[B! DoS] kaito834ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

kaito834 id:kaito834

DoSã«é–¢ã™ã‚‹kaito834ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (6)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

Apache HTTPD 2.2.20 ã«ãŠã‘ã‚‹å¤‰æ›´ç‚¹ (CVE-2011-3192 Range header DoS å¯¾ç–) - LowPriority
æ—¢ã«ãƒ˜ãƒƒãƒ€å‰Šé™¤è¨å®šã§å¯¾å¿œã‚’çµ‚ãˆãŸäººã‚‚å¤šã„ã¨æ€ã„ã¾ã™ãŒã€æ–°ã—ã„ãƒãƒ¼ã‚¸ãƒ§ãƒ³ãŒå‡ºãŸæ§˜ãªã®ã§ã€‚ ã¾ã æœªå¯¾ç–ã®äººã¯ã€ã©ã¡ã‚‰ã®å¯¾å¿œãŒãƒªã‚¹ã‚¯ãŒä½Žã„ã‹åˆ¤æ–ã—ã¦å¯¾ç–ã•ã‚Œã‚‹ã¨è‰¯ã„ã‹ã¨æ€ã„ã¾ã™ã€‚ æ–°ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã®ã‚¢ãƒŠã‚¦ãƒ³ã‚¹ã¯ä»¥ä¸‹ã§ã™ã€‚ Apache HTTP Server 2.2.20 Released http://www.apache.org/dist/httpd/Announcement2.2.html ä»–ã«å¤‰ã‚ã£ã¦ã‚‹ç®‡æ‰€ã‚‚ã‚ã‚Šã¾ã™ãŒã€ä»Šå›žã®è„†å¼±æ€§(CVE-2011-3192)å¯¾å¿œã§ä¿®æ£ã•ã‚ŒãŸ ç®‡æ‰€ã§ã€å¤–éƒ¨ã‹ã‚‰ã‚¢ã‚¯ã‚»ã‚¹ã—ãŸéš›ã«ã‚‚å¤‰æ›´ãŒã¿ã‚‰ã‚Œã‚‹ç‚¹ãŒãƒ¡ã‚¤ãƒ³ã«ãªã‚Šã¾ã™ã€‚ å½“ç„¶ãƒ—ãƒã‚»ã‚¹ãŒè‚¥å¤§åŒ–ã™ã‚‹éƒ¨åˆ†ã¯ç›´ã£ã¦ã¾ã™ãŒã€å†…éƒ¨å‹•ä½œãªã®ã§è©³ç´°ã¯çœç•¥ã—ã¾ã™ã€‚ ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã¯2.2.19ã¨2.2.20ã®æ¯”è¼ƒã«ãªã‚Šã¾ã™ã€‚ Rangeãƒªã‚¯ã‚¨ã‚¹ãƒˆé–¢é€£ã®å‡¦ç†ã§å¤‰æ›´ãŒã‚ã£ãŸã€ç„¡ã‹ã£ãŸç®‡æ‰€ã¯ä»¥ä¸‹ã®é€šã‚Šã§ã™ã€‚ å‹•ä½œãŒå¤‰ã‚ã£ãŸç‚¹ 32åŒºé–“ã‚’è¶…ãˆ
kaito834 2011/09/04
2011å¹´8æœˆã«å®Ÿè¨¼ãƒ„ãƒ¼ãƒ«ãŒå…¬é–‹ã•ã‚ŒãŸApacheã®è„†å¼±æ€§ï¼ˆCVE-2011-3192ï¼‰ã«é–¢ã™ã‚‹ãƒ–ãƒã‚°è¨˜äº‹ã€‚ã“ã®è„†å¼±æ€§ãŒä¿®æ£ã•ã‚ŒãŸ2.2.20ã§ã®å¤‰æ›´ç‚¹ã«è¨€åŠã—ã¦ã„ã‚‹ã€‚

