{"id":55921,"date":"2020-02-01T00:00:00","date_gmt":"2020-01-31T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/root-uyazvimost-v-sudo-zatragivayushhaya-linux-mint-i-elementary-os"},"modified":"2020-02-18T14:04:05","modified_gmt":"2020-02-18T11:04:05","slug":"root-uyazvimost-v-sudo-zatragivayushhaya-linux-mint-i-elementary-os","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/root-uyazvimost-v-sudo-zatragivayushhaya-linux-mint-i-elementary-os","title":{"rendered":"Root-haavatavus sudo-s, mis m\u00f5jutab Linux Mint ja Elementary OS","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Utiliit sudo<\/a><\/noindex>, mis kasutatakse teiste kasutajate nimel k\u00e4skude t\u00e4itmise korraldamiseks, tuvastatud<\/a><\/noindex> haavatavus (CVE-2019-18634<\/a><\/noindex>), mis v\u00f5imaldab t\u00f5sta oma \u00f5igusi s\u00fcsteemis kasutajaks root. Probleem ilmneb alates sudo 1.7.1 versioonist ainult siis, kui failis \/etc\/sudoers on sisse l\u00fclitatud valik \u00abpwfeedback\u00bb, mis on vaikimisi v\u00e4lja l\u00fclitatud, kuid aktiveeritud m\u00f5nedes jaotustes, n\u00e4iteks Linux Mint ja Elementary OS. Probleem on lahendatud versioonis sudo 1.8.31<\/a><\/noindex>, mis avaldati mitu tundi tagasi. Jaotustes on haavatavus siiani parandamata.<\/p>\n

Valik \u00abpwfeedback\u00bb lubab kuvada s\u00fcmbolit \u00ab*\u00bb iga sisestatud s\u00fcmboli j\u00e4rel parooli sisestamisel. Selle t\u00f5ttu vead<\/a><\/noindex> getln() funktsiooni rakenduses, mis on m\u00e4\u00e4ratletud failis tgetpass.c, v\u00f5ib teatud tingimustel liiga suur paroolist s\u00f5num, mis edastatakse standardse sisendvoo (stdin) kaudu, mitte mahtuda eraldatud m\u00e4llu ning \u00fcle kirjutada teisi andmeid virnas. \u00dclevool toimub sudo-koodi t\u00e4itmise ajal \u00fche root'i \u00f5igustes.<\/p>\n

Probleemi olemus seisneb selles, et spetsiaalse s\u00fcmboli ^U (rea kustutamine) kasutamisel ja kirjutamise operatsiooni eba\u00f5nnestumisel, kood, mis vastutab v\u00e4ljastatud s\u00fcmbolite \u00ab*\u00bb kustutamise eest, nullib v\u00e4lja antud puhvri suuruse andmed, kuid ei taasta puhvris praeguse positsiooni n\u00e4idikut algsesse v\u00e4\u00e4rtusesse. Teise faktorina, mis soodustab ekspluateerimist, on automaatse v\u00e4ljal\u00fclitamise re\u017eiimi puudumine \u00abpwfeedback\u00bb, kui andmed ei tule terminalist, vaid kirj sisendvoolust (see puuduj\u00e4\u00e4k loob tingimused kirjutamise vea tekkimiseks, n\u00e4iteks \u00fchesuunalistes s\u00fcsteemides. nimetutega kanalitel<\/a><\/noindex> t\u00f5rge tekib katse korral kirjutada lugemis kanali l\u00f5ppu).<\/p>\n

Kuna r\u00fcndaja saab t\u00e4ielikult kontrollida andmete kirjutamise j\u00e4lle kuhja, ei ole keeruline luua eksploit, mis v\u00f5imaldab t\u00f5sta enda \u00f5igusi kasutajaks root. Probleemi saab ekspluateerida iga kasutaja, olenemata \u00f5igusest kasutada sudo ja kasutajale spetsiifiliste seadistuste olemasolust sudoers failis. Probleemi peatamiseks tuleb veenduda, et failis \/etc\/sudoers ei ole seadistust \u00abpwfeedback\u00bb ja vajadusel see v\u00e4lja l\u00fclitada (\u00abDefaults !pwfeedback\u00bb). Probleemi kontrollimiseks saab k\u00e4ivitada koodi:<\/p>\n

$ perl -e 'print((\u00abA\u00bb x 100 . \u00ab\u00bb) x 50)' | sudo -S id
\n Parool: segmenteerimisviga<\/p>\n

<\/a><\/noindex><\/p>\n

Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 sudo, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2019-18634), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0434\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f root. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u0430 sudo 1.7.1 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0432 \u0444\u0430\u0439\u043b\u0435 \/etc\/sudoers \u043e\u043f\u0446\u0438\u0438 «pwfeedback», \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u043d\u043e \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0432 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a Linux Mint \u0438 Elementary OS. […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-55921","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Root-haavatavus sudo-s, mis m\u00f5jutab Linux Minti ja Elementary OS-i | ProHoster","description":"sudo utiliidis, mida kasutatakse teiste kasutajate nimel k\u00e4skude t\u00e4itmise korraldamiseks,","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/root-uyazvimost-v-sudo-zatragivayushhaya-linux-mint-i-elementary-os","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Root-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 sudo, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f Linux Mint \u0438 Elementary OS | ProHoster","og:description":"\u0412 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 sudo, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439,","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/root-uyazvimost-v-sudo-zatragivayushhaya-linux-mint-i-elementary-os","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-01-31T21:00:00+00:00","article:modified_time":"2020-02-18T11:04:05+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"55921","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 19:34:29","updated":"2022-09-29 19:42:56","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/55921","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=55921"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/55921\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=55921"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=55921"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=55921"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}