3 ms·
i belive the bug can be used to execute code on your mac with a dhcp server https://www.trustedsec.com/september-2014/shellshock-dhcp-rce-proof-concept/ https:
by y0ghur7_xxx 12y ago
i belive the bug can be used to execute code on your mac with a dhcp server
https://www.trustedsec.com/september-2014/shellshock-dhcp-rce-proof-concept/ https://www.trustedsec.com/september-2014/shellshock-dhcp-rc...
- deleted 12y ago[deleted]
- jerf 12y agoThe attack surface for shellshock is insanely large, and it's crazy to leave bash unpatched even if one or two currently-known vectors happen to not currently be known to be exploitable. People will be finding ways to tickle it for years to come.
- nutate 12y agoThat's not applicable here. Even NetworkManager on Linux isn't susceptible to this hack. dhclient and dnsmasq can apparently be shocked on unpatched Linux, though.
- glitch 12y agoIncorrect. OS X does not use bash scripts for DHCP client tasks and was demonstrated to NOT be affected. The DHCP vector was demonstrated to be an issue with various Linux distributions.