{"id":1,"date":"2014-06-03T04:15:43","date_gmt":"2014-06-03T04:15:43","guid":{"rendered":"http:\/\/www.tungphuong.com\/?p=1"},"modified":"2014-06-28T08:46:38","modified_gmt":"2014-06-28T01:46:38","slug":"vncert-huong-dan-khac-phuc-hau-qua-lo-hong-heartbleed-cho-co-quan-nha-nuoc","status":"publish","type":"post","link":"https:\/\/mitechvina.com\/?p=1","title":{"rendered":"VNCERT h\u01b0\u1edbng d\u1eabn kh\u1eafc ph\u1ee5c h\u1eadu qu\u1ea3 l\u1ed7 h\u1ed5ng Heartbleed cho c\u01a1 quan Nh\u00e0 n\u01b0\u1edbc"},"content":{"rendered":"
Trung t\u00e2m \u1ee8ng c\u1ee9u kh\u1ea9n c\u1ea5p m\u00e1y t\u00ednh Vi\u1ec7t Nam (VNCERT) v\u1eeba g\u1eedi c\u00f4ng v\u0103n t\u1edbi c\u00e1c S\u1edf TT&TT, c\u00e1c \u0111\u01a1n v\u1ecb chuy\u00ean tr\u00e1ch CNTT c\u1ee7a B\u1ed9, c\u01a1 quan ngang B\u1ed9 h\u01b0\u1edbng d\u1eabn c\u00e1ch kh\u1eafc ph\u1ee5c l\u1ed7 h\u1ed5ng Heartbleed c\u1ee7a b\u1ed9 th\u01b0 vi\u1ec7n m\u1edf OpenSSL.<\/div>\n
\n

H\u01b0\u1edbng d\u1eabn kh\u1eafc ph\u1ee5c h\u1eadu qu\u1ea3 l\u1ed7 h\u1ed5ng Heartbleed<\/strong><\/h2>\n

Trong c\u00f4ng v\u0103n \u0111\u00e3 n\u00eau \u0111\u00edch danh nh\u1eefng phi\u00ean b\u1ea3n th\u01b0 vi\u1ec7n OpenSSL b\u1ecb d\u00ednh l\u1ed7 h\u1ed5ng Heartbleed l\u00e0 c\u00e1c phi\u00ean b\u1ea3n 1.0.1x bao g\u1ed3m: 1.0.1, 1.0.1-beta1, 1.0.1-beta2, 1.0.1-beta3, 1.0.1a, 1.0.1b, 1.0.1c, 1.0.1d, 1.0.1e, 1.0.1f.<\/p>\n

VNCERT c\u0169ng \u0111\u01b0a c\u00f4ng b\u1ed1 c\u1ee7a h\u00e3ng Codenomicon v\u1ec1 m\u1ed9t s\u1ed1 phi\u00ean b\u1ea3n h\u1ec7 \u0111i\u1ec1u h\u00e0nh Linux c\u00f3 s\u1eed d\u1ee5ng c\u00e1c phi\u00ean b\u1ea3n OpenSSL b\u1ecb l\u1ed7i c\u1ea7n c\u1eadp nh\u1eadt n\u00e2ng c\u1ea5p \u0111\u1ec3 \u0111\u1ea3m b\u1ea3o an to\u00e0n khi s\u1eed d\u1ee5ng c\u0169ng nh\u01b0\u00a0kh\u00f4i ph\u1ee5c d\u1eef li\u1ec7u, g\u1ed3m: Debian Wheezy (b\u1ea3n stable), Ubuntu 12.04.4 LTS, CentOS 6.5, Fedora 18, OpenBSD 5.3 v\u00e0 5.4, FreeBSD 10.0, NetBSD 5.0.2, OpenSUSE 12.2.<\/p>\n\\\"Khai<\/a>\n

VNCERT \u0111\u00e1nh gi\u00e1 \u0111\u00e2y l\u00e0 m\u1ed9t trong nh\u1eefng l\u1ed7i an to\u00e0n th\u00f4ng tin r\u1ea5t nghi\u00eam tr\u1ecdng, ph\u1ea1m vi \u1ea3nh h\u01b0\u1edfng r\u1ed9ng, c\u00f3 kh\u1ea3 n\u0103ng g\u00e2y m\u1ea5t th\u00f4ng tin trong nhi\u1ec1u \u1ee9ng d\u1ee5ng t\u00e0i ch\u00ednh, ng\u00e2n h\u00e0ng, th\u01b0 \u0111i\u1ec7n t\u1eed… c\u00f3 s\u1eed d\u1ee5ng giao th\u1ee9c truy\u1ec1n tin si\u00eau v\u0103n b\u1ea3n an to\u00e0n HTTPS s\u1eed d\u1ee5ng giao th\u1ee9c TLS c\u1ee7a th\u01b0 vi\u1ec7n OpenSSL c\u00f3 l\u1ed7i \u0111\u1ec3 m\u00e3 h\u00f3a d\u1eef li\u1ec7u tr\u00ean \u0111\u01b0\u1eddng truy\u1ec1n.<\/p>\n

