{"id":119956,"date":"2024-09-27T09:43:04","date_gmt":"2024-09-27T07:43:04","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/udalyonno-ekspluatiruemye-uyazvimosti-v-servere-pechati-cups"},"modified":"2024-09-27T09:43:04","modified_gmt":"2024-09-27T07:43:04","slug":"udalyonno-ekspluatiruemye-uyazvimosti-v-servere-pechati-cups","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/udalyonno-ekspluatiruemye-uyazvimosti-v-servere-pechati-cups","title":{"rendered":"Kaugt\u00f6\u00f6deldavad haavatavused CUPS-i printiserveris","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Simone Margaritelli, OpenSnitchi tulem\u00fc\u00fcr autor ja bettercap'i v\u00f5rguanal\u00fc\u00fctik, avaldas enne aega teavet varakult kuulutatud kriitiliste haavatavuste kohta, mis v\u00f5imaldavad kaugseadmest r\u00fcnnata GNU\/Linuxi, Solaris, FreeBSD ja teisi BSD-s\u00fcsteeme. Algne avaldamine oli kavandatud 6. oktoobriks, kuid teabe lekkimise t\u00f5ttu tuli andmed varakult avaldada, enne kui enamik levitusi j\u00f5uab pakettide uuendamiseks ette valmistada. Haavatavused puudutavad CUPS-i printiservert ja v\u00f5imaldavad kaugseadmest autentimata koodi t\u00e4itmist s\u00fcsteemis.    <\/p>\n<p>Probleemi uurija on valmistanud ette t\u00f6\u00f6protot\u00fc\u00fcbi exploiti jaoks, mis kasutab mitme haavatavuse kombinatsiooni ja v\u00f5imaldab kaugjuhtimise teel t\u00e4ita koodi CUPS-i printimist\u00f6\u00f6tluse protsessi \u00f5igustes (tavaliselt kasutaja \u201elp\u201d). Exploit v\u00f5imaldab m\u00e4rkamatult asendada kasutaja printeri parameetreid v\u00f5i lisada uue printeri, mis on \u00fchendatud r\u00fcnnataja IPP-serveriga, mis edastab spetsiaalset PPD-printeri kirjeldust. Selle PPD t\u00f6\u00f6tlemine tr\u00fckiprotsessi k\u00e4ivitamisel viib r\u00fcndaja koodi t\u00e4itmiseni (on vajalik, et ohver algataks printimise vale v\u00f5i r\u00fcndaja asendatud printerile).        <\/p>\n<p>R\u00fcnnakutele on vastuv\u00f5tlikud s\u00fcsteemid, millel on <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/et\/server\/dts-prohoster\/\"   title=\"serveriga\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"3090\">serveriga<\/a> CUPS-i printimine ja t\u00f6\u00f6tav cups-browsed protsess, mis aktsepteerib v\u00f5rgu\u00fchendusi 631. pordil (UDP). R\u00fcnnakut saab teostada ka kohalikus v\u00f5rgus, kus ligip\u00e4\u00e4s on <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/et\/server\/dts-shicago\/\"   title=\"serverile\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"2943\">serverile<\/a> printimisel kasutatakse protokolle zeroconf, mDNS v\u00f5i DNS-SD. Haavatavad on vaid konfiguratsioonid, kus cups-browsed konfiguratsioonifailis \/etc\/cups\/cups-browsed.conf on parameetri BrowseRemoteProtocols v\u00e4\u00e4rtuseks m\u00e4\u00e4ratud \u201ecups\u201d. Systemd p\u00f5histes distributsioonides saab kontrollida cups-browsed teenuse kasutamist k\u00e4suga \u201esudo systemctl status cups-browsed\u201d.          <\/p>\n<p>Haavatavus ilmneb k\u00f5igis CUPS-i p\u00f5histes printimiss\u00fcsteemides, millel on haavatavad versioonid pakettidest cups-filters, libcupsfilters, libppd ja cups-browsed. Parandused on saadaval seni vaid plaastritena (1, 2, 3) \u2014 hetkel on haavatavad versioonid cups-filters 2.0.1, libcupsfilters 2.1b1, libppd 2.1b1 ja cups-browsed 2.0.1. Jagatud distributsioonides j\u00e4\u00e4b probleem lahendamata; v\u00e4rskenduste \u00fcle on v\u00f5imalik j\u00e4lgida j\u00e4rgmistelt lehtedelt: Debian, Ubuntu, RHEL, SUSE\/openSUSE, Fedora, Arch, FreeBSD. \u00dcks lahendus kaitseks enne v\u00e4rskenduse installimist on sulgeda UDP-port 631 v\u00e4listesse v\u00f5rkudesse, keelata cups-browsed teenus v\u00f5i muuta parameeter BrowseRemoteProtocols v\u00e4\u00e4rtuseks \u201enone\u201d.      <\/p>\n<p>Tuvastatud haavatavused:  <\/p>\n<ul>\n<li class=\"l\"> CVE-2024-47176 \u2014 haavatavus cups-browsed protsessis, mis loob v\u00f5rgusokli, mis aktsepteerib \u00fchendusi 631. porti, kinnitades k\u00f5ik olemasolevad s\u00fcsteemi v\u00f5rguliidesed ja aktsepteerides v\u00e4liseid IPP-p\u00e4ringuid \u201eGet-Printer-Attributes\u201d. Selle teenusega manipuleerimise kaudu on v\u00f5imalik lisada s\u00fcsteemi printer, mida r\u00fcndaja kontrollib, ja ekspluateerida, edastades PPD-konfiguratsiooni, et v\u00e4\u00e4rkasutada teisi CUPS-i komponente.