2018Äê3ÔÂ28ÈÕ£¬Ë¼¿Æ·¢²¼Á˸ßΣ©¶´Ô¤¾¯³ÆË¼¿ÆIOS¡¢IOS XEºÍIOS XRÈí¼þÖдæÔÚ¶à¸ö©¶´¡£ÆäÖаüº¬2¸öÔ¶³Ì´úÂëÖ´ÐЩ¶´CVE-2018-0171¡¢CVE-2018-0151¡£¹¥»÷Õß¿ÉÀûÓé¶´½øÐÐδÊÚȨ·ÃÎÊ¡¢ÌáȨ¡¢Ö´ÐÐÈÎÒâ´úÂë»òµ¼Ö¾ܾø·þÎñ¡£
©¶´ÃèÊö
Cisco Smart InstallÔ¶³Ì´úÂëÖ´ÐЩ¶´£¨CVE-2018-0171£©Î£º¦µÈ¼¶£º³¬Î£
Cisco IOS¡¢IOS XEÈí¼þSmart Install¿Í»§¶ËÖдæÔÚ»º³åÇø¶ÑÕ»Òç³ö©¶´£¨CVE-2018-0171£©£¬¸Ã©¶´ÊÇÓÉÓÚ¶Ô·Ö×éÊý¾ÝÑéÖ¤²»µ±Ôì³ÉµÄ¡£Î´¾Éí·ÝÑéÖ¤µÄÔ¶³Ì¹¥»÷Õߣ¬¿ÉÒÔͨ¹ý¹¹Ôì¶ñÒâSmall InstallÏûÏ¢°ü£¬ÏòÊÜÓ°ÏìÉ豸µÄTCP 4786¶Ë¿Ú·¢Ë͸ÃÊý¾Ý°ü£¬ÖØÔØÄ¿±êÉ豸£¬Ôì³ÉÉ豸¾Ü¾ø·þÎñ£¨DoS£©»òÔÊÐíÔ¶³Ì´úÂëÖ´ÐС£
ÓÉÓÚ4786¶Ë¿ÚĬÈÏ¿ªÆô£¬ÇҸé¶´pocÒѾ±»¹«¿ª£¬Â©¶´Î£º¦³Ì¶È¼«¸ß¡£
¸Ã©¶´´æÔÚÓÚÔËÐÐÁËCisco IOS/IOS EXÊÜÓ°Ïì°æ±¾Èí¼þ£¬ÇÒΪSmart Install ClientģʽµÄÉ豸¡£Î´¿ªÆôCisco Smart Install£¬»ò±»ÉèÖÃΪSmart Install DirectorģʽµÄÉ豸²»ÔÚÓ°ÏìÖ®ÁС£
Cisco QoSÔ¶³Ì´úÂëÖ´ÐЩ¶´£¨CVE-2018-0151£© Σº¦µÈ¼¶£º³¬Î£
¸Ã©¶´ÊÇÓÉÓÚÊÜÓ°ÏìÉ豸¶Ôµ½´ïÆäUDP 18999¶Ë¿ÚµÄÊý¾Ý°üÖÐijЩֵµÄ±ß½ç¼ì²é²»µ±Ôì³ÉµÄ¡£¹¥»÷Õß¿Éͨ¹ýÏòÊÜÓ°ÏìÉ豸·¢ËͶñÒâ¹¹ÔìµÄÊý¾Ý°üÀ´ÀûÓé¶´£¬ÊÜÓ°ÏìÉ豸ÔÚ´¦ÀíÊý¾Ý°üʱ¿ÉÄÜ·¢Éú»º³åÇøÒç³ö£¬µ¼ÖÂÉè±¸ÖØÔØ¡£¸Ã©¶´Ó°ÏìËùÓÐÔËÐÐÁËCisco IOS/IOS EXÊÜÓ°Ïì°æ±¾Èí¼þµÄÉ豸¡£
Ŀǰ¹ú¼ÊÉÏ´ó¸ÅÓжþÊ®ÍòÊÜÓ°ÏìÉ豸±©Â¶ÔÚ¹«ÍøÉÏ£º
ÉÏÖÜ£¬Ò»¸öÃûΪ“JHT”µÄºÚ¿Í×éÖ¯ÀûÓÃ˼¿ÆCVE-2018-0171 ÖÇÄܰ²×°Â©¶´¹¥»÷Á˰üÀ¨¶íÂÞ˹ºÍÒÁÀÊÔÚÄڵĶà¸ö¹ú¼ÒÍøÂç»ù´¡ÉèÊ©¡£±»¹¥»÷µÄCisco·ÓÉÆ÷µÄÅäÖÃÎļþstartup.config»á±»¸²¸Ç£¬Â·ÓÉÆ÷½«ÖØÐÂÆô¶¯¡£³ýÁ˵¼Ö´óÃæ»ýÍøÂçÖжÏÒÔÍ⣬¹ÜÀíÔ±»¹»á·¢ÏÖ·ÓÉÆ÷ÅäÖÃÎļþ±»¸ü¸Ä³É£º“Don't mess with our elections.... -JHT usafreedom_jht@tutanota.com”¡£
½ñÌ죬ÎÒÃÇÂ½ÐøÊÕµ½¶à¸ö¹úÄÚ»ú¹¹ÔâÊÜͬÑùµÄ¹¥»÷µÄÏûÏ¢¡£±»¹¥»÷µÄÉ豸³ý̱»¾Í⣬ÅäÖÃÎļþ»¹»áÏÔʾһ¸öÃÀ¹ú¹úÆì¡£
½â¾ö·½°¸
1.Cisco¹Ù·½ÒѾ·¢²¼Á˸üв¹¶¡£¬£¬½¨ÒéÏà¹ØÓû§¾¡¿ì¸üÐÂÉý¼¶¡££¨https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2£©
2.ÆôÃ÷Ðdz½ÒÑÓÚ4ÔÂ4ÈÕÉý¼¶Ê¼þ¿â£¬Ê¼þÃû³Æ£ºTCP_Cisco_SmartInstall_Ô¶³Ì´úÂëÖ´ÐЩ¶´(CVE-2018-0171)£¬Çë¹ã´óÓû§¼°Ê±Éý¼¶¡£