֙C| OFweek | 댧w | ̫ܹ | ӹ | | ͨӍ | |
늾W | Ӌ | h | L | “W | 3Dӡ | ܼҾ | ˹ | Դ܇ |
ǻ۳ | xx | VR | Ӳ | | ܇ | | ² | | C
| ǻۺ| ɴO| | | ͨ| | | Դ| W
֙ͶV
ӆ
me
ýw

̓MaЧĔ찲ȫo

2020-11-11 10:16
Ƽ

Verizon͡Ĕ΁Gʧġ^һȫЈ{,YlF,75%ĔGʧrڔ©CVEȫ©yӋ@ʾ,OracleSQL ServerMySQL©Skybox Security°l2020©{څ݈tָ,2020©пͻµӛ䛡^20000

ܛϵygȱ,DzɱĴڸN©,GartnerĔ, 99%©֪©,ϵym㱼,@oɽoߴ_֮Tǔ,@һϢϵyĺ,һ©,ɾ޴[

ͨ^@ȡܛ_lṩa,ϵy,@ձ©ޏͷʽ,@Naޏ̕vA,ˆDʾ:

̓MaһNЧĔ찲ȫoʽ

ձ©ޏͷʽ

,@NֱӴaķsLUɱrЧfϵyT}:

aޏͲ,ޏ^̴ڼ[;

©}ӳF,laɱӴ;

©ٳF,Sṩa°s;

fϵyoa,ÑҲȥ

©lʽLĽ,aѽԽԽܑµİȫB,©֮,Խn?@ҪһNȿԿٽQϵy©LU,־пɲԵ©a̓MaһNpҟopFah,ͬrǷdz֮Ч©a\

̓Ma

̓MaɰȫSMcAfee̓MaO:

©ܱ,h©

©ޏͿҪһĕrgr

΄,©ġޏ͡ߵҪ|Iϵy,M̵ܶĕrgMޏ

һϵyкܶ©,ֻҪȥ,ô@Щ©ĴҲ]xҲ_ˡ©ޏ͡Ŀ

,̓MaJϵy©,ܱoYԴⲿһԌʩc,Ա©_Ŀ֮ǰRe͔r@Щ©О@ӾͲҪֱ޸ıoYԴ,Ķ׌©ڷǷ[ˆDʾ:

̓MaһNЧĔ찲ȫoʽ

̓Ma

Ŀǰ,̓Maʽϻһ,F߉݋s,S̶иԵķc,:

ȫڌWjķṩϵyʹút_ʽģʽƥReӲֹՈ;

ͬԭ,ṩһNʹҎtZԺ͠Bȸ齡ѵķʽָֹՈ

ڔ찲ȫIvʮо͌`,ƼpӽѵĔ̓Ma,Կ푑©ޏ,ڴ,҂˽ԓΌFЧo

̓Maܘ

Ƽ̓MaܘҪ̓MaԛQc(PDP)ͲԈc(PEP)F߉݋ܘˆDʾ:

̓MaһNЧĔ찲ȫoʽ

Ƽ̓Maܘ

Ԉc(PEP)

ƽrؔ,ͨ^ąfh@ȡՈ/푑đÌӃуPDP(ԛQc)MвuPDPķ푑,߷е

ͨ^·ģʽF·ģʽr^,ɌF澯,׷ݵģʽt܉MЌr,ǃݼe

ԛQc(PDP)

ԌPEP^ՈMu,ReՈǷϷԿԲȡNʽ:

tƥ:|l©Zһ,Ը@Щt_ʽ

Zx:ͨ^ZxДஔǰՈǷǹО

ʽ:ͨ^ОģʽReƫxеОģʽ,жLU

L:ͨ^zyLĵĸN,ДஔǰՈǷϷ

ԛQcPIڳmuՈϷ`IJԎLUReǰՈǷϷ,ϷՈ,·,ĶⱻoYԴܵ,ܱoYԴ©ҲͲ{

ʩ̓Ma,PIcՈ·OÙzyc,ǷՈ׌ܱoYԴ©[,l,Ķ_©ޏ͡Ŀ

̓Maăc

Ƽ̓MaһNp©ޏͷ,Tc:

푑©:oȴ_lS̵a,ֻ輰r{Լ

ޏ:o؆ϵy,oͣC,һ{ꮅrЧ

ʽ:ͨ^̓Maʽޏ͔©,oĔh,o~ɱ,ppyԇͲaĹ

ޏ:ɸ̓MaԵăȼȼԵMܾ,xͣ,푑ʽ,`

ߺҎ:Ñ,ٵijɱ֔ʼKϺҎҪ

:LƵĻA,Fڙȹ݈ͬвͬОYaČͬu̶_ɘIպͰȫƽ:

pٌoa߽Qه;

ھWjеxc,ÿϵyϑa;

ʹI܉`ذӋrgMa;

ڜpPIϵy͑óӋͣCĸߙCɱ;

UչIJڙ

Ƽ̓MaQmᘌȏsϵyıo,pıoֶ׌©ޏ͡Ӱȫ`̓MaѼɵ,Ƕ,ԷʽÑ􌍬Fo찲ȫĿ

̓Maܻܘͨ^ƌݔݔ,zyԒϢZϢ©ćLԇ,ֹ©О

̓MaһNЧĔ찲ȫoʽ

̓Ma

ֹĿǰ,©ҎtRe20©̓Ma,F1600+©o,ͬrҲڳmظ

̓MaȫMдaĸ,Lϵyoĕrg,┵Lrg̎ڸLUӰ

SQL SERVER 2008©

ʹSQL SERVERĘIϵySQLע,SQL SERVERr,߫@SQL SERVERT޺,SQL SERVER^̈M,Ķ@SQL SERVERϵyĿƙ

_֮ͿԈ,@һЩϢ,ȻMһƉ

ᘌ@©,̓Maͨ^NʽMДr:

Z,t_ʽ,Ԏ,M;

ư;

Zx,О;

һЩrҪ@ЩZ,Mڙ;

^ٌ̿ʩ,p̎LUưΙCƿɷ0-day©Ҫ²Ԏ,^ҲȂyaޏͷʽӿ

ORACLE TNS ListenerhעͶ©

ORACLE TNS ListenerhעͶ©(CVE-2012-1675)Oracle 2012lĸ澯,CVE-2012-1675©OracleSڲṩÑ/ܴar,h̡TNS ListenerM̎ĔͶ©:߿ڲҪÑܴarþWjЂ͵ĔϢ(ܻ߷ǼܵĔ),Y(CVE-2012-3137©Mܴaƽ)ĶMһӰƾWȵκһ_

ԓ©r,ȕùdɹTNSWjM,ʹ䷵e`Ϣ,e`ϢаϢ,:

̓MaһNЧĔ찲ȫoʽ

©

Կ,صϢ̶ĸʽ̓Maͨ^ƥ䔵©lrݔϢ,صĔϢMл̎ߔr,ʹߟoõЧϢ,ЧֹО

• vS̖׫^cH߱OFweek֙}Ո“ϵe

luՓ

0luՓ0˅c

ՈݔuՓ...

ՈݔuՓ/uՓL6~500

ύuՓ^lՈݔCa^m

  • cQһ  ˢ

ouՓ

ouՓ

¼me
x
*֘}
*meݣ
“ϵ]䣺
* C a

W 44030502002758̖

ʱʱapp׿ϵͳ 齫ȫ 99Ʊƽ̨ܴ ʤֲ pkʰ 000737Ʊ ƽ̨ 9ŲƱƽ̨ϴǮ ׼ȫֲͼ 25ѡ5쿪 ʺ˹ ɹ11ѡ5רԤ ȷʱȷ ;ʽһ 2018cbaȷ ʮֿǰ