[B! security][bash] Nyohoã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

Nyoho id:Nyoho

securityã¨bashã«é–¢ã™ã‚‹Nyohoã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (9)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

bashã®è„†å¼±æ€§ã‚’æŠ±ãˆã‚‹NASã¸ã®æ”»æ’ƒã€æ—¥æœ¬ã‚„éŸ“å›½ãŒæ¨™çš„ã«
Linuxãªã©UNIXç³»OSã§ä½¿ã‚ã‚Œã¦ã„ã‚‹ã‚·ã‚§ãƒ«ã®ã€Œbashã€ã«æ¥µã‚ã¦æ·±åˆ»ãªè„†å¼±æ€§ãŒç™ºè¦šã—ãŸå•é¡Œã§ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¼æ¥ã®ç±³FireEyeã¯ç¾åœ°æ™‚é–“ã®10æœˆ1æ—¥ã€æ—¥æœ¬ã‚„éŸ“å›½ã€ç±³å›½ã®NASï¼ˆNetwork Attached Storageï¼‰ã‚·ã‚¹ãƒ†ãƒ ã‚’æ¨™çš„ã™ã‚‹æ”»æ’ƒã‚’ç¢ºèªã—ãŸã¨ç™ºè¡¨ã—ãŸã€‚ ã“ã®å•é¡Œã¯ã€ŒShellshockã€ã¨å‘¼ã°ã‚Œã€bashã§ç‰¹å®šã®ç´°å·¥ã‚’æ–½ã—ãŸç’°å¢ƒå¤‰æ•°ã‚’å‡¦ç†ã™ã‚‹æ–¹æ³•ã«èµ·å› ã™ã‚‹è„†å¼±æ€§ãŒè¤‡æ•°å˜åœ¨ã™ã‚‹ã€‚è„†å¼±æ€§ã‚’æ‚ªç”¨ã•ã‚Œã‚‹ã¨ã€ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®æ¨©é™ã§ä»»æ„ã®OSã‚³ãƒžãƒ³ãƒ‰ãŒå®Ÿè¡Œã•ã‚Œã¦ã—ã¾ã†æã‚ŒãŒã‚ã‚‹ã€‚ä¸€èˆ¬çš„ãªè¨å®šã§ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚’ä»‹ã—ã¦å®¹æ˜“ã«æ‚ªç”¨ã§ãã‚‹ã¨ã•ã‚Œã€2014å¹´4æœˆã«ç™ºè¦šã—ãŸOpenSSLã®è„†å¼±æ€§ï¼ˆHeartbleedï¼‰ã‚’è¶…ãˆã‚‹å±é™ºã ã¨ã®æŒ‡æ‘˜ã‚‚èžã‹ã‚Œã‚‹ã€‚ FireEyeãŒç¢ºèªã—ãŸæ”»æ’ƒã§ã¯æ—¥æœ¬ã‚„éŸ“å›½ã€ç±³å›½ã®å¤§å¦ã‚„ç ”ç©¶æ©Ÿé–¢ã§åˆ©ç”¨ã•ã‚Œã¦ã„ã‚‹QNAP Systemsè£½ã®NASãªã©ãŒæ¨™çš„ã«ãªã£ã¦ã„ã‚‹
Nyoho 2014/10/04
bash

