He whakaraeraetanga (CVE-2025-32433) kua kitea i roto i te whare pukapuka ssh, he waahanga o te kete taputapu Erlang/OTP, ka taea te mahi mamao o te waehere i runga i te tūmau SSH i hangaia ma te whakamahi i te whare pukapuka whakaraerae me te kore motuhēhēnga. Ko te raruraru kua whakatauhia he tino nui (10 o te 10).
Kua whakaritea e tetahi kairangahau haumarutanga he mahi mahi hei mahi waehere ki runga i nga tūmau SSH whakaraerae. Ko te mea nui, e ai ki te kairangahau, i hangaia te waehere ma te whakamahi i nga kaiawhina AI GPT-4, Cursor me Sonnet i runga i te tātaritanga o te huringa papaki i whakauruhia he whakamatautau ki te manatoko kua whakatauhia te take.
Ka whakaratohia e te whare pukapuka o te kaupapa Erlang/OTP ngā whakatinanatanga kiritaki kua oti te hanga, ā, tūmau Ngā tūmau SSH me SFTP e tautoko ana i te kawa SSH 2.0. Ka taea te tautuhi i ngā tūmau SSH raruraru mā te pane "SSH-2.0-Erlang/version". Ka whakamahia ngā tūmau SSH e hangai ana ki a Erlang/OTP i roto i ngā pūnaha motuhake, pērā i te IoT me ngā taputapu rorohiko taha, ā, hei taputapu patuiro—mā Erlang ka māmā ake te whakahohe i tētahi tūmau SSH mō te patuiro mamao o ngā tono (e whakaarohia ana kua waiho pea tēnei āhuatanga patuiro kia whakahohea i roto i te maha o ngā kaupapa kua tuhia ki Erlang). Ka pā anō hoki te take ki te kete taputapu Elixir (kua whakatinanahia ki runga ake i a Erlang) me te anga Phoenix e hangai ana ki a ia, engari kāore te tūmau SSH i Phoenix e whakaae ana ki ngā tono mai i ngā whatunga o waho i te taunoa.
Ko te whakaraeraetanga he hapa i roto i te waehere panui karere, na te mea ko nga karere SSH_MSG_CHANNEL_REQUEST, e tuku ana i te whakatinanatanga o te whakahau "exec", ka tukatukahia i te waahi o mua i te motuhēhēnga. He tauira waehere mai i te whakamahi: command = 'file:write_file(“/lab.txt”, <<“pwned”>>).' hoki mai (b"\x62″ # SSH_MSG_CHANNEL_REQUEST + struct.pack(">I", channel_id) + string_payload("exec") + b"\x01″ # want_reply = pono + string_payload(whakahau) )
Kua whakatikahia te ngoikoretanga i roto i te Erlang/OTP-27.3.3, 26.2.5.11, me te 25.3.2.20. Ka taea e koe te whai i te ahunga whakamua o ngā whakatikatika ngoikoretanga i roto i ēnei tohatoha i ngā whārangi e whai ake nei: Debian, Ubuntu, Fedora, SUSE/openSUSE, RHEL, Arch, FreeBSD.
Source: opennet.ru
