{"id":119929,"date":"2024-09-24T09:43:11","date_gmt":"2024-09-24T07:43:11","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimosti-v-pcp-i-nix-pozvolyayushhie-podnyat-privilegii-v-sisteme"},"modified":"2024-09-24T09:43:11","modified_gmt":"2024-09-24T07:43:11","slug":"uyazvimosti-v-pcp-i-nix-pozvolyayushhie-podnyat-privilegii-v-sisteme","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimosti-v-pcp-i-nix-pozvolyayushhie-podnyat-privilegii-v-sisteme","title":{"rendered":"Vulnerabilit\u0103\u021bi \u00een PCP \u0219i Nix, care permit escaladarea privilegiilor \u00een sistem","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\u00cen instrumentele PCP (Performance Co-Pilot), utilizate pentru a colecta statistici despre performan\u021ba sistemului (de exemplu, utilizate \u00een interfa\u021ba Cockpit), au fost identificate dou\u0103 vulnerabilit\u0103\u021bi. Prima vulnerabilitate (CVE-2024-45770) se g\u0103se\u0219te \u00een utilitarul pmpost, destinat trimiterii mesajelor \u00een jurnal \u0219i care, \u00een anumite condi\u021bii de execu\u021bie, ruleaz\u0103 cu privilegii elevate. Exploatarea vulnerabilit\u0103\u021bii permite executarea de cod cu drepturi de root, dar pentru a efectua atacul este necesar accesul la contul PCP. Atacul const\u0103 \u00een \u00eenlocuirea cu un link simbolic al fi\u0219ierului \"\/var\/log\/pcp\/NOTICES\", \u00een care se face \u00eenregistrarea din proces cu drepturi de root f\u0103r\u0103 a utiliza, la deschiderea fi\u0219ierului, flagul O_NOFOLLOW. <\/p>\n

A doua vulnerabilitate \u00een PCP (CVE-2024-45769) afecteaz\u0103 procesul \u00een background pcmd \u0219i duce la accesarea memoriei \u00een afara buffer-ului atunci c\u00e2nd sunt trimise date special formulate. Pericolul acestei vulnerabilit\u0103\u021bi este diminuat de faptul c\u0103, \u00een mod implicit, pcmd are dezactivat\u0103 acceptarea cererilor de re\u021bea din alte sisteme. Vulnerabilit\u0103\u021bile au fost remediate \u00een versiunea PCP 6.3.1. Problemele au fost identificate \u00een urma unui audit efectuat de c\u0103tre dezvoltatorii proiectului SUSE. <\/p>\n

\u00cen plus, o vulnerabilitate (CVE-2024-45593) a fost identificat\u0103 \u00een managerul de pachete Nix, folosit \u00een distribu\u021bia NixOS. Vulnerabilitatea permite, la despachetarea fi\u0219ierelor special formulate \u00een format NAR (Nix Archive), scrierea \u00een zone arbitrare ale sistemului de fi\u0219iere, \u00een func\u021bie de drepturile de acces ale procesului de manipulare (atunci c\u00e2nd se utilizeaz\u0103 procesul \u00een fundal Nix, despachetarea se realizeaz\u0103 cu drepturi de root). Problema apare \u00een ramura Nix 2.24 \u0219i a fost remediat\u0103 \u00een versiunea 2.24.6. <\/p>\n

De asemenea, se poate men\u021biona publicarea unui avertisment cu privire la identificarea unei vulnerabilit\u0103\u021bi critice care afecteaz\u0103 distribu\u021biile GNU\/Linux \u0219i care permite, de la distan\u021b\u0103 \u0219i f\u0103r\u0103 autentificare, executarea de cod \u00een sistem. \u00cen prezent, nu exist\u0103 informa\u021bii despre natura problemei \u0219i subsistemele pe care le afecteaz\u0103; se men\u021bioneaz\u0103 doar c\u0103, \u00een colaborare cu dezvoltatorii distribu\u021biilor, un raport ini\u021bial despre problem\u0103 este planificat s\u0103 fie publicat pe 30 septembrie, iar un raport complet cu detalii - pe 6 octombrie. Problemei nu i s-a atribuit \u00eenc\u0103 un CVE. Conform declara\u021biilor cercet\u0103torului care a identificat problema, companiile Canonical \u0219i Red Hat au atribuit vulnerabilit\u0103\u021bii un nivel critic de gravitate (9.9 din 10).
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0438 PCP (Performance Co-Pilot), \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u043c \u0434\u043b\u044f \u0441\u0431\u043e\u0440\u0430 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0438 \u043e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 Cockpit), \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u041f\u0435\u0440\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-45770) \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 pmpost, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u043e\u0439 \u0434\u043b\u044f \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u0432 \u043b\u043e\u0433 \u0438 \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c\u043e\u0439 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root, \u043d\u043e \u0434\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-119929","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilit\u0103\u021bi \u00een PCP \u0219i Nix, care permit ridicarea privilegiilor \u00een sistem | ProHoster","description":"\u00cen instrumentarul PCP (Performance Co-Pilot), folosit pentru colectarea statisticilor de performan\u021b\u0103 a sistemului (de exemplu, utilizat \u00een interfa\u021ba Cockpit), au fost identificate dou\u0103 vulnerabilit\u0103\u021bi.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimosti-v-pcp-i-nix-pozvolyayushhie-podnyat-privilegii-v-sisteme","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 PCP \u0438 Nix, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u0434\u043d\u044f\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 | ProHoster","og:description":"\u0412 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0438 PCP (Performance Co-Pilot), \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u043c \u0434\u043b\u044f \u0441\u0431\u043e\u0440\u0430 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0438 \u043e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 Cockpit), \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimosti-v-pcp-i-nix-pozvolyayushhie-podnyat-privilegii-v-sisteme","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-09-24T07:43:11+00:00","article:modified_time":"2024-09-24T07:43:11+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"119929","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 06:47:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 06:47:22","updated":"2026-01-23 06:47:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/119929","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=119929"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/119929\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=119929"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=119929"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=119929"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}