Home | Data Center | Contact US | Login

Á¦¸ñ ¸¶ÀÌÅ©·Î¼ÒÇÁÆ® ASP.NET ½Å±Ô Ãë¾àÁ¡ ÁÖÀÇ
ÀÛ¼ºÀÏ 2010-09-21 08:36:50

¡à °³¿ä
   o MS ASP.NET¿¡¼­ ¾ÇÀÇÀûÀ¸·Î Á¶ÀÛµÈ µ¥ÀÌÅ͸¦ ó¸®ÇÏ´Â °úÁ¤¿¡¼­ ViewState Çʵå¿Í °°ÀÌ
     ¾ÏȣȭµÈ µ¥ÀÌÅͳª Web.config¿Í °°Àº ¼³Á¤ ÆÄÀÏÀÇ ³»¿ëÀÌ ³ëÃâµÇ´Â Ãë¾àÁ¡[1][2]
   o °ø°ÝÀÚ´Â ÇØ´ç Ãë¾àÁ¡À» ÀÌ¿ëÇÏ¿© Ãë¾àÇÑ À¥¼­¹öÀÇ ½Ã½ºÅÛ Á¤º¸ ȹµæÀÌ °¡´ÉÇÔ
   o ÇØ´ç Ãë¾àÁ¡¿¡ ´ëÇÑ Á¤º¸°¡ °ø°³µÇ¾úÀ¸¹Ç·Î, ASP.NETÀÌ ¿î¿µ ÁßÀÎ À¥¼­¹ö¿¡ ´ëÇÑ °ü¸®ÀÚÀÇ
     ÁÖÀÇ°¡ ¿ä±¸µÊ

¡à ÇØ´ç ½Ã½ºÅÛ
   o ¿µÇâ ¹Þ´Â ¼ÒÇÁÆ®¿þ¾î [1]
    - .NET Framework 1.0 SP3 on Windows XP Media Center and Tablet PC 2005
    - .NET Framework 1.1 SP1 on Windows XP SP3, Professional x64 Edition SP2,
       Windows Server 2003 SP2, x64 Edition SP2, Windows Server 2003 SP2 for Itanium Systems,
       Windows Vista SP1, SP2, Windows Server 2008 SP0, SP2 for 32-bit, x64 Systems,
       Windows Server 2008 SP0, SP2 for Itanium Systems
    - .NET Framework 2.0 SP2 on Windows XP SP3, Professional x64 Edition SP2, 
       Windows Server 2003 SP2, x64 Edition SP2, Windows Server 2003 with SP2 for
       Itanium-based Systems
    - .NET Framework 3.5 on Windows XP SP3, Professional x64 Edition SP2,
       Windows Server 2003 SP2, x64 Edition SP2,Windows Server 2003 with SP2 for
       Itanium Systems, Windows Vista SP1, SP2, Windows Server 2008 for 32-bit
       Systems SP0, SP2, Windows Server 2008 for x64 Systems SP0, SP2, Windows Server 2008
       for Itanium Systems, SP0, SP2
    - .NET Framework 3.5 SP1 on Windows XP SP3, Professional x64 Edition SP2,
       Windows Server 2003 SP2, x64 Edition SP2, Windows Server 2003 with SP2 for
       Itanium Systems, Windows Vista SP1-SP2, Windows Server 2008 SP0, SP2 for for 32-bit,
       64-bit Systems, Windows Server 2008 for Itanium Systems SP0, SP2
    - .NET Framework 3.5.1 on  Windows 7 for 32-bit Systems, x64-based Systems,
       Windows Server 2008 R2 for x64 Systems, Windows Server 2008 R2 for Itanium systems
    - .NET Framework 4.0 on     Windows XP SP3, Professional x64 Edition SP2,
       Windows Server 2003 SP2, x64 Edition SP2, Windows Server 2003 with SP2 for
       Itanium Systems, Windows Vista SP1, SP2, Windows Server 2008 Systems SP0, SP2, for
       32-bit, 64-bit, Windows Server 2008 for Itanium Systems SP0, SP2, Windows 7 for
       32-bit Systems, x64 Systems, Windows Server 2008 R2 for x64 Systems,
       Windows Server 2008 R2 for Itanium-based systems

