{"id":98919,"date":"2021-01-25T14:42:59","date_gmt":"2021-01-25T12:42:59","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vyyavlena-i-ispravlena-kriticheskaya-uyazvimost-v-realizaczii-nfs"},"modified":"2021-01-25T14:42:59","modified_gmt":"2021-01-25T12:42:59","slug":"vyyavlena-i-ispravlena-kriticheskaya-uyazvimost-v-realizaczii-nfs","status":"publish","type":"post","link":"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/vyyavlena-i-ispravlena-kriticheskaya-uyazvimost-v-realizaczii-nfs","title":{"rendered":"\u00c8 stata individuata e corretta una vulnerabilit\u00e0 critica nell'implementazione di NFS","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

La vulnerabilit\u00e0 riguarda la possibilit\u00e0 di un attaccante remoto di accedere a directory al di fuori dell'export NFS, attraverso una chiamata READDIRPLUS su .. della directory radice esportata.<\/p>\n

La vulnerabilit\u00e0 \u00e8 stata corretta nel kernel 5.10.10 rilasciato il 23 gennaio, cos\u00ec come in tutte le altre versioni supportate del kernel aggiornate in quel giorno:<\/p>\n

commit fdcaa4af5e70e2d984c9620a09e9dade067f2620
\nAuthor: J. Bruce Fields
\nDate: Mon Jan 11 16:01:29 2021 -0500<\/p>\n

nfsd4: readdirplus non dovrebbe restituire il padre dell'export<\/p>\n

commit 51b2ee7d006a736a9126e8111d1f24e4fd0afaa6 upstream.<\/p>\n

Se esporti una sottodirectory di un filesystem, un READDIRPLUS sulla radice
\n di quell'export restituir\u00e0 il filehandle del genitore con il \"..\"
\n entry.<\/p>\n

Il filehandle \u00e8 opzionale, quindi evitiamo di restituire il filehandle per
\n \"..\" se siamo alla radice di un export.<\/p>\n

Nota che una volta che il client apprende un filehandle al di fuori dell'export,
\n pu\u00f2 facilmente accedere al resto dell'export utilizzando ulteriori ricerche.<\/p>\n

Tuttavia, non \u00e8 molto difficile indovinare i filehandle al di fuori
\n dell'export. Quindi, esportare una sottodirectory di un filesystem dovrebbe
\n essere considerato equivalente a fornire accesso all'intero filesystem. Per
\n evitare confusioni, consigliamo di esportare solo interi filesystem.<\/p>\n

Reported-by: Youjipeng
\n Signed-off-by: J. Bruce Fields
\n Cc: stable@vger.kernel.org
\n Signed-off-by: Chuck Lever
\n Signed-off-by: Greg Kroah-Hartman<\/p>\n

Fonte: linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u044f\u043c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u044d\u043a\u0441\u043f\u043e\u0440\u0442\u0438\u0440\u0443\u0435\u043c\u043e\u0439 \u043f\u043e NFS, \u0447\u0435\u0440\u0435\u0437 \u0432\u044b\u0437\u043e\u0432 READDIRPLUS \u043d\u0430 .. \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0441\u043f\u043e\u0440\u0442\u0438\u0440\u0443\u0435\u043c\u043e\u0433\u043e \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0432\u044b\u0448\u0435\u0434\u0448\u0435\u043c 23 \u044f\u043d\u0432\u0430\u0440\u044f \u044f\u0434\u0440\u0435 5.10.10, \u0430 \u0442\u0430\u043a \u0436\u0435 \u0432\u043e \u0432\u0441\u0435\u0445 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u044f\u0434\u0435\u0440, \u043e\u0431\u043d\u043e\u0432\u043b\u0451\u043d\u043d\u044b\u0445 \u0432 \u044d\u0442\u043e\u0442 \u0434\u0435\u043d\u044c: commit fdcaa4af5e70e2d984c9620a09e9dade067f2620 Author: J. Bruce Fields <bfields@redhat.com> Date: Mon Jan 11 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-98919","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Identificata e corretta una vulnerabilit\u00e0 critica nell'implementazione di NFS | ProHoster","description":"La vulnerabilit\u00e0 consiste nella possibilit\u00e0 per un attaccante remoto di accedere alle directory oltre a quelle esportate via NFS, attraverso la chiamata READDIRPLUS a .. della radice della directory esportata. La vulnerabilit\u00e0 \u00e8 stata corretta nel kernel 5.10.10 rilasciato il 23 gennaio, cos\u00ec come in tutte le altre versioni supportate del kernel aggiornate in quel giorno: commit fdcaa4af5e70e2d984c9620a09e9dade067f2620 Autore: J. Bruce Fields Data: Lun 11 Gen","canonical_url":"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/vyyavlena-i-ispravlena-kriticheskaya-uyazvimost-v-realizaczii-nfs","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 NFS | ProHoster","og:description":"\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u044f\u043c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u044d\u043a\u0441\u043f\u043e\u0440\u0442\u0438\u0440\u0443\u0435\u043c\u043e\u0439 \u043f\u043e NFS, \u0447\u0435\u0440\u0435\u0437 \u0432\u044b\u0437\u043e\u0432 READDIRPLUS \u043d\u0430 .. \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0441\u043f\u043e\u0440\u0442\u0438\u0440\u0443\u0435\u043c\u043e\u0433\u043e \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0432\u044b\u0448\u0435\u0434\u0448\u0435\u043c 23 \u044f\u043d\u0432\u0430\u0440\u044f \u044f\u0434\u0440\u0435 5.10.10, \u0430 \u0442\u0430\u043a \u0436\u0435 \u0432\u043e \u0432\u0441\u0435\u0445 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u044f\u0434\u0435\u0440, \u043e\u0431\u043d\u043e\u0432\u043b\u0451\u043d\u043d\u044b\u0445 \u0432 \u044d\u0442\u043e\u0442 \u0434\u0435\u043d\u044c: commit fdcaa4af5e70e2d984c9620a09e9dade067f2620 Author: J. Bruce Fields Date: Mon Jan 11","og:url":"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/vyyavlena-i-ispravlena-kriticheskaya-uyazvimost-v-realizaczii-nfs","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-01-25T12:42:59+00:00","article:modified_time":"2021-01-25T12:42:59+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"98919","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 09:57:25","updated":"2022-10-02 00:17:31"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/98919","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=98919"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/98919\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=98919"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=98919"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=98919"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}