{"id":73151,"date":"2020-03-07T14:42:03","date_gmt":"2020-03-07T11:42:03","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-pppd-i-lwip-pozvolyayushhaya-udalyonno-vypolnit-kod-s-pravami-root"},"modified":"2020-03-07T14:42:03","modified_gmt":"2020-03-07T11:42:03","slug":"uyazvimost-v-pppd-i-lwip-pozvolyayushhaya-udalyonno-vypolnit-kod-s-pravami-root","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-pppd-i-lwip-pozvolyayushhaya-udalyonno-vypolnit-kod-s-pravami-root","title":{"rendered":"Dob\u00ebsi n\u00eb pppd dhe lwIP q\u00eb lejon ekzekutimin e kodit n\u00eb distanc\u00eb me t\u00eb drejta root","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

N\u00eb paket\u00ebn pppd u zbulua<\/a><\/noindex> vulnerabiliteti<\/a><\/noindex> (CVE-2020-8597<\/a><\/noindex>), e cila lejon ekzekutimin e kodit tuaj p\u00ebrmes d\u00ebrgimit t\u00eb k\u00ebrkesave t\u00eb formatuara n\u00eb m\u00ebnyr\u00eb t\u00eb ve\u00e7ant\u00eb p\u00ebr autentifikim n\u00eb sistemet q\u00eb p\u00ebrdorin protokollin PPP (Point-to-Point Protocol) ose PPPoE (PPP mbi Ethernet). K\u00ebta protokolla zakonisht p\u00ebrdoren nga ofruesit p\u00ebr t\u00eb organizuar lidhjen p\u00ebrmes Ethernet-it ose DSL, si dhe p\u00ebrdoren n\u00eb disa VPN (p.sh., pptpd dhe openfortivpn<\/a><\/noindex>). P\u00ebr t\u00eb verifikuar n\u00ebse sistemet tuaja jan\u00eb t\u00eb prekura nga problemi \u00ebsht\u00eb p\u00ebrgatitur<\/a><\/noindex> prototipi i eksploitit.<\/p>\n

Dob\u00ebsia shkaktohet nga mbushja e tamponit n\u00eb zbatimin e protokollit t\u00eb autentifikimit EAP (Extensible Authentication Protocol). Sulmi mund t\u00eb kryhet n\u00eb faz\u00ebn para kalimit t\u00eb autentifikimit duke d\u00ebrguar nj\u00eb paket\u00eb me tipin EAPT_MD5CHAP, e cila p\u00ebrfshin nj\u00eb em\u00ebr shum\u00eb t\u00eb gjat\u00eb host-i, t\u00eb cilat nuk p\u00ebrputhen n\u00eb tamponin e ndar\u00eb. P\u00ebr shkak t\u00eb nj\u00eb gabimi n\u00eb kodin e verifikimit t\u00eb madh\u00ebsis\u00eb s\u00eb fush\u00ebs rhostname, sulmuesi mund t\u00eb mbush\u00eb t\u00eb dh\u00ebna p\u00ebrtej tamponit mbi grumbullin dhe t\u00eb arrij\u00eb ekzekutimin e kodit t\u00eb tij me privilegje root. Dob\u00ebsia shfaqet nga ana e serverit dhe klientit, dmth. jo vet\u00ebm serveri mund t\u00eb sulmohet, por gjithashtu edhe klienti q\u00eb p\u00ebrpiqet t\u00eb lidh\u00eb me nj\u00eb server t\u00eb kontrolluar nga sulmuesi (p.sh., nj\u00eb keqb\u00ebr\u00ebs mund t\u00eb hakeroj\u00eb fillimisht serverin p\u00ebrmes dob\u00ebsis\u00eb dhe pastaj t\u00eb filloj\u00eb t\u00eb godas\u00eb klient\u00ebt q\u00eb lidhen).<\/p>\n

Problemi prek versionet pppd<\/a><\/noindex> nga 2.4.2 deri n\u00eb 2.4.8 p\u00ebrfshir\u00eb dhe \u00ebsht\u00eb eliminuar n\u00eb form\u00ebn patch-it<\/a><\/noindex>. Dob\u00ebsia gjithashtu preket<\/a><\/noindex> staku lwIP<\/a><\/noindex>, por n\u00eb konfigurimin e paracaktuar n\u00eb lwIP mb\u00ebshtetja EAP nuk \u00ebsht\u00eb aktivizuar.<\/p>\n

Statusi i eliminimit t\u00eb problemit n\u00eb distribucionet mund t\u00eb shihet n\u00eb k\u00ebto faqet: Debian<\/a><\/noindex>, Ubuntu<\/a><\/noindex>, RHEL<\/a><\/noindex>, Fedora<\/a><\/noindex>, SUSE<\/a><\/noindex>, OpenWRT<\/a><\/noindex>, Arch<\/a><\/noindex>, NetBSD<\/a><\/noindex>. N\u00eb RHEL, OpenWRT dhe SUSE paketa pppd \u00ebsht\u00eb e grumbulluar me mb\u00ebshtetje t\u00eb siguris\u00eb \u201cStack Smashing Protection\u201d (reja \u201c-fstack-protector\u201d n\u00eb gcc), e cila kufizon eksploatimin p\u00ebrmes d\u00ebshtimit. P\u00ebrve\u00e7 distribucioneve, dob\u00ebsia gjithashtu \u00ebsht\u00eb e konfirmuar n\u00eb disa produkte Cisco<\/a><\/noindex> (CallManager), TP-LINK<\/a><\/noindex> dhe Synology (DiskStation Manager, VisualStation VS960HD dhe Router Manager), duke p\u00ebrdorur kodin pppd ose lwIP.<\/p>\n

<\/a><\/noindex><\/p>\n

Burimi: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043f\u0430\u043a\u0435\u0442\u0435 pppd \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2020-8597), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u0432\u043e\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043d\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b PPP (Point-to-Point Protocol) \u0438\u043b\u0438 PPPoE (PPP over Ethernet). \u0414\u0430\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u044b \u043e\u0431\u044b\u0447\u043d\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0442\u0441\u044f \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u0430\u043c\u0438 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0447\u0435\u0440\u0435\u0437 Ethernet \u0438\u043b\u0438 DSL, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 VPN (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, pptpd \u0438 openfortivpn). \u0414\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0441\u0432\u043e\u0438\u0445 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-73151","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Dob\u00ebsia n\u00eb pppd dhe lwIP q\u00eb lejon ekzekutimin e kodit n\u00eb distanc\u00eb me t\u00eb drejtat root | ProHoster","description":"Nj\u00eb dob\u00ebsi u identifikua n\u00eb paket\u00ebn pppd.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-pppd-i-lwip-pozvolyayushhaya-udalyonno-vypolnit-kod-s-pravami-root","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 pppd \u0438 lwIP, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root | ProHoster","og:description":"\u0412 \u043f\u0430\u043a\u0435\u0442\u0435 pppd \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-pppd-i-lwip-pozvolyayushhaya-udalyonno-vypolnit-kod-s-pravami-root","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-03-07T11:42:03+00:00","article:modified_time":"2020-03-07T11:42:03+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"73151","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:38:40","updated":"2022-09-28 04:48:21","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/73151","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=73151"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/73151\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=73151"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=73151"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=73151"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}