{"id":184060,"date":"2026-10-31T23:40:47","date_gmt":"2026-10-31T21:40:47","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/detali-vozmozhnoj-ataki-na-gnu-savannah-pozvolyavshej-skomprometirovat-repozitorii-bash-i-coreutils"},"modified":"2026-10-31T23:40:51","modified_gmt":"2026-10-31T21:40:51","slug":"details-of-a-potential-attack-on-gnu-savannah-that-could-have-compromised-bash-and-coreutils-repositories","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/details-of-a-potential-attack-on-gnu-savannah-that-could-have-compromised-bash-and-coreutils-repositories","title":{"rendered":"GNU Savannahi v\u00f5imaliku r\u00fcnnaku \u00fcksikasjad, mis v\u00f5imaldas Bash ja Coreutils hoidlaid kompromiteerida","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Hacktron avaldas \u00fcksikasjad demonstratsiooni r\u00fcnnaku kohta GNU Savannahi avatud koodiga hostimisele, mida kasutatakse j\u00e4tkuvalt mitmete GNU t\u00f6\u00f6riistade arendamiseks, sealhulgas Bash ja Coreutils. Eksperimendi k\u00e4igus \u00f5nnestus kood k\u00e4ivitada GNU Savannahi serveris, saada serveris juur\u00f5igused, asendada Bashi hooldaja SSH-v\u00f5tmed, tuvastada v\u00f5imalus muuta Bash projekti p\u00f5higit-repositooriumi ja p\u00e4\u00e4seda varukoopiate serverisse.<\/p>\n

Testir\u00fcnnakust ja tuvastatud probleemidest teatati kohe GNU Savannahi administraatoritele. Probleemid fikseeriti maikuus. Uuringutega tuvastati kokku 9 haavatavust, millest 2 tunnistati kriitilisteks ja 4 ohtlikeks. Esimene kriitiline haavatavus v\u00f5imaldas m\u00f6\u00f6duda autentimisest, kui juurdep\u00e4\u00e4suks olid saidihalduri (siteadmin\/triggercreation.php) seaded.<\/p>\n

Teine kriitiline haavatavus v\u00f5imaldas koodi t\u00e4itmist serveris<\/a> t\u00e4psustatud e-posti aadressi n\u00e4itamise kaudu. Probleem oli tingitud eris\u00fcmbolite vale ekraanistamisest ja seda v\u00f5idi \u00e4ra kasutada, kui registreerimise k\u00e4igus n\u00e4idati e-posti aadressi vormis «a`touch${IFS}\\\/tmp\\\/savane-rce-proof`@example.com», millele j\u00e4rgnes GPG-v\u00f5tme kontrollimise nupp web-liideses (e-posti aadress lisati utiliidi gpg k\u00e4ivitamisreal, mida kutsuti esile PHP-funktsiooni proc_open() kaudu). <\/p>\n

Kuna uurijad saavutasid koodi t\u00e4itmise veebiserveri \u00f5igustega, leidsid nad andmebaasi konfiguratsioonifailist juurdep\u00e4\u00e4su parooli ja muutsid oma registreeritud konto juurdep\u00e4\u00e4su\u00f5igusi andmebaasis privileegitud kasutajaks. Savannahi veebiliidese administraatori \u00f5igused v\u00f5imaldasid t\u00f6\u00f6tada mis tahes kasutajana ilma parooli sisestamata. Uurijad kasutasid seda v\u00f5imalust, sisenedes Bash projekti hooldaja nime all, ja leidsid v\u00f5imaluse lisada oma SSH-v\u00f5ti git-repositooriumisse \u00fchendamiseks. Kui v\u00f5ti lisati, tekkis v\u00f5imalus saata komiteerimisi Bash'i hooldaja nime all.<\/p>\n

Juur\u00f5igused serveris saadi eelnevalt teadaoleva haavatavuse kaudu Linuxi tuumas, mis polnud serveris uuendatud (serveris oli installitud Trisquel GNU\/Linux 11 jaotust).
\nUbuntu 22.04 koos tuumaga linux-libre 5.15). R\u00fcnnakus kasutati haavatavust OverlayFS-is (CVE-2023-2640). Tulemuseks oli see, et haavatavuse parandamine oli saadaval alates 2023. aastast, kuid Canonical lahendas probleemi kiiresti ainult tuumades 5.19 ja 6.2, samas kui tuuma 5.15 puhul vabastati patch alles 7. mail 2026. Aste on saadud root \u00f5igused, leidsid uurijad s\u00fcsteemist kasutaja «gnubackup» SSH v\u00f5tme, mis v\u00f5imaldas paroolita \u00fchendust teko rahakottidega.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Hacktron \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 GNU Savannah, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 GNU, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Bash \u0438 Coreutils. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043f\u0440\u043e\u0432\u0435\u0434\u0451\u043d\u043d\u043e\u0433\u043e \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 GNU Savannah, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0430 \u043d\u0451\u043c \u043f\u0440\u0430\u0432\u0430 root, \u0437\u0430\u043c\u0435\u043d\u0438\u0442\u044c SSH-\u043a\u043b\u044e\u0447\u0438 \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0435\u0433\u043e Bash, \u0432\u044b\u044f\u0432\u0438\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 git-\u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Bash \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-184060","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Detailid v\u00f5imalikust GNUs Savannah r\u00fcnnakust, mis v\u00f5imaldas komprimeerida Bash ja Coreutils repositooriaid | ProHoster","description":"Ettev\u00f5te Hacktron avalikustas \u00fcksikasjad demonstreerivast r\u00fcnnakust GNU Savannah avatud l\u00e4htekoodiga hostimisele, mida j\u00e4tkuvalt kasutatakse m\u00f5nede GNU t\u00f6\u00f6riistade, sealhulgas Bash ja Coreutils, arendamiseks.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/details-of-a-potential-attack-on-gnu-savannah-that-could-have-compromised-bash-and-coreutils-repositories","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0414\u0435\u0442\u0430\u043b\u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 GNU Savannah, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0432\u0448\u0435\u0439 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 Bash \u0438 Coreutils | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Hacktron \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 GNU Savannah, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 GNU, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Bash \u0438 Coreutils.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/details-of-a-potential-attack-on-gnu-savannah-that-could-have-compromised-bash-and-coreutils-repositories","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-10-31T21:40:47+00:00","article:modified_time":"2026-10-31T21:40:51+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/184060","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=184060"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/184060\/revisions"}],"predecessor-version":[{"id":184061,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/184060\/revisions\/184061"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=184060"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=184060"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=184060"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}