{"id":105528,"date":"2022-11-12T15:36:44","date_gmt":"2022-11-12T13:36:44","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-xterm-privodyashhaya-k-vypolneniyu-koda-pri-obrabotke-opredelyonnyh-strok"},"modified":"2022-11-12T15:36:44","modified_gmt":"2022-11-12T13:36:44","slug":"uyazvimost-v-xterm-privodyashhaya-k-vypolneniyu-koda-pri-obrabotke-opredelyonnyh-strok","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-xterm-privodyashhaya-k-vypolneniyu-koda-pri-obrabotke-opredelyonnyh-strok","title":{"rendered":"Vulnerabilitate \u00een xterm, care duce la execu\u021bia de cod la procesarea anumitor \u0219iruri","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Emulatorul de terminal xterm prezint\u0103 o vulnerabilitate (CVE-2022-45063) care permite executarea de comenzi shell prin procesarea unor secven\u021be de escape specifice \u00een terminal. Pentru atac, \u00een cel mai simplu caz, este suficient s\u0103 se afi\u0219eze pe ecran con\u021binutul unui fi\u0219ier special creat, de exemplu, folosind utilitarul cat, sau s\u0103 se insereze o linie din clipboard. printf «\e]50;i\$(touch \\\/tmp\\\/hack-like-its-1999)\a\e]50;?\a» > cve-2022-45063 cat cve-2022-45063 <\/p>\n

Problema este cauzat\u0103 de o eroare \u00een procesarea secven\u021bei de escape cu codul 50, utilizat\u0103 pentru setarea sau ob\u021binerea parametrilor fontului. Dac\u0103 fontul solicitat nu exist\u0103, opera\u021bia returneaz\u0103 numele fontului specificat \u00een cerere. Direct, caracterele de control nu pot fi incluse \u00een nume, dar \u0219irul returnat poate fi terminat cu secven\u021ba «^G», care \u00een zsh, \u00een modul de editare a liniilor de tip vi, determin\u0103 efectuarea opera\u021biei de deschidere a listei, ceea ce poate fi folosit pentru a lansa comenzi f\u0103r\u0103 a ap\u0103sa explicit tasta Enter. <\/p>\n

Pentru a exploata cu succes vulnerabilitatea, utilizatorul trebuie s\u0103 foloseasc\u0103 shell-ul Zsh cu editorul de comand\u0103 tradus \u00een modul «vi» (vi-cmd-mode), care de obicei nu este utilizat implicit \u00een distribu\u021bii. Problema nu se manifest\u0103 de asemenea atunci c\u00e2nd se seteaz\u0103 \u00een xterm op\u021biunile allowWindowOps=false sau allowFontOps=false. De exemplu, setarea allowFontOps=false este activat\u0103 \u00een OpenBSD, Debian \u0219i RHEL, dar nu este aplicat\u0103 \u00een mod implicit \u00een Arch Linux. <\/p>\n

Conform listei de modific\u0103ri \u0219i declara\u021biei cercet\u0103torului care a descoperit problema, vulnerabilitatea a fost remediat\u0103 \u00een versiunea xterm 375, dar din alte surse reiese c\u0103 vulnerabilitatea continu\u0103 s\u0103 apar\u0103 \u00een xterm 375 din Arch Linux. Po\u021bi urm\u0103ri publicarea corec\u021biilor distribuitorilor pe aceste pagini: Debian, RHEL, Fedora, SUSE, Ubuntu, Arch Linux, OpenBSD, FreeBSD, NetBSD.
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u044d\u043c\u0443\u043b\u044f\u0442\u043e\u0440\u0435 \u0442\u0435\u0440\u043c\u0438\u043d\u0430\u043b\u0430 xterm \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2022-45063), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f shell-\u043a\u043e\u043c\u0430\u043d\u0434 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0432 \u0442\u0435\u0440\u043c\u0438\u043d\u0430\u043b\u0435 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0445 escape-\u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0435\u0439. \u0414\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u0432 \u043f\u0440\u043e\u0441\u0442\u0435\u0439\u0448\u0435\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0432\u044b\u0432\u0435\u0441\u0442\u0438 \u043d\u0430 \u044d\u043a\u0440\u0430\u043d \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u0443\u0442\u0438\u043b\u0438\u0442\u044b cat, \u0438\u043b\u0438 \u0432\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0441\u0442\u0440\u043e\u043a\u0443 \u0438\u0437 \u0431\u0443\u0444\u0435\u0440\u0430 \u043e\u0431\u043c\u0435\u043d\u0430. printf «\e]50;i\$(touch \/tmp\/hack-like-its-1999)\a\e]50;?\a» > cve-2022-45063 cat cve-2022-45063 \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 escape-\u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0441 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-105528","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilitate \u00een xterm care duce la executarea codului prin procesarea anumitor \u0219iruri | ProHoster","description":"\u00cen emulatorul de terminal xterm a fost descoperit\u0103 o vulnerabilitate (CVE-2022-45063), care permite executarea comenzilor shell prin procesarea anumitor secven\u021be de escape \u00een terminal.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-xterm-privodyashhaya-k-vypolneniyu-koda-pri-obrabotke-opredelyonnyh-strok","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 xterm, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0445 \u0441\u0442\u0440\u043e\u043a | ProHoster","og:description":"\u0412 \u044d\u043c\u0443\u043b\u044f\u0442\u043e\u0440\u0435 \u0442\u0435\u0440\u043c\u0438\u043d\u0430\u043b\u0430 xterm \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2022-45063), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f shell-\u043a\u043e\u043c\u0430\u043d\u0434 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0432 \u0442\u0435\u0440\u043c\u0438\u043d\u0430\u043b\u0435 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0445 escape-\u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0435\u0439.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-xterm-privodyashhaya-k-vypolneniyu-koda-pri-obrabotke-opredelyonnyh-strok","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-11-12T13:36:44+00:00","article:modified_time":"2022-11-12T13:36:44+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/105528","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=105528"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/105528\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=105528"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=105528"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=105528"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}