[B! è„†å¼±æ€§] non_117ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

non_117 id:non_117

è„†å¼±æ€§ã«é–¢ã™ã‚‹non_117ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (10)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ã‚¦ã‚§ãƒ–ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚’é–‹ç™ºã—ãªãŒã‚‰ã€æ‰‹è»½ã«è„†å¼±æ€§æ¤œæŸ»ã™ã‚‹æ–¹æ³•
Software WebSecurity ã‚¦ã‚§ãƒ–ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚’é–‹ç™ºã—ãªãŒã‚‰ã€æ‰‹è»½ã«è„†å¼±æ€§æ¤œæŸ»ã™ã‚‹æ–¹æ³•â€»å½“ã‚µã‚¤ãƒˆã«ã¯ãƒ—ãƒãƒ¢ãƒ¼ã‚·ãƒ§ãƒ³ãŒå«ã¾ã‚Œã¦ã„ã¾ã™ã€‚ ä»¥å‰ã€OWASP ZAP ã«è¿½åŠ ã•ã‚ŒãŸ attack mode ã®æ¦‚è¦ ã¨ã„ã†ã‚¨ãƒ³ãƒˆãƒªã‚’æ›¸ãã¾ã—ãŸãŒã€ã“ã®ATTACK modeã‚’ä½¿ã£ãŸç°¡å˜ãªã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ¤œæŸ»ã®æ‰‹é †ã‚’ãƒ¡ãƒ¢ã—ã¦ãŠãã¾ã™ã€‚ã“ã®æ©Ÿèƒ½ã‚’ä½¿ãˆã°ã€ã‚¦ã‚§ãƒ–ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®é–‹ç™ºä¸ã«ZAPãŒå‹æ‰‹ã«è„†å¼±æ€§ã‚¹ã‚ãƒ£ãƒ³ã—ã¦ãã‚Œã¾ã™ã€‚ â€» ã“ã®æ©Ÿèƒ½ãŒè¿½åŠ ã•ã‚Œã‚‹ ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 2.4 ã¯ã¾ã ãƒªãƒªãƒ¼ã‚¹ã•ã‚Œã¦ã„ãªã„ã®ã§ã™ãŒã€ã“ã¡ã‚‰ ã‹ã‚‰ ZAP Weekly ã‚’ãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ã™ã‚Œã°è©¦ã™ã“ã¨ãŒã§ãã¾ã™ã€‚ æ¦‚è¦åŸºæœ¬çš„ã«ã¯ã€ã‚¦ã‚§ãƒ–ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³é–‹ç™ºæ™‚ã«ã‚¦ã‚§ãƒ–ãƒ–ãƒ©ã‚¦ã‚¶ã®ãƒ—ãƒã‚ã‚·ã¨ã—ã¦ ZAP ã‚’æŒ‡å®šãŠãã ã‘ã§ã™ã€‚ã“ã®æ™‚ã€ZAP å´ã§ ã‚³ãƒ³ãƒ†ã‚ã‚¹ãƒˆã¨ã„ã†ã‚‚ã®ã‚’è¨å®šã—ã¦ã€ATTACK mode ã«ã—ã¦ãŠã‘ã°ã€ã‚¢ã‚¯ã‚»ã‚¹ã—
non_117 2015/03/23
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

