{"id":38921,"date":"2019-10-31T22:26:45","date_gmt":"2019-10-31T19:26:45","guid":{"rendered":"https:\/\/prohoster.info\/blog\/uyazvimost-v-sudo-pozvolyaet-vypolnyat-komandy-s-pravami-superpolzovatelya-na-ustrojstvah-s-linux\/"},"modified":"2019-10-31T22:26:45","modified_gmt":"2019-10-31T19:26:45","slug":"uyazvimost-v-sudo-pozvolyaet-vypolnyat-komandy-s-pravami-superpolzovatelya-na-ustrojstvah-s-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/uyazvimost-v-sudo-pozvolyaet-vypolnyat-komandy-s-pravami-superpolzovatelya-na-ustrojstvah-s-linux","title":{"rendered":"Zranite\u013enos\u0165 v Sudo umo\u017e\u0148uje vykon\u00e1va\u0165 pr\u00edkazy s pr\u00e1vami superu\u017e\u00edvate\u013ea na zariadeniach s Linuxom","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Bola zisten\u00e1 zranite\u013enos\u0165 pr\u00edkazu Sudo (super user do) pre Linux. Vyu\u017eitie tejto zranite\u013enosti umo\u017e\u0148uje nepriviligovan\u00fdm pou\u017e\u00edvate\u013eom alebo programom vykon\u00e1va\u0165 pr\u00edkazy s pr\u00e1vami superu\u017e\u00edvate\u013ea. Uv\u00e1dza sa, \u017ee zranite\u013enos\u0165 zasahuje syst\u00e9my s nestandardn\u00fdmi nastaveniami a net\u00fdka sa v\u00e4\u010d\u0161iny serverov pracuj\u00facich pod spr\u00e1vou Linuxu.<\/p>\n

\"Zranite\u013enos\u0165<\/p>\n

Zranite\u013enos\u0165 sa vyskytuje v pr\u00edpadoch, ke\u010f sa pou\u017e\u00edvaj\u00fa konfigura\u010dn\u00e9 nastavenia Sudo, ktor\u00e9 umo\u017e\u0148uj\u00fa vykon\u00e1va\u0165 pr\u00edkazy menom in\u00fdch pou\u017e\u00edvate\u013eov. Okrem toho m\u00f4\u017ee by\u0165 Sudo konfigurovan\u00e9 osobitn\u00fdm sp\u00f4sobom, \u010do umo\u017e\u0148uje sp\u00fa\u0161\u0165anie pr\u00edkazov menom in\u00fdch pou\u017e\u00edvate\u013eov, okrem superu\u017e\u00edvate\u013ea. Na tento \u00fa\u010del je potrebn\u00e9 vykona\u0165 zodpovedaj\u00face \u00fapravy v konfigura\u010dnom s\u00fabore.<\/p>\n

Podstata probl\u00e9mu spo\u010d\u00edva v tom, ako Sudo spracov\u00e1va identifik\u00e1tory pou\u017e\u00edvate\u013eov. Ak zad\u00e1te do pr\u00edkazov\u00e9ho riadku identifik\u00e1tor pou\u017e\u00edvate\u013ea -1 alebo jeho ekvivalent 4294967295, m\u00f4\u017ee by\u0165 spusten\u00fd pr\u00edkaz vykonan\u00fd s pr\u00e1vami superu\u017e\u00edvate\u013ea. Preto\u017ee uveden\u00e9 identifik\u00e1tory pou\u017e\u00edvate\u013eov nie s\u00fa uveden\u00e9 v datab\u00e1ze hesiel, nebude potrebn\u00e9 na vykonanie pr\u00edkazu zada\u0165 heslo.<\/p>\n

Pre zn\u00ed\u017eenie rizika probl\u00e9mov spojen\u00fdch s uvedenou zranite\u013enos\u0165ou sa pou\u017e\u00edvate\u013eom odpor\u00fa\u010da \u010do najsk\u00f4r aktualizova\u0165 Sudo na verziu 1.8.28 alebo nov\u0161iu. Vo vyhl\u00e1sen\u00ed sa uv\u00e1dza, \u017ee v novej verzii Sudo sa parameter -1 u\u017e nepou\u017e\u00edva ako identifik\u00e1tor pou\u017e\u00edvate\u013ea. To znamen\u00e1, \u017ee \u00fato\u010dn\u00edci nebud\u00fa m\u00f4c\u0165 vyu\u017ei\u0165 t\u00fato zranite\u013enos\u0165.  <\/p>\n

<\/center><\/p>\n

<\/p>\n

<\/center><\/p>\n

\t\t\t\t


\n\t\t\t\t\t\t\t\t<\/center>
Zdroj: 3dnews.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u043c\u0430\u043d\u0434\u0435 Sudo (super user do) \u0434\u043b\u044f Linux. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0434\u0430\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0438\u043b\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430\u043c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0441\u0443\u043f\u0435\u0440\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u041e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0441 \u043d\u0435\u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u043c\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c\u0438 \u0438 \u043d\u0435 \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c Linux. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0432 \u0441\u043b\u0443\u0447\u0430\u044f\u0445, \u043a\u043e\u0433\u0434\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 Sudo, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":29198,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-38921","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Zranite\u013enos\u0165 v Sudo umo\u017e\u0148uje vykon\u00e1va\u0165 pr\u00edkazy s pr\u00e1vami superu\u017e\u00edvate\u013ea na zariadeniach s Linuxom | ProHoster","description":"Bola zisten\u00e1 zranite\u013enos\u0165 pr\u00edkazu Sudo (super user do) pre Linux.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/uyazvimost-v-sudo-pozvolyaet-vypolnyat-komandy-s-pravami-superpolzovatelya-na-ustrojstvah-s-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Sudo \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0441\u0443\u043f\u0435\u0440\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0441 Linux | ProHoster","og:description":"\u0421\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u043c\u0430\u043d\u0434\u0435 Sudo (super user do) \u0434\u043b\u044f Linux.","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/uyazvimost-v-sudo-pozvolyaet-vypolnyat-komandy-s-pravami-superpolzovatelya-na-ustrojstvah-s-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:26:45+00:00","article:modified_time":"2019-10-31T19:26:45+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38921","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 23:58:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:33:31","updated":"2026-01-23 23:58:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/38921","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=38921"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/38921\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media\/29198"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=38921"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=38921"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=38921"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}