N\u00eb Ghostscript, nj\u00eb grup mjetesh p\u00ebr p\u00ebrpunimin, konvertimin dhe gjenerimin e dokumenteve n\u00eb formate PostScript dhe PDF, \u00ebsht\u00eb zbuluar nj\u00eb vulnerabilitet kritik (CVE-2021-3781), i cili lejon ekzekutimin e kodit t\u00eb rast\u00ebsish\u00ebm gjat\u00eb p\u00ebrpunimit t\u00eb nj\u00eb skedari t\u00eb nd\u00ebrtuar posa\u00e7\u00ebrisht. Problemi u shfaq fillimisht nga Emil Lerner, i cili foli mbi vulnerabilitetin m\u00eb 25 gusht n\u00eb konferenc\u00ebn ZeroNights X q\u00eb u mbajt n\u00eb Sh\u00ebn Petersburg (n\u00eb referatin e tij, Emil p\u00ebrshkroi se si p\u00ebrdori vulnerabilitetin si pjes\u00eb e programeve bug bounty p\u00ebr t\u00eb fituar \u00e7mime p\u00ebr demonstruar sulme ndaj sh\u00ebrbimeve t\u00eb AirBNB, Dropbox dhe Yandex.Nedvizhim). <\/p>\n
M\u00eb 5 Shtator doli n\u00eb akses t\u00eb hapur nj\u00eb exploit funksional q\u00eb lejon sulmet ndaj sistemeve me Ubuntu 20.04 p\u00ebrmes transferimit t\u00eb nj\u00eb dokumenti t\u00eb hartuar posa\u00e7\u00ebrisht, i ngarkuar si imazh, n\u00eb nj\u00eb skript web-i q\u00eb p\u00ebrdor paket\u00ebn php-imagemagick. Sipas t\u00eb dh\u00ebnave paraprake, ky exploit ishte n\u00eb p\u00ebrdorim q\u00eb nga marsi. U pohua se sulmi mund t\u00eb ndodhte n\u00eb sistemet me GhostScript 9.50, por doli se vulnerabiliteti shfaqet gjithashtu n\u00eb t\u00eb gjitha versionet e m\u00ebvonshme t\u00eb GhostScript, p\u00ebrfshir\u00eb versionin 9.55 n\u00eb zhvillim nga Git. <\/p>\n
Nj\u00eb rregullim u propozua m\u00eb 8 Shtator dhe, pas nj\u00eb rishikimi, u pranuar n\u00eb depot e GhostScript m\u00eb 9 Shtator. N\u00eb shum\u00eb distribuime, problemi vazhdon t\u00eb mbetet i pa rregulluar (statusin e publikimeve t\u00eb p\u00ebrdit\u00ebsimeve mund ta shihni n\u00eb faqet e Debian, Ubuntu, Fedora, SUSE, RHEL, Arch Linux, FreeBSD, NetBSD). Rrelease t\u00eb GhostScript me eliminimin e vulnerabilitetit pritet t\u00eb publikohet deri n\u00eb fund t\u00eb muajit. <\/p>\n
Problemi shkaktohet nga mund\u00ebsia e kalimit t\u00eb modit t\u00eb izolimit «-dSAFER» p\u00ebr shkak t\u00eb kontrollit t\u00eb pamjaftuesh\u00ebm t\u00eb parametrave t\u00eb aparatit Postscript «%pipe%», q\u00eb lejonin ekzekutimin e komandave t\u00eb arbitrave shell. P\u00ebr shembull, p\u00ebr t\u00eb ekzekutuar utilitarin id n\u00eb dokument mjafton t\u00eb speciftosh rreshtin «(%pipe%\/tmp\/&id)(w)file» ose «(%pipe%\/tmp\/;id)(r)file». <\/p>\n
Kujtojm\u00eb se vulnerabilitetet n\u00eb Ghostscript paraqesin nj\u00eb rrezik t\u00eb shtuar, pasi ky paket\u00eb p\u00ebrdoret n\u00eb shum\u00eb aplikacione t\u00eb njohura p\u00ebr p\u00ebrpunimin e formateve PostScript dhe PDF. P\u00ebr shembull, Ghostscript thirret gjat\u00eb krijimit t\u00eb miniaturave n\u00eb desktop, n\u00eb indeksimin e t\u00eb dh\u00ebnave n\u00eb sfond dhe n\u00eb konvertimin e imazheve. P\u00ebr nj\u00eb sulm t\u00eb suksessh\u00ebm, n\u00eb shum\u00eb raste mjafton vet\u00ebm t\u00eb ngarkohet nj\u00eb skedar me eksploit ose t\u00eb shikohet nj\u00eb direktorium q\u00eb p\u00ebrmban at\u00eb n\u00eb menaxherin e skedar\u00ebve, q\u00eb mb\u00ebshtet shfaqjen e miniaturave t\u00eb dokumenteve, si\u00e7 \u00ebsht\u00eb Nautilus. <\/p>\n
D\u00ebshtimet n\u00eb Ghostscript gjithashtu mund t\u00eb shfryt\u00ebzohen p\u00ebrmes p\u00ebrpunuesve t\u00eb imazheve t\u00eb bazuar n\u00eb paketat ImageMagick dhe GraphicsMagick, duke i kaluar atyre nj\u00eb skedar JPEG ose PNG, n\u00eb t\u00eb cilin n\u00eb vend t\u00eb imazhit \u00ebsht\u00eb kodi PostScript (ky skedar do t\u00eb p\u00ebrpunoj\u00eb n\u00eb Ghostscript, pasi tipi MIME njihet nga p\u00ebrmbajtja, jo duke u mb\u00ebshtetur n\u00eb shkurtimin). \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"