{"id":162791,"date":"2026-02-25T17:11:54","date_gmt":"2026-02-25T15:11:54","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/seriya-novyh-uyazvimostej-v-telnetd-pozvolyayushhih-poluchit-root-privilegii-v-sisteme"},"modified":"2026-02-25T17:11:54","modified_gmt":"2026-02-25T15:11:54","slug":"seriya-novyh-uyazvimostej-v-telnetd-pozvolyayushhih-poluchit-root-privilegii-v-sisteme","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/seriya-novyh-uyazvimostej-v-telnetd-pozvolyayushhih-poluchit-root-privilegii-v-sisteme","title":{"rendered":"Seria e re e dobiveveve n\u00eb telnetd q\u00eb lejon marrjen e privilegjeve root n\u00eb sistem","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Pas identifikimit t\u00eb dob\u00ebsis\u00eb n\u00eb fund t\u00eb janarit, e cila lejonte aksesin si p\u00ebrdorues root pa kontrollimin e fjal\u00ebkalimit, n\u00eb serverin telnetd t\u00eb paket\u00ebs GNU InetUtils jan\u00eb zbuluar disa m\u00ebnyra q\u00eb lejojn\u00eb rritjen e privilegjeve, si pasoj\u00eb e eliminimit t\u00eb pap\u00ebrfunduar t\u00eb dob\u00ebsis\u00eb s\u00eb vitit 1999 (CVE-1999-0073). <\/p>\n

Dob\u00ebsit\u00eb shkaktohen nga mund\u00ebsia e transmetimit t\u00eb variablave t\u00eb mjedisit nga klienti n\u00eb server p\u00ebrmes opsionit ENVIRON n\u00eb telnetd. K\u00ebto variabla t\u00eb mjedisit vendosen dhe p\u00ebrpunohen n\u00eb kontekstin e procesit telnetd dhe transmetohen n\u00eb proceset f\u00ebmij\u00eb t\u00eb nisura prej tij, p\u00ebrfshir\u00eb procesin \/bin\/login q\u00eb ekzekutohet me privilegje root. Dob\u00ebsia CVE-1999-0073 lejonte klientin telnet t\u00eb d\u00ebrgonte variabl\u00ebn e mjedisit LD_LIBRARY_PATH, e cila shkakton ngarkimin e nj\u00eb biblioteke t\u00eb ndar\u00eb t\u00eb specifikuar nga p\u00ebrdoruesi gjat\u00eb nisjes s\u00eb procesit login. N\u00ebse ka mund\u00ebsi p\u00ebr t\u00eb ngarkuar skedar\u00eb n\u00eb nj\u00eb sistem q\u00eb mb\u00ebshtet lidhjen p\u00ebrmes protokollit telnet, napadi mund t\u00eb ngarkoj\u00eb nj\u00eb bibliotek\u00eb t\u00eb formatuar posa\u00e7\u00ebrisht dhe t\u00eb organizoj\u00eb ngarkimin e saj me privilegje root. <\/p>\n

N\u00eb telnetd t\u00eb paket\u00ebs GNU InetUtils, \u00ebsht\u00eb eliminuar nj\u00eb dob\u00ebsi duke ndaluar variablat e rreziksh\u00ebm t\u00eb mjedisit p\u00ebrmes filtrimit me maska 'LD_', 'LIBPATH', 'ENV', 'IFS' dhe '_RLD_'. Megjithat\u00eb, variabli i mjedisit 'CREDENTIALS_DIRECTORY' mbeti i deblokuar, i p\u00ebrpunuar gjat\u00eb lansimit t\u00eb \/usr\/bin\/login. Me k\u00ebt\u00eb variab\u00ebl t\u00eb mjedisit, nj\u00eb p\u00ebrdorues mund t\u00eb ndryshonte katalogun e konfigurimeve t\u00eb akrediteve dhe t\u00eb vendoste nj\u00eb skedar login.noauth n\u00eb katalogun e ri me vler\u00ebn 'yes', q\u00eb aktivizon hyrjen pa fjal\u00ebkalim (analog me kalimin e procesit login t\u00eb flamurit '-f'). Konfigurimi aplikohet p\u00ebr t\u00eb gjitha p\u00ebrdoruesit, p\u00ebrfshir\u00eb root. <\/p>\n

