{"id":86356,"date":"2020-06-24T13:42:00","date_gmt":"2020-06-24T11:42:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-zashhishhyonnom-brauzere-bitdefender-safepay-privodyashhaya-k-vypolneniyu-koda"},"modified":"2020-06-24T13:42:00","modified_gmt":"2020-06-24T11:42:00","slug":"uyazvimost-v-zashhishhyonnom-brauzere-bitdefender-safepay-privodyashhaya-k-vypolneniyu-koda","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-zashhishhyonnom-brauzere-bitdefender-safepay-privodyashhaya-k-vypolneniyu-koda","title":{"rendered":"Nj\u00eb vulnerabilitet n\u00eb shfletuesin e sigurt Bitdefender SafePay, q\u00eb \u00e7on n\u00eb ekzekutimin e kodit","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Vladimir Palant, krijuesi i Adblock Plus, identifikuar<\/a><\/noindex> vulnerabiliteti<\/a><\/noindex> (CVE-2020-8102<\/a><\/noindex>) n\u00eb shfletuesin e specializuar web Safepay, i bazuar n\u00eb motorin Chromium, q\u00eb ofrohet si pjes\u00eb e paket\u00ebs antivirus Bitdefender Total Security 2020 dhe ka p\u00ebr q\u00ebllim p\u00ebrmir\u00ebsimin e siguris\u00eb s\u00eb p\u00ebrdoruesit n\u00eb internet (p.sh. ofron izolim t\u00eb shtuar kur vizitohet bankat dhe sistemet e pagesave). Vulnerabiliteti lejon q\u00eb faqet e hapura n\u00eb shfletues t\u00eb ekzekutojn\u00eb kod t\u00eb p\u00ebrgjithsh\u00ebm n\u00eb nivelin e sistemit operativ.<\/p>\n

Arsyeja e problemit \u00ebsht\u00eb se antivirus Bitdefender realizon kapjen lokale t\u00eb trafikut HTTPS duke z\u00ebvend\u00ebsuar certifikat\u00ebn origjinale TLS t\u00eb faqes. N\u00eb sistemin e klientit instalohet nj\u00eb certifikat rr\u00ebnjor shtes\u00eb, q\u00eb lejon fshehjen e funksionit t\u00eb sistemit t\u00eb inspektimit t\u00eb trafikut. Antivirus vendoset n\u00eb trafikun e sigurt dhe p\u00ebrfshin kodin JavaScript t\u00eb tij n\u00eb disa faqe p\u00ebr t\u00eb realizuar funksionin Safe Search, dhe n\u00eb rast problemi me certifikat\u00ebn e lidhjes s\u00eb sigurt, z\u00ebvend\u00ebson faqen e gabimit me t\u00eb tij\u00ebn. Pasi faqja e re e gabimit jepet n\u00eb emrin e serverit q\u00eb po hapet, faqet e tjera t\u00eb k\u00ebtij serveri kan\u00eb qasje t\u00eb plot\u00eb n\u00eb p\u00ebrmbajtjen q\u00eb \u00ebsht\u00eb futur nga Bitdefender.<\/p>\n

Kur hapet nj\u00eb faqe n\u00eb internet e kontrolluar nga nj\u00eb sulmues, kjo faqe mund t\u00eb d\u00ebrgoj\u00eb nj\u00eb k\u00ebrkes\u00eb XMLHttpRequest dhe t\u00eb simuloj\u00eb nj\u00eb p\u00ebrgjigje problemi me certifikat\u00ebn HTTPS, duke \u00e7uar n\u00eb nj\u00eb faqe me gabime t\u00eb modifikuar nga Bitdefender. Duke qen\u00eb se faqa me gabim hapet n\u00eb kontekstin e domain-it t\u00eb sulmuesit, ai mund t\u00eb lexoj\u00eb p\u00ebrmbajtjen e faqeve t\u00eb modifikuara me parametrat e Bitdefender. N\u00eb faqe t\u00eb modifikuar nga Bitdefender p\u00ebrfshihet nj\u00eb \u00e7el\u00ebs seance, i cili lejon, p\u00ebrmes API-s\u00eb s\u00eb brendshme t\u00eb Bitdefender, t\u00eb nis\u00eb nj\u00eb sesion t\u00eb ve\u00e7ant\u00eb t\u00eb shfletuesit Safepay, duke specifikuar gjithashtu flaksa t\u00eb rast\u00ebsishme t\u00eb komand\u00ebs, dhe t\u00eb arrij\u00eb t\u00eb ekzekutoj\u00eb \u00e7do komand\u00eb sistemin p\u00ebrmes flaksit \u2014utility-cmd-prefix. Nj\u00eb shembull i shfryt\u00ebzimit (param1 dhe param2 jan\u00eb vlera t\u00eb marra nga faqja me gabim):<\/p>\n

