{"id":104724,"date":"2022-07-28T15:36:38","date_gmt":"2022-07-28T13:36:38","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-samba-pozvolyayushhaya-pomenyat-parol-lyubomu-polzovatelyu"},"modified":"2022-07-28T15:36:38","modified_gmt":"2022-07-28T13:36:38","slug":"uyazvimost-v-samba-pozvolyayushhaya-pomenyat-parol-lyubomu-polzovatelyu","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/uyazvimost-v-samba-pozvolyayushhaya-pomenyat-parol-lyubomu-polzovatelyu","title":{"rendered":"Zranitelnost v Samba, kter\u00e1 umo\u017e\u0148uje zm\u011bnit heslo jak\u00e9mukoli u\u017eivateli","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Byly zve\u0159ejn\u011bny opravy bal\u00ed\u010dk\u016f Samba 4.16.4, 4.15.9 a 4.14.14, kter\u00e9 opravuj\u00ed 5 zranitelnost\u00ed. V\u00fdvoj aktualizac\u00ed bal\u00ed\u010dk\u016f v distribuc\u00edch lze sledovat na str\u00e1nk\u00e1ch: Debian, Ubuntu, RHEL, SUSE, Arch, FreeBSD.    <\/p>\n<p>Nejnebezpe\u010dn\u011bj\u0161\u00ed zranitelnost (CVE-2022-32744) umo\u017e\u0148uje u\u017eivatel\u016fm dom\u00e9ny Active Directory zm\u011bnit heslo jak\u00e9hokoli u\u017eivatele, v\u010detn\u011b zm\u011bny hesla spr\u00e1vce a z\u00edsk\u00e1n\u00ed pln\u00e9 kontroly nad dom\u00e9nou. Probl\u00e9m je zp\u016fsoben t\u00edm, \u017ee KDC p\u0159ij\u00edm\u00e1 kpasswd po\u017eadavky \u0161ifrovan\u00e9 jak\u00fdmkoli zn\u00e1m\u00fdm kl\u00ed\u010dem.     <\/p>\n<p>\u00dato\u010dn\u00edk, kter\u00fd m\u00e1 p\u0159\u00edstup k  <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/cs\/domain\/\"   title=\"domain\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"1234\">domain<\/a>, m\u016f\u017ee zaslat fale\u0161n\u00fd po\u017eadavek na nastaven\u00ed nov\u00e9ho hesla jm\u00e9nem jin\u00e9ho u\u017eivatele, za\u0161ifruje ho sv\u00fdm kl\u00ed\u010dem a KDC ho zpracuje bez kontroly shody kl\u00ed\u010de \u00fa\u010dtu. Tak\u00e9 pro odes\u00edl\u00e1n\u00ed fale\u0161n\u00fdch po\u017eadavk\u016f mohou b\u00fdt pou\u017eity kl\u00ed\u010de \u0159adi\u010d\u016f dom\u00e9ny, kter\u00e9 funguj\u00ed pouze v re\u017eimu pouze pro \u010dten\u00ed (RODC), kter\u00e9 nemaj\u00ed opr\u00e1vn\u011bn\u00ed pro zm\u011bnu hesel. Jako obranou proti ochran\u011b je mo\u017en\u00e9 deaktivovat podporu protokolu kpasswd p\u0159id\u00e1n\u00edm \u0159\u00e1dku do smb.conf &#171;kpasswd port = 0&#187;.    <\/p>\n<p>Dal\u0161\u00ed zranitelnosti:  <\/p>\n<ul>\n<li class=\"l\"> CVE-2022-32746 &#8212; u\u017eivatel\u00e9 Active Directory mohou pomoc\u00ed speci\u00e1ln\u011b form\u00e1tovan\u00fdch LDAP po\u017eadavk\u016f &#171;add&#187; nebo &#171;modify&#187; vyvolat p\u0159\u00edstup k pam\u011bti po jej\u00edm uvoln\u011bn\u00ed (use-after-free) v serverov\u00e9m procesu. Probl\u00e9m je zp\u016fsoben t\u00edm, \u017ee modul pro sledov\u00e1n\u00ed auditu se obrac\u00ed na obsah LDAP zpr\u00e1vy pot\u00e9, co modul pro pr\u00e1ci s DB uvoln\u00ed pam\u011b\u0165 vyhrazenou pro zpr\u00e1vu. K proveden\u00ed \u00fatoku je nutn\u00e9 m\u00edt pr\u00e1va k p\u0159id\u00e1n\u00ed nebo modifikaci n\u011bkter\u00fdch privilegovan\u00fdch atribut\u016f, jako je userAccountControl.\n<li class=\"l\"> CVE-2022-2031 &#8212; u\u017eivatel\u00e9 Active Directory mohou obch\u00e1zet n\u011bkter\u00e1 omezen\u00ed v \u0159adi\u010di dom\u00e9ny. KDC a slu\u017eba kpasswd maj\u00ed mo\u017enost de\u0161ifrovat tikety navz\u00e1jem, proto\u017ee spole\u010dn\u011b pou\u017e\u00edvaj\u00ed jednu sadu kl\u00ed\u010d\u016f a \u00fa\u010dt\u016f. U\u017eivatel, kter\u00fd po\u017eadoval zm\u011bnu hesla, m\u016f\u017ee pou\u017e\u00edt z\u00edskan\u00fd tiket k p\u0159\u00edstupu k dal\u0161\u00edm slu\u017eb\u00e1m.\n<li class=\"l\"> CVE-2022-32745 &#8212; u\u017eivatel\u00e9 Active Directory mohou zp\u016fsobit hav\u00e1rii serverov\u00e9ho procesu zasl\u00e1n\u00edm LDAP po\u017eadavk\u016f &#171;add&#187; nebo &#171;modify&#187;, kter\u00e9 vedou k p\u0159\u00edstupu k neinitializovan\u00fdm dat\u016fm.