{"id":37876,"date":"2019-10-31T22:20:17","date_gmt":"2019-10-31T19:20:17","guid":{"rendered":"https:\/\/prohoster.info\/blog\/raskryty-podrobnosti-kriticheskoj-uyazvimosti-v-exim\/"},"modified":"2019-10-31T22:20:17","modified_gmt":"2019-10-31T19:20:17","slug":"raskryty-podrobnosti-kriticheskoj-uyazvimosti-v-exim","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/raskryty-podrobnosti-kriticheskoj-uyazvimosti-v-exim","title":{"rendered":"Jan\u00eb zbuluar detaje t\u00eb cenueshm\u00ebris\u00eb kritike n\u00eb Exim","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Publikuar<\/a><\/noindex> versioni korrigjuese Exim 4.92.2<\/a><\/noindex> me eliminimin e kritikes mang\u00ebsive<\/a><\/noindex> (CVE-2019-15846<\/a><\/noindex>), e cila n\u00eb konfigurimin e paracaktuar mund t\u00eb \u00e7oj\u00eb n\u00eb ekzekutimin e kodit nga nj\u00eb sulmues me t\u00eb drejtat e root. Problemi shfaqet vet\u00ebm kur mb\u00ebshtetja p\u00ebr TLS \u00ebsht\u00eb e aktivizuar dhe shfryt\u00ebzohet p\u00ebrmes transmetimit t\u00eb nj\u00eb certifikate klienti t\u00eb formatuar n\u00eb m\u00ebnyr\u00eb t\u00eb ve\u00e7ant\u00eb ose nj\u00eb vlere t\u00eb modifikuar n\u00eb SNI. Vulnerabiliteti u zbulua<\/a><\/noindex> nga kompania Qualys.<\/p>\n

Problemi ese<\/a><\/noindex> n\u00eb procesorin e escapimit t\u00eb karaktereve speciale n\u00eb varg (string_interpret_escape()<\/a><\/noindex> nga string.c) dhe shkaktohet nga fakti q\u00eb simbo\u00adli ‘\’ n\u00eb fund t\u00eb vargut interpretohet para simbolit zero (‘\0’) dhe e ka ato. N\u00eb procesin e ekranuar, sekuenca ‘\’ dhe kodi zero q\u00eb pason \u00ebsht\u00eb trajtuar si nj\u00eb simbol dhe treguesi zhvendoset n\u00eb t\u00eb dh\u00ebna p\u00ebrtej vargut, t\u00eb cilat trajtohen si vazhdim i saj. <\/p>\n

Kodi q\u00eb th\u00ebrret string_interpret_escape() alokuan nj\u00eb tampon p\u00ebr shkrime, duke u drejtuar nga madh\u00ebsia e v\u00ebrtet\u00eb, dhe treguesi i dh\u00ebn\u00eb p\u00ebrfundon n\u00eb nj\u00eb zon\u00eb jasht\u00eb kufijve t\u00eb tamponit. Si rezultat, kur p\u00ebrpiqet t\u00eb trajtoj\u00eb vargun hyr\u00ebs, ndodh nj\u00eb situat\u00eb leximi t\u00eb t\u00eb dh\u00ebnave nga nj\u00eb zon\u00eb jasht\u00eb kufijve t\u00eb tamponit t\u00eb alokuar, dhe p\u00ebrpjekja p\u00ebr t\u00eb shkruar vargun e de-escaped mund t\u00eb \u00e7oj\u00eb n\u00eb shkrim jasht\u00eb tamponit.<\/p>\n

N\u00eb konfigurimin e paracaktuar, vulnerabiliteti mund t\u00eb shfryt\u00ebzohet p\u00ebrmes transmetimit t\u00eb t\u00eb dh\u00ebnave t\u00eb formatuara n\u00eb m\u00ebnyr\u00eb t\u00eb ve\u00e7ant\u00eb n\u00eb SNI gjat\u00eb krijimit t\u00eb nj\u00eb lidhjeje t\u00eb mbrojtur me serverin. Problemi gjithashtu mund t\u00eb shfryt\u00ebzohet p\u00ebrmes modifikimit t\u00eb vlerave peerdn n\u00eb konfigurimet e caktuara p\u00ebr autentifikimin me certifikata klienti, ose gjat\u00eb importimit t\u00eb certifikatave. Sulmi p\u00ebrmes SNI dhe peerdn \u00ebsht\u00eb i mundur q\u00eb nga versioni Exim 4.80<\/a><\/noindex>, n\u00eb t\u00eb cilin funksioni string_unprinting() u aplikua p\u00ebr de-escaping e p\u00ebrmbajtjes peerdn dhe SNI.<\/p>\n