security

ShellShock
ãƒªãƒ³ã‚¯
bash ã®è„†å¼±æ€§ "Shell Shock" ã®ã‚ã£ã¡ã‚ƒç´°ã‹ã„è©± (CVE-2014-6271) - ã‚‚ã‚ãš blog
â€»(2014/10/1 è¿½è¨˜) è„†å¼±æ€§ã®ç•ªå·ã‚’èª¤ã£ã¦ CVE-2014-6721 ã¨è¡¨è¨˜ã—ã¦ã—ã¾ã£ã¦ã„ã¾ã—ãŸ æ£ã—ãã¯ "CVE-2014-6271" ã§ã™ å¤±ç¤¼è‡´ã—ã¾ã—ãŸ â€»(2014/10/7 è¿½è¨˜) 2014/10/7 14:00æ™‚ç‚¹ã§ Shell Shock ã¸ã®ä¿®æ£ãƒ‘ãƒƒãƒã¯6å€‹ å…¬é–‹ã•ã‚Œã¦ã„ã¾ã™ æ—¢ã«å¯¾å¿œæ¸ˆã¿ã®ã‚·ã‚¹ãƒ†ãƒ ã§ã‚‚ãƒ‘ãƒƒãƒã®æ¼ã‚ŒãŒãªã„ã‹æ³¨æ„ã—ã¦ãã ã•ã„ ã‚·ã‚§ãƒ«ã«è„†å¼±æ€§ãŒè¦‹ã¤ã‹ã£ãŸã‚‰ã—ã„ã§ã™ ã“ã®ã‚³ãƒžãƒ³ãƒ‰ã‚’å®Ÿè¡Œã™ã‚‹ã¨è„†å¼±æ€§ãŒã‚ã‚‹ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‹ã®ãƒã‚§ãƒƒã‚¯ãŒã§ãã‚‹ã‚ˆã†ã§ã™ $ env x='() { :;}; echo vulnerable' bash -c "echo this is a test" ä»¥ä¸‹ã®ã‚ˆã†ã«è¡¨ç¤ºã•ã‚ŒãŸã‚‰ã‚¢ã‚¦ãƒˆã§ã™ vulnerable this is a test ã©ã†ã‚„ã‚‰ã€ã“ã®ã‚³ãƒžãƒ³ãƒ‰ãŒæ£å¸¸ã«å®Ÿè¡Œã§ãã‚‹ã¨ã„ã†ã®ãŒã“ã®è„†å¼±æ€§ã®æ£ä½“ã‚‰ã—ãã€ echo vuln
Nyoho 2014/09/30
ShellShock

bash

security
ãƒªãƒ³ã‚¯
ãƒ•ã‚¡ã‚¤ã‚¢ã‚¦ã‚©ãƒ¼ãƒ«å†…ã®ã‚µãƒ¼ãƒã«å¯¾ã™ã‚‹Shellshockã‚’åˆ©ç”¨ã—ãŸæ”»æ’ƒ - è‘‰ã£ã±æ—¥è¨˜
2014-09-27: è©²å½“ã‚µã‚¤ãƒˆä¸Šã«XSSãŒãªãã¦ã‚‚æ”»æ’ƒå¯èƒ½ã§ã‚ã‚‹ã“ã¨ãŒ id:mayuki ã•ã‚“ã®ã‚³ãƒ¡ãƒ³ãƒˆã§åˆ¤æ˜Žã—ã¾ã—ãŸã®ã§å…¨é¢çš„ã«æ›¸ãç›´ã—ã¾ã—ãŸã€‚ãƒ•ã‚¡ã‚¤ã‚¢ã‚¦ã‚©ãƒ¼ãƒ«å†…ã§ã‚ã£ã¦ã‚‚æ”»æ’ƒè€…ã¯ãƒ•ã‚¡ã‚¤ã‚¢ã‚¦ã‚©ãƒ¼ãƒ«å†…ã®Shellshockæ”»æ’ƒãŒé€šç”¨ã™ã‚‹CGIã®URLãŒã‚ã‹ã£ã¦ã„ã‚‹ã ã‘ã§æ”»æ’ƒå¯èƒ½ã§ã™ã®ã§æ—©æ€¥ã«å¯¾å¿œãŒå¿…è¦ã§ã™ï¼ä¼šç¤¾ã®ãƒ–ãƒã‚°ã«ã‚‚æ›¸ã„ã¦ã¾ã™ãŒã€ãƒ•ã‚¡ã‚¤ã‚¢ã‚¦ã‚©ãƒ¼ãƒ«å†…ã«ç½®ã„ã¦ã‚ã‚‹ã‚µãƒ¼ãƒã§æ”»æ’ƒè€…ãŒç›´æŽ¥ã‚¢ã‚¯ã‚»ã‚¹ã§ããªã„ã‹ã‚‰ã¨ã„ã£ã¦bashã®æ›´æ–°ã‚’æ€ ã£ã¦ã„ã‚‹ã¨ã€æ¡ä»¶ã«ã‚ˆã£ã¦ã¯æ”»æ’ƒãŒå¯èƒ½ã¨ãªã‚Šã¾ã™ã€‚ æ¡ä»¶ã¨ã—ã¦ã¯ã€ ãã®ã‚µãƒ¼ãƒã«ã¯ã‚·ã‚§ãƒ«ã‚’çµŒç”±ã—ã¦å¤–éƒ¨ã‚³ãƒžãƒ³ãƒ‰ã‚’èµ·å‹•ã™ã‚‹CGIç‰ãŒå‹•ã„ã¦ã„ã‚‹(é€šå¸¸ã®Shellshockã®æ”»æ’ƒã¨åŒæ¡ä»¶) æ”»æ’ƒè€…ãŒãã®URLã‚’äº‹å‰ã«çŸ¥ã£ã¦ã„ã‚‹(ã‚ã‚‹ã„ã¯æŽ¨æ¸¬å¯èƒ½) ã¨ãªã‚Šã¾ã™ã€‚ æ”»æ’ƒè€…ã¯ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚’ç½ URLã¸èª˜å°Žã—ã€ä»¥ä¸‹ã®ã‚ˆã†ãªJavaScriptã‚’ç½ ãƒšãƒ¼ã‚¸ä¸Šã§å‹•ã‹ã—ã€æ”»æ’ƒå¯¾è±¡ã®W
Nyoho 2014/09/27
bash

