{"id":53577,"date":"2019-12-05T00:00:00","date_gmt":"2019-12-04T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/mnozhestvennye-uyazvimosti-v-openbsd"},"modified":"2020-02-18T14:01:30","modified_gmt":"2020-02-18T11:01:30","slug":"mnozhestvennye-uyazvimosti-v-openbsd","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/mnozhestvennye-uyazvimosti-v-openbsd","title":{"rendered":"Viacero zranite\u013enost\u00ed v OpenBSD","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\u0160pecialisti z Qualys Labs objavili nieko\u013eko bezpe\u010dnostn\u00fdch probl\u00e9mov s\u00favisiacich s mo\u017enos\u0165ou podv\u00e1dza\u0165 programy zodpovedaj\u00face za aplikovan\u00e9 v BSD mechanizmy kontroly hesiel (podobn\u00e9 PAM). Podvod spo\u010d\u00edva v zasielan\u00ed pou\u017e\u00edvate\u013esk\u00e9ho mena \u201e-schallenge\u201c alebo \u201e-schallenge:passwd\u201c, ktor\u00e9 sa n\u00e1sledne interpretuje nie ako pou\u017e\u00edvate\u013esk\u00e9 meno, ale ako vo\u013eba. Potom syst\u00e9m prij\u00edma ak\u00e9ko\u013evek heslo. Zranite\u013en\u00e9, teda povo\u013euj\u00face nakoniec neautorizovan\u00fd pr\u00edstup, s\u00fa slu\u017eby smtpd, ldapd, radiusd. Slu\u017ebu sshd nie je mo\u017en\u00e9 zneu\u017ei\u0165, preto\u017ee sshd si uvedomuje, \u017ee pou\u017e\u00edvate\u013e \u201e-schallenge\u201c v skuto\u010dnosti neexistuje. Program su pri pokuse o zneu\u017eitie priamo zlyh\u00e1va, preto\u017ee sa pok\u00fa\u0161a zisti\u0165 uid neexistuj\u00faceho pou\u017e\u00edvate\u013ea.<\/p>\n

Boli tie\u017e zverejnen\u00e9 r\u00f4zne zranite\u013enosti v xlock, pri autoriz\u00e1cii cez S\/Key a Yubikey, ako aj v su, ktor\u00e9 nie s\u00fa spojen\u00e9 s udan\u00edm pou\u017e\u00edvate\u013ea \u201e-schallenge\u201c. Zranite\u013enos\u0165 v xlock umo\u017e\u0148uje be\u017en\u00e9mu pou\u017e\u00edvate\u013eovi zv\u00fd\u0161i\u0165 privil\u00e9gia na skupinu auth. Prostredn\u00edctvom nespr\u00e1vnej funkcie mechanizmov autoriz\u00e1cie cez S\/Key a Yubikey je mo\u017en\u00e9 zv\u00fd\u0161i\u0165 privil\u00e9gia zo skupiny auth na pou\u017e\u00edvate\u013ea root, ale v konfigur\u00e1cii OpenBSD to predvolene nefunguje, preto\u017ee autoriz\u00e1cia cez S\/Key a Yubikey je vypnut\u00e1. Napokon, zranite\u013enos\u0165 v su umo\u017e\u0148uje pou\u017e\u00edvate\u013eovi zv\u00fd\u0161i\u0165 limity na syst\u00e9mov\u00e9 zdroje, ako je po\u010det otvoren\u00fdch s\u00faborov\u00fdch descriptorov.<\/p>\n

V s\u00fa\u010dasnosti s\u00fa zranite\u013enosti odstr\u00e1nen\u00e9, bezpe\u010dnostn\u00e9 aktualiz\u00e1cie s\u00fa dostupn\u00e9 prostredn\u00edctvom \u0161tandardn\u00e9ho mechanizmu syspatch(8).<\/p>\n

Zdroj: linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0438\u0437 Qualys Labs \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u043e\u0431\u043c\u0430\u043d\u0443\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0438\u0435 \u0437\u0430 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u044b\u0435 \u0432 BSD \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 (\u0430\u043d\u0430\u043b\u043e\u0433 PAM). \u041e\u0431\u043c\u0430\u043d \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0435 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f «-schallenge» \u0438\u043b\u0438 «-schallenge:passwd», \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0437\u0430\u0442\u0435\u043c \u0438\u043d\u0442\u0435\u0440\u043f\u0440\u0435\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043d\u0435 \u043a\u0430\u043a \u0438\u043c\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0430 \u043a\u0430\u043a \u043e\u043f\u0446\u0438\u044f. \u041f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0435\u0442 \u043b\u044e\u0431\u043e\u0439 \u043f\u0430\u0440\u043e\u043b\u044c. \u0423\u044f\u0437\u0432\u0438\u043c\u044b, \u0442.\u0435. \u0440\u0430\u0437\u0440\u0435\u0448\u0430\u044e\u0442 \u0432 \u0438\u0442\u043e\u0433\u0435 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-53577","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Viacer\u00e9 zranite\u013enosti v OpenBSD | ProHoster","description":"Odborn\u00edci z Qualys Labs objavili nieko\u013eko bezpe\u010dnostn\u00fdch probl\u00e9mov s\u00favisiacich s mo\u017enos\u0165ou podvies\u0165 programy zodpovedaj\u00face za mechanizmy overovania hesiel v BSD (anal\u00f3g PAM).","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/mnozhestvennye-uyazvimosti-v-openbsd","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 OpenBSD | ProHoster","og:description":"\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0438\u0437 Qualys Labs \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u043e\u0431\u043c\u0430\u043d\u0443\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0438\u0435 \u0437\u0430 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u044b\u0435 \u0432 BSD \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 (\u0430\u043d\u0430\u043b\u043e\u0433 PAM).","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/mnozhestvennye-uyazvimosti-v-openbsd","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-12-04T21:00:00+00:00","article:modified_time":"2020-02-18T11:01:30+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"53577","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 07:55:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 20:22:50","updated":"2026-01-24 07:55:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/53577","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=53577"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/53577\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=53577"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=53577"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=53577"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}