è„†å¼±æ€§

ãƒ„ãƒ¼ãƒ«

ã‚¦ã‚§ãƒ–é–‹ç™º
ãƒªãƒ³ã‚¯
LINEã«è„†å¼±æ€§ï¼ˆã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£çš„å•é¡Œï¼‰ãŒã‚ã£ã¦ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆãŒå¿…è¦ã¨ã„ã†ãƒ‹ãƒ¥ãƒ¼ã‚¹ã¨LINEå…¬å¼ãƒ–ãƒã‚°ã®èªã¿æ¯”ã¹ãƒ¡ãƒ¢
ã€ŒLINEã«è„†å¼±æ€§ã€ã€Œå€‹äººæƒ…å ±ãŒæ¼ã‚Œã‚‹ãƒ»ç›—ã¾ã‚Œã‚‹ãƒ»ç›—è´ã•ã‚Œã‚‹ãŠãã‚Œã€ç³»ã®ãƒ‹ãƒ¥ãƒ¼ã‚¹ãŒæ˜¨æ—¥ã‚ãŸã‚Šã«ã©ã°ã£ã¨å‡ºã¦ã„ãŸã®ã‚’è¦‹ã¦ã€å…¬å¼ãƒ–ãƒã‚°ã®ãŠçŸ¥ã‚‰ã›ã‚’èªã‚“ã§ã¿ãŸã®ã§ã™ãŒã€ãƒ‹ãƒ¥ãƒ¼ã‚¹ã‚„ãƒ‹ãƒ¥ãƒ¼ã‚¹ã«å¯¾ã™ã‚‹åå¿œã‚’èªã‚“ã§å—ã‘ãŸå°è±¡ã‹ã‚‰ã™ã‚‹ã¨ã€Œã‚ã‚Œï¼Ÿã€ã¨æ€ã£ãŸéƒ¨åˆ†ãŒã‚ã£ãŸã®ã§ã€è¦‹æ¯”ã¹ãŸæ™‚ã®ã“ã¨ã‚’ãƒ¡ãƒ¢ã—ã¦ãŠãã¾ã™ã€‚ã¡ãªã¿ã«æœ€åˆã«æ›¸ã„ã¦ãŠãã¾ã™ãŒã€LINEã¯æœ€æ–°ç‰ˆã«ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã—ã¦ãŠãã¾ã—ã‚‡ã†ã€‚ã€Œæœ€æ–°ç‰ˆã˜ã‚ƒãªãã¦ã‚‚å¤§ä¸ˆå¤«ãã†ã ã‹ã‚‰ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã—ãªã„ã€ã¨ã„ã†ã®ã‚’ãŠã™ã™ã‚ã—ãŸã„ã‚ã‘ã§ã¯ã‚ã‚Šã¾ã›ã‚“ã€‚ ç›®æ¬¡ 1. ã€Œã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã—ãªã„ã¨å±¥æ´ã‚„å†™çœŸãªã©ãŒæŠœãå‡ºã•ã‚Œã‚‹ã€2. ãƒ‹ãƒ¥ãƒ¼ã‚¹ä¾‹3. è„†å¼±æ€§ç™ºè¦‹å…ƒã®æ–‡ç« 4. LINEå…¬å¼ã‚’èªã‚“ã§ã€Œã‚ã‚Œï¼Ÿã€ã¨æ€ã£ãŸã¨ã“ã‚ã«ã¤ã„ã¦4.1. ã€Œå¯¾å¿œå†…å®¹ã€4.2. ã€ŒFAQï¼ˆã‚ˆãã‚ã‚‹è³ªå•ï¼‰ã€5. ä»®èª¬ï¼šã‚¢ãƒ—ãƒªã‚’ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã§ä¿®æ£å¾Œã€ã‚µãƒ¼ãƒå´ã§ã‚‚å¯¾ç–â†’ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆç„¡ã—ã§ã‚‚å¯¾ç–æ¸ˆã¿çŠ¶æ…‹ã«ï¼Ÿ6. ã¨ã¯
non_117 2015/03/17
è„†å¼±æ€§

ã‚¢ãƒ—ãƒª

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
Superfish/eDellRootãŒå±é™ºãªç†ç”± - ã‚ã‚‚ãŠãã°
Lenovoè£½ã®PCã®ä¸€éƒ¨ã«Superfishã¨ã„ã†ãƒžãƒ«ã‚¦ã‚§ã‚¢ãŒæ¨™æº–ã§ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã•ã‚Œã¦ã„ã‚‹ã“ã¨ãŒç¢ºèªã•ã‚Œã€å¤§ããªå•é¡Œã¨ãªã£ã¦ã„ã¾ã™ã€‚ [2015-11-24è¿½è¨˜] DELLè£½ã®PCã«ã‚‚ã€ã€ŒeDellRootã€ã¨ã•ã‚Œã‚‹Superfishã¨åŒæ§˜ã®å•é¡Œã‚’æŒã¤ãƒ«ãƒ¼ãƒˆè¨¼æ˜Žæ›¸ãŒå°Žå…¥ã•ã‚Œã¦ã„ã‚‹ã‚ˆã†ã§ã™ã€‚ Dellã®PCã«ä¸å¯©ãªãƒ«ãƒ¼ãƒˆè¨¼æ˜Žæ›¸ã€Lenovoã®Superfishã¨åŒã˜å•é¡Œã‹ - ITmedia ã‚¨ãƒ³ã‚¿ãƒ¼ãƒ—ãƒ©ã‚¤ã‚º Dude, You Got Dellâ€™d: Publishing Your Privates - Blog - Duo Security Joe Nord personal blog: New Dell computer comes with a eDellRoot trusted root certificate https://t.co/chURwV7eNE eDellRootã§
non_117 2015/02/20
ã“ã‚Œã¯ã²ã©ã„

