sm-discuss AT lists.ibiblio.org
Subject: Public SourceMage Discussion List
List archive
- From: Dufflebunk <dufflebunk AT dufflebunk.homeip.net>
- To: sm-discuss <sm-discuss AT lists.ibiblio.org>, sm-sorcery <sm-sorcery AT lists.ibiblio.org>
- Subject: [SM-Discuss] SECURITY ISSUE
- Date: 01 Apr 2003 11:01:24 -0500
A masive trojan has been discovered in bash v2.05b. It allows remote
access to any machine via bash's /dev/tcp virtual devices if your eth0
is connected to the internet. There is, of course, a blurb on
securityfocus and bugtraq, but I'm too lazy to find it.
Since GNU seems to be as slow as usual, the sorcery team is planning on
accelerating out rewrite schedule and starting today. We have decided to
rewrite in C# as it has the portability, low level, and network
facilities that we require.
--
Quidquid latine dictum sit, altum sonatur.
-----------------
PGP public key at
http://wwwkeys.pgp.net:11371/pks/lookup?op=get&search=0x3327A9A5
F1
Attachment:
signature.asc
Description: This is a digitally signed message part
-
[SM-Discuss] SECURITY ISSUE,
Dufflebunk, 04/01/2003
-
Re: [SM-Discuss] SECURITY ISSUE,
Tony Smith, 04/01/2003
-
Re: [SM-Discuss] SECURITY ISSUE,
Eric Schabell, 04/01/2003
- Re: [SM-Sorcery] Re: [SM-Discuss] SECURITY ISSUE, Geoffrey Derber, 04/01/2003
-
Re: [SM-Discuss] SECURITY ISSUE,
Eric Schabell, 04/01/2003
- [SM-Discuss] Re: [SM-Sorcery] SECURITY ISSUE, Sergey A. Lipnevich, 04/01/2003
- Re: [SM-Discuss] SECURITY ISSUE, Pierre Abbat, 04/01/2003
-
Re: [SM-Discuss] SECURITY ISSUE,
Tony Smith, 04/01/2003
Archive powered by MHonArc 2.6.24.