P\u00e4rast jaanuari l\u00f5pus avastatud haavatavust, mis lubas siseneda root kasutajana ilma parooli kontrollimiseta, on GNU InetUtils'i telnetd serveris avastatud mitu viisi \u00f5iguste t\u00f5stmiseks, mis on osa 1999. aastal esinenud haavatavuse mitte t\u00e4ielikust k\u00f5rvaldamisest (CVE-1999-0073). <\/p>\n
Haavatavused tulenevad telnetd-s kliendi poolt serverisse keskkonnamuutujate edastamise v\u00f5imalusest ENVIRON valiku kaudu. Sellised keskkonnamuutujad seadistatakse ja neid k\u00e4sitletakse telnetd protsessi kontekstis ning edastatakse tema loodud alamprotsessidele, sealhulgas root \u00f5igustega k\u00e4ivitatavale protsessile \/bin\/login. Haavatavus CVE-1999-0073 v\u00f5imaldas telnet kliendil edastada keskkonnamuutujat LD_LIBRARY_PATH, mille seadistamine viis kasutaja m\u00e4\u00e4ratud jagatud teegi laadimisele login protsessi k\u00e4ivitamisel. Kui failide laadimine s\u00fcsteemi, mis toetab telnet-protokolli, on lubatud, v\u00f5ib r\u00fcndaja laadida spetsiaalselt loodud teegi ja korraldada selle laadimise root \u00f5igustega. <\/p>\n
GNU InetUtils'i telnetd-s leiti haav, mis k\u00f5rvaldatud ohtlike keskkonnamuutujate filtrimisega maskide kaudu «LD_», «LIBPATH», «ENV», «IFS» ja «_RLD_». Siiski j\u00e4i blokeerimata keskkonnamuutuja «CREDENTIALS_DIRECTORY», mida t\u00f6\u00f6deldakse k\u00e4ivitamisel \/usr\/bin\/login. Selle keskkonnamuutujaga sai kasutaja muuta autentimisseadete katalooge ja paigutada uude kataloogi faili login.noauth, mille v\u00e4\u00e4rtuseks on «yes», mis aktiveerib sisselogimise ilma paroolita (sarnane protsessile login «-f» lipu edastamisega). See konfiguratsioon kehtib k\u00f5igi kasutajate, sealhulgas rooti kohta. <\/p>\n
R\u00fcnnak seisneb selles, et mitteprivileegitud kasutaja loob oma kodukataloogis alamkatalooge, laadib sinna faili login.noauth ja proovib sisse logida keskkonnamuutuja «CREDENTIALS_DIRECTORY=loodud kataloog» seadistamisega ning edastades keskkonnamuutujat «USER=root» (telnetis on automaatse \u00fchendamise re\u017eiim, kus kasutajanimi v\u00f5etakse mitte k\u00e4surealt, vaid edastatakse keskkonnamuutujaga USER). N\u00e4ide eksploidist. <\/p>\n
Leiti v\u00e4lja veel \u00fcks v\u00f5imalus root-juurdep\u00e4\u00e4su saamiseks telnetd kaudu, mis on seotud keskkonnamuutujate OUTPUT_CHARSET ja LANGUAGE manipuleerimisega, mida t\u00f6\u00f6tleb GNU gettext raamatukogu, ning keskkonnamuutujaga GCONV_PATH, mida kasutatakse glibc-s. Seades keskkonnamuutujad OUTPUT_CHARSET ja LANGUAGE, saab r\u00fcndaja aktiveerida gettext funktsionaalsuse s\u00fcmbolite kodeeringu konverteerimiseks, kutsudes esile funktsiooni iconv_open(). Omakorda arvutatakse funktsiooni iconv_open() t\u00e4itmisel gconv-modules konfiguratsioonifaili laadimisel tee GCONV_PATH keskkonnamuutujat arvestades. Faili gconv-modules asendamise kaudu on v\u00f5imalik korraldada enda jagatud raamatukogu laadimist lokaliseeritud stringi v\u00e4ljastamise ajal login protsessi kaudu. <\/p>\n
CVE-ID-dele, mida on t\u00e4histatud, ei ole veel m\u00e4\u00e4ratud. Kaitsemeetodina kaalutakse lubatud v\u00e4\u00e4rtuste valge nimekirja (\"TERM\", \"DISPLAY\", \"USER\", \"LOGNAME\" ja \"POSIXLY_CORRECT\"), blokeerides k\u00f5ik muud keskkonnamuutujad, sarnaselt sellele, kuidas keskkonnamuutujatega t\u00f6\u00f6tatakse OpenSSH-s. Haavatavused on kinnitatud GNU InetUtils paketis, rakenduses serverile<\/a> telnetd, mis tarnib Debianis, Ubuntu ja tuletatud distributsioonides. GNU InetUtilsi jaoks pole parandusi veel saadaval. Rocky Linux 9 toob kaasa muudetud telnetd, mis ei ole haavatav, kus ohtlike keskkonnamuutujate filtreerimise asemel on kasutusele v\u00f5etud valge nimekiri. Valge nimekirja filtreerimine on samuti rakendatud FreeBSD telnetd-s. OpenBSD telnetd eemaldati s\u00fcsteemist 2005. aastal. \u0421\u043b\u0435\u0434\u043e\u043c \u0437\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432 \u043a\u043e\u043d\u0446\u0435 \u044f\u043d\u0432\u0430\u0440\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0432\u0448\u0435\u0439 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c\u0441\u044f \u043f\u043e\u0434 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c root \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0430\u0440\u043e\u043b\u044f, \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 telnetd \u0438\u0437 \u043d\u0430\u0431\u043e\u0440\u0430 GNU InetUtils \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u0432 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0441\u0442\u0430\u0432\u0448\u0438\u0445 \u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435\u043c \u043d\u0435\u043f\u043e\u043b\u043d\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 1999 \u0433\u043e\u0434\u0443 (CVE-1999-0073). \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0437\u0432\u0430\u043d\u044b \u043d\u0430\u043b\u0438\u0447\u0438\u0435\u043c \u0432 telnetd \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u043c \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u043e\u043f\u0446\u0438\u0438 ENVIRON. \u041f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-162791","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Uute haavatavuste seeria telnetd-s, mis v\u00f5imaldavad saada root-privil\u00e8ge s\u00fcsteemis | ProHoster","description":"P\u00e4rast jaanuari l\u00f5pus tuvastatud haavatavuse, mis v\u00f5imaldas root-kasutajana siseneda ilma parooli kontrollita, on GNU InetUtils telnetd-s tuvastatud mitmeid viise oma privileegide t\u00f5stmiseks, mis tulenevad haavatavuse mittet\u00e4ielikust k\u00f5rvaldamisest 1999. aastal (CVE-1999-0073). Haavatavused on p\u00f5hjustatud telnetd-s olemas olevast v\u00f5imalusest edastada klientide keskkonnamuutujaid serverisse ENVIRON optsiooni abil. Sellised muutujaid","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/seriya-novyh-uyazvimostej-v-telnetd-pozvolyayushhih-poluchit-root-privilegii-v-sisteme","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0421\u0435\u0440\u0438\u044f \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 telnetd, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 | ProHoster","og:description":"\u0421\u043b\u0435\u0434\u043e\u043c \u0437\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432 \u043a\u043e\u043d\u0446\u0435 \u044f\u043d\u0432\u0430\u0440\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0432\u0448\u0435\u0439 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c\u0441\u044f \u043f\u043e\u0434 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c root \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0430\u0440\u043e\u043b\u044f, \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 telnetd \u0438\u0437 \u043d\u0430\u0431\u043e\u0440\u0430 GNU InetUtils \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u0432 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0441\u0442\u0430\u0432\u0448\u0438\u0445 \u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435\u043c \u043d\u0435\u043f\u043e\u043b\u043d\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 1999 \u0433\u043e\u0434\u0443 (CVE-1999-0073). \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0437\u0432\u0430\u043d\u044b \u043d\u0430\u043b\u0438\u0447\u0438\u0435\u043c \u0432 telnetd \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u043c \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u043e\u043f\u0446\u0438\u0438 ENVIRON. \u041f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/seriya-novyh-uyazvimostej-v-telnetd-pozvolyayushhih-poluchit-root-privilegii-v-sisteme","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-02-25T15:11:54+00:00","article:modified_time":"2026-02-25T15:11:54+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"162791","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-25 15:12:53","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-25 15:11:55","updated":"2026-02-25 15:12:53"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/162791","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=162791"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/162791\/revisions"}],"predecessor-version":[{"id":165657,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/162791\/revisions\/165657"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=162791"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=162791"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=162791"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"