{"id":155278,"date":"2026-01-26T11:12:14","date_gmt":"2026-01-26T09:12:14","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/login-probel-defis-root-bag-v-telnet-pozvolyaet-zahvatit-kompyuter-bez-parolya"},"modified":"2026-01-26T11:12:14","modified_gmt":"2026-01-26T09:12:14","slug":"login-probel-defis-root-bag-v-telnet-pozvolyaet-zahvatit-kompyuter-bez-parolya","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/login-probel-defis-root-bag-v-telnet-pozvolyaet-zahvatit-kompyuter-bez-parolya","title":{"rendered":"Login, hap\u00ebsir\u00eb, defis, root. Nj\u00eb defekt n\u00eb telnet lejon kapjen e kompjuterit pa fjal\u00ebkalim","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Nj\u00eb dob\u00ebsi n\u00eb paket\u00ebn GNU InetUtils prek t\u00eb gjitha versionet nga 1.9.3 deri n\u00eb 2.7, p\u00ebrfshir\u00eb.<\/p>\n

Duket se telnet ka kaluar n\u00eb harres\u00eb s\u00eb bashku me modem\u00ebt dhe dial-up, por ai papritmas u b\u00eb burim nj\u00eb dob\u00ebsie t\u00eb r\u00ebnd\u00ebsishme. N\u00eb GNU InetUtils u zbulua nj\u00eb defekt, i cili lejon hyrjen n\u00eb sistem si root pa fjal\u00ebkalim, thjesht duke d\u00ebrguar nj\u00eb vler\u00eb t\u00eb formatuar n\u00eb m\u00ebnyr\u00eb speciale p\u00ebr variablin e mjedisit.<\/p>\n

Problemi ndikon serverin telnetd, i p\u00ebrfshir\u00eb n\u00eb GNU InetUtils. Ai i transmeton programit login vler\u00ebn e variabl\u00ebs USER q\u00eb merr nga klienti, pa asnj\u00eb kontroll. Kjo mund t\u00eb shfryt\u00ebzohet n\u00ebse klienti d\u00ebrgon vargun \"-f root\" si USER dhe lidhet me parametrin telnet -a ose \u2013login. Si rezultat, login e percepton k\u00ebt\u00eb si nj\u00eb flamur sh\u00ebrbimi, anashkalon procedur\u00ebn standarde t\u00eb autentikimit dhe automatikisht e autorizon p\u00ebrdoruesin si root.<\/p>\n

Dob\u00ebsia mori identifikuesin CVE-2026-24061 dhe nj\u00eb vler\u00ebsim sipas CVSS: 9.8. T\u00eb gjitha versionet e GNU InetUtils, duke filluar nga 1.9.3 dhe duke p\u00ebrfunduar me 2.7, jan\u00eb n\u00eb rrezik. Defekti \u00ebsht\u00eb prezent n\u00eb projekt q\u00eb pothuajse 11 vjet, q\u00eb nga maji 2015, por u identifikua vet\u00ebm tani. N\u00eb esenc\u00eb, kjo \u00ebsht\u00eb nj\u00eb shembull klasik i nj\u00eb dob\u00ebsie n\u00eb stilin e vjet\u00ebr, ku nj\u00eb string i rreziksh\u00ebm pa filtrimin e duhur d\u00ebrgohet n\u00eb nj\u00eb utilit t\u00eb sistemit me privilegje root.<\/p>\n

Autor\u00ebt e advisory rekomandojn\u00eb t\u00eb mos p\u00ebrdoret fare telnetd, t\u00eb kufizohet aksesin n\u00eb portin telnet vet\u00ebm p\u00ebr klient\u00ebt e besuar dhe sa m\u00eb shpejt t\u00eb jet\u00eb e mundur t\u00eb instalohet nj\u00eb rregullim ose t\u00eb p\u00ebrdit\u00ebsohet n\u00eb nj\u00eb version ku problemi \u00ebsht\u00eb ndrequr. Nj\u00eb zgjidhje e p\u00ebrkohshme mund t\u00eb jet\u00eb \u00e7aktivizimi total i telnetd ose p\u00ebrdorimi i nj\u00eb versioni t\u00eb personalizuar t\u00eb login, q\u00eb nuk mb\u00ebshtet parametrin \"-f\".<\/p>\n

