{"id":112410,"date":"2023-12-22T03:10:14","date_gmt":"2023-12-22T01:10:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/smtp-smuggling-novaya-tehnika-spufinga-pochtovyh-soobshhenij"},"modified":"2023-12-22T03:10:14","modified_gmt":"2023-12-22T01:10:16","slug":"smtp-smuggling-novaya-tehnika-spufinga-pochtovyh-soobshhenij","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/smtp-smuggling-novaya-tehnika-spufinga-pochtovyh-soobshhenij","title":{"rendered":"SMTP Smuggling \u2014 uus e-kirjade petmisetehnika","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

SEC Consulti teadlased avaldasid uue spfikatehnika, mis on p\u00f5hjustatud erinevustest spetsifikatsiooni j\u00e4rgimises erinevates SMTP protokolli teostustes. Pakutud r\u00fcnnetehnika v\u00f5imaldab jagada \u00fche s\u00f5numi mitmeks erinevaks s\u00f5numiks selle edastamisel algsest SMTP-serverist teise SMTP-serverisse, mis t\u00f5lgendab s\u00f5numi jagamisj\u00e4rjekorda teisiti, edastades sama \u00fchenduse kaudu. Meetodit saab kasutada valeposti saatmiseks teiste saatjate nimel e-posti teenustes, mis kontrollivad algset saatjat. <\/p>\n

Probleem tuleneb sellest, et erinevad SMTP-serverid t\u00f5lgendavad andmete edastamise l\u00f5pu j\u00e4rjestust erinevalt, mis v\u00f5ib viia \u00fche kirja jagunemiseni mitmeks \u00fche SMTP-serveriga seansi raames. Kirja edastamise l\u00f5petamise m\u00e4rgistamiseks on spetsifikatsioonis m\u00e4\u00e4ratud j\u00e4rjestus «\r\n.\r\n» (punkt, mis on piiratud tagasikerimise ja reavahetuse s\u00fcmbolitega). Sellele j\u00e4rjestusele v\u00f5ivad j\u00e4rgnenud k\u00e4sud edastada teisi kirju ilma \u00fchendust katkestamata. M\u00f5ned SMTP-serverid j\u00e4rgivad rangelt ettekirjutusi, kuid teised, et tagada \u00fchilduvus haruldaste postiklientidega, k\u00e4sitlevad eraldajatena ka selliseid j\u00e4rjestusi nagu «\n.\n», «\n.\r\n», «\r\n.\n», «\r.\r», «\r\n0.\r\n» ja «\r\n0.\r\n». <\/p>\n

R\u00fcnne seisneb selles, et esmaste server<\/a>, mis k\u00e4sitleb ainult eraldajat «\r\n.\r\n», saadetakse kiri, mille kehas on alternatiivne eraldaja, n\u00e4iteks «\r.\r», millele j\u00e4rgnevate k\u00e4skude j\u00e4rgi saadetakse teine s\u00f5num. Kuna esimene server j\u00e4rgib rangelt spetsifikatsiooni, k\u00e4sitleb ta saadud j\u00e4rjestust kui \u00fchte kirja. Kui kiri suunatakse hiljem \u00fclekandiserverisse v\u00f5i saaja serverisse, mis lisaks tajub j\u00e4rjestust «\r.\r» eraldajana, k\u00e4sitletakse seda kui kahte eraldi saadetud kirja (teine kiri v\u00f5idakse saata kasutaja nime alt, kes ei ole autentitud l\u00e4bi «AUTH LOGIN», kuid n\u00e4eb v\u00e4lja korrektne saaja poolel).