è„†å¼±æ€§

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
GHOST è„†å¼±æ€§ã¯å¦‚ä½•æ§˜ã«ä½¿ã†ã®ã‹ | Webã‚·ã‚¹ãƒ†ãƒ é–‹ç™ºï¼æ•™è‚²ã‚½ãƒªãƒ¥ãƒ¼ã‚·ãƒ§ãƒ³ã®ã‚¿ã‚¤ãƒ ã‚¤ãƒ³ã‚¿ãƒ¼ãƒ¡ãƒ‡ã‚£ã‚¢
å…ˆæ—¥ GHOST ã¨å‘¼ã°ã‚Œã‚‹ glibc ã®è„†å¼±æ€§ãŒç™ºè¡¨ã•ã‚ŒãŸã€‚ãªã‚“ã§ã‚‚ã€ã€Œãƒªãƒ¢ãƒ¼ãƒˆã‹ã‚‰ä»»æ„ã®ã‚³ãƒ¼ãƒ‰ã‚’å®Ÿè¡Œã§ãã‚‹å¯èƒ½æ€§ãŒã‚ã‚‹ã€ã‚‰ã—ã„ã§ã¯ãªã„ã‹ã€‚ã—ã‹ã‚‚æ§˜ã€…ãªãƒ—ãƒã‚°ãƒ©ãƒ ã§åˆ©ç”¨ã•ã‚Œã¦ã„ã‚‹ãƒ©ã‚¤ãƒ–ãƒ©ãƒªéƒ¨åˆ†ã®å•é¡Œã¨ã‚ã£ã¦ã€å½±éŸ¿ç¯„å›²ãŒã¨ã¦ã‚‚åºƒã„ã€‚ãªã‹ãªã‹åŽ„ä»‹ãªã“ã¨ã§ã‚ã‚‹ã€‚ ã¯ã¦ã€ã—ã‹ã—ä¸€ä½“å…¨ä½“ã©ã†ã‚„ã£ã¦ãƒªãƒ¢ãƒ¼ãƒˆã‹ã‚‰ä»»æ„ã®ã‚³ãƒ¼ãƒ‰ã‚’å®Ÿè¡Œã—ã‚ˆã†ã¨ã„ã†ã®ã ã‚ã†ï¼Ÿ è©±ã‚’èžãã«ã€ãŸã‹ãŒæ•°ãƒã‚¤ãƒˆã®æƒ…å ±ã‚’ç¯„å›²å¤–ã®ãƒ¡ãƒ¢ãƒªã«æ›¸ãè¾¼ã‚ã‚‹å¯èƒ½æ€§ãŒã‚ã‚‹ã ã‘ã ã¨ã„ã†ã€‚å®Ÿéš›ãã‚Œã ã‘ã®ã“ã¨ã§ã‚µãƒ¼ãƒãƒ¼ã®ä¹—ã£å–ã‚Šãªã©ã§ãã‚‹ã‚‚ã®ãªã®ã ã‚ã†ã‹ã€‚ãã‚“ãªã‚ã‘ã§ã€ãã®ç–‘å•ã«ç”ãˆã‚‹ã¹ãã€æœ¬è¨˜äº‹ã§ã¯ä»¥ä¸‹ã® URL ã§è§£èª¬ã•ã‚Œã¦ã„ã‚‹å®Ÿéš›ã®æ”»æ’ƒæ–¹æ³•ã‚’è‹¥å¹²ç«¯æŠ˜ã£ã¦ç´¹ä»‹ã—ã¦ã¿ã‚ˆã†ã¨æ€ã†ã€‚ http://www.openwall.com/lists/oss-security/2015/01/27/9 ãªãŠã€æœ¬è¨˜äº‹ã¯ã“ã®è„†å¼±æ€§ãã®ã‚‚ã®ã«å¯¾ã™ã‚‹ç·Šæ€¥åº¦ãªã©ã«ã¤ã„ã¦è¨€
non_117 2015/01/30
è„†å¼±æ€§