Dob\u00ebsin\u00eb e zbuloi studiuesi Karlos Kortez Alvares, patch-i u p\u00ebrgatit dhe u p\u00ebrmir\u00ebsua nga zhvilluesit e GNU InetUtils n\u00eb janar 2026. Rregullimet p\u00ebrfshijn\u00eb sanitizimin e t\u00eb gjith\u00eb variablave q\u00eb p\u00ebrdoren gjat\u00eb formimit t\u00eb komand\u00ebs s\u00eb thirrjes login, n\u00eb m\u00ebnyr\u00eb q\u00eb k\u00ebto lloje sulmesh t\u00eb b\u00ebhen t\u00eb pamundura n\u00eb parim.<\/p>\n

Historia duket pothuajse simbolike: nj\u00eb protokoll i mbetur pas dore, nj\u00eb sh\u00ebrbim i harruar dhe nj\u00eb gabim logjik klasik \u00e7uan n\u00eb nj\u00eb kompromise t\u00eb plot\u00eb t\u00eb sistemit. Nj\u00eb tjet\u00ebr kujtes\u00eb se edhe teknologjit\u00eb \"e vjetra\" mund t\u00eb mbeten nj\u00eb k\u00ebrc\u00ebnim real, n\u00ebse ato ende funksionojn\u00eb n\u00eb prodhim.<\/p>\n

Menj\u00ebher\u00eb pas publikimit t\u00eb informacionit mbi dob\u00ebsin\u00eb, ekipi i hulumtuesve vendosi sensor\u00eb honeypot p\u00ebr t\u00eb ndjekur p\u00ebrpjekjet reale t\u00eb shfryt\u00ebzimit. Sulmuesit nuk vonuan t\u00eb vinin. Gjat\u00eb 18 or\u00ebve t\u00eb v\u00ebzhgimit, u regjistruan 60 p\u00ebrpjekje p\u00ebr thyerje me 18 unike. IP-adresat<\/a>. Sipas t\u00eb dh\u00ebnave nga platforma Censys, potencialisht t\u00eb prekura ishin rreth tre mij\u00eb sisteme n\u00eb mbar\u00eb bot\u00ebn, edhe pse nj\u00eb pjes\u00eb e madhe e tyre, me sa duket, ishin gjithashtu kapje honeypot.<\/p>\n

Analiza e trafikut t\u00eb kapur tregoi nj\u00eb tablo t\u00eb ngjashme. Sulmuesi m\u00eb aktiv ishte nga adresa 178.16.53.82, i cili realizoi 12 seanca ndaj 10 objektivave t\u00eb ndrysh\u00ebm. Veprimet e tij ishin plot\u00ebsisht t\u00eb automatizuara: pas marrjes s\u00eb aksesit, aktivizohej nj\u00eb grup standart komandash spiunazhi si uname -a, id, leximi i \/proc\/cpuinfo dhe \/etc\/passwd. Nj\u00eb ve\u00e7ori karakteristike ishte mb\u00ebshtjellja e daljes s\u00eb komandave me marker\u00eb t\u00eb ve\u00e7ant\u00eb p\u00ebr p\u00ebrpunim t\u00eb m\u00ebvonsh\u00ebm, q\u00eb qart\u00eb tregon p\u00ebr nj\u00eb botnet ose sistem t\u00eb automatizuar mbledhjeje t\u00eb t\u00eb dh\u00ebnave.<\/p>\n

