{"id":86356,"date":"2020-06-24T13:42:00","date_gmt":"2020-06-24T11:42:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-zashhishhyonnom-brauzere-bitdefender-safepay-privodyashhaya-k-vypolneniyu-koda"},"modified":"2020-06-24T13:42:00","modified_gmt":"2020-06-24T11:42:00","slug":"uyazvimost-v-zashhishhyonnom-brauzere-bitdefender-safepay-privodyashhaya-k-vypolneniyu-koda","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimost-v-zashhishhyonnom-brauzere-bitdefender-safepay-privodyashhaya-k-vypolneniyu-koda","title":{"rendered":"Bitdefender SafePay'i kaitstud brauseri haavatavus, mis viib koodi t\u00e4itmiseni","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Vladimir Palant, Adblock Plus loojaja, tuvastas<\/a><\/noindex> haavatavus<\/a><\/noindex> (CVE-2020-8102<\/a><\/noindex>) Chromiumi mootoril p\u00f5hinevas SafePay veebibrauseris, mis pakutakse Bitdefender Total Security 2020 viiruset\u00f5rje paketiga ning on suunatud kasutaja t\u00f6\u00f6ohutuse suurendamisele globaalses v\u00f5rgus (n\u00e4iteks, pakkudes t\u00e4iendavat isolatsiooni panganduse ja makses\u00fcsteemide kasutamisel). Haavatavus v\u00f5imaldab brauseris avatud lehtedel t\u00e4ita arbitraarset koodi operatsioonis\u00fcsteemi tasemel.<\/p>\n

Probleemi p\u00f5hjus seisneb selles, et Bitdefender viiruset\u00f5rje teostab kohalikku HTTPS-i liikluse pealtkuulamist, asendades veebisaidi algse TLS-sertifikaadi. Klientide s\u00fcsteemi installitakse t\u00e4iendav juuresertifikaat, mis varjab kasutatava liikluse inspektsiooni s\u00fcsteemi toimimist. Viiruset\u00f5rje sekkuvad kaitstud liiklusesse ja sisestavad m\u00f5nedele lehtedele oma JavaScript-koodi Safe Search funktsiooni rakendamiseks, ning sertifikaadi probleemide korral asendavad turvalise \u00fchenduse veaallika lehe oma versiooniga. Kuna uus veaallika leht esitatakse avatud serveri nimel, on teistele sama serveri lehtedele t\u00e4ielik juurdep\u00e4\u00e4s Bitdefenderi sisestatud sisule.<\/p>\n

Kui avada kurjategija kontrolli all olev veebisait, v\u00f5ib see saata XMLHttpRequesti p\u00e4ringu ja simuleerida HTTPS-sertifikaadi probleemi vastusena, mis toob kaasa Bitdefenderi valeveebilehe kuvamise. Kuna valeveebileht avatakse r\u00fcndaja domeeni kontekstis, saab ta lugeda valede lehe sisu, sealhulgas Bitdefenderi parameetreid. Bitdefenderi asenduselehelt on saadaval ka sessiooniv\u00f5ti, mis v\u00f5imaldab Bitdefenderi sisemise API kaudu k\u00e4ivitada eraldi Safepay brauseriseansi, m\u00e4\u00e4rates samas juhuslikud k\u00e4sklippude, et saada k\u00e4ivitada mis tahes s\u00fcsteemik\u00e4ske, kasutades lippu \u00ab\u2014utility-cmd-prefix\u00bb. N\u00e4ide eksploiti (param1 ja param2 \u2014 v\u00e4\u00e4rtused, mis on saadud valeveebilehelt):<\/p>\n

var request = new XMLHttpRequest();
\n request.open(\"POST\", Math.random());
\n request.setRequestHeader(\"Content-type\", \"application\/x-www-form-urlencoded\");
\n request.setRequestHeader(\"BDNDSS_B67EA559F21B487F861FDA8A44F01C50\", param1);
\n request.setRequestHeader(\"BDNDCA_BBACF84D61A04F9AA66019A14B035478\", param2);
\n request.setRequestHeader(\"BDNDWB_5056E556833D49C1AF4085CB254FC242\", \"obk.run\");
\n request.setRequestHeader(\"BDNDOK_4E961A95B7B44CBCA1907D3D3643370D\", location.href);
\n request.send(\"data:text\/html,nada \u2014utility-cmd-prefix=\\cmd.exe \/k whoami & echo\\>\");<\/p>\n

