{"id":120285,"date":"2024-10-25T13:09:16","date_gmt":"2024-10-25T11:09:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-networkmanager-libreswan-i-guix-daemon-pozvolyayushhie-povysit-privilegii-v-sisteme"},"modified":"2024-10-25T13:09:16","modified_gmt":"2024-10-25T11:09:16","slug":"uyazvimost-v-networkmanager-libreswan-i-guix-daemon-pozvolyayushhie-povysit-privilegii-v-sisteme","status":"publish","type":"post","link":"https:\/\/prohoster.info\/nl\/blog\/news\/uyazvimost-v-networkmanager-libreswan-i-guix-daemon-pozvolyayushhie-povysit-privilegii-v-sisteme","title":{"rendered":"Kwetsbaarheid in NetworkManager-libreswan en guix-daemon, waardoor privileges in het systeem kunnen worden verhoogd","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

In de NetworkManager-libreswan plug-in, die functionaliteit toevoegt voor het verbinden met VPN's die compatibel zijn met servers gebaseerd op Libreswan en Cisco IPsec, is een kwetsbaarheid vastgesteld (CVE-2024-9050) die kan worden gebruikt door lokale gebruikers om hun privileges te verhogen. De kwetsbaarheid is verholpen in de update van NetworkManager-libreswan 1.2.24. Updates in de distributies kunnen worden gevolgd op de volgende pagina's: Debian, Ubuntu, RHEL, SUSE\/openSUSE, Fedora. <\/p>\n

Het probleem wordt veroorzaakt door een onjuiste controle van de configuratie VPN<\/a>, gedefinieerd door de lokale niet-bevoorrechte gebruiker en rechtstreeks doorgegeven aan Libreswan bij de poging om de verbinding te activeren. In het bijzonder werd in de plug-in geen controle uitgevoerd op het gebruik van escape-tekens, zoals de nieuwe regel «\n», die gebruikt konden worden om afzonderlijke instellingen, opgegeven in \u00e9\u00e9n regel, te scheiden. <\/p>\n

Daarom kon de aanvaller een van de toegestane parameters opgeven, de parameter «leftupdown», die verboden is voor niet-bevoorrechte gebruikers en een script definieert dat met root-rechten wordt uitgevoerd tijdens het opzetten van de verbinding. Bijvoorbeeld, om het programma \/bin\/true aan de toegestane parameter «hostaddrfamily» te koppelen, kunnen de volgende instellingen worden toegevoegd: hostaddrfamily=ipv4\n leftupdown=\/bin\/true\n ikev2=never\n leftxauthclient=yes\n leftusername=username\n phase2alg=aes256-sha1\n authby=secret\n left=faultroute\n leftmodecfgclient=yes\n right=172.31.79.2\nconn ign <\/p>\n

Een andere kwetsbaarheid is ontdekt in het achtergrondproces guix-daemon, gebruikt in distributies die zijn gebaseerd op de GNU Guix pakketbeheerder. De kwetsbaarheid vormt een risico voor multi-user systemen en stelt een lokale gebruiker in staat om privileges van elke gebruiker die pakketten bouwt (build user) te verkrijgen en wijzigingen aan te brengen in het resultaat van de building. De essentie van de kwetsbaarheid is dat een aanvaller een afgeleide build kan starten en als het buildproces wordt onderbroken, blijven de reeds gemaakte suid-bestanden toegankelijk voor andere gebruikers van het systeem. Daarna kan de aanvaller het gemaakte suid-bestand gebruiken om het buildproces te pauzeren, elk bestand te openen via \/proc\/$PID\/fd met de rechten van de building gebruiker en bestanden te overschrijven met de resultaatbestanden van de build).
\n
Bron: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 NetworkManager-libreswan, \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u043c \u0432 NetworkManager \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a VPN, \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u044b\u043c \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 \u043d\u0430 \u0431\u0430\u0437\u0435 Libreswan \u0438 Cisco IPsec, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-9050), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 NetworkManager-libreswan 1.2.24. \u041f\u0440\u043e\u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0437\u0430 \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0432 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 \u043c\u043e\u0436\u043d\u043e \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\u0445: Debian, Ubuntu, RHEL, SUSE\/openSUSE, Fedora. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-120285","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Kwetsbaarheid in NetworkManager-libreswan en guix-daemon, die het mogelijk maken om privileges in het systeem te verhogen | ProHoster","description":"In de plugin NetworkManager-libreswan, die functionaliteit toevoegt aan NetworkManager voor verbinding met VPN's die compatibel zijn met servers op basis van Libreswan en Cisco IPsec, is een kwetsbaarheid ontdekt (CVE-2024-9050), die kan.","canonical_url":"https:\/\/prohoster.info\/nl\/blog\/news\/uyazvimost-v-networkmanager-libreswan-i-guix-daemon-pozvolyayushhie-povysit-privilegii-v-sisteme","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"nl_NL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 NetworkManager-libreswan \u0438 guix-daemon, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 | ProHoster","og:description":"\u0412 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 NetworkManager-libreswan, \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u043c \u0432 NetworkManager \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a VPN, \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u044b\u043c \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 \u043d\u0430 \u0431\u0430\u0437\u0435 Libreswan \u0438 Cisco IPsec, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-9050), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442.","og:url":"https:\/\/prohoster.info\/nl\/blog\/news\/uyazvimost-v-networkmanager-libreswan-i-guix-daemon-pozvolyayushhie-povysit-privilegii-v-sisteme","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-10-25T11:09:16+00:00","article:modified_time":"2024-10-25T11:09:16+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"120285","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-04 15:02:21","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 07:28:20","updated":"2026-02-04 15:02:21","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/posts\/120285","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/comments?post=120285"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/posts\/120285\/revisions"}],"predecessor-version":[{"id":156887,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/posts\/120285\/revisions\/156887"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/media?parent=120285"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/categories?post=120285"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/tags?post=120285"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}