security

Shellshock
ãƒªãƒ³ã‚¯
ã‚¦ã‚§ãƒ–ã‚¢ãƒ—ãƒªã«ãŠã‘ã‚‹Bashè„†å¼±æ€§ã®å³æ»æ¡ä»¶ #ShellShock - ã‚ã‚‚ãŠãã°
æ¡ä»¶1. /bin/shã®å®Ÿä½“ãŒbashã®ãƒ‡ã‚£ã‚¹ãƒˆãƒªãƒ“ãƒ¥ãƒ¼ã‚·ãƒ§ãƒ³ RHEL CentOS Scientific Linux Fedora Amazon Linux openSUSE Arch Linux (è‡ªã‚‰è¨å®šã—ãŸå ´åˆ: Debian, Ubuntu) æ¡ä»¶2. å‹•ä½œç’°å¢ƒ CGI (ãƒ¬ãƒ³ã‚¿ãƒ«ã‚µãƒ¼ãƒã§ã‚ã‚ŠãŒã¡ãªCGIãƒ¢ãƒ¼ãƒ‰ã®PHPç‰ã‚‚å«ã‚€) Passenger(Ruby) æ¡ä»¶3. ãƒ—ãƒã‚°ãƒ©ãƒ å†…å®¹ Passengerã¯å…¨æ»äº¡ *1 systemã‚„ `command`ã€ '| /usr/lib/sendmail' ãªã©ã§å¤–éƒ¨ã‚³ãƒžãƒ³ãƒ‰å®Ÿè¡Œ *2 PHPã®mailã‚„mb_send_mailã€ãã®ä»–ãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯ç‰ã‚’ä»‹ã—ãŸãƒ¡ãƒ¼ãƒ«é€ä¿¡ *3 ä»¥ä¸‹ã¯æ¡ä»¶1ãŒä¸è¦ æ˜Žç¤ºçš„ã«bashã‚’å‘¼ã¶ å…ˆé ã§ #!/bin/bash ã‚„ #!/usr/bin/env bash ã—ã¦ã„ã‚‹ãƒ—ãƒã‚°ãƒ©ãƒ ã‚’å®Ÿè¡Œ (rbenv
Nyoho 2014/09/26
bash

