Pas ndjekjes s\u00eb nj\u00eb dob\u00ebsie t\u00eb zbuluar n\u00eb fund t\u00eb janarit, e cila lejonte lidhjen si p\u00ebrdorues root pa verifikim t\u00eb fjal\u00ebkalimit, n\u00eb serverin telnetd t\u00eb paket\u00ebs GNU InetUtils u identifikuan disa m\u00ebnyra p\u00ebr t\u00eb rritur privilegjet, si pasoj\u00eb e eliminimit t\u00eb pamjaftuesh\u00ebm t\u00eb dob\u00ebsis\u00eb n\u00eb vitin 1999 (CVE-1999-0073). <\/p>\n
Dob\u00ebsit\u00eb jan\u00eb shkaktuar nga ekzistenca n\u00eb telnetd t\u00eb mund\u00ebsis\u00eb p\u00ebr t\u00eb d\u00ebrguar variabla ambienti nga klienti n\u00eb server p\u00ebrmes opsionit ENVIRON. T\u00eb till\u00eb variabla ambienti vendosen dhe p\u00ebrpunohen n\u00eb kontekstin e procesit telnetd dhe kalohen n\u00eb proceset e tij f\u00ebmij\u00eb t\u00eb ekzekutuara, duke p\u00ebrfshir\u00eb procesin e nisur me privilegje root \/bin\/login. Dob\u00ebsia CVE-1999-0073 lejonte klientin telnet t\u00eb d\u00ebrgonte variabl\u00ebn ambienti LD_LIBRARY_PATH, vendosja e s\u00eb cil\u00ebs \u00e7on n\u00eb ngarkimin e bibliotek\u00ebs s\u00eb ndar\u00eb t\u00eb specifikuar nga p\u00ebrdoruesi gjat\u00eb nisjes s\u00eb procesit login. N\u00ebse ka mund\u00ebsi p\u00ebr t\u00eb ngarkuar skedar\u00eb n\u00eb nj\u00eb sistem q\u00eb mb\u00ebshtet lidhjen p\u00ebrmes protokollit telnet, sulmuesi mund t\u00eb ngarkohet nj\u00eb bibliotek\u00eb t\u00eb hartuar ve\u00e7mas dhe t\u00eb organizoj\u00eb ngarkimin e saj me privilegje root. <\/p>\n
Nj\u00eb vulnerabilitet n\u00eb telnetd nga GNU InetUtils u eliminoi p\u00ebrmes ndalimit t\u00eb variablave t\u00eb rreziksh\u00ebm t\u00eb mjedisit p\u00ebrmes filtrimit sipas maskave \"LD_\", \"LIBPATH\", \"ENV\", \"IFS\" dhe \"_RLD_\". Nd\u00ebrkoh\u00eb, variabla e mjedisit \"CREDENTIALS_DIRECTORY\" mbeti e pa bllokuar, duke u p\u00ebrpunuar gjat\u00eb nisjes s\u00eb \/usr\/bin\/login. Me an\u00eb t\u00eb k\u00ebsaj variabli, p\u00ebrdoruesi mund t\u00eb ndryshonte direktoriumin e konfigurimeve t\u00eb akreditiveve dhe t\u00eb vendoste nj\u00eb skedar login.noauth n\u00eb k\u00ebt\u00eb direktorium t\u00eb ri me vler\u00ebn \"yes\", q\u00eb aktivizon hyrjen pa fjal\u00ebkalim (analog me kalimin e flagut \"-f\" procesit login). Konfigurimi zbatohet p\u00ebr t\u00eb gjith\u00eb p\u00ebrdoruesit, duke p\u00ebrfshir\u00eb root. <\/p>\n
Sulmi p\u00ebrfshin krijimin e nj\u00eb n\u00ebn-d direktoriumi nga nj\u00eb p\u00ebrdorues i papranuesh\u00ebm n\u00eb direktoriumin e tij sht\u00ebpiak, ngarkimin e skedarit login.noauth dhe p\u00ebrpjekjen p\u00ebr t\u00eb hyr\u00eb duke vendosur variabl\u00ebn e mjedisit \"CREDENTIALS_DIRECTORY=direktoriumi i krijuar\" dhe kalimin e variabl\u00ebs s\u00eb mjedisit \"USER=root\" (n\u00eb telnet ka nj\u00eb regjime automatik konvertimi n\u00eb t\u00eb cilin emri i p\u00ebrdoruesit merret jo nga linja e komand\u00ebs, por kalon p\u00ebrmes variabl\u00ebs s\u00eb mjedisit USER). Nj\u00eb shembull i eksploitit. <\/p>\n
Nuk \u00ebsht\u00eb zbuluar nj\u00eb tjet\u00ebr m\u00ebnyr\u00eb p\u00ebr t\u00eb marr\u00eb akses root p\u00ebrmes telnetd, e lidhur me manipulimin e variablave t\u00eb mjedisit OUTPUT_CHARSET dhe LANGUAGE, t\u00eb p\u00ebrpunuara nga biblioteka GNU gettext, dhe variablit t\u00eb mjedisit GCONV_PATH q\u00eb p\u00ebrdoret n\u00eb glibc. Duke vendosur variablat e mjedisit OUTPUT_CHARSET dhe LANGUAGE, sulmuesi mund t\u00eb aktivizoj\u00eb n\u00eb gettext funksionalitetin e konvertimit t\u00eb kodimeve t\u00eb karaktereve, q\u00eb shkakton thirrjen e funksionit iconv_open(). N\u00eb an\u00ebn tjet\u00ebr, gjat\u00eb ekzekutimit t\u00eb funksionit iconv_open() gjat\u00eb ngarkimit t\u00eb skedarit t\u00eb konfigurimit gconv-modules, rruga llogaritet duke konsideruar variabl\u00ebn e mjedisit GCONV_PATH. Duke e z\u00ebvend\u00ebsuar skedarin gconv-modules, mund t\u00eb organizohet ngarkimi i bibliotek\u00ebs s\u00eb ndar\u00eb t\u00eb personalizuar gjat\u00eb shfaqjes s\u00eb vargut t\u00eb lokalizuar nga procesi login. <\/p>\n
