Re: [Haifux] The Bash vulnerability (shellshock)

2014-09-26 Thread guy keren 

On 09/26/2014 12:30 PM, Eli Billauer wrote:

env x='() { :;}; echo vulnerable' bash -c 'echo This is a test'


you're too late - there's a (partial?) fix being distributed around...

--guy
___
Haifux mailing list
Haifux@haifux.org
http://haifux.org/mailman/listinfo/haifux

Re: [Haifux] The Bash vulnerability (shellshock)

2014-09-26 Thread Shachar Raindel 
On Sep 26, 2014 12:49 PM, guy keren guy.choo.ke...@gmail.com wrote:

 On 09/26/2014 12:30 PM, Eli Billauer wrote:

 env x='() { :;}; echo vulnerable' bash -c 'echo This is a test'


 you're too late - there's a (partial?) fix being distributed around...


For your moment of optimism:

http://istheinternetonfire.com

We haven't had this much fun since the sendmail days...

--Shachar
___
Haifux mailing list
Haifux@haifux.org
http://haifux.org/mailman/listinfo/haifux

Re: [Haifux] The Bash vulnerability (shellshock)

2014-09-26 Thread Eli Billauer 

Hi,

I did

# yum upgrade bash

on Haifux' server, and it's off the hook. But I was also surprised that 
it the attack failed even before that.


   Eli

On 26/09/14 12:39, guy keren wrote:

On 09/26/2014 12:30 PM, Eli Billauer wrote:

env x='() { :;}; echo vulnerable' bash -c 'echo This is a test'


you're too late - there's a (partial?) fix being distributed around...

--guy
___
Haifux mailing list
Haifux@haifux.org
http://haifux.org/mailman/listinfo/haifux




--
Web: http://www.billauer.co.il

___
Haifux mailing list
Haifux@haifux.org
http://haifux.org/mailman/listinfo/haifux