{"id":94397,"date":"2020-09-16T13:42:09","date_gmt":"2020-09-16T11:42:09","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-ftpd-iz-freebsd-pozvolyavshaya-poluchit-root-dostup-pri-ispolzovanii-ftpchroot"},"modified":"2020-09-16T13:42:09","modified_gmt":"2020-09-16T11:42:09","slug":"uyazvimost-v-ftpd-iz-freebsd-pozvolyavshaya-poluchit-root-dostup-pri-ispolzovanii-ftpchroot","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/uyazvimost-v-ftpd-iz-freebsd-pozvolyavshaya-poluchit-root-dostup-pri-ispolzovanii-ftpchroot","title":{"rendered":"A FreeBSD ftpd-ben felfedezett sebezhet\u0151s\u00e9g, amely root-hozz\u00e1f\u00e9r\u00e9st tett lehet\u0151v\u00e9 az ftpchroot haszn\u00e1latakor","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>A FreeBSD szerverben sz\u00e1ll\u00edtott ftpd <noindex><a rel=\"nofollow\" href=\"https:\/\/www.mail-archive.com\/freebsd-announce@freebsd.org\/msg00994.html\">identified<\/a><\/noindex> kritikus s\u00e9r\u00fcl\u00e9kenys\u00e9get (CVE-2020-7468) jelent, amely lehet\u0151v\u00e9 teszi a felhaszn\u00e1l\u00f3k sz\u00e1m\u00e1ra, akik a ftpchroot opci\u00f3val korl\u00e1tozottak a saj\u00e1t otthoni k\u00f6nyvt\u00e1rukra, hogy teljes root-hozz\u00e1f\u00e9r\u00e9st kapjanak a rendszerhez. <\/p>\n<p>A probl\u00e9ma a felhaszn\u00e1l\u00f3i izol\u00e1ci\u00f3s mechanizmus chroot h\u00edv\u00e1sainak megval\u00f3s\u00edt\u00e1s\u00e1ban fell\u00e9p\u0151 hib\u00e1k kombin\u00e1ci\u00f3j\u00e1b\u00f3l ad\u00f3dik (ha az uid megv\u00e1ltoztat\u00e1sa vagy a chroot \u00e9s chdir v\u00e9grehajt\u00e1sa sor\u00e1n nem fat\u00e1lis hiba l\u00e9pett fel, ami nem szak\u00edtotta meg a munkamenetet), \u00e9s a hiteles\u00edtett FTP felhaszn\u00e1l\u00f3nak adott jogosults\u00e1gok lehet\u0151v\u00e9 tett\u00e9k a gy\u00f6k\u00e9r\u00fatra vonatkoz\u00f3 korl\u00e1toz\u00e1sok megker\u00fcl\u00e9s\u00e9t a f\u00e1jlrendszerben. A s\u00e9r\u00fcl\u00e9kenys\u00e9g nem nyilv\u00e1nul meg anonim FTP-hozz\u00e1f\u00e9r\u00e9s vagy a felhaszn\u00e1l\u00f3 teljes bejelentkez\u00e9se eset\u00e9n ftpchroot n\u00e9lk\u00fcl. A probl\u00e9ma megoldva lett a 12.1-RELEASE-p10, 11.4-RELEASE-p4 \u00e9s 11.3-RELEASE-p14 friss\u00edt\u00e9sekben.<\/p>\n<p>Tov\u00e1bb\u00e1 megjegyezhet\u0151, hogy a 12.1-RELEASE-p10, 11.4-RELEASE-p4 \u00e9s 11.3-RELEASE-p14 verzi\u00f3kban tov\u00e1bbi h\u00e1rom s\u00e9r\u00fcl\u00e9kenys\u00e9get is orvosoltak:<\/p>\n<ul>\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/www.mail-archive.com\/freebsd-announce@freebsd.org\/msg00992.html\">CVE-2020-7467<\/a><\/noindex> \u2014 A vulnerability in the Bhyve hypervisor that allows information to be written from a guest environment into the host environment's memory areas, granting full access to the host system. The issue is caused by the lack of access restrictions on processor instructions that operate with physical host addresses and manifests only on systems with AMD CPUs.\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/www.mail-archive.com\/freebsd-announce@freebsd.org\/msg00993.html\">CVE-2020-24718<\/a><\/noindex> \u2014 A vulnerability in the Bhyve hypervisor that allows an attacker with root privileges within isolated environments created by Bhyve to execute code at the kernel level. The issue arises due to insufficient access restrictions on VMCS (Virtual Machine Control Structure) on systems with Intel CPUs and VMCB (Virtual Machine Control Block).<br \/>\nCVE-2020-7464<\/p>\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/www.mail-archive.com\/freebsd-announce@freebsd.org\/msg00991.html\">\u2014 s\u00e9r\u00fcl\u00e9kenys\u00e9g az ure (USB Ethernet Realtek RTL8152 \u00e9s RTL8153) illeszt\u0151programban, amely lehet\u0151v\u00e9 teszi, hogy nagyobb (2048-n\u00e1l nagyobb) keretek k\u00fcld\u00e9s\u00e9vel csomagokat hamis\u00edtsanak m\u00e1s hosztokb\u00f3l vagy csomagokat helyettes\u00edtsenek m\u00e1s VLAN-okban.<\/a><\/noindex> \u2014 A vulnerability in the ure driver (USB Ethernet Realtek RTL8152 and RTL8153) that allows spoofing of packets from other hosts or insertion of packets into other VLANs by sending large frames (greater than 2048).