{"id":104173,"date":"2022-05-27T21:36:45","date_gmt":"2022-05-27T19:36:45","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-distributive-linuxfx-vyyavlen-vshityj-parol-dlya-dostupa-k-baze-polzovatelej"},"modified":"2022-05-27T21:36:45","modified_gmt":"2022-05-27T19:36:45","slug":"v-distributive-linuxfx-vyyavlen-vshityj-parol-dlya-dostupa-k-baze-polzovatelej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/v-distributive-linuxfx-vyyavlen-vshityj-parol-dlya-dostupa-k-baze-polzovatelej","title":{"rendered":"Un mot de passe int\u00e9gr\u00e9 pour acc\u00e9der \u00e0 la base d'utilisateurs a \u00e9t\u00e9 trouv\u00e9 dans la distribution Linuxfx","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Les membres de la communaut\u00e9 Kernal ont identifi\u00e9 une attitude incroyablement n\u00e9gligente envers la s\u00e9curit\u00e9 dans la distribution Linuxfx, qui propose une version d'Ubuntu avec un environnement de bureau KDE, stylis\u00e9 comme l'interface de Windows 11. Selon les informations du site du projet, cette distribution est utilis\u00e9e par plus d'un million d'utilisateurs, et cette semaine, environ 15 000 t\u00e9l\u00e9chargements ont \u00e9t\u00e9 enregistr\u00e9s. La distribution propose l'activation de fonctionnalit\u00e9s payantes suppl\u00e9mentaires, qui se fait par l'entr\u00e9e d'une cl\u00e9 de licence dans une application graphique sp\u00e9ciale. <\/p>\n

Une \u00e9tude de l'application pour l'activation de la licence (\/usr\/bin\/windowsfx-register) a r\u00e9v\u00e9l\u00e9 qu'elle contient des identifiants de connexion int\u00e9gr\u00e9s pour acc\u00e9der \u00e0 une base de donn\u00e9es MySQL externe, o\u00f9 les donn\u00e9es de nouveaux utilisateurs sont ajout\u00e9es. Les identifiants utilis\u00e9s permettent un acc\u00e8s complet \u00e0 la base de donn\u00e9es, y compris \u00e0 la table \u00ab machines \u00bb qui contient des informations sur toutes les installations de la distribution, y compris adresses IP<\/a> les utilisateurs. Le contenu de la table \u00ab fxkeys \u00bb avec les cl\u00e9s de licence et les adresses e-mail de tous les utilisateurs commerciaux enregistr\u00e9s est \u00e9galement accessible. Fait int\u00e9ressant, contrairement aux d\u00e9clarations concernant un million d'utilisateurs, la base de donn\u00e9es ne contient que 20 000 enregistrements. L'application est \u00e9crite en Visual Basic et s'ex\u00e9cute \u00e0 l'aide de l'interpr\u00e9teur Gambas. <\/p>\n

La r\u00e9action des d\u00e9veloppeurs de la distribution m\u00e9rite une attention particuli\u00e8re. Apr\u00e8s la publication des informations sur les probl\u00e8mes de s\u00e9curit\u00e9, ils ont publi\u00e9 une mise \u00e0 jour qui n'a pas r\u00e9solu le probl\u00e8me lui-m\u00eame, mais a simplement chang\u00e9 le nom de la base de donn\u00e9es, le login et le mot de passe, et a modifi\u00e9 la logique d'obtention des identifiants tout en essayant de contrer le tra\u00e7age du programme. Au lieu des identifiants int\u00e9gr\u00e9s dans l'application elle-m\u00eame, les d\u00e9veloppeurs de Linuxfx ont ajout\u00e9 le chargement des param\u00e8tres de connexion \u00e0 la base de donn\u00e9es depuis une source externe de serveurs<\/a>, en utilisant l'outil curl. Pour la protection apr\u00e8s le lancement, un syst\u00e8me de recherche et de suppression de tous les processus en cours \u00ab sudo \u00bb, \u00ab stapbp \u00bb et \u00ab *-bpfcc \u00bb a \u00e9t\u00e9 mis en \u0153uvre, apparemment croyant qu'ils pourraient ainsi emp\u00eacher le fonctionnement des programmes de tra\u00e7age.

\"Un<\/center>
\n
Source : opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0423\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0430 Kernal \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u043d\u0435\u043e\u0431\u044b\u043a\u043d\u043e\u0432\u0435\u043d\u043d\u043e \u0431\u0435\u0441\u043f\u0435\u0447\u043d\u043e\u0435 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0435 \u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0435 Linuxfx, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0435\u043c \u0441\u0431\u043e\u0440\u043a\u0443 Ubuntu \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u043c \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0435\u043c KDE, \u0441\u0442\u0438\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u0434 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 Windows 11. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0441 \u0441\u0430\u0439\u0442\u0430 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u043c \u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0430 \u0437\u0430 \u044d\u0442\u0443 \u043d\u0435\u0434\u0435\u043b\u044e \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u043e\u043a\u043e\u043b\u043e 15 \u0442\u044b\u0441\u044f\u0447 \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a. \u0414\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442 \u0430\u043a\u0442\u0438\u0432\u0430\u0446\u0438\u044e \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u043b\u0430\u0442\u043d\u044b\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u0432\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u043e\u043d\u043d\u043e\u0433\u043e \u043a\u043b\u044e\u0447\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":104174,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-104173","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Un mot de passe int\u00e9gr\u00e9 pour acc\u00e9der \u00e0 la base d'utilisateurs a \u00e9t\u00e9 d\u00e9tect\u00e9 dans la distribution Linuxfx | ProHoster","description":"Les membres de la communaut\u00e9 Kernal ont identifi\u00e9 une attitude incroyablement n\u00e9gligente envers la s\u00e9curit\u00e9 dans la distribution Linuxfx, qui propose une version d'Ubuntu avec un environnement de bureau KDE, stylis\u00e9 comme l'interface de Windows 11.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/v-distributive-linuxfx-vyyavlen-vshityj-parol-dlya-dostupa-k-baze-polzovatelej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0435 Linuxfx \u0432\u044b\u044f\u0432\u043b\u0435\u043d \u0432\u0448\u0438\u0442\u044b\u0439 \u043f\u0430\u0440\u043e\u043b\u044c \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0431\u0430\u0437\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 | ProHoster","og:description":"\u0423\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0430 Kernal \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u043d\u0435\u043e\u0431\u044b\u043a\u043d\u043e\u0432\u0435\u043d\u043d\u043e \u0431\u0435\u0441\u043f\u0435\u0447\u043d\u043e\u0435 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0435 \u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0435 Linuxfx, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0435\u043c \u0441\u0431\u043e\u0440\u043a\u0443 Ubuntu \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u043c \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0435\u043c KDE, \u0441\u0442\u0438\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u0434 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 Windows 11.","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/v-distributive-linuxfx-vyyavlen-vshityj-parol-dlya-dostupa-k-baze-polzovatelej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-05-27T19:36:45+00:00","article:modified_time":"2022-05-27T19:36:45+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"104173","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-22 16:04:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-05-27 19:36:52","updated":"2026-02-22 16:04:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/104173","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=104173"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/104173\/revisions"}],"predecessor-version":[{"id":162348,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/104173\/revisions\/162348"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media\/104174"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=104173"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=104173"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=104173"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}