{"id":36029,"date":"2019-10-31T22:09:14","date_gmt":"2019-10-31T19:09:14","guid":{"rendered":"https:\/\/prohoster.info\/blog\/uyazvimost-blokirovshhika-ekrana-v-astra-linux-special-edition-smolensk\/"},"modified":"2019-10-31T22:09:14","modified_gmt":"2019-10-31T19:09:14","slug":"uyazvimost-blokirovshhika-ekrana-v-astra-linux-special-edition-smolensk","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-blokirovshhika-ekrana-v-astra-linux-special-edition-smolensk","title":{"rendered":"Vulnerabilitatea bloc\u0103rii ecranului \u00een Astra Linux Special Edition (Smolensk)","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\u00cen acest articol, vom analiza o vulnerabilitate foarte interesant\u0103 \u00een sistemul de operare \u201eautohton\u201d Astra Linux, \u0219i a\u0219adar, s\u0103 \u00eencepem...<\/p>\n

\"Vulnerabilitatea<\/a><\/noindex>
\nAstra Linux este un sistem de operare de specialitate bazat pe kernel Linux, creat pentru protec\u021bia complex\u0103 a informa\u021biilor \u0219i pentru construirea de sisteme automate protejate.<\/p>\n

Produc\u0103torul dezvolt\u0103 versiunea de baz\u0103 a Astra Linux \u2014 Common Edition (de uz general) \u0219i modificarea sa Special Edition (de uz special):<\/p>\n

    \n
  1. edi\u021bia de uz general \u2014 Common Edition \u2014 este destinat\u0103 \u00eentreprinderilor mici \u0219i mijlocii, institu\u021biilor de \u00eenv\u0103\u021b\u0103m\u00e2nt;<\/li>\n
  2. edi\u021bia de uz special \u2014 Special Edition \u2014 este destinat\u0103 sistemelor automate \u00een execu\u021bie protejat\u0103, care proceseaz\u0103 informa\u021bii cu un grad de confiden\u021bialitate \u201estrict secret\u201d inclusiv.<\/li>\n<\/ol>\n

    \nVulnerabilitatea ini\u021bial\u0103 \u00een blocatorul de ecran a fost descoperit\u0103 pe sistemul de operare Astra Linux Common Edition v2.12, aceasta se manifest\u0103 \u00een momentul \u00een care computerul se afl\u0103 \u00een stare blocat\u0103 \u0219i, dac\u0103 \u00een acest moment se efectueaz\u0103 schimbarea rezolu\u021biei ecranului. \u00cen special \u00een medii virtuale (VMWare, Oracle Virtualbox), are loc o afi\u0219are complet\u0103 a con\u021binutului desktop-ului f\u0103r\u0103 parcurgerea autentific\u0103rii. <\/p>\n

    Aceast\u0103 vulnerabilitate a fost, de asemenea, exploatat\u0103 cu succes pe Astra Linux Special Edition v1.5. Este posibil s\u0103 existe o op\u021biune de ob\u021binere a informa\u021biilor \u0219i de pe ma\u0219ini fizice, prin utilizarea mai multor monitoare cu rezolu\u021bii diferite.<\/p>\n

    Mai jos este un videoclip cu o demonstra\u021bie pe Astra Linux Special Edition v1.5 (a fost efectuat\u0103 blocarea sta\u021biei, schimbarea dimensiunii ferestrei sta\u021biei):<\/p>\n

    \"Vulnerabilitatea
    \n
    \nCaptur\u0103 de ecran din videoclip (fragment de date de pe desktop):<\/p>\n

    \"Vulnerabilitatea
    \n
    \n\u00cen concluzie, se poate concluziona c\u0103 exploatarea acestei bre\u0219e va permite accesul discret la con\u021binutul documentelor (inclusiv cele cu acces restric\u021bionat) deschise pe desktop-ul sta\u021biei blocate cu Astra Linux, ceea ce va duce la scurgerea acestui tip de informa\u021bii.
    \n
    Sursa:     habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

    \u0412 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u043c\u044b \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u043c \u043e\u0447\u0435\u043d\u044c \u043e\u0434\u043d\u0443 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u00ab\u043e\u0442\u0435\u0447\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0439\u00bb \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Astra Linux, \u0438 \u0442\u0430\u043a, \u043d\u0430\u0447\u043d\u0435\u043c\u2026 Astra Linux \u2014 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u043d\u0430 \u0431\u0430\u0437\u0435 \u044f\u0434\u0440\u0430 Linux, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0430\u044f \u0434\u043b\u044f \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0441\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u044b \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u0438\u044f \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u0445 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c. \u041f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c \u0440\u0430\u0437\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0431\u0430\u0437\u043e\u0432\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u0438 Astra Linux \u2014 Common Edition (\u043e\u0431\u0449\u0435\u0433\u043e \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f) \u0438 \u0435\u0451 \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f Special Edition […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-36029","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilitatea blocatorului de ecran \u00een Astra Linux Special Edition (Smolensk) | ProHoster","description":"\u00cen acest articol, vom analiza o vulnerabilitate foarte interesant\u0103 \u00een sistemul de operare \u201eautohton\u201d Astra Linux, \u0219i a\u0219adar, s\u0103 \u00eencepem...","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-blokirovshhika-ekrana-v-astra-linux-special-edition-smolensk","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u0430 \u044d\u043a\u0440\u0430\u043d\u0430 \u0432 Astra Linux Special Edition (\u0421\u043c\u043e\u043b\u0435\u043d\u0441\u043a) | ProHoster","og:description":"\u0412 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u043c\u044b \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u043c \u043e\u0447\u0435\u043d\u044c \u043e\u0434\u043d\u0443 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u00ab\u043e\u0442\u0435\u0447\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0439\u00bb \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Astra Linux, \u0438 \u0442\u0430\u043a, \u043d\u0430\u0447\u043d\u0435\u043c\u2026","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-blokirovshhika-ekrana-v-astra-linux-special-edition-smolensk","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:09:14+00:00","article:modified_time":"2019-10-31T19:09:14+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36029","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"Article","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 01:43:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:52:24","updated":"2026-01-22 01:43:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/36029","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=36029"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/36029\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=36029"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=36029"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=36029"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}