ืงืจื™ื˜ื™ืฉ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ืŸ ื“ืึธื•ื•ืขืงืึธื˜ ื™ืžืึทืคึผ ืกืขืจื•ื•ืขืจ

ะ’ ืงืขืจืขืงื˜ื™ื•ื• ืจื™ืœื™ืกื™ื– POP3/IMAP4 ืกืขืจื•ื•ืขืจืก ื“ืึธื•ื•ืขืงืึธื˜ 2.3.7.2 ืื•ืŸ 2.2.36.4, ื•ื•ื™ ืื•ื™ืš ืื™ืŸ ื“ืขืจ ื”ืขืกืึธืคืข ืคึผื™ื’ืขืึธื ื”ืึธืœืข 0.5.7.2 ืื•ืŸ 0.4.24.2 , ื™ืœื™ืžืึทื ื™ื™ื˜ืึทื“ ืงืจื™ื˜ื™ืฉ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ (CVE-2019-11500), ื•ื•ืึธืก ืึทืœืึทื•ื– ืื™ืจ ืฆื• ืฉืจื™ื™ึทื‘ืŸ ื“ืึทื˜ืŸ ื•ื•ื™ื™ึทื˜ืขืจ ืคื•ืŸ ื“ื™ ืึทืœืึทืงื™ื™ื˜ื™ื“ ื‘ืึทืคืขืจ ื“ื•ืจืš ืฉื™ืงืŸ ืึท ืกืคึผืขืฉืœื™ ื“ื™ื–ื™ื™ื ื“ ื‘ืขื˜ืŸ ื“ื•ืจืš ื“ื™ IMAP ืึธื“ืขืจ ManageSieve ืคึผืจืึธื˜ืึธืงืึธืœืก.

ื“ืขืจ ืคึผืจืึธื‘ืœืขื ืงืขื ืขืŸ ื–ื™ื™ืŸ ืขืงืกืคึผืœื•ื™ื˜ืึทื“ ืื™ืŸ ื“ื™ ืคืึทืจ-ืึธื˜ืขื ื˜ืึทืงื™ื™ืฉืึทืŸ ื‘ื™ื ืข. ื ืืจื‘ืขื˜ืŸ ื’ื•ื•ื•ืจืข ืื™ื– ื ืึธืš ื ื™ืฉื˜ ืฆื•ื’ืขื’ืจื™ื™ื˜, ืึธื‘ืขืจ ื“ืึธื•ื•ืขืงืึธื˜ ื“ืขื•ื•ืขืœืึธืคึผืขืจืก ื˜ืึธืŸ ื ื™ื˜ ื•ื™ืกืฉืœื™ืกืŸ ื“ื™ ืžืขื’ืœืขื›ืงื™ื™ื˜ ืคื•ืŸ ื ื™ืฆืŸ ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืฆื• ืึธืจื’ืึทื ื™ื–ื™ืจืŸ ื•ื•ื™ื™ึทื˜ ืงืึธื“ ื“ื•ืจื›ืคื™ืจื•ื ื’ ืื ืคืืœืŸ ืื•ื™ืฃ ื“ื™ ืกื™ืกื˜ืขื ืึธื“ืขืจ ืจื™ื ืขืŸ ืงืึทื ืคืึทื“ืขื ืฉืึทืœ ื“ืึทื˜ืŸ. ืึทืœืข ื™ื•ื–ืขืจื– ื–ืขื ืขืŸ ืจืขืงืึทืžืขื ื“ื™ื“ ืฆื• ื™ื ืกื˜ืึทืœื™ืจืŸ ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงื•ื ื’ืขืŸ ืžื™ื“ (ื“ืขื‘ื™ืึทืŸ, ืคืขื“ืึธืจืึท, ืึทืจื˜ืฉ ืœื™ื ื•ืงืก, ื•ื‘ื•ื ื˜ื•, sususe, rhel, FreeBSD).

ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ื™ื’ื–ื™ืกืฅ ืื™ืŸ ื“ื™ IMAP ืื•ืŸ ManageSieve ืคึผืจืึธื˜ืึธืงืึธืœ ืคึผืึทืจืกืขืจื– ืื•ืŸ ืื™ื– ื’ืขืคึฟื™ืจื˜ ื“ื•ืจืš ืคืึทืœืฉ ืคึผืจืึทืกืขืกื™ื ื’ ืคื•ืŸ ื ืึทืœ ืื•ืชื™ื•ืช ื•ื•ืขืŸ ืคึผืึทืจืกื™ื ื’ ื“ืึทื˜ืŸ ื™ืŸ ืฆื™ื˜ื™ืจื˜ ืกื˜ืจื™ื ื’ืก. ื“ืขืจ ืคึผืจืึธื‘ืœืขื ืื™ื– ืึทื˜ืฉื™ื•ื•ื“ ื“ื•ืจืš ืฉืจื™ื™ื‘ืŸ ืึทืจื‘ื™ื˜ืจืึทืจื™ืฉ ื“ืึทื˜ืŸ ืฆื• ืึทื‘ื“ื–ืฉืขืงืฅ ืกื˜ืึธืจื“ ืึทืจื•ื™ืก ื“ื™ ืึทืœืึทืงื™ื™ื˜ื™ื“ ื‘ืึทืคืขืจ (ืึทืจื•ื™ืฃ ืฆื• 8 ืงื‘ ืงืขื ืขืŸ ื–ื™ื™ืŸ ืึธื•ื•ื•ืขืจืจื™ื˜ืึทืŸ ืื™ืŸ ื“ืขืจ ื‘ื™ื ืข ืื™ื™ื“ืขืจ ืึธื˜ืขื ื˜ืึทืงื™ื™ืฉืึทืŸ, ืื•ืŸ ืึทืจื•ื™ืฃ ืฆื• 64 ืงื‘ ื ืึธืš ืึธื˜ืขื ื˜ืึทืงื™ื™ืฉืึทืŸ).

ืื•ื™ืฃ ืžื™ื™ื ื•ื ื’ ืœื•ื™ื˜ ืขื ื“ื–ืฉืึทื ื™ืจื– ืคื•ืŸ ืจืขื“ ื”ืึทื˜, ื“ื™ ื ื•ืฆืŸ ืคื•ืŸ ื“ืขื ืคึผืจืึธื‘ืœืขื ืคึฟืึทืจ ืคืึทืงื˜ื™ืฉ ืึทื˜ืึทืงืก ืื™ื– ืฉื•ื•ืขืจ ื•ื•ื™ื™ึทืœ ื“ื™ ืึทื˜ืึทืงืขืจ ืงืขืŸ ื ื™ืฉื˜ ืงืึธื ื˜ืจืึธืœื™ืจืŸ ื“ื™ ืฉื˜ืขืœืข ืคื•ืŸ โ€‹โ€‹ืึทืจื‘ื™ื˜ืจืึทืจื™ืฉ ื“ืึทื˜ืŸ ืึธื•ื•ื•ืขืจืจื™ื™ืฅ ืื™ืŸ ื“ื™ ืงื•ืคึผืข. ืื™ืŸ ืขื ื˜ืคืขืจ, ื“ื™ ืžื™ื™ื ื•ื ื’ ืื™ื– ืื•ื™ืกื’ืขื“ืจื™ืงื˜ ืึทื– ื“ืขื ืฉื˜ืจื™ืš ื‘ืœื•ื™ื– ื‘ืื˜ื™ื™ื˜ื™ืง ืงืึทืžืคึผืœื™ืงื™ื™ืฅ ื“ื™ ื‘ืึทืคืึทืœืŸ, ืึธื‘ืขืจ ื˜ื•ื˜ ื ื™ืฉื˜ ื•ื™ืกืฉืœื™ืกืŸ ื–ื™ื™ึทืŸ ื™ืžืคึผืœืึทืžืขื ื˜ื™ื™ืฉืึทืŸ - ื“ืขืจ ืึทื˜ืึทืงืขืจ ืงืขื ืขืŸ ืื™ื‘ืขืจื—ื–ืจืŸ ื“ื™ ืขืงืกืคึผืœื•ื™ื˜ื™ื™ืฉืึทืŸ ืคึผืจื•ื•ื•ืŸ ืคื™ืœืข ืžืึธืœ ื‘ื™ื– ืขืจ ืงื•ืžื˜ ืื™ืŸ ื“ื™ ืึทืจื‘ืขื˜ ื’ืขื’ื ื˜ ืื™ืŸ ื“ืขืจ ืงื•ืคึผืข.

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’