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

Linux
ãƒªãƒ³ã‚¯
glibcã®gethostbynameé–¢æ•°ã«å˜åœ¨ã™ã‚‹CVE-2015-0235(GHOST)è„†å¼±æ€§ã«ã¤ã„ã¦ - ãƒ–ãƒã‚° - ãƒ¯ãƒ«ãƒ–ãƒªãƒƒã‚¯ã‚¹æ ªå¼ä¼šç¤¾
glibcã®gethostbynameç³»é–¢æ•°ã«è„†å¼±æ€§ã®åŽŸå› ã¨ãªã‚‹ãƒã‚°ãŒç™ºè¦‹ã•ã‚ŒCVE-2015-0235(GHOST)ã¨å‘½åã•ã‚ŒãŸã‚ˆã†ã§ã™ã€‚æ”¾ç½®ã—ãŸå ´åˆã¯ç›¸å½“å¤šãã®ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ãŒã“ã®è„†å¼±æ€§ã®å½±éŸ¿ã‚’å—ã‘ã‚‹ã“ã¨ãŒäºˆæƒ³ã•ã‚Œã¾ã™ã€‚ glibcã¯ libcã®GNUãƒãƒ¼ã‚¸ãƒ§ãƒ³ã§ã™ã€‚libcã¯ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã§ã¯ãªãã€äº‹å®Ÿä¸Šå…¨ã¦ã®ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ãŒåˆ©ç”¨ã—ã¦ã„ã‚‹ãƒ©ã‚¤ãƒ–ãƒ©ãƒªã§ã™ã€‚OSã®ä¸ã§ã¯ã‚«ãƒ¼ãƒãƒ«ã«æ¬¡ã„ã§é‡è¦ãªéƒ¨åˆ†ã¨è¨€ãˆã¾ã™ã€‚Linuxã‚·ã‚¹ãƒ†ãƒ ã§ã¯(ã“ã¨ã‚µãƒ¼ãƒãƒ¼ç”¨é€”ã«ãŠã„ã¦ã¯)ä¾‹å¤–ãªã glibcãŒä½¿ã‚ã‚Œã¦ã„ã¾ã™ã€‚ ã“ã® glibcã«å«ã¾ã‚Œã‚‹ gethostbynameç³»é–¢æ•°ã®å®Ÿè£…ã« 2000å¹´é ƒã‹ã‚‰å˜åœ¨ã—ãŸãƒã‚°ãŒä»Šã«ãªã£ã¦ç™ºè¦‹ã•ã‚Œã€CVE-2015-0235 é€šç§° GHOSTã¨å‘½åã•ã‚Œã¾ã—ãŸã€‚ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã§ä½•ã‚‰ã‹ã®é€šä¿¡ã‚’è¡Œã†ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã¯å¿…ãšâ€»ã“ã®é–¢æ•°ã‚’ä½¿ç”¨ã—ã¾ã™ã€‚ â€»è¿½è¨˜: åå‰è§£æ±ºã‚’ã‚µãƒãƒ¼ãƒˆ
non_117 2015/01/28
è„†å¼±æ€§