security

ShellShock
ãƒªãƒ³ã‚¯
bashã®è„†å¼±æ€§(CVE-2014-6271) #ShellShock ã®é–¢é€£ãƒªãƒ³ã‚¯ã‚’ã¾ã¨ã‚ã¦ã¿ãŸ - piyolog
bashã«è„†å¼±æ€§ãŒç¢ºèªã•ã‚ŒãŸã¨ã—ã¦é¨’ãŽã«ãªã£ã¦ã„ã¾ã™ã€‚ã“ã“ã§ã¯CVE-2014-6271ã«é–¢ã™ã‚‹æƒ…å ±ã‚’ã¾ã¨ã‚ã¾ã™ã€‚ #è¨˜è¼‰å†…å®¹ã«ã¤ã„ã¦ã€èª¤ã£ã¦ã„ã‚‹ã€è¿½è¨˜ã—ãŸæ–¹ãŒã„ã„ç‰æƒ…å ±ãŒã”ã–ã„ã¾ã—ãŸã‚‰@piyokangoã¾ã§ã”é€£çµ¡ãŠé¡˜ã„ã—ã¾ã™ã€‚ è„†å¼±æ€§æƒ…å ± è„†å¼±æ€§ã®æ„›ç§° ShellShock Bashbug CVEç•ªå· Bashå‘¨ã‚Šã§ç™ºè¡Œã•ã‚Œã¦ã„ã‚‹CVEã¯6ã¤ã€‚ãã®å†…è©³ç´°ãŒä¸æ˜Žãªã®ãŒ2ã¤ã€‚(CVE-2014-6277,CVE-2014-6278) CVE ç™ºè¦‹è€… æƒ³å®šè„…å¨ ç‰¹è¨˜ CVE-2014-6271 Stephane Chazelasæ° ä»»æ„ã®ã‚³ãƒ¼ãƒ‰å®Ÿè¡Œ ShellShockã®ç™ºç«¯ã¨ãªã£ãŸãƒã‚°ã€‚ CVE-2014-7169 Tavis Ormandyæ° ä»»æ„ã®ã‚³ãƒ¼ãƒ‰å®Ÿè¡Œ CVE-2014-6271ä¿®æ£æ¼ã‚Œã«ã‚ˆã‚‹è„†å¼±æ€§ CVE-2014-7186 Redhat DoS ãƒ¡ãƒ¢ãƒªç ´å£Š(Out-of-Bo
Nyoho 2014/09/26
bash

security
ãƒªãƒ³ã‚¯
OS Xã®Bashã§è„†å¼±æ€§CVE-2014-6271ã‚’ä¿®æ£ã™ã‚‹æ–¹æ³•ã€‚
è¨˜äº‹å†…ã«åºƒå‘ŠãŒå«ã¾ã‚Œã¦ã„ã¾ã™ã€‚This article contains advertisements. Bashã®è„†å¼±æ€§CVE-2014-6271ã‚’OS X ã§ä¿®æ£ã™ã‚‹æ–¹æ³•ã§ã™ã€‚è©³ç´°ã¯ä»¥ä¸‹ã‹ã‚‰ã€‚ æ˜¨æ—¥æ˜Žã‚‰ã‹ã«ãªã£ãŸBashã®è„†å¼±æ€§ã€Œç’°å¢ƒå¤‰æ•°ã«ä»•è¾¼ã¾ã‚ŒãŸã‚³ãƒ¼ãƒ‰ã‚’å®Ÿè¡Œã—ã¦ã—ã¾ã†BASHã®è„†å¼±æ€§ã€ã¯æ—¢ã«Ubuntuãªã©ã§ã¯ä¿®æ£ã•ã‚Œã¦ã„ã¾ã™ãŒã€OS X ã§ã¯ã¾ã â€command line toolsâ€œã«ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆãŒã‹ã‹ã‚‰ãªã„ã®ã§ã€self updateã™ã‚‹æ–¹æ³•ã‚’ã¾ã¨ã‚ã¾ã—ãŸã€‚ ãƒã‚§ãƒƒã‚¯æ–¹æ³• ã‚¿ãƒ¼ãƒŸãƒŠãƒ«.appã‚’èµ·å‹•ã—ã¦ä»¥ä¸‹ã®ä¸€è¡Œã‚’å®Ÿè¡Œ env x='() { :;}; echo vulnerable' bash -c "echo hello" ã“ã®çŠ¶æ…‹ã§ vulnerable hello ã¨è„†å¼±â€vulnerableâ€ã¨å‡ºã‚Œã°è„†å¼±æ€§ãŒå˜åœ¨ã—ã¾ã™ã€‚ Homebrewã‚„MacPorts Homeb
Nyoho 2014/09/25
bash

