oss-sec mailing list archives

Re: Shellshock timeline (was: CVE-2014-6271: remote code execution through bash)

From: "Kobrin, Eric" <ekobrin () akamai com>
Date: Fri, 3 Oct 2014 14:48:19 -0500

I've found the shellshock vulnerable code in archives claiming to contain bash 1.05, which also claim to be from 1990 
or 1989.
I was unable to find the source for anything claiming older than 1.05.

-- Eric Kobrin

Current thread:

Shellshock timeline (was: CVE-2014-6271: remote code execution through bash) David A. Wheeler (Oct 03)
- Re: Shellshock timeline (was: CVE-2014-6271: remote code execution through bash) Kobrin, Eric (Oct 03)
  - Re: Shellshock timeline (was: CVE-2014-6271: remote code execution through bash) Stephane Chazelas (Oct 03)
    - Re: Shellshock timeline (was: CVE-2014-6271: remote code execution through bash) Kobrin, Eric (Oct 03)
    - Re: Shellshock timeline (was: CVE-2014-6271: remote code execution through bash) Riot (Oct 03)
    - Re: Shellshock timeline (was: CVE-2014-6271: remote code execution through bash) Riot (Oct 03)
    - Re: Shellshock timeline (was: CVE-2014-6271: remote code execution through bash) Stephane Chazelas (Oct 04)
    - Re: Shellshock timeline (was: CVE-2014-6271: remote code execution through bash) Hanno Böck (Oct 04)
    - Re: Shellshock timeline (was: CVE-2014-6271: remote code execution through bash) Steve Jones (Oct 04)
    - Re: Shellshock timeline (was: CVE-2014-6271: remote code execution through bash) Lance Davis (Oct 04)
    - Re: Shellshock timeline (was: CVE-2014-6271: remote code execution through bash) David A. Wheeler (Oct 05)
    - Re: Shellshock timeline (was: CVE-2014-6271: remote code execution through bash) Eric Blake (Oct 06)

(Thread continues...)