New Linux vulnerability could lead to user password leaks and clipboard hijacking

ReportMarch 29, 2024Editorial DepartmentVulnerabilities/Linux

Linux hacker

Details have emerged about a vulnerability affecting the “wall” command of the util-linux package, which could be exploited by bad actors to reveal user passwords or alter the clipboard on some Linux distributions.

This vulnerability is numbered CVE-2024-28085 and codenamed escape wall Presented by security researcher Skyler Ferrante. It is described as a situation where escape sequences are not properly neutralized.

“The util-linux wall command does not filter escape sequences from command-line arguments,” Ferrante said. “If mesg is set to “y” and wall is set to setgid, then an unprivileged user is allowed to place arbitrary text on other users’ terminals.”

The vulnerability was introduced as part of an August 2013 commit.

Internet security

The “wall” command is used to write a message to the terminals of all users currently logged into the server, essentially allowing users with elevated privileges to broadcast critical information (for example, a system shutdown) to all local users.

“wall displays messages, file contents, or standard input on all terminals of the currently logged-in user,” the man page for the Linux command reads. “Only superuser can reject messages on the terminals of users who have chosen to reject messages or who are using a program that automatically rejects messages. Write to the terminal.”

CVE-2024-28085 essentially exploits improperly sanitized escape sequences provided via command line arguments to trick users into creating fake SUDO prompts on other users’ terminals and tricking them into entering their passwords.

However, to implement this functionality, the mesg utility (which controls the ability to display messages from other users) must be set to “y” (ie enabled), and the wall command executed with setgid permissions.

CVE-2024-28085 affects Ubuntu 22.04 and Debian Bookworm because both conditions are met. CentOS, on the other hand, is not vulnerable because the wall command does not have setgid.

“On Ubuntu 22.04, we have enough control to default to leaking user passwords,” Ferrante said. “The only indication of an attack on the user is that when the user enters the password correctly, an incorrect password prompt appears and the password is in the command history.”

Likewise, on systems that allow wall messaging, an attacker could alter a user’s clipboard via escape sequences on selected terminals, such as Windows Terminal. It does not work with GNOME Terminal.

Users are recommended to update to util-linux version 2.40 to mitigate this flaw.

Internet security

“[CVE-2024-28085] According to the release notes, if mesg is set to y and *wall is set to setgid*, then unprivileged users are allowed to place arbitrary text on other users’ terminals. “Not all distributions will be affected (for example, CentOS, RHEL, Fedora will not; Ubuntu Debian wall’s setgid and mesg default to y).

The revelation comes as security researcher notselwyn details a use-after-free vulnerability in the netfilter subsystem in the Linux core that can be exploited to achieve local privilege escalation.

Assigned CVE identifier CVE-2024-1086 (CVSS score: 7.8), the root issue stems from a failure in input sanitization of netfilter decisions, which could allow a local attacker to cause a denial of service (DoS) condition or possibly execute arbitrary code. The issue was resolved in a commit pushed on January 24, 2024.

Did you find this article interesting?follow us Twitter and LinkedIn to read more exclusive content from us.



Source link



from Tech Empire Solutions https://techempiresolutions.com/new-linux-vulnerability-could-lead-to-user-password-leaks-and-clipboard-hijacking/
via https://techempiresolutions.com/

from Tech Empire Solutions https://techempiresolutions.blogspot.com/2024/03/new-linux-vulnerability-could-lead-to.html
via https://techempiresolutions.com/

Comments

Post a Comment

Popular posts from this blog

Perfecta grill uses AI to help cook steaks in 90 seconds

Image
CES is increasingly becoming a barbecue show, and companies are constantly looking for ways to bring more technology to your deck or patio. One company adding artificial intelligence technology to its spice racks is Seergerills, a British startup made up of engineers and product developers. Its flagship model, the Perfecta, can cook a one-inch-thick rib-eye steak in 90 seconds. Overall, the company says the grill looks more like a see-through countertop oven and cooks food about 10 times faster than traditional cooking methods. Inside, dual vertical infrared burners cook both sides simultaneously, which not only speeds up the process but also eliminates the need for flipping. Seergerills says the burner has a maximum temperature of 1,652 degrees Fahrenheit, and the unit even ensures crisp edges thanks to 360-degree heating. The built-in artificial intelligence chef calculates the appropriate cooking time and temperature based on the food, taking into account the desired degree of done
Read more

John Wick heads to Vegas to visit interactive attractions

Image
image: Lionsgate If you’ve ever wanted to fully immerse yourself in John Wick , Lionsgate has got you covered. Later this year, action series is becoming “immersive and interactive” tourist attractions In Las Vegas. Grace Byers on horror and comedy in ‘The Dark’ According to the press release, John Wick Experience Produced in collaboration with series director Chad Stahelski and his production company 87Eleven. The 12,000-square-foot exhibit at the city’s AREA15 campus lets visitors “experience high-stakes adventures and visit themed bars and retail stores open to the public.” Guests will be given specific tasks involving characters and images from the film. They’ll also rub shoulders with Continental employees, crime bosses, and other assassins who (presumably) don’t come into contact with Wick’s bad side at any point in the movie, all in an effort to gain access to private Continental areas and learn about the interesting secret. Jenefer Brown, exec
Read more

Ford prepares for next war, Waymo recalls its self-driving car software, another self-driving startup lays off employees

Image
TechCrunch Mobility is a weekly newsletter dedicated to all things transportation. Sign up here – just click TechCrunch Mobility – and get the newsletter in your inbox every weekend. Subscription is free. welcome back TechCrunch Mobile — A central hub for news and insights about the future of transportation.This week’s news includes BMW Security breach exposes sensitive information, federal agencies fight back against Tesla super bowl ad and a new federal investigation Fisker . But first, I want to talk about my recent visit to the law, where I met some people Ford Executives understand their priorities for 2024 and beyond. It can be said with certainty Chinese electric vehicle manufacturer and Tesla is the most important; in the view of Ford executives, low-cost electric vehicles and cutting-edge software are the best ways to stop these threats. The company’s recently revealed Skunk Works project for electric vehicles is tasked with this task. Ford Chief Financial Officer J
Read more