{"id":184060,"date":"2026-10-31T23:40:47","date_gmt":"2026-10-31T21:40:47","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/detali-vozmozhnoj-ataki-na-gnu-savannah-pozvolyavshej-skomprometirovat-repozitorii-bash-i-coreutils"},"modified":"2026-10-31T23:40:51","modified_gmt":"2026-10-31T21:40:51","slug":"details-of-a-potential-attack-on-gnu-savannah-that-could-have-compromised-bash-and-coreutils-repositories","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/news\/details-of-a-potential-attack-on-gnu-savannah-that-could-have-compromised-bash-and-coreutils-repositories","title":{"rendered":"Det detaljer om en potentiell attack mot GNU Savannah som gjorde det m\u00f6jligt att kompromettera Bash- och Coreutils-repositorier.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Hacktron har offentliggjort detaljer om en demonstrativ attack mot den friberedda k\u00e4llkodshostingtj\u00e4nsten GNU Savannah, som fortfarande anv\u00e4nds f\u00f6r att utveckla vissa verktyg inom GNU, inklusive Bash och Coreutils. Genom det genomf\u00f6rda experimentet lyckades forskarna k\u00f6ra kod p\u00e5 GNU Savannah-servern, f\u00e5 root-r\u00e4ttigheter, byta SSH-nycklar f\u00f6r Bash-ansvarig, identifiera m\u00f6jligheten att g\u00f6ra \u00e4ndringar i det prim\u00e4ra git-repositoriet f\u00f6r projektet Bash och f\u00e5 tillg\u00e5ng till servern med s\u00e4kerhetskopior.<\/p>\n

Den utf\u00f6rda testattacken och de identifierade problemen rapporterades omedelbart till administrat\u00f6rerna f\u00f6r GNU Savannah. Problemen \u00e5tg\u00e4rdades i maj. Sammanlagt identifierade forskarna 9 s\u00e5rbarheter, varav 2 ans\u00e5gs kritiska och 4 farliga. Den f\u00f6rsta kritiska s\u00e5rbarheten till\u00e4t att kringg\u00e5 autentiseringen vid tillg\u00e5ng till inst\u00e4llningar som endast \u00e4r tillg\u00e4ngliga f\u00f6r webbplatsens administrat\u00f6r (siteadmin\/triggercreation.php).<\/p>\n

Den andra kritiska s\u00e5rbarheten till\u00e4t k\u00f6rning av kod p\u00e5 servern<\/a> genom att ange en s\u00e4rskilt formaterad e-postadress. Problemet orsakades av avsaknaden av korrekt skydd av specialtecken och kunde utnyttjas genom att ange en registrerings-e-post av typen «a`touch${IFS}\\\/tmp\\\/savane-rce-proof`@example.com» med efterf\u00f6ljande klick i webbgr\u00e4nssnittet p\u00e5 knappen f\u00f6r att kontrollera GPG-nyckeln (e-posten anv\u00e4ndes i kommandoraden f\u00f6r verktyget gpg, som anropades via PHP-funktionen proc_open()). <\/p>\n

Genom att f\u00e5 kod att k\u00f6ras med r\u00e4ttigheter fr\u00e5n webbservern, hittade forskarna ett l\u00f6senord f\u00f6r databashanteraren i konfigurationsfilen och \u00e4ndrade \u00e5tkomstr\u00e4ttigheterna i databasen f\u00f6r sitt registrerade konto fr\u00e5n en icke-privilegierad anv\u00e4ndare till administrat\u00f6r. Administrat\u00f6rsbeh\u00f6righet i Savannahs webbgr\u00e4nssnitt gav m\u00f6jlighet att arbeta som vilken anv\u00e4ndare som helst utan att beh\u00f6va ange l\u00f6senord. Forskare utnyttjade denna m\u00f6jlighet, loggade in som Bash-projektets ansvarige och uppt\u00e4ckte m\u00f6jligheten att l\u00e4gga till sin egen SSH-nyckel f\u00f6r att ansluta till git-repositoriet. Om nyckeln lades till fanns det m\u00f6jlighet att skicka commits till Bash \u00e5 den ansvariges v\u00e4gnar.<\/p>\n

Root-r\u00e4ttigheterna p\u00e5 servern erh\u00f6lls genom att utnyttja en tidigare k\u00e4nd s\u00e5rbarhet i Linux-k\u00e4rnan, som inte var uppdaterad p\u00e5 servern (Trisquel GNU\/Linux 11 distribution var installerad baserat p\u00e5
\nUbuntu 22.04 med k\u00e4rnan linux-libre 5.15). F\u00f6r attacken anv\u00e4ndes en s\u00e5rbarhet i OverlayFS (CVE-2023-2640). Det \u00e4r anm\u00e4rkningsv\u00e4rt att l\u00f6sningen p\u00e5 s\u00e5rbarheten har funnits sedan 2023, men f\u00f6retaget Canonical \u00e5tg\u00e4rdade problemet f\u00f6rst i k\u00e4rnorna 5.19 och 6.2, och f\u00f6r k\u00e4rnan 5.15 sl\u00e4pptes en patch f\u00f6rst den 7 maj 2026. N\u00e4r forskarna fick root-r\u00e4ttigheter uppt\u00e4ckte de en SSH-nyckel i systemet f\u00f6r anv\u00e4ndaren «gnubackup», vilket gjorde det m\u00f6jligt att ansluta till v\u00e4rden med s\u00e4kerhetskopior utan l\u00f6senord.
\n
K\u00e4lla: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Hacktron \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 GNU Savannah, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 GNU, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Bash \u0438 Coreutils. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043f\u0440\u043e\u0432\u0435\u0434\u0451\u043d\u043d\u043e\u0433\u043e \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 GNU Savannah, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0430 \u043d\u0451\u043c \u043f\u0440\u0430\u0432\u0430 root, \u0437\u0430\u043c\u0435\u043d\u0438\u0442\u044c SSH-\u043a\u043b\u044e\u0447\u0438 \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0435\u0433\u043e Bash, \u0432\u044b\u044f\u0432\u0438\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 git-\u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Bash \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-184060","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Detaljer om den potentiella attacken mot GNU Savannah, vilket gjorde det m\u00f6jligt att kompromettera Bash- och Coreutils-repositorier | ProHoster","description":"F\u00f6retaget Hacktron avsl\u00f6jade detaljer om en demonstrationsattack mot hostingtj\u00e4nsten f\u00f6r fri kod, GNU Savannah, som fortfarande anv\u00e4nds f\u00f6r att utveckla vissa GNU-verktyg, inklusive Bash och Coreutils.","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/news\/details-of-a-potential-attack-on-gnu-savannah-that-could-have-compromised-bash-and-coreutils-repositories","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0414\u0435\u0442\u0430\u043b\u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 GNU Savannah, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0432\u0448\u0435\u0439 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 Bash \u0438 Coreutils | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Hacktron \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 GNU Savannah, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 GNU, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Bash \u0438 Coreutils.","og:url":"https:\/\/prohoster.info\/sv\/blog\/news\/details-of-a-potential-attack-on-gnu-savannah-that-could-have-compromised-bash-and-coreutils-repositories","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-10-31T21:40:47+00:00","article:modified_time":"2026-10-31T21:40:51+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/184060","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=184060"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/184060\/revisions"}],"predecessor-version":[{"id":184061,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/184060\/revisions\/184061"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=184060"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=184060"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=184060"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}