[B! ShellShock] SyncHackã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

SyncHack id:SyncHack

ShellShockã«é–¢ã™ã‚‹SyncHackã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (8)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ShellShockã«ç®¡ç†è€…ã¯ã‚·ãƒ§ãƒƒã‚¯ï¼ ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰å®šæœŸå¤‰æ›´ã®è°è«–ã©ã“ã‚ã§ã¯ãªã„ï¼Ÿ
ä¸ã§ã‚‚å¤šã‹ã£ãŸæ„è¦‹ã¯ã€ã€Œã‚µãƒ¼ãƒ“ã‚¹ã”ã¨ã«ç•°ãªã‚‹ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’è¨å®šã™ã‚‹ã€ã€Œåˆ†ã‹ã‚Šã«ãã„æ–‡å—åˆ—ã‚’ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã«ã™ã‚‹ã€ã®äºŒã¤ã¨åŒåˆ—ã«ã€Œãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®å®šæœŸå¤‰æ›´ã€ã‚’ä¸¦ã¹ã‚‹ã®ã¯ã©ã†ãªã®ã‹ã¨ã„ã†ã“ã¨ã¨ã€ã“ã‚Œã‚‰ã®ã„ãšã‚Œã‹ã‚’å¯¾ç–ã¨ã™ã‚‹ã¨ã„ã†è¦ä»¶ã§ã‚ã‚‹ãŸã‚ã€ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®å®šæœŸå¤‰æ›´ã ã‘ã‚’æŽ¡ç”¨ã—ã¦ã—ã¾ã†ã¨ã€æ ¹æœ¬çš„ãªå¯¾ç–ã«ã¯ãªã‚‰ãªã„ã®ã§ã¯ãªã„ã‹ã¨ã„ã†æ„è¦‹ã§ã™ã€‚ ãã‚Œã«å¯¾ã—ã€@keijitakedaæ°ã‹ã‚‰ã€Œå¿…ãšã—ã‚‚é§„ç›®ã¨ã‚‚æ€ãˆãªã„ã€ä¸€å¾‹ã«ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®å®šæœŸå¤‰æ›´ã‚’ã‚ã–ç¬‘ã†ã‚ˆã†ãªé¢¨æ½®ã‚’åºƒã‚ã‚‹ã“ã¨ã¯ã‚ã¾ã‚Šã‚ˆããªã„ã€ã¨åè«–ãŒã‚ã‚Šã¾ã—ãŸï¼ˆãªãŠã€@keijitakedaæ°ã¯åŸºæœ¬çš„ã«ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®å®šæœŸå¤‰æ›´ã«ã¯åå¯¾ã®ç«‹å ´ã ãã†ã§ã™ï¼‰ã€‚ @keijitakedaæ°ã«å¯¾ã—ã¦ã€ãŸãã•ã‚“ã®åè«–ãƒ„ã‚¤ãƒ¼ãƒˆãŒå‘ã‹ã„ã¾ã™ã€‚ã¾ã¨ã‚ã‚‹ã¨ã€å®šæœŸå¤‰æ›´ã¯ä¸€å®šã®åŠ¹æžœã¯ã‚ã‚‹ã®ã¯åˆ†ã‹ã£ã¦ã¯ã„ã‚‹ã‘ã‚Œã©ã€ã‚ãã¾ã§ã‚‚ä»–ã®2ã¤ã®è£œåŠ©çš„ãªå½¹å‰²ã«éŽãŽãªã„ã®ã§ã€ã“ã“ã§ã„ãšã‚Œã‹ã®å¯¾ç–ã«å«ã‚ã‚‹ã®
