Full Disclosure mailing list archives
Re: bash vulnerability?
From: Rik Bobbaers <Rik.Bobbaers () cc kuleuven be>
Date: Tue, 16 Aug 2005 15:56:54 +0200
On Tuesday 16 August 2005 15:42, Boris Jordanov / Борис Йорданов wrote:
Jay wrote: ...the machine froze instantly but eventually, after a minute or so I was able to ^CSame here:
like i said: <quote> anyway, if you compile this and run it in background, it will all die pretty fast. (to make it even harder, make your own signal handlers!(okay, SIGKILL will still work, but it will be harder to kill :)) </quote> so ctrl-c is just a SIGINT... you can make the program ignore that signal, i don't want to start doing that in asm (because its just a poc) but just change the pointer to the signal handler to rewrite the pointer to a return statement or something... i think SIGKILL is the only signal you can't mask/adapt, unless you're root (where you can, with some strange actions) get this to run in an uninterruptible state and so on... blabla, yadda yadda, off topic and totally irrelevant. you want to talk about it some more... not on this list, but in private :) -- harry aka Rik Bobbaers K.U.Leuven - LUDIT -=- Tel: +32 485 52 71 50 Rik.Bobbaers () cc kuleuven be -=- http://harry.ulyssis.org Disclaimer: By sending an email to ANY of my addresses you are agreeing that: 1. I am by definition, "the intended recipient" 2. All information in the email is mine to do with as I see fit and make such financial profit, political mileage, or good joke as it lends itself to. In particular, I may quote it on usenet. 3. I may take the contents as representing the views of your company. 4. This overrides any disclaimer or statement of confidentiality that may be included on your message. _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Re: bash vulnerability?, (continued)
- Re: bash vulnerability? Matija Vidmar (Aug 13)
- Re: bash vulnerability? Andre' Breiler (Aug 13)
- Re: bash vulnerability? fd (Aug 14)
- Re: bash vulnerability? Milan 't4c' Berger (Aug 13)
- Re: bash vulnerability? starwars (Aug 14)
- RE: bash vulnerability? Jay (Aug 15)
- Re: bash vulnerability? Rik Bobbaers (Aug 16)
- Re: bash vulnerability? Jay (Aug 16)
- Re: bash vulnerability? Boris Jordanov / Борис Йорданов (Aug 16)
- Re: bash vulnerability? luke (Aug 16)
- Re: bash vulnerability? Rik Bobbaers (Aug 16)
- Re: bash vulnerability? Graham Reed (Aug 16)
- Re: bash vulnerability? nocfed (Aug 18)
- Re: bash vulnerability? nocfed (Aug 18)
- Re: bash vulnerability? Rik Bobbaers (Aug 16)
- Re: Re: Bash vulnerability? Gilles DEMARTY (Aug 26)
- Re: Re: Bash vulnerability? Octal (Aug 26)
- Re: Re: Bash vulnerability? Aaron J. Bedra (Aug 26)
- Re: Re: Bash vulnerability? Valdis . Kletnieks (Aug 26)