{"id":115101,"date":"2024-04-16T14:30:16","date_gmt":"2024-04-16T12:30:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-putty-pozvolyayushhaya-vosstanovit-zakrytyj-klyuch-polzovatelya"},"modified":"2024-04-16T14:30:16","modified_gmt":"2024-04-16T12:30:16","slug":"uyazvimost-v-putty-pozvolyayushhaya-vosstanovit-zakrytyj-klyuch-polzovatelya","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hr\/blog\/news\/uyazvimost-v-putty-pozvolyayushhaya-vosstanovit-zakrytyj-klyuch-polzovatelya","title":{"rendered":"Ranjivost u PuTTY-ju koja omogu\u0107ava obnovu korisni\u010dkog privatnog klju\u010da","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

U PuTTY-ju, klijentu za SSH protokol, popularnom na Windows platformi, otkrivena je ozbiljna sigurnosna ranjivost (CVE-2024-31497) koja omogu\u0107ava rekonstrukciju privatnog klju\u010da korisnika generiranog pomo\u0107u ECDSA algoritma s elipti\u010dnom krivuljom NIST P-521 (ecdsa-sha2-nistp521). Da bi se odabrao privatni klju\u010d, dovoljno je analizirati otprilike 60 digitalnih potpisa formiranih problemati\u010dnim klju\u010dem. <\/p>\n

Ranjenje se pojavljuje po\u010dev\u0161i od verzije PuTTY 0.68 i tako\u0111er utje\u010de na proizvode koji uklju\u010duju ranjive verzije PuTTY, na primjer, FileZilla (3.24.1 \u2013 3.66.5), WinSCP (5.9.5 \u2013 6.3.2), TortoiseGit (2.4.0.2 \u2013 2.15.0) i TortoiseSVN (1.10.0 \u2013 1.14.6). Problem je ispravljen u a\u017euriranjima PuTTY 0.81, FileZilla 3.67.0, WinSCP 6.3.3 i TortoiseGit 2.15.0.1. Nakon instalacije a\u017euriranja, korisnicima se preporu\u010duje da generiraju nove klju\u010deve i uklone stare javne klju\u010deve iz datoteka authorized_keys. <\/p>\n

Ranjivost je uzrokovana nemarom programera koji su za generiranje 521-bitnog klju\u010da koristili vektor inicijalizacije (nonce) temeljen na 512-bitnoj slu\u010dajnoj sekvenci, vjerojatno smatraju\u0107i da \u0107e entropija od 512 bita biti dovoljna i da preostalih 9 bita nema zna\u010daja. U kona\u010dnici, u svim privatnim klju\u010devima stvorenim u PuTTY-ju kori\u0161tenjem ecdsa-sha2-nistp521 algoritma, prvih 9 bita vektora inicijalizacije uvijek su imala nulte vrijednosti. <\/p>\n

Za ECDSA i DSA, kvaliteta generatora pseudo-slu\u010dajnih brojeva i potpuno pokri\u0107e slu\u010dajnim podacima parametra koji se koristi prilikom izra\u010duna modula su od su\u0161tinskog zna\u010daja, jer je odre\u0111ivanje \u010dak i nekoliko bita s informacijama o vektoru inicijalizacije dovoljno za izvo\u0111enje napada putem sekvencijalnog obnavljanja cijelog privatnog klju\u010da. Za uspje\u0161no obnavljanje klju\u010da dovoljni su javni klju\u010d i analiza nekoliko desetaka digitalnih potpisa generiranih pomo\u0107u problemati\u010dnog klju\u010da za poznate podatke napada\u010du. Napad se svodi na rje\u0161avanje HNP (Hidden Number Problem) zadatka. <\/p>\n

Potrebni digitalni potpisi mogu se dobiti, na primjer, povezivanjem korisnika na SSH poslu\u017eitelj napada\u010da ili na Git poslu\u017eitelj koji koristi SSH kao transport. Potrebne potpise za napad tako\u0111er se mogu saznati ako je klju\u010d kori\u0161ten za potpisivanje proizvoljnih podataka, primjerice, git commitova pri kori\u0161tenju SSH agenta Pageant za proslje\u0111ivanje prometa na doma\u0107ina programera. Dobivanje potrebnih podataka za vra\u0107anje klju\u010da tijekom MITM napada je isklju\u010deno, jer se potpisi u SSH ne prenose u otvorenom obliku. <\/p>\n

Primje\u0107uje se da je sli\u010dno kori\u0161tenje nepotpunih vektora inicijalizacije primjenjivano u PuTTY i za druge vrste elipti\u010dnih krivulja, no za algoritme osim ECDSA P-521, do\u0161lo je do nedovoljnog curenja informacija za realizaciju funkcionalnog napada za vra\u0107anje klju\u010da. Klju\u010devi ECDSA druge veli\u010dine i klju\u010devi Ed25519 nisu podlo\u017eni napadu.
\n
Izvor: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 PuTTY, \u043a\u043b\u0438\u0435\u043d\u0442\u0435 \u0434\u043b\u044f \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 SSH, \u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u0433\u043e\u0441\u044f \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c\u044e \u043d\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Windows, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-31497), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u043e\u0441\u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0439 \u043a\u043b\u044e\u0447 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0441\u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u0430 ECDSA \u0441 \u044d\u043b\u043b\u0438\u043f\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043a\u0440\u0438\u0432\u043e\u0439 NIST P-521 (ecdsa-sha2-nistp521). \u0414\u043b\u044f \u043f\u043e\u0434\u0431\u043e\u0440\u0430 \u0437\u0430\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u043a\u043b\u044e\u0447\u0430 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e 60 \u0446\u0438\u0444\u0440\u043e\u0432\u044b\u0445 \u043f\u043e\u0434\u043f\u0438\u0441\u0435\u0439, \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043d\u044b\u043c \u043a\u043b\u044e\u0447\u043e\u043c. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u0432\u0435\u0440\u0441\u0438\u0438 PuTTY 0.68 \u0438 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0430 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-115101","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Ranjivost u PuTTY-ju koja omogu\u0107ava vra\u0107anje privatnog klju\u010da korisnika | ProHoster","description":"U PuTTY-ju, klijentu za SSH protokol, koji je popularan na Windows platformi, otkrivena je opasna ranjivost (CVE-2024-31497) koja omogu\u0107ava ponovnu izradu korisnikovog privatnog klju\u010da generiranog kori\u0161tenjem.","canonical_url":"https:\/\/prohoster.info\/hr\/blog\/news\/uyazvimost-v-putty-pozvolyayushhaya-vosstanovit-zakrytyj-klyuch-polzovatelya","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hr_HR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 PuTTY, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0439 \u043a\u043b\u044e\u0447 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f | ProHoster","og:description":"\u0412 PuTTY, \u043a\u043b\u0438\u0435\u043d\u0442\u0435 \u0434\u043b\u044f \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 SSH, \u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u0433\u043e\u0441\u044f \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c\u044e \u043d\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Windows, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-31497), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u043e\u0441\u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0439 \u043a\u043b\u044e\u0447 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0441\u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c.","og:url":"https:\/\/prohoster.info\/hr\/blog\/news\/uyazvimost-v-putty-pozvolyayushhaya-vosstanovit-zakrytyj-klyuch-polzovatelya","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-04-16T12:30:16+00:00","article:modified_time":"2024-04-16T12:30:16+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"115101","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 22:28:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-22 22:28:19","updated":"2026-01-22 22:28:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/115101","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/comments?post=115101"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/115101\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media?parent=115101"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/categories?post=115101"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/tags?post=115101"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}