{"id":69369,"date":"2024-07-03T14:53:10","date_gmt":"2024-07-03T06:53:10","guid":{"rendered":"http:\/\/lrxjmw.cn\/?p=69369"},"modified":"2024-07-03T14:53:10","modified_gmt":"2024-07-03T06:53:10","slug":"vulnerability-alert","status":"publish","type":"post","link":"https:\/\/lrxjmw.cn\/vulnerability-alert.html","title":{"rendered":"\u6f0f\u6d1e\u9884\u8b66\uff1aSamba root\u6743\u9650\u6267\u884c\u6f0f\u6d1e"},"content":{"rendered":"<p>Samba\u662f\u5728Linux\u548cUNIX\u7cfb\u7edf\u4e0a\u5b9e\u73b0SMB\u534f\u8bae\u7684\u4e00\u4e2a\u8f6f\u4ef6\u30022017\u5e745\u670824\u65e5Samba\u53d1\u5e03\u76844.6.4\u7248\u672c\u4fee\u590d\u4e86\u4e00\u4e2a\u4e25\u91cd\u7684\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\u3002\u6f0f\u6d1e\u7f16\u53f7\u4e3aCVE-2017-7494\uff0c\u5f71\u54cdSamba 3.5.0 \u4e4b\u540e\u53ca4.6.4\/4.5.10\/4.4.14\u7248\u672c\u3002<\/p>\n<p><strong>\u6f0f\u6d1e\u7f16\u53f7:<\/strong><br \/>\nCVE-2017-7494<\/p>\n<p><strong>\u6f0f\u6d1e\u63cf\u8ff0:<\/strong><br \/>\n\u8be5\u6f0f\u6d1e\u53ea\u9700\u8981\u901a\u8fc7\u4e00\u4e2a\u53ef\u5199\u5165\u7684Samba\u7528\u6237\u6743\u9650\u5c31\u53ef\u4ee5\u63d0\u6743\u5230Samba\u6240\u5728\u670d\u52a1\u5668\u7684root\u6743\u9650\uff08Samba\u9ed8\u8ba4\u662f\u4ee5root\u7528\u6237\u6743\u9650\u6267\u884c\u7684\uff09\u3002\u76ee\u524d\u5df2\u6709\u653b\u51fb\u4ee3\u7801\u5728\u5916\u6d41\u4f20\uff0c\u6709\u7814\u7a76\u4eba\u5458\u5df2\u7ecf\u6210\u529f\u5229\u7528\u653b\u51fb\u4ee3\u7801\u9a8c\u8bc1\u6f0f\u6d1e\u6210\u529f\uff1a<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-99445 size-full\" src=\"https:\/\/lrxjmw.cn\/wp-content\/uploads\/2018\/04\/cb37318d3b99e449608a1e5534401505.jpg\" alt=\"\" width=\"613\" height=\"516\" srcset=\"https:\/\/lrxjmw.cn\/wp-content\/uploads\/2018\/04\/cb37318d3b99e449608a1e5534401505.jpg 613w, https:\/\/lrxjmw.cn\/wp-content\/uploads\/2018\/04\/cb37318d3b99e449608a1e5534401505-300x253.jpg 300w\" sizes=\"auto, (max-width: 613px) 100vw, 613px\" \/><\/p>\n<p><strong>\u653b\u51fb\u8fc7\u7a0b\uff1a<\/strong><br \/>\n\u6784\u9020\u4e00\u4e2a\u6709\u201c\/\u201d \u7b26\u53f7\u7684\u7ba1\u9053\u540d\u6216\u8def\u5f84\u540d\uff0c\u5982 \u201c\/home\/toor\/test.so\u201d<br \/>\n\u901a\u8fc7SMB\u7684\u534f\u8bae\u4e3b\u52a8\u8ba9\u670d\u52a1\u5668SMB\u8fd4\u56de\u8be5FID<br \/>\n\u540e\u7eed\u76f4\u63a5\u8bf7\u6c42\u8fd9\u4e2aFID\u5c31\u8fdb\u5165\u4e0a\u9762\u6240\u8bf4\u7684\u6076\u610f\u6d41\u7a0b<\/p>\n<p><strong>\u6f0f\u6d1e\u5229\u7528\u6761\u4ef6\u548c\u65b9\u5f0f:<\/strong><br \/>\n\u76f4\u63a5\u8fdc\u7a0b\u5229\u7528\u3002<\/p>\n<p><strong>\u6f0f\u6d1e\u68c0\u6d4b:<\/strong><br \/>\n\u68c0\u6d4b\u5728\u7528Samba\u662f\u5426\u5728\u53d7\u5f71\u54cd\u7248\u672c\u8303\u56f4\u5185 \u3002<\/p>\n<p><strong>\u52a0\u56fa\u5efa\u8bae\uff1a<\/strong><\/p>\n<ol>\n<li>\u4f7f\u7528\u6e90\u7801\u5b89\u88c5\u7684Samba\u7528\u6237\uff0c\u8bf7\u5c3d\u5feb\u4e0b\u8f7d\u6700\u65b0\u7684Samba\u7248\u672c\u624b\u52a8\u66f4\u65b0\uff1b<\/li>\n<li>\u4f7f\u7528\u4e8c\u8fdb\u5236\u5206\u53d1\u5305\uff08RPM\u7b49\u65b9\u5f0f\uff09\u7684\u7528\u6237\u7acb\u5373\u8fdb\u884cyum\uff0capt-get