{"id":3646,"date":"2012-08-20T14:24:25","date_gmt":"2012-08-20T14:24:25","guid":{"rendered":"http:\/\/megahost.ro\/blog\/?p=3646"},"modified":"2018-09-09T18:37:55","modified_gmt":"2018-09-09T18:37:55","slug":"o-noua-vulnerabilitate-in-joomla-user-priviledge-escalation","status":"publish","type":"post","link":"https:\/\/megahost.ro\/blog\/o-noua-vulnerabilitate-in-joomla-user-priviledge-escalation.html","title":{"rendered":"O noua vulnerabilitate in Joomla – user priviledge escalation"},"content":{"rendered":"

O noua vulnerabilitate<\/strong> sau mai degraba mod de exploatare se pare ca a fost descoperita in Joomla, in acest moment ea fiind discutata pe forumul Joomla ( http:\/\/forum.joomla.org\/viewtopic.php?f=621&t=737503<\/a> ).<\/p>\n

Cei de la Joomla, in special “Joomla! Security Strike Team” – cei care se ocupa de problemele de securitate ale CMS-ului, inca nu au o pozitie oficiala insa tot mai multi administratori de servere se confrunta cu probleme generate de aceasta vulnerabilitate din Joomla.<\/p>\n

In ce consta aceasta vulnerabilitate?<\/strong> Permite unui user simplu, inregistrat in Joomla, sa isi mareasca singur privilegiile, devenind astfel super-administrator, folosind actiuni de tip POST \/administrator\/index.php?option=com_templates&layout=edit si\/sau GET \/administrator\/index.php?option=com_templates&view=source&layout=edit<\/p>\n

Cum este folosita vulnerabilitatea ?<\/strong> Odata devenit super-administrator, de cele mai multe ori hackerul uploadeaza\/editeaza fisiere din directorul temei default (bluestork in cele mai multe cazuri) si folosind aceste fisiere lanseaza atacuri de tip DDOS catre alte tinte\/servere dedicate<\/a>\/siteuri.\u00a0In foarte multe cazuri, usernameul folosit de hacker a fost “alexaalexa”.<\/p>\n

Fisierele uploadate in folderul \/administrator\/templates\/bluestork\/ : – error.php – fisier care se pare ca este doar editat de catre hacker dupa ce a devenit administrator si folosit pentru uploadul a inca doua fisiere: stph.php si indx.php care sunt folosite pentru lansarea atacului DDOS si pentru oprirea unor servicii pe server<\/p>\n

Ce se poate face ?<\/strong> Singura solutie pana in acest moment la indemana celor care folosesc Joomla este upgradeul la ultima versiune stabila 2.5.6 cae se pare ca nu sufera de aceasta vulnerabilitate.
\nPentru celelalte versiuni pana in 2.5.6 cei de la Joomla nu au scos o solutie momentan.<\/p>\n

Toti cei care folosesc serviciile de web hosting de la megahost.ro<\/a> sunt rugati sa isi faca upgrade de urgenta la ultima versiune stabila de Joomla. Mentionam ca nu exista o metoda de prevenire\/oprire a acestei vulnerabilitati la nivel de server pentru ca ea rezida in motorul ce se afla in spatele Joomla, in interfata de administrare.<\/p>\n

Practic din punct de vedere strict al securitatii serverului, hackerul nu face nimic ilegal (brute-force, port scanning, etc) ci se inregistreaza pur si simplu legal. Problema este de obicei detectata cand incepe atacul DDoS.<\/p>\n","protected":false},"excerpt":{"rendered":"

O noua vulnerabilitate sau mai degraba mod de exploatare se pare ca a fost descoperita in Joomla, in acest moment ea fiind discutata pe forumul Joomla ( http:\/\/forum.joomla.org\/viewtopic.php?f=621&t=737503 ). <\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[20,5,184],"tags":[174,148,685,109,684,690,111],"class_list":["post-3646","post","type-post","status-publish","format-standard","hentry","category-hosting","category-securitate-online","category-server-dedicat","tag-cms","tag-ddos","tag-hosting","tag-joomla","tag-securitate-online","tag-server-dedicat","tag-vulnerabilitate"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"O noua vulnerabilitate in Joomla - user priviledge escalation | megahost.ro","description":"In ce consta vulnerabilitatea? Permite unui user simplu, inregistrat in Joomla, sa isi mareasca singur privilegiile, devenind astfel super-administrator.","canonical_url":"https:\/\/megahost.ro\/blog\/o-noua-vulnerabilitate-in-joomla-user-priviledge-escalation.html","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null},"aioseo_meta_data":{"post_id":"3646","title":"O noua vulnerabilitate in Joomla - user priviledge escalation | megahost.ro","description":"In ce consta vulnerabilitatea? Permite unui user simplu, inregistrat in Joomla, sa isi mareasca singur privilegiile, devenind astfel super-administrator.","keywords":[{"label":"Hosting","value":"Hosting"},{"label":"server dedicat","value":"server dedicat"},{"label":"Joomla","value":"Joomla"},{"label":"CMS","value":"CMS"},{"label":"securitate online","value":"securitate online"},{"label":"vulnerabilitate","value":"vulnerabilitate"},{"label":"DDOS","value":"DDOS"}],"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"location":null,"local_seo":null,"breadcrumb_settings":null,"limit_modified_date":false,"ai":null,"created":"2020-12-20 22:40:08","updated":"2025-06-04 02:14:45","seo_analyzer_scan_date":null,"focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"aioseo_breadcrumb":"

\n\t\t\tHome<\/a>\n\t\t<\/span>\u00bb<\/span>\n\t\t\tSecuritate Online<\/a>\n\t\t<\/span>\u00bb<\/span>\n\t\t\tO noua vulnerabilitate in Joomla \u2013 user priviledge escalation\n\t\t<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/megahost.ro\/blog\/"},{"label":"Securitate Online","link":"https:\/\/megahost.ro\/blog\/category\/securitate-online"},{"label":"O noua vulnerabilitate in Joomla – user priviledge escalation","link":"https:\/\/megahost.ro\/blog\/o-noua-vulnerabilitate-in-joomla-user-priviledge-escalation.html"}],"_links":{"self":[{"href":"https:\/\/megahost.ro\/blog\/wp-json\/wp\/v2\/posts\/3646","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/megahost.ro\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/megahost.ro\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/megahost.ro\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/megahost.ro\/blog\/wp-json\/wp\/v2\/comments?post=3646"}],"version-history":[{"count":0,"href":"https:\/\/megahost.ro\/blog\/wp-json\/wp\/v2\/posts\/3646\/revisions"}],"wp:attachment":[{"href":"https:\/\/megahost.ro\/blog\/wp-json\/wp\/v2\/media?parent=3646"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/megahost.ro\/blog\/wp-json\/wp\/v2\/categories?post=3646"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/megahost.ro\/blog\/wp-json\/wp\/v2\/tags?post=3646"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}