Bug#762923: dhclient-script uses bash, allowing remote bash exploits

2014-09-26 Thread Goswin von Brederlow
Package: isc-dhcp-client Version: 4.2.4-7 Severity: normal File: /sbin/dhclient-script Tags: security dhclient puts unchecked strings into environment variables for the dhclient-script and dhclient-script uses #!/bin/bash. This allows the recently found bash bugs to be exploited from remote.

Bug#762923: dhclient-script uses bash, allowing remote bash exploits

2014-09-26 Thread Yves-Alexis Perez
On Fri, Sep 26, 2014 at 12:47:39PM +0200, Goswin von Brederlow wrote: Package: isc-dhcp-client Version: 4.2.4-7 Severity: normal File: /sbin/dhclient-script Tags: security dhclient puts unchecked strings into environment variables for the dhclient-script and dhclient-script uses

Bug#762923: dhclient-script uses bash, allowing remote bash exploits

2014-09-26 Thread Goswin von Brederlow
On Fri, Sep 26, 2014 at 03:53:39PM +0200, Yves-Alexis Perez wrote: On Fri, Sep 26, 2014 at 12:47:39PM +0200, Goswin von Brederlow wrote: Package: isc-dhcp-client Version: 4.2.4-7 Severity: normal File: /sbin/dhclient-script Tags: security dhclient puts unchecked strings into

Bug#762923: dhclient-script uses bash, allowing remote bash exploits

2014-09-26 Thread Yves-Alexis Perez
On ven., 2014-09-26 at 18:06 +0200, Goswin von Brederlow wrote: Feel free to patch dhclient to sanitize the stgrings before passing them to the dhclient-script. In case you missed it, I'm not the dhcp maintainer, it's just my pov as security team member (remember you tagged the bug “security”).