Bash Remote Exploit (https://securityblog.redhat.com/2014/09/24/bash-specially-crafted-environment-v

[Deleted]

Removed Poc.

 

[Deleted]

CVE-2014-6271 - Remote code Execution through Bash

 

[Jonathan]

Yep, only a few hours old now.

 

[MartinD]

I've removed the PoC - please don't post that stuff in public

 

[DomainBop]

Debian advisory.  Patch available for wheezy.

https://www.debian.org/security/2014/dsa-3032

 

[Shoaib_A]

Patches available for CentOS 5/6/7 as well

http://centosnow.blogspot.com/2014/09/critical-bash-updates-for-centos-5.html

 

[Deleted]

That's lame.

It was a test code, not a working way to exploit anything. 

You can remove my account from this forum. Thanks.

 

[drmike]

That's lame.

It was a test code, not a working way to exploit anything. 

You can remove my account from this forum. Thanks.

What happened boss?   Someone prune your message due to perception of it leading to a rm -rf 'ing of the interwebs?

 

[Taronyu]

Does anyone know if the latest version (4.3) is also vulnerable?

 

[zzrok]

Does anyone know if the latest version (4.3) is also vulnerable?

According to http://seclists.org/oss-sec/2014/q3/650, yes.

 

[splitice]

I look forward to updating every server that runs bash... eh all of them.

Fortunately this doesn't seem to exploitable under standard server scenario's without a service which allows for the setting of environment variables to specific values (rare) such as SSH access. Atleast based on my understanding.

Update Time....

 

[KuJoe]

I look forward to updating every server that runs bash... eh all of them.

Fortunately this doesn't seem to exploitable under standard server scenario's without a service which allows for the setting of environment variables to specific values (rare) such as SSH access. Atleast based on my understanding.

Update Time....

I would hold off until they release an update that patches the exploit. The recent update didn't fix it completely.

 

[Darwin]

Just saw the unedited version of this topic, wasn't the PoC doing almost the same shit the code posted by redhat does?(which, btw, is currently linked in this topic title)  :huh:

 

[DomainBop]

I look forward to updating every server that runs bash... eh all of them.

Puppet...

 

[gxbfxvar]

Just saw the unedited version of this topic, wasn't the PoC doing almost the same shit the code posted by redhat does?(which, btw, is currently linked in this topic title)  :huh:

I also saw the unedited version and PoC shown there by OP was pretty harmless. In addition, bash isn't suid binary and running it on your account limits the damage to what you can access by yourself.

 

[Kris]

Just saw the unedited version of this topic, wasn't the PoC doing almost the same shit the code posted by redhat does?(which, btw, is currently linked in this topic title)  :huh:

Yes, and due to stupidity we lost one of the bright members of the forum.

Good job, dumbass. (Looks at Martin)

 

[Wintereise]

Yes, and due to stupidity we lost one of the bright members of the forum.

Good job, dumbass. (Looks at Martin)

While the fact that it wasn't much of a PoC was true, him flipping shit on it being removed largely based on a mistake is also a problem.

 

[MartinD]

Yes, and due to stupidity we lost one of the bright members of the forum.

Good job, dumbass. (Looks at Martin)

Well aren't you the smart little cookie.

Next time any code is thrown up as PoC I'll leave it well alone and we can all try it against your systems.

I'm not going to dance around and try any code myself or analyse it to see what it can and can't do. If there's an exploit out there and someone posts up PoC code in relation to it I'll remove it.

I see people are just using this as an opportunity to moan again despite people saying the same code is listed in the link from RH. Trying to protect the wider community and people throw their arms up, chuck their toys and dummies out of the pram and storm off. Diddums.

 

[KS_Samuel]

Considering the sort of people we find in this community. Hiding the PoC is the right thing to do in my opinion. While it won't stop them finding it, it's a bit of a deterrent.

No names being mentioned because you all know who they are.

 

[Aldryic C'boas]

A self-proclaimed guru of everything cries foul and lets slip the dogs of butthurt after a moderator censors part of his post.  The road to hell is paved with good intentions indeed, but at *most* Martin's actions called for a response of "Not cool man, it wasn't actually an issue, let me show you why" - not a GVH dramatantrum.  Props to Monk for not threatening to go grab a butter knife over the issue.. but "delete my account"?  Did you forget that you're not in the daycare anymore?  FFS man, most of your stories about your experience would place you being mid-30s or so - try acting like it.