{"id":115101,"date":"2024-04-16T14:30:16","date_gmt":"2024-04-16T12:30:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-putty-pozvolyayushhaya-vosstanovit-zakrytyj-klyuch-polzovatelya"},"modified":"2024-04-16T14:30:16","modified_gmt":"2024-04-16T12:30:16","slug":"uyazvimost-v-putty-pozvolyayushhaya-vosstanovit-zakrytyj-klyuch-polzovatelya","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-putty-pozvolyayushhaya-vosstanovit-zakrytyj-klyuch-polzovatelya","title":{"rendered":"Vulnerabilitate \u00een PuTTY care permite recuperarea cheii private a utilizatorului","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\u00cen PuTTY, clientul pentru protocolul SSH, popular pe platforma Windows, a fost identificat\u0103 o vulnerabilitate periculoas\u0103 (CVE-2024-31497) care permite recrearea cheii private a utilizatorului, generat\u0103 folosind algoritmul ECDSA cu curba eliptic\u0103 NIST P-521 (ecdsa-sha2-nistp521). Pentru a determina cheia privat\u0103, este suficient s\u0103 se analizeze aproximativ 60 de semn\u0103turi digitale formate cu cheia problematic\u0103. <\/p>\n

Vulnerabilitatea apare \u00eencep\u00e2nd cu versiunea PuTTY 0.68 \u0219i a afectat de asemenea produsele care includ versiuni vulnerabile de PuTTY, cum ar fi FileZilla (3.24.1 - 3.66.5), WinSCP (5.9.5 - 6.3.2), TortoiseGit (2.4.0.2 - 2.15.0) \u0219i TortoiseSVN (1.10.0 - 1.14.6). Problema a fost remediat\u0103 \u00een actualiz\u0103rile PuTTY 0.81, FileZilla 3.67.0, WinSCP 6.3.3 \u0219i TortoiseGit 2.15.0.1. Dup\u0103 instalarea actualiz\u0103rii, utilizatorilor li se recomand\u0103 s\u0103 genereze chei noi \u0219i s\u0103 elimine vechile chei publice din fi\u0219ierele authorized_keys. <\/p>\n

Vulnerabilitatea este cauzat\u0103 de neglijen\u021ba dezvoltatorilor, care pentru generarea cheii de 521 de bi\u021bi au folosit un vector de ini\u021bializare (nonce) bazat pe o secven\u021b\u0103 aleatoare de 512 bi\u021bi, probabil consider\u00e2nd c\u0103 entropia de 512 bi\u021bi ar fi suficient\u0103 \u0219i c\u0103 restul de 9 bi\u021bi nu au o semnifica\u021bie esen\u021bial\u0103. Ca urmare, \u00een toate cheile private create \u00een PuTTY folosind algoritmul ecdsa-sha2-nistp521, primii 9 bi\u021bi ai vectorului de ini\u021bializare aveau \u00eentotdeauna valoare zero. <\/p>\n

Pentru ECDSA \u0219i DSA, calitatea generatorului de numere pseudo-aleatoare \u0219i acoperirea complet\u0103 cu date aleatoare a parametrului folosit la calcularea modulului sunt esen\u021biale, deoarece determinarea chiar \u0219i a c\u00e2torva bi\u021bi cu informa\u021bii despre vectorul de ini\u021bializare este suficient\u0103 pentru a realiza un atac prin recuperarea secven\u021bial\u0103 a \u00eentregii chei private. Pentru a reu\u0219i \u00een recuperarea cheii, este suficient s\u0103 existe cheia public\u0103 \u0219i s\u0103 se analizeze c\u00e2teva zeci de semn\u0103turi digitale generate cu cheia problematic\u0103 pentru datele cunoscute atacatorului. Atacul const\u0103 \u00een rezolvarea problemei HNP (Hidden Number Problem). <\/p>\n

Semn\u0103turile digitale necesare pot fi ob\u021binute, de exemplu, prin conectarea utilizatorului la un server SSH al atacatorului sau la un server Git care folose\u0219te SSH ca transport. Semn\u0103turile necesare pentru atac pot fi, de asemenea, descoperite dac\u0103 cheia a fost utilizat\u0103 pentru a semna date arbitrare, de exemplu, commit-uri git prin utilizarea agentului SSH Pageant pentru redirec\u021bionarea traficului c\u0103tre hostul dezvoltatorului. Ob\u021binerea datelor necesare pentru recuperarea cheii \u00een timpul unui atac MITM este exclus\u0103, deoarece semn\u0103turile \u00een SSH nu sunt transmise \u00een clar. <\/p>\n

Se observ\u0103 c\u0103 o utilizare similar\u0103 a vectorilor de ini\u021bializare incomple\u021bi a fost aplicat\u0103 \u0219i \u00een PuTTY \u0219i pentru alte tipuri de curbe eliptice, dar pentru algoritmi diferi\u021bi de ECDSA P-521, scurgerile de informa\u021bii nu sunt suficiente pentru a realiza un atac func\u021bional de recuperare a cheii. Cheile ECDSA de alte dimensiuni \u0219i cheile Ed25519 nu sunt vulnerabile la atac.
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 PuTTY, \u043a\u043b\u0438\u0435\u043d\u0442\u0435 \u0434\u043b\u044f \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 SSH, \u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u0433\u043e\u0441\u044f \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c\u044e \u043d\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Windows, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-31497), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u043e\u0441\u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0439 \u043a\u043b\u044e\u0447 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0441\u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u0430 ECDSA \u0441 \u044d\u043b\u043b\u0438\u043f\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043a\u0440\u0438\u0432\u043e\u0439 NIST P-521 (ecdsa-sha2-nistp521). \u0414\u043b\u044f \u043f\u043e\u0434\u0431\u043e\u0440\u0430 \u0437\u0430\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u043a\u043b\u044e\u0447\u0430 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e 60 \u0446\u0438\u0444\u0440\u043e\u0432\u044b\u0445 \u043f\u043e\u0434\u043f\u0438\u0441\u0435\u0439, \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043d\u044b\u043c \u043a\u043b\u044e\u0447\u043e\u043c. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u0432\u0435\u0440\u0441\u0438\u0438 PuTTY 0.68 \u0438 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0430 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-115101","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilitate \u00een PuTTY care permite recuperarea cheii private a utilizatorului | ProHoster","description":"\u00cen PuTTY, clientul pentru protocolul SSH popular pe platforma Windows, a fost identificat\u0103 o vulnerabilitate periculoas\u0103 (CVE-2024-31497), care permite recrearea cheii private a utilizatorului, generat\u0103 utiliz\u00e2nd.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-putty-pozvolyayushhaya-vosstanovit-zakrytyj-klyuch-polzovatelya","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 PuTTY, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0439 \u043a\u043b\u044e\u0447 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f | ProHoster","og:description":"\u0412 PuTTY, \u043a\u043b\u0438\u0435\u043d\u0442\u0435 \u0434\u043b\u044f \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 SSH, \u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u0433\u043e\u0441\u044f \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c\u044e \u043d\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Windows, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-31497), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u043e\u0441\u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0439 \u043a\u043b\u044e\u0447 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0441\u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-putty-pozvolyayushhaya-vosstanovit-zakrytyj-klyuch-polzovatelya","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-04-16T12:30:16+00:00","article:modified_time":"2024-04-16T12:30:16+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"115101","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 22:28:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-22 22:28:19","updated":"2026-01-22 22:28:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/115101","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=115101"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/115101\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=115101"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=115101"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=115101"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}