{"id":94397,"date":"2020-09-16T13:42:09","date_gmt":"2020-09-16T11:42:09","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-ftpd-iz-freebsd-pozvolyavshaya-poluchit-root-dostup-pri-ispolzovanii-ftpchroot"},"modified":"2020-09-16T13:42:09","modified_gmt":"2020-09-16T11:42:09","slug":"uyazvimost-v-ftpd-iz-freebsd-pozvolyavshaya-poluchit-root-dostup-pri-ispolzovanii-ftpchroot","status":"publish","type":"post","link":"https:\/\/prohoster.info\/es\/blog\/news\/uyazvimost-v-ftpd-iz-freebsd-pozvolyavshaya-poluchit-root-dostup-pri-ispolzovanii-ftpchroot","title":{"rendered":"Vulnerabilidad en ftpd de FreeBSD que permit\u00eda obtener acceso root al usar ftpchroot","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>En el servidor ftpd incluido en FreeBSD <noindex><a rel=\"nofollow\" href=\"https:\/\/www.mail-archive.com\/freebsd-announce@freebsd.org\/msg00994.html\">se ha detectado<\/a><\/noindex> se ha identificado una vulnerabilidad cr\u00edtica (CVE-2020-7468) que permite a los usuarios, restringidos a sus directorios personales mediante la opci\u00f3n ftpchroot, obtener acceso completo como root al sistema. <\/p>\n<p>El problema es causado por una combinaci\u00f3n de un error en la implementaci\u00f3n del mecanismo de aislamiento de usuario mediante la llamada chroot (donde se produc\u00eda un error no fatal durante los fallos en el cambio de uid o en la ejecuci\u00f3n de chroot y chdir, sin interrumpir la sesi\u00f3n) y la concesi\u00f3n a un usuario FTP autenticado de permisos suficientes para eludir la restricci\u00f3n del directorio ra\u00edz en el sistema de archivos. La vulnerabilidad no se manifiesta al acceder al servidor FTP en modo an\u00f3nimo o al iniciar sesi\u00f3n como usuario sin ftpchroot. El problema se ha solucionado en las actualizaciones 12.1-RELEASE-p10, 11.4-RELEASE-p4 y 11.3-RELEASE-p14.<\/p>\n<p>Adem\u00e1s, se han corregido en 12.1-RELEASE-p10, 11.4-RELEASE-p4 y 11.3-RELEASE-p14 otras tres vulnerabilidades:<\/p>\n<ul>\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/www.mail-archive.com\/freebsd-announce@freebsd.org\/msg00992.html\">CVE-2020-7467<\/a><\/noindex> \u2014 vulnerabilidad en el hipervisor Bhyve, que permite a un entorno invitado escribir informaci\u00f3n en \u00e1reas de memoria del entorno host y obtener acceso completo al sistema host. El problema es causado por la falta de restricci\u00f3n de acceso a las instrucciones del procesador que trabajan con direcciones f\u00edsicas del host, y se manifiesta solo en sistemas con CPU AMD.\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/www.mail-archive.com\/freebsd-announce@freebsd.org\/msg00993.html\">CVE-2020-24718<\/a><\/noindex> \u2014 vulnerabilidad en el hipervisor Bhyve, que permite a un atacante con privilegios de root dentro de entornos aislados mediante Bhyve ejecutar c\u00f3digo a nivel de n\u00facleo. El problema es causado por la falta de una adecuada restricci\u00f3n de acceso a las estructuras VMCS (Estructura de Control de M\u00e1quina Virtual) en sistemas con CPU Intel y VMCB (Virtual Machine Control Block).<br \/>\nCVE-2020-7464<\/p>\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/www.mail-archive.com\/freebsd-announce@freebsd.org\/msg00991.html\">\u2014 una vulnerabilidad en el controlador ure (Realtek RTL8152 y RTL8153 de Ethernet USB) que permite realizar spoofing de paquetes desde otros hosts o llevar a cabo la sustituci\u00f3n de paquetes en otras VLAN al enviar tramas grandes (mayores de 2048).<\/a><\/noindex> \u2014 vulnerabilidad en el controlador ure (USB Ethernet Realtek RTL8152 y RTL8153), que permite, a trav\u00e9s del env\u00edo de tramas grandes (m\u00e1s de 2048), realizar suplantaci\u00f3n de paquetes desde otros hosts o llevar a cabo la sustituci\u00f3n de paquetes en otras VLAN.