\n<\/ul>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Forr\u00e1s: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=53720\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412 \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u043e\u043c \u0432 \u0441\u043e\u0441\u0442\u0430\u0432\u0435 FreeBSD \u0441\u0435\u0440\u0432\u0435\u0440\u0435 ftpd \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2020-7468), \u0434\u0430\u044e\u0449\u0430\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c \u0441\u0432\u043e\u0438\u043c \u0434\u043e\u043c\u0430\u0448\u043d\u0438\u043c \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u043c \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u043e\u043f\u0446\u0438\u0438 ftpchroot, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 root-\u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0435\u043c \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u0432\u044b\u0437\u043e\u0432\u0430 chroot (\u043f\u0440\u0438 \u0441\u0431\u043e\u044f\u0445 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0441\u043c\u0435\u043d\u044b uid \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f chroot \u0438 chdir \u0432\u044b\u0434\u0430\u0432\u0430\u043b\u0430\u0441\u044c \u043d\u0435\u0444\u0430\u0442\u0430\u043b\u044c\u043d\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430, \u043d\u0435 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-94397","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412 \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u043e\u043c \u0432 \u0441\u043e\u0441\u0442\u0430\u0432\u0435 FreeBSD \u0441\u0435\u0440\u0432\u0435\u0440\u0435 ftpd \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2020-7468).\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/hu\/blog\/news\/uyazvimost-v-ftpd-iz-freebsd-pozvolyavshaya-poluchit-root-dostup-pri-ispolzovanii-ftpchroot\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"hu_HU\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 ftpd \u0438\u0437 FreeBSD, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0432\u0448\u0430\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u0434\u043e\u0441\u0442\u0443\u043f \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 ftpchroot | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412 \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u043e\u043c \u0432 \u0441\u043e\u0441\u0442\u0430\u0432\u0435 FreeBSD \u0441\u0435\u0440\u0432\u0435\u0440\u0435 ftpd \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2020-7468).\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/hu\/blog\/news\/uyazvimost-v-ftpd-iz-freebsd-pozvolyavshaya-poluchit-root-dostup-pri-ispolzovanii-ftpchroot\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-09-16T11:42:09+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-09-16T11:42:09+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47A FreeBSD ftpd s\u00e9r\u00fcl\u00e9kenys\u00e9ge, amely lehet\u0151v\u00e9 tette a root-hozz\u00e1f\u00e9r\u00e9s megszerz\u00e9s\u00e9t ftpchroot haszn\u00e1lat\u00e1val | ProHoster","description":"\ud83e\udd47 A FreeBSD ftpd s\u00e9r\u00fcl\u00e9kenys\u00e9ge, amely lehet\u0151v\u00e9 tette a root-hozz\u00e1f\u00e9r\u00e9s megszerz\u00e9s\u00e9t ftpchroot haszn\u00e1lat\u00e1val | ProHoster","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/uyazvimost-v-ftpd-iz-freebsd-pozvolyavshaya-poluchit-root-dostup-pri-ispolzovanii-ftpchroot","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 ftpd \u0438\u0437 FreeBSD, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0432\u0448\u0430\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u0434\u043e\u0441\u0442\u0443\u043f \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 ftpchroot | ProHoster","og:description":"\u0412 \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u043e\u043c \u0432 \u0441\u043e\u0441\u0442\u0430\u0432\u0435 FreeBSD \u0441\u0435\u0440\u0432\u0435\u0440\u0435 ftpd \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2020-7468).","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/uyazvimost-v-ftpd-iz-freebsd-pozvolyavshaya-poluchit-root-dostup-pri-ispolzovanii-ftpchroot","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-16T11:42:09+00:00","article:modified_time":"2020-09-16T11:42:09+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"94397","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:27:34","updated":"2022-10-02 08:32:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/94397","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=94397"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/94397\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=94397"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=94397"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=94397"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}