软件系统旧漏洞频现软件开发如何降低漏洞数量?

2021-07-22

在HP、Xerox和 Samsung打印机驱动程序中发现的一个存在16年的安全漏洞，允许攻击者使用易受攻击的驱动程序软件获得系统管理员权限。根据发布的报告，“自2005年以来，HP、Samsung和Xerox打印机软件中就存在这种高严重性漏洞，影响了全球数亿台设备和数百万用户。”跟踪为CVE-2021-3438(CVSS 评分：8.8)，该问题涉及名为“SSPORT.SYS”的打印驱动程序安装程序包中的缓冲区溢出，该程序包可以启用远程特权和任意代码执行。迄今为止，全球已发布数亿台打印机，其中包含有问题的易受攻击的驱动程序。但是，没有证据表明该缺陷在现实的攻击中被滥用。<h3>攻击者可利用漏洞绕过安全防护</h3>有问题的驱动程序会自动与打印机软件一起安装，并会在每次系统重新启动后由Windows加载。这使得它成为攻击者的完美目标，他们需要一种简单的方式来升级特权，因为即使打印机没有连接到目标设备，该漏洞也可能被滥用。<img src="data:image/jpeg;base64,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" style="max-width:100%;" class=""> 成功利用该漏洞需要本地用户访问，这意味着威胁参与者需要首先在目标设备上站稳脚跟。一旦实现这一点，他们就可以在不需要用户交互的情况下，滥用安全漏洞来升级低复杂度攻击中的特权。结果是具有基本用户权限的攻击者可以将他们的权限提升到 SYSTEM ，并在内核模式下运行代码，从而有可能绕过会阻止其攻击或传递额外恶意负载的安全产品。成功利用驱动程序漏洞可能允许攻击者安装程序、查看、更改、加密或删除数据，或者创建具有完全用户权限的新帐户。虽然到目前为止，还未看到任何迹象表明该漏洞已被广泛利用，但目前有数亿企业和用户容易受到攻击，攻击者不可避免地会寻找那些不采取适当行动的人。有趣的是，HP似乎从微软发布的一个几乎相同的Windows驱动程序示例中复制了该驱动程序的功能，尽管示例项目本身并不包含该漏洞。这不是第一次在旧的软件驱动程序中发现安全漏洞。今年5月初，网络安全公司披露了有关戴尔固件更新驱动程序“ dbutil_2_3.sys ”中多个关键权限提升漏洞的详细信息，该漏洞已被披露超过12年。<h3>敦促用户尽快更新</h3>使用易受攻击驱动程序的打印机型号列表可以在HP的安全公告和Xerox安全迷你公告中找到。敦促惠普、施乐和三星企业和家庭客户尽快应用这两家供应商提供的补丁。研究人员补充说：“一些 Windows机器可能已经有了这个驱动程序，甚至没有运行专门的安装文件，因为这个驱动程序通过Windows Update随Microsoft Windows一起提供。今年早些时候，研究人员在Microsoft Defender Antivirus(前身为 Windows Defender)中发现了一个存在12年之久的权限提升漏洞，该漏洞可以让攻击者在未打补丁的Windows系统上获得管理员权限。根据Microsoft的统计，Microsoft Defender Antivirus是超过10亿个运行Windows 10的系统的默认反恶意软件解决方案。有调查显示，旧的安全漏洞在黑客论坛中关注度依旧很高，这就意味着那些没有按时更新软件漏洞补丁的企业被黑客攻击的潜在风险很大。尤其黑客不断扫描网络中存在的漏洞准备随时发起攻击，软件存在安全漏洞就意味着给黑客以可乘之机。建议企业除了安装防护软件之外，及时检测、发现网络系统中的薄弱环节，并进行维护和修补，减小被黑客盯上的概率。同时，对于软件开发企业，不应只关注在软件开发的功能和效率，同时要将安全问题融入至开发周期当中，尤其经常被忽略的代码缺陷等问题。在静态代码安全检测中，不但可以查找、定位代码的缺陷问题，同时还能检测出一些不需要运行即可发现的问题，如XXS,注入漏洞、缓冲区溢出等。软件安全关系着数据安全，影响着网络安全。希望各企业在原来基础上更重视网络安全问题，提高软件等安全防护的同时，加强网络安全防范意识。中科天齐Wukong(悟空)<a href="https://www.woocoom.com/b031.html" target="_blank">静态代码检测工具</a>，从源码开始，为您的软件安全保驾护航! 关键词标签：安全漏洞网络攻击缓冲区溢出代码安全软件安全

上一篇：恶意软件可轻易绕过安全检测加强软件安全势在必行

下一篇：数字改革加快智慧城市建设网络安全确保数据安稳运用