\n<\/ul>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Fuente: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=53720\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412 \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u043e\u043c \u0432 \u0441\u043e\u0441\u0442\u0430\u0432\u0435 FreeBSD \u0441\u0435\u0440\u0432\u0435\u0440\u0435 ftpd \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2020-7468), \u0434\u0430\u044e\u0449\u0430\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c \u0441\u0432\u043e\u0438\u043c \u0434\u043e\u043c\u0430\u0448\u043d\u0438\u043c \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u043c \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u043e\u043f\u0446\u0438\u0438 ftpchroot, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 root-\u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0435\u043c \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u0432\u044b\u0437\u043e\u0432\u0430 chroot (\u043f\u0440\u0438 \u0441\u0431\u043e\u044f\u0445 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0441\u043c\u0435\u043d\u044b uid \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f chroot \u0438 chdir \u0432\u044b\u0434\u0430\u0432\u0430\u043b\u0430\u0441\u044c \u043d\u0435\u0444\u0430\u0442\u0430\u043b\u044c\u043d\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430, \u043d\u0435 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-94397","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412 \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u043e\u043c \u0432 \u0441\u043e\u0441\u0442\u0430\u0432\u0435 FreeBSD \u0441\u0435\u0440\u0432\u0435\u0440\u0435 ftpd \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2020-7468).\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/es\/blog\/news\/uyazvimost-v-ftpd-iz-freebsd-pozvolyavshaya-poluchit-root-dostup-pri-ispolzovanii-ftpchroot\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"es_ES\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 ftpd \u0438\u0437 FreeBSD, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0432\u0448\u0430\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u0434\u043e\u0441\u0442\u0443\u043f \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 ftpchroot | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412 \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u043e\u043c \u0432 \u0441\u043e\u0441\u0442\u0430\u0432\u0435 FreeBSD \u0441\u0435\u0440\u0432\u0435\u0440\u0435 ftpd \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2020-7468).\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/es\/blog\/news\/uyazvimost-v-ftpd-iz-freebsd-pozvolyavshaya-poluchit-root-dostup-pri-ispolzovanii-ftpchroot\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-09-16T11:42:09+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-09-16T11:42:09+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Vulnerabilidad en ftpd de FreeBSD que permit\u00eda obtener acceso root al usar ftpchroot | ProHoster","description":"\ud83e\udd47 Vulnerabilidad en ftpd de FreeBSD que permit\u00eda obtener acceso root al usar ftpchroot | ProHoster","canonical_url":"https:\/\/prohoster.info\/es\/blog\/news\/uyazvimost-v-ftpd-iz-freebsd-pozvolyavshaya-poluchit-root-dostup-pri-ispolzovanii-ftpchroot","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"es_ES","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 ftpd \u0438\u0437 FreeBSD, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0432\u0448\u0430\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u0434\u043e\u0441\u0442\u0443\u043f \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 ftpchroot | ProHoster","og:description":"\u0412 \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u043e\u043c \u0432 \u0441\u043e\u0441\u0442\u0430\u0432\u0435 FreeBSD \u0441\u0435\u0440\u0432\u0435\u0440\u0435 ftpd \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2020-7468).","og:url":"https:\/\/prohoster.info\/es\/blog\/news\/uyazvimost-v-ftpd-iz-freebsd-pozvolyavshaya-poluchit-root-dostup-pri-ispolzovanii-ftpchroot","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-16T11:42:09+00:00","article:modified_time":"2020-09-16T11:42:09+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"94397","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:27:34","updated":"2022-10-02 08:32:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts\/94397","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/comments?post=94397"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts\/94397\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/media?parent=94397"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/categories?post=94397"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/tags?post=94397"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}