{"id":100021,"date":"2021-04-25T10:22:49","date_gmt":"2021-04-25T08:22:49","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-git-dlya-cygwin-pozvolyayushhaya-organizovat-vypolnenie-koda"},"modified":"2021-04-25T10:22:49","modified_gmt":"2021-04-25T08:22:49","slug":"uyazvimost-v-git-dlya-cygwin-pozvolyayushhaya-organizovat-vypolnenie-koda","status":"publish","type":"post","link":"https:\/\/prohoster.info\/it\/blog\/news\/uyazvimost-v-git-dlya-cygwin-pozvolyayushhaya-organizovat-vypolnenie-koda","title":{"rendered":"Vulnerabilit\u00e0 in Git per Cygwin che consente l'esecuzione di codice","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
In Git, a critical vulnerability (CVE-2021-29468) has been identified, which manifests only when building for the Cygwin environment (a library for emulating the basic Linux API in Windows and a set of typical Linux programs for Windows). This vulnerability allows an attacker to execute code when extracting data (\"git checkout\") from a repository controlled by the attacker. The issue has been resolved in the git package 2.31.1-2 for Cygwin. However, the main Git project has not yet fixed this issue (it is unlikely that someone compiles git for Cygwin manually rather than using a ready-made package). <\/p>\n
The vulnerability arises from handling the Cygwin environment as a Unix-like system rather than Windows, leading to a lack of restrictions on the use of the character \u2018\\\u2019 in paths, whereas in Cygwin, as well as in Windows, this character can be used to separate directories. Consequently, by creating a specially modified repository containing symbolic links and files with the backslash character, an attacker can achieve arbitrary file overwriting when loading this repository into Cygwin (a similar vulnerability in Git for Windows was fixed in 2019). By gaining the ability to overwrite files, an attacker can redefine git hook calls and execute arbitrary code in the system. \n Fonte: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"