ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ืŸ SSH ืงืœื™ื™ืึทื ืฅ OpenSSH ืื•ืŸ PuTTY

ืื™ืŸ SSH ืงืœื™ื™ืึทื ืฅ OpenSSH ืื•ืŸ PuTTY ื™ื™ื“ืขื ืึทืคื™ื™ื“ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ (CVE-2020-14002 ืื™ืŸ PuTTY ืื•ืŸ CVE-2020-14145 ืื™ืŸ OpenSSH), ื•ื•ืึธืก ืคื™ืจืŸ ืฆื• ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ืœื™ืงืึทื“ื–ืฉ ืื™ืŸ ื“ื™ ืึทืœื’ืขืจื™ื“ืึทื ืคึฟืึทืจ ืคืึทืจื”ืึทื ื“ืœื•ื ื’ ืคึฟืึทืจ ืงืฉืจ. ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืึทืœืึทื•ื– ืึท ืึทื˜ืึทืงืขืจ ื˜ื•ื™ื’ืขื•ื•ื“ื™ืง ืคื•ืŸ ื™ื ื˜ืขืจืกืขืคึผื˜ื™ื ื’ ืงืœื™ืขื ื˜ ืคืึทืจืงืขืจ (ืœืžืฉืœ ื•ื•ืขืŸ ืึท ื‘ืึทื ื™ืฆืขืจ ืงืึทื ืขืงืฅ ื“ื•ืจืš ืึท ืึทื˜ืึทืงืขืจ-ืงืึทื ื˜ืจืึธื•ืœื“ ื•ื•ื™ื™ืจืœื™ืก ืึทืงืกืขืก ืคื•ื ื˜) ืฆื• ื“ืขื˜ืขืงื˜ ืึทืŸ ืคึผืจื•ื•ื•ืŸ ืฆื• ื˜ื›ื™ืœืขืก ืคืึทืจื‘ื™ื ื“ืŸ ื“ืขื ืงืœื™ืขื ื˜ ืฆื• ื“ืขืจ ื‘ืึทืœืขื‘ืึธืก ื•ื•ืขืŸ ื“ืขืจ ืงืœื™ืขื ื˜ ื”ืื˜ ื ื™ืฉื˜ ื ืึธืš ืงืึทืฉื˜ ื“ื™ ื‘ืึทืœืขื‘ืึธืก ืฉืœื™ืกืœ.

