{"id":38918,"date":"2019-10-31T22:26:45","date_gmt":"2019-10-31T19:26:45","guid":{"rendered":"https:\/\/prohoster.info\/blog\/uyazvimost-v-sudo-pozvolyayushhaya-povysit-privilegii-pri-ispolzovanii-spetsifichnyh-pravil\/"},"modified":"2019-10-31T22:26:45","modified_gmt":"2019-10-31T19:26:45","slug":"uyazvimost-v-sudo-pozvolyayushhaya-povysit-privilegii-pri-ispolzovanii-spetsifichnyh-pravil","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/uyazvimost-v-sudo-pozvolyayushhaya-povysit-privilegii-pri-ispolzovanii-spetsifichnyh-pravil","title":{"rendered":"Sudo haavatavus, mis v\u00f5imaldab privileegide t\u00f5stmist, kasutades spetsiifilisi reegleid.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Utilities Sudo<\/a><\/noindex>, which is used to organize the execution of commands on behalf of other users, tuvastatud<\/a><\/noindex> haavatavus<\/a><\/noindex> (CVE-2019-14287<\/a><\/noindex>), mis v\u00f5imaldab k\u00e4ivitada k\u00e4ske root \u00f5igustes, eeldusel, et sudoers seadetes on reeglid, kus kasutaja identifikaatori kontrollimise sektsioonis p\u00e4rast lubavat m\u00e4rks\u00f5na «ALL» on selge keeld root \u00f5igustes k\u00e4ivitamiseks («… (ALL, !root) …»). Vaikeseadetes ega jaotustes ei ilmne see haavatavus. <\/p>\n

Kui sudoers seadetes on lubatud, kuid \u00e4\u00e4rmiselt harva esinevad reeglid, mis lubavad teatud k\u00e4su t\u00e4itmist iga kasutaja UID identifikaatori, v\u00e4lja arvatud root, all, v\u00f5ib r\u00fcndaja, kellel on volitused selle k\u00e4su t\u00e4itmiseks, kehtestatud piirangut m\u00f6\u00f6da hiilida ja k\u00e4ivitada k\u00e4sk root \u00f5igustes. Piirangu m\u00f6\u00f6da hiilimiseks on piisav proovida k\u00e4ivitada seadetes n\u00e4idatud k\u00e4sku UID «-1» v\u00f5i «4294967295» all, mis viib selle t\u00e4itmiseni UID 0 \u00f5igustes. <\/p>\n

For example, if there is a rule in the settings that allows any user to execute the program \/usr\/bin\/id under any UID:<\/p>\n

myhost ALL = (ALL, !root) \/usr\/bin\/id<\/p>\n

v\u00f5i variant, mis lubab teostada ainult konkreetset kasutajat bob:<\/p>\n

myhost bob = (K\u00d5IK, !root) \/usr\/bin\/id<\/p>\n

Kasutaja saab k\u00e4ivitada «sudo -u ‘#-1’ id» ning utiliit \/usr\/bin\/id k\u00e4ivitatakse root \u00f5igustes, vaatamata selges\u00f5nalisele keelule seadetes. Probleem tuleneb erim\u00e4rkide «-1» v\u00f5i «4294967295» t\u00e4helepanuta j\u00e4tmisest, mis ei muuda UID-d, kuid kuna sudo iseenesest t\u00f6\u00f6tab juba root all, siis ilma UID vahetamiseta k\u00e4ivitatakse ka sihtk\u00e4sk root \u00f5igustes. <\/p>\n

SUSE ja openSUSE distributsioonides, kui reeglis «NOPASSWD» ei ole m\u00e4\u00e4ratletud, on haavatavus mitte \u00e4ratav<\/a><\/noindex>, kuna sudoers sisaldab vaikimisi «Defaults targetpw» re\u017eiimi, kus toimub UID kontroll paroolide andmebaasis ning sihtkasutaja parooli sisestamise k\u00fcsimine. Taolistele s\u00fcsteemidele saab r\u00fcnnakut teostada ainult olemasolevate reeglite korral:<\/p>\n

myhost K\u00d5IK = (K\u00d5IK, !root) NOPASSWD: \/usr\/bin\/id<\/p>\n

Probleem on lahendatud v\u00e4ljaandes Sudo 1.8.28<\/a><\/noindex>. Parandus on samuti saadaval kujul pat\u0161<\/a><\/noindex>. Distributsioonides on haavatavus juba lahendatud Debian<\/a><\/noindex>, Arch Linuxis<\/a><\/noindex>, SUSE\/openSUSE<\/a><\/noindex>, Ubuntu<\/a><\/noindex>, Gentoo<\/a><\/noindex> ja FreeBSD<\/a><\/noindex>. K\u00e4esoleva uudise kirjutamise hetkel on probleem endiselt lahendamata RHEL<\/a><\/noindex> ja Fedora<\/a><\/noindex>. Haavatavus tuvastati Apple'i turva-uurijate poolt.<\/p>\n

<\/a><\/noindex><\/p>\n

Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 Sudo, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2019-14287), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root, \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0432 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u0445 sudoers \u043f\u0440\u0430\u0432\u0438\u043b, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432 \u0441\u0435\u043a\u0446\u0438\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043f\u043e\u0441\u043b\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0430\u044e\u0449\u0435\u0433\u043e \u043a\u043b\u044e\u0447\u0435\u0432\u043e\u0433\u043e \u0441\u043b\u043e\u0432\u0430 «ALL» \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u044f\u0432\u043d\u044b\u0439 \u0437\u0430\u043f\u0440\u0435\u0442 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root («… (ALL, !root) …»). \u0412 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f\u0445 \u043f\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-38918","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Haavatavus sudos, mis v\u00f5imaldab \u00f5iguste t\u00f5stmist spetsiifiliste reeglite kasutamisel | ProHoster","description":"Sudo utiliid, mida kasutatakse teiste kasutajate nimel k\u00e4skude t\u00e4itmise korraldamiseks,","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/uyazvimost-v-sudo-pozvolyayushhaya-povysit-privilegii-pri-ispolzovanii-spetsifichnyh-pravil","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 sudo, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u043d\u044b\u0445 \u043f\u0440\u0430\u0432\u0438\u043b | ProHoster","og:description":"\u0412 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 Sudo, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439,","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/uyazvimost-v-sudo-pozvolyayushhaya-povysit-privilegii-pri-ispolzovanii-spetsifichnyh-pravil","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:26:45+00:00","article:modified_time":"2019-10-31T19:26:45+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38918","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 23:57:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:00:27","updated":"2026-01-23 23:57:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/38918","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=38918"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/38918\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=38918"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=38918"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=38918"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}