[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Mon, 6 Oct 2014 13:57:04 -0400
From: Mason Loring Bliss <mason@...sses.org>
To: oss-security@...ts.openwall.com
Subject: Re: automated phishing email
On Tue, Oct 07, 2014 at 04:36:20AM +1100, Dave Horsfall wrote:
> Pardon me for being new here, but that looks suspiciously like a Shellshock
> type of attack. Is Procmail also vulnerable to that sort of thing?
That's the question, and yes, Bash is clearly the target. What was initially
confusing me was how they expected to access Bash from that.
--
Mason Loring Bliss mason@...sses.org http://blisses.org/
"I am a brother of jackals, and a companion of ostriches." (Job 30 : 29)
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
