Re: [Haifux] The Bash vulnerability (shellshock)

2014-09-26 Thread guy keren
On 09/26/2014 12:30 PM, Eli Billauer wrote: env x='() { :;}; echo vulnerable' bash -c 'echo This is a test' you're too late - there's a (partial?) fix being distributed around... --guy ___ Haifux mailing list Haifux@haifux.org

Re: [Haifux] The Bash vulnerability (shellshock)

2014-09-26 Thread Shachar Raindel
On Sep 26, 2014 12:49 PM, guy keren guy.choo.ke...@gmail.com wrote: On 09/26/2014 12:30 PM, Eli Billauer wrote: env x='() { :;}; echo vulnerable' bash -c 'echo This is a test' you're too late - there's a (partial?) fix being distributed around... For your moment of optimism:

Re: [Haifux] The Bash vulnerability (shellshock)

2014-09-26 Thread Eli Billauer
Hi, I did # yum upgrade bash on Haifux' server, and it's off the hook. But I was also surprised that it the attack failed even before that. Eli On 26/09/14 12:39, guy keren wrote: On 09/26/2014 12:30 PM, Eli Billauer wrote: env x='() { :;}; echo vulnerable' bash -c 'echo This is a