ื ื‘ืึทืงื“ืึธืจ ืื™ื– ื’ืขืคื•ื ืขืŸ ืื™ืŸ ื•ื•ืขื‘ืžื™ืŸ ื•ื•ืึธืก ืึทืœืึทื•ื– ื•ื•ื™ื™ึทื˜ ืึทืงืกืขืก ืžื™ื˜ ื•ื•ืึธืจืฆืœ ืจืขื›ื˜.

ืื™ืŸ ื“ืขื ืคึผืขืงืœ ื•ื•ืขื‘ืžื™ืŸ, ื•ื•ืึธืก ื’ื™ื˜ ืžื›ืฉื™ืจื™ื ืคึฟืึทืจ ื•ื•ื™ื™ึทื˜ ืกืขืจื•ื•ืขืจ ืคืึทืจื•ื•ืึทืœื˜ื•ื ื’, ื™ื™ื“ืขื ืึทืคื™ื™ื“ ืื™ื ื˜ืขืจืฉื˜ืข ื˜ื™ืจ (CVE-2019-15107), ื’ืขืคื•ื ืขืŸ ืื™ืŸ ื“ืขืจ ื‘ืึทืึทืžื˜ืขืจ ืคึผืจื•ื™ืขืงื˜ ื‘ื•ื™ืขืŸ, ืคื•ื ืื ื“ืขืจื’ืขื˜ื™ื™ืœื˜ ื“ื•ืจืš Sourceforge ืื•ืŸ ืจืขืงืึทืžืขื ื“ื™ื“ ืื•ื™ืฃ ื“ื™ ื”ื•ื™ืคึผื˜ ืคึผืœืึทืฅ. ื“ื™ ื‘ืึทืงื“ืึธืจ ืื™ื– ื’ืขื•ื•ืขืŸ ืคืึธืจืฉื˜ืขืœืŸ ืื™ืŸ ื‘ื•ื™ืขืŸ ืคื•ืŸ 1.882 ืฆื• 1.921 ื™ื ืงืœื•ืกื™ื•ื• (ืขืก ืื™ื– ื’ืขื•ื•ืขืŸ ืงื™ื™ืŸ ืงืึธื“ ืžื™ื˜ ื“ื™ ื‘ืึทืงื“ืึธืจ ืื™ืŸ ื“ื™ ื’ื™ื˜ ืจื™ืคึผืึทื–ืึทื˜ืึธืจื™) ืื•ืŸ ืขืจืœื•ื™ื‘ื˜ ืึทืจื‘ื™ื˜ืจืึทืจื™ืฉ ืฉืึธืœ ืงืึทืžืึทื ื“ื– ืฆื• ื–ื™ื™ืŸ ืขืงืกืึทืงื™ื•ื˜ืึทื“ ืจื™ืžืึธื•ื˜ืœื™ ืึธืŸ ืึธื˜ืขื ื˜ืึทืงื™ื™ืฉืึทืŸ ืื•ื™ืฃ ืึท ืกื™ืกื˜ืขื ืžื™ื˜ ื•ื•ืึธืจืฆืœ ืจืขื›ื˜.