Linux

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
glibc ã®è„†å¼±æ€§ CVE-2015-0235ï¼ˆé€šç§°ï¼šGHOSTï¼‰ã«ã¤ã„ã¦ã¾ã¨ã‚ã¦ã¿ãŸ - piyolog
2015å¹´1æœˆ27æ—¥(ç¾åœ°æ™‚é–“) Qualysã¯glibc(GNU C Library)ã«è„†å¼±æ€§ã‚’ç™ºè¦‹ã—ã€æƒ…å ±ã‚’å…¬é–‹ã—ã¾ã—ãŸã€‚ã“ã“ã§ã¯é–¢é€£æƒ…å ±ã‚’ã¾ã¨ã‚ã¾ã™ã€‚(æš«å®šã¾ã¨ã‚ãªã®ã§ç²¾åº¦ä½Žã‚ã€ç¶²ç¾…æ€§ç„¡ã—ã§ã™ã€‚ã€‚) (1) è„†å¼±æ€§é–¢é€£æƒ…å ± QualysãŒå…¬é–‹ã—ãŸè„†å¼±æ€§æƒ…å ± The GHOST Vulnerability Qualys Security Advisory CVE-2015-0235 æ³¨æ„å–šèµ· IPA (æ³¨æ„) libc ã®è„†å¼±æ€§å¯¾ç–ã«ã¤ã„ã¦(CVE-2015-0235) è„†å¼±æ€§ã®æ¦‚è¦ glibcã®__nss_hostname_digits_dots() ã«ãƒ’ãƒ¼ãƒ—ãƒãƒƒãƒ•ã‚¡ã‚ªãƒ¼ãƒãƒ¼ãƒ•ãƒãƒ¼ã®è„†å¼±æ€§ã€‚ å½“è©²é–¢æ•°ã¯glibcã®gethostbyname()ã¨gethostbyname2()ã‹ã‚‰å‘¼ã°ã‚Œã¦ã„ã‚‹ã€‚ ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«ã‚ˆã£ã¦ã¯ã€DoSã€ã¾ãŸã¯ãƒªãƒ¢ãƒ¼ãƒˆã‹ã‚‰ä»»æ„ã®ã‚³ãƒ¼ãƒ‰ãŒå®Ÿè¡Œå¯èƒ½ã¨ãªã‚‹å¯èƒ½æ€§
non_117 2015/01/28
linux

è„†å¼±æ€§

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
Linuxã«æ·±åˆ»ãªã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ›ãƒ¼ãƒ«ã€ŒGHOSTã€ã€ä»Šã™ããƒ‘ãƒƒãƒãŒå¿…è¦
Steven J. Vaughan-NicholsÂ ï¼ˆSpecial to ZDNET.comï¼‰Â ç¿»è¨³æ ¡æ£ï¼šÂ ç·¨é›†éƒ¨ 2015-01-28 10:04 ã‚¯ãƒ©ã‚¦ãƒ‰ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¼æ¥Qualysã®ç ”ç©¶è€…ãŒã€Linux GNU Cãƒ©ã‚¤ãƒ–ãƒ©ãƒªï¼ˆglibcï¼‰ã«æ·±åˆ»ãªã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ›ãƒ¼ãƒ«ã§ã‚ã‚‹ã€ŒGHOSTã€ï¼ˆCVE-2015-0235ï¼‰ã‚’ç™ºè¦‹ã—ãŸã€‚ã“ã®è„†å¼±æ€§ã‚’åˆ©ç”¨ã™ã‚‹ã¨ã€ãƒãƒƒã‚«ãƒ¼ã¯IDã‚„ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’çŸ¥ã‚‰ãªãã¦ã‚‚ã‚·ã‚¹ãƒ†ãƒ ã‚’ãƒªãƒ¢ãƒ¼ãƒˆã‹ã‚‰ä¹—ã£å–ã‚‹ã“ã¨ãŒã§ãã‚‹ã€‚ Qualysã¯ãŸã ã¡ã«ã“ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ›ãƒ¼ãƒ«ã«ã¤ã„ã¦ä¸»ãªLinuxã®é…å¸ƒå…ƒã«è¦å‘Šã‚’é€ã‚Šã€å¤šãã®é…å¸ƒå…ƒãŒã™ã§ã«ãƒ‘ãƒƒãƒã‚’å…¬é–‹ã—ã¦ã„ã‚‹ã€‚ ã“ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ›ãƒ¼ãƒ«ã¯ã€glibc-2.2ï¼ˆ2000å¹´11æœˆ10æ—¥ã«ãƒªãƒªãƒ¼ã‚¹ï¼‰ã‚’ä½¿ç”¨ã—ã¦ãƒ“ãƒ«ãƒ‰ã•ã‚ŒãŸã™ã¹ã¦ã®Linuxã‚·ã‚¹ãƒ†ãƒ ã«å˜åœ¨ã™ã‚‹ã€‚Qualysã«ã‚ˆã‚Œã°ã€ã“ã®ãƒã‚°ã¯å®Ÿéš›ã«ã¯ã€2013å¹´5æœˆ21æ—¥ã«ãƒªãƒªãƒ¼ã‚¹ã•ã‚ŒãŸã€gl
non_117 2015/01/28
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

