[B! bash] pugleeã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

puglee id:puglee

bashã«é–¢ã™ã‚‹pugleeã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (4)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ã‚·ã‚§ãƒ«ã‚¹ã‚¯ãƒªãƒ—ãƒˆã®ä»£ã‚ã‚Šã«Pythonã‚’ä½¿ã† - ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ã“ãã“ã
ã“ã‚Œã¾ã§ã€é–‹ç™ºã‚„é‹ç”¨æ™‚ã«ä½¿ã†ã€ã¡ã‚‡ã£ã¨ã—ãŸã‚³ãƒžãƒ³ãƒ‰ãƒ©ã‚¤ãƒ³ãƒ„ãƒ¼ãƒ«ã€è‡ªå‹•åŒ–ã‚¹ã‚¯ãƒªãƒ—ãƒˆã¯ã€ä¸»ã«Bashã®ã‚·ã‚§ãƒ«ã‚¹ã‚¯ãƒªãƒ—ãƒˆã§å®Ÿè£…ã—ã¦ã„ãŸã®ã§ã™ãŒã€æœ€è¿‘ã“ã®ã‚ˆã†ãªç”¨é€”ã«ã¯Pythonã‚’ä½¿ã†ã‚ˆã†ã«ã—ã¦ã„ã¾ã™ã€‚ Bashã‚¹ã‚¯ãƒªãƒ—ãƒˆã¸ã®ä¸æº€ ã‚¹ã‚¯ãƒªãƒ—ãƒˆã®å®Ÿè£…æ–¹é‡ ãƒãƒ¼ã‚¿ãƒ“ãƒªãƒ†ã‚£é‡è¦–ã®ãŸã‚ã®ç¸›ã‚ŠPythonãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚° Tips __future__ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã§ãƒãƒ¼ã‚¸ãƒ§ãƒ³2ã€3ä¸¡æ–¹ã«å¯¾å¿œã•ã›ã‚‹ ãƒãƒ¼ã‚¸ãƒ§ãƒ³2ã€3ã§ç•°ãªã‚‹ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’ã€åŒã˜åå‰ã§èªã¿è¾¼ã‚€ ãƒãƒ¼ã‚¸ãƒ§ãƒ³2ã€3ã‚’åˆ¤åˆ¥ã™ã‚‹é–¢æ•°ã‚’ç”¨æ„ã™ã‚‹ ã‚ˆãä½¿ã†ã‚¹ãƒ‹ãƒšãƒƒãƒˆ æ–‡å—ã«è‰²ã‚’ã¤ã‘ã‚‹ èµ¤ã„æ–‡å—ã§ã‚¨ãƒ©ãƒ¼ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‚’å‡ºåŠ›ã—ã¦çµ‚äº†ã™ã‚‹ å¤–éƒ¨ã‚³ãƒžãƒ³ãƒ‰å®Ÿè¡Œã™ã‚‹ ãƒ†ã‚ã‚¹ãƒˆã‚’ãƒ•ã‚¡ã‚¤ãƒ«ã«å‡ºåŠ›ã™ã‚‹ ãƒ•ã‚¡ã‚¤ãƒ«ã«å®Ÿè¡Œæ¨©é™ã‚’ã¤ã‘ã‚‹ ã‚¹ã‚¯ãƒªãƒ—ãƒˆã®åŒæ™‚ã€å¤šé‡èµ·å‹•é˜²æ¢ã™ã‚‹ ã‚³ãƒžãƒ³ãƒ‰ãƒ©ã‚¤ãƒ³ãƒ»ã‚ªãƒ—ã‚·ãƒ§ãƒ³ã®è§£æž HTTPãƒªã‚¯ã‚¨ã‚¹ãƒˆ ã¾ã¨ã‚ Bashã‚¹ã‚¯ãƒªãƒ—ãƒˆã¸ã®ä¸æº€ Bashã®ã‚¹ã‚¯ãƒªãƒ—ãƒˆå®Ÿè£…ã«ãŠ
puglee 2018/01/20
ã‚ã¨ã§èªã‚€

python

bash
ãƒªãƒ³ã‚¯
OS X bash Update 1.0 – OS X Mavericks - Apple Support
System Requirements: OS X Mavericks v10.9.5 or later File Size: 3.4 MB Download This update fixes a security flaw in the bash UNIX shell. See this article for details on how to verify the authenticity of this download. For more information on the security content of this update, see http://support.apple.com/kb/HT1222. Supported Languages: Bahasa Indonesia, British English, Crna Gora, Dansk, Deutsc
puglee 2014/09/30
é©ç”¨ã—ã¾ã—ãŸ

