã‚¯ã‚¹ãƒ—ãƒã‚¤ãƒˆãŒç¢ºèªã•ã‚Œã€OpenSSH 4.3ã®ã‚ˆã†ãªå¤ã„å®Ÿè£…ã§ç ´ã‚‰ã‚Œã¦ã—ã¾ã†ã‚ˆã†ã ã€‚ç¾è¡Œã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³5.1ã«å¯¾ã—ã¦ã¯å•é¡Œã¯ãªã„ã®ã§ã€4.3ã‚ˆã‚Šå¤ã„ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‚’ä½¿ã£ã¦ã„ã‚‹ã‚ˆã†ãªã‚‰æ—©æ€¥ã«5.2ã«ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‚¢ãƒƒãƒ—ã™ã‚‹äº‹ã‚’ãŠå‹§ã‚ã™ã‚‹ã€‚ anti-sec:~/pwn# ./map foo.net IP: xx.yy.143.133 ( foo.net ) WWW: Apache/2.2.11 SSH: SSH-2.0-OpenSSH_4.3 IP: xx.yy.204.101 ( afoo.net ) WWW: Apache/2.2.11
hiboma 2009/07/08
openssh

ssh

security
ãƒªãƒ³ã‚¯
OpenSSH æƒ…å ±
OpenSSH ç§»æ¤ç‰ˆä»˜å±žæ–‡æ›¸ã®ç¿»è¨³ OpenSSHã®ãƒªãƒªãƒ¼ã‚¹ãƒŽãƒ¼ãƒˆã®ç¿»è¨³ SSHã®RFCã®ç¿»è¨³ 2017å¹´ç¾åœ¨ã¯ æ˜¥å±±å¾å¾ã®Blog ã«ã¦è¨˜è¿°ã—ã¦ã„ã¾ã™. tDiary+Blogkitã‚’åˆ©ç”¨ã—ãŸæ–°ãƒšãƒ¼ã‚¸ã«ç§»è»¢ã—ã¾ã—ãŸ. ãŒã•ã‚‰ã« æ˜¥å±± å¾å¾ã®ãã‘ãƒ¼ : ssh - livedoor Blogï¼ˆãƒ–ãƒã‚°ï¼‰ ã§è¨˜è¿°ã™ã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã—ãŸ. ã“ã®ãƒšãƒ¼ã‚¸ã¯ã‚‚ã†æ›´æ–°ã—ãªã„äºˆå®šã§ã™. OpenSSHã«é–¢ã™ã‚‹æƒ…å ±ã‚’æä¾›ã™ã‚‹ãƒšãƒ¼ã‚¸ã§ã™. ç†è€…ã®éƒ½åˆä¸Š, OpenBSD ä»¥å¤–ã® Unix ã¸ç§»æ¤ã•ã‚ŒãŸ OpenSSH ã«ã¤ã„ã¦ã®æƒ…å ±ãŒä¸å¿ƒã¨ãªã‚‹ã§ã—ã‚‡ã†. OpenSSH 3.9, 3.9p1ãŒãƒªãƒªãƒ¼ã‚¹ã•ã‚Œã¾ã—ãŸ(2004/8/18). ãƒ¡ãƒ¼ãƒªãƒ³ã‚°ãƒªã‚¹ãƒˆ [email protected] (æ—§: ssh@security.quickml.com) OpenSSH ã‚„ OpenSSH ã«é–¢é€£ã™ã‚‹æœ€è¿‘ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ›
hiboma 2009/04/02
todo: Plaggerã§IRCã«é£›ã°ã™

ssh

openssh
ãƒªãƒ³ã‚¯
1