{"id":100430,"date":"2021-06-04T10:23:35","date_gmt":"2021-06-04T08:23:35","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-polkit-pozvolyayushhaya-povysit-svoi-privilegii-v-sisteme"},"modified":"2021-06-04T10:23:35","modified_gmt":"2021-06-04T08:23:35","slug":"uyazvimost-v-polkit-pozvolyayushhaya-povysit-svoi-privilegii-v-sisteme","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-polkit-pozvolyayushhaya-povysit-svoi-privilegii-v-sisteme","title":{"rendered":"Vulnerabilitet n\u00eb Polkit, q\u00eb lejon ngritjen e privilegjeve n\u00eb sistem","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
N\u00eb komponentin Polkit, i p\u00ebrdorur n\u00eb shp\u00ebrndarjet p\u00ebr organizimin e ekzekutimit t\u00eb veprimeve nga p\u00ebrdoruesit pa privilegje q\u00eb k\u00ebrkojn\u00eb t\u00eb drejta t\u00eb p\u00ebrmir\u00ebsuara (p\u00ebr shembull, montimi i nj\u00eb USB), \u00ebsht\u00eb identifikuar nj\u00eb dob\u00ebsi (CVE-2021-3560) e cila lejon q\u00eb nj\u00eb p\u00ebrdorues lokal t\u00eb fitoj\u00eb t\u00eb drejtat e root n\u00eb sistem. Dob\u00ebsia \u00ebsht\u00eb rregulluar n\u00eb versionin Polkit 0.119. <\/p>\n
Problemi shfaqet q\u00eb nga versioni 0.113, por shum\u00eb shp\u00ebrndarje, duke p\u00ebrfshir\u00eb RHEL, Ubuntu, Debian dhe SUSE, kan\u00eb b\u00ebr\u00eb backport t\u00eb funksionalitetit t\u00eb dob\u00ebt n\u00eb paketa t\u00eb bazuara n\u00eb versione m\u00eb t\u00eb vjetra t\u00eb Polkit (rregullimet e paketeve jan\u00eb tashm\u00eb n\u00eb dispozicion n\u00eb shp\u00ebrndarje). <\/p>\n
Problemi manifeston n\u00eb funksionin polkit_system_bus_name_get_creds_sync(), q\u00eb merr identifikuesit (uid dhe pid) t\u00eb procesit q\u00eb k\u00ebrkon rritjen e privilegjeve. Procesi identifikohet nga Polkit p\u00ebrmes dh\u00ebnies s\u00eb nj\u00eb emri unik n\u00eb DBus, i cili m\u00eb pas p\u00ebrdoret p\u00ebr t\u00eb verifikuar privilegjet. N\u00ebse procesi shk\u00ebputet nga dbus-daemon para fillimit t\u00eb trajtuesit polkit_system_bus_name_get_creds_sync, at\u00ebher\u00eb n\u00eb vend t\u00eb emrit unik, trajtuesi merr nj\u00eb kod gabimi. <\/p>\n
Dob\u00ebsia shkaktohet nga fakti q\u00eb kodi i kthimit t\u00eb gabimit nuk trajtohet si\u00e7 duhet dhe funksioni polkit_system_bus_name_get_creds_sync() kthen vler\u00ebn TRUE n\u00eb vend t\u00eb FALSE, megjith\u00ebse nuk arriti t\u00eb mat\u00eb procesin me uid\/pid dhe t\u00eb verifikoj\u00eb privilegjet e k\u00ebrkuara p\u00ebr procesin. Kodi nga ku u thirr funksioni polkit_system_bus_name_get_creds_sync() mendon se verifikimi \u00ebsht\u00eb realizuar me sukses dhe k\u00ebrkesa p\u00ebr rritjen e privilegjeve ka ardhur nga root, jo nga nj\u00eb p\u00ebrdorues pa privilegje, duke lejuar k\u00ebshtu ekzekutimin e veprimeve me privilegje pa autentifikim t\u00eb m\u00ebtejsh\u00ebm dhe konfirmim t\u00eb autorizimeve. \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"