CVE-2017-9248 취약점 확인 및 조치방법

# SQL Server 버전/CU/GDR 확인
sqlcmd -Q "select @@version; select SERVERPROPERTY('ProductVersion'), SERVERPROPERTY('ProductLevel'), SERVERPROPERTY('ProductUpdateLevel'), SERVERPROPERTY('Edition');" 2>NUL

# IIS 역할과 app pool/site 확인
Get-WindowsFeature Web-Server, Web-Asp-Net45 2>$null
Get-Service W3SVC,WAS -ErrorAction SilentlyContinue
Import-Module WebAdministration -ErrorAction SilentlyContinue; Get-Website; Get-ChildItem IIS:\AppPools | Select-Object Name, state, managedRuntimeVersion

# .NET Framework release / .NET runtime / Hosting Bundle 확인
Get-ItemProperty 'HKLM:\SOFTWARE\Microsoft\NET Framework Setup\NDP\v4\Full' -ErrorAction SilentlyContinue | Select-Object Release, Version
& dotnet --info 2>$null
Get-HotFix | Sort-Object InstalledOn -Descending | Select-Object -First 20 HotFixID, InstalledOn, Description

# SQL Server build와 DB 상태 재확인
sqlcmd -Q "select @@version; select SERVERPROPERTY('ProductVersion'), SERVERPROPERTY('ProductUpdateLevel');" 2>NUL

# IIS/.NET/KB/이벤트 로그 확인
Get-Service W3SVC,WAS -ErrorAction SilentlyContinue
Import-Module WebAdministration -ErrorAction SilentlyContinue; Get-Website; Get-ChildItem IIS:\AppPools | Select-Object Name, state
& dotnet --info 2>$null
Get-HotFix | Sort-Object InstalledOn -Descending | Select-Object -First 20 HotFixID, InstalledOn, Description
Get-WinEvent -FilterHashtable @{LogName='Application'; StartTime=(Get-Date).AddHours(-2); Level=2,3} | Select-Object -First 50 TimeCreated, ProviderName, Id, Message

# 업무 URL, DB 연결, 로그인, 배치/서비스, SQL Agent job을 확인합니다.