{"id":37876,"date":"2019-10-31T22:20:17","date_gmt":"2019-10-31T19:20:17","guid":{"rendered":"https:\/\/prohoster.info\/blog\/raskryty-podrobnosti-kriticheskoj-uyazvimosti-v-exim\/"},"modified":"2019-10-31T22:20:17","modified_gmt":"2019-10-31T19:20:17","slug":"raskryty-podrobnosti-kriticheskoj-uyazvimosti-v-exim","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/raskryty-podrobnosti-kriticheskoj-uyazvimosti-v-exim","title":{"rendered":"Detajet p\u00ebr nj\u00eb dob\u00ebsi kritike n\u00eb Exim jan\u00eb zbuluar","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Publikuar<\/a><\/noindex> versioni korrigjuese Exim 4.92.2<\/a><\/noindex> me eliminimin e kritikut dob\u00ebsin\u00eb<\/a><\/noindex> (CVE-2019-15846<\/a><\/noindex>), e cila n\u00eb konfigurimin e parazgjedhur mund t\u00eb \u00e7oj\u00eb n\u00eb ekzekutimin e kodit t\u00eb nj\u00eb sulmuesi me t\u00eb drejta root. Problemi shfaqet vet\u00ebm kur aktivizohet mb\u00ebshtetja p\u00ebr TLS dhe shfryt\u00ebzohet p\u00ebrmes d\u00ebrgimit t\u00eb nj\u00eb certifikate klienti t\u00eb formatuar n\u00eb m\u00ebnyr\u00eb t\u00eb ve\u00e7ant\u00eb ose nj\u00eb vlere t\u00eb modifikuar n\u00eb SNI. Vulnerabiliteti u identifikua<\/a><\/noindex> nga kompania Qualys.<\/p>\n

Problemi \u00ebsht\u00eb prezent<\/a><\/noindex> n\u00eb trajtuesin e karaktereve speciale n\u00eb varg (string_interpret_escape()<\/a><\/noindex> nga string.c) dhe shkaktohet nga fakti q\u00eb simboli ‘\’ n\u00eb fund t\u00eb vargut interpretohet para simbolit zero (‘\0’) dhe e ekranohet. Kur ekranohet, sekuenca ‘\’ dhe kodi zero q\u00eb pason p\u00ebrfundimin e vargut trajtohet si nj\u00eb simbol i vet\u00ebm dhe treguesi l\u00ebviz n\u00eb t\u00eb dh\u00ebnat p\u00ebrtej kufijve t\u00eb vargut, t\u00eb cilat trajtohen si vazhdim\u00ebsi e saj. <\/p>\n

Kodi q\u00eb th\u00ebrret string_interpret_escape() alokohen nj\u00eb tampon p\u00ebr vargun duke u mb\u00ebshtetur n\u00eb madh\u00ebsin\u00eb e v\u00ebrtet\u00eb, dhe treguesi i vendosur p\u00ebrfundon n\u00eb nj\u00eb zon\u00eb jasht\u00eb kufijve t\u00eb tamponit. Si rrjedhim, kur p\u00ebrpiqet t\u00eb trajtoj\u00eb vargun hyr\u00ebs, ndodh nj\u00eb situat\u00eb e leximit t\u00eb t\u00eb dh\u00ebnave nga nj\u00eb zon\u00eb jasht\u00eb kufijve t\u00eb tamponit t\u00eb alokuar, dhe p\u00ebrpjekja p\u00ebr t\u00eb shkruar vargun e dekriptuar mund t\u00eb \u00e7oj\u00eb n\u00eb shkrimin p\u00ebrtej kufijve t\u00eb tamponit.<\/p>\n

N\u00eb konfigurimin e parazgjedhur, vulnerabiliteti mund t\u00eb shfryt\u00ebzohet p\u00ebrmes d\u00ebrgimit t\u00eb t\u00eb dh\u00ebnave t\u00eb formatuara specifikisht n\u00eb SNI gjat\u00eb vendosjes s\u00eb nj\u00eb lidhjeje t\u00eb sigurt me serverin. Problemi gjithashtu mund t\u00eb shfryt\u00ebzohet p\u00ebrmes modifikimit t\u00eb vlerave peerdn n\u00eb konfigurimet e krijuara p\u00ebr autentifikim me certifikat\u00ebn e klientit, ose gjat\u00eb importit t\u00eb certifikatave. Sulmi p\u00ebrmes SNI dhe peerdn \u00ebsht\u00eb i mundsh\u00ebm q\u00eb nga l\u00ebshimi Exim 4.80<\/a><\/noindex>, ku funksioni string_unprinting() u p\u00ebrdor p\u00ebr dekriptuar p\u00ebrmbajtjen e peerdn dhe SNI.<\/p>\n

