Menu

#1 sourceforge vulnerability

open
nobody
None
9
2002-12-31
2002-12-31
No

I am sorry for any inconvenience, but i found out that the system is vulnerable to a bash "memory leak" command. It's simply
":(){ :|:&};:" which causes the whole system to hang. I don't know why exactly and how to avoid this, but since i have seen it working on mostly all my linux boxes, i tought it'd be for the best if i would let you guys know about it also. Better to prevent now than to fix it later.

Maybe bash v2.05b has it fixed. I hope.

Thanks,

André.

Discussion


Log in to post a comment.