{"id":114973,"date":"2024-04-10T14:30:01","date_gmt":"2024-04-10T12:30:01","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-batbadbut-zatragivayushhaya-standartnye-biblioteki-razlichnyh-yazykov-programmirovaniya"},"modified":"2024-04-10T14:30:01","modified_gmt":"2024-04-10T12:30:01","slug":"uyazvimost-batbadbut-zatragivayushhaya-standartnye-biblioteki-razlichnyh-yazykov-programmirovaniya","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-batbadbut-zatragivayushhaya-standartnye-biblioteki-razlichnyh-yazykov-programmirovaniya","title":{"rendered":"Vulnerabilitatea BatBadBut, care afecteaz\u0103 bibliotecile standard ale diferitelor limbaje de programare","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Aplica\u021biile care ruleaz\u0103 scripturi \u00een format bat \u0219i cmd pe platforma Windows utiliz\u00e2nd func\u021biile standard de lansare a proceselor sunt vulnerabile, permi\u021b\u00e2nd executarea codului propriu \u00een cazul \u00een care argumentele sunt transmise la lansare f\u0103r\u0103 o escapare separat\u0103 a caracterelor speciale. Vulnerabilitatea a primit numele de cod BatBadBut \u0219i se manifest\u0103 \u00een aplica\u021biile care utilizeaz\u0103 biblioteci standard ale unor limbaje, precum Rust, PHP, Node.js, Python, Ruby, Go, Erlang \u0219i Haskell. <\/p>\n

Problema a fost marcat\u0103 ca vulnerabilitate deoarece afecteaz\u0103 func\u021bii ale bibliotecii, cum ar fi Command::arg \u0219i Command::args \u00een Rust, care sunt concepute pentru a transmite argumente direct procesului, f\u0103r\u0103 a fi procesate de interpretul de comenzi. Se presupune c\u0103 dezvoltatorul aplica\u021biei poate s\u0103 nu verifice argumentele, deoarece acestea sunt transmise direct procesului lansat. \u00cen sistemele Unix, argumentele sunt transmise procesului separat \u00eentr-un array, \u00een timp ce \u00een Windows, atunci c\u00e2nd se utilizeaz\u0103 API-ul CreateProcess, argumentele sunt prezentate sub form\u0103 de un singur \u0219ir, analiza revenind procesului lansat. <\/p>\n

C\u00e2nd se lanseaz\u0103 scripturi bat \u0219i cmd pe platforma Windows, func\u021bia CreateProcess() implic\u0103 implicit fi\u0219ierul executabil cmd.exe, chiar dac\u0103 aplica\u021bia nu \u00eel specific\u0103 la apel. Programul cmd.exe are o logic\u0103 complex\u0103 proprie pentru delimitarea argumentelor, separ\u00e2nd argumentele proprii, ale scriptului lansat, \u0219i argumentele acelui script. Pentru a proteja \u00eempotriva substitu\u021biei argumentelor pe platforma Windows, bibliotecile standard ale limbajelor de programare aplic\u0103 gestionatori separa\u021bi de escapare, care, s-a constatat, pot fi ocoli\u021bi prin manipularea cu ghilimelele duble. <\/p>\n

De exemplu, \u00eentr-un program care apeleaz\u0103 scriptul '.\/test.bat' cu un argument bazat pe datele primite de la utilizator, un atacator poate transmite valoarea '\u00bb&calc.exe', care, la rularea scriptului, va fi desf\u0103cut\u0103 \u00een \u0219irul 'C:\\Windows\\System32\\cmd.exe \/c .\\test.bat \u00ab\u00bb&calc.exe' \u0219i va duce la lansarea procesului calc.exe. Metoda func\u021bioneaz\u0103 \u0219i \u00een cazul lans\u0103rii implicite a scripturilor, c\u00e2nd se lanseaz\u0103 un fi\u0219ier executabil numit 'test' f\u0103r\u0103 a specifica extensia, iar \u00eentr-unul dintre directoarele men\u021bionate \u00een variabila de mediu PATH exist\u0103 fi\u0219ierul 'test.bat'. <\/p>\n