2011å¹´

Vuln

DoS
ãƒªãƒ³ã‚¯
Apache killerã¯å±é™ºï½žApache killerã‚’è©•ä¾¡ã™ã‚‹ä¸Šã§ã®æ³¨æ„ï½ž
Apacheã®è„†å¼±æ€§(CVE-2011-3192)ã„ã‚ã‚†ã‚‹Apache killerãŒè©±é¡Œã«ãªã£ã¦ã„ã¾ã™ãŒã€ãã®è„…å¨ã«ã¤ã„ã¦ã¯ä¸€éƒ¨èª¤è§£ãŒã‚ã‚‹ã‚ˆã†ã§ã™ã€‚ ä»¥ä¸‹ã¯ã€éžå¸¸ã«è„…å¨ã¨ã™ã‚‹å ±å‘Šã®ä¾‹ã§ã™ã€‚ ä¸€æ–¹ä»Šå›žã®ã¯ãƒ—ãƒã‚»ã‚¹ã®è‚¥å¤§åŒ–ã‚’ä¼´ã†ã®ã§ã€å®Ÿãƒ¡ãƒ¢ãƒªæ¶ˆè²»ã—ã¦æ›´ã«ã‚¹ãƒ¯ãƒƒãƒ—ã‚‚ä½¿ã„å°½ãã—ã¦OSæ¯Žæ¿€é‡ã«ãªã£ãŸã‚ã’ãLinuxã¨ã‹ã®å ´åˆã¯OOM Killerç™ºå‹•ã¨ã€ä»–ã®ãƒ—ãƒã‚»ã‚¹ã‚„å ´åˆã«ã‚ˆã£ã¦ã¯OSã‚’å·»ãè¾¼ã‚“ã§é€ã£ã¦ã—ã¾ã„ã¾ã™ã€‚ CVE-2011-3192 Range header DoS vulnerability Apache HTTPD 1.3/2.xã‚ˆã‚Šå¼•ç”¨ ä»¥ä¸‹ã¯ã€ãã‚Œã»ã©è„…å¨ã§ãªã‹ã£ãŸã¨ã™ã‚‹å ±å‘Šã®ä¾‹ã§ã™ã€‚ pooh.gr.jp ã¯çµæ§‹é ‘ä¸ˆã ã£ãŸã®ã§ 60 ä¸¦åˆ—ã§ã‚„ã£ã¨ CPU idle 30% ã¾ã§æ¸›ã‚‰ã›ãŸã€‚ Apache Killer (CVE-2011-3192) å¯¾ç– for CentOS 5
kaito834 2011/08/28
2011å¹´

Vuln

DoS

ã‚ã¨ã§æ•´ç†ã™ã‚‹
ãƒªãƒ³ã‚¯
ã¿ã¤ã‹ã¾ã›ã‚“ã‹? å¤–ã«å‡ºã¦éŠã³ã¾ã—ã‚‡ã†! ï¼ ã³ã‚“ãŸã‚“
æŽ¢ã—ç‰©ãŒè¦‹ã¤ã‹ã‚Šã¾ã›ã‚“ã‹? (404) å¤–ã«å‡ºã¦éŠã³ã¾ã—ã‚‡ã†! æŽ˜ã‚Šã¾ã™ã‚ˆ(dig) ã§æŽ¢ã™ã¨è¦‹ã¤ã‹ã‚‹ã‹ã‚‚çŸ¥ã‚Œã¾ã›ã‚“ã€‚good luck. ï¼’ã¡ã‚ƒã‚“ãã‚‹ ãŠæ°—ã«å…¥ã‚Šãƒ»å…±æœ‰NGãƒ»æœ€è¿‘è¦‹ãŸæ¿ãƒ»ãŠã£ã‹ã‘ãƒ»ã‚µãƒ ãƒã‚¤ãƒ« ã‚¹ãƒžãƒ›ç”¨! ã³ã‚“ãŸã‚“ã§å¿«é©ï¼’ã¡ã‚ƒã‚“ãã‚‹ã€‚ã‚¢ãƒ—ãƒªã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ä¸è¦ã€‚ä»Šã™ãï¼’ã¡ã‚ƒã‚“ãã‚‹ã®ä¸–ç•Œã¸ã„ã–ãªã„ã¾ã™ã€‚ ã‚‚ã¡ã‚ã‚“ pc ã§ã‚‚ã€‚ç§ã‚‚ä½¿ã£ã¦ã¾ã™ FOX â˜… ã³ã‚“ãŸã‚“ ãƒ”ãƒ³ã‚¯ã¯ã“ã¡ã‚‰ã‹ã‚‰ã€
kaito834 2011/08/27
2011å¹´8æœˆã€Apache ã®è„†å¼±æ€§ï¼ˆCVE-2011-3192ï¼‰ã‚’å®Ÿè¨¼ã™ã‚‹ PoCï¼ˆApache Killerï¼‰ãŒ 2ch ã«å®Ÿè¡Œã•ã‚Œã€å®Ÿéš›ã« DoS çŠ¶æ…‹ã«é™¥ã£ãŸæ¨¡æ§˜ã€‚è‹±èªžç‰ˆã®ãƒ—ãƒ¬ã‚¹ãƒªãƒªãƒ¼ã‚¹ã‚‚ã‚ã‚‹ http://www.nttec.com/news

