Debian灾难性漏洞
更新时间：2008年05月19日 20:15:20 作者：
Debian OpenSSL包里的算法有问题，random number生成居然是在process pid里选取，导致生成key可穷举
（福利推荐：【腾讯云】服务器最新限时优惠活动，云服务器1核2G仅99元/年、2核4G仅768元/3年，立即抢购>>>：9i0i.cn/qcloud）
（福利推荐：你还在原价购买阿里云服务器？现在阿里云0.8折限时抢购活动来啦！4核8G企业云服务器仅2998元/3年，立即抢购>>>：9i0i.cn/aliyun）
以下摘自metasploit的blog
The Bug
On May 13th, 2008 the Debian project announced that Luciano Bello found an interesting vulnerability in the OpenSSL package they were distributing. The bug in question was caused by the removal of the following line of code from md_rand.c
MD_Update(&m,buf,j);
[ .. ]
MD_Update(&m,buf,j); /* purify complains */
These lines were removed because they caused the Valgrind and Purify tools to produce warnings about the use of uninitialized data in any code that was linked to OpenSSL. You can see one such report to the OpenSSL team here. Removing this code has the side effect of crippling the seeding process for the OpenSSL PRNG. Instead of mixing in random data for the initial seed, the only “random” value that was used was the current process ID. On the Linux platform, the default maximum process ID is 32,768, resulting in a very small number of seed values being used for all PRNG operations.
所有在2006.9月到2008.5.13的debian平台上生成的key均受影响。 debian很快修复了此漏洞，并给出了blacklists和自查工具。
攻击工具应该很快会出现，metasploit已经生成了key的数据库，可以用类似rainbow的方法去查询，也可以直接暴力破解ssh key。
现在就等worm什么时候出现了。
因为这个漏洞比较严重，所以特此记录，立此存照。
相关链接：
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=363516
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=363516
http://metasploit.com/users/hdm/tools/debian-openssl/
http://www.gossamer-threads.com/lists/fulldisc/full-disclosure/61666
http://www.gossamer-threads.com/lists/fulldisc/full-disclosure/61606
http://www.debian.org/security/2008/dsa-1571
The Bug
On May 13th, 2008 the Debian project announced that Luciano Bello found an interesting vulnerability in the OpenSSL package they were distributing. The bug in question was caused by the removal of the following line of code from md_rand.c
MD_Update(&m,buf,j);
[ .. ]
MD_Update(&m,buf,j); /* purify complains */
These lines were removed because they caused the Valgrind and Purify tools to produce warnings about the use of uninitialized data in any code that was linked to OpenSSL. You can see one such report to the OpenSSL team here. Removing this code has the side effect of crippling the seeding process for the OpenSSL PRNG. Instead of mixing in random data for the initial seed, the only “random” value that was used was the current process ID. On the Linux platform, the default maximum process ID is 32,768, resulting in a very small number of seed values being used for all PRNG operations.
所有在2006.9月到2008.5.13的debian平台上生成的key均受影响。 debian很快修复了此漏洞，并给出了blacklists和自查工具。
攻击工具应该很快会出现，metasploit已经生成了key的数据库，可以用类似rainbow的方法去查询，也可以直接暴力破解ssh key。
现在就等worm什么时候出现了。
因为这个漏洞比较严重，所以特此记录，立此存照。
相关链接：
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=363516
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=363516
http://metasploit.com/users/hdm/tools/debian-openssl/
http://www.gossamer-threads.com/lists/fulldisc/full-disclosure/61666
http://www.gossamer-threads.com/lists/fulldisc/full-disclosure/61606
http://www.debian.org/security/2008/dsa-1571
相关文章
cross-site tracing XST攻击...2007-01-01
这篇文章主要介绍了研究桃源留言本的漏洞2007-01-01
推荐:二次发现桃源网络硬盘漏洞...2007-01-01
手工注射JSP学习...2007-02-02
AngelShell：让所有正向程序实现反向连接（应用篇）...2007-01-01
系统后门手法和日志的擦除...2007-01-01
Pclxav木马猎手第一代特征码引擎源代码...2007-01-01
研究UBB的跨站脚本攻击之综合篇...2007-01-01
yxbbs 是一个较小的论坛系统,也算是一个较好的小论坛. 管方网站是: http://www.yimxu.com/bbs/Default.Asp 对其研究了一下,发现存在不小安全问题.2008-05-05
所谓SQL注入,就是通过把SQL命令插入到Web表单提交或输入域名或页面请求的查询字符串,最终达到欺骗服务器执行指定的SQL语句,下面这篇文章主要给大家介绍了关于SQL注入漏洞的相关资料,需要的朋友可以参考下2022-04-04
最新评论