ืคึฟืึทืจ ืึท ื‘ืึทืคืึทืœืŸ, ืขืก ืื™ื– ื’ืขื ื•ื’ ืฆื• ื”ืึธื‘ืŸ ืึทืŸ ืึธืคึฟืŸ ื ืขืฅ ืคึผืึธืจื˜ ืžื™ื˜ ื•ื•ืขื‘ืžื™ืŸ ืื•ืŸ ืึทืงื˜ืึทื•ื•ื™ื™ื˜ ื“ื™ ืคื•ื ืงืฆื™ืข ืคึฟืึทืจ ื˜ืฉืึทื ื’ื™ื ื’ ืึทื•ื˜ื“ื™ื™ื˜ื™ื“ ืคึผืึทืกื•ื•ืขืจื“ื– ืื™ืŸ ื“ื™ ื•ื•ืขื‘ ืฆื•ื‘ื™ื ื“ (ืขื ื™ื™ื‘ืึทืœื“ ื“ื•ืจืš ืคืขืœื™ืงื™ื™ึทื˜ ืื™ืŸ ื‘ื•ื™ืขืŸ 1.890, ืึธื‘ืขืจ ืคืึทืจืงืจื™ืคึผืœื˜ ืื™ืŸ ืื ื“ืขืจืข ื•ื•ืขืจืกื™ืขืก). ืคึผืจืึธื‘ืœืขื ื™ืœื™ืžืึทื ื™ื™ื˜ืึทื“ ะฒ ืึทืคึผื“ื™ื™ื˜ื™ื ื’ 1.930. ื•ื•ื™ ืึท ืฆื™ื™ึทื˜ื•ื•ื™ื™ึทืœื™ืง ืžืึธืก ืฆื• ืคืึทืจืฉืคึผืึทืจืŸ ื“ื™ ื‘ืึทืงื“ืึธืจ, ืคืฉื•ื˜ ืึทืจืึธืคึผื ืขืžืขืŸ ื“ื™ "passwd_mode =" ื‘ืึทืฉื˜ืขื˜ื™ืงืŸ ืคื•ืŸ ื“ื™ /etc/webmin/miniserv.conf ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ ื˜ืขืงืข. ืฆื•ื’ืขื’ืจื™ื™ื˜ ืคึฟืึทืจ ื˜ืขืกื˜ื™ื ื’ ื ื•ืฆืŸ ืคึผืจืึธื•ื˜ืึทื˜ื™ื™ืคึผ.

ื“ื™ ืคึผืจืึธื‘ืœืขื ืื™ื– ื’ืขื•ื•ืขืŸ ืึทื ื˜ื“ืขืงืŸ ืื™ืŸ ื“ื™ password_change.cgi ืฉืจื™ืคื˜, ืื™ืŸ ื•ื•ืึธืก ืฆื• ืงืึธื ื˜ืจืึธืœื™ืจืŸ ื“ื™ ืึทืœื˜ ืคึผืึทืจืึธืœ ืื™ืŸ ื“ื™ ื•ื•ืขื‘ ืคืึธืจืขื ื’ืขื•ื•ื™ื™ื ื˜ ื“ื•ืจืš ื“ื™ unix_crypt ืคื•ื ืงืฆื™ืข, ืฆื• ื•ื•ืึธืก ื“ื™ ืคึผืึทืจืึธืœ ื‘ืืงื•ืžืขืŸ ืคื•ืŸ ื“ื™ ื‘ืึทื ื™ืฆืขืจ ืื™ื– ื“ื•ืจื›ื’ืขื’ืื ื’ืขืŸ ืึธืŸ ื™ืกืงื™ื™ืคึผื™ื ื’ ืกืคึผืขืฆื™ืขืœ ืื•ืชื™ื•ืช. ืื™ืŸ ื“ื™ ื’ื™ื˜ ืจื™ืคึผืึทื–ืึทื˜ืึธืจื™ ื“ืขื ืคึฟื•ื ืงืฆื™ืข ืื™ื– ืืœื ื’ืขื•ื•ื™ืงืœื˜ ืึทืจื•ื ื“ื™ ืงืจื™ืคึผื˜ :: UnixCrypt ืžืึธื“ื•ืœืข ืื•ืŸ ืื™ื– ื ื™ืฉื˜ ื’ืขืคืขืจืœืขืš, ืึธื‘ืขืจ ื“ื™ ืงืึธื“ ืึทืจืงื™ื™ื•ื• ืฆื•ื’ืขืฉื˜ืขืœื˜ ืื•ื™ืฃ ื“ื™ Sourceforge ื•ื•ืขื‘ื–ื™ื™ื˜ืœ ืจื•ืคื˜ ืงืึธื“ ื•ื•ืึธืก ื’ืœื™ื™ืš ืึทืงืกืขืก /etc/shadow, ืึธื‘ืขืจ ื˜ื•ื˜ ื“ืึธืก ืžื™ื˜ ืึท ืฉืึธืœ ื‘ื•ื™ืขืŸ. ืฆื• ื‘ืึทืคืึทืœืŸ, ื ืึธืจ ืึทืจื™ื™ึทืŸ ื“ื™ ืกื™ืžื‘ืึธืœ "|" ืื™ืŸ ื“ื™ ืคืขืœื“ ืžื™ื˜ ื“ื™ ืึทืœื˜ ืคึผืึทืจืึธืœ. ืื•ืŸ ื“ื™ ืคืืœื’ืขื ื“ืข ืงืึธื“ ื ืึธืš ืขืก ื•ื•ืขื˜ ื–ื™ื™ืŸ ืขืงืกืึทืงื™ื•ื˜ืึทื“ ืžื™ื˜ ื•ื•ืึธืจืฆืœ ืจืขื›ื˜ ืื•ื™ืฃ ื“ื™ ืกืขืจื•ื•ืขืจ.

