{"id":119956,"date":"2024-09-27T09:43:04","date_gmt":"2024-09-27T07:43:04","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/udalyonno-ekspluatiruemye-uyazvimosti-v-servere-pechati-cups"},"modified":"2024-09-27T09:43:04","modified_gmt":"2024-09-27T07:43:04","slug":"udalyonno-ekspluatiruemye-uyazvimosti-v-servere-pechati-cups","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/udalyonno-ekspluatiruemye-uyazvimosti-v-servere-pechati-cups","title":{"rendered":"Vzd\u00e1len\u011b zneu\u017eiteln\u00e9 zranitelnosti v tiskov\u00e9m serveru CUPS","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Simone Margaritelli, autor firewallu OpenSnitch a s\u00ed\u0165ov\u00e9ho analyz\u00e1toru bettercap, p\u0159ed\u010dasn\u011b odhalil informace o d\u0159\u00edve ozn\u00e1men\u00fdch kritick\u00fdch zranitelnostech, kter\u00e9 umo\u017e\u0148uj\u00ed vzd\u00e1len\u011b napadat distribuce GNU\/Linux, Solaris, FreeBSD a n\u011bkter\u00e9 dal\u0161\u00ed BSD syst\u00e9my. P\u016fvodn\u011b m\u011blo b\u00fdt zve\u0159ejn\u011bn\u00ed napl\u00e1nov\u00e1no na 6. \u0159\u00edjna, ale kv\u016fli \u00faniku informac\u00ed bylo nutn\u00e9 je zve\u0159ejnit d\u0159\u00edve, ne\u017e v\u011bt\u0161ina distribuc\u00ed stihne p\u0159ipravit aktualizace bal\u00ed\u010dk\u016f. Zranitelnosti zasahuj\u00ed server tisku CUPS a umo\u017e\u0148uj\u00ed vzd\u00e1len\u00e9 vykon\u00e1n\u00ed k\u00f3du v syst\u00e9mu bez autentizace.    <\/p>\n<p>V\u00fdzkumn\u00edk, kter\u00fd identifikoval probl\u00e9m, p\u0159ipravil pracovn\u00ed prototyp exploitu, kter\u00fd vyu\u017e\u00edv\u00e1 kombinaci n\u011bkolika zranitelnost\u00ed a umo\u017e\u0148uje vzd\u00e1len\u00e9 spu\u0161t\u011bn\u00ed k\u00f3du s pr\u00e1vy procesu zpracov\u00e1n\u00ed \u00faloh tisku CUPS (obvykle u\u017eivatel \u201elp\u201c). Exploit umo\u017e\u0148uje nen\u00e1padn\u011b zm\u011bnit parametry u\u017eivatelova tisk\u00e1rny nebo p\u0159idat novou tisk\u00e1rnu spojenou s aktivn\u00edm \u00fato\u010dn\u00fdm IPP serverem, kter\u00fd poskytuje speci\u00e1ln\u011b form\u00e1tovan\u00fd popis tisk\u00e1rny PPD. Zpracov\u00e1n\u00ed tohoto PPD b\u011bhem zah\u00e1jen\u00ed tisku vede k vykon\u00e1n\u00ed k\u00f3du \u00fato\u010dn\u00edka (je t\u0159eba, aby ob\u011b\u0165 iniciovala tisk na podvr\u017eenou nebo nahrazenou tisk\u00e1rnu).        <\/p>\n<p>\u00datokem jsou ohro\u017eeny syst\u00e9my s <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/cs\/server\/dts-prohoster\/\"   title=\"serverem\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"3090\">serverem<\/a> tiskem CUPS a spu\u0161t\u011bn\u00fdm procesem cups-browsed, kter\u00fd p\u0159ij\u00edm\u00e1 s\u00ed\u0165ov\u00e1 spojen\u00ed na portu 631 (UDP). \u00datok lze tak\u00e9 prov\u00e9st z m\u00edstn\u00ed s\u00edt\u011b, kde se pou\u017e\u00edvaj\u00ed protokoly pro p\u0159\u00edstup k <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/cs\/server\/dts-shicago\/\"   title=\"serveru\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"2943\">serveru<\/a> P\u0159i tisku se pou\u017e\u00edvaj\u00ed protokoly zeroconf, mDNS nebo DNS-SD. Zraniteln\u00e9 jsou pouze konfigurace cups-browsed, ve kter\u00fdch je v souboru \/etc\/cups\/cups-browsed.conf v parametru BrowseRemoteProtocols nastavena hodnota \u201ecups\u201c. V distribuc\u00edch se systemd lze zkontrolovat pou\u017eit\u00ed slu\u017eby cups-browsed p\u0159\u00edkazem \u201esudo systemctl status cups-browsed\u201c.          <\/p>\n<p>Zranitelnost se projevuje ve v\u0161ech tiskov\u00fdch syst\u00e9mech zalo\u017een\u00fdch na CUPS, kter\u00e9 pou\u017e\u00edvaj\u00ed zraniteln\u00e9 verze bal\u00ed\u010dk\u016f cups-filters, libcupsfilters, libppd a cups-browsed. Opravy jsou prozat\u00edm dostupn\u00e9 pouze ve form\u011b patch\u016f (1, 2, 3) \u2014 aktu\u00e1ln\u00ed verze cups-filters 2.0.1, libcupsfilters 2.1b1, libppd 2.1b1 a cups-browsed 2.0.1 jsou zraniteln\u00e9. V distribuc\u00edch probl\u00e9m z\u016fst\u00e1v\u00e1 nevy\u0159e\u0161en, sledovat v\u00fdskyt aktualizac\u00ed lze na n\u00e1sleduj\u00edc\u00edch str\u00e1nk\u00e1ch: Debian, Ubuntu, RHEL, SUSE\/openSUSE, Fedora, Arch, FreeBSD. Jako obranou cestu lze do doby instalace aktualizace zak\u00e1zat extern\u00edm s\u00edt\u00edm p\u0159\u00edstup k UDP portu 631, vypnout slu\u017ebu cups-browsed nebo nastavit parametr BrowseRemoteProtocols na hodnotu \u201enone.\u201c      <\/p>\n<p>Zji\u0161t\u011bn\u00e9 zranitelnosti:  <\/p>\n<ul>\n<li class=\"l\"> CVE-2024-47176 \u2014 zranitelnost v procesu cups-browsed, kter\u00fd vytv\u00e1\u0159\u00ed s\u00ed\u0165ov\u00fd socket p\u0159ij\u00edmaj\u00edc\u00ed spojen\u00ed na portu 631, p\u0159ipojen\u00fd ke v\u0161em st\u00e1vaj\u00edc\u00edm s\u00ed\u0165ov\u00fdm rozhran\u00edm v syst\u00e9mu a p\u0159ij\u00edmaj\u00edc\u00ed IPP po\u017eadavky \u201eGet-Printer-Attributes\u201c z jak\u00fdchkoli extern\u00edch syst\u00e9m\u016f. Manipulac\u00ed s touto slu\u017ebou lze zp\u016fsobit p\u0159id\u00e1n\u00ed tisk\u00e1rny \u0159\u00edzen\u00e9 \u00fato\u010dn\u00edkem do syst\u00e9mu a vyu\u017e\u00edt prost\u0159ednictv\u00edm p\u0159enosu PPD konfigurace zranitelnosti v dal\u0161\u00edch komponent\u00e1ch CUPS.\n<li class=\"l\"> CVE-2024-47177 \u2014 zranitelnost v procesoru foomatic-rip ze sady cups-filters, kter\u00e1 umo\u017e\u0148uje prov\u00e9st k\u00f3d prost\u0159ednictv\u00edm p\u0159ed\u00e1n\u00ed parametru FoomaticRIPCommandLine v PPD souboru, kter\u00fd \u00fato\u010dn\u00edk m\u016f\u017ee p\u0159edat d\u00edky v\u00fd\u0161e popsan\u00e9 zranitelnosti v cups-browsed. N\u00e1sledn\u011b jsou shellov\u00e9 p\u0159\u00edkazy uveden\u00e9 v parametru FoomaticRIPCommandLine vykon\u00e1v\u00e1ny tak, jak jsou, bez ohledu na to, \u017ee parametr m\u016f\u017ee b\u00fdt nastaven extern\u011b. Nap\u0159\u00edklad pro z\u00e1pis do souboru \/tmp\/VULNERABLE lze uv\u00e9st \u201eFoomaticRIPCommandLine: \u201eecho 1 &gt; \/tmp\/VULNERABLE\u201c.