{"id":115101,"date":"2024-04-16T14:30:16","date_gmt":"2024-04-16T12:30:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-putty-pozvolyayushhaya-vosstanovit-zakrytyj-klyuch-polzovatelya"},"modified":"2024-04-16T14:30:16","modified_gmt":"2024-04-16T12:30:16","slug":"uyazvimost-v-putty-pozvolyayushhaya-vosstanovit-zakrytyj-klyuch-polzovatelya","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimost-v-putty-pozvolyayushhaya-vosstanovit-zakrytyj-klyuch-polzovatelya","title":{"rendered":"Nj\u00eb vulnerabilitet n\u00eb PuTTY, i cili lejon rikthimin e \u00e7el\u00ebsit t\u00eb mbyllur t\u00eb p\u00ebrdoruesit","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
N\u00eb PuTTY, nj\u00eb klient p\u00ebr protokollin SSH, i njohur n\u00eb platform\u00ebn Windows, \u00ebsht\u00eb zbuluar nj\u00eb vunerabilitet i rreziksh\u00ebm (CVE-2024-31497) q\u00eb lejon rikrijimin e \u00e7el\u00ebsit privat t\u00eb p\u00ebrdoruesit, i gjeneruar duke p\u00ebrdorur algoritmin ECDSA me kurb\u00ebn eliptike NIST P-521 (ecdsa-sha2-nistp521). P\u00ebr t\u00eb gjetur \u00e7el\u00ebsin privat, mjafton t\u00eb analizohet rreth 60 n\u00ebnshkrime digjitale t\u00eb formuara nga ky \u00e7el\u00ebs problematik. <\/p>\n
Vulnerabiliteti shfaqet q\u00eb nga versioni PuTTY 0.68 dhe ka prekur gjithashtu produkte q\u00eb p\u00ebrmbajn\u00eb versione t\u00eb cenueshme t\u00eb PuTTY, si\u00e7 jan\u00eb FileZilla (3.24.1 — 3.66.5), WinSCP (5.9.5 — 6.3.2), TortoiseGit (2.4.0.2 — 2.15.0) dhe TortoiseSVN (1.10.0 — 1.14.6). Problemi \u00ebsht\u00eb zgjidhur n\u00eb p\u00ebrdit\u00ebsimet PuTTY 0.81, FileZilla 3.67.0, WinSCP 6.3.3 dhe TortoiseGit 2.15.0.1. Pas instalimit t\u00eb p\u00ebrdit\u00ebsimit, p\u00ebrdoruesit thirren t\u00eb gjenerojn\u00eb \u00e7el\u00ebsa t\u00eb rinj dhe t\u00eb eliminonin \u00e7el\u00ebsat e vjet\u00ebr publik\u00eb nga skedar\u00ebt authorized_keys. <\/p>\n
Vulnerabiliteti \u00ebsht\u00eb shkaktuar nga pakujdesia e zhvilluesve, t\u00eb cil\u00ebt p\u00ebr gjenerimin e nj\u00eb \u00e7el\u00ebsi 521-bit i kan\u00eb p\u00ebrdorur nj\u00eb vektor inicializimi (nonce) t\u00eb bazuar n\u00eb nj\u00eb sekuenc\u00eb rast\u00ebsore 512-bit, duke menduar ndoshta se 512 bit do t\u00eb mjaftonin dhe 9 bit e mbetur nuk kan\u00eb r\u00ebnd\u00ebsi thelb\u00ebsore. Si rezultat, n\u00eb t\u00eb gjith\u00eb \u00e7el\u00ebsat privat\u00eb t\u00eb krijuar n\u00eb PuTTY duke p\u00ebrdorur algoritmin ecdsa-sha2-nistp521, 9 bit e par\u00eb t\u00eb vektorit t\u00eb inicializimit gjithmon\u00eb merrnin vlera zero. <\/p>\n
P\u00ebr ECDSA dhe DSA, cil\u00ebsia e gjeneruesit t\u00eb numrave t\u00eb rast\u00ebsish\u00ebm dhe mbulimi i plot\u00eb i t\u00eb dh\u00ebnave t\u00eb rast\u00ebsishme t\u00eb parametrave t\u00eb p\u00ebrdorur gjat\u00eb llogaritjes s\u00eb modulit ka r\u00ebnd\u00ebsi thelb\u00ebsore, pasi p\u00ebrcaktimi i madje disa bit\u00ebve me informacion mbi vektorin e inicializimit mjafton p\u00ebr t\u00eb realizuar nj\u00eb sulm t\u00eb p\u00ebrseritur p\u00ebr rikuperimin e t\u00eb gjith\u00eb \u00e7el\u00ebsit privat. P\u00ebr rikuperimin e suksessh\u00ebm t\u00eb \u00e7el\u00ebsit, mjafton t\u00eb kihet \u00e7el\u00ebsi publik dhe analiza e disa dhjet\u00ebra n\u00ebnshkrimeve digjitale t\u00eb gjeneruara me \u00e7el\u00ebsin problematik p\u00ebr t\u00eb dh\u00ebnat q\u00eb jan\u00eb t\u00eb njohura p\u00ebr sulmuesin. Sulmi reduktohet n\u00eb zgjidhjen e problemit HNP (Hidden Number Problem). <\/p>\n
N\u00ebnshkrimet e nevojshme mund t\u00eb merren, p\u00ebr shembull, duke i lidhur p\u00ebrdoruesit n\u00eb nj\u00eb server SSH t\u00eb sulmuesit ose n\u00eb nj\u00eb server Git q\u00eb p\u00ebrdor SSH si transport. N\u00ebnshkrimet e nevojshme p\u00ebr sulmin gjithashtu mund t\u00eb njihen n\u00ebse \u00e7el\u00ebsi \u00ebsht\u00eb p\u00ebrdorur p\u00ebr t\u00eb n\u00ebnshkruar t\u00eb dh\u00ebna t\u00eb rast\u00ebsishme, p.sh., komitetet git kur p\u00ebrdoret agjenti SSH Pageant p\u00ebr t\u00eb redirigjuar trafik n\u00eb host-in e zhvilluesit. Marrja e t\u00eb dh\u00ebnave t\u00eb nevojshme p\u00ebr rikuperimin e \u00e7el\u00ebsit gjat\u00eb nj\u00eb sulmi MITM \u00ebsht\u00eb e pamundur, pasi n\u00ebnshkrimet n\u00eb SSH nuk d\u00ebrgohen n\u00eb form\u00eb t\u00eb hapur. <\/p>\n
Vlen t\u00eb p\u00ebrmendet se nj\u00eb p\u00ebrdorim i ngjash\u00ebm i vektor\u00ebve t\u00eb inicializimit t\u00eb paplot\u00eb \u00ebsht\u00eb p\u00ebrdorur n\u00eb PuTTY edhe p\u00ebr lloje t\u00eb tjera t\u00eb kurbave eliptike, por p\u00ebr algoritmet q\u00eb jan\u00eb t\u00eb ndryshme nga ECDSA P-521, informacioni i nxjerrur nuk \u00ebsht\u00eb mjaftuesh\u00ebm p\u00ebr t\u00eb realizuar nj\u00eb sulm t\u00eb suksessh\u00ebm p\u00ebr rikuperimin e \u00e7el\u00ebsit. \u00c7el\u00ebsat ECDSA t\u00eb madh\u00ebsive t\u00eb tjera dhe \u00e7el\u00ebsat Ed25519 nuk jan\u00eb t\u00eb preksh\u00ebm nga ky sulm. \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"