-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 2014-09-25 11:17 GMT-03:00 ciracusa : > Hola Lista, > > Alguien leyo algo de esta vulnerabilidad en BASH: > > env x='() { :;}; echo vulnerable' bash -c "echo this is a test" > > Muchas Gracias. > > Salu2. >
Acá el PoC de la vulnerabilidad [1] [1] http://blog.segu-info.com.ar/2014/09/grave-vulnerabilidad-en-bash-y-otros.html -----BEGIN PGP SIGNATURE----- Version: OpenPGP.js v0.5.1 Comment: http://openpgpjs.org wsBcBAEBCAAQBQJUJCtdCRDP17wMFuiP8AAAzHEH/0at+acGXVr9iJq2aC4y RbUibML7UZ06WhplhhIL/8+hREWjnl7GyB+jR5xV9rfmAeGMIXfTffbEtzEh winp+Cb57d8NXtibiPBEx5NcCezjdfi1p7ATShNHhlMmZUGemq3B53iFbs+f QmYJH8VP1y9I6jxWXMykpKGEqfQn98NzwLl3Kz5ki2gsr7D9Jr9STD60W+E0 vUADm+lMBO77tvuqSfvzVpA2p230vruq9tfGlC8UIDWkaYUcWrTJp0T1q1qY B/ecB44Xu+8sGcz9HZXe7tNXF/T4D9lyloTjTyruQLzrCBhRPuHfr0RNxRCL YHKBVuvuOtj7gJe3gdRqMFo= =UWEC -----END PGP SIGNATURE----- -- To UNSUBSCRIBE, email to debian-user-spanish-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/ca+wixxgwuwogmtpqazwv-vnms+0ybczusn+ti2jdqhwj2u2...@mail.gmail.com