{"id":53577,"date":"2019-12-05T00:00:00","date_gmt":"2019-12-04T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/mnozhestvennye-uyazvimosti-v-openbsd"},"modified":"2020-02-18T14:01:30","modified_gmt":"2020-02-18T11:01:30","slug":"mnozhestvennye-uyazvimosti-v-openbsd","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/mnozhestvennye-uyazvimosti-v-openbsd","title":{"rendered":"Vulnerabilitete t\u00eb shumta n\u00eb OpenBSD","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Ekspert\u00ebt e Qualys Labs zbuluan disa probleme sigurie q\u00eb lidhen me mund\u00ebsin\u00eb e mashtrimit t\u00eb programeve q\u00eb menaxhojn\u00eb mekanizmat e verifikimit t\u00eb fjal\u00ebkalimeve n\u00eb BSD (analog i PAM). Mashtrimi p\u00ebrfshin d\u00ebrgimin e emrit t\u00eb p\u00ebrdoruesit \u00ab-schallenge\u00bb ose \u00ab-schallenge:passwd\u00bb, i cili interpretohet jo si emri i p\u00ebrdoruesit, por si nj\u00eb opsion. Pas k\u00ebsaj, sistemi pranon \u00e7do fjal\u00ebkalim. Sh\u00ebrbime si smtpd, ldapd, dhe radiusd jan\u00eb t\u00eb prekshme, pra lejojn\u00eb qasje t\u00eb paautorizuar. Sh\u00ebrbimi sshd nuk mund t\u00eb p\u00ebrdoret, sepse sshd v\u00ebren se p\u00ebrdoruesi \u00ab-schallenge\u00bb n\u00eb t\u00eb v\u00ebrtet\u00eb nuk ekziston. Programi su d\u00ebshton gjat\u00eb p\u00ebrpjekjeve p\u00ebr shfryt\u00ebzim t\u00eb drejtp\u00ebrdrejt\u00eb, pasi poashtu p\u00ebrpiqet t\u00eb zbuloj\u00eb uid-n\u00eb e nj\u00eb p\u00ebrdoruesi t\u00eb paekzistuesh\u00ebm.<\/p>\n
Gjithashtu jan\u00eb zbuluar disa vulnerabilitete t\u00eb ndryshme n\u00eb xlock, n\u00eb autorizimin p\u00ebrmes S\/Key dhe Yubikey, si dhe n\u00eb su, t\u00eb cilat nuk lidhen me caktimin e p\u00ebrdoruesit \u00ab-schallenge\u00bb. Vulnerabiliteti n\u00eb xlock lejon nj\u00eb p\u00ebrdorues t\u00eb zakonsh\u00ebm t\u00eb rris\u00eb privilegjet deri n\u00eb grupin auth. P\u00ebrmes nj\u00eb funksionimi t\u00eb gabuar t\u00eb mekanizmave t\u00eb autorizimit p\u00ebrmes S\/Key dhe Yubikey, \u00ebsht\u00eb e mundur t\u00eb rriten privilegjet nga grupi auth deri te p\u00ebrdoruesi root, por n\u00eb konfigurimin e OpenBSD n\u00eb m\u00ebnyr\u00eb default kjo nuk funksionon, pasi autorizimi p\u00ebrmes S\/Key dhe Yubikey \u00ebsht\u00eb i \u00e7aktivizuar. M\u00eb n\u00eb fund, vulnerabiliteti n\u00eb su lejon p\u00ebrdoruesin t\u00eb rris\u00eb kufijt\u00eb e burimeve sistemore, si\u00e7 jan\u00eb numri i deskriptor\u00ebve t\u00eb hapur t\u00eb skedar\u00ebve.<\/p>\n
N\u00eb k\u00ebt\u00eb moment, vulnerabilitetet jan\u00eb ndrequr, p\u00ebrdit\u00ebsimet e siguris\u00eb jan\u00eb t\u00eb disponueshme p\u00ebrmes mekanizmit standard syspatch(8).<\/p>\n