{"id":120285,"date":"2024-10-25T13:09:16","date_gmt":"2024-10-25T11:09:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-networkmanager-libreswan-i-guix-daemon-pozvolyayushhie-povysit-privilegii-v-sisteme"},"modified":"2024-10-25T13:09:16","modified_gmt":"2024-10-25T11:09:16","slug":"uyazvimost-v-networkmanager-libreswan-i-guix-daemon-pozvolyayushhie-povysit-privilegii-v-sisteme","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-networkmanager-libreswan-i-guix-daemon-pozvolyayushhie-povysit-privilegii-v-sisteme","title":{"rendered":"Vulnerabilitate \u00een NetworkManager-libreswan \u0219i guix-daemon, care permite cre\u0219terea privilegiilor \u00een sistem","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\u00cen pluginul NetworkManager-libreswan, care adaug\u0103 func\u021bionalit\u0103\u021bi de conectare la VPN compatibile cu serverele bazate pe Libreswan \u0219i Cisco IPsec, a fost descoperit\u0103 o vulnerabilitate (CVE-2024-9050) care poate fi exploatat\u0103 de un utilizator local pentru a-\u0219i cre\u0219te privilegiile. Vulnerabilitatea a fost remediat\u0103 \u00een actualizarea NetworkManager-libreswan 1.2.24. Urm\u0103ri\u021bi apari\u021bia actualiz\u0103rilor \u00een distribu\u021biile disponibile pe urm\u0103toarele pagini: Debian, Ubuntu, RHEL, SUSE\/openSUSE, Fedora. <\/p>\n

Problema este cauzat\u0103 de o verificare incorect\u0103 a configura\u021biei VPN<\/a>, definit\u0103 de c\u0103tre utilizatorul local f\u0103r\u0103 privilegii \u0219i transmis\u0103 direct \u00een Libreswan la \u00eencercarea de activare a conexiunii. \u00cen special, pluginul nu verifica utilizarea caracterelor de evadare, cum ar fi caracterul de sf\u00e2r\u0219it de linie «\n», care ar putea fi utilizate pentru a separa set\u0103rile individuale specificate \u00eentr-o singur\u0103 linie. <\/p>\n

Prin urmare, atacatorul ar fi putut specifica, \u00een cadrul unuia dintre parametrii permisi, parametrul «leftupdown», interzis utilizatorilor f\u0103r\u0103 privilegii \u0219i care define\u0219te un script executat cu drepturi de root \u00een timpul instal\u0103rii conexiunii. De exemplu, pentru a lansa programul \/bin\/true, la parametrul permis «hostaddrfamily» se pot ata\u0219a urm\u0103toarele set\u0103ri: hostaddrfamily=ipv4\n leftupdown=\/bin\/true\n ikev2=never\n leftxauthclient=yes\n leftusername=username\n phase2alg=aes256-sha1\n authby=secret\n left=faultroute\n leftmodecfgclient=yes\n right=172.31.79.2\nconn ign <\/p>\n

O alt\u0103 vulnerabilitate a fost identificat\u0103 \u00een procesul de fundal guix-daemon, utilizat \u00een distribu\u021biile bazate pe managerul de pachete GNU Guix. Vulnerabilitatea prezint\u0103 un pericol pentru sistemele multi-utilizator \u0219i permite unui utilizator local s\u0103 ob\u021bin\u0103 privilegii de la orice utilizator care efectueaz\u0103 construc\u021bia pachetelor (build user) \u0219i s\u0103 aduc\u0103 modific\u0103ri \u00een rezultatul construc\u021biei. Esen\u021ba vulnerabilit\u0103\u021bii este c\u0103 atacatorul poate lansa o construc\u021bie derivat\u0103, iar dac\u0103 procesul de construc\u021bie este \u00eentrerupt, fi\u0219ierele suid deja create r\u0103m\u00e2n accesibile altor utilizatori ai sistemului. Dup\u0103 aceea, atacatorul poate utiliza un fi\u0219ier suid creat pentru a suspenda procesul de construc\u021bie, a deschide orice fi\u0219ier prin \/proc\/$PID\/fd cu drepturile utilizatorului care efectueaz\u0103 construc\u021bia \u0219i a suprascrie fi\u0219ierele cu rezultatele construc\u021biei.)
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 NetworkManager-libreswan, \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u043c \u0432 NetworkManager \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a VPN, \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u044b\u043c \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 \u043d\u0430 \u0431\u0430\u0437\u0435 Libreswan \u0438 Cisco IPsec, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-9050), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 NetworkManager-libreswan 1.2.24. \u041f\u0440\u043e\u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0437\u0430 \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0432 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 \u043c\u043e\u0436\u043d\u043e \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\u0445: Debian, Ubuntu, RHEL, SUSE\/openSUSE, Fedora. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-120285","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilitate \u00een NetworkManager-libreswan \u0219i guix-daemon, care permit cre\u0219terea privilegiilor \u00een sistem | ProHoster","description":"\u00cen pluginul NetworkManager-libreswan, care adaug\u0103 func\u021bionalitate \u00een NetworkManager pentru conectarea la VPN-uri compatibile cu serverele bazate pe Libreswan \u0219i Cisco IPsec, a fost identificat\u0103 o vulnerabilitate (CVE-2024-9050), care poate.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-networkmanager-libreswan-i-guix-daemon-pozvolyayushhie-povysit-privilegii-v-sisteme","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 NetworkManager-libreswan \u0438 guix-daemon, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 | ProHoster","og:description":"\u0412 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 NetworkManager-libreswan, \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u043c \u0432 NetworkManager \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a VPN, \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u044b\u043c \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 \u043d\u0430 \u0431\u0430\u0437\u0435 Libreswan \u0438 Cisco IPsec, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-9050), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-networkmanager-libreswan-i-guix-daemon-pozvolyayushhie-povysit-privilegii-v-sisteme","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-10-25T11:09:16+00:00","article:modified_time":"2024-10-25T11:09:16+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"120285","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-04 15:02:21","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 07:28:20","updated":"2026-02-04 15:02:21","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/120285","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=120285"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/120285\/revisions"}],"predecessor-version":[{"id":156887,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/120285\/revisions\/156887"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=120285"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=120285"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=120285"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}