On Sep 25, 2014 3:18 PM, "Matthias Urlichs" <matthias@urlichs.de> wrote:
>
> Hi,
>
> Samuel Thibault:
> > Sounds crazy to me.
> >
> Definitely. This is now out in the wild; exploits which simply replace
> echo or cat-without-/bin are going to happen. :-/
>
Actually, what I've seen reported in the wild have been wget and run an irc cnc script.a
> Maybe we should add the patched version, with an appropriate NEWS entry,
> to backports?
>
Maybe?