SyncHack 2014/10/26
ShellShock

password
ãƒªãƒ³ã‚¯
Bashã®å…¬å¼ãƒ‘ãƒƒãƒã€Shellshockã«å¯¾å¿œã—ãã‚Œã¦ã„ãªã„ - JPCERT/CC
JPCERT/CCã¯9æœˆ30æ—¥ã€Bashã®è„†å¼±æ€§ã€ŒShellshockã€ã«ã¤ã„ã¦æ–°ãŸãªç™ºè¡¨ã‚’è¡Œã£ãŸã€‚ã“ã‚Œã«ã‚ˆã‚‹ã¨ã€GNU Project ã‹ã‚‰è„†å¼±æ€§ã‚’ä¿®æ£ã—ãŸãƒãƒ¼ã‚¸ãƒ§ãƒ³ã®GNU bashãŒå…¬é–‹ã•ã‚ŒãŸãŒã€è„†å¼±æ€§ã€ŒCVE-2014-7186ã€ã€ŒCVE-2014-7187ã€ã«ã¤ã„ã¦ä¿®æ£ã•ã‚Œã¦ã„ãªã„ã¨ã„ã†ã€‚ GNU Project ã‹ã‚‰ã¯ã€ä»¥ä¸‹ã®è„†å¼±æ€§ã‚’ä¿®æ£ã—ãŸãƒãƒ¼ã‚¸ãƒ§ãƒ³ã®GNU bashãŒå…¬é–‹ã•ã‚Œã¦ã„ã‚‹ã€‚ Bash 4.3 Patch 27 Bash 4.2 Patch 50 Bash 4.1 Patch 14 Bash 4.0 Patch 41 Bash 3.2 Patch 54 Bash 3.1 Patch 20 Bash 3.0 Patch 19 ä»Šå›žBashã«ãŠã„ã¦ã¯ã€ã€ŒCVE-2014-6271ã€ã€ŒCVE-2014-7169ã€ã€ŒCVE-2014-7186ã€ã€ŒCVE-2014-7187ã€
SyncHack 2014/10/02
ShellShock
ãƒªãƒ³ã‚¯
bashã®è„†å¼±æ€§ã€å›½å†…ãƒ¡ãƒ¼ã‚«ãƒ¼ã®å¯¾å¿œçŠ¶æ³ã€€10æœˆ1æ—¥å¤•æ–¹ç¾åœ¨ã®ã¾ã¨ã‚
å¯Œå£«é€šã‚„ãƒ¤ãƒžãƒã€ãƒŸãƒ©ã‚¯ãƒ«ãƒªãƒŠãƒƒã‚¯ã‚¹ãªã©ãŒè„†å¼±æ€§ã®å½±éŸ¿ã‚’å—ã‘ã‚‹è£½å“ãªã©ã«ã¤ã„ã¦æƒ…å ±ã‚’å…¬é–‹ã—ã¦ã„ã‚‹ï¼ˆè¿½è¨˜ã‚ã‚Šï¼‰ã€‚ Linuxãªã©UNIXç³»OSã§ä½¿ã‚ã‚Œã¦ã„ã‚‹ã‚·ã‚§ãƒ«ã€Œbashã€ã«OSã‚³ãƒžãƒ³ãƒ‰ã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã®æ·±åˆ»ãªè„†å¼±æ€§ãŒç™ºè¦šã—ãŸå•é¡Œã§ã€10æœˆ1æ—¥å¤•æ–¹ç¾åœ¨ã®å›½å†…ãƒ¡ãƒ¼ã‚«ãƒ¼ã®å¯¾å¿œçŠ¶æ³ã‚’JPCERT ã‚³ãƒ¼ãƒ‡ã‚£ãƒãƒ¼ã‚·ãƒ§ãƒ³ã‚»ãƒ³ã‚¿ãƒ¼ãªã©ãŒæ˜Žã‚‰ã‹ã«ã—ãŸã€‚å¯Œå£«é€šã‚„ãƒ¤ãƒžãƒã€ãƒŸãƒ©ã‚¯ãƒ«ãƒªãƒŠãƒƒã‚¯ã‚¹ãªã©ãŒè„†å¼±æ€§ã®å½±éŸ¿ã‚’å—ã‘ã‚‹è£½å“ãªã©ã«ã¤ã„ã¦æƒ…å ±ã‚’å…¬é–‹ã—ã¦ã„ã‚‹ã€‚ ï¼ˆ2014å¹´10æœˆ1æ—¥18æ™‚æ›´æ–°ã€ã‚¢ã‚¤ãƒ»ã‚ªãƒ¼ãƒ»ãƒ‡ãƒ¼ã‚¿æ©Ÿå™¨ã‚’è¿½è¨˜ï¼‰ å¯Œå£«é€š å½±éŸ¿ã‚’å—ã‘ã‚‹è£½å“ï¼ˆé–‹ç™ºå…ƒãƒ‘ãƒƒãƒã‚ã‚Šï¼‰â€¦â€¦Oracle Solarisã€Red Hat Enterprise Linuxã€VMware å½±éŸ¿ã‚’å—ã‘ã‚‹è£½å“ï¼ˆå¯¾å¿œèª¿æ•´ä¸ï¼‰â€¦â€¦ETERNUS NR1000F series èª¿æŸ»ä¸ã®è£½å“â€¦â€¦IPCOM EX/VX/VA/L/Sã‚·ãƒªãƒ¼ã‚º â€»Interst
SyncHack 2014/10/01
ShellShock
ãƒªãƒ³ã‚¯
Appleã€ã€Œbashã€ã®è„†å¼±æ€§ã‚’ä¿®æ£ã™ã‚‹OS Xã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã‚’å…¬é–‹ã€€
SyncHack 2014/10/01
ShellShock
ãƒªãƒ³ã‚¯
bashã«ãŠã‘ã‚‹è„†å¼±æ€§ã€ŒShellshockã€ã«ã¤ã„ã¦
2014/09/26ã€€ã‚³ãƒ¼ã‚¹ï¼šå…ƒç¥–ã“ã£ã¦ã‚Š ã€Œå…ƒç¥–ã“ã£ã¦ã‚Šã€è¨˜äº‹ã¯ãƒãƒƒãƒˆã‚¨ãƒ¼ã‚¸ã‚§ãƒ³ãƒˆæ—§ãƒ–ãƒã‚°[netagent-blog.jp]ã«æŽ²è¼‰ã•ã‚Œã¦ã„ãŸè¨˜äº‹ã§ã‚ã‚Šã€ç¾åœ¨ãƒãƒƒãƒˆã‚¨ãƒ¼ã‚¸ã‚§ãƒ³ãƒˆã«åœ¨ç±ã—ã¦ã„ãªã„ãƒ©ã‚¤ã‚¿ãƒ¼ã®è¨˜äº‹ã‚‚å«ã¿ã¾ã™ã€‚ bashã«ãŠã‘ã‚‹è„†å¼±æ€§ã€ŒShellshockã€ã«ã¤ã„ã¦ Linuxã‚„Mac OS Xãªã©ã®UNIXç³»OSã§åºƒãä½¿ç”¨ã•ã‚Œã¦ã„ã‚‹bashã«è¦‹ã¤ã‹ã£ãŸè„†å¼±æ€§(Shellshockã¨å‘¼ã°ã‚Œã¦ã„ã¾ã™)ãŒå…ˆæ—¥ã‹ã‚‰è©±é¡Œã«ãªã£ã¦ã„ã¾ã™ã€‚ å¼Šç¤¾ã§ã‚‚ã“ã®bashã®è„†å¼±æ€§ã«ã¤ã„ã¦èª¿æŸ»ã‚’è¡Œã„ã¾ã—ãŸã€‚ â– æ¦‚è¦ ç’°å¢ƒå¤‰æ•°ã«ç‰¹å®šã®æ–‡å—åˆ—ã‚’è¨å®šã™ã‚‹ã ã‘ã§ãã®ç’°å¢ƒå¤‰æ•°å†…ã®æ–‡å—åˆ—ã‚’ã‚·ã‚§ãƒ«ãŒé–¢æ•°ã¨ã—ã¦å®Ÿè¡Œã—ã¦ã—ã¾ã„ã¾ã™ã€‚ ã‚·ã‚§ãƒ«ã‚’é€šã˜ã¦ã‚³ãƒžãƒ³ãƒ‰ç‰ã‚’å®Ÿè¡Œã™ã‚‹å¹…åºƒã„ç’°å¢ƒã§å½±éŸ¿ãŒã‚ã‚Šã¾ã™ãŒã€ç‰¹ã«é¡•è‘—ã«å½±éŸ¿ã‚’å—ã‘ã‚‹ã®ã¯CGIç‰ã®Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ç’°å¢ƒã§ã™ã€‚ CGIã‚’ã¯ã˜ã‚ã¨ã™ã‚‹Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã§ã¯Webãƒ–ãƒ©
