{"id":101245,"date":"2021-09-10T22:22:37","date_gmt":"2021-09-10T20:22:37","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-ghostscript-ekspluatiruemaya-cherez-imagemagick"},"modified":"2021-09-10T22:22:37","modified_gmt":"2021-09-10T20:22:37","slug":"uyazvimost-v-ghostscript-ekspluatiruemaya-cherez-imagemagick","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-ghostscript-ekspluatiruemaya-cherez-imagemagick","title":{"rendered":"Vulnerabilitet n\u00eb Ghostscript, i shfryt\u00ebzuar p\u00ebrmes ImageMagick.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
N\u00eb Ghostscript, nj\u00eb set mjetesh p\u00ebr p\u00ebrpunimin, konvertimin dhe gjenerimin e dokumenteve n\u00eb formatet PostScript dhe PDF, \u00ebsht\u00eb zbuluar nj\u00eb dob\u00ebsi kritike (CVE-2021-3781), e cila lejon ekzekutimin e kodit t\u00eb rast\u00ebsish\u00ebm gjat\u00eb p\u00ebrpunimit t\u00eb nj\u00eb skedari t\u00eb formatuar n\u00eb m\u00ebnyr\u00eb t\u00eb ve\u00e7ant\u00eb. Fillimisht p\u00ebr problemin ka njoftuar Emil Lerner, i cili foli p\u00ebr dob\u00ebsin\u00eb m\u00eb 25 gusht n\u00eb konferenc\u00ebn ZeroNights X q\u00eb u mbajt n\u00eb Sh\u00ebn Petersburg (n\u00eb prezantimin e tij ai tregoi si Emil n\u00eb kuad\u00ebr t\u00eb programeve bug bounty e kishte p\u00ebrdorur dob\u00ebsin\u00eb p\u00ebr t\u00eb fituar shp\u00ebrblime p\u00ebr demonstruar sulme ndaj sh\u00ebrbimeve t\u00eb AirBNB, Dropbox dhe Yandex.Nd\u00ebrtesa). <\/p>\n
M\u00eb 5 shtator, nj\u00eb eksploatues funksional u publikua n\u00eb hap\u00ebsir\u00ebn e hapur, i cili lejon sulmet ndaj sistemeve me Ubuntu 20.04 p\u00ebrmes transmetimit t\u00eb nj\u00eb dokumenti t\u00eb formatuar n\u00eb m\u00ebnyr\u00eb t\u00eb ve\u00e7ant\u00eb, i ngarkuar si imazh, n\u00eb skriptin web q\u00eb ekzekuton paket\u00ebn php-imagemagick. Sipas t\u00eb dh\u00ebnave paraprake, nj\u00eb eksploatues i till\u00eb kishte qen\u00eb n\u00eb p\u00ebrdorim q\u00eb nga marsi. U tha se ishte e mundur t\u00eb sulmohej sistemet me GhostScript 9.50, por m\u00eb von\u00eb u zbulua se dob\u00ebsia shfaqet edhe n\u00eb t\u00eb gjitha versionet e m\u00ebvonshme t\u00eb GhostScript, p\u00ebrfshir\u00eb versionin 9.55 n\u00eb zhvillim nga Git. <\/p>\n
Korrigjimi u propozua m\u00eb 8 shtator dhe pas rishikimit u miratua n\u00eb depozitat e GhostScript m\u00eb 9 shtator. N\u00eb shum\u00eb shp\u00ebrndarje, problemi mbetet ende i pambyllur (statusin e publikimit t\u00eb p\u00ebrdit\u00ebsimeve mund ta shikoni n\u00eb faqet e Debian, Ubuntu, Fedora, SUSE, RHEL, Arch Linux, FreeBSD, NetBSD). L\u00ebshimi i GhostScript me rregullimin e dob\u00ebsis\u00eb pritet t\u00eb publikohet deri n\u00eb fund t\u00eb muajit. <\/p>\n
Problemi shkaktohet nga mund\u00ebsia e kalimit t\u00eb modit t\u00eb izolimit «-dSAFER» p\u00ebr shkak t\u00eb kontrollit t\u00eb pamjaftuesh\u00ebm t\u00eb parametrave t\u00eb pajisjes Postscript «%pipe%», q\u00eb lejonin ekzekutimin e komandave t\u00eb rast\u00ebsishme t\u00eb shell-it. P\u00ebr shembull, p\u00ebr t\u00eb nisur utilitarin id n\u00eb dokument mjafton t\u00eb jepni rreshtin «(%pipe%\/tmp\/&id)(w)file» ose «(%pipe%\/tmp\/;id)(r)file». <\/p>\n
Kujtojm\u00eb se dob\u00ebsit\u00eb n\u00eb Ghostscript paraqesin rrezik n\u00eb rritje, pasi ky paket\u00eb p\u00ebrdoret n\u00eb shum\u00eb aplikacione t\u00eb njohura p\u00ebr p\u00ebrpunimin e formateve PostScript dhe PDF. P\u00ebr shembull, Ghostscript thirret gjat\u00eb krijimit t\u00eb miniaturave n\u00eb desktop, gjat\u00eb indekseve t\u00eb dh\u00ebnave n\u00eb sfond dhe gjat\u00eb konvertimit t\u00eb imazheve. P\u00ebr nj\u00eb sulm t\u00eb suksessh\u00ebm, shpesh mjafton thjesht t\u00eb ngarkohet nj\u00eb skedar me eksploit ose t\u00eb shqyrtohet nj\u00eb katalog me t\u00eb n\u00eb nj\u00eb menaxher skedash q\u00eb mb\u00ebshtet shfaqjen e miniaturave t\u00eb dokumenteve, si\u00e7 \u00ebsht\u00eb Nautilus. <\/p>\n
Dob\u00ebsit\u00eb n\u00eb Ghostscript gjithashtu mund t\u00eb shfryt\u00ebzohen p\u00ebrmes p\u00ebrpunuesve t\u00eb imazheve bazuar n\u00eb paketat ImageMagick dhe GraphicsMagick, duke u d\u00ebrguar atyre nj\u00eb skedar JPEG ose PNG, n\u00eb t\u00eb cilin p\u00ebrve\u00e7 imazhit ndodhet kodi PostScript (ky skedar do t\u00eb p\u00ebrpunohen n\u00eb Ghostscript, pasi tipi MIME njehhet sipas p\u00ebrmbajtjes dhe jo vet\u00ebm nga zgjatja). \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"