M\u00eb sofistikuar ishte sulmuesi nga adresa 216.106.186.24. Ai u p\u00ebrqendrua n\u00eb nj\u00eb n\u00ebndeg\u00eb specifike dhe p\u00ebrpiqej t\u00eb instalonte nj\u00eb \u00e7el\u00ebs SSH p\u00ebr akses t\u00eb p\u00ebrhersh\u00ebm, si dhe t\u00eb ngarkohej dhe t\u00eb \u00e7aktivizohej nj\u00eb skript Python nga nj\u00eb server i jasht\u00ebm \u2014 me sa duket, nj\u00eb malware p\u00ebr kriptomining ose botnet. Megjithat\u00eb, t\u00eb dy p\u00ebrpjekjet d\u00ebshtuan: n\u00eb sistemin e synuar nuk kishte drejtorin\u00eb .ssh, si dhe mungonin curl dhe python.<\/p>\n

Dy sulmues me adresat 167.172.111.135 dhe 165.22.30.48 paraqesin nj\u00eb interes t\u00eb ve\u00e7ant\u00eb. Ndryshe nga t\u00eb tjer\u00ebt, ata nuk p\u00ebrpiqeshin menj\u00ebher\u00eb t\u00eb merrnin akses administrativ, por eksperimentonin me llogarit\u00eb nobody, daemon dhe madje edhe me at\u00eb t\u00eb paekzistueshme nonexistent123. Vonesat nd\u00ebrmjet seancave dhe logjika e veprimeve tregojn\u00eb p\u00ebr nj\u00eb person t\u00eb gjall\u00eb pas tastier\u00ebs. Ka shum\u00eb mund\u00ebsi q\u00eb ata jan\u00eb haker\u00eb m\u00eb t\u00eb p\u00ebrvojsh\u00ebm, t\u00eb cil\u00ebt din\u00eb p\u00ebr sistemet e zbuluar t\u00eb dep\u00ebrtimit dhe kan\u00eb n\u00eb dispozit\u00eb teknika p\u00ebr rritjen e privilegjeve.<\/p>\n

Disa disa sulmuesit treguan nj\u00eb neglizhenc\u00eb t\u00eb habitshme n\u00eb sigurin\u00eb operative. P.sh., nj\u00eb sulmues nga adresi 67.220.95.16 p\u00ebrdori t\u00eb nj\u00ebjtin IP si p\u00ebr shfryt\u00ebzim ashtu edhe p\u00ebr pritjen e serverit me malware. T\u00eb tjer\u00ebt p\u00ebrfunduan rast\u00ebsisht duke zbuluar emrat e hosteve t\u00eb tyre p\u00ebrmes variabl\u00ebs DISPLAY: nj\u00eb punonte nga nj\u00eb sistem i quajtur MiniBear, tjetri \u2014 nga ma[shina virtuale shared-vm2.localdomain, dhe i treti madje u lidh drejtp\u00ebrdrejt nga nj\u00eb ambient grafik i plot\u00eb Kali Linux.<\/p>\n

N\u00eb p\u00ebrgjith\u00ebsi, niveli i sulmuesve ishte mjaft i ul\u00ebt. Nga 18 burime sulmesh, vet\u00ebm disa treguan shenja profesionalizmi. Shumica p\u00ebrdor\u00ebn mjete automatizimi shum\u00eb t\u00eb thjeshta ose thjesht goditnin ndonj\u00eb buton, duke ndjekur udh\u00ebzimet nga interneti. Sistemi i zbuluar t\u00ebrheqjesh, Suricata, zbuluan me sukses momentin e marrjes s\u00eb aksesit root nga nj\u00eb nga sulmuesit, q\u00eb p\u00ebrs\u00ebri e konfirmon r\u00ebnd\u00ebsin\u00eb e mbrojtjes dhe monitorimit multi-niveli t\u00eb trafikut n\u00eb rrjet.<\/p>\n

