Projekti Zero Day Initiative (ZDI) zbuloi informacione mbi dob\u00ebsit\u00eb e pap\u00ebrmir\u00ebsuara (0-day) (CVE-2023-42115, CVE-2023-42116, CVE-2023-42117) n\u00eb serverin e post\u00ebs Exim, q\u00eb lejojn\u00eb ekzekutimin e kodit t\u00eb tij n\u00eb m\u00ebnyr\u00eb t\u00eb larg\u00ebt n\u00eb server me privilegje t\u00eb procesit q\u00eb pranon lidhjet n\u00eb portin 25 rrjetor. Autentifikimi p\u00ebr t\u00eb kryer nj\u00eb sulm nuk \u00ebsht\u00eb i nevojsh\u00ebm. <\/p>\n
Dob\u00ebsia e par\u00eb (CVE-2023-42115) shkaktohet nga nj\u00eb gabim n\u00eb sh\u00ebrbimin SMTP dhe lidhet me munges\u00ebn e kontrolleve t\u00eb nevojshme mbi t\u00eb dh\u00ebnat e marra nga p\u00ebrdoruesi gjat\u00eb seanc\u00ebs SMTP dhe q\u00eb p\u00ebrdoren p\u00ebr llogaritjen e madh\u00ebsis\u00eb s\u00eb bufferit. Si rezultat, agresori mund t\u00eb arrij\u00eb t\u00eb shkruaj\u00eb me kontroll t\u00eb dh\u00ebnat e tij n\u00eb nj\u00eb zon\u00eb t\u00eb memories jasht\u00eb bufferit t\u00eb caktuar. <\/p>\n
Dob\u00ebsia e dyt\u00eb (CVE-2023-42116) \u00ebsht\u00eb e pranishme n\u00eb trajtuesin e k\u00ebrkesave NTLM dhe shkaktohet nga kopjimi i t\u00eb dh\u00ebnave t\u00eb marra nga p\u00ebrdoruesi n\u00eb nj\u00eb buffer me madh\u00ebsi fikse pa kontrollet e nevojshme p\u00ebr madh\u00ebsin\u00eb e informacionit q\u00eb po shkruhet. <\/p>\n
Dob\u00ebsia e tret\u00eb (CVE-2023-42117) \u00ebsht\u00eb e pranishme n\u00eb procesin SMTP q\u00eb pranon lidhjet n\u00eb portin 25 TCP dhe shkaktohet nga mungesa e kontrollit t\u00eb t\u00eb dh\u00ebnave t\u00eb hyrjes, q\u00eb mund t\u00eb \u00e7oj\u00eb n\u00eb shkrimin e t\u00eb dh\u00ebnave t\u00eb d\u00ebrguara nga p\u00ebrdoruesi n\u00eb nj\u00eb zon\u00eb t\u00eb memories jasht\u00eb bufferit t\u00eb caktuar. <\/p>\n
Dob\u00ebsit\u00eb sh\u00ebnohen si 0-day, dmth. mbeten t\u00eb pap\u00ebrmir\u00ebsuara, por n\u00eb raportin ZDI pretendon se zhvilluesit e Exim jan\u00eb njoftuar paraprakisht p\u00ebr problemet. Ndryshimi i fundit n\u00eb baz\u00ebn e kodit t\u00eb Exim u b\u00eb dy dit\u00eb m\u00eb par\u00eb dhe aktualisht nuk \u00ebsht\u00eb e qart\u00eb se kur do t\u00eb zgjidhen problemet (prodhuesit e distribuacioneve nuk jan\u00eb ende p\u00ebrgjigjur, pasi informacioni u zbulua pa detaje disa or\u00eb m\u00eb par\u00eb). Tani p\u00ebr tani, zhvilluesit e Exim po p\u00ebrgatiten p\u00ebr l\u00ebshimin e versionit t\u00eb ri 4.97, por nuk ka ende informacione t\u00eb sakta p\u00ebr koh\u00ebn e publikimit t\u00eb tij. Si nj\u00eb metod\u00eb e vetme t\u00eb tani p\u00ebr tani, p\u00ebrmendet kufizimi i qasjes n\u00eb sh\u00ebrbimin SMTP t\u00eb bazuar n\u00eb Exim. <\/p>\n
P\u00ebrve\u00e7 dob\u00ebsive kritike t\u00eb p\u00ebrmendura m\u00eb lart, u zbulua gjithashtu informacion mbi disa probleme m\u00eb pak t\u00eb rrezikshme: <\/p>\n
\n
CVE-2023-42118 \u2014 nj\u00eb tejkalim i numrave n\u00eb bibliotek\u00ebn libspf2, q\u00eb shfaqet gjat\u00eb analiz\u00ebs s\u00eb makroseve SPF. Kjo dob\u00ebsi lejon iniciimin e d\u00ebmtiimit t\u00eb p\u00ebrmbajtjes s\u00eb memories n\u00eb distanc\u00eb dhe potencialisht mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb realizuar ekzekutimin e kodit tuaj n\u00eb server<\/a>.\n