[B! Linux][GHOST] kana321ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

kana321 id:kana321

Linuxã¨GHOSTã«é–¢ã™ã‚‹kana321ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (6)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

Eximã®GHOSTè„†å¼±æ€§ã®å½±éŸ¿ã¨ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã®é–¢ä¿‚
è¿½è¨˜(2015/2/6) å¤§åž£ã•ã‚“ã‹ã‚‰è¨‚æ£ä¾é ¼ã®ã‚³ãƒ¡ãƒ³ãƒˆã‚’é ‚ã„ã¦ãŠã‚Šã¾ã™ã®ã§åˆã‚ã›ã¦ãŠèªã¿ãã ã•ã„ã€‚å¾³ä¸¸ã¨ã—ã¦ã¯ç‰¹ã«è¨‚æ£ã®å¿…è¦ã¯æ„Ÿã˜ã¾ã›ã‚“ã§ã—ãŸã®ã§ã€æœ¬æ–‡ã¯ãã®ã¾ã¾ã«ã—ã¦ã„ã¾ã™ã€‚ãã†æ€ã†ç†ç”±ã¯ã‚³ãƒ¡ãƒ³ãƒˆã¨ã—ã¦è¿½è¨˜ã„ãŸã—ã¾ã—ãŸã€‚ (è¿½è¨˜çµ‚ã‚ã‚Š) å¤§åž£ã•ã‚“ã®ãƒ–ãƒã‚°ã‚¨ãƒ³ãƒˆãƒªã€ŒGHOSTã‚’ä½¿ã£ã¦æ”»æ’ƒã§ãã‚‹ã‚±ãƒ¼ã‚¹ã€ã‚’èªã‚“ã ã¨ã“ã‚ã€ä»¥ä¸‹ã®ã‚ˆã†ãªã“ã¨ãŒæ›¸ã„ã¦ã‚ã‚Šã¾ã—ãŸã€‚ 1. ãƒ¦ãƒ¼ã‚¶ãƒ¼å…¥åŠ›ã®IPã‚¢ãƒ‰ãƒ¬ã‚¹ï¼ˆãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯å±¤ã®IPã‚¢ãƒ‰ãƒ¬ã‚¹ã§ã¯ãªã„ï¼‰ã«æ”»æ’ƒç”¨ãƒ‡ãƒ¼ã‚¿ã‚’é€ã‚‹ã€‚ 2. ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ç„¡ã—ã§æ”»æ’ƒç”¨ã®ä¸æ£ãªIPã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’gethostbyname()ã«æ¸¡ã•ã‚Œã‚‹ã€‚ 3. ãƒ’ãƒ¼ãƒ—ã‚ªãƒ¼ãƒãƒ¼ãƒ•ãƒãƒ¼ã§ãƒ’ãƒ¼ãƒ—é ˜åŸŸã®ãƒ¡ãƒ¢ãƒªç®¡ç†ç”¨ã®ç©ºãã‚µã‚¤ã‚ºã‚’æ”¹ç«„ã™ã‚‹ã€‚ ã€ä¸ç•¥ã€‘ ã©ã‚“ãªã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ãŒå±ãªã„ã®ã‹ï¼Ÿ ãƒ¦ãƒ¼ã‚¶ãƒ¼å…¥åŠ›ã®IPã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’ãƒãƒªãƒ‡ãƒ¼ã‚·ãƒ§ãƒ³ã—ãªã„ã§gethostbyname()ã‚’ä½¿ç”¨ã—ã¦ã„ã‚‹ã€‚ ã‚¤ãƒ³ã‚¿ãƒ©ã‚¯ãƒ†ã‚£ãƒ–ãªå‹•ä½œã‚’è¡Œã£
kana321 2015/02/03
å¾³ä¸¸æµ©ã®æ—¥è¨˜

()

