[B! Struts] wasaiã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

wasai id:wasai

Strutsã«é–¢ã™ã‚‹wasaiã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (4)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

Strutsè„†å¼±æ€§å•é¡Œã®ã‚»ãƒŸãƒŠãƒ¼é–‹å‚¬ã€Springã¸ã®ç§»è¡Œã‚µãƒ¼ãƒ“ã‚¹ã®ä¸€ç’°ã§
Strutsã‹ã‚‰Springã¸ã®ç§»è¡Œã‚µãƒ¼ãƒ“ã‚¹ãªã©ã‚’æä¾›ã—ã¦ã„ã‚‹æ ªå¼ä¼šç¤¾ã‚¹ã‚¿ã‚¤ãƒ«ã‚ºã¯ã€4æœˆ24æ—¥ã€ã‚»ãƒŸãƒŠãƒ¼ã‚¤ãƒ™ãƒ³ãƒˆã€Œæ·±åˆ»åŒ–ã™ã‚‹Strutsè„†å¼±æ€§ã«ã©ã†å¯¾å‡¦ã™ã‚‹ã‹ï¼Ÿã€ã‚’é–‹å‚¬ã—ãŸã€‚Javaã®Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯ã€ŒStrutsã€ã®ã€ãƒªãƒ¢ãƒ¼ãƒˆã‹ã‚‰ä»»æ„ã®ã‚³ãƒ¼ãƒ‰ã‚’å®Ÿè¡Œå¯èƒ½ãªè„†å¼±æ€§ã«ã‚ˆã‚Šã€ã„ãã¤ã‹ã®é‡è¦ãªã‚µã‚¤ãƒˆã§æƒ…å ±æ¼æ´©ãŒæµå‡ºã—ãŸã“ã¨ã‚’å—ã‘ã¦ã®ã‚‚ã®ã ã€‚ ã‚¤ãƒ™ãƒ³ãƒˆã«ã¯ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚¤å°‚é–€å®¶ã§HASHã‚³ãƒ³ã‚µãƒ«ãƒ†ã‚£ãƒ³ã‚°æ ªå¼ä¼šç¤¾ä»£è¡¨ã®å¾³ä¸¸æµ©æ°ãŒç™»å£‡ã—ã¦ã€Strutsã®è„†å¼±æ€§ã®äº‹ä»¶ã‚„ãã®ä»–ã®Webè„†å¼±æ€§ã¸ã®å¯¾å¿œã«ã¤ã„ã¦è§£èª¬ã—ãŸã€‚ã¾ãŸã€ã‚¹ã‚¿ã‚¤ãƒ«ã‚ºã¯Strutsã‹ã‚‰ã®ç§»è¡Œã‚µãƒ¼ãƒ“ã‚¹ã«ã¤ã„ã¦è©³ã—ãç´¹ä»‹ã—ãŸã€‚ åŸºæœ¬æ–½ç–ã€ãƒ‘ãƒƒãƒé©ç”¨å®¹æ˜“æ€§ã€å¤šå±¤é˜²å¾¡ã§å®ˆã‚‹ å¾³ä¸¸æ°ã¯ã¾ãšã€ä¸€é€£ã®äº‹ä»¶ã®ã†ã¡å½±éŸ¿ãŒå¤§ãã„GMOãƒšã‚¤ãƒ¡ãƒ³ãƒˆã‚²ãƒ¼ãƒˆã‚¦ã‚§ã‚¤ã®äº‹ä»¶ã‚’å–ã‚Šä¸Šã’ãŸã€‚åŒç¤¾ã®å…¬å¼ç™ºè¡¨ã‚„ãƒ¡ãƒ‡ã‚£ã‚¢ã®å ±é“å†…å®¹ã‹ã‚‰ã€å¯¾å¿œå†…å®¹ã‚’è¦‹ã¦ã€ã€Œå…¨ä½“ã¨ã—ã¦ã¯ã‚¹
wasai 2017/05/25
Struts

