Kua kitea e ngā kairangahau o Qualys Labs ētahi take haumarutanga e pā ana ki te kaha ki te tinihanga i ngā kaupapa e whakahaere ana i ngā tikanga tirotiro kupuhipa e whakamahia ana i roto i te BSD (he rite ki te PAM). Ko te mahi tinihanga ko te tuku i tētahi ingoa kaiwhakamahi pēnei i te "-schallenge" me te "-schallenge:passwd" rānei, ka whakamāramatia hei kōwhiringa kaua hei ingoa kaiwhakamahi. Kātahi ka whakaaetia e te pūnaha tētahi kupuhipa. Ko ngā ratonga ngoikore, ko te tikanga ka whakaaetia e rātou te urunga kore mana, ko te smtpd, ldapd, me te radiusd. Kāore e taea te whakamahi i te ratonga sshd nā te mea ka kite te sshd kāore te kaiwhakamahi "-schallenge" i te tīariari. Ka hinga te kaupapa su i te wā e ngana ana ki te kaha, i te mea ka ngana hoki ki te whakatau i te UID o tētahi kaiwhakamahi kāore i te tīariari.
I whakaaturia hoki ngā ngoikoretanga maha i roto i te xlock, S/Key me te manatoko Yubikey, me te su, kāore e pā ana ki te whakatakotoranga kaiwhakamahi "-schallenge". Mā te ngoikoretanga i roto i te xlock ka taea e te kaiwhakamahi paerewa te whakanui ake i ngā mana ki te rōpū manatoko. Mā te hapa i roto i ngā tikanga manatoko S/Key me Yubikey ka taea te whakanui ake i ngā mana mai i te rōpū manatoko ki te kaiwhakamahi pakiaka, engari kāore tēnei e mahi i roto i te whirihoranga OpenBSD taunoa nā te mea kua monokia te manatoko S/Key me Yubikey. Hei whakamutunga, mā te ngoikoretanga i roto i te su ka taea e te kaiwhakamahi te whakanui ake i ngā rohe rauemi pūnaha, pērā i te maha o ngā whakaahuatanga kōnae tuwhera.
I tēnei wā, kua whakatikahia ngā ngoikoretanga, kei te wātea ngā whakahōutanga haumarutanga mā te tikanga paerewa syspatch(8).
Source: linux.org.ru
