OpenBSD sshd yakabatanidzwa panguva yebhutsu

OpenBSD inoshandisa nzira yekurwisa-kushandiswa iyo inotsamira pakudzokorodza zvisina tsarukano kweiyo sshd faira rekuita pese nguva iyo system bhutsu. Kare, imwe nzira yekubatanidza yakafanana yaishandiswa kukernel nemaraibhurari libc.so, libcrypto.so uye ld.so, uye zvino ichashandiswa kune mamwe mafaira anozoitwa. Munguva pfupi iri kutevera, iyo nzira yakarongwa zvakare kuti ishandiswe kune ntpd uye mamwe maseva maapplication. Shanduko iyi yakatoverengerwa mubazi reCURRENT uye ichapihwa mukuburitswa kweOpenBSD 7.3.

Kubatanidza zvakare kunoita kuti zvikwanise kuita kuti basa rekutamisa mumaraibhurari risatarisike, izvo zvinoita kuti zviome kugadzira mashandisiro uchishandisa return-oriented programming (ROP) nzira. Paunenge uchishandisa iyo ROP tekinoroji, anorwisa haaedze kuisa kodhi yake mundangariro, asi anoshanda pane zvidimbu zvemichina mirairo yatovepo mumaraibhurari akaremerwa, ichipera nekuraira kudzoka kwekutonga (semutemo, aya ndiwo magumo emabasa eraibhurari) . Basa rekushandisa rinouya pasi pakuvaka ketani yemafoni kune akafanana mabhuroko ("magajeti") kuti uwane iyo inodiwa kushanda.

Source: opennet.ru

Voeg