{"id":113601,"date":"2024-02-15T04:02:43","date_gmt":"2024-02-15T02:02:43","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/sczenarij-ataki-na-obrabotchik-ne-ustanovlennyh-prilozhenij-v-ubuntu"},"modified":"2024-02-15T04:02:43","modified_gmt":"2024-02-15T02:02:43","slug":"sczenarij-ataki-na-obrabotchik-ne-ustanovlennyh-prilozhenij-v-ubuntu","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/sczenarij-ataki-na-obrabotchik-ne-ustanovlennyh-prilozhenij-v-ubuntu","title":{"rendered":"R\u00fcnnaku stsenaarium rakendamata rakenduste t\u00f6\u00f6tleja jaoks Ubuntu-s","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Aqua Security teadlased on j\u00e4lginud v\u00f5imalust r\u00fcnnata Ubuntu kasutajaid, kasutades \"command-not-found\" k\u00e4sitleja rakenduse erip\u00e4ra, mis annab soovitusi, kui proovida k\u00e4ivitada s\u00fcsteemis puuduvat programmi. Probleem seisneb selles, et kui hinnatakse k\u00e4itatavaid k\u00e4ske, mis s\u00fcsteemis puuduvad, kasutab \"command-not-found\" soovituste valimiseks mitte ainult pakiandmeid ametlikest l\u00e4hteallikatest, vaid ka snap-pakke snapcraft.io kataloogist. <\/p>\n

Soovituste koostamisel, mis p\u00f5hinevad snapcraft.io kataloogi sisul, ei arvestata \"command-not-found\" k\u00e4sitleja paketi staatust ja see katab pakke, mis on lisatud katalooge kontrollimata kasutajate poolt. Nii v\u00f5ib r\u00fcndaja paigutada snapcraft.io paki, millel on varjatud pahatahtlik sisu ja mille nimi kattub olemasolevate DEB-pakkidega, mis algselt puuduvad programmirepertuaaris v\u00f5i valeprogrammide nimedega, mille nimed peegeldavad tavalisi tr\u00fckivigu ja vigu populaarsete utiliitide nimede sisestamisel. <\/p>\n

N\u00e4iteks v\u00f5ivad r\u00fcndajad paigutada paketid \"tracert\" ja \"tcpdamp\" lootes, et kasutaja teeb vea, kui ta sisestab utiliitide nimed \"traceroute\" ja \"tcpdump\", ja \"command-not-found\" soovitab installida r\u00fcndaja poolt snapcraft.io paigutatud pahatahtlikke pakette. Kasutaja ei pruugi petu m\u00e4rgata ja arvatakse, et s\u00fcsteem soovitab ainult kontrollitud pakette. R\u00fcndaja v\u00f5ib samuti paigutada snapcraft.io paki, mille nimi kattub olemasolevate deb-pakkidega, ning sel juhul annab \"command-not-found\" kaks soovitust deb ja snap installimiseks, ning kasutaja v\u00f5ib valida snap, arvestades, et see on turvalisem v\u00f5i olles meelitatud uuema versiooniga.

\"R\u00fcnnaku<\/center> <\/p>\n

Snap-formaadis rakendused, mille jaoks snapcraft.io-s lubatakse automaatne \u00fclevaatus, saavad t\u00f6\u00f6tada ainult isoleeritud keskkonnas (ilma isolatsioonita snap-paketid avaldatakse ainult p\u00e4rast k\u00e4sitsi \u00fclevaatust). R\u00fcndajale v\u00f5ib osutuda piisavaks t\u00f6\u00f6tamine isoleeritud keskkonnas, millel on v\u00f5rku juurdep\u00e4\u00e4s, n\u00e4iteks kr\u00fcptoraha kaevandamiseks, DDoS-r\u00fcnnakute tegemiseks v\u00f5i r\u00e4mpsposti saatmiseks. <\/p>\n

R\u00fcndaja v\u00f5ib kasutada ka pahatahtlike paketid, et v\u00e4ltida isoleerimist, n\u00e4iteks kasutades n\u00e4htamatuks j\u00e4\u00e4vaid haavatavusi tuumas ja isoleerimise tagamise mehhanismides, kaasates snap-liideseid v\u00e4listele ressurssidele juurdep\u00e4\u00e4suks (salajase heli- ja videosalvestuse jaoks) v\u00f5i klaviatuuri sisendi h\u00f5ivamiseks X11 protokolli kasutamisel (sandbox-\u00fcmbruses t\u00f6\u00f6tavate klahvilugejate loomiseks).
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Aqua Security \u043e\u0431\u0440\u0430\u0442\u0438\u043b\u0438 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 Ubuntu, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 «command-not-found», \u0432\u044b\u0434\u0430\u044e\u0449\u0435\u0433\u043e \u043f\u043e\u0434\u0441\u043a\u0430\u0437\u043a\u0443 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0439 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u043f\u0440\u0438 \u043e\u0446\u0435\u043d\u043a\u0435 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0442 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, «command-not-found» \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043f\u0440\u0438 \u0432\u044b\u0431\u043e\u0440\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0430\u043a\u0435\u0442\u044b \u0438\u0437 \u0448\u0442\u0430\u0442\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432, \u043d\u043e snap-\u043f\u0430\u043a\u0435\u0442\u044b […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":113602,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-113601","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47R\u00fcnnakuskeem rakendamata rakenduste k\u00e4sitlejale Ubuntu | ProHoster","description":"Aqua Security teadlased m\u00e4rkasid r\u00fcnnaku v\u00f5imalust Ubuntu jaotuse kasutajate vastu, kasutades \"command-not-found\" k\u00e4sitleja rakenduse omadusi, mis annab soovitusi.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/sczenarij-ataki-na-obrabotchik-ne-ustanovlennyh-prilozhenij-v-ubuntu","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0421\u0446\u0435\u043d\u0430\u0440\u0438\u0439 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u043d\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0432 Ubuntu | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Aqua Security \u043e\u0431\u0440\u0430\u0442\u0438\u043b\u0438 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 Ubuntu, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 "command-not-found", \u0432\u044b\u0434\u0430\u044e\u0449\u0435\u0433\u043e \u043f\u043e\u0434\u0441\u043a\u0430\u0437\u043a\u0443 \u0432.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/sczenarij-ataki-na-obrabotchik-ne-ustanovlennyh-prilozhenij-v-ubuntu","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-02-15T02:02:43+00:00","article:modified_time":"2024-02-15T02:02:43+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/113601","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=113601"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/113601\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/113602"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=113601"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=113601"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=113601"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}