{"id":94397,"date":"2020-09-16T13:42:09","date_gmt":"2020-09-16T11:42:09","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-ftpd-iz-freebsd-pozvolyavshaya-poluchit-root-dostup-pri-ispolzovanii-ftpchroot"},"modified":"2020-09-16T13:42:09","modified_gmt":"2020-09-16T11:42:09","slug":"uyazvimost-v-ftpd-iz-freebsd-pozvolyavshaya-poluchit-root-dostup-pri-ispolzovanii-ftpchroot","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-ftpd-iz-freebsd-pozvolyavshaya-poluchit-root-dostup-pri-ispolzovanii-ftpchroot","title":{"rendered":"Vulnerabilitate \u00een ftpd din FreeBSD, care permitea ob\u021binerea accesului root prin utilizarea ftpchroot","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>\u00cen serverul ftpd livrat cu FreeBSD <noindex><a rel=\"nofollow\" href=\"https:\/\/www.mail-archive.com\/freebsd-announce@freebsd.org\/msg00994.html\">a fost identificat\u0103<\/a><\/noindex> o vulnerabilitate critic\u0103 (CVE-2020-7468), care permite utilizatorilor restric\u021biona\u021bi la directorul lor de acas\u0103 prin op\u021biunea ftpchroot s\u0103 ob\u021bin\u0103 acces complet root la sistem. <\/p>\n<p>Problema este cauzat\u0103 de combina\u021bia unei erori \u00een implementarea mecanismului de izolare a utilizatorului prin apelul chroot (\u00een cazul unor e\u0219ecuri \u00een procesul de schimbare a uid sau efectuare a chroot \u0219i chdir a fost generat\u0103 o eroare non-fatala, care nu \u00eentrerupe sesiunea) \u0219i de oferirea unui utilizator FTP autentificat a unor drepturi suficiente pentru a ocoli restric\u021bia c\u0103ii r\u0103d\u0103cin\u0103 \u00een sistemul de fi\u0219iere. Vulnerabilitatea nu se manifest\u0103 la accesarea serverului FTP \u00een mod anonim sau la autentificarea complet\u0103 a utilizatorului f\u0103r\u0103 ftpchroot. Problema a fost rezolvat\u0103 \u00een actualiz\u0103rile 12.1-RELEASE-p10, 11.4-RELEASE-p4 \u0219i 11.3-RELEASE-p14.<\/p>\n<p>\u00cen plus, se poate men\u021biona c\u0103 \u00een 12.1-RELEASE-p10, 11.4-RELEASE-p4 \u0219i 11.3-RELEASE-p14 au fost remediate alte trei vulnerabilit\u0103\u021bi:<\/p>\n<ul>\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/www.mail-archive.com\/freebsd-announce@freebsd.org\/msg00992.html\">CVE-2020-7467<\/a><\/noindex> \u2014 o vulnerabilitate \u00een hipervizorul Bhyve, care permite dintr-un mediu de gazd\u0103 s\u0103 scrie informa\u021bii \u00een zonele de memorie ale mediului gazd\u0103 \u0219i s\u0103 ob\u021bin\u0103 acces complet la sistemul gazd\u0103. Problema este cauzat\u0103 de lipsa unei restric\u021bii de acces la instruc\u021biunile procesorului care lucreaz\u0103 cu adrese fizice ale gazdei \u0219i se manifest\u0103 doar pe sistemele cu CPU AMD.\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/www.mail-archive.com\/freebsd-announce@freebsd.org\/msg00993.html\">CVE-2020-24718<\/a><\/noindex> \u2014 o vulnerabilitate \u00een hipervizorul Bhyve, care permite unui atacator cu privilegii root din medii izolate prin Bhyve s\u0103 execute cod la nivel de kernel. Problema este cauzat\u0103 de lipsa unei restric\u021bii adecvate de acces la structurile VMCS (Virtual Machine Control Structure) pe sistemele cu CPU Intel \u0219i VMCB (Virtual Machine Control Block).<br \/>\nMachine Control Block) pe sistemele cu CPU AMD.<\/p>\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/www.mail-archive.com\/freebsd-announce@freebsd.org\/msg00991.html\">CVE-2020-7464<\/a><\/noindex> \u2014 o vulnerabilitate \u00een driverul ure (USB Ethernet Realtek RTL8152 \u0219i RTL8153), care permite prin trimiterea de cadre mari (peste 2048) s\u0103 efectueze spoofing de pachete din alte gazde sau s\u0103 realizeze substituirea pachetelor \u00een alte VLAN.