{"id":148355,"date":"2025-11-14T11:12:02","date_gmt":"2025-11-14T09:12:02","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-kde-lightdm-greeter-povyshayushhaya-privilegii-s-polzovatelya-lightdm-do-root"},"modified":"2025-11-14T11:12:02","modified_gmt":"2025-11-14T09:12:02","slug":"uyazvimost-v-kde-lightdm-greeter-povyshayushhaya-privilegii-s-polzovatelya-lightdm-do-root","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimost-v-kde-lightdm-greeter-povyshayushhaya-privilegii-s-polzovatelya-lightdm-do-root","title":{"rendered":"Vulnerabilitet n\u00eb KDE LightDM Greeter, q\u00eb rrit privilegjet nga p\u00ebrdoruesi lightdm n\u00eb root","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
N\u00eb LightDM KDE Greeter, nj\u00eb implementim i ekranit t\u00eb hyrjes n\u00eb sistem i zhvilluar nga projekti KDE dhe i nd\u00ebrtuar mbi framework-un LightDM, u identifikua nj\u00eb dob\u00ebsi (CVE-2025-62876) q\u00eb lejon ngritjen e privilegjeve nga nj\u00eb p\u00ebrdorues pa privilegje lightdm, n\u00ebn t\u00eb cilin ekzekutohet LightDM, deri te p\u00ebrdoruesi root. Dob\u00ebsia \u00ebsht\u00eb korrigjuar n\u00eb versionin lightdm-kde-greeter 6.0.4. <\/p>\n
Nj\u00eb dob\u00ebsi u identifikua nga ekipi i projektit SUSE pas nj\u00eb rishikimi t\u00eb k\u00ebrkes\u00ebs p\u00ebr shtimin e paket\u00ebs lightdm-kde-greeter n\u00eb repositorin openSUSE Tumbleweed. Problemi ndodhet n\u00eb sh\u00ebrbimin DBus, q\u00eb lejon p\u00ebrdoruesit t\u00eb vendosin tema t\u00eb personalizuara p\u00ebr ekranin e hyrjes n\u00eb sistem. Sh\u00ebrbimi realizohet si nj\u00eb trajtues KAuth, q\u00eb ekzekutohet me t\u00eb drejta root. Dob\u00ebsia shkaktohet nga prania n\u00eb kod e logjik\u00ebs s\u00eb ve\u00e7ant\u00eb p\u00ebr p\u00ebrpunimin e cil\u00ebsimeve q\u00eb fillojn\u00eb me stringun \"copy_\". P\u00ebr cil\u00ebsime t\u00eb tilla me t\u00eb drejta root, \u00ebsht\u00eb thirrur nj\u00eb funksion q\u00eb kopjon dosjen e caktuar n\u00eb katalogun \/var\/lib\/lightdm, q\u00eb i p\u00ebrket p\u00ebrdoruesit lightdm. Kjo operacion aplikohej p\u00ebr t\u00eb ngarkuar imazhe nga katalogu i p\u00ebrdoruesit, t\u00eb cilat LightDM nuk mund t'i lexonte drejtp\u00ebrdrejt gjat\u00eb shfaqjes s\u00eb ekranit t\u00eb hyrjes p\u00ebr shkak t\u00eb autorizimeve. <\/p>\n
Operacioni i kopjimit realizohet me t\u00eb drejtat root, dhe pas kopjimit, pronari i skedarit rezultues ndryshohet. Prandaj, kjo mund\u00ebsi mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb kopjuar n\u00eb nj\u00eb katalog q\u00eb \u00ebsht\u00eb publikisht i aksesuesh\u00ebm, \/var\/lib\/lightdm, skedar\u00eb t\u00eb cil\u00ebt p\u00ebrdoruesit e zakonsh\u00ebm nuk i kan\u00eb akses, si\u00e7 \u00ebsht\u00eb \/etc\/shadow. P\u00ebr m\u00eb tep\u00ebr, duke krijuar nj\u00eb lidhje simbolike me emrin e skedarit t\u00eb ri n\u00eb katalogun \/var\/lib\/lightdm, mund t\u00eb organizohet rind\u00ebrtimi i \u00e7far\u00ebdo skedari n\u00eb sistem. <\/p>\n
N\u00ebse ekzekutimi i trajtuesit t\u00eb nd\u00ebrrimit t\u00eb temave LightDM lejohet n\u00eb konfigurimet e Polkit p\u00ebr p\u00ebrdoruesit e pa privilegjuar, at\u00ebher\u00eb dob\u00ebsia e shqyrtuar lejon ngritjen e privilegjeve t\u00eb \u00e7do p\u00ebrdoruesi n\u00eb root. Megjithat\u00eb, n\u00eb praktik\u00eb n\u00eb Polkit p\u00ebr t\u00eb kryer k\u00ebt\u00eb veprim zakonisht k\u00ebrkohet e drejta \u201eauth_admin_keep\u201c, e cila n\u00ebnkupton nevoj\u00ebn p\u00ebr t\u00eb futur fjal\u00ebkalimin e administratorit. N\u00eb k\u00ebto kushte, nj\u00eb sulm mund t\u00eb kryhet n\u00ebse \u00ebsht\u00eb marr\u00eb qasje me t\u00eb drejta t\u00eb p\u00ebrdoruesit lightdm. <\/p>\n
Duke k\u00ebrkohet manipulim me t\u00eb drejtat e p\u00ebrdoruesit lightdm p\u00ebr t\u00eb realizuar nj\u00eb sulm, problemi \u00ebsht\u00eb vler\u00ebsuar me nj\u00eb nivel t\u00eb ul\u00ebt rreziku. Supozohet se kjo vulnerabilitet mund t\u00eb p\u00ebrdoret si nj\u00eb hap i dyt\u00eb p\u00ebr rritjen e privilegjeve pas shfryt\u00ebzimit t\u00eb suksessh\u00ebm t\u00eb nj\u00eb vulnerabiliteti tjet\u00ebr n\u00eb LightDM, e cila lejon aksesin p\u00ebr t\u00eb ekzekutuar kodin me privilegjet e p\u00ebrdoruesit lightdm. \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"