ื ืฉืืืืืงืืื ืืื ืื ืืืขืงื ืืขืืืืจื ืืื ืืขื telnetd ืกืขืจืืืขืจ ืคืื ืืขืจ GNU InetUtils ืกืืืื. ืื ืฉืืืืืงืืื ืขืจืืืืื ืคืืจืืื ืืื ื ืืื ืืขืืขืจ ืืื ืืฆืขืจ, ืืจืืื ืืขืจืขืื ื ืจืื, ืื ืงืืื ืคืืกืืืืจื ืืืขืจืืคืืงืืฆืืข. ื CVE ืืืืขื ืืืคืืฆืืจืขืจ ืืื ื ืื ื ืืฉื ืฆืืืขืืืืื ืืขืืืืจื. ืื ืฉืืืืืงืืื ืืื ืคืืจืื ืืื ื InetUtils ืืืขืจืกืืข 1.9.3 (2015) ืืื ืืืืืื ืืืืืขืคืขืืฉื ืืื ืืขืจ ืืขืฆืืืืขืจ ืืืืกืืืืข 2.7.0. ื ืคืืจืจืขืืืื ื ืืื ืคืืจืื ืืื ืคืขืืฉืขืก (1, 2).
ืื ืคืจืืืืขื ืืืขืจื ืืขืคึฟืืจื ืืืจื ืืขื ืคืึทืงื ืึทื ืึผืื ืฆื ืงืึธื ืืจืึธืืืจื ืืึธืก ืคึผืึทืจืึธื, ืจืืคึฟื ืืขืจ telnetd ืคึผืจืึธืฆืขืก ืึธื ืืขื "/usr/bin/login" ื ืืฆืคึผืจืึธืืจืึทื, ืืื ืืื ืืืืขืจ ืืื ืึทื ืึทืจืืืืขื ื ืืขื ืืึทื ืืฆืขืจ ื ืึธืืขื ืืืึธืก ืืขืจ ืงืืืขื ื ืืึธื ืกืคึผืขืฆืืคึฟืืฆืืจื ืืืขื ืขืจ ืืึธื ืืื ืคึฟืึทืจืืื ืื ืฆื... ืกืขืจืืืขืจืื "ืืึธืืื" ื ืืฆืคึผืจืึธืืจืึทื ืฉืืืฆื ืื "-f" ืึธืคึผืฆืืข, ืืืึธืก ืขืจืืืืื ืืึธืืื ืึธื ืืืืืขื ืืืคึฟืืงืึทืฆืืข (ืื ืึธืคึผืฆืืข ืืื ืืขืืืื ื ืฆื ืืืขืจื ืืขื ืืฆื ืืืขื ืืขืจ ืืึทื ืืฆืขืจ ืืื ืฉืืื ืืืืืขื ืืืคึฟืืฆืืจื). ืืขืจืืืขืจ, ืืืจื ืึทืจืืื ืฉืืขืื ืื "-f" ืึธืคึผืฆืืข ืืื ืืขื ืืึทื ืืฆืขืจ ื ืึธืืขื, ืงืขื ื ืืืจ ืืื ืคึฟืึทืจืืื ืื ืึธื ืคึผืึทืจืึธื ืืืขืจืืคึฟืืงืึทืฆืืข.
ืืื ื ื ืืจืืืืขืจ ืคืืจืืื ืืื ื, ืงืขื ื ืืืจ ื ืืฉื ื ืืฆื ื ืืื ืืฆืขืจ ื ืืืขื ืืื "-f root," ืืืขืจ ืืขืื ืขื ืืื ืื ืืืืืืืืืืฉื ืคืืจืืื ืืื ื ืืึธืืืก ืึทืงืืืืืืืืจื ืืืจื ืืขืจ "-a" ืึธืคึผืฆืืข. ืืื ืืขื ืืึธืืืก, ืืืขืจื ืืขืจ ืืื ืืฆืขืจ ื ืืืขื ื ืืฉื ืืขื ืืืขื ืคืื ืืขืจ ืงืึธืืึทื ื ืืื ืืข, ื ืึธืจ ืืืขืจื ืืืจืืืขืืขืื ืืืจื ืืขืจ USER ืกืืืื ืืืขืจืืึทืื. ืืืขื ืื ืืึธืืื ืืืืืืืื ืืื ืืขืจืืคื ืืขืืืึธืจื, ืืื ืืขืจ ืืืขืจื ืคืื ืืขืจ ืกืืืื ืืืขืจืืึทืื ืืขืืืึธืจื ืกืึทืืกืืืืืืืจื ืึธื ื ืึธื ืงืึธื ืืจืึธื ืืื ืึธื ืขืงืกืงืืคึผืื ื ืกืคึผืขืฆืืขืืข ืืืชืืืช. ืืขืจืืืขืจ, ืฆื ืคืืจืืื ืื ืืื ืืื ืืขืจ ืืืึธืจืฆื ืืื ืืฆืขืจ, ืฉืืขืื ืคืฉืื ืื USER ืกืืืื ืืืขืจืืึทืื ืฆื "-f root" ืืื ืคืืจืืื ืื ืืื ืฆืื ืืขืื ืขื ืกืขืจืืืขืจ ื ืืฆื ืืืง ืืขืจ "-a" ืึธืคึผืฆืืข: $ USER='-f root' telnet -a ืกืขืจืืืขืจ_ื ืึธืืขื
ืื ืขื ืืขืจืื ื ืืืึธืก ืืึธื ืืฒึทื ืืขืคึฟืืจื ืื ืฉืืืึทืืงืฒึทื ืืื ืฆืืืขืืขืื ืืขืืืึธืจื ืฆืื telnetd ืงืึธื ืืื ืืขืจืฅ 2015 ืืื ืืึธื ืึทืืจืขืกืืจื ืึท ืคึผืจืึธืืืขื ืืืึธืก ืืึธื ืคึฟืึทืจืืืื ืึทื ืืขืจ ืืึทื ืืฆืขืจ ื ืึธืืขื ืืึธื ื ืืฉื ืืึทืฉืืืื ืืืขืจื ืืื ืืืืืึธืืึธืืื ืืึธืืข ืึธื ืงืขืจืืขืจืึธืก ืืืืืขื ืืืคึฟืืงืึทืฆืืข. ืึทืืก ืึท ืืืืืื ื, ืืื ืฆืืืขืืขืื ืืขืืืึธืจื ืฉืืืฆืข ืคึฟืึทืจ ืืืืขืจืืขืื ืืขื ืืึทื ืืฆืขืจ ื ืึธืืขื ืคึฟืึทืจ ืืืืืึธืืึธืืื ืืึธืืข ืืืจื ืึทื ืขื ืืืืืจืึธืืขื ื ืืืขืจืืึทืื, ืึธืืขืจ ืึท ืืืึทืืืืึทืฆืืข ืงืึธื ืืจืึธื ืคึฟืึทืจ ืืขื ืืึทื ืืฆืขืจ ื ืึธืืขื ืคึฟืื ืืขืจ ืขื ืืืืืจืึธืืขื ื ืืืขืจืืึทืื ืืื ืคึฟืึทืจืืขืกื ืืขืืืึธืจื.
ืืงืืจ: opennet.ru