\n<\/ul>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Sursa: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=53720\">opennet.ro<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412 \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u043e\u043c \u0432 \u0441\u043e\u0441\u0442\u0430\u0432\u0435 FreeBSD \u0441\u0435\u0440\u0432\u0435\u0440\u0435 ftpd \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2020-7468), \u0434\u0430\u044e\u0449\u0430\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c \u0441\u0432\u043e\u0438\u043c \u0434\u043e\u043c\u0430\u0448\u043d\u0438\u043c \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u043c \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u043e\u043f\u0446\u0438\u0438 ftpchroot, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 root-\u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0435\u043c \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u0432\u044b\u0437\u043e\u0432\u0430 chroot (\u043f\u0440\u0438 \u0441\u0431\u043e\u044f\u0445 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0441\u043c\u0435\u043d\u044b uid \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f chroot \u0438 chdir \u0432\u044b\u0434\u0430\u0432\u0430\u043b\u0430\u0441\u044c \u043d\u0435\u0444\u0430\u0442\u0430\u043b\u044c\u043d\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430, \u043d\u0435 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-94397","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412 \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u043e\u043c \u0432 \u0441\u043e\u0441\u0442\u0430\u0432\u0435 FreeBSD \u0441\u0435\u0440\u0432\u0435\u0440\u0435 ftpd \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2020-7468).\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-ftpd-iz-freebsd-pozvolyavshaya-poluchit-root-dostup-pri-ispolzovanii-ftpchroot\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 ftpd \u0438\u0437 FreeBSD, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0432\u0448\u0430\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u0434\u043e\u0441\u0442\u0443\u043f \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 ftpchroot | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412 \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u043e\u043c \u0432 \u0441\u043e\u0441\u0442\u0430\u0432\u0435 FreeBSD \u0441\u0435\u0440\u0432\u0435\u0440\u0435 ftpd \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2020-7468).\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-ftpd-iz-freebsd-pozvolyavshaya-poluchit-root-dostup-pri-ispolzovanii-ftpchroot\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-09-16T11:42:09+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-09-16T11:42:09+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilitate \u00een ftpd din FreeBSD, care permitea ob\u021binerea accesului root prin utilizarea ftpchroot | ProHoster","description":"\u00cen serverul ftpd livrat cu FreeBSD a fost identificat\u0103 o vulnerabilitate critic\u0103 (CVE-2020-7468).","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-ftpd-iz-freebsd-pozvolyavshaya-poluchit-root-dostup-pri-ispolzovanii-ftpchroot","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 ftpd \u0438\u0437 FreeBSD, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0432\u0448\u0430\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u0434\u043e\u0441\u0442\u0443\u043f \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 ftpchroot | ProHoster","og:description":"\u0412 \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u043e\u043c \u0432 \u0441\u043e\u0441\u0442\u0430\u0432\u0435 FreeBSD \u0441\u0435\u0440\u0432\u0435\u0440\u0435 ftpd \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2020-7468).","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/uyazvimost-v-ftpd-iz-freebsd-pozvolyavshaya-poluchit-root-dostup-pri-ispolzovanii-ftpchroot","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-16T11:42:09+00:00","article:modified_time":"2020-09-16T11:42:09+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"94397","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:27:34","updated":"2022-10-02 08:32:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/94397","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=94397"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/94397\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=94397"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=94397"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=94397"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}