security
ãƒªãƒ³ã‚¯
BASHã®è„†å¼±æ€§ã§CGIã‚¹ã‚¯ãƒªãƒ—ãƒˆã«ã‚¢ãƒ¬ã•ã›ã¦ã¿ã¾ã—ãŸ
ç’°å¢ƒå¤‰æ•°ã«ä»•è¾¼ã¾ã‚ŒãŸã‚³ãƒ¼ãƒ‰ã‚’å®Ÿè¡Œã—ã¦ã—ã¾ã†BASHã®è„†å¼±æ€§ãŒ CGIã‚¹ã‚¯ãƒªãƒ—ãƒˆã«å½±éŸ¿ã‚’ä¸Žãˆã‚‹ã‹è©¦ã—ã¦ã¿ãŸã‚‰çµæžœã¯æ‚²æƒ¨ãªæ„Ÿã˜ã« Tweet 2014å¹´9æœˆ25æ—¥ å¶‹ç”°å¤§è²´ ã“ã®è¨˜äº‹ã¯2014å¹´ã®ã‚‚ã®ã§ã™ æœã‹ã‚‰ Bash specially-crafted environment variables code injection attack ãªã‚‹ã‚‚ã®ã§é¨’ãŽã«ãªã£ã¦ã„ãŸã®ã§ã€ã•ã£ããæ‰‹å…ƒã® Apacheã§è©¦ã—ã¦ã¿ã¾ã—ãŸã€‚ /hoge.cgiã¨ã„ã†URIã§å®Ÿè¡Œã•ã‚Œã‚‹ã‚ˆã†ã«ã€ä¸€è¡Œã®ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‚’å‡ºåŠ›ã™ã‚‹ã ã‘ã® CGIã‚¹ã‚¯ãƒªãƒ—ãƒˆã‚’è¨ç½®ã—ã¾ã™ã€‚ã„ã£ã‘ã‚“ã€ãªã‚“ã®å…¥åŠ›ã‚‚ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆå´ã‹ã‚‰å—ã‘ä»˜ã‘ã¦ã„ãªã„ãŸã‚å±é™ºã®ã‚ã‚Šã‚ˆã†ã‚‚ãªãè¦‹ãˆã¾ã™ã€‚ #!/bin/sh echo "Content-type: text/plain" echo echo "Hi! I'm an ordinary CGI script w
Nyoho 2014/09/25
ã“ã‚Œã¯ç ´å£ŠåŠ›å¤§ãã„ãª

bash

security
ãƒªãƒ³ã‚¯
Bash specially-crafted environment variables code injection attack
This article was originally published on the Red Hat Customer Portal. The information may no longer be current. Update 2014-09-30 19:30 UTC Questions have arisen around whether Red Hat products are vulnerable toÂ CVE-2014-6277Â andÂ CVE-2014-6278.Â We have determined thatÂ RHSA-2014:1306,Â RHSA-2014:1311,Â andÂ RHSA-2014:1312Â successfully mitigate the vulnerability and no additional actions need to be ta
Nyoho 2014/09/25
bash

security
ãƒªãƒ³ã‚¯
1