security

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

linux

ghost

è„†å¼±æ€§

ã‚ã¨ã§èªã‚€

validation

programming
ãƒªãƒ³ã‚¯
glibcã‚’æ›´æ–°ã—ã¦ã‚‚å¤§ä¸ˆå¤«ãªã€Œæ£ã—ã„ã€ã‚¿ã‚¤ãƒ ã‚¾ãƒ¼ãƒ³ã®è¨å®šæ–¹æ³• (2/3è¿½è¨˜ã‚ã‚Š) - ã‚ã‚‚ãŠãã°
RHEL, CentOS, Amazon Linux (6ä»¥å‰) /etc/localtime ã‚’ /usr/share/zoneinfo ä»¥ä¸‹ã‹ã‚‰ä¸Šæ›¸ãã—ãŸã‚Šã‚·ãƒ³ãƒœãƒªãƒƒã‚¯ãƒªãƒ³ã‚¯å¼µã£ãŸã‚Šã¨ã„ã†æ‰‹æ³•ãŒæ¨ªè¡Œã—ã¦ã„ã¾ã™ãŒã€ /etc/localtime ã¯ glibc ãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã«å«ã¾ã‚Œã‚‹ãŸã‚ãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã‚’æ›´æ–°ã™ã‚‹ã¨ä¸Šæ›¸ãã•ã‚Œã¦ESTã¨ã‹ã«æˆ»ã£ã¦ã—ã¾ã†ã‚ã‘ã§ã™ã€‚ å½“ç„¶ãªãŒã‚‰ã€ãƒ‡ã‚£ã‚¹ãƒˆãƒªãƒ“ãƒ¥ãƒ¼ã‚·ãƒ§ãƒ³ã¨ã—ã¦æ£ã—ã„è¨å®šæ–¹æ³•ãŒç”¨æ„ã•ã‚Œã¦ã„ã‚‹ã®ã§ã€ã“ã¡ã‚‰ã‚’ä½¿ã„ã¾ã™ã€‚ /etc/sysconfig/clock ã«ã‚¿ã‚¤ãƒ ã‚¾ãƒ¼ãƒ³ã‚’æ›¸ãã¾ã™ã€‚*1sudo sed -i -e "s/^ZONE/#ZONE/g" -e "1i ZONE=\"Asia/Tokyo\"" /etc/sysconfig/clock tzdata-update ã‚’å®Ÿè¡Œã—ã¾ã™ã€‚sudo /usr/sbin/tzdata-update ã“ã‚Œã ã‘ã§
kana321 2015/01/31
RHEL

security

timezone

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ã‚ã¨ã§èªã‚€

GHOST

glibc

article

tips

linux
ãƒªãƒ³ã‚¯
Linuxã«å˜åœ¨ã™ã‚‹è„†å¼±æ€§ã€ŒGHOSTã€ã€ã‚·ã‚¹ãƒ†ãƒ ç®¡ç†è€…ã¯è½ã¡ç€ã„ã¦å¯¾å‡¦ã‚’ |
Linux GNU Cãƒ©ã‚¤ãƒ–ãƒ©ãƒªï¼ˆglibcï¼‰ã«å˜åœ¨ã™ã‚‹è„†å¼±æ€§ãŒã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¼æ¥ã€ŒQualysã€ã«ã‚ˆã£ã¦ç¢ºèªã•ã‚Œã¾ã—ãŸã€‚ã“ã®è„†å¼±æ€§ã€ŒCVE-2015-0235ã€ãŒåˆ©ç”¨ã•ã‚Œã‚‹ã¨ã€Linuxã®ã‚ªãƒšãƒ¬ãƒ¼ãƒ†ã‚£ãƒ³ã‚°ã‚·ã‚¹ãƒ†ãƒ ï¼ˆOSï¼‰ã‚’æè¼‰ã™ã‚‹ PCä¸Šã§ä»»æ„ã®ã‚³ãƒ¼ãƒ‰ã‚’å®Ÿè¡Œã™ã‚‹ã“ã¨ãŒå¯èƒ½ã«ãªã‚Šã€çµæžœçš„ã«ã‚µãƒ¼ãƒãƒ¼ã®ä¹—ã£å–ã‚Šã‚„ä¸æ£ãƒ—ãƒã‚°ãƒ©ãƒ æ„ŸæŸ“ã•ã›ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ã€ŒHeartbleedã€ã‚„ã€ŒShellshockã€ã€ã€ŒPOODLEã€ã¨åŒæ§˜ã«ã€ã“ã®è„†å¼±æ€§ã¯ã€ŒGHOSTã€ã¨åä»˜ã‘ã‚‰ã‚Œã¾ã—ãŸã€‚ãã®å¾Œã®èª¿æŸ»ã«ã‚ˆã‚Šã€ã“ã®è„†å¼±æ€§ã¯æ·±åˆ»ã§ã‚ã‚‹ã‚‚ã®ã®ã€æ”»æ’ƒã«åˆ©ç”¨ã™ã‚‹ã®ãŒé›£ã—ãã€æ”»æ’ƒã®å¯èƒ½æ€§ã¯æ¥µã‚ã¦ä½Žã„ã“ã¨ãŒåˆ¤æ˜Žã—ã¾ã—ãŸã€‚ ã€ŒGHOSTã€ã¯ã€glibc ã®é–¢æ•°ã€Œgethostbyname*()ã€ã‚’å‘¼ã³å‡ºã™ã“ã¨ã§å¼•ãèµ·ã“ã•ã‚Œã‚‹ãƒãƒƒãƒ•ã‚¡ãƒ¼ã‚ªãƒ¼ãƒãƒ¼ãƒ•ãƒãƒ¼ã®è„†å¼±æ€§ã§ã™ã€‚ã“ã®é–¢æ•°ã¯ã€ãƒ‰ãƒ¡ã‚¤ãƒ³åã‚’ IPã‚¢ãƒ‰ãƒ¬ã‚¹ã«è§£æ±ºã™ã‚‹ãŸã‚ã«ã•ã¾ã–ã¾ãªã‚¢
kana321 2015/01/29
apache

