{"id":151538,"date":"2025-12-14T11:11:58","date_gmt":"2025-12-14T09:11:58","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-utilite-smb4k-pozvolyayushhaya-poluchit-prava-root-v-sisteme"},"modified":"2025-12-14T11:11:58","modified_gmt":"2025-12-14T09:11:58","slug":"uyazvimost-v-utilite-smb4k-pozvolyayushhaya-poluchit-prava-root-v-sisteme","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-utilite-smb4k-pozvolyayushhaya-poluchit-prava-root-v-sisteme","title":{"rendered":"O vulnerabilitate \u00een utilitarul smb4k, permi\u021b\u00e2nd ob\u021binerea drepturilor root \u00een sistem.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\u00cen utilitarul smb4k, folosit \u00een KDE pentru detectarea \u0219i montarea partaj\u0103rilor SMB, au fost identificate vulnerabilit\u0103\u021bi care permit ob\u021binerea accesului root la sistem. Problemele au fost rezolvate \u00een versiunea Smb4K 4.0.5. Pute\u021bi verifica starea noii versiuni a pachetului sau a corec\u021biei \u00een distribu\u021bii pe urm\u0103toarele pagini: Debian, Ubuntu, Fedora, SUSE\/openSUSE, Gentoo, Arch \u0219i FreeBSD. <\/p>\n

Pentru a efectua ac\u021biuni privilegiate \u00een smb4k, se folosesc procesori KAuth, care sunt lansate cu drepturi de root. Vulnerabilit\u0103\u021bile sunt prezente \u00een procesorul Smb4KMountHelper \u0219i sunt cauzate de faptul c\u0103 func\u021biile pentru montare (CVE-2025-66003) \u0219i demontare (CVE-2025-66002) a sistemului de fi\u0219iere de re\u021bea nu filtrau corect op\u021biunile transmise comenzilor mount.cifs \u0219i unmount.cifs, permi\u021b\u00e2nd un utilizator cu privilegii reduse s\u0103 transmit\u0103 orice op\u021biuni acestor comenzi prin parametrul mh_options. <\/p>\n

De exemplu, prin op\u021biunile «filemode=04777,uid=0» toate fi\u0219ierele din parti\u021bia montat\u0103 vor avea setat flagul suid root. Utilizatorul poate s\u0103 porneasc\u0103 serverul SMB \u0219i s\u0103 monteze de pe acesta propriul s\u0103u volum cu fi\u0219ierele executabile necesare, care, atunci c\u00e2nd se utilizeaz\u0103 op\u021biunile «filemode=04777,uid=0», vor fi executate cu drepturi root. <\/p>\n

\u00cen procesorul Smb4KMountHelper, de asemenea, nu au fost verificate corect directoarele \u021bint\u0103, ceea ce, de exemplu, permitea montarea propriei partaj\u0103ri SMB \u00een loc de directorul \/bin \u0219i \u00eenlocuirea acestuia cu o versiune modificat\u0103 a \/bin\/bash. \u00cen plus, prin parametrul mh_krb5ticket se poate schimba calea c\u0103tre fi\u0219ierul cu acreditive Kerberos \u0219i se poate ob\u021bine ie\u0219irea con\u021binutului oric\u0103rui fi\u0219ier, cum ar fi \/etc\/shadow, \u00een stderr sau \u00eentr-un jurnal accesibil public. <\/p>\n

Vulnerabilitatea din func\u021bia Smb4KMountHelper::unmount() poate fi folosit\u0103 pentru a provoca o \u00eentrerupere a serviciului prin demontarea parti\u021biilor de sistem, manipul\u00e2nd con\u021binutul parametrului mh_mountpoint. Interesant este c\u0103 \u00een cod a existat o verificare a tipului de parti\u021bie, care permitea doar parti\u021biile cifs, smbfs \u0219i smb3, dar \u00een blocul if pentru generarea erorii a fost omis operatorul «return» iar execu\u021bia nu s-a oprit.
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 smb4k, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0439 \u0432 KDE \u0434\u043b\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0438 \u043c\u043e\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f SMB-\u0440\u0430\u0437\u0434\u0435\u043b\u043e\u0432, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0432 \u0432\u044b\u043f\u0443\u0441\u043a\u0435 Smb4K 4.0.5. \u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 \u0438\u043b\u0438 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043a\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 \u043c\u043e\u0436\u043d\u043e \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\u0445: Debian, Ubuntu, Fedora, SUSE\/openSUSE, Gentoo, Arch \u0438 FreeBSD. \u0414\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u0432 smb4k \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f KAuth-\u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c\u044b\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-151538","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilitate \u00een utilitarul smb4k, care permite ob\u021binerea drepturilor de root \u00een sistem | ProHoster","description":"\u00cen utilitarul smb4k, folosit \u00een KDE pentru detectarea \u0219i montarea partaj\u0103rilor SMB, au fost identificate vulnerabilit\u0103\u021bi care permit ob\u021binerea accesului root la sistem. Problemele au fost rezolvate \u00een versiunea Smb4K 4.0.5.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-utilite-smb4k-pozvolyayushhaya-poluchit-prava-root-v-sisteme","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 smb4k, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 root \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 | ProHoster","og:description":"\u0412 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 smb4k, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0439 \u0432 KDE \u0434\u043b\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0438 \u043c\u043e\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f SMB-\u0440\u0430\u0437\u0434\u0435\u043b\u043e\u0432, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0432 \u0432\u044b\u043f\u0443\u0441\u043a\u0435 Smb4K 4.0.5.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-utilite-smb4k-pozvolyayushhaya-poluchit-prava-root-v-sisteme","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-12-14T09:11:58+00:00","article:modified_time":"2025-12-14T09:11:58+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"151538","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 16:35:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 16:35:19","updated":"2026-01-23 16:35:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/151538","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=151538"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/151538\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=151538"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=151538"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=151538"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}