\"Bitdefender<\/a><\/noindex><\/center><\/p>\n

Tuletame, et 2017. aastal tehtud uuring n\u00e4itas<\/a><\/noindex>, et 24 26-st testitud viiruset\u00f5rje tootest, mis kontrollisid HTTPS-traffic'i sertifikaatide asendamise kaudu, v\u00e4hendasid HTTPS-\u00fchenduse \u00fcldist turvalisust.
\nK\u00e4esolevad kr\u00fcpteerimiskomplektid olid saadaval ainult 11 26-st tootest. 5 s\u00fcsteemi ei kontrollinud sertifikaate (Kaspersky Internet Security 16 Mac, NOD32 AV 9, CYBERsitter, Net Nanny 7 Win, Net Nanny 7 Mac). Kaspersky Internet Security ja Total Security tooted olid r\u00fcnnakutele altti CRIME<\/a><\/noindex>, samas kui AVG, Bitdefender ja Bullguard olid r\u00fcnnakute all Logjam<\/a><\/noindex> ja POODLE<\/a><\/noindex>. Toode Dr.Web Antivirus 11 v\u00f5imaldab tagasi l\u00fckata ebausaldusv\u00e4\u00e4rsed ekspordi kr\u00fcptod (r\u00fcnnak FREAK<\/a><\/noindex>).<\/p>\n

<\/a><\/noindex><\/p>\n

Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412\u043b\u0430\u0434\u0438\u043c\u0438\u0440 \u041f\u0430\u043b\u0430\u043d\u0442, \u0441\u043e\u0437\u0434\u0430\u0442\u0435\u043b\u044c Adblock Plus, \u0432\u044b\u044f\u0432\u0438\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2020-8102) \u0432 \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u043d\u0430 \u0434\u0432\u0438\u0436\u043a\u0435 Chromium \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c web-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Safepay, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u043c\u043e\u043c \u0432 \u0441\u043e\u0441\u0442\u0430\u0432\u0435 \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u043d\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 Bitdefender Total Security 2020 \u0438 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u043c \u043d\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0432 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044f \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0438 \u043a \u0431\u0430\u043d\u043a\u0430\u043c \u0438 \u043f\u043b\u0430\u0442\u0451\u0436\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c). \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u0430\u0451\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u043c\u044b\u043c \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 \u0441\u0430\u0439\u0442\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":86357,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-86356","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Turbet\u00f5rge Bitdefender SafePay kaitstud brauseris, mis p\u00f5hjustab koodi t\u00e4itmist | ProHoster","description":"Vladimir Palant, Adblock Plusi looja, avastas","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimost-v-zashhishhyonnom-brauzere-bitdefender-safepay-privodyashhaya-k-vypolneniyu-koda","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u043c \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Bitdefender SafePay, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 | ProHoster","og:description":"\u0412\u043b\u0430\u0434\u0438\u043c\u0438\u0440 \u041f\u0430\u043b\u0430\u043d\u0442, \u0441\u043e\u0437\u0434\u0430\u0442\u0435\u043b\u044c Adblock Plus, \u0432\u044b\u044f\u0432\u0438\u043b","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimost-v-zashhishhyonnom-brauzere-bitdefender-safepay-privodyashhaya-k-vypolneniyu-koda","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-24T11:42:00+00:00","article:modified_time":"2020-06-24T11:42:00+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"86356","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:17:32","updated":"2022-09-28 12:42:50","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/86356","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=86356"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/86356\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/86357"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=86356"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=86356"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=86356"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}