\n<li class=\"l\"> CVE-2024-47177 \u2014 haavatavus foomatic-rip t\u00f6\u00f6tlija osas, mis kuulub cups-filters paketti, mis v\u00f5imaldab koodi t\u00e4itmist, edastades parameetri FoomaticRIPCommandLine PPD-failis, mille r\u00fcndaja v\u00f5ib edastada eelnevas osas kirjeldatud cups-browsed haavatavuse kaudu. Parameetris FoomaticRIPCommandLine toodud shell-kommandod t\u00e4idetakse otse, arvestamata, et parameetri v\u00f5ib seada ka kolmas osapool. N\u00e4iteks faili kirjutamiseks \/tmp\/VULNERABLE v\u00f5ib m\u00e4\u00e4rata \u201eFoomaticRIPCommandLine: \u201eecho 1 &gt; \/tmp\/VULNERABLE\u201d.\n<li class=\"l\"> CVE-2024-47175 \u2014 haavatavus libppd-s, mis tuleneb ppdCreatePPDFromIPP2 v\u00e4\u00e4rtuse vale kontrollimise puudumisest IPP-atribuutide kirjutamisel ajutisse PPD-faili. Probleem lubab asendada juhuslikke andmeid tulemuseks olevasse PPD-faili, kinnitades atribuudid, kasutades rea \u00fclemineku s\u00fcmbolit. N\u00e4iteks on v\u00f5imalik kontroll m\u00f6\u00f6da minna ja lubatud atribuutide k\u00f5rval edastada atribuut FoomaticRIPCommandLine, et v\u00e4\u00e4rkasutada eelpool nimetatud haavatavust cups-filters.\n<li class=\"l\"> CVE-2024-47076 \u2014 haavatavus libcupsfilters raamatukogus cups-filters paketist, seondub cfGetPrinterAttributes5 v\u00e4\u00e4rtuste kontrollimise puudumisega, mis tagastatakse v\u00e4liselt IPP-serverilt, mis annab r\u00fcndajale v\u00f5imaluse korraldada juhuslike IPP-atribuutide t\u00f6\u00f6tlemist teiste CUPS-i all\u00fcksustes, n\u00e4iteks PPD-failide genereerimisel.      <\/ul>\n<p>R\u00fcnnaku stsenaarium CUPS-i suunatakse j\u00e4rgmistele sammudele:    <\/p>\n<ul>\n<li class=\"l\"> R\u00fcndaja seab \u00fcles oma IPP-serveri.\n<li class=\"l\"> Ohvrile saadetakse UDP-pakett, mis sisaldab viidet printerile, mis on seotud k\u00e4ivitatud r\u00fcndaja IPP-serveriga.\n<li class=\"l\"> P\u00e4rast selle paketi vastuv\u00f5tmist \u00fchendab ohvri s\u00fcsteem end r\u00fcndaja IPP-serveriga ja k\u00fcsib printeri atribuutide kohta.\n<li class=\"l\"> K\u00fcsimusele vastates tagastab r\u00fcndaja IPP-server PPD-faili atribuutidega, mille seas on atribuut FoomaticRIPCommandLine. Antud atribuut lisatakse \u00fchele lubatud atribuudist, kasutades reaalset \u00fclemineku s\u00fcmbolit (n\u00e4iteks \u201ecupsPrivacyURI: \u201ehttps:\/\/www.google.com\/\n*FoomaticRIPCommandLine: \u201e), mis v\u00f5imaldab kontrollist m\u00f6\u00f6da minna ja viib FoomaticRIPCommandLine salvestamiseni kui eraldi atribuuti ajutisse faili andmete salvestamisel.\n<li class=\"l\"> K\u00e4ideldud atribuutide t\u00f6\u00f6tlemise tulemusena luuakse ohvri s\u00fcsteemis PPD-fail: ... *cupsSNMPSupplies: False *cupsLanguages: \u201een\u201d *cupsPrivacyURI: \u201ehttps:\/\/www.google.com\/\u201d *FoomaticRIPCommandLine: \u201eecho 1 &gt; \/tmp\/I_AM_VULNERABLE\u201d *cupsFilter2 : \u201eapplication\/pdf application\/vnd.cups-postscript 0 foomatic-rip\u201d *cupsSingleFile: True *cupsFilter2: \u201eapplication\/vnd.cups-pdf application\/pdf 0 -\u201d ...\n<li class=\"l\"> K\u00e4esoleva r\u00fcndaja printeri kaudu printimise k\u00e4igus ohvri s\u00fcsteemis t\u00e4idetakse k\u00e4sk \u201eecho 1 &gt; \/tmp\/I_AM_VULNERABLE\u201d.   <\/ul>\n<p>          <center>  <video controls=\"\" style=\"width: 700px; height: 600px; max-width:100%\"><source src=\"https:\/\/www.evilsocket.net\/images\/2024\/cups1\/exploit.mp4\" type=\"video\/mp4\"><\/video>  <\/center>      <\/p>\n<p>Vigu leidnud uurija m\u00e4rgib, et haavatavuste leidmine v\u00f5ttis tal paar p\u00e4eva, kuid seej\u00e4rel j\u00e4rgnes 22 p\u00e4eva kestnud kirjavahetus OpenPrinting projekti arendajatega, p\u00fc\u00fcdes veenda neid probleemi olulisuses ja vajalikus plaastrite ettevalmistamises. Arutelu takerdus vaidlustesse selle \u00fcle, kas neid probleeme \u00fcldse tuleks parandada, ja olukorra \u00f5nnestus muuta alles public hype t\u00f5stmise kaudu, et tuua esile kriitiline probleem. Huvitav on ka teabe lekkimine, mille k\u00e4igus esitatud CERT-ile konfidentsiaalne aruanne ja eksploit j\u00f5udsid avalikult www.breachforums.st foorumisse, hoolimata teabe avalikustamise embargo olemasolust.