2011å¹´

Vuln

DoS
ãƒªãƒ³ã‚¯
https://mail-archives.apache.org/mod_mbox/httpd-announce/201108.mbox/%[email protected]%3E
kaito834 2011/08/27
2011å¹´8æœˆã€Apache ã« DoS çŠ¶æ…‹ã‚’å¼•ãèµ·ã“ã™è„†å¼±æ€§ï¼ˆCVE-2011-3192ï¼‰ãŒå ±å‘Šã•ã‚Œã€PoCï¼ˆApache Killerã¨å‘¼ã°ã‚Œã‚‹ï¼‰ãŒ Full-Disclosure ã«æŠ•ç¨¿ã•ã‚ŒãŸã€‚é–¢é€£ï¼šhttp://www.theregister.co.uk/2011/08/24/devastating_apache_vuln/

2011å¹´

DoS

Vuln
ãƒªãƒ³ã‚¯
Leading Managed Detection and Response | Trustwave
Trustwave Becomes First Pure-Play MDR Provider to Attain FedRAMP Authorization. Learn More
kaito834 2011/08/25
PoCã®å®Ÿè¡Œçµæžœã¨ModSecurityã®ãƒ«ãƒ¼ãƒ«ã«è¨€åŠã—ã¦ã„ã‚‹ã€‚Mitigation of Apache Range Header DoS Attack - SpiderLabs Anterior / Apache ã« DoS çŠ¶æ…‹ã‚’å¼•ãèµ·ã“ã™è„†å¼±æ€§ï¼ˆCVE-2011-3192ï¼‰ã«é–¢ã™ã‚‹ãƒ–ãƒã‚°è¨˜äº‹ã€‚ã‚ãƒ¼ãƒ¯ãƒ¼ãƒ‰ï¼šApache Killerã€‚

2011å¹´

Virus

DoS
ãƒªãƒ³ã‚¯
ã€æµ·å¤–ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã€‘ç¬¬35å›žï¼šéŸ“å›½ã§ã®å¤§è¦æ¨¡DDoSæ”»æ’ƒã€æŠ€è¡“çš„å´é¢ã¨ãã®å¾Œã®å½±éŸ¿ã€€
kaito834 2009/08/08
ç±³å›½ãƒ»éŸ“å›½ã§ã®DDoSäº‹ä»¶ã€‚KrCERTã®èª¿æŸ»å ±å‘Šæ›¸ã‚’å¼•ç”¨ã—ã¦ã„ã‚‹ãŸã‚ã€ä»–ã®è§£èª¬è¨˜äº‹ã¨ã¯é•ã£ãŸè¦–ç‚¹ã€‚

Security

äº‹ä¾‹

2009å¹´

Virus

DoS
ãƒªãƒ³ã‚¯
1