{"id":37292,"date":"2019-10-31T22:16:49","date_gmt":"2019-10-31T19:16:49","guid":{"rendered":"https:\/\/prohoster.info\/blog\/v-webmin-najden-bekdor-pozvolyayushhij-udalyonno-poluchit-dostup-s-pravami-root\/"},"modified":"2019-10-31T22:16:49","modified_gmt":"2019-10-31T19:16:49","slug":"v-webmin-najden-bekdor-pozvolyayushhij-udalyonno-poluchit-dostup-s-pravami-root","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/news\/v-webmin-najden-bekdor-pozvolyayushhij-udalyonno-poluchit-dostup-s-pravami-root","title":{"rendered":"I Webmin har en bakd\u00f6rr hittats som m\u00f6jligg\u00f6r fj\u00e4rr\u00e5tkomst med root-beh\u00f6righet.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

I paketet Webmin<\/a><\/noindex>, som tillhandah\u00e5ller medel f\u00f6r fj\u00e4rrhantering av servern, har identifierats<\/a><\/noindex> bakd\u00f6rr (CVE-2019-15107<\/a><\/noindex>), som uppt\u00e4cktes i officiella versioner av projektet, spridna<\/a><\/noindex> via Sourceforge och rekommenderade<\/a><\/noindex> p\u00e5 huvudwebbplatsen. Bakd\u00f6rren fanns i versioner fr\u00e5n 1.882 till 1.921 inklusive (i git-repositoriet saknades koden med bakd\u00f6rren) och till\u00e4t fj\u00e4rr\u00e5tkomst utan autentisering f\u00f6r att k\u00f6ra godtyckliga shell-kommandon i systemet med root-beh\u00f6righet. <\/p>\n

F\u00f6r att genomf\u00f6ra attacken r\u00e4cker det med att ha en \u00f6ppen n\u00e4tverksport med Webmin och aktiviteten i webbgr\u00e4nssnittet f\u00f6r att byta det f\u00f6r\u00e5ldrade l\u00f6senordet (som som standard \u00e4r aktiverad i versioner 1.890, men inaktiverad i andra versioner). Problemet har \u00e5tg\u00e4rdats<\/a><\/noindex> p\u00e5 i version 1.930. Som en tillf\u00e4llig \u00e5tg\u00e4rd f\u00f6r att blockera bakd\u00f6rren r\u00e4cker det att ta bort inst\u00e4llningen \"passwd_mode=\" fr\u00e5n konfigurationsfilen \\\/etc\\\/webmin\\\/miniserv.conf. F\u00f6r testning har en<\/a><\/noindex> 1.930. Som en tillf\u00e4llig \u00e5tg\u00e4rd f\u00f6r att blockera bakd\u00f6rren r\u00e4cker det med att ta bort inst\u00e4llningen \"passwd_mode=\" fr\u00e5n konfigurationsfilen \/etc\/webmin\/miniserv.conf. F\u00f6r testning har f\u00f6rberetts Problem var<\/a><\/noindex>.<\/p>\n

uppt\u00e4ckt i skriptet password_change.cgi, d\u00e4r f\u00f6r att kontrollera det gamla l\u00f6senordet som matas in i webbl\u00e4sarformul\u00e4ret<\/a><\/noindex> anv\u00e4nds funktionen unix_crypt, som tar emot det l\u00f6senord som anv\u00e4ndaren anger utan att utf\u00f6ra escape av specialtecken. I git-repositoriet<\/a><\/noindex> \u00e4r denna funktion ett omslag runt modulen Crypt::UnixCrypt och utg\u00f6r ingen fara, men i det levererade arkivet p\u00e5 Sourceforge anropas kod som direkt refererar till \\\/etc\\\/shadow, men g\u00f6r det genom en shell-konstruktion. F\u00f6r att genomf\u00f6ra attacken r\u00e4cker det med att ange tecknet \"|\" i f\u00e4ltet f\u00f6r det gamla l\u00f6senordet och koden efter detta kommer att k\u00f6ras med root-beh\u00f6righet p\u00e5 servern.<\/a><\/noindex> ett lager ovanp\u00e5 modulen Crypt::UnixCrypt och utg\u00f6r ingen fara, men i arkivet med kod som tillhandah\u00e5lls p\u00e5 webbplatsen Sourceforge anropas kod som direkt h\u00e4nvisar till \/etc\/shadow, men detta g\u00f6rs genom en shell-konstruktion. F\u00f6r att utf\u00f6ra attacken r\u00e4cker det med att ange tecknet \"|\" i f\u00e4ltet f\u00f6r det gamla l\u00f6senordet, och koden efter detta kommer att utf\u00f6ras med root-r\u00e4ttigheter p\u00e5 servern.<\/p>\n