è„†å¼±æ€§

Linux
ãƒªãƒ³ã‚¯
åœ°æ–¹ç‹¬ç«‹è¡Œæ”¿æ³•äººå¤§é˜ªç”£æ¥æŠ€è¡“ç ”ç©¶æ‰€ï½œå½“æ³•äººã¯ã€ï¼ˆåœ°ç‹¬ï¼‰å¤§é˜ªåºœç«‹ç”£æ¥æŠ€è¡“ç·åˆç ”ç©¶æ‰€ã¨ï¼ˆåœ°ç‹¬ï¼‰å¤§é˜ªå¸‚ç«‹å·¥æ¥ç ”ç©¶æ‰€ãŒçµ±åˆã—ã€å¹³æˆ29å¹´4æœˆ1æ—¥ã«ã‚¹ã‚¿ãƒ¼ãƒˆã—ã¾ã—ãŸã€‚ç ”ç©¶é–‹ç™ºã‹ã‚‰è£½é€ ã¾ã§ã€ä¼æ¥ã®é–‹ç™ºã‚¹ãƒ†ãƒ¼ã‚¸ã«å¿œã˜ãŸæ”¯æ´ã‚’ä¸€æ°—é€šè²«ã§æä¾›ã—ã€å¤§é˜ªç”£æ¥ã®æ›´ãªã‚‹é£›èºã«å‘ã‘ã€å¤§é˜ªç™ºã®ã‚¤ãƒŽãƒ™ãƒ¼ã‚·ãƒ§ãƒ³ã‚’å‰µå‡ºã—ã¾ã™ã€‚
NEWS & TOPICS å¤§é˜ªåºœç«‹ç”£æ¥æŠ€è¡“ç·åˆç ”ç©¶æ‰€ï¼ˆç”£æŠ€ç ”ï¼‰ã¨å¤§é˜ªå¸‚ç«‹å·¥æ¥ç ”ç©¶æ‰€ï¼ˆå¸‚å·¥ç ”ï¼‰ã¯ã€ å¹³æˆ29å¹´4æœˆ1æ—¥ã‚ˆã‚Šã€Œå¤§é˜ªç”£æ¥æŠ€è¡“ç ”ç©¶æ‰€ã€ã¨ã—ã¦çµ±åˆã—ã¾ã—ãŸã€‚ â—†ï¼ˆåœ°ç‹¬ï¼‰å¤§é˜ªç”£æ¥æŠ€è¡“ç ”ç©¶æ‰€ã€€ä»¤å’Œ6å¹´åº¦äº‹æ¥ã«ã¤ã„ã¦ï¼ˆç†äº‹é•·ã€€å°æž—å“²å½¦ï¼‰ â—† ã”åˆ©ç”¨ã®éš›ã¯å®‰å…¨ä¿éšœè²¿æ˜“ç®¡ç†åˆ¶åº¦ã«é–¢ã™ã‚‹ç”³å‘Šã‚’ã—ã¦ã„ãŸã ã„ã¦ãŠã‚Šã¾ã™ã€‚
non_117 2014/11/01
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

