Samba 4.10.8 da 4.9.13 sabuntawa tare da gyara rauni

An shirya gyara gyara kunshin Samba 4.10.8 da 4.9.13, wanda ya kawar da rauni (CVE-2019-10197), ba da damar mai amfani don samun dama ga tushen adireshin inda sashin cibiyar sadarwar Samba yake. Matsalar tana faruwa ne lokacin da aka ƙayyade zaɓin 'faɗin haɗin kai = eh' a cikin saitunan a hade tare da 'unix extensions = a'a' ko 'ba da damar ingantattun hanyoyin haɗi = eh'. Samun dama ga fayiloli a waje da ɓangaren raba na yanzu yana iyakance ta haƙƙin samun damar mai amfani, watau. maharin na iya karantawa da rubuta fayiloli bisa ga uid/gid.

Matsalar ta samo asali ne saboda bayan buƙatun farko na tushen ɓangaren sharewa, an dawo da kuskuren shiga ga abokin ciniki, amma smbd yana cache hanyar shiga directory kuma baya share cache ɗin idan an sami matsala. Don haka, bayan aika buƙatar SMB mai maimaitawa, ana samun nasarar sarrafa shi bisa ga shigar da cache ba tare da sake duba izini ba.

source: budenet.ru

Add a comment