Skip to Content.
Sympa Menu

sm-discuss - [SM-Discuss] SECURITY ISSUE

sm-discuss AT lists.ibiblio.org

Subject: Public SourceMage Discussion List

List archive

Chronological Thread  
  • From: Dufflebunk <dufflebunk AT dufflebunk.homeip.net>
  • To: sm-discuss <sm-discuss AT lists.ibiblio.org>, sm-sorcery <sm-sorcery AT lists.ibiblio.org>
  • Subject: [SM-Discuss] SECURITY ISSUE
  • Date: 01 Apr 2003 11:01:24 -0500

A masive trojan has been discovered in bash v2.05b. It allows remote
access to any machine via bash's /dev/tcp virtual devices if your eth0
is connected to the internet. There is, of course, a blurb on
securityfocus and bugtraq, but I'm too lazy to find it.

Since GNU seems to be as slow as usual, the sorcery team is planning on
accelerating out rewrite schedule and starting today. We have decided to
rewrite in C# as it has the portability, low level, and network
facilities that we require.


--


Quidquid latine dictum sit, altum sonatur.
-----------------
PGP public key at
http://wwwkeys.pgp.net:11371/pks/lookup?op=get&search=0x3327A9A5
F1


Attachment: signature.asc
Description: This is a digitally signed message part




Archive powered by MHonArc 2.6.24.

Top of Page