{"id":98919,"date":"2021-01-25T14:42:59","date_gmt":"2021-01-25T12:42:59","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vyyavlena-i-ispravlena-kriticheskaya-uyazvimost-v-realizaczii-nfs"},"modified":"2021-01-25T14:42:59","modified_gmt":"2021-01-25T12:42:59","slug":"vyyavlena-i-ispravlena-kriticheskaya-uyazvimost-v-realizaczii-nfs","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/vyyavlena-i-ispravlena-kriticheskaya-uyazvimost-v-realizaczii-nfs","title":{"rendered":"\u00cbsht\u00eb identifikuar dhe korrigjuar nj\u00eb vulnerabilitet kritik n\u00eb implementimin e NFS","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Vulnerabiliteti i referohet mund\u00ebsis\u00eb q\u00eb nj\u00eb sulmues n\u00eb distance t\u00eb fitoj\u00eb akses n\u00eb katalog\u00ebt p\u00ebrtej at\u00eb q\u00eb \u00ebsht\u00eb eksportuar p\u00ebrmes NFS, p\u00ebrmes thirrjes READDIRPLUS n\u00eb .. t\u00eb katalogut t\u00eb eksportuar.<\/p>\n

Vulnerabiliteti \u00ebsht\u00eb rregulluar n\u00eb b\u00ebrtham\u00ebn 5.10.10 q\u00eb doli m\u00eb 23 janar, si dhe n\u00eb t\u00eb gjitha versionet e tjera t\u00eb mb\u00ebshtetura t\u00eb b\u00ebrthamave q\u00eb u p\u00ebrdit\u00ebsuan n\u00eb at\u00eb dit\u00eb:<\/p>\n

commit fdcaa4af5e70e2d984c9620a09e9dade067f2620
\nAutor: J. Bruce Fields
\nData: E h\u00ebn\u00eb Jan 11 16:01:29 2021 -0500<\/p>\n

nfsd4: readdirplus nuk duhet t\u00eb kthej\u00eb prindin e eksportit<\/p>\n

commit 51b2ee7d006a736a9126e8111d1f24e4fd0afaa6 upstream.<\/p>\n

N\u00ebse eksportoni nj\u00eb n\u00ebnkatalog t\u00eb nj\u00eb sistemi skedar\u00ebsh, nj\u00eb READDIRPLUS n\u00eb rr\u00ebnj\u00ebn
\n i atij eksporti do t\u00eb kthej\u00eb handle-n e skedarit t\u00eb prindit me ".."
\n Manovra \u00ebsht\u00eb opsionale, k\u00ebshtu q\u00eb le t\u00eb mos e kthejm\u00eb manovr\u00ebn p\u00ebr<\/p>\n

Handle-i i skedarit \u00ebsht\u00eb opsional, ndaj le t\u00eb mos e kthejm\u00eb handle-in e skedarit p\u00ebr
\n ".." n\u00ebse jemi n\u00eb rr\u00ebnj\u00ebn e nj\u00eb eksporti.<\/p>\n

ata mund t\u00eb ken\u00eb qasje triviale n\u00eb pjes\u00ebn tjet\u00ebr t\u00eb eksportit duke p\u00ebrdorur k\u00ebrkesa t\u00eb m\u00ebtejshme.
\n Megjithat\u00eb, nuk \u00ebsht\u00eb gjithashtu shum\u00eb e v\u00ebshtir\u00eb t\u00eb gjesh manovrat jasht\u00eb<\/p>\n

eksportit. Pra, eksportimi i nj\u00eb n\u00ebnkatalogu t\u00eb nj\u00eb sistemi skedar\u00ebsh duhet
\n t\u00eb konsiderohet ekuivalent me ofrimin e aksesit n\u00eb t\u00ebr\u00eb sistemin skedar.
\n P\u00ebr t\u00eb shmangur konfuzionin, rekomandojm\u00eb t\u00eb eksportoni vet\u00ebm sisteme skedar\u00ebsh t\u00eb plota.
\n Raportuar nga: Youjipeng<\/p>\n

N\u00ebnshkruar nga: J. Bruce Fields
\n Cc: stable@vger.kernel.org
\n N\u00ebnshkruar nga: Chuck Lever
\n N\u00ebnshkruar nga: Greg Kroah-Hartman
\n N\u00ebnshkruar nga: Greg Kroah-Hartman<\/p>\n

