{"id":112308,"date":"2023-12-19T03:10:22","date_gmt":"2023-12-19T01:10:22","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/terrapin-uyazvimost-v-protokole-ssh-pozvolyayushhaya-snizit-zashhitu-soedineniya"},"modified":"2023-12-19T03:10:22","modified_gmt":"2023-12-19T01:10:22","slug":"terrapin-uyazvimost-v-protokole-ssh-pozvolyayushhaya-snizit-zashhitu-soedineniya","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/terrapin-uyazvimost-v-protokole-ssh-pozvolyayushhaya-snizit-zashhitu-soedineniya","title":{"rendered":"Terrapin \u2014 nj\u00eb dob\u00ebsi n\u00eb protokollin SSH q\u00eb lejon t\u00eb reduktohet mbrojtja e lidhjes.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Nj\u00eb grup hulumtuesish nga Universiteti i Ruhrit n\u00eb Bochum (Gjermani) prezantoi nj\u00eb teknik\u00eb t\u00eb re MITM-attack mbi SSH \u2014 Terrapin, e cila shfryt\u00ebzon nj\u00eb dob\u00ebsi (CVE-2023-48795) n\u00eb protokoll. Sulmuesi, i cili \u00ebsht\u00eb n\u00eb gjendje t\u00eb organizoj\u00eb nj\u00eb sulm MITM, ka mund\u00ebsin\u00eb q\u00eb gjat\u00eb negociatave p\u00ebr lidhjen t\u00eb bllokoj\u00eb d\u00ebrgimin e nj\u00eb mesazhi p\u00ebr konfigurimin e zgjerimeve t\u00eb protokollit p\u00ebr t\u00eb ulur nivelin e mbrojtjes s\u00eb lidhjes. Prototipi i mjeteve p\u00ebr kryerjen e sulmit \u00ebsht\u00eb publikuar n\u00eb GitHub.    <\/p>\n<p>N\u00eb kontekstin e OpenSSH, vulnerabiliteti lejon, p\u00ebr shembull, q\u00eb lidhja t\u00eb kthehet n\u00eb p\u00ebrdorimin e algoritmeve t\u00eb autentikimit m\u00eb pak t\u00eb sigurt dhe t\u00eb \u00e7aktivizoj\u00eb mbrojtjen ndaj sulmeve p\u00ebrmes kanaleve an\u00ebsore, q\u00eb riprodhojn\u00eb inputin p\u00ebrmes analiz\u00ebs s\u00eb vonesave mes goditjeve t\u00eb \u00e7el\u00ebsave n\u00eb tastier\u00eb. N\u00eb bibliotek\u00ebn Python AsyncSSH, s\u00eb bashku me vulnerabilitetin (CVE-2023-46446) n\u00eb implementimin e automatik\u00ebs s\u00eb brendshme (internal state machine), sulmi Terrapin lejon nd\u00ebrhyrjen n\u00eb seanc\u00ebn SSH.      <\/p>\n<p>Vulnerabiliteti ndikon n\u00eb t\u00eb gjitha implementimet e SSH q\u00eb mb\u00ebshtesin ChaCha20-Poly1305 ose cil\u00ebsimet n\u00eb modalitetin CBC n\u00eb kombinim me modalitetin ETM (Encrypt-then-MAC). P\u00ebr shembull, mund\u00ebsi t\u00eb tilla jan\u00eb t\u00eb disponueshme n\u00eb OpenSSH p\u00ebr m\u00eb shum\u00eb se 10 vjet. Vulnerabiliteti \u00ebsht\u00eb bllokuar n\u00eb publikimin e sot\u00ebm t\u00eb OpenSSH 9.6, si dhe n\u00eb p\u00ebrdit\u00ebsimet e PuTTY 0.80, libssh 0.10.6\/0.9.8 dhe AsyncSSH 2.14.2. N\u00eb Dropbear SSH, rregullimi tashm\u00eb \u00ebsht\u00eb shtuar n\u00eb kod, por publikimi i ri ende nuk \u00ebsht\u00eb formuar.      <\/p>\n<p>Vulnerabiliteti shkaktohet nga fakti se sulmuesi, q\u00eb kontrollon trafikun e lidhjes (p\u00ebr shembull, pronari i nj\u00eb pika wireless t\u00eb d\u00ebmshme), mund t\u00eb rregulloj\u00eb numrat rendor\u00eb t\u00eb paketave gjat\u00eb negociatave t\u00eb lidhjes dhe t\u00eb arrij\u00eb t\u00eb largoj\u00eb pa u v\u00ebn\u00eb re nj\u00eb num\u00ebr t\u00eb rast\u00ebsish\u00ebm t\u00eb mesazheve sh\u00ebrbyese SSH, t\u00eb d\u00ebrguara nga klienti ose <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sq\/server\/dts-prohoster\/\"   title=\"serverin\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"3020\">serverin<\/a>. N\u00eb mesin e t\u00eb tjerave, sulmuesi mund t\u00eb fshij\u00eb mesazhet SSH_MSG_EXT_INFO, t\u00eb cilat p\u00ebrdoren p\u00ebr t\u00eb konfiguruar zgjerimet e aplikuara t\u00eb protokollit. N\u00eb m\u00ebnyr\u00eb q\u00eb pala tjet\u00ebr t\u00eb mos p\u00ebrcaktoj\u00eb zhdukjen e paket\u00ebs p\u00ebr shkak t\u00eb d\u00ebmtimeve n\u00eb numrat rendor\u00eb, sulmuesi iniciaton d\u00ebrgimin e nj\u00eb pakete t\u00eb rreme me t\u00eb nj\u00ebjtin num\u00ebr rendor si ai i paket\u00ebs s\u00eb fshir\u00eb. Paketa e rreme p\u00ebrmban nj\u00eb mesazh me flagun SSH_MSG_IGNORE, i cili injorohet gjat\u00eb p\u00ebrpunimit.     <center><img decoding=\"async\" alt=\"Terrapin - nj\u00eb vulnerabilitet n\u00eb protokollin SSH q\u00eb lejon uljen e mbrojtjes s\u00eb lidhjes\" src=\"\/wp-content\/uploads\/2023\/12\/8e3dad7329f9c01cbef81b7029aabdee.png\" style=\"display:block;margin: 0 auto;\" \/><\/center>      <\/p>\n<p>Sulmi nuk mund t\u00eb kryhet kur p\u00ebrdoren kriptimet e rrjedhshme dhe CTR, pasi shkelja e integritetit do t\u00eb zbulohet n\u00eb nivelin e aplikacionit. N\u00eb praktik\u00eb, vet\u00ebm kriptimi ChaCha20-Poly1305 (chacha20-poly1305@openssh.com) \u00ebsht\u00eb i ndjesh\u00ebm ndaj sulmit, p\u00ebr t\u00eb cilin gjendja ndiqet vet\u00ebm nga numrat rendor\u00eb t\u00eb mesazheve, dhe kombinimi i modalitetit Encrypt-Then-MAC (*-etm@openssh.com) dhe kriptimeve CBC.      <\/p>\n<p>N\u00eb OpenSSH 9.6 dhe implementime t\u00eb tjera, p\u00ebr t\u00eb bllokuar sulmin \u00ebsht\u00eb zhvilluar nj\u00eb zgjerim protokollit \"strict KEX\", i cili aktivizohet automatikisht n\u00ebse \u00ebsht\u00eb n\u00eb mb\u00ebshtetje t\u00eb an\u00ebs tjet\u00ebr. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sq\/server\/dts-los-angeles\/\"   title=\"server\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"3752\">server<\/a> t\u00eb dy pal\u00ebt, klienti. Zgjerimi p\u00ebrfundon lidhjen kur pranohet ndonj\u00eb mesazh joshum\u00eb apo t\u00eb tepruar (p\u00ebr shembull, me flagun SSH_MSG_IGNORE ose SSH2_MSG_DEBUG), t\u00eb pranuara gjat\u00eb negociatave t\u00eb lidhjes dhe gjithashtu reseton num\u00ebruesin MAC (Message Authentication Code) pas p\u00ebrfundimit t\u00eb \u00e7do shk\u00ebmbimi \u00e7el\u00ebsash.<br \/>\n<br \/>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=60304\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0420\u0443\u0440\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0411\u043e\u0445\u0443\u043c\u0435 (\u0413\u0435\u0440\u043c\u0430\u043d\u0438\u044f) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043d\u043e\u0432\u0443\u044e \u0442\u0435\u0445\u043d\u0438\u043a\u0443 MITM-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 SSH &#8212; Terrapin, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0449\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-48795) \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c MITM-\u0430\u0442\u0430\u043a\u0443, \u0438\u043c\u0435\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0441\u043e\u0433\u043b\u0430\u0441\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u0441 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u043e\u0439 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 \u0434\u043b\u044f \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044f \u0443\u0440\u043e\u0432\u043d\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f. \u041f\u0440\u043e\u0442\u043e\u0442\u0438\u043f \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f \u0434\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u043d\u0430 GitHub. \u0412 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 OpenSSH \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":112309,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-112308","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0420\u0443\u0440\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0411\u043e\u0445\u0443\u043c\u0435 (\u0413\u0435\u0440\u043c\u0430\u043d\u0438\u044f) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043d\u043e\u0432\u0443\u044e \u0442\u0435\u0445\u043d\u0438\u043a\u0443 MITM-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 SSH - Terrapin, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0449\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-48795) \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c MITM-\u0430\u0442\u0430\u043a\u0443, \u0438\u043c\u0435\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0441\u043e\u0433\u043b\u0430\u0441\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u0441 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u043e\u0439 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 \u0434\u043b\u044f \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044f \u0443\u0440\u043e\u0432\u043d\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f. \u041f\u0440\u043e\u0442\u043e\u0442\u0438\u043f \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f \u0434\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u043d\u0430 GitHub. \u0412 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 OpenSSH \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c,\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/terrapin-uyazvimost-v-protokole-ssh-pozvolyayushhaya-snizit-zashhitu-soedineniya\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Terrapin \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 SSH, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0441\u043d\u0438\u0437\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0420\u0443\u0440\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0411\u043e\u0445\u0443\u043c\u0435 (\u0413\u0435\u0440\u043c\u0430\u043d\u0438\u044f) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043d\u043e\u0432\u0443\u044e \u0442\u0435\u0445\u043d\u0438\u043a\u0443 MITM-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 SSH - Terrapin, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0449\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-48795) \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c