{"id":86356,"date":"2020-06-24T13:42:00","date_gmt":"2020-06-24T11:42:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-zashhishhyonnom-brauzere-bitdefender-safepay-privodyashhaya-k-vypolneniyu-koda"},"modified":"2020-06-24T13:42:00","modified_gmt":"2020-06-24T11:42:00","slug":"uyazvimost-v-zashhishhyonnom-brauzere-bitdefender-safepay-privodyashhaya-k-vypolneniyu-koda","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/uyazvimost-v-zashhishhyonnom-brauzere-bitdefender-safepay-privodyashhaya-k-vypolneniyu-koda","title":{"rendered":"Zranitelnost v zabezpe\u010den\u00e9m prohl\u00ed\u017ee\u010di Bitdefender SafePay vedouc\u00ed k proveden\u00ed k\u00f3du.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Vladimir Palant, tv\u016frce Adblock Plus, odhalil<\/a><\/noindex> zranitelnost<\/a><\/noindex> (CVE-2020-8102<\/a><\/noindex>) ve specializovan\u00e9m webov\u00e9m prohl\u00ed\u017ee\u010di Safepay, zalo\u017een\u00e9m na j\u00e1d\u0159e Chromium, kter\u00fd je sou\u010d\u00e1st\u00ed antivirov\u00e9ho bal\u00edku Bitdefender Total Security 2020 a zam\u011b\u0159uje se na zv\u00fd\u0161en\u00ed bezpe\u010dnosti u\u017eivatele p\u0159i pr\u00e1ci na glob\u00e1ln\u00ed s\u00edti (nap\u0159\u00edklad poskytuje dodate\u010dnou izolaci p\u0159i p\u0159\u00edstupu k bank\u00e1m a platebn\u00edm syst\u00e9m\u016fm). Zranitelnost umo\u017e\u0148uje web\u016fm otev\u0159en\u00fdm v prohl\u00ed\u017ee\u010di spou\u0161t\u011bt libovoln\u00fd k\u00f3d na \u00farovni opera\u010dn\u00edho syst\u00e9mu.<\/p>\n

P\u0159\u00ed\u010dina probl\u00e9mu spo\u010d\u00edv\u00e1 v tom, \u017ee antivir Bitdefender prov\u00e1d\u00ed m\u00edstn\u00ed zachyt\u00e1v\u00e1n\u00ed HTTPS provozu prost\u0159ednictv\u00edm v\u00fdm\u011bny p\u016fvodn\u00edho TLS certifik\u00e1tu webu. Na syst\u00e9mu klienta je nainstalov\u00e1n dodate\u010dn\u00fd ko\u0159enov\u00fd certifik\u00e1t, kter\u00fd skr\u00fdv\u00e1 \u010dinnost pou\u017eit\u00e9ho syst\u00e9mu pro inspekci provozu. Antivir se vkl\u00edn\u00ed do \u0161ifrovan\u00e9ho provozu a na n\u011bkter\u00e9 str\u00e1nky vkl\u00e1d\u00e1 sv\u016fj vlastn\u00ed JavaScript k\u00f3d pro realizaci funkce Safe Search, a pokud dojde k probl\u00e9m\u016fm s certifik\u00e1tem \u0161ifrovan\u00e9ho p\u0159ipojen\u00ed, nahrazuje str\u00e1nku s chybou vlastn\u00ed str\u00e1nkou. Nov\u00e1 str\u00e1nka s chybou se vyd\u00e1v\u00e1 za str\u00e1nku otev\u0159en\u00e9ho serveru, co\u017e znamen\u00e1, \u017ee ostatn\u00ed str\u00e1nky tohoto serveru maj\u00ed pln\u00fd p\u0159\u00edstup k obsahu, kter\u00fd Bitdefender vkl\u00e1d\u00e1.<\/p>\n

P\u0159i otev\u0159en\u00ed webov\u00e9 str\u00e1nky pod kontrolou \u00fato\u010dn\u00edka m\u016f\u017ee tato str\u00e1nka odeslat po\u017eadavek XMLHttpRequest a simulovat probl\u00e9m s HTTPS certifik\u00e1tem, co\u017e povede k zobrazen\u00ed chybov\u00e9 str\u00e1nky, kterou podvrhl Bitdefender. Proto\u017ee chybov\u00e1 str\u00e1nka je otev\u0159ena v kontextu dom\u00e9ny \u00fato\u010dn\u00edka, m\u016f\u017ee \u010d\u00edst obsah podvr\u017een\u00e9 str\u00e1nky s parametry Bitdefender. Na podvr\u017een\u00e9 str\u00e1nce Bitdefender je tak\u00e9 p\u0159\u00edtomen relace kl\u00ed\u010d, kter\u00fd umo\u017e\u0148uje prost\u0159ednictv\u00edm intern\u00edho API Bitdefender spustit samostatnou relaci prohl\u00ed\u017ee\u010de Safepay s libovoln\u00fdmi p\u0159\u00edznaky p\u0159\u00edkazov\u00e9ho \u0159\u00e1dku a dos\u00e1hnout spu\u0161t\u011bn\u00ed jak\u00fdchkoli syst\u00e9mov\u00fdch p\u0159\u00edkaz\u016f pomoc\u00ed p\u0159\u00edznaku \u201c--utility-cmd-prefix\u201d. P\u0159\u00edklad exploitu (param1 a param2 \u2014 hodnoty z\u00edskan\u00e9 ze str\u00e1nky s chybou):<\/p>\n

