[FUG-BR] Falha no BASH (possível exploração remota)

[Elizandro Pacheco]

Sim, e o único servidor que estava vulnerável corrigido.

Elizandro Pacheco

On 25-09-2014 10:01, MrBiTs wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
>
> On 09/25/2014 09:45 AM, Welkson Renny de Medeiros wrote:
>> Dia.
>>
>> Já testaram?
>>
>> welkson em fw ~ % env x='() { :;}; echo vulnerable'  bash -c "echo this is a test" vulnerable this is a test
>>
>> Mais detalhes: http://portaudit.freebsd.org/71ad81da-4414-11e4-a33e-3c970e169bc2.html
>> https://access.redhat.com/articles/1200223 https://marc.info/?l=oss-security&m=141157106132018&w=2
> Como sempre, a melhor discussão sobre isso está no HackerNews: https://news.ycombinator.com/item?id=8361574
>
>
> - -- 
> echo
> 920680245503158263821824753325972325831728150312428342077412537729420364909318736253880971145983128276953696631956862757408858710644955909208239222408534030331747172248238293509539472164571738870818862971439246497991147436431430964603600458631758354381402352368220521740203494788796697543569807851284795072334480481413675418412856581412376640379241258356436205061541557366641602992820546646995466P
> | dc
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1
> Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
>
> iQEcBAEBCAAGBQJUJBIgAAoJEG7IGPwrPKWrkYsIAKGVWhqOgGdCbAmoIHUOEtOJ
> zBMVaIAOMioj5TMEW3XNMKiJJASpxuIxHXIfGYwHVREcWEBFGCFmVJxeFnzErF0D
> Vvcg8xWYXyn9Zi8/Bf1fiq5VsNvGjYelhkVAf8pzrp0aWWW+owkR/02zVCU7nt6Z
> FHZPeOq64i5RvIBTn7BAjRG+3iZRqz448ommrY+a51Ka20z+tqlSyRL2hKIUAHoJ
> lH7WbvPluhpiyOwg1tx0piCa0cxrsqe1S7jN8CNhoeQcoTD3VOxru7n1eYdywTEL
> ktgF27ErpGI4w/kFrREhoacgKI1jRhBM4iUnbffUZKoqG1aGwM+raUnm5VeNUN4=
> =+Dcx
> -----END PGP SIGNATURE-----
> -------------------------
> Histórico: http://www.fug.com.br/historico/html/freebsd/
> Sair da lista: https://www.fug.com.br/mailman/listinfo/freebsd