{"id":55921,"date":"2020-02-01T00:00:00","date_gmt":"2020-01-31T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/root-uyazvimost-v-sudo-zatragivayushhaya-linux-mint-i-elementary-os"},"modified":"2020-02-18T14:04:05","modified_gmt":"2020-02-18T11:04:05","slug":"root-uyazvimost-v-sudo-zatragivayushhaya-linux-mint-i-elementary-os","status":"publish","type":"post","link":"https:\/\/prohoster.info\/lv\/blog\/news\/root-uyazvimost-v-sudo-zatragivayushhaya-linux-mint-i-elementary-os","title":{"rendered":"Root ievainojam\u012bba sudo, kas skar Linux Mint un Elementary OS","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

R\u012bk\u0101 sudo<\/a><\/noindex>, kas tiek izmantota, lai organiz\u0113tu komandu izpildi citu lietot\u0101ju v\u0101rd\u0101, identified<\/a><\/noindex> vaina (CVE-2019-18634<\/a><\/noindex>), kas \u013cauj palielin\u0101t savas privil\u0113\u0123ijas sist\u0113m\u0101 l\u012bdz root lietot\u0101jam. Probl\u0113ma s\u0101kas ar sudo versiju 1.7.1 un izpau\u017eas tikai, izmantojot \/etc\/sudoers fail\u0101 opciju \u00abpwfeedback\u00bb, kas p\u0113c noklus\u0113juma ir izsl\u0113gta, ta\u010du aktiviz\u0113ta da\u017eos izplat\u012bjumos, piem\u0113ram, Linux Mint un Elementary OS. Probl\u0113ma ir nov\u0113rsta versij\u0101 sudo 1.8.31<\/a><\/noindex>, kas tika public\u0113ts pirms da\u017e\u0101m stund\u0101m. Izplat\u012bjumos ievainojam\u012bba v\u0113l nav nov\u0113rsta.<\/p>\n

Opcija \u00abpwfeedback\u00bb aktiviz\u0113 simbolu \u00ab*\u00bb r\u0101d\u012b\u0161anu p\u0113c katra ievad\u012bt\u0101 simbola, ievadot paroli. D\u0113\u013c k\u013c\u016bd\u0101m<\/a><\/noindex> f\u0443\u043d\u043acijas getln(), kas defin\u0113ta fail\u0101 tgetpass.c, ja caur standarta ieejas pl\u016bsmu (stdin) tiek nodota p\u0101r\u0101k liela paroles virkne noteiktos apst\u0101k\u013cos, t\u0101 var nepietikt iepriek\u0161 pie\u0161\u0137irtajai buferim un p\u0101rrakst\u012bt citus datus stek\u0101. P\u0101rspriegums notiek, izpildot sudo kodu ar root privil\u0113\u0123ij\u0101m.<\/p>\n

Probl\u0113mas b\u016bt\u012bba ir t\u0101da, ka, izmantojot speci\u0101lo simbolu ^U (rindas t\u012br\u012b\u0161ana) un oper\u0101cijas ieraksta neizdo\u0161anos, kods, kas atbild par ievad\u012bto simbolu \u00ab*\u00bb t\u012br\u012b\u0161anu, atiestat\u012bs inform\u0101ciju par pieejam\u0101 bufera lielumu, ta\u010du neatgriez\u012bs s\u0101kotn\u0113j\u0101 st\u0101vokl\u012b r\u0101d\u012bt\u0101ju uz pa\u0161reiz\u0113jo poz\u012bciju bufer\u012b. V\u0113l viens faktors, kas veicina exploitu izstr\u0101di, ir autom\u0101tisk\u0101 \u00abpwfeedback\u00bb re\u017e\u012bma izsl\u0113g\u0161anas tr\u016bkums, ja dati tiek sa\u0146emti ne no termin\u0101la, bet caur ieeju (\u0161\u012b nepiln\u012bba \u013cauj rad\u012bt apst\u0101k\u013cus ieraksta k\u013c\u016bdas ra\u0161an\u0101s gad\u012bjum\u0101, piem\u0113ram, sist\u0113m\u0101s ar vienvirziena) neapz\u012bm\u0113tiem kan\u0101liem<\/a><\/noindex> k\u013c\u016bda rodas, m\u0113\u0123inot ierakst\u012bt aiz las\u012b\u0161anas kan\u0101la beig\u0101m).<\/p>\n

T\u0101 k\u0101 uzbruc\u0113js var piln\u012bb\u0101 kontrol\u0113t datu p\u0101rrakst\u012b\u0161anu stek\u0101, nav gr\u016bti izstr\u0101d\u0101t exploitu, kas \u013cauj palielin\u0101t savas privil\u0113\u0123ijas l\u012bdz root lietot\u0101jam. Probl\u0113mu var izmantot jebkur\u0161 lietot\u0101js, neatkar\u012bgi no ties\u012bb\u0101m lietot sudo un lietot\u0101jreiz\u0113jo iestat\u012bjumu esam\u012bbas sudoers fail\u0101. Lai nov\u0113rstu probl\u0113mu, j\u0101p\u0101rliecin\u0101s par \u00abpwfeedback\u00bb iestat\u012bjuma neesam\u012bbu \/etc\/sudoers un, ja nepiecie\u0161ams, j\u0101izsl\u0113dz to (\u00abDefaults !pwfeedback\u00bb). Lai p\u0101rbaud\u012btu probl\u0113mas esam\u012bbu, var izpild\u012bt kodu:<\/p>\n

$ perl -e 'print((\u00abA\u00bb x 100 . \u00ab\text{00}\u00bb) x 50)' | sudo -S id
\n Parole: Segment\u0101cijas k\u013c\u016bda<\/p>\n

<\/a><\/noindex><\/p>\n

Avots: opennet.lv<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 sudo, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2019-18634), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0434\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f root. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u0430 sudo 1.7.1 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0432 \u0444\u0430\u0439\u043b\u0435 \/etc\/sudoers \u043e\u043f\u0446\u0438\u0438 «pwfeedback», \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u043d\u043e \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0432 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a Linux Mint \u0438 Elementary OS. […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-55921","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Root-vulnerabilit\u0101te sudo, kas ietekm\u0113 Linux Mint un Elementary OS | ProHoster","description":"Sudo util\u012bt\u0113, kas tiek izmantota komandu izpildei citu lietot\u0101ju v\u0101rd\u0101,","canonical_url":"https:\/\/prohoster.info\/lv\/blog\/news\/root-uyazvimost-v-sudo-zatragivayushhaya-linux-mint-i-elementary-os","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"lv_LV","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Root-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 sudo, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f Linux Mint \u0438 Elementary OS | ProHoster","og:description":"\u0412 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 sudo, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439,","og:url":"https:\/\/prohoster.info\/lv\/blog\/news\/root-uyazvimost-v-sudo-zatragivayushhaya-linux-mint-i-elementary-os","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-01-31T21:00:00+00:00","article:modified_time":"2020-02-18T11:04:05+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"55921","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 19:34:29","updated":"2022-09-29 19:42:56","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/55921","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/comments?post=55921"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/55921\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/media?parent=55921"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/categories?post=55921"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/tags?post=55921"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}