Burimi: linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u044f\u043c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u044d\u043a\u0441\u043f\u043e\u0440\u0442\u0438\u0440\u0443\u0435\u043c\u043e\u0439 \u043f\u043e NFS, \u0447\u0435\u0440\u0435\u0437 \u0432\u044b\u0437\u043e\u0432 READDIRPLUS \u043d\u0430 .. \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0441\u043f\u043e\u0440\u0442\u0438\u0440\u0443\u0435\u043c\u043e\u0433\u043e \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0432\u044b\u0448\u0435\u0434\u0448\u0435\u043c 23 \u044f\u043d\u0432\u0430\u0440\u044f \u044f\u0434\u0440\u0435 5.10.10, \u0430 \u0442\u0430\u043a \u0436\u0435 \u0432\u043e \u0432\u0441\u0435\u0445 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u044f\u0434\u0435\u0440, \u043e\u0431\u043d\u043e\u0432\u043b\u0451\u043d\u043d\u044b\u0445 \u0432 \u044d\u0442\u043e\u0442 \u0434\u0435\u043d\u044c: commit fdcaa4af5e70e2d984c9620a09e9dade067f2620 Author: J. Bruce Fields <bfields@redhat.com> Date: Mon Jan 11 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-98919","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Identifikuar dhe rregulluar nj\u00eb vulnerabilitet kritik n\u00eb implementimin e NFS | ProHoster","description":"Vulnerabiliteti i referohet mund\u00ebsis\u00eb q\u00eb nj\u00eb sulmues n\u00eb distance t\u00eb fitoj\u00eb akses n\u00eb katalog\u00ebt p\u00ebrtej at\u00eb q\u00eb \u00ebsht\u00eb eksportuar p\u00ebrmes NFS, p\u00ebrmes thirrjes READDIRPLUS n\u00eb .. t\u00eb katalogut t\u00eb eksportuar. Vulnerabiliteti \u00ebsht\u00eb rregulluar n\u00eb b\u00ebrtham\u00ebn 5.10.10 q\u00eb doli m\u00eb 23 janar, si dhe n\u00eb t\u00eb gjitha versionet e tjera t\u00eb mb\u00ebshtetura t\u00eb b\u00ebrthamave q\u00eb u p\u00ebrdit\u00ebsuan n\u00eb at\u00eb dit\u00eb: commit fdcaa4af5e70e2d984c9620a09e9dade067f2620 Autor: J. Bruce Fields Data: E h\u00ebn\u00eb Jan 11","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/vyyavlena-i-ispravlena-kriticheskaya-uyazvimost-v-realizaczii-nfs","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 NFS | ProHoster","og:description":"\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u044f\u043c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u044d\u043a\u0441\u043f\u043e\u0440\u0442\u0438\u0440\u0443\u0435\u043c\u043e\u0439 \u043f\u043e NFS, \u0447\u0435\u0440\u0435\u0437 \u0432\u044b\u0437\u043e\u0432 READDIRPLUS \u043d\u0430 .. \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0441\u043f\u043e\u0440\u0442\u0438\u0440\u0443\u0435\u043c\u043e\u0433\u043e \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0432\u044b\u0448\u0435\u0434\u0448\u0435\u043c 23 \u044f\u043d\u0432\u0430\u0440\u044f \u044f\u0434\u0440\u0435 5.10.10, \u0430 \u0442\u0430\u043a \u0436\u0435 \u0432\u043e \u0432\u0441\u0435\u0445 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u044f\u0434\u0435\u0440, \u043e\u0431\u043d\u043e\u0432\u043b\u0451\u043d\u043d\u044b\u0445 \u0432 \u044d\u0442\u043e\u0442 \u0434\u0435\u043d\u044c: commit fdcaa4af5e70e2d984c9620a09e9dade067f2620 Author: J. Bruce Fields Date: Mon Jan 11","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/vyyavlena-i-ispravlena-kriticheskaya-uyazvimost-v-realizaczii-nfs","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-01-25T12:42:59+00:00","article:modified_time":"2021-01-25T12:42:59+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"98919","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 09:57:25","updated":"2022-10-02 00:17:31"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/98919","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=98919"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/98919\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=98919"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=98919"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=98919"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}