\"SMTP<\/center>
\"SMTP<\/center> <\/p>\n

Alternatiivsete eraldajate kasutamist toetavate SMTP-serverite ja teenuste n\u00e4idetena on Postfix, Sendmail, MS Exchange Online ja Cisco Secure Email Gateway, samas kui e-posti teenused, mis ei filtreeri valesid eraldajaid kirjadest, edastades need teistele serveritele \u2014 GMX, iCloud ja Microsoft Outlook. <\/p>\n

Postfixi versioonides 3.8.1, 3.7.6, 3.6.10 ja 3.5.20 on probleemide blokeerimiseks lisatud seade «smtpd_forbid_unauth_pipelining», mis katkestab \u00fchenduse, kui kasutatakse jaotureid, mis ei vasta RFC 2920 ja RFC 5321 n\u00f5uetele. Praegu on see seade vaikimisi v\u00e4lja l\u00fclitatud, kuid plaanitakse see vaikimisi aktiveerida Postfixi 3.9 haru versioonis, mis on oodata 2024. aasta kevadel. Samas 3.9 harus lisatakse ka seadistus smtpd_forbid_bare_newline, mis v\u00e4ljastab vea, kui kasutatakse ainult reavahetuss\u00fcmbolit («\n») ridade eraldamiseks, mis rikub RFC 5321. <\/p>\n

Valmivas Sendmail 8.18.0.2 versioonis pakutakse srv_features kaitseks r\u00fcnnakute eest valik ‘o’, mis lubab t\u00f6\u00f6delda ainult j\u00e4rjestust «\r\n.\r\n». M\u00e4rgitakse, et alternatiivsete jaoturite toe keelamine v\u00f5ib h\u00e4irida m\u00f5nede haruldaste meiliclientide t\u00f6\u00f6d, mis ei vasta t\u00e4ielikult SMTP spetsifikatsioonile.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 SEC Consult \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u043d\u043e\u0432\u0443\u044e \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0441\u043f\u0443\u0444\u0438\u043d\u0433\u0430, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u0443\u044e \u0440\u0430\u0441\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u044f\u043c\u0438 \u0432 \u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0438 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f\u0445 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 SMTP. \u041f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u0430\u044f \u0442\u0435\u0445\u043d\u0438\u043a\u0430 \u0430\u0442\u0430\u043a\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0440\u0430\u0441\u0449\u0435\u043f\u0438\u0442\u044c \u043e\u0434\u043d\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u043d\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0440\u0430\u0437\u043d\u044b\u0445 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043f\u0440\u0438 \u0435\u0433\u043e \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0435 \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c SMTP-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u043d\u0430 \u0434\u0440\u0443\u0433\u043e\u0439 SMTP-\u0441\u0435\u0440\u0432\u0435\u0440, \u043f\u043e \u0438\u043d\u043e\u043c\u0443 \u0442\u0440\u0430\u043a\u0442\u0443\u044e\u0449\u0438\u0439 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u043f\u0438\u0441\u0435\u043c, \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u0435\u043c\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u043e\u0434\u043d\u043e \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435. \u041c\u0435\u0442\u043e\u0434 \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0444\u0438\u043a\u0442\u0438\u0432\u043d\u044b\u0445 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":112411,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-112410","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47SMTP Smuggling \u2014 uus e-kirjade spufingutehnika | ProHoster","description":"SEC Consulti teadlased avaldasid uue spufingutehnika, mis tuleneb erinevuste t\u00f5ttu protokolli SMTP erinevates rakendustes.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/smtp-smuggling-novaya-tehnika-spufinga-pochtovyh-soobshhenij","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47SMTP Smuggling \u2014 \u043d\u043e\u0432\u0430\u044f \u0442\u0435\u0445\u043d\u0438\u043a\u0430 \u0441\u043f\u0443\u0444\u0438\u043d\u0433\u0430 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0445 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 SEC Consult \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u043d\u043e\u0432\u0443\u044e \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0441\u043f\u0443\u0444\u0438\u043d\u0433\u0430, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u0443\u044e \u0440\u0430\u0441\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u044f\u043c\u0438 \u0432 \u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0438 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f\u0445 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 SMTP.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/smtp-smuggling-novaya-tehnika-spufinga-pochtovyh-soobshhenij","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-12-22T01:10:16+00:00","article:modified_time":"2023-12-22T01:10:16+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/112410","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=112410"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/112410\/revisions"}],"predecessor-version":[{"id":172924,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/112410\/revisions\/172924"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/112411"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=112410"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=112410"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=112410"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}