PC

c

()

security

Linux

GHOST

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ã‚ã¨ã§èªã‚€

è„†å¼±æ€§
ãƒªãƒ³ã‚¯
glibc ã®è„†å¼±æ€§ CVE-2015-0235ï¼ˆé€šç§°ï¼šGHOSTï¼‰ã«ã¤ã„ã¦ã¾ã¨ã‚ã¦ã¿ãŸ - piyolog
2015å¹´1æœˆ27æ—¥(ç¾åœ°æ™‚é–“) Qualysã¯glibc(GNU C Library)ã«è„†å¼±æ€§ã‚’ç™ºè¦‹ã—ã€æƒ…å ±ã‚’å…¬é–‹ã—ã¾ã—ãŸã€‚ã“ã“ã§ã¯é–¢é€£æƒ…å ±ã‚’ã¾ã¨ã‚ã¾ã™ã€‚(æš«å®šã¾ã¨ã‚ãªã®ã§ç²¾åº¦ä½Žã‚ã€ç¶²ç¾…æ€§ç„¡ã—ã§ã™ã€‚ã€‚) (1) è„†å¼±æ€§é–¢é€£æƒ…å ± QualysãŒå…¬é–‹ã—ãŸè„†å¼±æ€§æƒ…å ± The GHOST Vulnerability Qualys Security Advisory CVE-2015-0235 æ³¨æ„å–šèµ· IPA (æ³¨æ„) libc ã®è„†å¼±æ€§å¯¾ç–ã«ã¤ã„ã¦(CVE-2015-0235) è„†å¼±æ€§ã®æ¦‚è¦ glibcã®__nss_hostname_digits_dots() ã«ãƒ’ãƒ¼ãƒ—ãƒãƒƒãƒ•ã‚¡ã‚ªãƒ¼ãƒãƒ¼ãƒ•ãƒãƒ¼ã®è„†å¼±æ€§ã€‚ å½“è©²é–¢æ•°ã¯glibcã®gethostbyname()ã¨gethostbyname2()ã‹ã‚‰å‘¼ã°ã‚Œã¦ã„ã‚‹ã€‚ ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«ã‚ˆã£ã¦ã¯ã€DoSã€ã¾ãŸã¯ãƒªãƒ¢ãƒ¼ãƒˆã‹ã‚‰ä»»æ„ã®ã‚³ãƒ¼ãƒ‰ãŒå®Ÿè¡Œå¯èƒ½ã¨ãªã‚‹å¯èƒ½æ€§
kana321 2015/01/28
è„†å¼±æ€§ã¾ã¨ã‚

()

(1)

security

linux

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ghost

è„†å¼±æ€§

glibc

CVE-2015-0235
ãƒªãƒ³ã‚¯
Linuxã«æ·±åˆ»ãªã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ›ãƒ¼ãƒ«ã€ŒGHOSTã€ã€ä»Šã™ããƒ‘ãƒƒãƒãŒå¿…è¦
Steven J. Vaughan-NicholsÂ ï¼ˆSpecial to ZDNET.comï¼‰Â ç¿»è¨³æ ¡æ£ï¼šÂ ç·¨é›†éƒ¨ 2015-01-28 10:04 ã‚¯ãƒ©ã‚¦ãƒ‰ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¼æ¥Qualysã®ç ”ç©¶è€…ãŒã€Linux GNU Cãƒ©ã‚¤ãƒ–ãƒ©ãƒªï¼ˆglibcï¼‰ã«æ·±åˆ»ãªã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ›ãƒ¼ãƒ«ã§ã‚ã‚‹ã€ŒGHOSTã€ï¼ˆCVE-2015-0235ï¼‰ã‚’ç™ºè¦‹ã—ãŸã€‚ã“ã®è„†å¼±æ€§ã‚’åˆ©ç”¨ã™ã‚‹ã¨ã€ãƒãƒƒã‚«ãƒ¼ã¯IDã‚„ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’çŸ¥ã‚‰ãªãã¦ã‚‚ã‚·ã‚¹ãƒ†ãƒ ã‚’ãƒªãƒ¢ãƒ¼ãƒˆã‹ã‚‰ä¹—ã£å–ã‚‹ã“ã¨ãŒã§ãã‚‹ã€‚ Qualysã¯ãŸã ã¡ã«ã“ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ›ãƒ¼ãƒ«ã«ã¤ã„ã¦ä¸»ãªLinuxã®é…å¸ƒå…ƒã«è¦å‘Šã‚’é€ã‚Šã€å¤šãã®é…å¸ƒå…ƒãŒã™ã§ã«ãƒ‘ãƒƒãƒã‚’å…¬é–‹ã—ã¦ã„ã‚‹ã€‚ ã“ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ›ãƒ¼ãƒ«ã¯ã€glibc-2.2ï¼ˆ2000å¹´11æœˆ10æ—¥ã«ãƒªãƒªãƒ¼ã‚¹ï¼‰ã‚’ä½¿ç”¨ã—ã¦ãƒ“ãƒ«ãƒ‰ã•ã‚ŒãŸã™ã¹ã¦ã®Linuxã‚·ã‚¹ãƒ†ãƒ ã«å˜åœ¨ã™ã‚‹ã€‚Qualysã«ã‚ˆã‚Œã°ã€ã“ã®ãƒã‚°ã¯å®Ÿéš›ã«ã¯ã€2013å¹´5æœˆ21æ—¥ã«ãƒªãƒªãƒ¼ã‚¹ã•ã‚ŒãŸã€gl
kana321 2015/01/28
RHEL

