{"id":36029,"date":"2019-10-31T22:09:14","date_gmt":"2019-10-31T19:09:14","guid":{"rendered":"https:\/\/prohoster.info\/blog\/uyazvimost-blokirovshhika-ekrana-v-astra-linux-special-edition-smolensk\/"},"modified":"2019-10-31T22:09:14","modified_gmt":"2019-10-31T19:09:14","slug":"uyazvimost-blokirovshhika-ekrana-v-astra-linux-special-edition-smolensk","status":"publish","type":"post","link":"https:\/\/prohoster.info\/nl\/blog\/news\/uyazvimost-blokirovshhika-ekrana-v-astra-linux-special-edition-smolensk","title":{"rendered":"Kwetsbaarheid van de vergrendelingsscherm in Astra Linux Special Edition (Smolensk)","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

In dit artikel bekijken we een interessante kwetsbaarheid in het 'binnenlandse' besturingssysteem Astra Linux, laten we beginnen...<\/p>\n

\"Kwetsbaarheid<\/a><\/noindex>
\nAstra Linux is een speciaal besturingssysteem op basis van de Linux-kernel, ontwikkeld voor de uitgebreide bescherming van informatie en de opbouw van beveiligde geautomatiseerde systemen.<\/p>\n

De fabrikant ontwikkelt een basisversie van Astra Linux \u2014 Common Edition (algemeen gebruik) en de modificatie Special Edition (speciaal gebruik):<\/p>\n

    \n
  1. de algemene editie \u2014 Common Edition \u2014 is bedoeld voor het midden- en kleinbedrijf, onderwijsinstellingen;<\/li>\n
  2. de speciale editie \u2014 Special Edition \u2014 is bedoeld voor geautomatiseerde systemen in een beveiligde uitvoering die informatie met een geheimheidsniveau 'zeer geheim' of hoger verwerken.<\/li>\n<\/ol>\n

    \nDe kwetsbaarheid in de screensaver werd oorspronkelijk ontdekt op het besturingssysteem Astra Linux Common Edition v2.12. Deze doet zich voor wanneer de computer in een vergrendelde toestand verkeert en het schermresolutie op dat moment wordt gewijzigd. In bijvoorbeeld virtuele omgevingen (VMWare, Oracle Virtualbox) wordt de volledige inhoud van het bureaublad zonder verificatie weergegeven. <\/p>\n

    Deze kwetsbaarheid is ook succesvol op Astra Linux Special Edition v1.5 uitgevoerd. Er is mogelijk ook een manier om informatie van fysieke machines te verkrijgen door gebruik te maken van meerdere monitoren met verschillende resoluties.<\/p>\n

    Hieronder is een video met een demonstratie op Astra Linux Special Edition v1.5 (de station werd geblokkeerd en de venstergrootte van het station werd veranderd):<\/p>\n

    \"Kwetsbaarheid
    \n
    \nScreenshot uit de video (fragment van gegevens op het bureaublad):<\/p>\n

    \"Kwetsbaarheid
    \n
    \nIn het algemeen kan worden geconcludeerd dat het gebruik van deze kwetsbaarheid het mogelijk maakt om ongemerkt kennis te nemen van documenten (waaronder documenten met beperkte toegang) die openstaan op het bureaublad van een vergrendeld station met Astra Linux, wat leidt tot het lekken van dit soort informatie.
    \n
    Bron:     habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

    \u0412 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u043c\u044b \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u043c \u043e\u0447\u0435\u043d\u044c \u043e\u0434\u043d\u0443 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u00ab\u043e\u0442\u0435\u0447\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0439\u00bb \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Astra Linux, \u0438 \u0442\u0430\u043a, \u043d\u0430\u0447\u043d\u0435\u043c\u2026 Astra Linux \u2014 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u043d\u0430 \u0431\u0430\u0437\u0435 \u044f\u0434\u0440\u0430 Linux, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0430\u044f \u0434\u043b\u044f \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0441\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u044b \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u0438\u044f \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u0445 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c. \u041f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c \u0440\u0430\u0437\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0431\u0430\u0437\u043e\u0432\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u0438 Astra Linux \u2014 Common Edition (\u043e\u0431\u0449\u0435\u0433\u043e \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f) \u0438 \u0435\u0451 \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f Special Edition […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-36029","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Kwetsbaarheid van de screensaver in Astra Linux Special Edition (Smolensk) | ProHoster","description":"In dit artikel bekijken we een interessante kwetsbaarheid in het 'binnenlandse' besturingssysteem Astra Linux, laten we beginnen...","canonical_url":"https:\/\/prohoster.info\/nl\/blog\/news\/uyazvimost-blokirovshhika-ekrana-v-astra-linux-special-edition-smolensk","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"nl_NL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u0430 \u044d\u043a\u0440\u0430\u043d\u0430 \u0432 Astra Linux Special Edition (\u0421\u043c\u043e\u043b\u0435\u043d\u0441\u043a) | ProHoster","og:description":"\u0412 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u043c\u044b \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u043c \u043e\u0447\u0435\u043d\u044c \u043e\u0434\u043d\u0443 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u00ab\u043e\u0442\u0435\u0447\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0439\u00bb \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Astra Linux, \u0438 \u0442\u0430\u043a, \u043d\u0430\u0447\u043d\u0435\u043c\u2026","og:url":"https:\/\/prohoster.info\/nl\/blog\/news\/uyazvimost-blokirovshhika-ekrana-v-astra-linux-special-edition-smolensk","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:09:14+00:00","article:modified_time":"2019-10-31T19:09:14+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36029","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"Article","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 01:43:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:52:24","updated":"2026-01-22 01:43:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/posts\/36029","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/comments?post=36029"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/posts\/36029\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/media?parent=36029"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/categories?post=36029"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/tags?post=36029"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}