var request = new XMLHttpRequest();
\n request.open(\u2018POST\u2019, Math.random());
\n request.setRequestHeader(\u2018Content-type\u2019, \u2018application\/x-www-form-urlencoded\u2019);
\n request.setRequestHeader(\u2018BDNDSS_B67EA559F21B487F861FDA8A44F01C50\u2019, param1);
\n request.setRequestHeader(\u2018BDNDCA_BBACF84D61A04F9AA66019A14B035478\u2019, param2);
\n request.setRequestHeader(\u2018BDNDWB_5056E556833D49C1AF4085CB254FC242\u2019, \u2018obk.run\u2019);
\n request.setRequestHeader(\u2018BDNDOK_4E961A95B7B44CBCA1907D3D3643370D\u2019, location.href);
\n request.send(\u2018data:text\/html,nada \u2014utility-cmd-prefix=\\cmd.exe \/k whoami & echo\\\u2019);<\/p>\n

\"Zranitelnost<\/a><\/noindex><\/center><\/p>\n

P\u0159ipom\u00edn\u00e1me, \u017ee studie proveden\u00e1 v roce 2017 uk\u00e1zala<\/a><\/noindex>, \u017ee 24 ze 26 testovan\u00fdch antivirov\u00fdch produkt\u016f, kter\u00e9 inspektovaly HTTPS provoz prost\u0159ednictv\u00edm podvr\u017een\u00fdch certifik\u00e1t\u016f, sni\u017eovaly celkovou \u00farove\u0148 bezpe\u010dnosti HTTPS p\u0159ipojen\u00ed.
\nAktu\u00e1ln\u00ed sady \u0161ifrovac\u00edch algoritm\u016f byly poskytov\u00e1ny pouze v 11 ze 26 produkt\u016f. 5 syst\u00e9m\u016f neprov\u00e1d\u011blo ov\u011b\u0159ov\u00e1n\u00ed certifik\u00e1t\u016f (Kaspersky Internet Security 16 Mac, NOD32 AV 9, CYBERsitter, Net Nanny 7 Win, Net Nanny 7 Mac). Produkty Kaspersky Internet Security a Total Security byly n\u00e1chyln\u00e9 k \u00fatok\u016fm CRIME<\/a><\/noindex>, zat\u00edmco produkty AVG, Bitdefender a Bullguard byly vystaveny \u00fatok\u016fm Logjam<\/a><\/noindex> a POODLE<\/a><\/noindex>. Produkt Dr.Web Antivirus 11 umo\u017e\u0148uje vr\u00e1tit se k ned\u016fv\u011bryhodn\u00fdm exportn\u00edm \u0161ifr\u016fm (\u00fatok FREAK<\/a><\/noindex>).<\/p>\n

<\/a><\/noindex><\/p>\n

Zdroj: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412\u043b\u0430\u0434\u0438\u043c\u0438\u0440 \u041f\u0430\u043b\u0430\u043d\u0442, \u0441\u043e\u0437\u0434\u0430\u0442\u0435\u043b\u044c Adblock Plus, \u0432\u044b\u044f\u0432\u0438\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2020-8102) \u0432 \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u043d\u0430 \u0434\u0432\u0438\u0436\u043a\u0435 Chromium \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c web-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Safepay, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u043c\u043e\u043c \u0432 \u0441\u043e\u0441\u0442\u0430\u0432\u0435 \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u043d\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 Bitdefender Total Security 2020 \u0438 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u043c \u043d\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0432 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044f \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0438 \u043a \u0431\u0430\u043d\u043a\u0430\u043c \u0438 \u043f\u043b\u0430\u0442\u0451\u0436\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c). \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u0430\u0451\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u043c\u044b\u043c \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 \u0441\u0430\u0439\u0442\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":86357,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-86356","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Zranitelnost v zabezpe\u010den\u00e9m prohl\u00ed\u017ee\u010di Bitdefender SafePay, kter\u00e1 umo\u017e\u0148uje prov\u00e1d\u011bn\u00ed k\u00f3du | ProHoster","description":"Vladimir Palant, tv\u016frce Adblock Plus, odhalil","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/uyazvimost-v-zashhishhyonnom-brauzere-bitdefender-safepay-privodyashhaya-k-vypolneniyu-koda","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u043c \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Bitdefender SafePay, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 | ProHoster","og:description":"\u0412\u043b\u0430\u0434\u0438\u043c\u0438\u0440 \u041f\u0430\u043b\u0430\u043d\u0442, \u0441\u043e\u0437\u0434\u0430\u0442\u0435\u043b\u044c Adblock Plus, \u0432\u044b\u044f\u0432\u0438\u043b","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/uyazvimost-v-zashhishhyonnom-brauzere-bitdefender-safepay-privodyashhaya-k-vypolneniyu-koda","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-24T11:42:00+00:00","article:modified_time":"2020-06-24T11:42:00+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"86356","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:17:32","updated":"2022-09-28 12:42:50","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/86356","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=86356"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/86356\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/86357"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=86356"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=86356"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=86356"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}