oss-sec mailing list archives

Re: Shellshock timeline (was: CVE-2014-6271: remote code execution through bash)

From: Lance Davis <lancex3 () gmail com>
Date: Sat, 4 Oct 2014 21:31:00 +0100

On Sat, Oct 4, 2014 at 12:19 AM, Riot <rain.backnet () gmail com> wrote:


If anyone has a way of contacting Brian Fox, he might just have an old
archive of ancient versions of bash banging around which could put the
question to rest once and for all - at which point exactly was shellshock
introduced.



https://www.linkedin.com/pub/brian-fox/0/74/480

Regards
Lance

Current thread:

Shellshock timeline (was: CVE-2014-6271: remote code execution through bash) David A. Wheeler (Oct 03)
- Re: Shellshock timeline (was: CVE-2014-6271: remote code execution through bash) Kobrin, Eric (Oct 03)
  - Re: Shellshock timeline (was: CVE-2014-6271: remote code execution through bash) Stephane Chazelas (Oct 03)
    - Re: Shellshock timeline (was: CVE-2014-6271: remote code execution through bash) Kobrin, Eric (Oct 03)
    - Re: Shellshock timeline (was: CVE-2014-6271: remote code execution through bash) Riot (Oct 03)
    - Re: Shellshock timeline (was: CVE-2014-6271: remote code execution through bash) Riot (Oct 03)
    - Re: Shellshock timeline (was: CVE-2014-6271: remote code execution through bash) Stephane Chazelas (Oct 04)
    - Re: Shellshock timeline (was: CVE-2014-6271: remote code execution through bash) Hanno Böck (Oct 04)
    - Re: Shellshock timeline (was: CVE-2014-6271: remote code execution through bash) Steve Jones (Oct 04)
    - Re: Shellshock timeline (was: CVE-2014-6271: remote code execution through bash) Lance Davis (Oct 04)
    - Re: Shellshock timeline (was: CVE-2014-6271: remote code execution through bash) David A. Wheeler (Oct 05)
    - Re: Shellshock timeline (was: CVE-2014-6271: remote code execution through bash) Eric Blake (Oct 06)
- Re: Shellshock timeline Stephane Chazelas (Oct 03)
  - Re: Shellshock timeline Stephane Chazelas (Oct 03)
    - Stéphane Chazelas: How *DID* you find Shellshock? David A. Wheeler (Oct 08)
    - Re: Stéphane Chazelas: How *DID* you find Shellshock? stephane.chazelas (Oct 08)
- Re: Shellshock timeline (was: CVE-2014-6271: remote code execution through bash) Eric Blake (Oct 03)
  - Re: Shellshock timeline Eric Blake (Oct 03)
- <Possible follow-ups>
- Re: Shellshock timeline (was: CVE-2014-6271: remote code execution through bash) Riot (Oct 04)