Un mushumo wepamutemo de Symantec wekupedzisira 26 Mbudzi, yambiro yekuvapo kweutachiona hutsva, yakabhabhatidzwa se linux darlioz, iyo inogona kukanganisa akasiyana makomputa, kushandisa kushushikana "php-cgi" (CVE-2012-1823) iripo mu PHP 5.4.3 ne5.3.13.
Uku kunetseka kunokanganisa dzimwe shanduro dzekugoverwa kwe GNU / Linux seUbuntu, TurboLinux, SuSE, Red Hat, Mandriva, Debian nevamwe, pamwe neMac OS X 10.7.1 kusvika 10.7.4, uye Mac OS X Server 10.6.8 kusvika 10.7.3.
Kunyangwe uku kunetseka mu PHP yakaonekwa nekugadziriswa kubva muna Chivabvu 2012, makomputa mazhinji achiri echinyakare uye anoshandisa shanduro dzekare dze PHP, zvichikonzera tarisiro ingangoita yehutachiona hukuru.
Maitiro ehutachiona, sezvakatsanangurwa mu chinyorwa de PCWorld, inotevera:
Paunenge waurayiwa, honye inongo gadzira IP kero, ichiwana imwe nzira pamushini ine ID inozivikanwa nepassword, uye inotumira zvikumbiro zveHTTP POST, izvo zvinoshandisa kushomeka. Kana kushomeka kwacho kusati kwagadziriswa pane chakanangwa, honye inotorwa kubva kuseva yakaipa ndokutanga kutsvaga chinangwa chitsva.
Maererano ne yakatumirwa pane yako blog kubudikidza Kaoru hayashi, mutsvakurudzi we Symantec, iri honye nyowani inoita kunge yakagadzirirwa kutapurira, kuwedzera kune echinyakare makomputa, akasiyana siyana macomputer akabatanidzwa kunetiweki, senge ma routers, set-top mabhokisi, ekuchengetedza makamera, nezvimwe, zvinoshanda pamhando dzakasiyana dze GNU / Linux.
Kunyange zvakadaro Symantec inoongorora huwandu hwehutachiwana hwehutachiona uhwu se "hwakanyanya kwazvo" uye huwandu hwekuparadzirwa nekutyisidzirwa se "pasi" uye hunotarisa hudzamu hwayo nekubvisa "zviri nyore", pachokwadi njodzi ingangoita iyo inomiririra yakawedzerwa zvakanyanya kana tichifunga nezve kuwedzera kwakakura uko kunonzi "internet yezvinhu" kwave kunyoresa munguva dzichangopfuura.
Imwezve nguva zvinoenderana ne Symantec, parizvino kupararira kwehonye kunoitika chete pakati peX86 masystem kubvira pakadzvanywa bhanari iri mu Elf (Inogadziriswa uye Inosanganisika Fomati) yekuvaka Intel, asi vaongorori vanoratidza kuti iwo maseva anogamuchirawo akasiyana ezvivakwa ruoko, PPC, MIPI y MIPSEL, iri kunyanya maererano nekupihwa kwakanyanya kugona kwemidziyo ine aya maumbirwo anogona kutapukirwa.
Zvinonyatso kuzivikanwa kuti iyo firmware yakadzika mumidziyo yakawanda yakavakirwa pa GNU / Linux uye kazhinji inosanganisira sevha yewebhu ine PHP yeiyo interface ye admin.
Izvi zvinoreva njodzi inogona kuve yakakura kwazvo kupfuura iya yemakomputa nekuparadzirwa kwese kwe GNU / Linux, sezvo kusiyana neyekupedzisira, havawanzogamuchira zvidziviriro zvekuchengetedza zvinodiwa kugadzirisa kusagadzikana kwakaonekwa, kwazvinowedzerwa kuti kuitisa firmware kugadzirisa imwe nhanho yeruzivo rwehunyanzvi inodiwa, izvo zvakanaka chikamu chevaridzi vemidziyo yakadaro.
ari mazano ekudzivirira hutachiona nehonye iyi zviri nyore. chengetedza masisitimu edu akagadziridzwa ine yakaburitswa ekuchengetedza zvigamba uye zvakanyanyisa zvepakutanga matanho ekuchengetedza nemidziyo yakabatana kunetiweki, senge chinja default IP kero, zita rekushandisa uye password y chengeta firmware yakagadziridzwa, kungave neaya akaburitswa nemugadziri, kana neakaenzana emahara anowanikwa kubva kunzvimbo dzinozivikanwa.
Izvo zvinokurudzirwawo kudzivirira zvinouya POST zvikumbiro pamwe nechero imwe mhando yeHTTPS kufona, pese pazvinogoneka.
Kune rimwe divi, kubva zvino zvichienda mberi zvinokurudzirwa kuti zviongorore kana uchiongorora kuwanikwa kwechinhu chipi zvacho chitsva, iko nyore kwekuvandudza iyo firmware uye nerutsigiro rurefu-rwunopihwa nemugadziri.
Parizvino, ini ndiri kuvandudza iyo firmware yeNetgear router yangu, iyo kwenguva yakareba yaive pachinyorwa chemabasa akamirira, kuti zvisazadzikiswe izvo "kumba kwemupfuri ..."
Ongorora: Iyo yakadzama runyorwa rwekugovera kwe GNU / Linux izvo pakutanga zvine kukuvadzwa kwe PHP kushandiswa nehutachiona uhwu kunowanikwa mune zvinotevera batanidzo.