ืงืจื™ื˜ื™ืฉ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ืŸ ProFTPd

ืื™ืŸ ื“ื™ ืคึผืจืึธืคื˜ืคึผื“ ืคื˜ืคึผ ืกืขืจื•ื•ืขืจ ื™ื™ื“ืขื ืึทืคื™ื™ื“ ื’ืขืคืขืจืœืขืš ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ (CVE-2019-12815), ื•ื•ืึธืก ืึทืœืึทื•ื– ืื™ืจ ืฆื• ื ืึธื›ืžืึทื›ืŸ ื˜ืขืงืขืก ืื™ืŸ ื“ื™ ืกืขืจื•ื•ืขืจ ืึธืŸ ืึธื˜ืขื ื˜ืึทืงื™ื™ืฉืึทืŸ ื ื™ืฆืŸ ื“ื™ "ืคึผืœืึทืฅ cpfr" ืื•ืŸ "ืคึผืœืึทืฅ ืงืคึผื˜ืึธ" ืงืึทืžืึทื ื“ื–. ืคึผืจืึธื‘ืœืขื ืึทืกื™ื™ื ื“ ื’ืขืคืึทืจ ืžื“ืจื’ื” 9.8 ืคื•ืŸ 10, ื•ื•ื™ื™ึทืœ ืขืก ืงืขื ืขืŸ ื–ื™ื™ืŸ ื’ืขื ื•ืฆื˜ ืฆื• ืึธืจื’ืึทื ื™ื–ื™ืจืŸ ื•ื•ื™ื™ึทื˜ ืงืึธื“ ื“ื•ืจื›ืคื™ืจื•ื ื’ ื‘ืฉืขืช ืื™ืจ ืฆื•ืฉื˜ืขืœืŸ ืึทื ืึทื ืึทืžืึทืก ืึทืงืกืขืก ืฆื• ืคื˜ืคึผ.

ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ื’ื•ืจื ืคืึทืœืฉ ื˜ืฉืขืง ืคื•ืŸ ืึทืงืกืขืก ืจื™ืกื˜ืจื™ืงืฉืึทื ื– ืคึฟืึทืจ ืœื™ื™ืขื ืขืŸ ืื•ืŸ ืฉืจื™ื™ื‘ืŸ ื“ืึทื˜ืŸ (ืœื™ืžื™ื˜ READ ืื•ืŸ ืœื™ืžื™ื˜ WRITE) ืื™ืŸ ื“ื™ ืžืึธื“_ืงืึธืคึผื™ ืžืึธื“ื•ืœืข, ื•ื•ืึธืก ืื™ื– ื’ืขื ื™ืฆื˜ ื“ื•ืจืš ืคืขืœื™ืงื™ื™ึทื˜ ืื•ืŸ ืขื ื™ื™ื‘ืึทืœื“ ืื™ืŸ ืคึผืจืึธืคื˜ืคึผื“ ืคึผืึทืงืึทื“ื–ืฉืึทื– ืคึฟืึทืจ ืจื•ื‘ึฟ ื“ื™ืกื˜ืจื™ื‘ื™ื•ืฉืึทื ื–. ืขืก ืื™ื– ื ืึธื•ื˜ื•ื•ืขืจื“ื™ ืึทื– ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ื– ืึท ืงืึทื ืกืึทืงื•ื•ืึทื ืก ืคื•ืŸ ืึท ืขื ืœืขืš ืคึผืจืึธื‘ืœืขื ื•ื•ืึธืก ืื™ื– ื ื™ืฉื˜ ื’ืึธืจ ืจื™ื–ืึทืœื•ื•ื“, ื™ื™ื“ืขื ืึทืคื™ื™ื“ ืื™ืŸ 2015, ืคึฟืึทืจ ื•ื•ืึธืก ื ื™ื™ึท ื‘ืึทืคืึทืœืŸ ื•ื•ืขืงื˜ืึธืจืก ื”ืึธื‘ืŸ ืฉื•ื™ืŸ ื™ื™ื“ืขื ืึทืคื™ื™ื“. ื“ืขืจืฆื•, ื“ื™ ืคึผืจืึธื‘ืœืขื ืื™ื– ื’ืขื•ื•ืขืŸ ื’ืขืžืืœื“ืŸ ืฆื• ื“ื™ ื“ืขื•ื•ืขืœืึธืคึผืขืจืก ืฆื•ืจื™ืง ืื™ืŸ ืกืขืคื˜ืขืžื‘ืขืจ ืœืขืฆื˜ืข ื™ืึธืจ, ืึธื‘ืขืจ ื“ื™ ืœืึทื˜ืข ืื™ื– ื’ืขื•ื•ืขืŸ ืฆื•ื’ืขื’ืจื™ื™ื˜ ื ืึธืจ ืึท ื‘ื™ืกืœ ื˜ืขื’ ืฆื•ืจื™ืง.

ื“ืขืจ ืคึผืจืึธื‘ืœืขื ืื™ื– ืื•ื™ืš ืืจื•ื™ืก ืื™ืŸ ื“ื™ ืœืขืฆื˜ืข ืงืจืึทื ื˜ ืจื™ืœื™ืกื™ื– ืคื•ืŸ ProFTPd 1.3.6 ืื•ืŸ 1.3.5d. ื“ื™ ืคืึทืจืจื™ื›ื˜ืŸ ืื™ื– ื‘ื ื™ืžืฆื ื•ื•ื™ ืœืึทื˜ืข. ื•ื•ื™ ืึท ื–ื™ื›ืขืจื”ื™ื™ื˜ ื•ื•ืึธืจืงืึทืจืึธื•ื ื“, ืขืก ืื™ื– ืจืขืงืึทืžืขื ื“ื™ื“ ืฆื• ื“ื™ืกื™ื™ื‘ืึทืœ ืžืึธื“_ืงืึธืคึผื™ ืื™ืŸ ื“ื™ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ. ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ื– ื‘ื™ื– ืื™ืฆื˜ ืคืึทืจืคืขืกื˜ื™ืงื˜ ื‘ืœื•ื™ื– ืื™ืŸ ืคืขื“ืึธืจืึท ืื•ืŸ ื‘ืœืฒึทื‘ื˜ ืื•ืžืคึฟืึทืจืจืขื›ื˜ ื“ืขื‘ื™ืึทืŸ, SUSE/openSUSE, ื•ื‘ื•ื ื˜ื•, FreeBSD, EPEL-7 (ืคึผืจืึธืคื˜ืคึผื“ ืื™ื– ื ื™ืฉื˜ ืกืึทืคึผืœื™ื™ื“ ืื™ืŸ ื“ื™ ื”ื•ื™ืคึผื˜ RHEL ืจื™ืคึผืึทื–ืึทื˜ืึธืจื™, ืื•ืŸ ื“ื™ ืคึผืขืงืœ ืคื•ืŸ EPEL-6 ืื™ื– ื ื™ืฉื˜ ืึทืคืขืงื˜ืึทื“ ื“ื•ืจืš ื“ืขื ืคึผืจืึธื‘ืœืขื ื•ื•ื™ื™ึทืœ ืขืก ื˜ื•ื˜ ื ื™ืฉื˜ ืึทืจื™ื™ึทื ื ืขืžืขืŸ ืžืึธื“_ืงืึธืคึผื™).

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’