<br \/>\n<br \/>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=61942\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0421\u0438\u043c\u043e\u043d\u0435 \u041c\u0430\u0440\u0433\u0430\u0440\u0438\u0442\u0435\u043b\u043b\u0438 (Simone Margaritelli), \u0430\u0432\u0442\u043e\u0440 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0430 OpenSnitch \u0438 \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440\u0430 bettercap, \u0434\u043e\u0441\u0440\u043e\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0440\u0430\u043d\u0435\u0435 \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0442\u044c \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u044b GNU\/Linux, Solaris, FreeBSD \u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 BSD-\u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u0418\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u044f \u0431\u044b\u043b\u0430 \u0437\u0430\u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 6 \u043e\u043a\u0442\u044f\u0431\u0440\u044f, \u043d\u043e \u0438\u0437-\u0437\u0430 \u0443\u0442\u0435\u0447\u043a\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0448\u043b\u043e\u0441\u044c \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0442\u044c \u0434\u043e\u0441\u0440\u043e\u0447\u043d\u043e, \u0434\u043e \u0442\u043e\u0433\u043e \u043a\u0430\u043a \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 \u0443\u0441\u043f\u0435\u0435\u0442 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0430\u043a\u0435\u0442\u043e\u0432. [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-119956","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0421\u0438\u043c\u043e\u043d\u0435 \u041c\u0430\u0440\u0433\u0430\u0440\u0438\u0442\u0435\u043b\u043b\u0438 (Simone Margaritelli), \u0430\u0432\u0442\u043e\u0440 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0430 OpenSnitch \u0438 \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440\u0430 bettercap, \u0434\u043e\u0441\u0440\u043e\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0440\u0430\u043d\u0435\u0435 \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0442\u044c \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u044b GNU\/Linux, Solaris, FreeBSD \u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 BSD-\u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u0418\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u044f \u0431\u044b\u043b\u0430 \u0437\u0430\u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 6 \u043e\u043a\u0442\u044f\u0431\u0440\u044f, \u043d\u043e \u0438\u0437-\u0437\u0430 \u0443\u0442\u0435\u0447\u043a\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0448\u043b\u043e\u0441\u044c \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0442\u044c \u0434\u043e\u0441\u0440\u043e\u0447\u043d\u043e, \u0434\u043e \u0442\u043e\u0433\u043e \u043a\u0430\u043a \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 \u0443\u0441\u043f\u0435\u0435\u0442 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0430\u043a\u0435\u0442\u043e\u0432.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/udalyonno-ekspluatiruemye-uyazvimosti-v-servere-pechati-cups\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u043f\u0435\u0447\u0430\u0442\u0438 CUPS | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0421\u0438\u043c\u043e\u043d\u0435 \u041c\u0430\u0440\u0433\u0430\u0440\u0438\u0442\u0435\u043b\u043b\u0438 (Simone Margaritelli), \u0430\u0432\u0442\u043e\u0440 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0430 OpenSnitch \u0438 \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440\u0430 bettercap, \u0434\u043e\u0441\u0440\u043e\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0440\u0430\u043d\u0435\u0435 \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0442\u044c \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u044b GNU\/Linux, Solaris, FreeBSD \u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 BSD-\u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u0418\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u044f \u0431\u044b\u043b\u0430 \u0437\u0430\u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 6 \u043e\u043a\u0442\u044f\u0431\u0440\u044f, \u043d\u043e \u0438\u0437-\u0437\u0430 \u0443\u0442\u0435\u0447\u043a\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0448\u043b\u043e\u0441\u044c \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0442\u044c \u0434\u043e\u0441\u0440\u043e\u0447\u043d\u043e, \u0434\u043e \u0442\u043e\u0433\u043e \u043a\u0430\u043a \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 \u0443\u0441\u043f\u0435\u0435\u0442 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0430\u043a\u0435\u0442\u043e\u0432.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/udalyonno-ekspluatiruemye-uyazvimosti-v-servere-pechati-cups\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2024-09-27T07:43:04+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2024-09-27T07:43:04+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Kaugelt ekspluateeritavad haavatavused CUPS-i printimisteenuses | ProHoster","description":"Simone Margaritelli, OpenSnitchi tulem\u00fc\u00fcride ja bettercapi v\u00f5rguanal\u00fcsaatori autor, avaldas enne t\u00e4htaega teavet varem kuulutatud kriitiliste haavatavuste kohta, mis v\u00f5imaldavad kaugelt r\u00fcnnata GNU\/Linux, Solaris, FreeBSD ja mitmeid teisi BSD-s\u00fcsteeme. Algne avaldamine oli planeeritud 6. oktoobriks, kuid informatsiooni lekke t\u00f5ttu pidi info enne t\u00e4htaega avaldama, enne kui enamik jaotusi j\u00f5uab pakettide uuendusi ette valmistada.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/udalyonno-ekspluatiruemye-uyazvimosti-v-servere-pechati-cups","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u043f\u0435\u0447\u0430\u0442\u0438 CUPS | ProHoster","og:description":"\u0421\u0438\u043c\u043e\u043d\u0435 \u041c\u0430\u0440\u0433\u0430\u0440\u0438\u0442\u0435\u043b\u043b\u0438 (Simone Margaritelli), \u0430\u0432\u0442\u043e\u0440 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0430 OpenSnitch \u0438 \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440\u0430 bettercap, \u0434\u043e\u0441\u0440\u043e\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0440\u0430\u043d\u0435\u0435 \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0442\u044c \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u044b GNU\/Linux, Solaris, FreeBSD \u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 BSD-\u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u0418\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u044f \u0431\u044b\u043b\u0430 \u0437\u0430\u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 6 \u043e\u043a\u0442\u044f\u0431\u0440\u044f, \u043d\u043e \u0438\u0437-\u0437\u0430 \u0443\u0442\u0435\u0447\u043a\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0448\u043b\u043e\u0441\u044c \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0442\u044c \u0434\u043e\u0441\u0440\u043e\u0447\u043d\u043e, \u0434\u043e \u0442\u043e\u0433\u043e \u043a\u0430\u043a \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 \u0443\u0441\u043f\u0435\u0435\u0442 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0430\u043a\u0435\u0442\u043e\u0432.","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/udalyonno-ekspluatiruemye-uyazvimosti-v-servere-pechati-cups","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-09-27T07:43:04+00:00","article:modified_time":"2024-09-27T07:43:04+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"119956","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 22:02:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 06:51:33","updated":"2026-02-09 22:02:19"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/119956","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=119956"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/119956\/revisions"}],"predecessor-version":[{"id":160371,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/119956\/revisions\/160371"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=119956"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=119956"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=119956"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}