{"id":53577,"date":"2019-12-05T00:00:00","date_gmt":"2019-12-04T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/mnozhestvennye-uyazvimosti-v-openbsd"},"modified":"2020-02-18T14:01:30","modified_gmt":"2020-02-18T11:01:30","slug":"mnozhestvennye-uyazvimosti-v-openbsd","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/mnozhestvennye-uyazvimosti-v-openbsd","title":{"rendered":"Vulnerabilitete t\u00eb shumta n\u00eb OpenBSD","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Specialist\u00ebt nga Qualys Labs zbuluan disa probleme t\u00eb siguris\u00eb q\u00eb lidhen me mund\u00ebsin\u00eb p\u00ebr t\u00eb g\u00ebnjyer programet q\u00eb jan\u00eb p\u00ebrgjegj\u00ebse p\u00ebr mekanizmat e verifikimit t\u00eb fjal\u00ebkalimeve n\u00eb BSD (analoge me PAM). G\u00ebnjeshtra p\u00ebrfshin d\u00ebrgimin e emrit t\u00eb p\u00ebrdoruesit \u00ab-schallenge\u00bb ose \u00ab-schallenge:passwd\u00bb, i cili interpretohet jo si emri i p\u00ebrdoruesit, por si nj\u00eb opsion. Pas k\u00ebsaj, sistemi pranon \u00e7do fjal\u00ebkalim. Sh\u00ebrbimet smtpd, ldapd, radiusd jan\u00eb t\u00eb prekshme, pra lejojn\u00eb n\u00eb fund akses t\u00eb paautorizuar. Sh\u00ebrbimi sshd nuk mund t\u00eb eksplorohet, pasi sshd v\u00ebren se p\u00ebrdoruesi \u00ab-schallenge\u00bb n\u00eb t\u00eb v\u00ebrtet\u00eb nuk ekziston. Programi su bie n\u00eb p\u00ebrpjekjet p\u00ebr shfryt\u00ebzimin e drejtp\u00ebrdrejt\u00eb, pasi gjithashtu p\u00ebrpiqet t\u00eb zbuloj\u00eb uid-in e nj\u00eb p\u00ebrdoruesi t\u00eb paeksistuesh\u00ebm.<\/p>\n
Gjithashtu jan\u00eb publikuar vulnerabilitete t\u00eb ndryshme n\u00eb xlock, n\u00eb autorizimin p\u00ebrmes S\/Key dhe Yubikey, si dhe n\u00eb su, t\u00eb pa lidhura me specifikimin e p\u00ebrdoruesit \u00ab-schallenge\u00bb. Vulnerabiliteti n\u00eb xlock lejon nj\u00eb p\u00ebrdorues t\u00eb zakonsh\u00ebm t\u00eb rris\u00eb privilegjet e tij n\u00eb grupin auth. P\u00ebrmes funksionimit t\u00eb gabuar t\u00eb mekanizmave t\u00eb autorizimit p\u00ebrmes S\/Key dhe Yubikey \u00ebsht\u00eb e mundur t\u00eb ngrihen privilegjet nga grupi auth n\u00eb p\u00ebrdoruesin root, por n\u00eb konfigurimin e OpenBSD, nga default, kjo nuk funksionon, pasi autorizimi p\u00ebrmes S\/Key dhe Yubikey \u00ebsht\u00eb i \u00e7aktivizuar. N\u00eb fund, vulnerabiliteti n\u00eb su lejon p\u00ebrdoruesin t\u00eb rris\u00eb kufijt\u00eb e burimeve sistemore, si\u00e7 jan\u00eb numri i deshifruesve t\u00eb hapur t\u00eb skedave.<\/p>\n
Aktualisht, vulnerabilitetet jan\u00eb adresuar dhe p\u00ebrdit\u00ebsime p\u00ebr sigurin\u00eb jan\u00eb t\u00eb disponueshme p\u00ebrmes mekanizmit standard syspatch(8).<\/p>\n