Re: Ghost vulnerability

2015-02-03 Thread Steven D'Aprano
Anssi Saari wrote: Steven D'Aprano steve+comp.lang.pyt...@pearwood.info writes: Here's the one-liner: python -c 'import socket;y=0*5000;socket.gethostbyname(y)' I think it is likely that y=0*5000 would segfault due to lack of memory on many machines. I wouldn't trust this as a

Re: Ghost vulnerability

2015-02-03 Thread Steven D'Aprano
Anssi Saari wrote: Rustom Mody rustompm...@gmail.com writes: How many people (actually machines) out here are vulnerable? http://security.stackexchange.com/questions/80210/ghost-bug-is-there-a-simple-way-to-test-if-my-system-is-secure shows a python 1-liner to check Does that check

Re: Ghost vulnerability

2015-02-03 Thread Chris Angelico
On Wed, Feb 4, 2015 at 6:38 AM, Anssi Saari a...@sci.fi wrote: Anyways, here's an example calling gethostbyname directly in python: from ctypes import CDLL o = CDLL('libc.so.6') for i in range(0, 2500): o.gethostbyname('0'*i) I don't have a vulnerable system to test on any more though.

Re: Ghost vulnerability

2015-02-03 Thread Marc Aymerich
On Tue, Feb 3, 2015 at 4:53 AM, Rustom Mody rustompm...@gmail.com wrote: How many people (actually machines) out here are vulnerable? http://security.stackexchange.com/questions/80210/ghost-bug-is-there-a-simple-way-to-test-if-my-system-is-secure shows a python 1-liner to check --

Re: Ghost vulnerability

2015-02-03 Thread Michael Torrie
On 02/03/2015 04:19 AM, Steven D'Aprano wrote: Anssi Saari wrote: Rustom Mody rustompm...@gmail.com writes: How many people (actually machines) out here are vulnerable? http://security.stackexchange.com/questions/80210/ghost-bug-is-there-a-simple-way-to-test-if-my-system-is-secure shows

Re: Ghost vulnerability

2015-02-03 Thread Anssi Saari
Steven D'Aprano steve+comp.lang.pyt...@pearwood.info writes: Here's the one-liner: python -c 'import socket;y=0*5000;socket.gethostbyname(y)' I think it is likely that y=0*5000 would segfault due to lack of memory on many machines. I wouldn't trust this as a test. Hmm, how much

Re: Ghost vulnerability

2015-02-03 Thread Anssi Saari
Rustom Mody rustompm...@gmail.com writes: How many people (actually machines) out here are vulnerable? http://security.stackexchange.com/questions/80210/ghost-bug-is-there-a-simple-way-to-test-if-my-system-is-secure shows a python 1-liner to check Does that check actually work for anyone?

Re: Ghost vulnerability

2015-02-02 Thread Chris Angelico
On Tue, Feb 3, 2015 at 2:53 PM, Rustom Mody rustompm...@gmail.com wrote: How many people (actually machines) out here are vulnerable? http://security.stackexchange.com/questions/80210/ghost-bug-is-there-a-simple-way-to-test-if-my-system-is-secure shows a python 1-liner to check Well, I have

Ghost vulnerability

2015-02-02 Thread Rustom Mody
How many people (actually machines) out here are vulnerable? http://security.stackexchange.com/questions/80210/ghost-bug-is-there-a-simple-way-to-test-if-my-system-is-secure shows a python 1-liner to check -- https://mail.python.org/mailman/listinfo/python-list