c

japan

Linux

ã‚·ã‚¹ãƒ†ãƒ

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

security

GHOST

è„†å¼±æ€§

CVE-2015-0235
ãƒªãƒ³ã‚¯
glibcã®gethostbynameé–¢æ•°ã«å˜åœ¨ã™ã‚‹CVE-2015-0235(GHOST)è„†å¼±æ€§ã«ã¤ã„ã¦ - ãƒ–ãƒã‚° - ãƒ¯ãƒ«ãƒ–ãƒªãƒƒã‚¯ã‚¹æ ªå¼ä¼šç¤¾
glibcã®gethostbynameç³»é–¢æ•°ã«è„†å¼±æ€§ã®åŽŸå› ã¨ãªã‚‹ãƒã‚°ãŒç™ºè¦‹ã•ã‚ŒCVE-2015-0235(GHOST)ã¨å‘½åã•ã‚ŒãŸã‚ˆã†ã§ã™ã€‚æ”¾ç½®ã—ãŸå ´åˆã¯ç›¸å½“å¤šãã®ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ãŒã“ã®è„†å¼±æ€§ã®å½±éŸ¿ã‚’å—ã‘ã‚‹ã“ã¨ãŒäºˆæƒ³ã•ã‚Œã¾ã™ã€‚ glibcã¯ libcã®GNUãƒãƒ¼ã‚¸ãƒ§ãƒ³ã§ã™ã€‚libcã¯ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã§ã¯ãªãã€äº‹å®Ÿä¸Šå…¨ã¦ã®ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ãŒåˆ©ç”¨ã—ã¦ã„ã‚‹ãƒ©ã‚¤ãƒ–ãƒ©ãƒªã§ã™ã€‚OSã®ä¸ã§ã¯ã‚«ãƒ¼ãƒãƒ«ã«æ¬¡ã„ã§é‡è¦ãªéƒ¨åˆ†ã¨è¨€ãˆã¾ã™ã€‚Linuxã‚·ã‚¹ãƒ†ãƒ ã§ã¯(ã“ã¨ã‚µãƒ¼ãƒãƒ¼ç”¨é€”ã«ãŠã„ã¦ã¯)ä¾‹å¤–ãªã glibcãŒä½¿ã‚ã‚Œã¦ã„ã¾ã™ã€‚ ã“ã® glibcã«å«ã¾ã‚Œã‚‹ gethostbynameç³»é–¢æ•°ã®å®Ÿè£…ã« 2000å¹´é ƒã‹ã‚‰å˜åœ¨ã—ãŸãƒã‚°ãŒä»Šã«ãªã£ã¦ç™ºè¦‹ã•ã‚Œã€CVE-2015-0235 é€šç§° GHOSTã¨å‘½åã•ã‚Œã¾ã—ãŸã€‚ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã§ä½•ã‚‰ã‹ã®é€šä¿¡ã‚’è¡Œã†ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã¯å¿…ãšâ€»ã“ã®é–¢æ•°ã‚’ä½¿ç”¨ã—ã¾ã™ã€‚ â€»è¿½è¨˜: åå‰è§£æ±ºã‚’ã‚µãƒãƒ¼ãƒˆ
kana321 2015/01/28
CVE-2015-0235

ãƒ–ãƒã‚°

security

Linux

ã‚ã¨ã§èªã‚€

GHOST

è„†å¼±æ€§

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

glibc

centos
ãƒªãƒ³ã‚¯
1