Sulmi p\u00ebrfshin krijimin e nj\u00eb n\u00ebnkatalogu nga nj\u00eb p\u00ebrdorues i pakualifikuar n\u00eb katalogun e tij t\u00eb sht\u00ebpis\u00eb, ngarkimin e skedarit login.noauth n\u00eb t\u00eb dhe p\u00ebrpjekjen p\u00ebr t\u00eb hyr\u00eb duke vendosur variabl\u00ebn e mjedisit 'CREDENTIALS_DIRECTORY=nd\u00ebrkatalogu i krijuar' dhe duke kaluar variabl\u00ebn e mjedisit 'USER=root' (n\u00eb telnet ka nj\u00eb mod automatik ku emri i p\u00ebrdoruesit merret jo nga rreshti i komand\u00ebs, por kalon p\u00ebrmes variabl\u00ebs s\u00eb mjedisit USER). Shembulli i exploitit. <\/p>\n

Nj\u00eb metod\u00eb tjet\u00ebr p\u00ebr t\u00eb fituar qasje root p\u00ebrmes telnetd \u00ebsht\u00eb identifikuar, e lidhur me manipulative t\u00eb variablave t\u00eb mjedisit OUTPUT_CHARSET dhe LANGUAGE, t\u00eb cilat trajtohen nga biblioteka GNU gettext, si dhe me variabl\u00ebn e mjedisit GCONV_PATH e p\u00ebrdorur n\u00eb glibc. Duke vendosur variablat e mjedisit OUTPUT_CHARSET dhe LANGUAGE, sulmuesi mund t\u00eb aktivizoj\u00eb n\u00eb gettext funksionalitetin e konvertimit t\u00eb kodimeve t\u00eb karaktereve, duke thirrur funksionin iconv_open(). N\u00eb an\u00ebn tjet\u00ebr, gjat\u00eb ekzekutimit t\u00eb funksionit iconv_open() gjat\u00eb ngarkimit t\u00eb skedarit t\u00eb konfigurimit gconv-modules, rruga llogaritet n\u00eb p\u00ebrputhje me variabl\u00ebn e mjedisit GCONV_PATH. Duke z\u00ebvend\u00ebsuar skedarin gconv-modules, mund t\u00eb organizohet ngarkimi i nj\u00eb biblioteke t\u00eb ndar\u00eb gjat\u00eb shfaqjes s\u00eb vargjeve t\u00eb lokalizuara nga procesi login. <\/p>\n