update\u7b49\u5b89\u5168\u66f4\u65b0\u64cd\u4f5c\u3002<\/li>\n<\/ol>\n<p>\u7f13\u89e3\u7b56\u7565\uff1a\u7528\u6237\u53ef\u4ee5\u901a\u8fc7\u5728smb.conf\u7684[global]\u8282\u70b9\u4e0b\u589e\u52a0 \u201cnt pipe support = no\u201d \u9009\u9879\uff0c\u7136\u540e\u91cd\u65b0\u542f\u52a8Samba\u670d\u52a1\uff0c \u4ee5\u6b64\u8fbe\u5230\u7f13\u89e3\u8be5\u6f0f\u6d1e\u7684\u6548\u679c\u3002<\/p>\n<blockquote>\n<p style=\"text-align: left; color: #88a6a4;\">\u539f\u6587\u6765\u81ea\uff1a<a href=\"http:\/\/www.yunweipai.com\/archives\/18457.html\" target=\"_blank\" rel=\"noopener\">http:\/\/www.yunweipai.com\/archives\/18457.html<\/a><\/p>\n<p style=\"text-align: left; color: #88a6a4;\">\u672c\u6587\u5730\u5740\uff1a<a href=\"https:\/\/lrxjmw.cn\/vulnerability-alert.html\" target=\"_blank\" rel=\"noopener\">https:\/\/lrxjmw.cn\/vulnerability-alert.html<\/a><span style=\"float: right;\">\u7f16\u8f91\u5458\uff1a\u90ed\u5efa\u9e4f\uff0c\u5ba1\u6838\u5458\uff1a\u9004\u589e\u5b9d<\/span><\/p>\n<\/blockquote>\n","protected":false},"excerpt":{"rendered":"<p>Samba\u662f\u5728Linux\u548cUNIX\u7cfb\u7edf\u4e0a\u5b9e\u73b0SMB\u534f\u8bae\u7684\u4e00\u4e2a\u8f6f\u4ef6\u30022017\u5e745\u670824\u65e5Samba\u53d1\u5e03\u76844.6.4\u7248\u672c\u4fee\u590d\u4e86\u4e00\u4e2a\u4e25\u91cd\u7684\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\u3002\u6f0f\u6d1e\u7f16\u53f7\u4e3aCVE-2017-7494\uff0c\u5f71\u54cdSamba 3.5.0 \u4e4b\u540e\u53ca4.6.4\/4.5.10\/4.4.14\u7248\u672c\u3002<\/p>\n","protected":false},"author":323,"featured_media":99433,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[21],"tags":[],"class_list":["post-69369","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"acf":[],"_links":{"self":[{"href":"https:\/\/lrxjmw.cn\/wp-json\/wp\/v2\/posts\/69369","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lrxjmw.cn\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lrxjmw.cn\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lrxjmw.cn\/wp-json\/wp\/v2\/users\/323"}],"replies":[{"embeddable":true,"href":"https:\/\/lrxjmw.cn\/wp-json\/wp\/v2\/comments?post=69369"}],"version-history":[{"count":4,"href":"https:\/\/lrxjmw.cn\/wp-json\/wp\/v2\/posts\/69369\/revisions"}],"predecessor-version":[{"id":99495,"href":"https:\/\/lrxjmw.cn\/wp-json\/wp\/v2\/posts\/69369\/revisions\/99495"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/lrxjmw.cn\/wp-json\/wp\/v2\/media\/99433"}],"wp:attachment":[{"href":"https:\/\/lrxjmw.cn\/wp-json\/wp\/v2\/media?parent=69369"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lrxjmw.cn\/wp-json\/wp\/v2\/categories?post=69369"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lrxjmw.cn\/wp-json\/wp\/v2\/tags?post=69369"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}