{"id":121386,"date":"2025-01-17T15:46:06","date_gmt":"2025-01-17T13:46:06","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-pam-u2f-pozvolyayushhaya-obojti-autentifikacziyu-na-baze-apparatnogo-tokena"},"modified":"2025-01-17T15:46:06","modified_gmt":"2025-01-17T13:46:06","slug":"uyazvimost-v-pam-u2f-pozvolyayushhaya-obojti-autentifikacziyu-na-baze-apparatnogo-tokena","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimost-v-pam-u2f-pozvolyayushhaya-obojti-autentifikacziyu-na-baze-apparatnogo-tokena","title":{"rendered":"Vulneraibilitet n\u00eb pam-u2f, duke lejuar kalimin e autentifikimit me baz\u00eb t\u00eb \u00e7el\u00ebsit harduerik.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Zhvilluesit e projektit openSUSE kan\u00eb zbuluar nj\u00eb dob\u00ebsi (CVE-2025-23013) n\u00eb modulit PAM pam-u2f, i cili p\u00ebrdoret p\u00ebr autentifikim n\u00ebp\u00ebrmjet tokeneve YubiKey, Yubico Security Key, YubiHSM dhe pajisjeve t\u00eb tjera FIDO q\u00eb mb\u00ebshtesin protokollin U2F (Universal 2nd Factor). Dob\u00ebsia i lejon p\u00ebrdoruesit, q\u00eb ka qasje lokale jokonfiduese n\u00eb sistem, n\u00eb disa konfiguracione PAM t\u00eb kaloj\u00eb autentifikimin pa futur tokene harduerike. N\u00eb praktik\u00eb, moduli pam-u2f zakonisht lidhet p\u00ebr autentifikim me dy faktor\u00eb ose pa fjal\u00ebkalim duke p\u00ebrdorur token\u00eb (p\u00ebr shembull, p\u00ebr t\u00eb konfirmuar autorizimin p\u00ebr t\u00eb ekzekutuar komandat p\u00ebrmes mjeteve si su dhe sudo). <\/p>\n
Vulnerabiliteti shkaktohet nga kthimi i gabuar i funksionit pam_sm_authenticate() t\u00eb vler\u00ebs PAM_IGNORE. Kjo vler\u00eb kthehet n\u00eb rast t\u00eb nj\u00eb gabimi n\u00eb thirrjet gethostname(), pam_modutil_drop_priv(), pam_modutil_regain_priv() ose resolve_authfile_path(), si dhe n\u00eb rast t\u00eb problemeve me alokimin e memories n\u00eb strdup() ose calloc(). Problemi \u00ebsht\u00eb se biblioteka libpam, pasi merr rezultatin nga moduli PAM me kodin PAM_IGNORE, do t\u00eb kthej\u00eb kodin p\u00ebrfundimtar PAM_SUCCESS, q\u00eb tregon kalimin e suksessh\u00ebm t\u00eb autentifikimit, n\u00ebse ndonj\u00eb modul tjet\u00ebr PAM n\u00eb zinxhirin e kontrollit ka kthyer nj\u00eb rezultat t\u00eb suksessh\u00ebm autentifikimi. <\/p>\n
Kur p\u00ebrdoret moduli pam-u2f n\u00eb kombinim me pam_unix p\u00ebr autentifikimin me dy faktor\u00eb, vulnerabiliteti lejon kalimin e suksessh\u00ebm t\u00eb autentifikimit n\u00eb rastin e verifikimit t\u00eb suksessh\u00ebm t\u00eb fjal\u00ebkalimit, pa konfirmimin e faktorit t\u00eb dyt\u00eb. Kur kryhet autentifikimi pa fjal\u00ebkalim p\u00ebrmes nj\u00eb tokeni hardware, pam-u2f mund t\u00eb p\u00ebrdoret n\u00eb kombinim me modulin PAM pam_faillock, i cili kufizon numrin e p\u00ebrpjekjeve t\u00eb autentifikimit dhe kthen PAM_SUCCESS n\u00ebse limiti nuk \u00ebsht\u00eb tejkaluar. <\/p>\n
Si nj\u00eb shembull sulmi quhet kalimi i kontrollit t\u00eb tokenit gjat\u00eb ekzekutimit t\u00eb komandave me privilegje nga nj\u00eb p\u00ebrdorues lokal, duke p\u00ebrdorur utilitat sudo dhe su. Gjat\u00eb ekzekutimit t\u00eb k\u00ebtyre komandave, sulmuesi mund t\u00eb krijoj\u00eb kushte q\u00eb moduli pam-u2f t\u00eb kthej\u00eb vler\u00ebn PAM_IGNORE, p\u00ebr shembull, p\u00ebrmes konsumimit t\u00eb memories s\u00eb disponueshme. Problemi \u00ebsht\u00eb zgjidhur n\u00eb versionin pam-u2f 1.3.1. \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"