윈도우 Exchange 서버 취약점 보안 업데이트 권고 // 한국인터넷진흥원

<section class="board-view-head" style="border-top: 2px solid rgb(17, 17, 17); border-bottom: 1px solid rgb(170, 170, 170); color: rgb(51, 51, 51); font-family: "Nanum Gothic"; font-size: 16px; font-weight: 700;"><div class="tit" style="margin: 0px; padding: 9px 100px 9px 10px; border-width: 0px 0px 1px; border-top-style: initial; border-right-style: initial; border-bottom-style: solid; border-left-style: initial; border-top-color: initial; border-right-color: initial; border-bottom-color: rgb(236, 236, 236); border-left-color: initial; border-image: initial; background: transparent; vertical-align: baseline; position: relative; height: 22px;"><h4 style="margin: 0px; padding: 0px; border: 0px; background: transparent; vertical-align: baseline; line-height: 22px; float: left;">윈도우 Exchange 서버 취약점 보안 업데이트 권고</h4><p class="date" style="margin-right: 10px; padding-left: 21px; border: 0px; background: transparent; vertical-align: baseline; position: absolute; display: inline-block; font-size: 13px; line-height: 22px; font-weight: normal; top: 9px; right: 0px;"><span class="icon clock" style="margin: -9px 0px 0px; padding: 0px; border: 0px; background: url("../imgs/sprite.png?v=14") -29px -30px no-repeat; vertical-align: middle; text-indent: -9999px; font-size: 0px; line-height: 0; display: inline-block; width: 16px; height: 16px; position: absolute; left: 0px; top: 11px;"></span>2020.05.22</p></div><div class="info" style="margin: 0px; padding: 9px 10px; border: 0px; background: transparent; vertical-align: baseline; overflow: hidden;"><ul class="file" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; padding: 0px; border: 0px; background: transparent; vertical-align: baseline; list-style: none; float: left; max-width: 500px; width: auto !important;"><li style="margin: 0px; padding: 0px; border: 0px; background: transparent; vertical-align: baseline; list-style: none; float: left; width: 90px; line-height: 22px; font-size: 14px; color: rgb(118, 118, 118);"><span class="tit" style="margin: 0px 20px 0px 0px; padding: 0px; border: 0px; background: transparent; vertical-align: baseline; display: inline-block; height: 22px; line-height: 22px; color: rgb(51, 51, 51);"><span class="icon download" style="margin: 0px 0px 4px; padding: 0px; border: 0px; background: url("../imgs/sprite.png?v=14") -11px -127px no-repeat; vertical-align: middle; text-indent: -9999px; font-size: 0px; line-height: 0; display: inline-block; width: 9px; height: 11px;"></span> 첨부파일</span></li><li style="margin: 0px; padding: 0px; border: 0px; background: transparent; vertical-align: baseline; list-style: none; float: left; width: 410px; line-height: 22px; font-size: 14px; color: rgb(118, 118, 118);">첨부파일이 없습니다.</li></ul><p class="writer2" style="border: 0px; background: transparent; vertical-align: baseline; float: right; line-height: 22px; font-size: 14px; color: rgb(118, 118, 118); width: 297px;"><span class="tit" style="margin: 0px 20px 0px 0px; padding: 0px; border: 0px; background: transparent; vertical-align: baseline; display: inline-block; height: 22px; line-height: 22px; color: rgb(51, 51, 51); width: 70px;"><span class="icon bcircle" style="margin: 0px 0px 4px; padding: 0px; border: 0px; background: url("../imgs/sprite.png?v=14") -28px -127px no-repeat; vertical-align: middle; text-indent: -9999px; font-size: 0px; line-height: 0; display: inline-block; width: 9px; height: 9px;"></span> 등록기관</span> 한국인터넷진흥원</p></div></section><section class="board-view" style="padding: 20px 10px; font-size: 14px; line-height: 24px; color: rgb(0, 0, 0); font-family: "Nanum Gothic";"><table style="margin: 0px; padding: 0px; border: 0px; background: transparent; vertical-align: baseline; border-collapse: collapse; border-spacing: 0px; width: 800px;"><tbody style="margin: 0px; padding: 0px; border: 0px; background: transparent; vertical-align: baseline;"><tr style="margin: 0px; padding: 0px; border: 0px; background: transparent; vertical-align: baseline;"><td class="view_td_cont" colspan="4" style="margin: 0px; padding: 0px; border: 0px; background: transparent; vertical-align: middle;"><div id="div_view_result" style="margin: 0px; padding: 0px 0px 0px 15px; border: 0px; background: transparent; vertical-align: baseline;"><p style="border: 0px; background: transparent; vertical-align: baseline; line-height: 32px; font-family: 나눔고딕; font-size: 16px;">한국인터넷진흥원 인터넷침해대응센터(http://www.krcert.or.kr) 종합상황실입니다.<br><br></p><p style="border: 0px; background: transparent; vertical-align: baseline; line-height: 32px; font-family: 나눔고딕; font-size: 16px;">우리원은 민간분야 인터넷침해사고(해킹,웜.바이러스 등)예방 및 대응활동 등을 수행하고 있습니다.<br>- 정보통신망이용촉진및정보보호등에관한법률제47조의4(이용자의정보보호)<br>- 정보통신망이용촉진및정보보호등에관한법률제48조의2(침해사고의대응등)<br>- 정보통신망이용촉진및정보보호등에관한법률제49조의2(속이는행위에의한개인정보의수집금지등)<br>- 정보통신망이용촉진및정보보호등에관한법률시행령제56조(침해사고대응조치-접속경로차단요청)<br><br></p><p style="border: 0px; background: transparent; vertical-align: baseline; line-height: 32px; font-family: 나눔고딕; font-size: 16px;">우리원에서는 올해 3월 윈도우 Exchange 서버에서 메모리의 객체에 대한 처리가 미흡하여 발생하는 원격코드실행 취약점(CVE-2020-0688)의 개념증명코드(PoC)가 공개되어 주의권고 한바 있습니다.<br><br></p><p style="border: 0px; background: transparent; vertical-align: baseline; line-height: 32px; font-family: 나눔고딕; font-size: 16px;">해커가 해당 취약점을 악용하여 Exchange 서버를 공격할 경우 침해사고 위험이 있으므로,<br>아직 패치 적용을 하지 않은 경우 공개된 보안패치를 반드시 적용하시기를 당부드립니다.<br><br>[관련사이트]<br>1. https://www.krcert.or.kr/data/secNoticeView.do?bulletin_writing_sequence=35291<br>2. https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0688</p></div></td></tr></tbody></table></section><p><br></p>