P\u00ebr nj\u00eb sulm p\u00ebrmes SNI \u00ebsht\u00eb p\u00ebrgatitur nj\u00eb prototip eksploati q\u00eb punon n\u00eb arkitektur\u00ebn i386 dhe amd64 n\u00eb sistemet Linux me Glibc. N\u00eb eksploatimin p\u00ebrdoret mbivendosja e t\u00eb dh\u00ebnave n\u00eb zon\u00ebn e rafinimeve, duke \u00e7uar n\u00eb rishkrimin e memorjes q\u00eb ruan emrin e skedarit t\u00eb logut. Emri i skedarit z\u00ebvend\u00ebsohet me «\/..\/..\/..\/..\/..\/..\/..\/..\/etc\/passwd». M\u00eb pas, rishkruhet variabla me adres\u00ebn e d\u00ebrguesit, i cili ruhet i pari n\u00eb log, q\u00eb lejon shtimin e nj\u00eb p\u00ebrdoruesi t\u00eb ri n\u00eb sistem. <\/p>\n

P\u00ebrdit\u00ebsimet e paketave p\u00ebr eliminimin e vulnerabilitetit jan\u00eb l\u00ebshuar nga shp\u00ebrndarjet Debian<\/a><\/noindex>, Ubuntu<\/a><\/noindex>, Fedora<\/a><\/noindex>, SUSE\/openSUSE<\/a><\/noindex> dhe FreeBSD<\/a><\/noindex>. RHEL dhe CentOS problemin nuk jan\u00eb t\u00eb ekspozuara<\/a><\/noindex>, pasi Exim nuk \u00ebsht\u00eb i p\u00ebrfshir\u00eb n\u00eb depozitat e tij standarde t\u00eb paketave (n\u00eb EPEL<\/a><\/noindex> p\u00ebrdit\u00ebsimi jan\u00eb<\/a><\/noindex> formuar<\/a><\/noindex>, por p\u00ebr momentin nuk \u00ebsht\u00eb p\u00ebrfshir\u00eb<\/a><\/noindex> n\u00eb depozit\u00ebn publike). N\u00eb kodin e Exim problemi zgjidhet me nj\u00eb patch nj\u00eb-linjesh patch<\/a><\/noindex>, q\u00eb ndalon veprimin e ekranuar t\u00eb pjes\u00ebs s\u00eb pasme, n\u00ebse ndodhet n\u00eb fund t\u00eb vargut.<\/p>\n

Si nj\u00eb zgjidhje p\u00ebr t\u00eb bllokuar vulnerabilitetin, mund t\u00eb \u00e7aktivizohet mb\u00ebshtetja p\u00ebr TLS ose t\u00eb shtohet n\u00eb
\nseksionin ACL «acl_smtp_mail»:\n<\/p>\n

deny condition = ${if eq{\\}{${substr{-1}{1}{$tls_in_sni}}}}
\n deny condition = ${if eq{\\}{${substr{-1}{1}{$tls_in_peerdn}}}}<\/p>\n

<\/a><\/noindex><\/p>\n

Burimi: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0439 \u0432\u044b\u043f\u0443\u0441\u043a Exim 4.92.2 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2019-15846), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 TLS \u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u0438\u043b\u0438 \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0432 SNI. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Qualys. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0435 \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u043f\u0435\u0446\u0441\u0438\u043c\u0432\u043e\u043b\u043e\u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-37876","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Zbulohen detajet e nj\u00eb dob\u00ebsie kritike n\u00eb Exim | ProHoster","description":"\u00cbshte publikuar nj\u00eb version i korrigjuar i Exim 4.92.2 q\u00eb adreson nj\u00eb t\u00eb met\u00eb kritike (CVE-2019-15846), e cila n\u00eb konfigurimin e paracaktuar mund t\u00eb \u00e7oj\u00eb n\u00eb ekzekutimin e kodit t\u00eb nj\u00eb sulmuesi me t\u00eb drejta root. Problemi shfaqet vet\u00ebm kur mb\u00ebshtetja TLS \u00ebsht\u00eb e aktivizuar dhe shfryt\u00ebzohet p\u00ebrmes d\u00ebrgimit t\u00eb nj\u00eb certifikate klienti t\u00eb formuar posa\u00e7\u00ebrisht ose nj\u00eb vler\u00eb t\u00eb modifikuar n\u00eb SNI. Kjo dob\u00ebsi \u00ebsht\u00eb identifikuar nga kompania Qualys. Problemi \u00ebsht\u00eb prezent n\u00eb trajtuesin e karaktereve t\u00eb ve\u00e7anta.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/raskryty-podrobnosti-kriticheskoj-uyazvimosti-v-exim","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Exim | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0439 \u0432\u044b\u043f\u0443\u0441\u043a Exim 4.92.2 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2019-15846), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 TLS \u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u0438\u043b\u0438 \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0432 SNI. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Qualys. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0435 \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u043f\u0435\u0446\u0441\u0438\u043c\u0432\u043e\u043b\u043e\u0432","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/raskryty-podrobnosti-kriticheskoj-uyazvimosti-v-exim","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:20:17+00:00","article:modified_time":"2019-10-31T19:20:17+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"37876","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 19:36:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:19:22","updated":"2026-01-23 19:36:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/37876","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=37876"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/37876\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=37876"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=37876"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=37876"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}