\u00cbsht\u00eb publikuar versioni i serverit t\u00eb post\u00ebs Exim 4.94.2 me rregullimin e 21 cenueshm\u00ebrive (CVE-2020-28007-CVE-2020-28026, CVE-2021-27216), t\u00eb zbuluara nga kompania Qualys dhe t\u00eb prezantuara me emrin e koduar 21Nails. 10 probleme mund t\u00eb shfryt\u00ebzohen nga distanca (p\u00ebrfshir\u00eb edhe p\u00ebr ekzekutim kodi me t\u00eb drejta root), p\u00ebrmes manipulimit t\u00eb komandave SMTP gjat\u00eb nd\u00ebrveprimit me serverin. <\/p>\n
Nga k\u00ebto probleme preken t\u00eb gjitha versionet e Exim, historia e t\u00eb cilave ndiqet n\u00eb Git q\u00eb nga viti 2004. P\u00ebr 4 cenueshm\u00ebri lokale dhe 3 probleme n\u00eb distanc\u00eb jan\u00eb p\u00ebrgatitur prototipe funksionale t\u00eb exploit-eve. Exploit-et p\u00ebr cenueshm\u00ebrit\u00eb lokale (CVE-2020-28007, CVE-2020-28008, CVE-2020-28015, CVE-2020-28012) lejojn\u00eb ngritjen e privilegjeve deri n\u00eb p\u00ebrdoruesin root. Dy problemet n\u00eb distanc\u00eb (CVE-2020-28020, CVE-2020-28018) lejojn\u00eb ekzekutimin e kodit pa autentikim me t\u00eb drejtat e p\u00ebrdoruesit exim (m\u00eb pas mund t\u00eb merret qasje root duke shfryt\u00ebzuar nj\u00eb nga cenueshm\u00ebrit\u00eb lokale). <\/p>\n
Ranj\u00ebsia CVE-2020-28021 lejon ekzekutimin e kodit n\u00eb distanc\u00eb me t\u00eb drejtat e root, por k\u00ebrkon qasje t\u00eb autentifikueshme (p\u00ebrdoruesi duhet t\u00eb krijoj\u00eb nj\u00eb seanc\u00eb t\u00eb autentifikuar, pas s\u00eb cil\u00ebs mund t\u00eb shfryt\u00ebzoj\u00eb dob\u00ebsin\u00eb p\u00ebrmes manipulimeve me parametrin AUTH n\u00eb komand\u00ebn MAIL FROM). Problemi shkaktohet nga fakti se sulmuesi mund t\u00eb arrij\u00eb t\u00eb inkuadroj\u00eb nj\u00eb varg n\u00eb titullin e skedarit spool p\u00ebr shkak t\u00eb regjistrimit t\u00eb vler\u00ebs authenticated_sender pa e mbrojtur si\u00e7 duhet shenj\u00ebn e ve\u00e7ant\u00eb (p.sh., duke transferuar komand\u00ebn \u00abMAIL FROM: AUTH=Raven+0AReyes\u00bb). <\/p>\n
P\u00ebrve\u00e7 k\u00ebsaj, v\u00ebrehet se nj\u00eb dob\u00ebsi tjet\u00ebr e larg\u00ebt CVE-2020-28017 \u00ebsht\u00eb e p\u00ebrshtatshme p\u00ebr t'u shfryt\u00ebzuar p\u00ebr ekzekutimin e kodit me t\u00eb drejtat e p\u00ebrdoruesit \u00abexim\u00bb pa autentifikim, por k\u00ebrkon m\u00eb shum\u00eb se 25 GB memorje. P\u00ebr 13 t\u00eb tjera dob\u00ebsi, gjithashtu mund t\u00eb p\u00ebrgatiten eksploit\u00eb, por puna n\u00eb k\u00ebt\u00eb drejtim ende nuk \u00ebsht\u00eb kryer. <\/p>\n
Zhvilluesit e Exim jan\u00eb njoftuar p\u00ebr problemet q\u00eb n\u00eb tetor t\u00eb vitit t\u00eb kaluar dhe kan\u00eb shpenzuar m\u00eb shum\u00eb se 6 muaj p\u00ebr zhvillimin e korrigjimeve. T\u00eb gjith\u00eb administrator\u00ebve u rekomandohet t\u00eb p\u00ebrdit\u00ebsojn\u00eb urgjentisht Exim n\u00eb server\u00ebt e tyre t\u00eb post\u00ebs elektronike sistemet<\/a> deri n\u00eb versionin 4.94.2. T\u00eb gjitha versionet e Exim deri n\u00eb publikimin 4.94.2 jan\u00eb shpallur t\u00eb vjetruara (obsolete). Publikimi i versionit t\u00eb ri u koordinua me shp\u00ebrndarjet q\u00eb publikuan nj\u00ebkoh\u00ebsisht p\u00ebrdit\u00ebsime t\u00eb paketave: Ubuntu, Arch Linux, FreeBSD, Debian, SUSE dhe Fedora. RHEL dhe CentOS nuk preken nga problemi, pasi Exim nuk p\u00ebrfshihet n\u00eb depozit\u00ebn e tyre standarde t\u00eb paketave (n\u00eb EPEL p\u00ebrdit\u00ebsimi ende mungon). <\/p>\n Dob\u00ebsit\u00eb e korrigjuara nga distanca: <\/p>\n Dob\u00ebsi lokale: <\/p>\n \n
\n