è„†å¼±æ€§

Shellshock
ãƒªãƒ³ã‚¯
bashã®è„†å¼±æ€§(CVE-2014-6271) #ShellShock ã®é–¢é€£ãƒªãƒ³ã‚¯ã‚’ã¾ã¨ã‚ã¦ã¿ãŸ - piyolog
bashã«è„†å¼±æ€§ãŒç¢ºèªã•ã‚ŒãŸã¨ã—ã¦é¨’ãŽã«ãªã£ã¦ã„ã¾ã™ã€‚ã“ã“ã§ã¯CVE-2014-6271ã«é–¢ã™ã‚‹æƒ…å ±ã‚’ã¾ã¨ã‚ã¾ã™ã€‚ #è¨˜è¼‰å†…å®¹ã«ã¤ã„ã¦ã€èª¤ã£ã¦ã„ã‚‹ã€è¿½è¨˜ã—ãŸæ–¹ãŒã„ã„ç‰æƒ…å ±ãŒã”ã–ã„ã¾ã—ãŸã‚‰@piyokangoã¾ã§ã”é€£çµ¡ãŠé¡˜ã„ã—ã¾ã™ã€‚ è„†å¼±æ€§æƒ…å ± è„†å¼±æ€§ã®æ„›ç§° ShellShock Bashbug CVEç•ªå· Bashå‘¨ã‚Šã§ç™ºè¡Œã•ã‚Œã¦ã„ã‚‹CVEã¯6ã¤ã€‚ãã®å†…è©³ç´°ãŒä¸æ˜Žãªã®ãŒ2ã¤ã€‚(CVE-2014-6277,CVE-2014-6278) CVE ç™ºè¦‹è€… æƒ³å®šè„…å¨ ç‰¹è¨˜ CVE-2014-6271 Stephane Chazelasæ° ä»»æ„ã®ã‚³ãƒ¼ãƒ‰å®Ÿè¡Œ ShellShockã®ç™ºç«¯ã¨ãªã£ãŸãƒã‚°ã€‚ CVE-2014-7169 Tavis Ormandyæ° ä»»æ„ã®ã‚³ãƒ¼ãƒ‰å®Ÿè¡Œ CVE-2014-6271ä¿®æ£æ¼ã‚Œã«ã‚ˆã‚‹è„†å¼±æ€§ CVE-2014-7186 Redhat DoS ãƒ¡ãƒ¢ãƒªç ´å£Š(Out-of-Bo
non_117 2014/09/27
è„†å¼±æ€§

ã¾ã¨ã‚

Linux

security

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

bash

Shellshock
ãƒªãƒ³ã‚¯
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è¨ºæ–ãƒ»æ¤œæŸ»ã®GMOã‚µã‚¤ãƒãƒ¼ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ byã‚¤ã‚¨ãƒ©ã‚¨
GMOã‚µã‚¤ãƒãƒ¼ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ byã‚¤ã‚¨ãƒ©ã‚¨æ ªå¼ä¼šç¤¾ã¯å›½å†…ãƒˆãƒƒãƒ—ã‚¯ãƒ©ã‚¹ã®ãƒ›ãƒ¯ã‚¤ãƒˆãƒãƒƒã‚«ãƒ¼ãŒå¤šæ•°åœ¨ç±ã™ã‚‹ã‚µã‚¤ãƒãƒ¼ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®ä¼šç¤¾ã§ã™ã€‚æ”»æ’ƒæ‰‹æ³•ã«é–¢ã™ã‚‹è±Šå¯ŒãªçŸ¥è˜ã¨æœ€å…ˆç«¯ã®æŠ€è¡“ã‚’æŒã¤ãƒ›ãƒ¯ã‚¤ãƒˆãƒãƒƒã‚«ãƒ¼ãŒä»®æƒ³æ•µã¨ãªã‚Šã€ãŠå®¢æ§˜ã®æŠ±ãˆã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¸Šã®å•é¡Œã®å¯è¦–åŒ–ã¨èª²é¡Œè§£æ±ºã‚’ã‚µãƒãƒ¼ãƒˆã—ã¾ã™ã€‚ ã€Œèª°ã‚‚ãŒçŠ ç‰²ã«ãªã‚‰ãªã„ç¤¾ä¼šã‚’å‰µã‚‹ã€ã‚’ãƒŸãƒƒã‚·ãƒ§ãƒ³ã¨ã—ã¦æŽ²ã’ã€ãƒ‡ã‚¸ã‚¿ãƒ«ãƒã‚¤ãƒ†ã‚£ãƒ–ã®æ™‚ä»£ã‚’ç”Ÿãã‚‹ã™ã¹ã¦ã®äººãŒå®‰å…¨ã«æš®ã‚‰ã›ã‚‹ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆç¤¾ä¼šå‰µã‚Šã«è²¢çŒ®ã—ã¾ã™ã€‚
non_117 2014/06/05
security

openssl

è„†å¼±æ€§

coq
ãƒªãƒ³ã‚¯
1