Re: Critical bash vulnerability CVE-2014-6271

[Michal Zalewski <lcamtuf () coredump cx>]

> Worse that heartbleed?

In what way? It doesn't have a logo, so it's a bit better in my book.

But seriously, yup, it's probably worse - it likely affects more sites
and trivially gives you remote shell.

I have written down some technical details about the issue and the
problems with all the patches so far:

http://lcamtuf.blogspot.com/2014/09/quick-notes-about-bash-bug-its-impact.html

Most of the technical discussions seem to be happening on oss-security@.

/mz

_______________________________________________
Sent through the Full Disclosure mailing list
http://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/