uttalandet fr\u00e5n Webmins utvecklare, har den skadliga koden placerats i systemet p\u00e5 grund av en kompromiss av projektets infrastruktur. Detaljer meddelas f\u00f6r n\u00e4rvarande inte, s\u00e5 det \u00e4r oklart om intr\u00e5nget enbart involverade en kapning av kontot p\u00e5 Sourceforge eller ocks\u00e5 p\u00e5verkade andra delar av utvecklings- och bygginfrastrukturen f\u00f6r Webmin. Den skadliga koden har funnits i arkiven sedan mars 2018. Problemet ber\u00f6rde \u00e4ven<\/a><\/noindex> versioner av Usermin . F\u00f6r n\u00e4rvarande har alla installationsarkiv omarbetats fr\u00e5n Git.<\/a><\/noindex>Godk\u00e4nnandet f\u00f6r avveckling av repositories f\u00f6r i686-arkitekturen i Fedora 31<\/p>\n

<\/a><\/noindex><\/p>\n

K\u00e4lla: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043f\u0430\u043a\u0435\u0442\u0435 Webmin, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u043c \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c, \u0432\u044b\u044f\u0432\u043b\u0435\u043d \u0431\u044d\u043a\u0434\u043e\u0440 (CVE-2019-15107), \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0439 \u0432 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0431\u043e\u0440\u043a\u0430\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u0430, \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u043c\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 Sourceforge \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u0441\u0430\u0439\u0442\u0435. \u0411\u044d\u043a\u0434\u043e\u0440 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u043e\u0432\u0430\u043b \u0432 \u0441\u0431\u043e\u0440\u043a\u0430\u0445 \u0441 1.882 \u043f\u043e 1.921 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (\u0432 git-\u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u043a\u043e\u0434 \u0441 \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u043c \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u043e\u0432\u0430\u043b) \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0431\u0435\u0437 \u043f\u0440\u043e\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 shell-\u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root. \u0414\u043b\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-37292","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47En Webmin har en baksida som till\u00e5ter fj\u00e4rr\u00e5tkomst med root-r\u00e4ttigheter | ProHoster","description":"I paketet Webmin, som tillhandah\u00e5ller medel f\u00f6r fj\u00e4rrhantering av servern.","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/news\/v-webmin-najden-bekdor-pozvolyayushhij-udalyonno-poluchit-dostup-s-pravami-root","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 Webmin \u043d\u0430\u0439\u0434\u0435\u043d \u0431\u044d\u043a\u0434\u043e\u0440, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root | ProHoster","og:description":"\u0412 \u043f\u0430\u043a\u0435\u0442\u0435 Webmin, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u043c \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c,","og:url":"https:\/\/prohoster.info\/sv\/blog\/news\/v-webmin-najden-bekdor-pozvolyayushhij-udalyonno-poluchit-dostup-s-pravami-root","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:16:49+00:00","article:modified_time":"2019-10-31T19:16:49+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"37292","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 17:08:31","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:29:59","updated":"2026-01-23 17:08:31","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/37292","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=37292"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/37292\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=37292"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=37292"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=37292"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}