Baz\u0131 yaz\u0131l\u0131m g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131n etkisi o kadar geni\u015f kapsaml\u0131d\u0131r ve o kadar \u00e7ok uygulamay\u0131 etkiler ki potansiyel hasar\u0131 \u00f6l\u00e7mek neredeyse imkans\u0131zd\u0131r. Spring4Shell olarak bilinen g\u00fcvenlik a\u00e7\u0131klar\u0131 dizisi m\u00fckemmel bir \u00f6rnektir.<\/p>\n
G\u00fcvenlik a\u00e7\u0131\u011f\u0131, adland\u0131r\u0131lamayacak kadar \u00e7ok Java tabanl\u0131 uygulamada kullan\u0131lan Spring Framework’te bulunur. \u00c7er\u00e7evesi, veri eri\u015fimi ve kimlik do\u011frulama \u00f6zelliklerini kapsayan mod\u00fcller i\u00e7erir, bu nedenle bir sald\u0131rgan\u0131n bunu kullanmas\u0131 durumunda olas\u0131 bir felaket meydana gelebilir.<\/p>\n
G\u00fcvenlik a\u00e7\u0131\u011f\u0131 uzaktan kod y\u00fcr\u00fct\u00fclmesini kolayla\u015ft\u0131r\u0131r ve Spring Core’u JDK’da (Java Geli\u015ftirme Kiti) 9 ila 18 etkiler. Sinir bozucu bir \u015fekilde, Spring4Shell ara\u015ft\u0131rmac\u0131lar\u0131n 2010’da ke\u015ffetti\u011fi ba\u015fka bir uzaktan kod y\u00fcr\u00fctme g\u00fcvenlik a\u00e7\u0131\u011f\u0131n\u0131 da i\u00e7ermektedir. Bu, Spring4Shell’in ne kadar kritik oldu\u011funu ve yama yapman\u0131n veya ba\u015fka bir \u015fekilde azaltman\u0131n ne kadar zor oldu\u011funu tek ba\u015f\u0131na vurgular.<\/p>\n
Spring Framework’\u00fcn mod\u00fcllerinin \u00e7ok say\u0131da i\u015flevi oldu\u011fundan ve Spring Framework’\u00fcn bir\u00e7ok farkl\u0131 a\u011f uygulamas\u0131nda farkl\u0131 kullan\u0131mlar\u0131 nedeniyle, Spring4Shell’den yararlanman\u0131n bir\u00e7ok yolu vard\u0131r.<\/p>\n
Endi\u015fe verici bir \u00f6rnek, Spring4Shell’in Mirai k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m\u0131n\u0131 y\u00fcr\u00fctmek ve k\u00f6t\u00fc niyetli bir \u015fekilde uzaktan k\u00f6k eri\u015fimi elde etmek i\u00e7in kullan\u0131lmas\u0131d\u0131r.<\/p>\n
\u0130lk olarak 2016’da ortaya \u00e7\u0131kan Mirai botnet k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m\u0131; geli\u015ferek geri geliyor. Yaz\u0131l\u0131m y\u00f6nlendiricilere ve sunuculara bula\u015farak ve sald\u0131rganlara devasa botnet a\u011flar\u0131n\u0131 kontrol etme yetene\u011fi vererek \u00e7al\u0131\u015f\u0131r. En \u00e7ok zarar veren Mirai sald\u0131r\u0131lar\u0131ndan biri, Ekim 2016’da Dyn DNS a\u011f\u0131n\u0131 sert bir \u015fekilde vurdu ve internetin \u00e7o\u011funu yok etti.<\/p>\n
\u015eimdi, Spring4Shell, Mirai’nin d\u00f6n\u00fc\u015f\u00fcne yard\u0131m ediyor. Spring4Shell’in hatalar\u0131, dikkatlice kodlanm\u0131\u015f bir istekle web sunucular\u0131na bir JSP web kabu\u011fu yazmak i\u00e7in kullan\u0131ld\u0131. Ard\u0131ndan uzak sald\u0131rganlar, k\u00f6k eri\u015fimi olan komutlar\u0131 y\u00fcr\u00fctmek i\u00e7in kabu\u011fu kulland\u0131lar. Mirai, y\u00fcr\u00fct\u00fclmeden \u00f6nce bir web sunucusunun \u201c\/tmp\u201d klas\u00f6r\u00fcne indirilir.<\/p>\n
