榪滅▼鎵ц浠ｇ爜婕忔礊瀹夊叏棰勮閫氬憡
綆＄悊鍛?nbsp; | 2019/5/24 9:58:13鍏充簬Windows榪滅▼妗岄潰鏈嶅姟錛圧DP錛夊瓨鍦?/span>
榪滅▼鎵ц浠ｇ爜婕忔礊瀹夊叏棰勮閫氬憡
絎竴绔?瀹夊叏閫氬憡
2019騫?鏈?5鏃ュ井杞彂甯冨畨鍏ㄨˉ涓佷慨澶嶄簡CVE緙栧彿涓篊VE-2019-0708鐨刉indows榪滅▼妗岄潰鏈嶅姟錛圧DP錛夎繙紼嬩唬鐮佹墽琛屾紡媧烇紝璇ユ紡媧炲湪涓嶉渶韜喚璁よ瘉鐨勬儏鍐典笅鍗沖彲榪滅▼瑙﹀彂錛屽嵄瀹充笌褰卞搷闈㈡瀬澶с�?/span>
閫氳繃鍒嗘瀽鍙戠幇鍥藉唴鍏辨湁154涓囦綑鍙頒富鏈哄澶栧紑鏀?389绔彛錛屽彲鑳藉彈鍒版婕忔礊褰卞搷銆?/span>
絎簩绔?/span> 婕忔礊淇℃伅
2.1 婕忔礊鎻忚堪
Windows 榪滅▼妗岄潰鏈嶅姟錛?/span>RDP錛変富瑕佺敤浜庣鐞嗕漢鍛樺 Windows 鏈嶅姟鍣ㄨ繘琛岃繙紼嬬鐞嗭紝浣跨敤鏋佷負鏅亶銆傝繎鏃ュ井杞畼鏂規姭闇?/span>Windows涓殑榪滅▼妗岄潰鏈嶅姟涓瓨鍦ㄨ繙紼嬩唬鐮佹墽琛屾紡媧烇紝鏈粡韜喚璁よ瘉鐨勬敾鍑昏�呭彲浣跨敤RDP鍗忚榪炴帴鍒扮洰鏍囩郴緇熷茍鍙戦�佺簿蹇冩瀯閫犵殑璇鋒眰鍙Е鍙戣婕忔礊銆?/span>
2.2婕忔礊鍗卞
涓�鏃︽敾鍑昏�呮垚鍔熷埄鐢ㄦ婕忔礊錛屽彲鍦ㄧ洰鏍囩郴緇熶笂鎵ц浠繪剰浠ｇ爜錛屽畨瑁呭簲鐢ㄧ▼搴忥紝鍒涘緩瀹屽叏璁塊棶鏉冮檺鐨勬柊璐︽埛絳夈�傛敾鍑昏�呰繕鍙互瀵圭郴緇熶腑鐨勯噸瑕佹枃浠跺拰鏁版嵁浣跨敤鍕掔儲鐥呮瘨榪涜鍔犲瘑錛屽鏋滅郴緇熸帴鍏ュ埌鍐呯綉鐜涓紝鍙兘榪樹細閫犳垚瀵瑰唴緗戠殑鍚勭被緇堢鏈哄櫒鐨勯�犳垚榪涗竴姝ユ劅鏌擄紝閫犳垚鏇村姞涓ラ噸鐨勫悗鏋溿�?/span>
2.3椋庨櫓絳夌駭
椋庨櫓璇勭駭錛氶珮鍗?/span>
棰勮絳夌駭錛?/span>钃濊壊棰勮錛堜竴鑸簨浠訛級
絎笁绔?褰卞搷鐗堟湰
l Windows 7 for 32-bit Systems Service Pack 1
l Windows 7 for x64-based Systems Service Pack 1
l Windows Server 2008 for 32-bit Systems Service Pack 2
l Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
l Windows Server 2008 for Itanium-Based Systems Service Pack 2
l Windows Server 2008 for x64-based Systems Service Pack 2
l Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)
l Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1
l Windows Server 2008 R2 for x64-based Systems Service Pack 1
l Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
絎笁绔?/span> 澶勭疆寤鴻
瀹樻柟琛ヤ竵錛?/span>寰蔣瀹樻柟宸茬粡鎺ㄥ嚭瀹夊叏鏇存柊璇峰弬鑰冧互涓嬪畼鏂瑰畨鍏ㄩ�氬憡涓嬭澆騫跺畨瑁呮渶鏂拌ˉ涓侊細
https://support.microsoft.com/zh-cn/help/4500705/customer-guidance-for-cve-2019-0708
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0708
鎴栨牴鎹互涓嬭〃鏍兼煡鎵懼搴旂殑緋葷粺鐗堟湰涓嬭澆鏈�鏂拌ˉ涓侊細
緙撹В鎺柦錛?/span>
1.濡傛棤娉曟洿鏂拌ˉ涓侊紝鍙互閫氳繃鍦ㄧ郴緇熶笂鍚姩NLA錛堢綉緇滅駭鍒韓浠借璇侊級鏆傛椂瑙勯伩璇ユ紡媧為闄┿�?/span>
2.鍦ㄤ紒涓氳竟鐣岄槻鐏闃繪柇TCP鍗忚inbound 3389鐨勮繛鎺ワ紝鎴栧彧鍏佽鍙俊IP榪涜榪炴帴銆?/span>
3.濡傛棤鏄庣‘闇�姹傦紝鍙�夋嫨紱佺敤3389绔彛錛堣繙紼嬫闈㈡湇鍔★級銆?/span>
緇甸槼寰俊鍏紬鍙峰紑鍙?/a>銆?a target="_blank">緇甸槼緗戠珯寤鴻銆佺壞闃沖煙鍚嶆敞鍐屻�佺壞闃寵蔣浠跺紑鍙戙�佹�濋珮縐戞妧鎻愰啋淇℃伅鏉ユ簮錛氱壞闃沖競緗戠粶涓庝俊鎭畨鍏ㄤ俊鎭�氭姤涓績