\n<li class=\"l\"> CVE-2024-47175 \u2014 zranitelnost v libppd, zp\u016fsoben\u00e1 nedostatkem kontroly spr\u00e1vnosti hodnoty ppdCreatePPDFromIPP2 p\u0159i z\u00e1pisu IPP atribut\u016f do do\u010dasn\u00e9ho PPD souboru. Tento probl\u00e9m umo\u017e\u0148uje m\u00edsto toho do v\u00fdsledn\u00e9ho PPD souboru vkl\u00e1dat libovoln\u00e1 data prost\u0159ednictv\u00edm p\u0159ipojen\u00ed atribut\u016f s pou\u017eit\u00edm znaku pro nov\u00fd \u0159\u00e1dek. Nap\u0159\u00edklad je mo\u017en\u00e9 obch\u00e1zet kontrolu a spolu s povolen\u00fdmi atributy vkl\u00e1dat atribut FoomaticRIPCommandLine pro zneu\u017eit\u00ed v\u00fd\u0161e uveden\u00e9 zranitelnosti v cups-filters.\n<li class=\"l\"> CVE-2024-47076 \u2014 zranitelnost v knihovn\u011b libcupsfilters z bal\u00ed\u010dku cups-filters, kter\u00e1 souvis\u00ed s absenc\u00ed kontroly hodnot cfGetPrinterAttributes5 vracen\u00fdch extern\u00edm IPP serverem, co\u017e \u00fato\u010dn\u00edkovi umo\u017e\u0148uje prov\u00e1d\u011bt zpracov\u00e1n\u00ed libovoln\u00fdch IPP atribut\u016f v jin\u00fdch subsyst\u00e9mech CUPS, nap\u0159\u00edklad p\u0159i generov\u00e1n\u00ed PPD soubor\u016f.      <\/ul>\n<p>\u00datokov\u00fd sc\u00e9n\u00e1\u0159 na CUPS se skl\u00e1d\u00e1 z n\u00e1sleduj\u00edc\u00edch krok\u016f:    <\/p>\n<ul>\n<li class=\"l\"> Nasazen\u00ed vlastn\u00edho IPP serveru \u00fato\u010dn\u00edkem.\n<li class=\"l\"> Odesl\u00e1n\u00ed UDP paketu ob\u011bti s odkazem na tisk\u00e1rnu p\u0159ipojenou k b\u011b\u017e\u00edc\u00edmu \u00fato\u010dn\u00edkovu IPP serveru.\n<li class=\"l\"> Po obdr\u017een\u00ed tohoto paketu se syst\u00e9m ob\u011bti p\u0159ipojuje k \u00fato\u010dn\u00edkovu IPP serveru a \u017e\u00e1d\u00e1 o atributy tisk\u00e1rny.\n<li class=\"l\"> V reakci na \u017e\u00e1dost ob\u011bti IPP server \u00fato\u010dn\u00edka vrac\u00ed PPD soubor s atributy, mezi kter\u00fdmi je uveden atribut FoomaticRIPCommandLine. Tento atribut je p\u0159ipojen k jednomu z povolen\u00fdch atribut\u016f pomoc\u00ed znaku \u201e\n\u201c v jednom \u0159\u00e1dku (nap\u0159\u00edklad \u201ecupsPrivacyURI: \u201ehttps:\/\/www.google.com\/\n*FoomaticRIPCommandLine: \u201e), co\u017e umo\u017e\u0148uje obch\u00e1zet kontrolu a vede k ulo\u017een\u00ed FoomaticRIPCommandLine jako samostatn\u00e9ho atributu p\u0159i uchov\u00e1v\u00e1n\u00ed p\u0159ijat\u00fdch dat do do\u010dasn\u00e9ho souboru.\n<li class=\"l\"> V d\u016fsledku zpracov\u00e1n\u00ed p\u0159edan\u00fdch atribut\u016f v syst\u00e9mu ob\u011bti je vytvo\u0159en PPD soubor: \u2026 *cupsSNMPSupplies: False *cupsLanguages: \u201een\u201c *cupsPrivacyURI: \u201ehttps:\/\/www.google.com\/\u201c *FoomaticRIPCommandLine: \u201eecho 1 &gt; \/tmp\/I_AM_VULNERABLE\u201c *cupsFilter2 : \u201eapplication\/pdf application\/vnd.cups-postscript 0 foomatic-rip\u201c *cupsSingleFile: True *cupsFilter2: \u201eapplication\/vnd.cups-pdf application\/pdf 0 -\u201c \u2026\n<li class=\"l\"> P\u0159i tisknut\u00ed na podvr\u017eenou \u00fato\u010dn\u00edkem tisk\u00e1rnu v syst\u00e9mu ob\u011bti bude provedena p\u0159\u00edkaz \u201eecho 1 &gt; \/tmp\/I_AM_VULNERABLE\u201c.   <\/ul>\n<p>          <center>  <video controls=\"\" style=\"width: 700px; height: 600px; max-width:100%\"><source src=\"https:\/\/www.evilsocket.net\/images\/2024\/cups1\/exploit.mp4\" type=\"video\/mp4\"><\/video>  <\/center>      <\/p>\n<p>V\u00fdzkumn\u00edk, kter\u00fd odhalil zranitelnosti, poznamen\u00e1v\u00e1, \u017ee na vyhled\u00e1v\u00e1n\u00ed zranitelnosti pot\u0159eboval n\u011bkolik dn\u00ed, ale pot\u00e9 n\u00e1sledovala dlouh\u00e1 22denn\u00ed korespondence s v\u00fdvoj\u00e1\u0159i projektu OpenPrinting, v n\u00ed\u017e se sna\u017eil je p\u0159esv\u011bd\u010dit o d\u016fle\u017eitosti probl\u00e9mu a nutnosti p\u0159\u00edpravy z\u00e1plat. Diskuze se utopila v sporech o tom, zda je v\u016fbec nutn\u00e9 p\u0159\u00edslu\u0161n\u00e9 probl\u00e9my opravovat, a situaci se poda\u0159ilo zvr\u00e1tit a\u017e vzestupem ve\u0159ejn\u00e9ho pov\u011bdom\u00ed o odhalen\u00ed kritick\u00e9ho probl\u00e9mu. Zaj\u00edmav\u00e9 bylo tak\u00e9 zjeven\u00ed \u00fanik\u016f informac\u00ed, kdy d\u016fv\u011brn\u00e9 zpr\u00e1vy a exploity p\u0159edan\u00e9 CERT se objevily na f\u00f3ru breachforums.st v otev\u0159en\u00e9m p\u0159\u00edstupu, a to navzdory vyhl\u00e1\u0161en\u00e9mu embargu na zve\u0159ejn\u011bn\u00ed informac\u00ed.<br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=61942\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0421\u0438\u043c\u043e\u043d\u0435 \u041c\u0430\u0440\u0433\u0430\u0440\u0438\u0442\u0435\u043b\u043b\u0438 (Simone Margaritelli), \u0430\u0432\u0442\u043e\u0440 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0430 OpenSnitch \u0438 \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440\u0430 bettercap, \u0434\u043e\u0441\u0440\u043e\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0440\u0430\u043d\u0435\u0435 \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0442\u044c \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u044b GNU\/Linux, Solaris, FreeBSD \u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 BSD-\u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u0418\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u044f \u0431\u044b\u043b\u0430 \u0437\u0430\u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 6 \u043e\u043a\u0442\u044f\u0431\u0440\u044f, \u043d\u043e \u0438\u0437-\u0437\u0430 \u0443\u0442\u0435\u0447\u043a\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0448\u043b\u043e\u0441\u044c \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0442\u044c \u0434\u043e\u0441\u0440\u043e\u0447\u043d\u043e, \u0434\u043e \u0442\u043e\u0433\u043e \u043a\u0430\u043a \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 \u0443\u0441\u043f\u0435\u0435\u0442 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0430\u043a\u0435\u0442\u043e\u0432. [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-119956","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0421\u0438\u043c\u043e\u043d\u0435 \u041c\u0430\u0440\u0433\u0430\u0440\u0438\u0442\u0435\u043b\u043b\u0438 (Simone Margaritelli), \u0430\u0432\u0442\u043e\u0440 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0430 OpenSnitch \u0438 \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440\u0430 bettercap, \u0434\u043e\u0441\u0440\u043e\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0440\u0430\u043d\u0435\u0435 \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/news\/udalyonno-ekspluatiruemye-uyazvimosti-v-servere-pechati-cups\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u043f\u0435\u0447\u0430\u0442\u0438 CUPS | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0421\u0438\u043c\u043e\u043d\u0435 \u041c\u0430\u0440\u0433\u0430\u0440\u0438\u0442\u0435\u043b\u043b\u0438 (Simone Margaritelli), \u0430\u0432\u0442\u043e\u0440 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0430 OpenSnitch \u0438 \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440\u0430 bettercap, \u0434\u043e\u0441\u0440\u043e\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0440\u0430\u043d\u0435\u0435 \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/news\/udalyonno-ekspluatiruemye-uyazvimosti-v-servere-pechati-cups\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2024-09-27T07:43:04+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2024-09-27T07:43:04+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vzd\u00e1len\u011b zneu\u017eiteln\u00e9 zranitelnosti v tiskov\u00e9m serveru CUPS | ProHoster","description":"Simone Margaritelli, autor firewallu OpenSnitch a s\u00ed\u0165ov\u00e9ho analyz\u00e1toru bettercap, p\u0159ed\u010dasn\u011b odhalil informace o d\u0159\u00edve ozn\u00e1men\u00fdch kritick\u00fdch zranitelnostech, kter\u00e9 umo\u017e\u0148uj\u00ed vzd\u00e1len\u00fd p\u0159\u00edstup.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/udalyonno-ekspluatiruemye-uyazvimosti-v-servere-pechati-cups","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u043f\u0435\u0447\u0430\u0442\u0438 CUPS | ProHoster","og:description":"\u0421\u0438\u043c\u043e\u043d\u0435 \u041c\u0430\u0440\u0433\u0430\u0440\u0438\u0442\u0435\u043b\u043b\u0438 (Simone Margaritelli), \u0430\u0432\u0442\u043e\u0440 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0430 OpenSnitch \u0438 \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440\u0430 bettercap, \u0434\u043e\u0441\u0440\u043e\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0440\u0430\u043d\u0435\u0435 \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/udalyonno-ekspluatiruemye-uyazvimosti-v-servere-pechati-cups","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-09-27T07:43:04+00:00","article:modified_time":"2024-09-27T07:43:04+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"119956","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 22:02:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 06:51:33","updated":"2026-02-09 22:02:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/119956","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=119956"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/119956\/revisions"}],"predecessor-version":[{"id":160371,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/119956\/revisions\/160371"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=119956"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=119956"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=119956"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}