è„†å¼±æ€§

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
Apache Struts 2ã«æ·±åˆ»ãªè„†å¼±æ€§ã€å›½å†…ã§ã‚‚æ”»æ’ƒã‚’è¦³æ¸¬
Apache Struts 2ã«æ·±åˆ»ãªè„†å¼±æ€§ã€å›½å†…ã§ã‚‚æ”»æ’ƒã‚’è¦³æ¸¬ï¼šå ´åˆã«ã‚ˆã£ã¦ã¯ãƒªã‚¯ã‚¨ã‚¹ãƒˆã®åˆ¶é™ãªã©ã®å›žé¿ç–ã‚’æŽ¨å¥¨ Apache Software Foundationã¯ç±³å›½æ™‚é–“ã®2013å¹´7æœˆ16æ—¥ã€æ·±åˆ»ãªè„†å¼±æ€§ã‚’ä¿®æ£ã™ã‚‹ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã€ŒStruts 2.3.15.1ã€ã‚’å…¬é–‹ã—ãŸã€‚ Apache Software Foundationã¯ç±³å›½æ™‚é–“ã®2013å¹´7æœˆ16æ—¥ã€Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯ã€ŒStruts 2ã€ã®æ–°ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã€ŒStruts 2.3.15.1ã€ã‚’å…¬é–‹ã—ãŸã€‚æ·±åˆ»ãªè„†å¼±æ€§ã‚’ä¿®æ£ã™ã‚‹ã‚‚ã®ã§ã€åŒFoundationã¯æ—©æ€¥ãªã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã‚’æŽ¨å¥¨ã—ã¦ã„ã‚‹ã€‚ Struts 2ã¯ã€Javaã«ã‚ˆã‚‹Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³é–‹ç™ºã«åºƒãä½¿ã‚ã‚Œã¦ã„ã‚‹ãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯ã§ã€å›½å†…ã§ã‚‚å¤šãã®ã‚µãƒ¼ãƒ“ã‚¹ãŒæŽ¡ç”¨ã—ã¦ã„ã‚‹ã€‚ ä»Šå›žä¿®æ£ã•ã‚ŒãŸè„†å¼±æ€§ï¼ˆS2-016ï¼‰ã¯ã€Struts 2.0.0ã‹ã‚‰2.3.15ã¾ã§ã«å˜
wasai 2013/07/19
@IT

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

Struts
ãƒªãƒ³ã‚¯
æ–°æŠ€è¡“ãƒ»æ–°ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã¸ã®ç§»è¡Œè«‡ç¾©
hadoop ã®è©±ã‹ã‚‰ struts ã®è©±ã«ç§»ã‚Šã€ãã—ã¦æ–°ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã¸ã®ç§»è¡Œã®æˆå¦ã®éµã‚’å·¡ã‚‹ä¸€é€£ã®ãƒãƒ£ãƒƒãƒˆã€‚
wasai 2012/07/09
Togetter

Twitter

Hadoop

struts
ãƒªãƒ³ã‚¯
ãƒã‚§ãƒƒã‚¯ã—ã¦ãŠããŸã„è„†å¼±æ€§æƒ…å ±ï¼œ2012.02.07ï¼ž
1æœˆ29æ—¥ã¾ã§ã«æ˜Žã‚‰ã‹ã«ãªã£ãŸè„†å¼±æ€§æƒ…å ±ã®ã†ã¡ã€æ°—ã«ãªã‚‹ã‚‚ã®ã‚’ç´¹ä»‹ã—ã¾ã™ã€‚ãã‚Œãžã‚Œã€ãƒ™ãƒ³ãƒ€ãƒ¼ãŒæä¾›ã™ã‚‹æƒ…å ±ãªã©ã‚’å‚è€ƒã«å¯¾å‡¦ã—ã¦ãã ã•ã„ã€‚ Struts 2.3.1.2ãƒªãƒªãƒ¼ã‚¹ï¼ˆ2012/01/22ï¼‰ Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯Strutsã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³2.3.1.2ãŒãƒªãƒªãƒ¼ã‚¹ã•ã‚Œã¾ã—ãŸã€‚ã“ã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã§ã¯ã€ParametersInterceptorã«çµ„ã¿è¾¼ã¾ã‚Œã¦ã„ã‚‹é˜²è·æ©Ÿèƒ½ã‚’è¿‚å›žã—ã¦ã€OGNLï¼ˆObject Graph Navigation Languageï¼‰ã‚’ä½¿ã£ãŸä»»æ„ã®ã‚³ãƒ¼ãƒ‰å®Ÿè¡Œã‚’è¨±ã—ã¦ã—ã¾ã†è„†å¼±æ€§ï¼ˆCVE-2011-3923ï¼‰ã‚’è§£æ±ºã—ã¦ã„ã¾ã™ã€‚Struts 2.0.0ï½ž2.3.1.1ã«å½±éŸ¿ãŒã‚ã‚Šã¾ã™ã€‚ Apache Strutsï¼šParameterInterceptor vulnerability allows remote command execution Apache
wasai 2012/02/07
ITpro

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

Struts

IronPort

Unbound

MySQL Community Server

Samba
ãƒªãƒ³ã‚¯
1