\n<li class=\"l\"> CVE-2022-32742 &#8212; \u00fanik informac\u00ed o obsahu pam\u011bti <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/cs\/server\/dts-los-angeles\/\"   title=\"serveru\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"3841\">serveru<\/a> prost\u0159ednictv\u00edm manipulace s protokolem SMB1. Klient SMB1, kter\u00fd m\u00e1 pr\u00e1vo z\u00e1pisu do sd\u00edlen\u00e9ho \u00falo\u017ei\u0161t\u011b, m\u016f\u017ee vytvo\u0159it podm\u00ednky pro z\u00e1pis fragment\u016f obsahu pam\u011bti serverov\u00e9ho procesu do souboru nebo odesl\u00e1n\u00ed na tisk\u00e1rnu. \u00datok se prov\u00e1d\u00ed zasl\u00e1n\u00edm po\u017eadavku &#171;write&#187; se specifikovan\u00fdm nespr\u00e1vn\u00fdm rozsahem. Probl\u00e9m se t\u00fdk\u00e1 pouze v\u011btv\u00ed Samba do 4.11 (ve v\u011btvi 4.11 je podpora SMB1 ve v\u00fdchoz\u00edm nastaven\u00ed deaktivov\u00e1na).                 <\/ul>\n<p>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=57565\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 Samba 4.16.4, 4.15.9 \u0438 4.14.14 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c 5 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0412\u044b\u043f\u0443\u0441\u043a \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 \u043c\u043e\u0436\u043d\u043e \u043f\u0440\u043e\u0441\u043b\u0435\u0434\u0438\u0442\u044c \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\u0445: Debian, Ubuntu, RHEL, SUSE, Arch, FreeBSD. \u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2022-32744) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0434\u043e\u043c\u0435\u043d\u0430 Active Directory \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u044c \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043c\u043e\u0436\u043d\u043e \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0434\u043e\u043c\u0435\u043d\u043e\u043c. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-104724","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 Samba 4.16.4, 4.15.9 \u0438 4.14.14 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c 5 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/news\/uyazvimost-v-samba-pozvolyayushhaya-pomenyat-parol-lyubomu-polzovatelyu\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Samba, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u043c\u0435\u043d\u044f\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u044c \u043b\u044e\u0431\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 Samba 4.16.4, 4.15.9 \u0438 4.14.14 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c 5 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/news\/uyazvimost-v-samba-pozvolyayushhaya-pomenyat-parol-lyubomu-polzovatelyu\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2022-07-28T13:36:38+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2022-07-28T13:36:38+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Zranitelnost v Sambu, kter\u00e1 umo\u017e\u0148uje jak\u00e9mukoliv u\u017eivateli zm\u011bnit heslo | ProHoster","description":"Byly zve\u0159ejn\u011bny opravn\u00e9 vyd\u00e1n\u00ed bal\u00edku Samba 4.16.4, 4.15.9 a 4.14.14 s odstran\u011bn\u00edm 5 zranitelnost\u00ed.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/uyazvimost-v-samba-pozvolyayushhaya-pomenyat-parol-lyubomu-polzovatelyu","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Samba, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u043c\u0435\u043d\u044f\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u044c \u043b\u044e\u0431\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 Samba 4.16.4, 4.15.9 \u0438 4.14.14 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c 5 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/uyazvimost-v-samba-pozvolyayushhaya-pomenyat-parol-lyubomu-polzovatelyu","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-07-28T13:36:38+00:00","article:modified_time":"2022-07-28T13:36:38+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"104724","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-07-28 13:37:27","updated":"2026-02-22 15:30:56","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/104724","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=104724"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/104724\/revisions"}],"predecessor-version":[{"id":162369,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/104724\/revisions\/162369"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=104724"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=104724"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=104724"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}