From: mike@midnighteng.com
To: app_rpt-users@ohnosec.org
Date: Thu, 25 Sep
2014 08:06:13 -0700
Subject: [App_rpt-users] NEW Security Issues
The increase in recent hack attempts are the result of the resent knowlage
of a fundamental bug in bash.
It was not a big deal till someone published the flaw before some patches
could be issued.
Some folks set-ups are vulnerable. If you run HTTP, you certainly
are.
Just a FYI...
SHELLSHOCK - this is bigger and older than heartbleed.
It is a very big deal for "all" linux systems running http.
to check your version of bash, type
cd /bin
bash --version
our acid installs should be at 3.2
Remote ssh devices are possibly at risk.
Current patches may not be entirely effective.
Much more to be known about this.
google shellshock for more info.
...mike/kb8jnm
_______________________________________________
App_rpt-users mailing list App_rpt-users@ohnosec.org
http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users To unsubscribe from
this list please visit http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users
and scroll down to the bottom of the page. Enter your email address and press
the "Unsubscribe or edit options button" You do not need a password to
unsubscribe, you can do it via email confirmation. If you have trouble
unsubscribing, please send a message to the list detailing the
problem.