{"id":145323,"date":"2025-10-16T17:11:54","date_gmt":"2025-10-16T15:11:54","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-samba-pozvolyayushhaya-udalyonno-vypolnit-kod-na-servere"},"modified":"2025-10-16T17:11:54","modified_gmt":"2025-10-16T15:11:54","slug":"uyazvimost-v-samba-pozvolyayushhaya-udalyonno-vypolnit-kod-na-servere","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/uyazvimost-v-samba-pozvolyayushhaya-udalyonno-vypolnit-kod-na-servere","title":{"rendered":"Vuln\u00e9rabilit\u00e9 dans Samba permettant d'ex\u00e9cuter du code \u00e0 distance sur le serveur.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Des mises \u00e0 jour correctives des versions Samba 4.23.2, 4.22.5 et 4.21.9 ont \u00e9t\u00e9 publi\u00e9es pour rem\u00e9dier \u00e0 la vuln\u00e9rabilit\u00e9 (CVE-2025-10230) dans l'impl\u00e9mentation du serveur de noms WINS, permettant l'ex\u00e9cution \u00e0 distance de code sur le serveur sans authentification. Ce probl\u00e8me a \u00e9t\u00e9 class\u00e9 avec le niveau de gravit\u00e9 maximum \u2014 10 sur 10. <\/p>\n

La vuln\u00e9rabilit\u00e9 est due \u00e0 l'absence d'une v\u00e9rification ad\u00e9quate des valeurs transmises avant le lancement de l'application sp\u00e9cifi\u00e9e dans le param\u00e8tre \u00ab wins hook \u00bb. Cette application est lanc\u00e9e par la commande \u00ab sh -c \u00bb \u00e0 chaque changement de nom via WINS. Lors de l'utilisation de WINS sur le contr\u00f4leur de domaine<\/a> Active Directory, les noms NetBIOS, transmis comme arguments de ligne de commande lors du lancement de l'application hook, n'\u00e9taient pas nettoy\u00e9s des caract\u00e8res sp\u00e9ciaux, ce qui permettait l'ex\u00e9cution de commandes shell arbitraires en sp\u00e9cifiant un nom NetBIOS sp\u00e9cialement format\u00e9 dans la requ\u00eate au serveur WINS. cmd = talloc_asprintf(tmp_mem, \"%s %s %s x %ld\", wins_hook_script, wins_hook_action_string(action), rec->name->name, rec->name->type, (long int) rec->expire_time); \u2026 execl(\"\/bin\/sh\", \"sh\", \"-c\", cmd, NULL); <\/p>\n

Un client sans authentification peut envoyer un paquet d'enregistrement au serveur WINS et demander n'importe quel nom NetBIOS ne d\u00e9passant pas 15 caract\u00e8res. Aucun nettoyage de caract\u00e8res tels que \u2018\u2019 et \u2018;\u2019 n'est effectu\u00e9 dans le nom. Par cons\u00e9quent, lors du lancement du hook handler, la transmission d'un nom tel que \u00ab name;id>file \u00bb entra\u00eenera l'ex\u00e9cution de l'utilitaire \u00ab id \u00bb et la redirection de la sortie dans le fichier \u00ab file \u00bb. <\/p>\n

La vuln\u00e9rabilit\u00e9 se manifeste sur les syst\u00e8mes o\u00f9 le param\u00e8tre \u2018wins hook\u2019 est configur\u00e9 dans smb.conf lors de l'utilisation d'un contr\u00f4leur de domaine actif serveur<\/a> WINS (par d\u00e9faut d\u00e9sactiv\u00e9 et n\u00e9cessite l'activation du param\u00e8tre \u00ab wins support = yes \u00bb). Lors de l'utilisation d'un serveur WINS dans des syst\u00e8mes sans contr\u00f4leur de domaine, la vuln\u00e9rabilit\u00e9 ne se manifeste pas. L'\u00e9tat de la nouvelle version du package ou la pr\u00e9paration du correctif dans les distributions peut \u00eatre v\u00e9rifi\u00e9 sur les pages suivantes : Debian, Ubuntu, Fedora, SUSE\/openSUSE, RHEL, Gentoo, Arch, FreeBSD, OpenBSD et NetBSD. <\/p>\n

Les versions publi\u00e9es de Samba corrigent \u00e9galement une vuln\u00e9rabilit\u00e9 moins grave (CVE-2025-9640), entra\u00eenant une fuite de m\u00e9moire non initialis\u00e9e. Le probl\u00e8me se manifeste dans le module vfs_streams_xattr lors de pannes de l'allocation de m\u00e9moire, pouvant \u00eatre provoqu\u00e9es par des op\u00e9rations d'\u00e9criture cr\u00e9ant des zones vides dans le fichier. Cette vuln\u00e9rabilit\u00e9 peut \u00eatre exploit\u00e9e par un utilisateur authentifi\u00e9.
\n
Source : opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 Samba 4.23.2, 4.22.5 \u0438 4.21.9 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2025-10230) \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0438\u043c\u0451\u043d WINS, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0431\u0435\u0437 \u043f\u0440\u043e\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u043d\u0430\u0438\u0432\u044b\u0441\u0448\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 — 10 \u0438\u0437 10. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u0434\u043e\u043b\u0436\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0439, \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u0435\u043c\u044b\u0445 \u043f\u0435\u0440\u0435\u0434 \u0437\u0430\u043f\u0443\u0441\u043a\u043e\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u043e\u0433\u043e \u0432 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0435 «wins hook». \u0414\u0430\u043d\u043d\u043e\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-145323","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vuln\u00e9rabilit\u00e9 dans Samba permettant l'ex\u00e9cution \u00e0 distance de code sur le serveur | ProHoster","description":"Des versions correctives du paquet Samba 4.23.2, 4.22.5 et 4.21.9 ont \u00e9t\u00e9 publi\u00e9es, corrigeant la vuln\u00e9rabilit\u00e9 (CVE-2025-10230) dans l'impl\u00e9mentation du serveur de r\u00e9solution de noms WINS, permettant une ex\u00e9cution \u00e0 distance de code malveillant.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/uyazvimost-v-samba-pozvolyayushhaya-udalyonno-vypolnit-kod-na-servere","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Samba, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 Samba 4.23.2, 4.22.5 \u0438 4.21.9 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2025-10230) \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0438\u043c\u0451\u043d WINS, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430.","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/uyazvimost-v-samba-pozvolyayushhaya-udalyonno-vypolnit-kod-na-servere","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-10-16T15:11:54+00:00","article:modified_time":"2025-10-16T15:11:54+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"145323","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-03-05 11:16:40","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 15:22:19","updated":"2026-03-05 11:16:40","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/145323","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=145323"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/145323\/revisions"}],"predecessor-version":[{"id":163268,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/145323\/revisions\/163268"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=145323"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=145323"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=145323"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}