Dans le plugin NetworkManager-libreswan, qui ajoute des fonctionnalit\u00e9s \u00e0 NetworkManager pour se connecter \u00e0 des VPN compatibles avec des serveurs bas\u00e9s sur Libreswan et Cisco IPsec, une vuln\u00e9rabilit\u00e9 (CVE-2024-9050) a \u00e9t\u00e9 identifi\u00e9e, pouvant \u00eatre exploit\u00e9e par un utilisateur local pour \u00e9lever ses privil\u00e8ges. La vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 corrig\u00e9e dans la mise \u00e0 jour NetworkManager-libreswan 1.2.24. Vous pouvez suivre les mises \u00e0 jour dans les distributions sur les pages suivantes : Debian, Ubuntu, RHEL, SUSE\/openSUSE, Fedora. <\/p>\n
Le probl\u00e8me est caus\u00e9 par une v\u00e9rification incorrecte de la configuration VPN<\/a>, d\u00e9termin\u00e9 par un utilisateur non privil\u00e9gi\u00e9 local et transmis directement \u00e0 Libreswan lors de la tentative d'activation de la connexion. En particulier, le plugin ne v\u00e9rifiait pas l'utilisation de caract\u00e8res d'\u00e9chappement, tels que le retour \u00e0 la ligne «\n», qui pouvaient \u00eatre utilis\u00e9s pour s\u00e9parer des param\u00e8tres individuels sp\u00e9cifi\u00e9s sur une seule ligne. <\/p>\n En cons\u00e9quence, l'attaquant pouvait sp\u00e9cifier dans l'un des param\u00e8tres autoris\u00e9s le param\u00e8tre «leftupdown», interdit aux utilisateurs non privil\u00e9gi\u00e9s, et d\u00e9signant un script ex\u00e9cut\u00e9 avec des droits root lors de l'\u00e9tablissement de la connexion. Par exemple, pour lancer le programme \/bin\/true, les param\u00e8tres suivants pouvaient \u00eatre ajout\u00e9s au param\u00e8tre autoris\u00e9 «hostaddrfamily» : hostaddrfamily=ipv4\n leftupdown=\\\/bin\\\/true\n ikev2=never\n leftxauthclient=yes\n leftusername=username\n phase2alg=aes256-sha1\n authby=secret\n left=faultroute\n leftmodecfgclient=yes\n right=172.31.79.2\nconn ign <\/p>\n Une autre vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 identifi\u00e9e dans le processus en arri\u00e8re-plan guix-daemon, utilis\u00e9 dans les distributions bas\u00e9es sur le gestionnaire de paquets GNU Guix. Cette vuln\u00e9rabilit\u00e9 repr\u00e9sente un danger pour les syst\u00e8mes multi-utilisateurs et permet \u00e0 un utilisateur local d'obtenir les privil\u00e8ges de tout utilisateur effectuant une construction de paquets (build user) et de modifier le r\u00e9sultat de la construction. L'essence de la vuln\u00e9rabilit\u00e9 r\u00e9side dans le fait qu'un attaquant peut lancer une construction d\u00e9riv\u00e9e et si le processus de construction est interrompu, les fichiers suid d\u00e9j\u00e0 cr\u00e9\u00e9s resteront accessibles aux autres utilisateurs du syst\u00e8me. Apr\u00e8s cela, l'attaquant peut utiliser le fichier suid cr\u00e9\u00e9 pour suspendre le processus de construction, ouvrir n'importe quel fichier via \/proc\/$PID\/fd avec les droits de l'utilisateur de construction en cours et \u00e9craser des fichiers avec les r\u00e9sultats de la construction). \u0412 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 NetworkManager-libreswan, \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u043c \u0432 NetworkManager \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a VPN, \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u044b\u043c \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 \u043d\u0430 \u0431\u0430\u0437\u0435 Libreswan \u0438 Cisco IPsec, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-9050), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 NetworkManager-libreswan 1.2.24. \u041f\u0440\u043e\u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0437\u0430 \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0432 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 \u043c\u043e\u0436\u043d\u043e \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\u0445: Debian, Ubuntu, RHEL, SUSE\/openSUSE, Fedora. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-120285","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vuln\u00e9rabilit\u00e9s dans NetworkManager-libreswan et guix-daemon permettant d'\u00e9lever les privil\u00e8ges dans le syst\u00e8me | ProHoster","description":"Une vuln\u00e9rabilit\u00e9 (CVE-2024-9050) a \u00e9t\u00e9 identifi\u00e9e dans le plugin NetworkManager-libreswan, qui ajoute \u00e0 NetworkManager des fonctionnalit\u00e9s pour se connecter \u00e0 des VPN compatibles avec les serveurs bas\u00e9s sur Libreswan et Cisco IPsec.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/uyazvimost-v-networkmanager-libreswan-i-guix-daemon-pozvolyayushhie-povysit-privilegii-v-sisteme","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 NetworkManager-libreswan \u0438 guix-daemon, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 | ProHoster","og:description":"\u0412 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 NetworkManager-libreswan, \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u043c \u0432 NetworkManager \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a VPN, \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u044b\u043c \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 \u043d\u0430 \u0431\u0430\u0437\u0435 Libreswan \u0438 Cisco IPsec, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-9050), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442.","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/uyazvimost-v-networkmanager-libreswan-i-guix-daemon-pozvolyayushhie-povysit-privilegii-v-sisteme","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-10-25T11:09:16+00:00","article:modified_time":"2024-10-25T11:09:16+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"120285","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-04 15:02:21","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 07:28:20","updated":"2026-02-04 15:02:21","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/120285","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=120285"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/120285\/revisions"}],"predecessor-version":[{"id":156887,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/120285\/revisions\/156887"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=120285"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=120285"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=120285"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Source : opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"