SyncHack 2014/09/27
ShellShock
ãƒªãƒ³ã‚¯
bashã«ã‚³ãƒ¼ãƒ‰ã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã®è„†å¼±æ€§ã€ŒShellshockã€ã€ç®¡ç†è€…ã«å¤§ããªã‚·ãƒ§ãƒƒã‚¯
bashã«ã‚³ãƒ¼ãƒ‰ã‚¤ãƒ³ã‚¸ã‚§ã‚¯ã‚·ãƒ§ãƒ³ã®è„†å¼±æ€§ã€ŒShellshockã€ã€ç®¡ç†è€…ã«å¤§ããªã‚·ãƒ§ãƒƒã‚¯ï¼šå½±éŸ¿ç¯„å›²ã¯ã©ã“ã¾ã§ï¼Ÿ UNIXç³»OSã®ã‚·ã‚§ãƒ«ã€Œbashã€ã«æ¥µã‚ã¦æ·±åˆ»ãªè„†å¼±ï¼ˆãœã„ã˜ã‚ƒãï¼‰æ€§ãŒç™ºè¦‹ã•ã‚ŒãŸã€‚ã™ã§ã«ã“ã®è„†å¼±æ€§ã‚’ã‚¹ã‚ãƒ£ãƒ³ã™ã‚‹é€šä¿¡ã‚’è¦³æ¸¬ã—ãŸã¨ã„ã†å ±å‘Šã‚‚ã‚ã‚Šã€ä¿®æ£ãƒ‘ãƒƒãƒã®é©ç”¨ã‚„ç¶™ç¶šçš„ãªæƒ…å ±åŽé›†ãŒæœ›ã¾ã‚Œã‚‹ã€‚ ç±³å›½æ™‚é–“ã®2014å¹´9æœˆ24æ—¥ã€Linuxã‚„Mac OS Xãªã©ã®UNIXç³»OSã§ä½¿ã‚ã‚Œã¦ã„ã‚‹ã‚·ã‚§ãƒ«ã€Œbashï¼ˆBourne Again Shellï¼‰ã€ã«ã€æ¥µã‚ã¦æ·±åˆ»ãªè„†å¼±æ€§ï¼ˆCVE-2014-6271ï¼‰ãŒç™ºè¦‹ã•ã‚ŒãŸã€‚ã‚·ã‚§ãƒ«ã®ç’°å¢ƒå¤‰æ•°ã¨ã—ã¦å¤–éƒ¨å…¥åŠ›ã‚’å—ã‘å…¥ã‚Œã‚‹è¨å®šã¨ãªã£ã¦ã„ã‚‹ç’°å¢ƒã§ã¯ã€æœ€æ‚ªã®å ´åˆã€ãƒªãƒ¢ãƒ¼ãƒˆã‹ã‚‰ä»»æ„ã®ã‚³ãƒžãƒ³ãƒ‰ã‚’å®Ÿè¡Œã•ã‚Œã‚‹æã‚ŒãŒã‚ã‚‹ã€‚bashã®é…å¸ƒå…ƒã§ã‚ã‚‹GNU Projectã‚„ãƒ‘ãƒƒã‚±ãƒ¼ã‚¸é…å¸ƒã‚’è¡Œã£ã¦ã„ã‚‹å„Linuxãƒ‡ã‚£ã‚¹ãƒˆãƒªãƒ“ãƒ¥ãƒ¼ã‚·ãƒ§ãƒ³ãŒãƒ‘ãƒƒãƒã‚’å…¬é–‹æ¸ˆã¿ã§ã€é€Ÿã‚„ã‹ã«é©ç”¨ã™ã‚‹ã‚ˆã†
SyncHack 2014/09/27
ShellShock
ãƒªãƒ³ã‚¯
æ›´æ–°ï¼šbash ã®è„†å¼±æ€§å¯¾ç–ã«ã¤ã„ã¦(CVE-2014-6271 ç‰)ï¼šIPA ç‹¬ç«‹è¡Œæ”¿æ³•äºº æƒ…å ±å‡¦ç†æŽ¨é€²æ©Ÿæ§‹
GNU Project ãŒæä¾›ã™ã‚‹ bash ã¯ã€Linux ãªã© UNIX ç³»ã® OS ã«å«ã¾ã‚Œã‚‹ã‚³ãƒžãƒ³ãƒ‰ã‚’å®Ÿè¡Œã™ã‚‹ãŸã‚ã®ã‚·ã‚§ãƒ«ï¼ˆOS ã®ä¸€éƒ¨ã¨ã—ã¦ãƒ—ãƒã‚°ãƒ©ãƒ ã®èµ·å‹•ã‚„åˆ¶å¾¡ãªã©ã‚’è¡Œã†ãƒ—ãƒã‚°ãƒ©ãƒ ï¼‰ã§ã™ã€‚ bash ã«ä»»æ„ã® OS ã‚³ãƒžãƒ³ãƒ‰ã‚’å®Ÿè¡Œã•ã‚Œã‚‹è„†å¼±æ€§ (CVE-2014-6271) ãŒç™ºè¦‹ã•ã‚Œã€2014 å¹´ 9 æœˆ 24 æ—¥ã«ä¿®æ£ãƒ‘ãƒƒãƒãŒå…¬é–‹ã•ã‚Œã¾ã—ãŸã€‚ ãŸã ã—ã€CVE-2014-6271ã¸ã®ä¿®æ£ãŒä¸ååˆ†ã§ã‚ã‚‹ã¨ã„ã†æƒ…å ±ãŒã‚ã‚Šã¾ã™ã€‚ãã®ä¿®æ£ãŒä¸ååˆ†ã§ã‚ã‚‹ã“ã¨ã«ã‚ˆã‚‹è„†å¼±æ€§ (CVE-2014-7169) ã«å¯¾å¿œã—ãŸã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã¾ãŸã¯ãƒ‘ãƒƒãƒã‚‚å„ãƒ™ãƒ³ãƒ€ã‹ã‚‰é †æ¬¡å…¬é–‹ã•ã‚Œã¦ã„ã¾ã™ã€‚ bash ã‚’ä½¿ç”¨ã—ã¦ OS ã‚³ãƒžãƒ³ãƒ‰ã‚’å®Ÿè¡Œã™ã‚‹ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚’ä»‹ã—ã¦ã€é éš”ã‹ã‚‰ä»»æ„ã® OS ã‚³ãƒžãƒ³ãƒ‰ã‚’å®Ÿè¡Œã•ã‚Œã‚‹å¯èƒ½æ€§ãŒã‚ã‚Šã¾ã™ã€‚ å›³ï¼šè„†å¼±æ€§ã‚’æ‚ªç”¨ã—ãŸæ”»æ’ƒã®ã‚¤ãƒ¡ãƒ¼ã‚¸ è¦å¯Ÿåºã«ã‚ˆã‚‹ã¨æœ¬è„†å¼±æ€§ã‚’æ¨™çš„ã¨ã—ãŸã‚¢ã‚¯ã‚»ã‚¹ãŒè¦³
SyncHack 2014/09/27
ShellShock
ãƒªãƒ³ã‚¯
ã‚¦ã‚§ãƒ–ã‚¢ãƒ—ãƒªã«ãŠã‘ã‚‹Bashè„†å¼±æ€§ã®å³æ»æ¡ä»¶ #ShellShock - ã‚ã‚‚ãŠãã°
æ¡ä»¶1. /bin/shã®å®Ÿä½“ãŒbashã®ãƒ‡ã‚£ã‚¹ãƒˆãƒªãƒ“ãƒ¥ãƒ¼ã‚·ãƒ§ãƒ³ RHEL CentOS Scientific Linux Fedora Amazon Linux openSUSE Arch Linux (è‡ªã‚‰è¨å®šã—ãŸå ´åˆ: Debian, Ubuntu) æ¡ä»¶2. å‹•ä½œç’°å¢ƒ CGI (ãƒ¬ãƒ³ã‚¿ãƒ«ã‚µãƒ¼ãƒã§ã‚ã‚ŠãŒã¡ãªCGIãƒ¢ãƒ¼ãƒ‰ã®PHPç‰ã‚‚å«ã‚€) Passenger(Ruby) æ¡ä»¶3. ãƒ—ãƒã‚°ãƒ©ãƒ å†…å®¹ Passengerã¯å…¨æ»äº¡ *1 systemã‚„ `command`ã€ '| /usr/lib/sendmail' ãªã©ã§å¤–éƒ¨ã‚³ãƒžãƒ³ãƒ‰å®Ÿè¡Œ *2 PHPã®mailã‚„mb_send_mailã€ãã®ä»–ãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯ç‰ã‚’ä»‹ã—ãŸãƒ¡ãƒ¼ãƒ«é€ä¿¡ *3 ä»¥ä¸‹ã¯æ¡ä»¶1ãŒä¸è¦ æ˜Žç¤ºçš„ã«bashã‚’å‘¼ã¶ å…ˆé ã§ #!/bin/bash ã‚„ #!/usr/bin/env bash ã—ã¦ã„ã‚‹ãƒ—ãƒã‚°ãƒ©ãƒ ã‚’å®Ÿè¡Œ (rbenv
SyncHack 2014/09/27
ShellShock
ãƒªãƒ³ã‚¯
1