{"id":117002,"date":"2024-07-06T21:43:04","date_gmt":"2024-07-06T19:43:04","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-darknete-poyavilas-informacziya-chto-grub-skomprometirovan"},"modified":"2024-07-06T21:43:04","modified_gmt":"2024-07-06T19:43:04","slug":"v-darknete-poyavilas-informacziya-chto-grub-skomprometirovan","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/v-darknete-poyavilas-informacziya-chto-grub-skomprometirovan","title":{"rendered":"DARKNET-is on teavet selle kohta, et GRUB on olnud ohustatud","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"DARKNET-is <\/p>\n

0day-haavatuse exploit on juba m\u00fc\u00fcgis vastavates foorumites.<\/p>\n

21. juunil ilmus \u00fchel foorumil teave Linuxi GRUB-k\u00e4ivitaja 0-p\u00e4eva haavatuse exploitimise m\u00fc\u00fcgist, mis v\u00f5imaldab kohalikku \u00f5iguste t\u00f5stmist (LPE).<\/p>\n

Dark Web Intelligence andmetel v\u00e4idab kurjategija, et on leidnud GRUB-is haavatuse, mis v\u00f5imaldab m\u00f6\u00f6da minna autentimise mehhanismidest ja saada root-i \u00f5igused s\u00fcsteemis.<\/p>\n

Tumefoorumi osalise 'Cas' s\u00f5nul puudutab haavatus GRUB-i \u2013 kriitilist komponenti enamiku Linuxi s\u00fcsteemide k\u00e4ivitamisprotsessis, mis v\u00f5imaldab r\u00fcndajatel installida varjatud ja p\u00fcsivat pahavara, mille avastamine ja k\u00f5rvaldamine v\u00f5ib olla \u00e4\u00e4rmiselt keeruline. Exploit m\u00fc\u00fcakse 90 tuhat dollarit.<\/p>\n

Oluline on m\u00e4rkida, et GRUB on minevikus olnud r\u00fcnnakute sihtm\u00e4rk. N\u00e4iteks 2015. aastal avastati CVE-2015-8370 haavatus, mis v\u00f5imaldas autentimist k\u00f5rvaldada, vajutades backspace-nuppu 28 korda kasutajanime sisestamise etapis GRUB-is. See haavatus m\u00f5jutas GRUB-i versioone 1.98 kuni 2.02 ja seda kasutati laialdaselt, kuni patch ilmus. 2020. aastal avastati veel \u00fcks haavatus \u2013 CVE-2020-10713, tuntud ka kui BootHole, mis v\u00f5imaldas pahavara installimist k\u00e4ivitamise k\u00e4igus.<\/p>\n

Peamised Linuxi distributsioonid, nagu Debian, RedHat ja Ubuntu, v\u00e4ljastasid kiiresti soovitusi ja patche eelnevate GRUB-i haavatuste jaoks ning t\u00f5en\u00e4oliselt teevad nad seda ka seekord, kuid probleemi s\u00fcvendab asjaolu, et haavatus on avastatud kurjategijate poolt, mitte eetiliste h\u00e4kkerite poolt. See t\u00e4hendab, et selle avastamine ja parandamine turvateadlaste poolt v\u00f5ib v\u00f5tta oluliselt kauem aega.<\/p>\n

Allikas: linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f 0day-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0436\u0435 \u043f\u0440\u043e\u0434\u0430\u0451\u0442\u0441\u044f \u043d\u0430 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0444\u043e\u0440\u0443\u043c\u0430\u0445. 21 \u0438\u044e\u043d\u044f \u043d\u0430 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u0444\u043e\u0440\u0443\u043c\u043e\u0432 \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e \u043f\u0440\u043e\u0434\u0430\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 GRUB-\u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 (LPE). \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Dark Web Intelligence, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u043d\u0430\u0448\u0451\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 GRUB, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 root \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":117003,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-117002","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Darknetis on ilmnenud teave, et GRUB on kompromiteeritud | ProHoster","description":"0day-haavatuse exploit on juba.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/v-darknete-poyavilas-informacziya-chto-grub-skomprometirovan","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 \u0434\u0430\u0440\u043a\u043d\u0435\u0442\u0435 \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f, \u0447\u0442\u043e GRUB \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d | ProHoster","og:description":"\u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f 0day-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0436\u0435.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/v-darknete-poyavilas-informacziya-chto-grub-skomprometirovan","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-07-06T19:43:04+00:00","article:modified_time":"2024-07-06T19:43:04+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"117002","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 03:39:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 03:39:19","updated":"2026-01-23 03:39:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/117002","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=117002"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/117002\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/117003"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=117002"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=117002"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=117002"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}