{"id":106430,"date":"2023-01-21T00:48:13","date_gmt":"2023-01-20T22:48:13","guid":{"rendered":"https:\/\/prohoster.info\/?p=106430"},"modified":"2023-01-26T22:45:20","modified_gmt":"2023-01-26T20:45:20","slug":"v-openbsd-dlya-sshd-primenena-perekomponovka-vo-vremya-zagruzki","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/v-openbsd-dlya-sshd-primenena-perekomponovka-vo-vremya-zagruzki","title":{"rendered":"Une reconfiguration a \u00e9t\u00e9 appliqu\u00e9e \u00e0 sshd lors du d\u00e9marrage dans OpenBSD.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

OpenBSD a mis en \u0153uvre une technique de protection contre l'exploitation des vuln\u00e9rabilit\u00e9s, bas\u00e9e sur le r\u00e9arrangement al\u00e9atoire du fichier ex\u00e9cutable sshd \u00e0 chaque d\u00e9marrage du syst\u00e8me. Auparavant, une technique similaire de r\u00e9arrangement \u00e9tait appliqu\u00e9e au noyau et aux biblioth\u00e8ques libc.so, libcrypto.so et ld.so, et sera d\u00e9sormais appliqu\u00e9e \u00e9galement \u00e0 certains fichiers ex\u00e9cutables. Dans un avenir proche, il est \u00e9galement pr\u00e9vu d'appliquer cette m\u00e9thode \u00e0 ntpd et \u00e0 d'autres applications serveur. Ce changement est d\u00e9j\u00e0 inclus dans la branche CURRENT et sera propos\u00e9 dans la version OpenBSD 7.3. <\/p>\n

La r\u00e9organisation permet de rendre impr\u00e9visibles les d\u00e9calages des fonctions dans les biblioth\u00e8ques, ce qui complique la cr\u00e9ation d'exploits utilisant des m\u00e9thodes de programmation orient\u00e9e retour (ROP \u2014 Return-Oriented Programming). Lors de l'utilisation de la technique ROP, l'attaquant ne cherche pas \u00e0 placer son propre code en m\u00e9moire, mais utilise des morceaux d'instructions machine d\u00e9j\u00e0 pr\u00e9sents dans les biblioth\u00e8ques charg\u00e9es, se terminant par une instruction de retour de contr\u00f4le (g\u00e9n\u00e9ralement, il s'agit des fins des fonctions de biblioth\u00e8que). Le fonctionnement de l'exploit se r\u00e9sume \u00e0 la construction d'une cha\u00eene d'appels de tels blocs (\u00ab gadgets \u00bb) pour obtenir la fonctionnalit\u00e9 souhait\u00e9e.
\n
Source : opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 OpenBSD \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u0430 \u0442\u0435\u0445\u043d\u0438\u043a\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043d\u0430 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u043e\u0439 \u043f\u0435\u0440\u0435\u043a\u043e\u043c\u043f\u043e\u043d\u043e\u0432\u043a\u0435 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 sshd \u043f\u0440\u0438 \u043a\u0430\u0436\u0434\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u0420\u0430\u043d\u0435\u0435 \u043f\u043e\u0434\u043e\u0431\u043d\u0430\u044f \u0442\u0435\u0445\u043d\u0438\u043a\u0430 \u043f\u0435\u0440\u0435\u043a\u043e\u043c\u043f\u043e\u043d\u043e\u0432\u043a\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0430\u0441\u044c \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u044f\u0434\u0440\u0430 \u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a libc.so, libcrypto.so \u0438 ld.so, \u0430 \u0442\u0435\u043f\u0435\u0440\u044c \u0431\u0443\u0434\u0435\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0430 \u0438 \u0434\u043b\u044f \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432. \u0412 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043c\u0435\u0442\u043e\u0434 \u0442\u0430\u043a\u0436\u0435 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f ntpd \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439. […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-106430","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47OpenBSD applique le r\u00e9arrangement lors du d\u00e9marrage pour sshd | ProHoster","description":"OpenBSD a mis en \u0153uvre une technique de protection contre l'exploitation des vuln\u00e9rabilit\u00e9s, bas\u00e9e sur le r\u00e9arrangement al\u00e9atoire du fichier ex\u00e9cutable sshd \u00e0 chaque d\u00e9marrage du syst\u00e8me.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/v-openbsd-dlya-sshd-primenena-perekomponovka-vo-vremya-zagruzki","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 OpenBSD \u0434\u043b\u044f sshd \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0430 \u043f\u0435\u0440\u0435\u043a\u043e\u043c\u043f\u043e\u043d\u043e\u0432\u043a\u0430 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 | ProHoster","og:description":"\u0412 OpenBSD \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u0430 \u0442\u0435\u0445\u043d\u0438\u043a\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043d\u0430 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u043e\u0439 \u043f\u0435\u0440\u0435\u043a\u043e\u043c\u043f\u043e\u043d\u043e\u0432\u043a\u0435 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 sshd \u043f\u0440\u0438 \u043a\u0430\u0436\u0434\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/v-openbsd-dlya-sshd-primenena-perekomponovka-vo-vremya-zagruzki","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-01-20T22:48:13+00:00","article:modified_time":"2023-01-26T20:45:20+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/106430","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=106430"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/106430\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=106430"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=106430"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=106430"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}