ื•ื•ื™ื™ืœ ืึทื– ื“ืขืจ ืงืœื™ืขื ื˜ ืื™ื– ื˜ืจื™ื™ื ื’ ืฆื• ืคืึทืจื‘ื™ื ื“ืŸ ืคึฟืึทืจ ื“ื™ ืขืจืฉื˜ืขืจ ืžืึธืœ ืื•ืŸ ื ืึธืš ื ื™ืฉื˜ ื”ืึธื‘ืŸ ื“ื™ ื‘ืึทืœืขื‘ืึธืก ืฉืœื™ืกืœ ืื•ื™ืฃ ื–ื™ื™ืŸ ื–ื™ื™ึทื˜, ื“ืขืจ ืึทื˜ืึทืงืขืจ ืงืขื ืขืŸ ื‘ืจืึธื“ืงืึทืกื˜ ื“ื™ ืงืฉืจ ื“ื•ืจืš ื–ื™ืš (MITM) ืื•ืŸ ื’ืขื‘ืŸ ื“ืขื ืงืœื™ืขื ื˜ ื–ื™ื™ืŸ ื‘ืึทืœืขื‘ืึธืก ืฉืœื™ืกืœ, ื•ื•ืึธืก ื“ืขืจ SSH ืงืœื™ืขื ื˜ ื•ื•ืขื˜ ื‘ืึทื˜ืจืึทื›ื˜ืŸ ืฆื• ื–ื™ื™ืŸ ื“ืขืจ ืฉืœื™ืกืœ ืคื•ืŸ ื“ืขืจ ืฆื™ืœ ื‘ืึทืœืขื‘ืึธืก ืื•ื™ื‘ ืขืก ืงืขืŸ ื ื™ืฉื˜ ื‘ืึทืฉื˜ืขื˜ื™ืงืŸ ื“ืขื ืฉืœื™ืกืœ ืคื™ื ื’ืขืจืคึผืจื™ื ื˜. ืื–ื•ื™, ืึท ืึทื˜ืึทืงืขืจ ืงืขื ืขืŸ ืึธืจื’ืึทื ื™ื–ื™ืจืŸ MITM ืึธืŸ ื“ืขืจื•ื•ืขืงืŸ ื‘ืึทื ื™ืฆืขืจ ื—ืฉื“ ืื•ืŸ ืื™ื’ื ืึธืจื™ืจืŸ ืกืขืฉืึทื ื– ืื™ืŸ ื•ื•ืึธืก ื“ืขืจ ืงืœื™ืขื ื˜ ื–ื™ื™ึทื˜ ื”ืื˜ ืฉื•ื™ืŸ ืงืึทืฉื˜ ื‘ืึทืœืขื‘ืึธืก ืฉืœื™ืกืœืขืŸ, ืึทืŸ ืคึผืจื•ื•ื•ืŸ ืฆื• ืคืึทืจื‘ื™ื™ึทื˜ืŸ ื•ื•ืึธืก ื•ื•ืขื˜ ืจืขื–ื•ืœื˜ืึทื˜ ืื™ืŸ ืึท ื•ื•ืืจืขื ื•ื ื’ ื•ื•ืขื’ืŸ ื“ื™ ืขื ื“ืขืจื•ื ื’ ืคื•ืŸ ื“ืขืจ ื‘ืึทืœืขื‘ืึธืก ืฉืœื™ืกืœ. ื“ื™ ื‘ืึทืคืึทืœืŸ ืื™ื– ื‘ืื–ื™ืจื˜ ืื•ื™ืฃ ื“ื™ ืงืขืจืœืึทืกื ืึทืก ืคื•ืŸ ื™ื•ื–ืขืจื– ื•ื•ืึธืก ื˜ืึธืŸ ื ื™ื˜ ืžืึทื ื™ื•ืึทืœื™ ืงืึธื ื˜ืจืึธืœื™ืจืŸ ื“ื™ ืคื™ื ื’ืขืจืคึผืจื™ื ื˜ ืคื•ืŸ ื“ื™ ื‘ืึทืœืขื‘ืึธืก ืฉืœื™ืกืœ ื•ื•ืขืŸ ื–ื™ื™ ืขืจืฉื˜ืขืจ ืคืึทืจื‘ื™ื ื“ืŸ. ื“ื™ ื•ื•ืืก ืงืึธื ื˜ืจืึธืœื™ืจืŸ ืฉืœื™ืกืœ ืคื™ื ื’ื’ืขืจืคึผืจื™ื ืฅ ื–ืขื ืขืŸ ืคึผืจืึธื˜ืขืงื˜ืขื“ ืคื•ืŸ ืึทื–ืึท ืื ืคืืœืŸ.

