{"id":38918,"date":"2019-10-31T22:26:45","date_gmt":"2019-10-31T19:26:45","guid":{"rendered":"https:\/\/prohoster.info\/blog\/uyazvimost-v-sudo-pozvolyayushhaya-povysit-privilegii-pri-ispolzovanii-spetsifichnyh-pravil\/"},"modified":"2019-10-31T22:26:45","modified_gmt":"2019-10-31T19:26:45","slug":"uyazvimost-v-sudo-pozvolyayushhaya-povysit-privilegii-pri-ispolzovanii-spetsifichnyh-pravil","status":"publish","type":"post","link":"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/uyazvimost-v-sudo-pozvolyayushhaya-povysit-privilegii-pri-ispolzovanii-spetsifichnyh-pravil","title":{"rendered":"Vulnerabilit\u00e0 in sudo che consente di elevare i privilegi con regole specifiche","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Nell'utility Sudo<\/a><\/noindex>, utilizzata per organizzare l'esecuzione di comandi per conto di altri utenti, \u00e8 stata rilevata<\/a><\/noindex> una vulnerabilit\u00e0<\/a><\/noindex> (CVE-2019-14287<\/a><\/noindex>), che consente di eseguire comandi con privilegi di root, in presenza di regole di sudoers in cui nella sezione di verifica dell'identificatore utente dopo la parola chiave che consente «ALL» c'\u00e8 un esplicito divieto di avviare come root («… (ALL, !root) …»). Nelle configurazioni predefinite delle distribuzioni, la vulnerabilit\u00e0 non si manifesta. <\/p>\n

In presenza di regole consentite in sudoers, ma estremamente rare nella pratica, che permettono l'esecuzione di un determinato comando con l'identificatore UID di qualsiasi utente tranne root, un attaccante con i diritti per eseguire tale comando pu\u00f2 aggirare il vincolo impostato ed eseguire il comando con privilegi di root. Per aggirare il vincolo, basta tentare di eseguire il comando specificato nelle impostazioni con UID «-1» o «4294967295», il che porter\u00e0 alla sua esecuzione con UID 0. <\/p>\n

Ad esempio, se nelle impostazioni \u00e8 presente una regola che consente a chiunque di eseguire il programma \/usr\/bin\/id con qualsiasi UID:<\/p>\n

myhost ALL = (ALL, !root) \/usr\/bin\/id<\/p>\n

o un'opzione che consente l'esecuzione solo per l'utente specifico bob:<\/p>\n

myhost bob = (ALL, !root) \/usr\/bin\/id<\/p>\n

L'utente pu\u00f2 eseguire \u00absudo -u \u2018#-1\u2019 id\u00bb e l'utilit\u00e0 \/usr\/bin\/id verr\u00e0 eseguita con i privilegi di root, nonostante il divieto esplicito nelle impostazioni. Il problema \u00e8 causato dall'ignorare i valori speciali \u00ab-1\u00bb o \u00ab4294967295\u00bb, che non comportano il cambio di UID, ma poich\u00e9 sudo stesso viene eseguito gi\u00e0 come root, sia il cambio di UID sia il comando obiettivo vengono eseguiti con i privilegi di root. <\/p>\n

Nei distributori SUSE e openSUSE, senza specificare nella regola \u00abNOPASSWD\u00bb, si verifica una vulnerabilit\u00e0 non \u00e8 sfruttabile<\/a><\/noindex>, poich\u00e9 nel sudoers \u00e8 attivata per impostazione predefinita la modalit\u00e0 \u00abDefaults targetpw\u00bb, in cui viene eseguita una verifica dell'UID nel database delle password con la richiesta di inserire la password dell'utente target. Per questi sistemi, l'attacco pu\u00f2 essere eseguito solo in presenza di regole del tipo:<\/p>\n

myhost ALL = (ALL, !root) NOPASSWD: \/usr\/bin\/id<\/p>\n

Il problema \u00e8 stato risolto nella versione Sudo 1.8.28<\/a><\/noindex>. La correzione \u00e8 anche disponibile in forma di patch<\/a><\/noindex>. Nei distributivi la vulnerabilit\u00e0 \u00e8 gi\u00e0 stata risolta in Debian<\/a><\/noindex>, Arch Linux<\/a><\/noindex>, SUSE\/openSUSE<\/a><\/noindex>, Ubuntu<\/a><\/noindex>, Gentoo<\/a><\/noindex> e FreeBSD<\/a><\/noindex>. Al momento della scrittura della notizia, il problema rimane irrisolto in RHEL<\/a><\/noindex> e Fedora<\/a><\/noindex>. La vulnerabilit\u00e0 \u00e8 stata identificata dai ricercatori della sicurezza della societ\u00e0 Apple.<\/p>\n

<\/a><\/noindex><\/p>\n

Fonte: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 Sudo, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2019-14287), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root, \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0432 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u0445 sudoers \u043f\u0440\u0430\u0432\u0438\u043b, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432 \u0441\u0435\u043a\u0446\u0438\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043f\u043e\u0441\u043b\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0430\u044e\u0449\u0435\u0433\u043e \u043a\u043b\u044e\u0447\u0435\u0432\u043e\u0433\u043e \u0441\u043b\u043e\u0432\u0430 «ALL» \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u044f\u0432\u043d\u044b\u0439 \u0437\u0430\u043f\u0440\u0435\u0442 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root («… (ALL, !root) …»). \u0412 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f\u0445 \u043f\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-38918","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilit\u00e0 in sudo che consente l'elevazione dei privilegi utilizzando regole specifiche | ProHoster","description":"Nell'utility Sudo, utilizzata per gestire l'esecuzione di comandi per conto di altri utenti, \u00e8 stata identificata una vulnerabilit\u00e0 (CVE-2019-14287) che consente l'esecuzione di comandi con privilegi di root, nel caso in cui nelle impostazioni di sudoers ci siano regole in cui nella sezione di verifica dell'identit\u00e0 dell'utente, dopo la parola chiave `ALL`, \u00e8 presente un divieto esplicito di esecuzione con privilegi di root (`... (ALL, !root) ...`). Nelle configurazioni di questo tipo,","canonical_url":"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/uyazvimost-v-sudo-pozvolyayushhaya-povysit-privilegii-pri-ispolzovanii-spetsifichnyh-pravil","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 sudo, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u043d\u044b\u0445 \u043f\u0440\u0430\u0432\u0438\u043b | ProHoster","og:description":"\u0412 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 Sudo, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2019-14287), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root, \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0432 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u0445 sudoers \u043f\u0440\u0430\u0432\u0438\u043b, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432 \u0441\u0435\u043a\u0446\u0438\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043f\u043e\u0441\u043b\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0430\u044e\u0449\u0435\u0433\u043e \u043a\u043b\u044e\u0447\u0435\u0432\u043e\u0433\u043e \u0441\u043b\u043e\u0432\u0430 "ALL" \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u044f\u0432\u043d\u044b\u0439 \u0437\u0430\u043f\u0440\u0435\u0442 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root ("... (ALL, !root) ..."). \u0412 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f\u0445 \u043f\u043e","og:url":"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/uyazvimost-v-sudo-pozvolyayushhaya-povysit-privilegii-pri-ispolzovanii-spetsifichnyh-pravil","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:26:45+00:00","article:modified_time":"2019-10-31T19:26:45+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38918","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 23:57:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:00:27","updated":"2026-01-23 23:57:19"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/38918","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=38918"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/38918\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=38918"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=38918"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=38918"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}