MITM-\u0430\u0442\u0430\u043a\u0443, \u0438\u043c\u0435\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0441\u043e\u0433\u043b\u0430\u0441\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u0441 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u043e\u0439 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 \u0434\u043b\u044f \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044f \u0443\u0440\u043e\u0432\u043d\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f. \u041f\u0440\u043e\u0442\u043e\u0442\u0438\u043f \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f \u0434\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u043d\u0430 GitHub. \u0412 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 OpenSSH \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c,\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/terrapin-uyazvimost-v-protokole-ssh-pozvolyayushhaya-snizit-zashhitu-soedineniya\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2023-12-19T01:10:22+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2023-12-19T01:10:22+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Terrapin \u2014 nj\u00eb vulnerabilitet n\u00eb protokollin SSH q\u00eb lejon uljen e mbrojtjes s\u00eb lidhjes | ProHoster","description":"Nj\u00eb grup hulumtuesish nga Universiteti Ruhr n\u00eb Bochum (Gjermani) prezantoi nj\u00eb teknik\u00eb t\u00eb re sulmi MITM ndaj SSH - Terrapin, e cila shfryt\u00ebzon nj\u00eb vulnerabilitet (CVE-2023-48795) n\u00eb protokoll. Sulmuesi, q\u00eb \u00ebsht\u00eb n\u00eb gjendje t\u00eb organizoj\u00eb nj\u00eb sulm MITM, ka mund\u00ebsin\u00eb, gjat\u00eb negociatave p\u00ebr lidhjen, t\u00eb bllokoj\u00eb d\u00ebrgimin e mesazhit me konfigurimin e zgjerimeve t\u00eb protokollit p\u00ebr t\u00eb ulur nivelin e mbrojtjes s\u00eb lidhjes. Nj\u00eb prototip i mjeteve p\u00ebr t\u00eb kryer sulmin \u00ebsht\u00eb publikuar n\u00eb GitHub. N\u00eb kontekstin e OpenSSH, vulnerabiliteti,","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/terrapin-uyazvimost-v-protokole-ssh-pozvolyayushhaya-snizit-zashhitu-soedineniya","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Terrapin \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 SSH, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0441\u043d\u0438\u0437\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0420\u0443\u0440\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0411\u043e\u0445\u0443\u043c\u0435 (\u0413\u0435\u0440\u043c\u0430\u043d\u0438\u044f) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043d\u043e\u0432\u0443\u044e \u0442\u0435\u0445\u043d\u0438\u043a\u0443 MITM-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 SSH - Terrapin, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0449\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-48795) \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c MITM-\u0430\u0442\u0430\u043a\u0443, \u0438\u043c\u0435\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0441\u043e\u0433\u043b\u0430\u0441\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u0441 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u043e\u0439 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 \u0434\u043b\u044f \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044f \u0443\u0440\u043e\u0432\u043d\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f. \u041f\u0440\u043e\u0442\u043e\u0442\u0438\u043f \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f \u0434\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u043d\u0430 GitHub. \u0412 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 OpenSSH \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c,","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/terrapin-uyazvimost-v-protokole-ssh-pozvolyayushhaya-snizit-zashhitu-soedineniya","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-12-19T01:10:22+00:00","article:modified_time":"2023-12-19T01:10:22+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"112308","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-09 21:46:41","updated":"2026-02-22 15:30:29","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/112308","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=112308"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/112308\/revisions"}],"predecessor-version":[{"id":162280,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/112308\/revisions\/162280"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/112309"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=112308"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=112308"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=112308"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}