Securing Internet-Critical Software: How We Could Have Backdoored Bash
Summary
The article details a shell injection vulnerability in GNU Savannah's Savane hosting Bash, which allowed code execution and root access via a crafted email address. It describes the exploit chain from RCE to Bash maintainer access, the resulting root and backup server access, and the 26 vulnerabilities found during further auditing. It highlights the importance of secure input validation, patching, and disclosure timelines in critical software supply chains.