{"id":104173,"date":"2022-05-27T21:36:45","date_gmt":"2022-05-27T19:36:45","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-distributive-linuxfx-vyyavlen-vshityj-parol-dlya-dostupa-k-baze-polzovatelej"},"modified":"2022-05-27T21:36:45","modified_gmt":"2022-05-27T19:36:45","slug":"v-distributive-linuxfx-vyyavlen-vshityj-parol-dlya-dostupa-k-baze-polzovatelej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/v-distributive-linuxfx-vyyavlen-vshityj-parol-dlya-dostupa-k-baze-polzovatelej","title":{"rendered":"A Linuxfx disztrib\u00faci\u00f3ban egy be\u00e1gyazott jelsz\u00f3t tal\u00e1ltak a felhaszn\u00e1l\u00f3i adatb\u00e1zishoz val\u00f3 hozz\u00e1f\u00e9r\u00e9shez.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

A Kernal k\u00f6z\u00f6ss\u00e9g tagjai rendk\u00edv\u00fcl hanyag biztons\u00e1gi probl\u00e9m\u00e1kat fedeztek fel a Linuxfx disztrib\u00faci\u00f3ban, amely az Ubuntu egy Windows 11-es felhaszn\u00e1l\u00f3i fel\u00fcletre stiliz\u00e1lt KDE k\u00f6rnyezet\u00e9vel k\u00e9sz\u00fclt. A projekt weboldala szerint a disztrib\u00faci\u00f3t t\u00f6bb mint egymilli\u00f3 felhaszn\u00e1l\u00f3 haszn\u00e1lja, \u00e9s a h\u00e9ten k\u00f6r\u00fclbel\u00fcl 15 ezer let\u00f6lt\u00e9s t\u00f6rt\u00e9nt. A disztrib\u00faci\u00f3 tov\u00e1bbi, fizet\u0151s funkci\u00f3k aktiv\u00e1l\u00e1s\u00e1t k\u00edn\u00e1lja, amely egy licenckulcs megad\u00e1s\u00e1val t\u00f6rt\u00e9nik egy k\u00fcl\u00f6n grafikus alkalmaz\u00e1sban. <\/p>\n

A licence activation application investigation (\\\/usr\\\/bin\\\/windowsfx-register) revealed that it contains hardcoded login credentials to access an external MySQL database, where data about new users is added. The credentials used allow full access to the database, including the \u2018machines\u2019 table that contains information about all installations of the distribution, including IP address<\/a> users. The content of the \u2018fxkeys\u2019 table is also available, which holds the license keys and email addresses of all registered commercial users. Notably, despite claims of a million users, the database contains only 20,000 records. The application is written in Visual Basic and runs using the Gambas interpreter. <\/p>\n

K\u00fcl\u00f6n figyelmet \u00e9rdemel a disztrib\u00faci\u00f3 fejleszt\u0151inek reakci\u00f3ja. A biztons\u00e1gi probl\u00e9m\u00e1kr\u00f3l sz\u00f3l\u00f3 inform\u00e1ci\u00f3k k\u00f6zz\u00e9t\u00e9tele ut\u00e1n friss\u00edt\u00e9st adtak ki, amely nem a probl\u00e9ma megold\u00e1s\u00e1t szolg\u00e1lta, hanem csup\u00e1n az adatb\u00e1zis nev\u00e9t, felhaszn\u00e1l\u00f3nev\u00e9t \u00e9s jelszav\u00e1t v\u00e1ltoztatta meg, valamint m\u00f3dos\u00edtotta a hiteles\u00edt\u0151 adatok megszerz\u00e9s\u00e9nek logik\u00e1j\u00e1t, \u00e9s megpr\u00f3b\u00e1lta megakad\u00e1lyozni a programok nyomoz\u00e1s\u00e1t. A be\u00e9p\u00edtett hiteles\u00edt\u0151 adatok helyett a Linuxfx fejleszt\u0151i k\u00fcls\u0151 forr\u00e1sb\u00f3l t\u00f6lt\u00f6tt\u00e9k le az adatb\u00e1zis kapcsol\u00f3d\u00e1si param\u00e9tereit a szerver<\/a>, using the curl utility. For protection after launch, it implements a search and removal of all running processes \u2018sudo\u2019, \u2018stapbp\u2019, and \u2018*-bpfcc\u2019 in the system, apparently believing that this will interfere with tracing programs.