K\u00ebrkuesit theksojn\u00eb se kjo dob\u00ebsi, nga ana nj\u00ebri, u dha mund\u00ebsin\u00eb haker\u00ebve amator\u00eb t\u00eb praktikojn\u00eb, dhe nga ana tjet\u00ebr \u2014 u dha specialist\u00ebve t\u00eb siguris\u00eb mund\u00ebsin\u00eb p\u00ebr t\u00eb mbledhur t\u00eb dh\u00ebna t\u00eb vlefshme mbi taktikat dhe mjetet aktuale t\u00eb sulmuesve.<\/p>\n

<\/p>\n

M\u00eb shum\u00eb: https:\/\/www.securitylab.ru\/news\/568478.php<\/a><\/p>\n

<\/noindex><\/noindex><\/p>\n

Burimi: linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0430\u043a\u0435\u0442\u0435 GNU InetUtils \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0430 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0441 1.9.3 \u043f\u043e 2.7 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e. \u041a\u0430\u0437\u0430\u043b\u043e\u0441\u044c \u0431\u044b, telnet \u0434\u0430\u0432\u043d\u043e \u0443\u0448\u0435\u043b \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u0435 \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 \u043c\u043e\u0434\u0435\u043c\u0430\u043c\u0438 \u0438 dial-up, \u043d\u043e \u0438\u043c\u0435\u043d\u043d\u043e \u043e\u043d \u0432\u043d\u0435\u0437\u0430\u043f\u043d\u043e \u0441\u0442\u0430\u043b \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u043c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u0412 GNU InetUtils \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u0431\u0430\u0433, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u043e\u0439\u0442\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043f\u043e\u0434 root \u0431\u0435\u0437 \u043f\u0430\u0440\u043e\u043b\u044f, \u043f\u0440\u043e\u0441\u0442\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0439 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f. […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-155278","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Login, hap\u00ebsir\u00eb, lidh\u00ebse, root. Nj\u00eb gabim n\u00eb telnet lejon marrjen e kontrollit t\u00eb kompjuterit pa fjal\u00ebkalim | ProHoster","description":"Dob\u00ebsia n\u00eb paket\u00ebn GNU InetUtils preku t\u00eb gjitha versionet nga 1.9.3 deri n\u00eb 2.7 p\u00ebrfshir\u00eb. Dukej se telnet ka kaluar n\u00eb histori s\u00eb bashku me modemet dhe dial-up, por papritmas ai u b\u00eb burimi i nj\u00eb problemi serioz.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/login-probel-defis-root-bag-v-telnet-pozvolyaet-zahvatit-kompyuter-bez-parolya","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041b\u043e\u0433\u0438\u043d, \u043f\u0440\u043e\u0431\u0435\u043b, \u0434\u0435\u0444\u0438\u0441, root. \u0411\u0430\u0433 \u0432 telnet \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440 \u0431\u0435\u0437 \u043f\u0430\u0440\u043e\u043b\u044f | ProHoster","og:description":"\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0430\u043a\u0435\u0442\u0435 GNU InetUtils \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0430 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0441 1.9.3 \u043f\u043e 2.7 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e. \u041a\u0430\u0437\u0430\u043b\u043e\u0441\u044c \u0431\u044b, telnet \u0434\u0430\u0432\u043d\u043e \u0443\u0448\u0435\u043b \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u0435 \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 \u043c\u043e\u0434\u0435\u043c\u0430\u043c\u0438 \u0438 dial-up, \u043d\u043e \u0438\u043c\u0435\u043d\u043d\u043e \u043e\u043d \u0432\u043d\u0435\u0437\u0430\u043f\u043d\u043e \u0441\u0442\u0430\u043b \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u043c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/login-probel-defis-root-bag-v-telnet-pozvolyaet-zahvatit-kompyuter-bez-parolya","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-01-26T09:12:14+00:00","article:modified_time":"2026-01-26T09:12:14+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"155278","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-08 20:42:45","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-26 09:12:14","updated":"2026-02-08 20:42:45","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/155278","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=155278"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/155278\/revisions"}],"predecessor-version":[{"id":158081,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/155278\/revisions\/158081"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=155278"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=155278"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=155278"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}