榪滅(mie)▼鎵ц浠ｇ爜婕忔礊瀹(yue)夊叏棰勮(ju)閫氬憡
綆＄悊鍛?nbsp; | 2019/5/24 9:58:13榪滅▼鎵ц浠ｇ爜婕忔礊瀹夊叏(guai)棰勮閫氬憡
絎竴绔?瀹夊叏閫氬憡
2019騫?鏈(lian)?5鏃ュ井杞彂(fa)甯冨(fu)畨(pan)鍏ㄨˉ涓(juan)佷慨澶嶄(zhan)簡(jian)CVE緙栧彿涓(juan)篊VE-2019-0708鐨刉indows榪滅(mie)▼妗岄(yue)潰鏈(lian)嶅姟錛圧(ya)DP錛夎繙紼嬩(yu)唬鐮佹墽琛屾紡媧烇紝璇ユ紡媧炲(tai)湪涓(juan)嶉(zui)渶韜喚(huan)璁よ瘉鐨勬儏鍐典(dian)笅鍗沖彲榪滅(mie)▼瑙﹀彂(fa)錛屽嵄(mei)瀹(yue)充笌褰(qian)卞(bian)搷闈㈡瀬(lai)澶с�?/span>
閫氳繃(beng)鍒嗘瀽(jian)鍙(hong)戠幇(bang)鍥藉(jie)唴鍏辨湁154涓囦(yuan)綑鍙(hong)頒(ban)富鏈哄(hong)澶(chan)栧(yi)紑鏀?389绔(ku)彛錛屽彲鑳藉(jie)彈鍒版婕忔礊褰卞搷(chen)銆(mo)?/span>
絎簩绔?/span> 婕忔礊(huo)淇(qi)℃伅
2.1 婕忔礊(huo)鎻忚堪
Windows 榪滅▼妗岄潰鏈嶅姟錛?/span>RDP錛変富(fu)瑕佺敤浜庣鐞嗕(ru)漢鍛樺(hua) Windows 鏈嶅姟鍣ㄨ繘琛岃繙紼嬬鐞嗭紝浣跨敤鏋佷負鏅亶銆傝繎鏃ュ井杞畼鏂規姭闇?/span>Windows涓(juan)殑榪滅▼妗岄潰(kui)鏈嶅姟涓(juan)瓨鍦(she)ㄨ繙紼嬩唬(hu)鐮佹墽琛屾(shen)紡媧烇紝鏈粡韜(tao)喚璁よ瘉鐨勬敾鍑昏(hun)�呭彲浣(huan)跨(kua)敤RDP鍗忚榪炴帴鍒扮洰鏍囩郴緇熷茍鍙戦�佺簿蹇冩瀯閫犵殑璇鋒眰鍙Е鍙戣婕忔礊銆?/span>
2.2婕(jie)忔礊鍗卞
涓�鏃︽敾鍑昏�呮垚鍔熷埄鐢ㄦ婕忔礊錛屽彲鍦ㄧ洰鏍囩郴緇熶笂鎵ц浠繪剰浠ｇ爜錛屽畨瑁呭簲鐢ㄧ▼搴忥紝鍒涘緩瀹屽叏璁塊棶鏉冮檺鐨勬柊璐︽埛絳夈�傛敾鍑昏�呰繕鍙互瀵圭郴緇熶腑鐨勯噸瑕佹枃浠跺拰鏁版嵁浣跨敤鍕掔儲鐥呮瘨榪涜鍔犲瘑錛屽鏋滅郴緇熸帴鍏ュ埌鍐呯綉鐜涓紝鍙兘榪樹細閫犳垚瀵瑰唴緗戠殑鍚勭被緇堢鏈哄櫒鐨勯�犳垚榪涗竴姝ユ劅鏌擄紝閫犳垚鏇村姞涓ラ噸鐨勫悗鏋溿�?/span>
2.3椋庨櫓絳夌駭
椋庨櫓璇勭駭錛氶珮鍗?/span>
棰勮絳夌駭錛?/span>钃濊壊棰勮(ju)錛(ben)堜竴鑸簨浠訛級(ji)
絎笁绔?褰卞搷鐗堟湰
l Windows 7 for 32-bit Systems Service Pack 1
l Windows 7 for x64-based Systems Service Pack 1
l Windows Server 2008 for 32-bit Systems Service Pack 2
l ; Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
l Windows Server 2008 for Itanium-Based Systems Service Pack 2
l Windows Server 2008 for x64-based Systems Service Pack 2
l Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)
l Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1
l Windows Server 2008 R2 for x64-based Systems Service Pack 1
l Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
絎笁绔?/span> 澶勭疆寤(wu)鴻
瀹樻柟琛ヤ竵錛?/span>寰蔣(jiang)瀹(yue)樻(kui)柟宸茬(cha)粡(tong)鎺ㄥ嚭瀹(yue)夊叏鏇存柊璇峰(feng)弬鑰冧(冧)互涓嬪(pin)畼鏂瑰畨鍏(wei)ㄩ�氬憡涓嬭澆騫跺畨瑁呮渶鏂拌ˉ涓侊細
//support.microsoft.com/zh-cn/help/4500705/customer-guidance-for-cve-2019-0708
//portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0708
鎴栨牴(di)鎹互(hu)涓(juan)嬭〃鏍兼煡鎵懼搴旂殑緋(fei)葷(hun)粺鐗堟湰涓(juan)嬭澆(jiao)鏈(lian)�鏂拌ˉ涓(juan)侊(guang)細
緙撹В鎺柦錛?/span>
1.濡(ru)傛棤娉曟洿鏂拌ˉ涓侊(guang)紝鍙互閫氳繃鍦ㄧ郴(chen)緇(zi)熶(cuan)笂(笂)鍚姩NLA錛堢綉緇滅駭鍒韓浠借璇侊級鏆傛椂瑙勯伩璇ユ紡媧為闄┿�?/span>
2.鍦ㄤ紒涓氳竟鐣岄槻鐏闃繪柇TCP鍗忚(xi)inbound 3389鐨勮繛鎺ワ紝(ren)鎴栧彧鍏佽鍙俊IP榪涜榪炴帴銆?/span>
3.濡傛棤鏄庣‘闇�姹(cha)傦紝鍙�夋嫨紱(fu)佺(quan)敤3389绔彛錛堣繙紼嬫闈㈡湇鍔★級銆?/span>
銆佺壞(huai)闃沖煙鍚嶆敞(chang)鍐屻�佺壞(huai)闃寵(chong)蔣(jiang)浠(xi)跺紑鍙戙�佹(gui)�濋珮縐戞妧鎻愰啋淇(qi)℃伅鏉ユ簮(zan)錛氱(yang)壞(huai)闃沖競(jing)緗(xiang)戠(shi)粶涓(juan)(juan)庝俊(jun)鎭畨鍏ㄤ俊(jun)鎭�氭(dong)姤(gou)涓(juan)(juan)績
