Zovuta zomwe zimalola mizu kulowa mu dongosolo zapezeka mu smb4k utility yomwe imagwiritsidwa ntchito mu KDE kuzindikira ndikuyika magawo a SMB. Mavutowa akonzedwa mu Smb4K 4.0.5. Mutha kuwona momwe phukusi latsopanoli lilili kapena chigamba chomwe chikukonzedwa kuti chigawidwe patsamba lotsatirali: Debian, Ubuntu, Fedora, SUSE/openSUSE, Gentoo, Arch ndi FreeBSD.
Smb4k imagwiritsa ntchito ma handler a KAuth omwe akuyenda ndi root privileges kuti achite zinthu zapadera. Zofooka zomwe zilipo mu Smb4KMountHelper handler ndipo zimachitika chifukwa cha kuyika kwa netiweki file system (CVE-2025-66003) ndi unmounting (CVE-2025-66002) ntchito zomwe sizimasefa bwino zosankha zomwe zimaperekedwa ku malamulo a mount.cifs ndi unmount.cifs, zomwe zimalola wogwiritsa ntchito wopanda privileges kupereka zosankha zilizonse ku malamulo awa kudzera mu mh_options parameter.
Mwachitsanzo, pogwiritsa ntchito njira ya "filemode=04777,uid=0", mafayilo onse omwe ali pagawo lokwezedwa adzawonetsedwa ngati suid root. Wogwiritsa ntchito akhoza kuyambitsa seva ya SMB ndikuyika gawo lopangidwa kuchokera pamenepo ndi mafayilo ofunikira omwe angathe kuchitidwa, omwe, akayikidwa ku "filemode=04777,uid=0," adzachitika ndi mwayi wa mizu.
Woyang'anira Smb4KMountHelper sanatsimikizire bwino ma target directories, omwe, mwachitsanzo, analola kuti gawo la SMB likhazikitsidwe m'malo mwa /bin directory ndi mtundu wosinthidwa wa /bin/bash ulowemo. Kuphatikiza apo, gawo la mh_krb5ticket lingagwiritsidwe ntchito kusintha njira yopita ku fayilo ya Kerberos credentials ndikutulutsa zomwe zili mu fayilo iliyonse, monga /etc/shadow, ku stderr kapena log yomwe anthu ambiri angapeze.
Kufooka kwa ntchito ya Smb4KMountHelper::unmount() kungagwiritsidwe ntchito kuyambitsa kukanidwa kwa ntchito pochotsa magawo a dongosolo posintha gawo la mh_mountpoint. Chosangalatsa n'chakuti, khodiyi inali ndi cheke cha mtundu wa magawo chomwe chimalola ma cifs, smbfs, ndi smb3 partitions okha, koma mawu akuti "return" analibe mu if block yofotokozera cholakwika, ndipo kuchita sikunathe.
Source: opennet.ru
