oss-sec mailing list archives

Shellshock timeline (was: CVE-2014-6271: remote code execution through bash)

From: "David A. Wheeler" <dwheeler () dwheeler com>
Date: Fri, 03 Oct 2014 15:28:31 -0400 (EDT)

FYI, I've created a timeline of major Shellshock events here:

  http://www.dwheeler.com/essays/shellshock.html#timeline

If anyone has corrections or key additions, let me know.

I hope to eventually document "how to detect or prevent something like it in the future" as part of the same paper, but 
that is unfortunately a harder task :-(.

--- David A. Wheeler

Current thread:

Shellshock timeline (was: CVE-2014-6271: remote code execution through bash) David A. Wheeler (Oct 03)
- Re: Shellshock timeline (was: CVE-2014-6271: remote code execution through bash) Kobrin, Eric (Oct 03)
  - Re: Shellshock timeline (was: CVE-2014-6271: remote code execution through bash) Stephane Chazelas (Oct 03)
    - Re: Shellshock timeline (was: CVE-2014-6271: remote code execution through bash) Kobrin, Eric (Oct 03)
    - Re: Shellshock timeline (was: CVE-2014-6271: remote code execution through bash) Riot (Oct 03)
    - Re: Shellshock timeline (was: CVE-2014-6271: remote code execution through bash) Riot (Oct 03)
    - Re: Shellshock timeline (was: CVE-2014-6271: remote code execution through bash) Stephane Chazelas (Oct 04)
    - Re: Shellshock timeline (was: CVE-2014-6271: remote code execution through bash) Hanno Böck (Oct 04)
    - Re: Shellshock timeline (was: CVE-2014-6271: remote code execution through bash) Steve Jones (Oct 04)
    - Re: Shellshock timeline (was: CVE-2014-6271: remote code execution through bash) Lance Davis (Oct 04)
    - Re: Shellshock timeline (was: CVE-2014-6271: remote code execution through bash) David A. Wheeler (Oct 05)

(Thread continues...)