Re: [Haifux] The Bash vulnerability (shellshock)

2014-09-26 Thread Eli Billauer
Hi, I did # yum upgrade bash on Haifux' server, and it's off the hook. But I was also surprised that it the attack failed even before that. Eli On 26/09/14 12:39, guy keren wrote: On 09/26/2014 12:30 PM, Eli Billauer wrote: env x='() { :;}; echo vulnerable' bash -c 'echo This is a test

Re: [Haifux] The Bash vulnerability (shellshock)

2014-09-26 Thread Shachar Raindel
On Sep 26, 2014 12:49 PM, "guy keren" wrote: > > On 09/26/2014 12:30 PM, Eli Billauer wrote: >> >> env x='() { :;}; echo vulnerable' bash -c 'echo This is a test' > > > you're too late - there's a (partial?) fix being distributed around... > For your moment of optimism: http://istheinternetonfir

Re: [Haifux] The Bash vulnerability (shellshock)

2014-09-26 Thread guy keren
On 09/26/2014 12:30 PM, Eli Billauer wrote: env x='() { :;}; echo vulnerable' bash -c 'echo This is a test' you're too late - there's a (partial?) fix being distributed around... --guy ___ Haifux mailing list Haifux@haifux.org http://haifux.org/mailm

[Haifux] The Bash vulnerability (shellshock)

2014-09-26 Thread Eli Billauer
Hi everyone, Happy new year! To make it even merrier, it seems like a rather widespread vulnerability, based upon a bug in Bash (!) has been discovered: http://www.engadget.com/2014/09/25/what-is-the-shellshock/ Or for short, type this on your bash console and see if you're cooked: env x='()