ืื•ื™ืฃ ื•ื™ืกื–ืึธื’ื•ื ื’ ื•ื•ืขื‘ืžื™ืŸ ื“ืขื•ื•ืขืœืึธืคึผืขืจืก, ื“ื™ ื‘ื™ื™ื–ืข ืงืึธื“ ืื™ื– ื™ื ืกืขืจื˜ืึทื“ ื•ื•ื™ ืึท ืจืขื–ื•ืœื˜ืึทื˜ ืคื•ืŸ ืงืึทืžืคึผืจืึทืžื™ื™ื–ื“ ื“ื™ ื™ื ืคืจืึทืกื˜ืจืึทืงื˜ืฉืขืจ ืคื•ืŸ ื“ื™ ืคึผืจื•ื™ืขืงื˜. ื“ืขื˜ืึทื™ืœืก ื–ืขื ืขืŸ ื ืึธืš ื ื™ืฉื˜ ืฆื•ื’ืขืฉื˜ืขืœื˜, ืึทื–ื•ื™ ืขืก ืื™ื– ื ื™ืฉื˜ ืงืœืึธืจ ืฆื™ ื“ื™ ื›ืึทืง ืื™ื– ืœื™ืžื™ื˜ืขื“ ืฆื• ื ืขืžืขืŸ ืงืึธื ื˜ืจืึธืœ ืคื•ืŸ ื“ื™ Sourceforge ื—ืฉื‘ื•ืŸ ืึธื“ืขืจ ืึทืคืขืงื˜ืึทื“ ืื ื“ืขืจืข ื™ืกื•ื“ื•ืช ืคื•ืŸ ื“ื™ ื•ื•ืขื‘ืžื™ืŸ ืึทื ื˜ื•ื•ื™ืงืœื•ื ื’ ืื•ืŸ ื‘ื•ื™ืขืŸ ื™ื ืคืจืึทืกื˜ืจืึทืงื˜ืฉืขืจ. ื“ื™ ื‘ื™ื™ื–ืข ืงืึธื“ ืื™ื– ื’ืขื•ื•ืขืŸ ืคืึธืจืฉื˜ืขืœืŸ ืื™ืŸ ื“ื™ ืึทืจืงื™ื™ื•ื•ื– ื–ื™ื ื˜ ืžืขืจืฅ 2018. ื“ื™ ืคึผืจืึธื‘ืœืขื ืื•ื™ืš ืึทืคืขืงื˜ืึทื“ Usermin ื‘ื•ื™ืขืŸ. ื“ืขืจื•ื•ื™ื™ึทืœ, ืึทืœืข ืืจืืคืงืืคื™ืข ืึทืจืงื™ื™ื•ื•ื– ื–ืขื ืขืŸ ืจื™ื‘ื™ืœื˜ ืคึฟื•ืŸ Git.

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’