¡à Àӽà ÇØ°á ¹æ¾È
   o ÇöÀç ÇØ´ç Ãë¾àÁ¡¿¡ ´ëÇÑ º¸¾È¾÷µ¥ÀÌÆ®´Â ¹ßÇ¥µÇÁö ¾Ê¾ÒÀ½
   o º¸¾È¾÷µ¥ÀÌÆ®°¡ ¹ßÇ¥µÇ±â Àü±îÁö, ÇØ´ç ¿î¿µÃ¼Á¦ ¹× .NETÇÁ·¹ÀÓ ¿öÅ© ¹öÀü¿¡ µû¶ó
     MS ȨÆäÀÌÁö¿¡¼­ Á¦°øÇÏ´Â Àӽà ÇØ°á ¹æ¾ÈÀ» Àû¿ëÇÏ¿© Ãë¾àÁ¡À¸·Î ÀÎÇÑ ÇÇÇظ¦ ¿¹¹æÇÔ
     ¡Ø
http://www.microsoft.com/technet/security/advisory/2416728.mspx

¡à ¿ë¾î Á¤¸®
   o .NETÇÁ·¹ÀÓ ¿öÅ© : ¸¶ÀÌÅ©·Î¼ÒÇÁÆ®Þä¿¡¼­ °³¹ßÇÑ À©µµ¿ì ÇÁ·Î±×·¥ °³¹ß ¹× ½ÇÇà ȯ°æ
   o ASP.NET : .NETÇÁ·¹ÀÓ¿öÅ© ±â¹Ý¿¡¼­ µ¿ÀÛÇÏ´Â À¥¾ÖÇø®ÄÉÀ̼Ç
   o ViewState : ASP.NET ÆäÀÌÁö ÇÁ·¹ÀÓ¿öÅ©¿¡¼­ ÆäÀÌÁö¸¦ ·£´õ¸µ Çϱâ Á÷Àü ÆäÀÌÁö¿Í °¢ ÄÁÆ®·Ñ
     °ªÀ» ÀÚµ¿À¸·Î ÀúÀåÇÒ ¶§ »ç¿ëµÇ´Â ±â´É
   o Web.config : ASP.NET À¥ ÇÁ·ÎÁ§Æ®ÀÇ ¼³Á¤ ÆÄÀÏ

[Âü°í»çÀÌÆ®]
[1]
http://www.microsoft.com/technet/security/advisory/2416728.mspx
[2] http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3332
  Adobe Flash Player ºñÁ¤±â º¸¾È ¾÷µ¥ÀÌÆ® ±Ç°í
  [Á¤±âÁ¡°Ë] 2010. 9. 28(È­) 1Â÷ Á¤±âÁ¡°Ë ¾È³»








ȸ»ç¼Ò°³ °³ÀÎÁ¤º¸Ãë±Þ¹æħ ÀÌ¿ë¾à°ü À̸ÞÀÏÁÖ¼Ò ¹«´Ü¼öÁý°ÅºÎ CONTACT US IDC ¾àµµ
ȸ»ç¼Ò°³ °³ÀÎÁ¤º¸Ãë±Þ¹æħ ÀÌ¿ë¾à°ü À̸ÞÀÏÁÖ¼Ò ¹«´Ü¼öÁý°ÅºÎ CONTACT US IDC ¾àµµ ȸ»ç¼Ò°³ °³ÀÎÁ¤º¸Ãë±Þ¹æħ ÀÌ¿ë¾à°ü À̸ÞÀÏÁÖ¼Ò ¹«´Ü¼öÁý°ÅºÎ CONTACT US IDC ¾àµµ