\"A<\/center>
\n
Forr\u00e1s: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0423\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0430 Kernal \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u043d\u0435\u043e\u0431\u044b\u043a\u043d\u043e\u0432\u0435\u043d\u043d\u043e \u0431\u0435\u0441\u043f\u0435\u0447\u043d\u043e\u0435 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0435 \u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0435 Linuxfx, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0435\u043c \u0441\u0431\u043e\u0440\u043a\u0443 Ubuntu \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u043c \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0435\u043c KDE, \u0441\u0442\u0438\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u0434 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 Windows 11. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0441 \u0441\u0430\u0439\u0442\u0430 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u043c \u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0430 \u0437\u0430 \u044d\u0442\u0443 \u043d\u0435\u0434\u0435\u043b\u044e \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u043e\u043a\u043e\u043b\u043e 15 \u0442\u044b\u0441\u044f\u0447 \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a. \u0414\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442 \u0430\u043a\u0442\u0438\u0432\u0430\u0446\u0438\u044e \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u043b\u0430\u0442\u043d\u044b\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u0432\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u043e\u043d\u043d\u043e\u0433\u043e \u043a\u043b\u044e\u0447\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":104174,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-104173","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47A Linuxfx disztrib\u00faci\u00f3ban beazonos\u00edtott\u00e1k a felhaszn\u00e1l\u00f3i adatb\u00e1zishoz val\u00f3 hozz\u00e1f\u00e9r\u00e9st biztos\u00edt\u00f3 be\u00e9p\u00edtett jelsz\u00f3t | ProHoster","description":"A Kernal k\u00f6z\u00f6ss\u00e9g tagjai rendk\u00edv\u00fcl hanyag biztons\u00e1gi probl\u00e9m\u00e1kat fedeztek fel a Linuxfx disztrib\u00faci\u00f3ban, amely az Ubuntu egy Windows 11-es felhaszn\u00e1l\u00f3i fel\u00fcletre stiliz\u00e1lt KDE k\u00f6rnyezet\u00e9vel k\u00e9sz\u00fclt.","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/v-distributive-linuxfx-vyyavlen-vshityj-parol-dlya-dostupa-k-baze-polzovatelej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0435 Linuxfx \u0432\u044b\u044f\u0432\u043b\u0435\u043d \u0432\u0448\u0438\u0442\u044b\u0439 \u043f\u0430\u0440\u043e\u043b\u044c \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0431\u0430\u0437\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 | ProHoster","og:description":"\u0423\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0430 Kernal \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u043d\u0435\u043e\u0431\u044b\u043a\u043d\u043e\u0432\u0435\u043d\u043d\u043e \u0431\u0435\u0441\u043f\u0435\u0447\u043d\u043e\u0435 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0435 \u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0435 Linuxfx, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0435\u043c \u0441\u0431\u043e\u0440\u043a\u0443 Ubuntu \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u043c \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0435\u043c KDE, \u0441\u0442\u0438\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u0434 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 Windows 11.","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/v-distributive-linuxfx-vyyavlen-vshityj-parol-dlya-dostupa-k-baze-polzovatelej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-05-27T19:36:45+00:00","article:modified_time":"2022-05-27T19:36:45+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"104173","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-22 16:04:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-05-27 19:36:52","updated":"2026-02-22 16:04:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/104173","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=104173"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/104173\/revisions"}],"predecessor-version":[{"id":162348,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/104173\/revisions\/162348"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media\/104174"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=104173"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=104173"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=104173"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}