Spring4Shell, ilk olarak Kas\u0131m 2021’de ke\u015ffedilen Log4Shell’e bir\u00e7ok y\u00f6nden benzer. Log4J, 2001’den bug\u00fcne \u00e7ok say\u0131da a\u011f g\u00fcnl\u00fc\u011f\u00fc uygulamas\u0131nda uygulanan Apache’nin Java g\u00fcnl\u00fck kayd\u0131 yard\u0131mc\u0131 program\u0131d\u0131r. \u00c7ok \u00e7e\u015fitli internet sunucular\u0131nda ve hizmetlerinde \u00e7al\u0131\u015fan biraz kullan\u0131\u015fl\u0131 yaz\u0131l\u0131m kodudur. Log4Shell g\u00fcvenlik a\u00e7\u0131\u011f\u0131ndan yararlanmak, sald\u0131rganlara her t\u00fcrl\u00fc internet hedefine y\u00f6netici eri\u015fimi verebilir. Ars Technica’dan Dan Goodin, “tart\u0131\u015fmas\u0131z \u015fimdiye kadarki en ciddi g\u00fcvenlik a\u00e7\u0131\u011f\u0131” olarak nitelendirdi ve Apache, 6 Aral\u0131k’ta yamalar\u0131 da\u011f\u0131tmaya ba\u015flad\u0131. Birden fazla CVE oldu\u011fu ve d\u00fczeltilmesi kolay olmad\u0131\u011f\u0131 i\u00e7in bu kolay bir i\u015f olmad\u0131.<\/p>\n
<\/p>\n
Spring4Shell ve Log4Shell, Java’n\u0131n geni\u015f kitapl\u0131klar\u0131 ve kaynaklar\u0131yla ilgilidir. Java, internet sunucular\u0131nda ve ba\u015fta Android cihazlar olmak \u00fczere \u00e7e\u015fitli u\u00e7 nokta t\u00fcrlerinde en s\u0131k kullan\u0131lan uygulama geli\u015ftirme teknolojilerinden biridir. Bu kadar pop\u00fcler ve kullan\u0131\u015fl\u0131 bir teknolojinin dezavantaj\u0131, sald\u0131rganlar i\u00e7in de birincil hedef olacak olmas\u0131d\u0131r. Ka\u00e7\u0131n\u0131lmaz olarak, \u00f6n\u00fcm\u00fczdeki y\u0131llarda ke\u015ffedilen \u00e7ok daha y\u0131k\u0131c\u0131 Java kitapl\u0131\u011f\u0131 g\u00fcvenlik a\u00e7\u0131klar\u0131 olacakt\u0131r.<\/p>\n
\u0130\u015fletmeler, Spring4Shell ve Log4Shell g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 t\u00fcm a\u011flar\u0131nda yamalamak i\u00e7in h\u0131zla \u00e7al\u0131\u015fmal\u0131d\u0131r. Titiz ve s\u00fcrekli s\u0131zma testleri, kurulu\u015flar\u0131n bu g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 h\u0131zla tespit etmesine yard\u0131mc\u0131 olabilir. Geleneksel s\u0131zma testi yakla\u015f\u0131m\u0131, kurulu\u015flar\u0131n en son karma\u015f\u0131k g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 bulmas\u0131na ve d\u00fczeltmesine yard\u0131mc\u0131 olacak kadar sa\u011flam de\u011fildir. Bu y\u00fczden hemen Synack ile tan\u0131\u015f\u0131n, bizi aray\u0131n!<\/p>\n
<\/p>\n
<\/p>","protected":false},"excerpt":{"rendered":"
Baz\u0131 yaz\u0131l\u0131m g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131n etkisi o kadar geni\u015f kapsaml\u0131d\u0131r ve o kadar \u00e7ok uygulamay\u0131 etkiler ki potansiyel hasar\u0131 \u00f6l\u00e7mek neredeyse imkans\u0131zd\u0131r. Spring4Shell olarak bilinen g\u00fcvenlik a\u00e7\u0131klar\u0131 dizisi m\u00fckemmel bir \u00f6rnektir. G\u00fcvenlik a\u00e7\u0131\u011f\u0131, adland\u0131r\u0131lamayacak kadar \u00e7ok Java tabanl\u0131 uygulamada kullan\u0131lan Spring Framework’te bulunur. \u00c7er\u00e7evesi, veri eri\u015fimi…<\/p>","protected":false},"author":2,"featured_media":8092,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[257],"tags":[],"class_list":["post-8091","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog"],"acf":[],"yoast_head":"\n