Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Wed, 24 Sep 2014 18:26:53 -0700
From: Anthony Liguori <anthony@...emonkey.ws>
To: oss-security@...ts.openwall.com
Subject: Re: CVE-2014-6271: remote code execution through bash

On Wed, Sep 24, 2014 at 6:23 PM, Chet Ramey <chet.ramey@...e.edu> wrote:
> On 9/24/14, 5:32 PM, Solar Designer wrote:
>> On Wed, Sep 24, 2014 at 11:27:09PM +0200, Hanno B??ck wrote:
>>> Tavis Ormandy just tweetet this:
>>> https://twitter.com/taviso/status/514887394294652929
>>>
>>> The bash patch seems incomplete to me, function parsing is still
>>> brittle. e.g. $ env X='() { (a)=>\' sh -c "echo date"; cat echo
>>
>> Thanks for bringing this to oss-security.  I've added CC to Chet and
>> Tavis on this "reply".
>
> I have a fix for this.

Can you provide a pointer to the patch?  I put together a patch that
changed the report_error() to fatal_error() as I wasn't able to see
how to reset the parser state.  Was just about to send it out...

> Chet
> --
> ``The lyf so short, the craft so long to lerne.'' - Chaucer
>                  ``Ars longa, vita brevis'' - Hippocrates
> Chet Ramey, ITS, CWRU    chet@...e.edu    http://cnswww.cns.cwru.edu/~chet/

Powered by blists - more mailing lists

Your e-mail address:

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Powered by Openwall GNU/*/Linux - Powered by OpenVZ