OS

OS X

security

UNIX

bash

Mac

Apple
ãƒªãƒ³ã‚¯
Bash specially-crafted environment variables code injection attack
This article was originally published on the Red Hat Customer Portal. The information may no longer be current. Update 2014-09-30 19:30 UTC Questions have arisen around whether Red Hat products are vulnerable toÂ CVE-2014-6277Â andÂ CVE-2014-6278.Â We have determined thatÂ RHSA-2014:1306,Â RHSA-2014:1311,Â andÂ RHSA-2014:1312Â successfully mitigate the vulnerability and no additional actions need to be ta
puglee 2014/09/25
bash

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

Linux

security

RedHat

vulnerability

è„†å¼±æ€§
ãƒªãƒ³ã‚¯
BASHã®è„†å¼±æ€§ã§CGIã‚¹ã‚¯ãƒªãƒ—ãƒˆã«ã‚¢ãƒ¬ã•ã›ã¦ã¿ã¾ã—ãŸ
ç’°å¢ƒå¤‰æ•°ã«ä»•è¾¼ã¾ã‚ŒãŸã‚³ãƒ¼ãƒ‰ã‚’å®Ÿè¡Œã—ã¦ã—ã¾ã†BASHã®è„†å¼±æ€§ãŒ CGIã‚¹ã‚¯ãƒªãƒ—ãƒˆã«å½±éŸ¿ã‚’ä¸Žãˆã‚‹ã‹è©¦ã—ã¦ã¿ãŸã‚‰çµæžœã¯æ‚²æƒ¨ãªæ„Ÿã˜ã« Tweet 2014å¹´9æœˆ25æ—¥ å¶‹ç”°å¤§è²´ ã“ã®è¨˜äº‹ã¯2014å¹´ã®ã‚‚ã®ã§ã™ æœã‹ã‚‰ Bash specially-crafted environment variables code injection attack ãªã‚‹ã‚‚ã®ã§é¨’ãŽã«ãªã£ã¦ã„ãŸã®ã§ã€ã•ã£ããæ‰‹å…ƒã® Apacheã§è©¦ã—ã¦ã¿ã¾ã—ãŸã€‚ /hoge.cgiã¨ã„ã†URIã§å®Ÿè¡Œã•ã‚Œã‚‹ã‚ˆã†ã«ã€ä¸€è¡Œã®ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã‚’å‡ºåŠ›ã™ã‚‹ã ã‘ã® CGIã‚¹ã‚¯ãƒªãƒ—ãƒˆã‚’è¨ç½®ã—ã¾ã™ã€‚ã„ã£ã‘ã‚“ã€ãªã‚“ã®å…¥åŠ›ã‚‚ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆå´ã‹ã‚‰å—ã‘ä»˜ã‘ã¦ã„ãªã„ãŸã‚å±é™ºã®ã‚ã‚Šã‚ˆã†ã‚‚ãªãè¦‹ãˆã¾ã™ã€‚ #!/bin/sh echo "Content-type: text/plain" echo echo "Hi! I'm an ordinary CGI script w
puglee 2014/09/25
æ—¢ã«å„ç¨®OSã§ãƒªãƒªãƒ¼ã‚¹ã•ã‚Œã¦ã„ã‚‹ãƒ‘ãƒƒãƒã‚’æ—©ãé©ç”¨ã™ã‚‹ã®ãŒç„¡é›£ã‹ï¼Ÿ

CGI

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

Linux

bash

CVE-2014-6271

vulnerability

è„†å¼±æ€§

security
ãƒªãƒ³ã‚¯
1