{"id":106435,"date":"2023-01-21T12:48:20","date_gmt":"2023-01-21T10:48:20","guid":{"rendered":"https:\/\/prohoster.info\/?p=106435"},"modified":"2023-01-24T13:53:14","modified_gmt":"2023-01-24T11:53:14","slug":"uyazvimost-v-libxpm-privodyashhaya-k-vypolneniyu-koda","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-libxpm-privodyashhaya-k-vypolneniyu-koda","title":{"rendered":"Vulnerabilitet n\u00eb libXpm, q\u00eb \u00e7on n\u00eb ekzekutimin e kodit","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
\u00cbsht\u00eb publikuar nj\u00eb version korrektues i bibliotek\u00ebs libXpm 3.5.15, q\u00eb zhvillohet nga projekti X.Org dhe p\u00ebrdoret p\u00ebr p\u00ebrpunimin e skedareve n\u00eb formatin XPM. N\u00eb versionin e ri, jan\u00eb eliminuar tre dob\u00ebsi, dy prej t\u00eb cilave (CVE-2022-46285, CVE-2022-44617) \u00e7ojn\u00eb n\u00eb nj\u00eb cik\u00ebl t\u00eb pafund gjat\u00eb p\u00ebrpunimit t\u00eb skedar\u00ebve t\u00eb ve\u00e7ant\u00eb XPM. Dob\u00ebsia e tret\u00eb (CVE-2022-4883) lejon ekzekutimin e komandave t\u00eb rastit gjat\u00eb funksionimit t\u00eb aplikacioneve q\u00eb p\u00ebrdorin libXpm. Kur nisin procese me privilegje t\u00eb lidhura me libXpm, p\u00ebr shembull, programe me flamurin suid root, dob\u00ebsia ofron mund\u00ebsin\u00eb p\u00ebr t\u00eb rritur privilegjet e p\u00ebrdoruesit. <\/p>\n
Vulnerability is caused by a specific feature of libXpm when working with compressed XPM files \u2014 while processing XPM.Z or XPM.gz files, the library starts external unpacking utilities (uncompress or gunzip) using the execlp() call, and the path to these utilities is determined based on the PATH environment variable. The attack consists of placing custom executable files for uncompress or gunzip in a user-accessible directory that is included in the PATH list, which will be executed when launching an application that uses libXpm. <\/p>\n