{"id":117002,"date":"2024-07-06T21:43:04","date_gmt":"2024-07-06T19:43:04","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-darknete-poyavilas-informacziya-chto-grub-skomprometirovan"},"modified":"2024-07-06T21:43:04","modified_gmt":"2024-07-06T19:43:04","slug":"v-darknete-poyavilas-informacziya-chto-grub-skomprometirovan","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/v-darknete-poyavilas-informacziya-chto-grub-skomprometirovan","title":{"rendered":"Informacione jan\u00eb shfaqur n\u00eb dark web q\u00eb GRUB \u00ebsht\u00eb komprometuar","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
<\/p>\n
Eksploit p\u00ebr nj\u00eb vulnerabilitet 0day \u00ebsht\u00eb duke u shitur tashm\u00eb n\u00eb forume p\u00ebrkat\u00ebse.<\/p>\n
M\u00eb 21 qershor, n\u00eb nj\u00eb nga forume, u shfaq informacioni p\u00ebr shiten e eksploitit t\u00eb vulnerabilitetit t\u00eb dit\u00ebs zero n\u00eb ngarkuesin GRUB t\u00eb Linux, i cili lejon nj\u00eb rritje lokale t\u00eb privilegjeve (LPE).<\/p>\n
Sipas Dark Web Intelligence, nj\u00eb sulmues pretendohet se ka gjetur nj\u00eb vulnerabilitet n\u00eb GRUB, i cili lejon kalimin e mekanizmave t\u00eb autentikimit dhe marrjen e t\u00eb drejtave root n\u00eb sistem.<\/p>\n
Sipas nj\u00eb mesazhi nga nj\u00eb an\u00ebtar i forumit t\u00eb err\u00ebt me nofk\u00ebn \"Cas\", vulnerabiliteti preku GRUB - nj\u00eb komponent kritik i shumic\u00ebs s\u00eb sistemeve Linux, i cili menaxhon procesin e ngarkimit, duke lejuar sulmuesit t\u00eb vendosin malware t\u00eb fshehur dhe t\u00eb q\u00ebndruesh\u00ebm, t\u00eb cilin mund t\u00eb jet\u00eb mjaft e v\u00ebshtir\u00eb ta zbulojn\u00eb dhe eliminojn\u00eb. Eksploitin po shitet p\u00ebr 90,000 dollar\u00eb.<\/p>\n
\u00cbsht\u00eb e r\u00ebnd\u00ebsishme t\u00eb theksohet se GRUB ka qen\u00eb tashm\u00eb objekt sulmesh n\u00eb t\u00eb kaluar\u00ebn. N\u00eb vitin 2015, nj\u00eb vulnerabilitet CVE-2015-8370 u zbulua, i cili lejonte kalimin e autentikimit duke shtypur \u00e7el\u00ebsin backspace 28 her\u00eb gjat\u00eb faz\u00ebs s\u00eb inputit t\u00eb emrit t\u00eb p\u00ebrdoruesit n\u00eb GRUB. Ky vulnerabilitet preku versionet GRUB nga 1.98 deri n\u00eb 2.02 dhe u p\u00ebrdor gjer\u00ebsisht deri n\u00eb l\u00ebshimin e patch-it. N\u00eb vitin 2020 u zbulua nj\u00eb tjet\u00ebr vulnerabilitet \u2014 CVE-2020-10713, i njohur gjithashtu si BootHole, i cili lejonte vendosjen e softuerit malware n\u00eb procesin e ngarkimit.<\/p>\n
Distribucione kryesore t\u00eb Linux, si Debian, RedHat dhe Ubuntu, kan\u00eb nxjerr\u00eb shpejt rekomandime dhe patch-e p\u00ebr vulnerabilitetet e m\u00ebparshme t\u00eb GRUB-it dhe probable do t\u00eb veprojn\u00eb n\u00eb m\u00ebnyr\u00eb t\u00eb ngjashme edhe k\u00ebt\u00eb her\u00eb, megjithat\u00eb problemi p\u00ebrkeq\u00ebsohet nga fakti se vulnerabiliteti \u00ebsht\u00eb zbuluar nga kriminel\u00ebt dhe jo nga haker\u00ebt etike. Kjo do t\u00eb thot\u00eb se zbulimi dhe riparimi nga studiuesit e siguris\u00eb mund t\u00eb zvarritet ndjesh\u00ebm.<\/p>\n
![\"Informacione](\"\/wp-content\/uploads\/2024\/07\/a954ed8353ccfaad566145c2d316a9bf.jpg\")
<\/p>\n