{"id":119929,"date":"2024-09-24T09:43:11","date_gmt":"2024-09-24T07:43:11","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimosti-v-pcp-i-nix-pozvolyayushhie-podnyat-privilegii-v-sisteme"},"modified":"2024-09-24T09:43:11","modified_gmt":"2024-09-24T07:43:11","slug":"uyazvimosti-v-pcp-i-nix-pozvolyayushhie-podnyat-privilegii-v-sisteme","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimosti-v-pcp-i-nix-pozvolyayushhie-podnyat-privilegii-v-sisteme","title":{"rendered":"Vulnerabilitete n\u00eb PCP dhe Nix, q\u00eb lejojn\u00eb rritjen e privilegjeve n\u00eb sistem","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
N\u00eb mjetin PCP (Performance Co-Pilot), i p\u00ebrdorur p\u00ebr mbledhjen e statistikave mbi performanc\u00ebn e sistemit (p.sh., p\u00ebrdoret n\u00eb nd\u00ebrfaqen Cockpit), jan\u00eb zbuluar dy vulnerabilitete. Vulnerabiliteti i par\u00eb (CVE-2024-45770) \u00ebsht\u00eb i pranish\u00ebm n\u00eb utilitarin pmpost, i cili \u00ebsht\u00eb i destinuar p\u00ebr d\u00ebrgimin e mesazheve n\u00eb log dhe n\u00ebn kushte t\u00eb caktuara, ekzekutohet me privilegje t\u00eb rritura. Eksploatimi i vulnerabilitetit lejon ekzekutimin e kodit me t\u00eb drejtat e root, por p\u00ebr t\u00eb kryer nj\u00eb sulm \u00ebsht\u00eb e nevojshme t\u00eb kesh qasje n\u00eb llogarin\u00eb e PCP. Sulmi konsiston n\u00eb z\u00ebvend\u00ebsimin e nj\u00eb lidhjeje simbole me skedarin «\/var\/log\/pcp\/NOTICES», n\u00eb t\u00eb cilin shkruhet nga procesi me t\u00eb drejtat e root pa p\u00ebrdorimin e flamurit O_NOFOLLOW kur hapet skedari. <\/p>\n
Dob\u00ebsia e dyt\u00eb n\u00eb PCP (CVE-2024-45769) ndikon n\u00eb procesin n\u00eb prapasken\u00eb pcmd dhe \u00e7on n\u00eb qasje n\u00eb memorie jasht\u00eb tamponit kur d\u00ebrgohen t\u00eb dh\u00ebna t\u00eb formatuara n\u00eb m\u00ebnyr\u00eb t\u00eb ve\u00e7ant\u00eb. Rreziku i dob\u00ebsis\u00eb reduktohet nga fakti se, p\u00ebr default, pcmd nuk e aktivizon pranimin e k\u00ebrkesave rrjeti nga sisteme t\u00eb tjera. Dob\u00ebsit\u00eb jan\u00eb eliminuar n\u00eb versionin PCP 6.3.1. Problemet u identifikuan gjat\u00eb nj\u00eb auditi t\u00eb kryer nga zhvilluesit e projektit SUSE. <\/p>\n
P\u00ebrve\u00e7 k\u00ebsaj, nj\u00eb dob\u00ebsi (CVE-2024-45593) \u00ebsht\u00eb identifikuar n\u00eb menaxherin e paketave Nix, i p\u00ebrdorur n\u00eb shp\u00ebrndarjen NixOS. Dob\u00ebsia mund\u00ebson, gjat\u00eb shkarkimit t\u00eb skedareve t\u00eb formatuara n\u00eb formatin NAR (Nix Archive), t\u00eb b\u00ebhet regjistrimi n\u00eb zona t\u00eb arbitrave t\u00eb sistemit t\u00eb skedar\u00ebve, p\u00ebr aq sa lejojn\u00eb t\u00eb drejtat e aksesit me t\u00eb cilat ekzekutohet p\u00ebrpunuesi (p\u00ebr aq sa p\u00ebrdoret procesi n\u00eb prapasken\u00eb Nix, shkarkimi ekzekutohet me t\u00eb drejtat root). Problemi shfaqet n\u00eb deg\u00ebn Nix 2.24 dhe \u00ebsht\u00eb eliminuar n\u00eb versionin 2.24.6. <\/p>\n
S\u00eb fundmi, mund t\u00eb p\u00ebrmendet publikimi i nj\u00eb paralajm\u00ebrimi p\u00ebr zbules\u00ebn e nj\u00eb vulnerabiliteti kritik q\u00eb prek shp\u00ebrndarjet GNU\/Linux dhe lejon ekzekutimin e kodit n\u00eb sistem n\u00eb distanc\u00eb pa kaluar autentifikimin. Aktualisht nuk ka informacion rreth natyr\u00ebs s\u00eb problemit dhe n\u00ebn-sistemeve q\u00eb ai prek, \u00ebsht\u00eb th\u00ebn\u00eb vet\u00ebm se, me marr\u00ebveshje me zhvilluesit e shp\u00ebrndarjeve, raporti fillestar mbi problemin planifikohet t\u00eb publikohet m\u00eb 30 Shtator, nd\u00ebrsa raporti i plot\u00eb me detaje \u2014 m\u00eb 6 Tetor. CVE nuk i \u00ebsht\u00eb atribuar ende problemit. Sipas deklarat\u00ebs s\u00eb k\u00ebrkuesit q\u00eb zbuloi problemin, kompanit\u00eb Canonical dhe Red Hat i kan\u00eb caktuar vulnerabilitetit nivelin kritik t\u00eb rrezikut (9.9 nga 10). \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"