Theo khuy\u1ebfn c\u00e1o c\u1ee7a VNCERT, mu\u1ed1n bi\u1ebft h\u1ec7 th\u1ed1ng c\u00f3 b\u1ecb l\u1ed7i OpenSSL hay kh\u00f4ng, c\u00e1c c\u01a1 quan, t\u1ed5 ch\u1ee9c c\u1ea7n th\u1ef1c hi\u1ec7n l\u1ec7nh \u201copenssl version\u201d, sau \u0111\u00f3 \u0111\u1ed1i chi\u1ebfu phi\u00ean b\u1ea3n OpenSSL do h\u1ec7 th\u1ed1ng tr\u1ea3 v\u1ec1 v\u1edbi danh s\u00e1ch phi\u00ean b\u1ea3n OpenSSL c\u00f3 l\u1ed7i.<\/p>\n

C\u00e1ch t\u1ed1t nh\u1ea5t \u0111\u1ec3 kh\u1eafc ph\u1ee5c l\u1ed7i an to\u00e0n th\u00f4ng tin \u0111\u1eb7c bi\u1ec7t nghi\u00eam tr\u1ecdng n\u00eau tr\u00ean l\u00e0 n\u00e2ng c\u1ea5p th\u01b0 vi\u1ec7n OpenSSL l\u00ean phi\u00ean b\u1ea3n m\u1edbi nh\u1ea5t (hi\u1ec7n t\u1ea1i l\u00e0 phi\u00ean b\u1ea3n 1.0.1g). B\u00ean c\u1ea1nh \u0111\u00f3, \u0111\u1ec3 ng\u0103n ch\u1eb7n tin t\u1eb7c l\u1ee3i d\u1ee5ng khai th\u00e1c th\u00f4ng tin, c\u00f3 th\u1ec3 \u00e1p d\u1ee5ng bi\u1ec7n ph\u00e1p c\u1eadp nh\u1eadt c\u01a1 s\u1edf d\u1eef li\u1ec7u c\u1ee7a c\u00e1c thi\u1ebft b\u1ecb IPS ho\u1eb7c IDS \u0111\u1ec3 ph\u00e1t hi\u1ec7n v\u00e0 ng\u1eaft truy c\u1eadp t\u1ea5n c\u00f4ng khai th\u00e1c \u0111i\u1ec3m y\u1ebfu l\u1ed7 h\u1ed5ng.<\/p>\n

Theo ICTnews<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

Trung t\u00e2m \u1ee8ng c\u1ee9u kh\u1ea9n c\u1ea5p m\u00e1y t\u00ednh Vi\u1ec7t Nam (VNCERT) v\u1eeba g\u1eedi c\u00f4ng v\u0103n t\u1edbi c\u00e1c S\u1edf TT&TT, c\u00e1c \u0111\u01a1n v\u1ecb chuy\u00ean tr\u00e1ch CNTT c\u1ee7a B\u1ed9, c\u01a1 quan ngang B\u1ed9 h\u01b0\u1edbng d\u1eabn c\u00e1ch kh\u1eafc ph\u1ee5c l\u1ed7 h\u1ed5ng Heartbleed c\u1ee7a b\u1ed9 th\u01b0 vi\u1ec7n m\u1edf OpenSSL. H\u01b0\u1edbng d\u1eabn kh\u1eafc ph\u1ee5c h\u1eadu qu\u1ea3 l\u1ed7 h\u1ed5ng Heartbleed Trong […]<\/p>\n","protected":false},"author":10,"featured_media":64,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-1","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog"],"acf":[],"_links":{"self":[{"href":"https:\/\/mitechvina.com\/index.php?rest_route=\/wp\/v2\/posts\/1","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mitechvina.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mitechvina.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mitechvina.com\/index.php?rest_route=\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/mitechvina.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1"}],"version-history":[{"count":0,"href":"https:\/\/mitechvina.com\/index.php?rest_route=\/wp\/v2\/posts\/1\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mitechvina.com\/index.php?rest_route=\/wp\/v2\/posts\/64"}],"wp:attachment":[{"href":"https:\/\/mitechvina.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mitechvina.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mitechvina.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}