{"id":169325,"date":"2026-04-19T11:11:58","date_gmt":"2026-04-19T09:11:58","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/udalyonnoe-vypolnenie-koda-v-forke-pochtovogo-servera-qmail-ot-proekta-sagredo"},"modified":"2026-04-19T11:11:58","modified_gmt":"2026-04-19T09:11:58","slug":"udalyonnoe-vypolnenie-koda-v-forke-pochtovogo-servera-qmail-ot-proekta-sagredo","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/udalyonnoe-vypolnenie-koda-v-forke-pochtovogo-servera-qmail-ot-proekta-sagredo","title":{"rendered":"Executarea remote a codului \u00een fork-ul serverului de e-mail qmail din proiectul Sagredo","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\u00cen fork-ul serverului de e-mail qmail dezvoltat de proiectul Sagredo a fost identificat\u0103 o vulnerabilitate (CVE-2026-41113) care permite executarea de comenzi arbitrare pe server cu permisiunile utilizatorului qmailr. Vulnerabilitatea este cauzat\u0103 de lipsa escap\u0103rii caracterelor speciale \u00een numele gazdei returnat de serverul DNS atunci c\u00e2nd se determin\u0103 gateway-ul MX, \u00eempreun\u0103 cu transmiterea numelui ob\u021binut \u00een comanda popen f\u0103r\u0103 separarea \u0219i filtrarea adecvat\u0103 a argumentelor la apelul shell. Vulnerabilitatea a fost remediat\u0103 \u00een versiunea 2026.04.07. A fost publicat un instrument pentru exploatarea vulnerabilit\u0103\u021bii. <\/p>\n

\u00cen octombrie 2024, proiectul Sagredo a introdus \u00een utilitarul qmail-remote o modificare care adaug\u0103 func\u021bia \u201enotlshosts_auto\u201d, ce re\u021bine gazdele cu o implementare incorect\u0103 a protocolului TLS, cu care nu se poate stabili o conexiune TLS, pentru a preveni ciclicitatea trimiterii de e-mailuri la aceste gazde defectuoase. <\/p>\n

Problema este c\u0103 salvarea numelui gazdei se efectua prin lansarea shell-ului utiliz\u00e2nd func\u021bia popen() cu argumentul \u201e\/bin\/touch %s\/control\/notlshosts\/'%s'\u201d, \u00een care se \u00eenlocuia numele gazdei MX returnat de serverul DNS. Un atacator putea s\u0103 lanseze propriul s\u0103u server DNS, care returna \u00een \u00eenregistr\u0103rile DNS MX un nume de tip \u201ex'id>\/tmp\/pwned'y.evil.com\u201d, \u0219i s\u0103 ob\u021bin\u0103 executarea codului furnizat, cre\u00e2nd condi\u021biile pentru apelarea func\u021biei de salvare a numelui gazdei defectuoase. server<\/a>.
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c Sagredo \u0444\u043e\u0440\u043a\u0435 \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 qmail \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2026-41113), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f qmailr. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u043f\u0435\u0446\u0441\u0438\u043c\u0432\u043e\u043b\u043e\u0432 \u0432 \u0438\u043c\u0435\u043d\u0438 \u0445\u043e\u0441\u0442\u0430, \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u0435\u043c\u043e\u0433\u043e DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0438 MX-\u0448\u043b\u044e\u0437\u0430, \u0432 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0435\u0439 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u0438\u043c\u0435\u043d\u0438 \u0432 \u043a\u043e\u043c\u0430\u043d\u0434\u0443 popen \u0431\u0435\u0437 \u0434\u043e\u043b\u0436\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0438 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u043f\u0440\u0438 \u0432\u044b\u0437\u043e\u0432\u0435 shell. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-169325","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Executarea remote a codului \u00een fork-ul serverului de e-mail qmail din proiectul Sagredo | ProHoster","description":"\u00cen fork-ul serverului de e-mail qmail dezvoltat de proiectul Sagredo a fost identificat\u0103 o vulnerabilitate (CVE-2026-41113) care permite executarea de comenzi arbitrare pe server cu permisiunile utilizatorului qmailr.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/udalyonnoe-vypolnenie-koda-v-forke-pochtovogo-servera-qmail-ot-proekta-sagredo","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0432 \u0444\u043e\u0440\u043a\u0435 \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 qmail \u043e\u0442 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Sagredo | ProHoster","og:description":"\u0412 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c Sagredo \u0444\u043e\u0440\u043a\u0435 \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 qmail \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2026-41113), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f qmailr.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/udalyonnoe-vypolnenie-koda-v-forke-pochtovogo-servera-qmail-ot-proekta-sagredo","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-04-19T09:11:58+00:00","article:modified_time":"2026-04-19T09:11:58+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/169325","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=169325"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/169325\/revisions"}],"predecessor-version":[{"id":170739,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/169325\/revisions\/170739"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=169325"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=169325"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=169325"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}