Re: bash bug threat
DHCP clients are vulnerable on networks with malicious DHCPD responses. The
responses don't even need to come from an actual DHCPD server, and can come
from another client on the network. DHCP on clients typically runs as root,
so this gives root access.
Shellshock DHCP RCE Proof of Concept
https://www.trustedsec.com/september-2014/shellshock-dhcp-rce-proof-concept/
Hacker News discussion:
https://news.ycombinator.com/item?id=8369443
On Fri, Sep 26, 2014 at 09:42:30AM +0200, Klaus Knopper wrote:
> The bash environment variable bug has, to the best of my knowledge and after
> reading the reports and experimenting, NO practical relevance to Knoppix and
> no other end user Linux distribution, even when running apache or sshd.
Reply to: