OpenBSD ื ื™ืฆื˜ ืฉื˜ื™ื•ื•ืœ-ืฆื™ื™ื˜ ืจื™ืœื™ื ืงื™ื ื’ ืคึฟืึทืจ sshd

OpenBSD ื™ืžืคึผืœืึทืžืึทื ืฅ ืึทืŸ ืึทื ื˜ื™-ืขืงืกืคึผืœืึธื™ื˜ืึทื˜ื™ืึธืŸ ื˜ืขื›ื ื™ืง ื•ื•ืึธืก ืจื™ืœื™ื™ื– ืื•ื™ืฃ ืจืึทื ื“ืึธื ืจื™ืœื™ื ืงื™ื ื’ ืคื•ืŸ ื“ื™ sshd ืขืงืกืขืงื•ื˜ืึทื‘ืœืข ื˜ืขืงืข ื™ืขื“ืขืจ ืžืึธืœ ื•ื•ืขืŸ ื“ื™ ืกื™ืกื˜ืขื ืฉื™ืš. ื‘ื™ื– ืึทื”ืขืจ, ืึท ืขื ืœืขืš ืจื™ืœื™ื ืงื™ื ื’ ื˜ืขื›ื ื™ืง ืื™ื– ื’ืขื ื™ืฆื˜ ืคึฟืึทืจ ื“ื™ ืงืขืจืŸ ืื•ืŸ ืœื™ื™ื‘ืจืขืจื™ื– libc.so, libcrypto.so ืื•ืŸ ld.so, ืื•ืŸ ื•ื•ืขื˜ ืื™ืฆื˜ ื–ื™ื™ืŸ ื’ืขื•ื•ื™ื™ื ื˜ ืคึฟืึทืจ ืขื˜ืœืขื›ืข ืขืงืกืขืงื•ื˜ืึทื‘ืœืข ื˜ืขืงืขืก. ืื™ืŸ ื“ืขื ืœืขื‘ืŸ ืฆื•ืงื•ื ืคึฟื˜, ื“ืขืจ ืื•ืคึฟืŸ ืื™ื– ืื•ื™ืš ืคึผืœืึทื ื ืขื“ ืฆื• ื–ื™ื™ืŸ ื™ืžืคึผืœืึทืžืขื ืึทื“ ืคึฟืึทืจ ntpd ืื•ืŸ ืื ื“ืขืจืข ืกืขืจื•ื•ืขืจ ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื–. ื“ื™ ืขื ื“ืขืจื•ื ื’ ืื™ื– ืฉื•ื™ืŸ ืึทืจื™ื™ึทื ื’ืขืจืขื›ื ื˜ ืื™ืŸ ื“ื™ ืงืจืึทื ื˜ ืฆื•ื•ื™ื™ึทื’ ืื•ืŸ ื•ื•ืขื˜ ื–ื™ื™ืŸ ื’ืขืคึฟื™ื ื˜ ืื™ืŸ ื“ื™ OpenBSD 7.3 ืžืขืœื“ื•ื ื’.

ืจื™ืœื™ื ืงื™ื ื’ ืžืื›ื˜ ืขืก ืžืขื’ืœืขืš ืฆื• ืžืึทื›ืŸ ืคื•ื ืงืฆื™ืข ื“ื™ืกืคึผืœื™ื™ืกืžืึทื ืฅ ืื™ืŸ ืœื™ื™ื‘ืจืขืจื™ื– ื•ื•ื™ื™ื ื™ืงืขืจ ืคึผืจื™ื“ื™ืงื˜ืึทื‘ืึทืœ, ื•ื•ืึธืก ืžืื›ื˜ ืขืก ืฉื•ื•ืขืจ ืฆื• ืฉืึทืคึฟืŸ ืขืงืกืคึผืœื•ื™ืฅ ื ื™ืฆืŸ ืฆื•ืจื™ืงืงื•ืžืขืŸ-ืึธืจื™ืขื ื˜ื™ื“ ืคึผืจืึธื’ืจืึทืžืžื™ื ื’ (ROP) ืžืขื˜ื”ืึธื“ืก. ื•ื•ืขืŸ ื ื™ืฆืŸ ื“ื™ ROP ื˜ืขื›ื ื™ืง, ื“ืขืจ ืึทื˜ืึทืงืขืจ ื˜ื•ื˜ ื ื™ืฉื˜ ืคึผืจื•ื‘ื™ืจืŸ ืฆื• ืฉื˜ืขืœืŸ ื–ื™ื™ืŸ ืงืึธื“ ืื™ืŸ ื–ื›ึผืจื•ืŸ, ืึธื‘ืขืจ ืึทืคึผืขืจื™ื™ืฅ ืื•ื™ืฃ ืฉื˜ื™ืง ืคื•ืŸ ืžืึทืฉื™ืŸ ืื™ื ืกื˜ืจื•ืงืฆื™ืขืก ื•ื•ืึธืก ื–ืขื ืขืŸ ืฉื•ื™ืŸ ื‘ื ื™ืžืฆื ืื™ืŸ ืœืึธื•ื“ื™ื“ ืœื™ื™ื‘ืจืขืจื™ื–, ืขื ื“ื™ืงืŸ ืžื™ื˜ ืึท ืงืึธื ื˜ืจืึธืœ ืฆื•ืจื™ืงืงื•ืžืขืŸ ืœื™ืžืขื“ (ื•ื•ื™ ืึท ื”ืขืจืฉืŸ, ื“ืึธืก ื–ืขื ืขืŸ ื“ื™ ืขื ื“ืก ืคื•ืŸ ื‘ื™ื‘ืœื™ืึธื˜ืขืง ืคืึทื ื’ืงืฉืึทื ื–) . ื“ื™ ืึทืจื‘ืขื˜ ืคื•ืŸ ื“ื™ ื’ื•ื•ื•ืจืข ืงื•ืžื˜ ืึทืจืึธืคึผ ืฆื• ื‘ื•ื™ืขืŸ ืึท ืงื™ื™ื˜ ืคื•ืŸ ืงืึทืœืœืก ืฆื• ืขื ืœืขืš ื‘ืœืึทืงืก ("ื’ืึทื“ื’ืขืฅ") ืฆื• ื‘ืึทืงื•ืžืขืŸ ื“ื™ ื’ืขื‘ืขื˜ืŸ ืคืึทื ื’ืงืฉืึทื ืึทืœื™ื˜ื™.

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’