\u00cen prezent, a fost lansat\u0103 o corec\u021bie (CVE-2024-24576) pentru biblioteca standard a limbajului Rust \u0219i a fost inclus\u0103 \u00een actualizarea Rust 1.77.2. Actualiz\u0103rile pentru Node.js \u0219i PHP sunt \u00een curs de preg\u0103tire (etichetele 8.2.18 \u0219i 8.3.5 au fost deja create, dar lans\u0103rile nu au fost \u00eenc\u0103 anun\u021bate). Proiectele Python, Ruby, Go, Erlang \u0219i Haskell s-au limitat p\u00e2n\u0103 acum la a ad\u0103uga \u00een documenta\u021bie un avertisment cu privire la manifestarea vulnerabilit\u0103\u021bii \u00een absen\u021ba unei corecte escap\u0103ri a caracterelor speciale. <\/p>\n

\u00cen Rust 1.77.2, biblioteca standard a fost ad\u0103ugat\u0103 cu o verificare suplimentar\u0103 care returneaz\u0103 o eroare dac\u0103 argumentul scriptului executabil con\u021bine caractere speciale care nu pot fi garantate c\u0103 sunt procesate \u00een siguran\u021b\u0103. Pentru dezvoltatorii care implementeaz\u0103 singuri logica de escapare, a fost furnizat\u0103 metoda CommandExt::raw_arg, care dezactiveaz\u0103 complet escaparea \u00een apelurile bibliotecilor. <\/p>\n

Ad\u0103ugarea unei protec\u021bii este \u00eempiedicat\u0103 de faptul c\u0103 simpla escapare a ghilimelelor nu este suficient\u0103, deoarece interpretul de comenzi proceseaz\u0103 \u0219i dezv\u0103luie variabile precum '\"%PATH%\"'. De exemplu, ghilimea poate fi inserat\u0103 prin manipularea variabilei de mediu '\"%CMDCMDLINE%\"', specific\u00e2nd \u00een loc de '\u00bb&calc.exe' - '\"%CMDCMDLINE:~-1%&calc.exe\"'.
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u044e\u0449\u0438\u0435 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0438 \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 bat \u0438 cmd \u043d\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Windows \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u0448\u0442\u0430\u0442\u043d\u044b\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432, \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u043f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0431\u0435\u0437 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u043f\u0435\u0446\u0441\u0438\u043c\u0432\u043e\u043b\u043e\u0432. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f BatBadBut \u0438 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0435 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u0442\u0430\u043a\u0438\u0445 \u044f\u0437\u044b\u043a\u043e\u0432, \u043a\u0430\u043a Rust, PHP, Node.js, Python, Ruby, Go, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-114973","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Vulnerabilitatea BatBadBut, care afecteaz\u0103 bibliotecile standard ale diferitelor limbaje de programare | ProHoster","description":"Aplica\u021biile care execut\u0103 scripturi \u00een format bat \u0219i cmd pe platforma Windows prin func\u021biile standard de lansare a proceselor sunt vulnerabile la o vulnerabilitate care permite executarea codului propriu \u00een cazul \u00een care acesta este transmis \u00een timpul lans\u0103rii.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-batbadbut-zatragivayushhaya-standartnye-biblioteki-razlichnyh-yazykov-programmirovaniya","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c BatBadBut, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0435 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u044f\u0437\u044b\u043a\u043e\u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f | ProHoster","og:description":"\u041f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u044e\u0449\u0438\u0435 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0438 \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 bat \u0438 cmd \u043d\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Windows \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u0448\u0442\u0430\u0442\u043d\u044b\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432, \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u043f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-batbadbut-zatragivayushhaya-standartnye-biblioteki-razlichnyh-yazykov-programmirovaniya","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-04-10T12:30:01+00:00","article:modified_time":"2024-04-10T12:30:01+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"114973","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 21:58:50","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-22 21:58:50","updated":"2026-01-22 21:58:50","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/114973","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=114973"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/114973\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=114973"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=114973"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=114973"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}