Re: bash vulnerability?

["Graham Reed" <greed () pobox com>]

Rik Bobbaers writes: 

> so ctrl-c is just a SIGINT... you can make the program ignore that signal, i 
> don't want to start doing that in asm (because its just a poc) but just 
> change the pointer to the signal handler to rewrite the pointer to a return 
> statement or something... 

Set SIGINT's sa_handler to SIG_IGN.  No need to make an actual handler. 

But, Linux seems to be particularly susceptible to fork-bombs.  Other 
systems (AIX, Solaris, BSD) I have accidentally (and later deliberately) 
fork-bombed have been easier to recover from console ^C.  Linux tends to 
lose keyboard processing completely, so you can't get a ^C in edgewise.  (At 
least, based on various Red Hats.) 

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/