CVE-identifikuesit p\u00ebr dob\u00ebsit\u00eb e sh\u00ebnuara akoma nuk jan\u00eb caktuar. Si nj\u00eb metod\u00eb mbrojtjeje po shqyrtohet p\u00ebrdorimi i nj\u00eb liste t\u00eb bardh\u00eb t\u00eb vlerave t\u00eb pranueshme ('TERM', 'DISPLAY', 'USER', 'LOGNAME' dhe 'POSIXLY_CORRECT') me bllokimin e t\u00eb gjith\u00eb variablave t\u00eb tjer\u00eb t\u00eb mjedisit, n\u00eb m\u00ebnyr\u00eb t\u00eb ngjashme si\u00e7 b\u00ebhet me variablat e mjedisit n\u00eb OpenSSH. Dob\u00ebsit\u00eb jan\u00eb konfirmuar n\u00eb paket\u00ebn GNU InetUtils, implementimi. server<\/a> telnetd q\u00eb ofrohet n\u00eb Debian, Ubuntu dhe distribucione t\u00eb tjera t\u00eb derivuara. Nd\u00ebrsa korrigjimet p\u00ebr GNU InetUtils ende nuk jan\u00eb n\u00eb dispozicion. N\u00eb Rocky Linux 9, telnetd modifikuar, q\u00eb nuk \u00ebsht\u00eb i preksh\u00ebm nga vulnerabilitetet, ofrohet me nj\u00eb kontrolle sipas list\u00ebs s\u00eb bardh\u00eb n\u00eb vend t\u00eb filtrimit t\u00eb variablave t\u00eb rreziksh\u00ebm t\u00eb mjedisit. Filtrimi sipas list\u00ebs s\u00eb bardh\u00eb \u00ebsht\u00eb gjithashtu implementuar n\u00eb telnetd t\u00eb FreeBSD. N\u00eb OpenBSD, telnetd u p\u00ebrjashtua nga sistemi n\u00eb vitin 2005.
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u043b\u0435\u0434\u043e\u043c \u0437\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432 \u043a\u043e\u043d\u0446\u0435 \u044f\u043d\u0432\u0430\u0440\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0432\u0448\u0435\u0439 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c\u0441\u044f \u043f\u043e\u0434 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c root \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0430\u0440\u043e\u043b\u044f, \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 telnetd \u0438\u0437 \u043d\u0430\u0431\u043e\u0440\u0430 GNU InetUtils \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u0432 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0441\u0442\u0430\u0432\u0448\u0438\u0445 \u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435\u043c \u043d\u0435\u043f\u043e\u043b\u043d\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 1999 \u0433\u043e\u0434\u0443 (CVE-1999-0073). \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0437\u0432\u0430\u043d\u044b \u043d\u0430\u043b\u0438\u0447\u0438\u0435\u043c \u0432 telnetd \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u043c \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u043e\u043f\u0446\u0438\u0438 ENVIRON. \u041f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-162791","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Seria e re e vulnerabiliteteve n\u00eb telnetd, q\u00eb lejojn\u00eb marrjen e privilegjeve root n\u00eb sistem | ProHoster","description":"Pas identifikimit t\u00eb vulnerabilitetit n\u00eb fund t\u00eb janarit q\u00eb lejonte lidhjen si p\u00ebrdorues root pa verifikimin e fjal\u00ebkalimit, disa m\u00ebnyra t\u00eb rritjes s\u00eb privilegjeve jan\u00eb zbuluar n\u00eb serverin telnetd t\u00eb paket\u00ebs GNU InetUtils, q\u00eb jan\u00eb pasoj\u00eb e zhdukjes s\u00eb pap\u00ebrsosur t\u00eb vulnerabilitetit n\u00eb vitin 1999 (CVE-1999-0073). Vulnerabilitetet shkaktohen nga mund\u00ebsia q\u00eb telnetd t\u00eb lejoj\u00eb p\u00ebrcjelljen e variablave t\u00eb mjedisit nga klienti n\u00eb server p\u00ebrmes opsionit ENVIRON. Variabla t\u00eb tilla","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/seriya-novyh-uyazvimostej-v-telnetd-pozvolyayushhih-poluchit-root-privilegii-v-sisteme","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0421\u0435\u0440\u0438\u044f \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 telnetd, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 | ProHoster","og:description":"\u0421\u043b\u0435\u0434\u043e\u043c \u0437\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432 \u043a\u043e\u043d\u0446\u0435 \u044f\u043d\u0432\u0430\u0440\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0432\u0448\u0435\u0439 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c\u0441\u044f \u043f\u043e\u0434 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c root \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0430\u0440\u043e\u043b\u044f, \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 telnetd \u0438\u0437 \u043d\u0430\u0431\u043e\u0440\u0430 GNU InetUtils \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u0432 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0441\u0442\u0430\u0432\u0448\u0438\u0445 \u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435\u043c \u043d\u0435\u043f\u043e\u043b\u043d\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 1999 \u0433\u043e\u0434\u0443 (CVE-1999-0073). \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0437\u0432\u0430\u043d\u044b \u043d\u0430\u043b\u0438\u0447\u0438\u0435\u043c \u0432 telnetd \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u043c \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u043e\u043f\u0446\u0438\u0438 ENVIRON. \u041f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/seriya-novyh-uyazvimostej-v-telnetd-pozvolyayushhih-poluchit-root-privilegii-v-sisteme","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-02-25T15:11:54+00:00","article:modified_time":"2026-02-25T15:11:54+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"162791","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-25 15:12:53","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-25 15:11:55","updated":"2026-02-25 15:12:53"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/162791","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=162791"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/162791\/revisions"}],"predecessor-version":[{"id":165657,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/162791\/revisions\/165657"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=162791"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=162791"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=162791"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}