Vulnerabilitetet e sh\u00ebnuara ende nuk jan\u00eb \u00e7ertifikuar me identifikues CVE. Si nj\u00eb metod\u00eb mbrojtjeje po merret n\u00eb konsiderat\u00eb angazhimi i nj\u00eb liste t\u00eb bardh\u00eb t\u00eb vlerave t\u00eb pranueshme (\"TERM\", \"DISPLAY\", \"USER\", \"LOGNAME\" dhe \"POSIXLY_CORRECT\") me bllokimin e t\u00eb gjith\u00eb variablave t\u00eb tjer\u00eb t\u00eb mjedisit, n\u00eb t\u00eb nj\u00ebjt\u00ebn m\u00ebnyr\u00eb si\u00e7 b\u00ebhet me variablat e mjedisit n\u00eb OpenSSH. Vulnerabilitetet jan\u00eb konfirmuar n\u00eb paket\u00ebn GNU InetUtils, implementimi server\u00eb<\/a> telnetd q\u00eb ofrohet n\u00eb Debian, Ubuntu dhe distribuime t\u00eb tjera t\u00eb derivuara. Rregullimet p\u00ebr GNU InetUtils ende nuk jan\u00eb n\u00eb dispozicion. N\u00eb Rocky Linux 9 ofrohet nj\u00eb telnetd i modifikuar q\u00eb nuk ka vulnerabilitete, n\u00eb t\u00eb cilin vendosja e filtrimit t\u00eb variablave t\u00eb rreziksh\u00ebm t\u00eb mjedisit \u00ebsht\u00eb z\u00ebvend\u00ebsuar me nj\u00eb kontroll t\u00eb list\u00ebs s\u00eb bardh\u00eb. Filtrimi sipas list\u00ebs s\u00eb bardh\u00eb \u00ebsht\u00eb gjithashtu i realizuar n\u00eb telnetd nga FreeBSD. N\u00eb OpenBSD, telnetd \u00ebsht\u00eb p\u00ebrjashtuar nga sistemi n\u00eb vitin 2005. \u0421\u043b\u0435\u0434\u043e\u043c \u0437\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432 \u043a\u043e\u043d\u0446\u0435 \u044f\u043d\u0432\u0430\u0440\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0432\u0448\u0435\u0439 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c\u0441\u044f \u043f\u043e\u0434 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c root \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0430\u0440\u043e\u043b\u044f, \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 telnetd \u0438\u0437 \u043d\u0430\u0431\u043e\u0440\u0430 GNU InetUtils \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u0432 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0441\u0442\u0430\u0432\u0448\u0438\u0445 \u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435\u043c \u043d\u0435\u043f\u043e\u043b\u043d\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 1999 \u0433\u043e\u0434\u0443 (CVE-1999-0073). \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0437\u0432\u0430\u043d\u044b \u043d\u0430\u043b\u0438\u0447\u0438\u0435\u043c \u0432 telnetd \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u043c \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u043e\u043f\u0446\u0438\u0438 ENVIRON. \u041f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-162791","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Seri e reja vulnerabilitetesh n\u00eb telnetd, q\u00eb lejojn\u00eb marrjen e privilegjeve root n\u00eb sistem | ProHoster","description":"Pas zbuluar vulnerabilitetit n\u00eb fund t\u00eb janarit q\u00eb lejonte lidhjen si p\u00ebrdorues root pa verifikimin e fjal\u00ebkalimit, n\u00eb serverin telnetd nga paketa GNU InetUtils jan\u00eb identifikuar disa m\u00ebnyra p\u00ebr t\u00eb rritur privilegjet e tij.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/seriya-novyh-uyazvimostej-v-telnetd-pozvolyayushhih-poluchit-root-privilegii-v-sisteme","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0421\u0435\u0440\u0438\u044f \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 telnetd, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 | ProHoster","og:description":"\u0421\u043b\u0435\u0434\u043e\u043c \u0437\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432 \u043a\u043e\u043d\u0446\u0435 \u044f\u043d\u0432\u0430\u0440\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0432\u0448\u0435\u0439 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c\u0441\u044f \u043f\u043e\u0434 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c root \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0430\u0440\u043e\u043b\u044f, \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 telnetd \u0438\u0437 \u043d\u0430\u0431\u043e\u0440\u0430 GNU InetUtils \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u0432 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/seriya-novyh-uyazvimostej-v-telnetd-pozvolyayushhih-poluchit-root-privilegii-v-sisteme","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-02-25T15:11:54+00:00","article:modified_time":"2026-02-25T15:11:54+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"162791","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-25 15:12:53","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-25 15:11:55","updated":"2026-02-25 15:12:53","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/162791","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=162791"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/162791\/revisions"}],"predecessor-version":[{"id":165657,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/162791\/revisions\/165657"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=162791"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=162791"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=162791"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"