P\u00ebr sulmin p\u00ebrmes SNI \u00ebsht\u00eb p\u00ebrgatitur nj\u00eb prototip eksploiti, i cili funksionon n\u00eb arkitektur\u00ebn i386 dhe amd64 n\u00eb sistemet Linux me Glibc. N\u00eb eksploit p\u00ebrdoret mbivendosja e t\u00eb dh\u00ebnave n\u00eb zon\u00ebn e heaps, duke \u00e7uar n\u00eb shkrimin e memories ku ruhet emri i skedarit t\u00eb logs. Emri i skedarit z\u00ebvend\u00ebsohet me «\\\/..\\\/..\\\/..\\\/..\\\/..\\\/..\\\/..\\\/..\\\/etc\\\/passwd». M\u00eb pas, ndryshohet variabla me adres\u00ebn e d\u00ebrguesit, i cili ruhet i pari n\u00eb log, \u00e7ka lejon shtimin e nj\u00eb p\u00ebrdoruesi t\u00eb ri n\u00eb sistem. <\/p>\n

Paketat me p\u00ebrmir\u00ebsimet p\u00ebr eliminimin e vulnerabilitetit jan\u00eb l\u00ebshuar nga distribucioni Debian<\/a><\/noindex>, Ubuntu<\/a><\/noindex>, Fedora<\/a><\/noindex>, SUSE\/openSUSE<\/a><\/noindex> dhe FreeBSD<\/a><\/noindex>. RHEL dhe CentOS p\u00ebr problemin t\u00eb ndjesh\u00ebm ndaj problemit<\/a><\/noindex>, pasi Exim nuk \u00ebsht\u00eb n\u00eb depozit\u00ebn e paketave t\u00eb personelit t\u00eb tyre (n\u00eb EPEL<\/a><\/noindex> p\u00ebrdit\u00ebsim tashm\u00eb<\/a><\/noindex> formuar<\/a><\/noindex>, por akoma nuk \u00ebsht\u00eb vendosur<\/a><\/noindex> n\u00eb depozit\u00ebn publike). N\u00eb kodin e Exim, problemi zgjidhet me nj\u00eb linj\u00eb patch-i<\/a><\/noindex>, duke \u00e7aktivizuar veprimin e shp\u00ebrndarjes s\u00eb kthyesit, n\u00ebse ai ndodhet n\u00eb fund t\u00eb linj\u00ebs.<\/p>\n

Si nj\u00eb zgjidhje p\u00ebr t\u00eb bllokuar dob\u00ebsin\u00eb, mund t\u00eb \u00e7aktivizoni mb\u00ebshtetje TLS ose t\u00eb shtoni n\u00eb
\nseksioni ACL «acl_smtp_mail»:\n<\/p>\n

ndalo kushti = ${if eq{\\}{${substr{-1}{1}{$tls_in_sni}}}}
\n ndalo kushti = ${if eq{\\}{${substr{-1}{1}{$tls_in_peerdn}}}}<\/p>\n

<\/a><\/noindex><\/p>\n

Burimi: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0439 \u0432\u044b\u043f\u0443\u0441\u043a Exim 4.92.2 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2019-15846), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 TLS \u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u0438\u043b\u0438 \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0432 SNI. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Qualys. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0435 \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u043f\u0435\u0446\u0441\u0438\u043c\u0432\u043e\u043b\u043e\u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-37876","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Zbardhja e detajeve p\u00ebr nj\u00eb dob\u00ebsi kritike n\u00eb Exim | ProHoster","description":"\u00cbsht\u00eb publikuar nj\u00eb l\u00ebshim p\u00ebr korrigjim p\u00ebr Exim.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/raskryty-podrobnosti-kriticheskoj-uyazvimosti-v-exim","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Exim | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0439 \u0432\u044b\u043f\u0443\u0441\u043a Exim.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/raskryty-podrobnosti-kriticheskoj-uyazvimosti-v-exim","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:20:17+00:00","article:modified_time":"2019-10-31T19:20:17+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"37876","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 19:36:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:19:22","updated":"2026-01-23 19:36:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/37876","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=37876"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/37876\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=37876"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=37876"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=37876"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}