N\u00eb sistemin e inicializimit finit \u00ebsht\u00eb zbuluar nj\u00eb ndjeshm\u00ebri (CVE-2025-29906) q\u00eb lejon hyrjen n\u00eb sistem me \u00e7do p\u00ebrdorues pa kontrollimin e fjal\u00ebkalimit. Shfryt\u00ebzimi i k\u00ebsaj ndjeshm\u00ebrie kryhet p\u00ebrmes manipulimit t\u00eb ftes\u00ebs p\u00ebr hyrje (login) dhe k\u00ebrkon qasje n\u00eb konsol\u00eb. Ndjeshm\u00ebria shfaqet q\u00eb nga versioni 3.0 (tetor 2017) dhe \u00ebsht\u00eb eliminuar n\u00eb l\u00ebshimin finit 4.11. Pas k\u00ebsaj, \u00ebsht\u00eb formuar l\u00ebshimi 4.12, i cili ka eliminuar mbushjen e tamponit n\u00eb plugin-in urandom, i cili nuk \u00ebsht\u00eb sh\u00ebnuar si ndjeshm\u00ebri. <\/p>\n
Vulnerabiliteti p\u00ebrfshin implementimin e programit getty, i cili shfaq thirrjen p\u00ebr hyrje n\u00eb terminal dhe nis procesin \/bin\/login p\u00ebr autentifikimin e p\u00ebrdoruesit. Vulnerabiliteti \u00ebsht\u00eb shkaktuar nga mungesa e ndarjes s\u00eb argumenteve t\u00eb komand\u00ebs gjat\u00eb nisjes s\u00eb \/bin\/login, duke lejuar q\u00eb opsioni \"-f\" t\u00eb p\u00ebrmendet n\u00eb emrin e p\u00ebrdoruesit, i cili \u00e7aktivizonte verifikimin e fjal\u00ebkalimit (p.sh., \u00ebsht\u00eb e mundur t\u00eb shkruani \"-f root\" n\u00eb vend t\u00eb \"root\"). Problemi \u00ebsht\u00eb zgjidhur duke shtuar argumentin \"--\" para fush\u00ebs me emrin e p\u00ebrdoruesit: -- execl(_PATH_LOGIN, _PATH_LOGIN, \"-p\", name, NULL); + execl(_PATH_LOGIN, _PATH_LOGIN, \"-p\", \"--\", name, NULL); <\/p>\n
Si nj\u00eb zgjidhje p\u00ebr bllokimin e ndjeshm\u00ebris\u00eb, rekomandohet t\u00eb p\u00ebrdoret n\u00eb finit nj\u00eb realizim t\u00eb jasht\u00ebm t\u00eb procesit getty, p\u00ebr shembull, agetty. N\u00eb distribucione si Debian 12, Ubuntu, Parrot, Raspbian dhe Trisquel, paketat me finit ende mbeten pa rregullimin e ndjeshm\u00ebris\u00eb. <\/p>\n
Sistemi i inicializimit Finit (Fast init) po zhvillohet si nj\u00eb alternativ\u00eb e thjesht\u00eb ndaj SysV init dhe systemd, dhe ka fituar popullaritet n\u00eb sistemet e integruara. Projekti bazohet n\u00eb teknologjit\u00eb e sistemit t\u00eb inicializimit fastinit, q\u00eb p\u00ebrdoret n\u00eb firmware-n e netbook-\u00ebve EeePC dhe dallon p\u00ebr procesin shum\u00eb t\u00eb shpejt\u00eb t\u00eb ngarkes\u00ebs. Finit mb\u00ebshtet nivelet e ekzekutimit (runlevel) n\u00eb stilin e SysV init, ribashkimin automatik t\u00eb sh\u00ebrbimit n\u00eb rast d\u00ebshtimi, ekzekutimin e trajtimeve nj\u00eb her\u00ebsh, fillimin e sh\u00ebrbimeve me marr\u00eb n\u00eb konsiderat\u00eb var\u00ebsit\u00eb dhe kushtet arbitrare, bashk\u00ebngjitjen e trajtimeve t\u00eb tjera p\u00ebr fillim para ose pas ekzekutimit t\u00eb sh\u00ebrbimeve, zgjerimin e funksionaliteteve p\u00ebrmes plugin-eve, dhe konfigurimin e kufizimeve p\u00ebrmes Cgroups v2. \u0412 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 finit \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2025-29906), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u043e\u0439\u0442\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043f\u043e\u0434 \u043b\u044e\u0431\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0430\u0440\u043e\u043b\u044f. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u044e \u0441 \u043f\u0440\u0438\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u0435\u043c \u0432\u0445\u043e\u0434\u0430 (login) \u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u043d\u0430\u043b\u0438\u0447\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u043e\u043d\u0441\u043e\u043b\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u0432\u0435\u0440\u0441\u0438\u0438 3.0 (\u043e\u043a\u0442\u044f\u0431\u0440\u044c 2017 \u0433\u043e\u0434\u0430) \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u0432\u044b\u043f\u0443\u0441\u043a\u0435 finit 4.11. \u0421\u043b\u0435\u0434\u043e\u043c \u0443\u0436\u0435 \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d \u0432\u044b\u043f\u0443\u0441\u043a 4.12 \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-123909","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Ndjeshm\u00ebria n\u00eb sistemin e inicializimit finit q\u00eb lejon hyrjen n\u00eb sistem pa fjal\u00ebkalim | ProHoster","description":"N\u00eb sistemin e inicializimit finit \u00ebsht\u00eb zbuluar nj\u00eb ndjeshm\u00ebri (CVE-2025-29906) q\u00eb lejon hyrjen n\u00eb sistem me \u00e7do p\u00ebrdorues pa kontrollimin e fjal\u00ebkalimit.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-sisteme-iniczializaczii-finit-pozvolyayushhaya-vojti-v-sistemu-bez-parolya","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 finit, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u043e\u0439\u0442\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0431\u0435\u0437 \u043f\u0430\u0440\u043e\u043b\u044f | ProHoster","og:description":"\u0412 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 finit \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2025-29906), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u043e\u0439\u0442\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043f\u043e\u0434 \u043b\u044e\u0431\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0430\u0440\u043e\u043b\u044f.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-sisteme-iniczializaczii-finit-pozvolyayushhaya-vojti-v-sistemu-bez-parolya","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-05-01T13:05:06+00:00","article:modified_time":"2025-05-01T13:05:06+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"123909","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 12:36:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 12:36:19","updated":"2026-01-23 12:36:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/123909","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=123909"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/123909\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=123909"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=123909"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=123909"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"