[<prev] [next>] [day] [month] [year] [list]
Date: Mon, 6 Oct 2014 08:30:48 -0400
From: Peter G Spera <spera@...ibm.com>
To: Jose R R <Jose.r.r@...ztli-it.com>, oss-security@...ts.openwall.com
Cc:
Subject: Shellshocker - Repository of "Shellshock" Proof of Concept
Code
Jose,
It is important to note that the BASH running on z/OS was a proof of
concept from 2001-2002. It was part of a Redbook project and is not part of
any supported IBM z/OS product. IBM suggests that customers keep current
with the latest version of BASH, downloading the source from GNU or working
with vendors like Rocket Software to get a supported version.
Regards,
Peter
Peter Spera, IBM System z Security, System Integrity Center, Mail:
spera@...ibm.com, IBM STG, Poughkeepsie, NY
-----------------------------------
From: Jose R R <Jose.r.r@...ztli-it.com>
To: oss-security@...ts.openwall.com
Date: 10/05/2014 02:49 AM
Subject: [oss-security] Shellshocker - Repository of "Shellshock" Proof
of Concept Code
Sent by: jose.r.r@...ztli.com
Niltze!
Of possible interest:
< https://github.com/mubix/shellshocker-pocs >
I was surprised a (vulnerable) bash has been ported to IBM z/OS
<
http://mainframed767.tumblr.com/post/98446455927/bad-news-is-it-totally-works-in-bash-on-z-os-and
>
Best Professional Regards.
--
Jose R R
http://www.metztli-it.com
---------------------------------------------------------------------------------------------
NEW Apache OpenOffice 4.1.1! Download for GNU/Linux, Mac OS, Windows.
---------------------------------------------------------------------------------------------
Daylight Saving Time in USA & Canada ends: Sunday, November 02, 2014
---------------------------------------------------------------------------------------------
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
