oss-sec mailing list archives

Re: more bash parser bugs (CVE-2014-6277, CVE-2014-6278)

From: Ed Prevost <me () edwardprevost info>
Date: Wed, 01 Oct 2014 21:42:47 -0700

On 10/1/2014 8:00 PM, Michal Zalewski wrote:

What else could I say? A POC already released and a bunch of
customer's machines are waiting...

You should install Florian's patch / bash43-027.

/mz

+10

Current thread:

Re: more bash parser bugs (CVE-2014-6277, CVE-2014-6278), (continued)
- - Re: more bash parser bugs (CVE-2014-6277, CVE-2014-6278) Chet Ramey (Oct 01)
    - Re: more bash parser bugs (CVE-2014-6277, CVE-2014-6278) Shawn (Oct 01)
    - Re: more bash parser bugs (CVE-2014-6277, CVE-2014-6278) Ed Prevost (Oct 01)
    - Re: more bash parser bugs (CVE-2014-6277, CVE-2014-6278) Zach Wikholm (Oct 01)
    - RE: more bash parser bugs (CVE-2014-6277, CVE-2014-6278) Henry, Bobby (Oct 01)
    - Re: more bash parser bugs (CVE-2014-6277, CVE-2014-6278) Chet Ramey (Oct 01)
    - Re: more bash parser bugs (CVE-2014-6277, CVE-2014-6278) Ed Prevost (Oct 01)
    - Re: more bash parser bugs (CVE-2014-6277, CVE-2014-6278) Shawn (Oct 01)
    - Re: more bash parser bugs (CVE-2014-6277, CVE-2014-6278) Michal Zalewski (Oct 01)
    - Re: more bash parser bugs (CVE-2014-6277, CVE-2014-6278) Shawn (Oct 01)
    - Re: more bash parser bugs (CVE-2014-6277, CVE-2014-6278) Ed Prevost (Oct 01)
    - Re: more bash parser bugs (CVE-2014-6277, CVE-2014-6278) Chet Ramey (Oct 02)
    - Re: more bash parser bugs (CVE-2014-6277, CVE-2014-6278) Chet Ramey (Oct 01)
    - RE: more bash parser bugs (CVE-2014-6277, CVE-2014-6278) Sona Sarmadi (Oct 01)
    - Re: more bash parser bugs (CVE-2014-6277, CVE-2014-6278) Solar Designer (Oct 02)
    - Re: more bash parser bugs (CVE-2014-6277, CVE-2014-6278) Chet Ramey (Oct 02)
    - RE: more bash parser bugs (CVE-2014-6277, CVE-2014-6278) Menkhus, Mark (Global Cyber Security SSRT) (Oct 02)
    - RE: more bash parser bugs (CVE-2014-6277, CVE-2014-6278) Sona Sarmadi (Oct 02)
    - RE: more bash parser bugs (CVE-2014-6277, CVE-2014-6278) Menkhus, Mark (Global Cyber Security SSRT) (Oct 02)
    - Re: more bash parser bugs (CVE-2014-6277, CVE-2014-6278) Michal Zalewski (Oct 02)
    - RE: more bash parser bugs (CVE-2014-6277, CVE-2014-6278) Sona Sarmadi (Oct 02)

(Thread continues...)