var request = new XMLHttpRequest();
\n request.open(\u2018POST\u2019, Math.random());
\n request.setRequestHeader(\u2018Content-type\u2019, \u2018application\/x-www-form-urlencoded\u2019);
\n request.setRequestHeader(\u2018BDNDSS_B67EA559F21B487F861FDA8A44F01C50\u2019, param1);
\n request.setRequestHeader(\u2018BDNDCA_BBACF84D61A04F9AA66019A14B035478\u2019, param2);
\n request.setRequestHeader(\u2018BDNDWB_5056E556833D49C1AF4085CB254FC242\u2019, \u2018obk.run\u2019);
\n request.setRequestHeader(\u2018BDNDOK_4E961A95B7B44CBCA1907D3D3643370D\u2019, location.href);
\n request.send(\u2018data:text\/html,nada \u2014utility-cmd-prefix=\\cmd.exe \/k whoami & echo\\\u2019);<\/p>\n

\"Nj\u00eb<\/a><\/noindex><\/center><\/p>\n

T\u00eb kujtojm\u00eb se nj\u00eb studim i realizuar n\u00eb vitin 2017 tregon<\/a><\/noindex>, q\u00eb 24 nga 26 produktet e testuara antivirus, q\u00eb inspektojn\u00eb trafikun HTTPS p\u00ebrmes z\u00ebvend\u00ebsimit t\u00eb certifikatave, ul\u00ebn nivelin e siguris\u00eb s\u00eb p\u00ebrgjithsh\u00ebm t\u00eb lidhjes HTTPS.
\nGrupet aktuale t\u00eb enkriptimit ishin ofruar vet\u00ebm n\u00eb 11 nga 26 produkte. 5 sisteme nuk realizonin verifikimin e certifikatave (Kaspersky Internet Security 16 Mac, NOD32 AV 9, CYBERsitter, Net Nanny 7 Win, Net Nanny 7 Mac). Produktet Kaspersky Internet Security dhe Total Security ishin t\u00eb ndjeshme ndaj sulmit CRIME<\/a><\/noindex>, nd\u00ebrsa produktet AVG, Bitdefender dhe Bullguard ishin t\u00eb ndjeshme ndaj sulmeve Logjam<\/a><\/noindex> dhe POODLE<\/a><\/noindex>. Produkti Dr.Web Antivirus 11 lejon kthimin n\u00eb enkriptimet e pa besueshme eksportuese (sulm FREAK<\/a><\/noindex>).<\/p>\n

<\/a><\/noindex><\/p>\n

Burimi: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412\u043b\u0430\u0434\u0438\u043c\u0438\u0440 \u041f\u0430\u043b\u0430\u043d\u0442, \u0441\u043e\u0437\u0434\u0430\u0442\u0435\u043b\u044c Adblock Plus, \u0432\u044b\u044f\u0432\u0438\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2020-8102) \u0432 \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u043d\u0430 \u0434\u0432\u0438\u0436\u043a\u0435 Chromium \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c web-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Safepay, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u043c\u043e\u043c \u0432 \u0441\u043e\u0441\u0442\u0430\u0432\u0435 \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u043d\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 Bitdefender Total Security 2020 \u0438 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u043c \u043d\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0432 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044f \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0438 \u043a \u0431\u0430\u043d\u043a\u0430\u043c \u0438 \u043f\u043b\u0430\u0442\u0451\u0436\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c). \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u0430\u0451\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u043c\u044b\u043c \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 \u0441\u0430\u0439\u0442\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":86357,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-86356","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilitet n\u00eb shfletuesin e sigurt Bitdefender SafePay, q\u00eb \u00e7on n\u00eb ekzekutimin e kodit | ProHoster","description":"Vladimir Palant, krijuesi i Adblock Plus, zbuloi","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-zashhishhyonnom-brauzere-bitdefender-safepay-privodyashhaya-k-vypolneniyu-koda","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u043c \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Bitdefender SafePay, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 | ProHoster","og:description":"\u0412\u043b\u0430\u0434\u0438\u043c\u0438\u0440 \u041f\u0430\u043b\u0430\u043d\u0442, \u0441\u043e\u0437\u0434\u0430\u0442\u0435\u043b\u044c Adblock Plus, \u0432\u044b\u044f\u0432\u0438\u043b","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-zashhishhyonnom-brauzere-bitdefender-safepay-privodyashhaya-k-vypolneniyu-koda","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-24T11:42:00+00:00","article:modified_time":"2020-06-24T11:42:00+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"86356","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:17:32","updated":"2022-09-28 12:42:50","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/86356","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=86356"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/86356\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/86357"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=86356"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=86356"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=86356"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}