ื•ื•ื™ ืึท ืฆื™ื™ื›ืŸ ืฆื• ื‘ืึทืฉื˜ื™ืžืขืŸ ื“ืขื ืขืจืฉื˜ืขืจ ืงืฉืจ ืคึผืจื•ื•ื•ืŸ, ืึท ืขื ื“ืขืจื•ื ื’ ืื™ืŸ ื“ืขืจ ืกื“ืจ ืคื•ืŸ ืœื™ืกื˜ื™ื ื’ ื’ืขืฉื˜ื™ืฆื˜ ื‘ืึทืœืขื‘ืึธืก ืฉืœื™ืกืœ ืึทืœื’ืขืจื™ื“ืึทืžื– ืื™ื– ื’ืขื ื™ืฆื˜. ืื•ื™ื‘ ื“ืขืจ ืขืจืฉื˜ืขืจ ืงืฉืจ ืึทืงืขืจื–, ื“ืขืจ ืงืœื™ืขื ื˜ ื˜ืจืึทื ืกืžื™ื˜ื˜ ืึท ืจืฉื™ืžื” ืคื•ืŸ ืคืขืœื™ืงื™ื™ึทื˜ ืึทืœื’ืขืจื™ื“ืึทืžื–, ืื•ืŸ ืื•ื™ื‘ ื“ืขืจ ื‘ืึทืœืขื‘ืึธืก ืฉืœื™ืกืœ ืื™ื– ืฉื•ื™ืŸ ืื™ืŸ ื“ื™ ืงืึทืฉ, ื“ืขืจ ืคึฟืึทืจื‘ื•ื ื“ืŸ ืึทืœื’ืขืจื™ื“ืึทื ืื™ื– ืฉื˜ืขืœืŸ ืื™ืŸ ืขืจืฉื˜ืขืจ ืึธืจื˜ (ืึทืœื’ืขืจื™ื“ืึทืžื– ื–ืขื ืขืŸ ืื•ื™ืกื’ืขืฉื˜ืขืœื˜ ืื™ืŸ ืกื“ืจ ืคื•ืŸ ื™ื™ื‘ืขืจื”ืึทื ื˜).

ื“ื™ ืคึผืจืึธื‘ืœืขื ืื™ื– ืืจื•ื™ืก ืื™ืŸ OpenSSH ืจื™ืœื™ืกื™ื– 5.7 ืฆื• 8.3 ืื•ืŸ PuTTY 0.68 ืฆื• 0.73. ืคึผืจืึธื‘ืœืขื ื™ืœื™ืžืึทื ื™ื™ื˜ืึทื“ ืื™ืŸ ืึทืจื•ื™ืกื’ืขื‘ืŸ ืงื™ื˜ 0.74 ื“ื•ืจืš ืึทื“ื™ื ื’ ืึทืŸ ืึธืคึผืฆื™ืข ืฆื• ื“ื™ืกื™ื™ื‘ืึทืœ ื“ื™ ื“ื™ื ืึทืžื™ืฉ ืงืึทื ืกื˜ืจืึทืงืฉืึทืŸ ืคื•ืŸ ืึท ืจืฉื™ืžื” ืคื•ืŸ ื‘ืึทืœืขื‘ืึธืก ืฉืœื™ืกืœ ืคึผืจืึทืกืขืกื™ื ื’ ืึทืœื’ืขืจื™ื“ืึทืžื– ืื™ืŸ ื˜ื•ื™ื•ื•ืข ืคื•ืŸ โ€‹โ€‹ืœื™ืกื˜ื™ื ื’ ื“ื™ ืึทืœื’ืขืจื™ื“ืึทืžื– ืื™ืŸ ืึท ืงืขืกื™ื™ื“ืขืจื“ื™ืง ืกื“ืจ.

ื“ื™ OpenSSH ืคึผืจื•ื™ืขืงื˜ ื˜ื•ื˜ ื ื™ืฉื˜ ืคึผืœืึทื ื™ืจืŸ ืฆื• ื˜ื•ื™ืฉืŸ ื“ื™ ื ืึทื˜ื•ืจ ืคื•ืŸ ื“ื™ SSH ืงืœื™ืขื ื˜, ื•ื•ื™ื™ึทืœ ืื•ื™ื‘ ืื™ืจ ื˜ืึธืŸ ื ื™ื˜ ืกืคึผืขืฆื™ืคื™ืฆื™ืจืŸ ื“ื™ ืึทืœื’ืขืจื™ื“ืึทื ืคื•ืŸ ื“ื™ ื™ื’ื–ื™ืกื˜ื™ื ื’ ืฉืœื™ืกืœ ืื™ืŸ ื“ืขืจ ืขืจืฉื˜ืขืจ ืึธืจื˜, ืึทืŸ ืคึผืจื•ื•ื•ืŸ ื•ื•ืขื˜ ื–ื™ื™ืŸ ื’ืขืžืื›ื˜ ืฆื• ื ื•ืฆืŸ ืึท ืึทืœื’ืขืจื™ื“ืึทื ื•ื•ืึธืก ืื™ื– ื ื™ืฉื˜ ืฉื˜ื™ืžืขืŸ ืฆื• ื“ื™ ืงืึทืฉื˜ ืฉืœื™ืกืœ ืื•ืŸ ืึท ื•ื•ืืจืขื ื•ื ื’ ื•ื•ืขื’ืŸ ืึทืŸ ืื•ืžื‘ืึทืงืึทื ื˜ ืฉืœื™ืกืœ ื•ื•ืขื˜ ื–ื™ื™ืŸ ื’ืขื•ื•ื™ื–ืŸ. ื™ืขื ืข. ืึท ื‘ืจื™ืจื” ืขืจื™ื™ื–ืึทื– - ืึธื“ืขืจ ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ืœื™ืงืึทื“ื–ืฉ (OpenSSH ืื•ืŸ PuTTY), ืึธื“ืขืจ ื•ื•ืึธืจื ื™ื ื’ื– ื•ื•ืขื’ืŸ ื˜ืฉืึทื ื’ื™ื ื’ ื“ื™ ืฉืœื™ืกืœ (Dropbear SSH) ืื•ื™ื‘ ื“ื™ ื’ืขืจืื˜ืขื•ื•ืขื˜ ืฉืœื™ืกืœ ืฉื˜ื™ืžืขืŸ ื ื™ืฉื˜ ืฆื• ื“ืขืจ ืขืจืฉื˜ืขืจ ืึทืœื’ืขืจื™ื“ืึทื ืื™ืŸ ื“ื™ ืคืขืœื™ืงื™ื™ึทื˜ ืจืฉื™ืžื”.

ืฆื• ืฆื•ืฉื˜ืขืœืŸ ื–ื™ื›ืขืจื”ื™ื™ื˜, OpenSSH ืึธืคืคืขืจืก ืึธืœื˜ืขืจื ืึทื˜ื™ื•ื• ืžืขื˜ื”ืึธื“ืก ืคึฟืึทืจ ื‘ืึทืœืขื‘ืึธืก ืฉืœื™ืกืœ ื•ื•ืขืจืึทืคืึทืงื™ื™ืฉืึทืŸ ื ื™ืฆืŸ SSHFP ืื™ื™ื ืกืŸ ืื™ืŸ DNSSEC ืื•ืŸ ื‘ืึทืœืขื‘ืึธืก ืกืขืจื˜ื™ืคื™ืงืึทืฅ (PKI). ืื™ืจ ืงืขื ืขืŸ ืื•ื™ืš ื“ื™ืกื™ื™ื‘ืึทืœ ืึทื“ืึทืคึผื˜ื™ื•ื• ืกืขืœืขืงืฆื™ืข ืคื•ืŸ โ€‹โ€‹ื‘ืึทืœืขื‘ืึธืก ืฉืœื™ืกืœ ืึทืœื’ืขืจื™ื“ืึทืžื– ื“ื•ืจืš ื“ื™ HostKeyAlgorithms ืึธืคึผืฆื™ืข ืื•ืŸ ื ื•ืฆืŸ ื“ื™ UpdateHostKeys ืึธืคึผืฆื™ืข ืฆื• ืœืึธื–ืŸ ื“ืขื ืงืœื™ืขื ื˜ ืฆื• ื‘ืึทืงื•ืžืขืŸ ื ืึธืš ื‘ืึทืœืขื‘ืึธืก ืฉืœื™ืกืœืขืŸ ื ืึธืš ืึธื˜ืขื ื˜ืึทืงื™ื™ืฉืึทืŸ.

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’