Säkerhet

[Mikael]

http://www.metro.se/nyheter/ny-cyberbug ... gXsQzzqrA/

och:

http://pcforalla.idg.se/2.1054/1.584888 ... ux-och-mac

Kom en uppdatering av Bash igår såg jag.
Samband?
Tätat?

Edit: uppdateringslogg:

bash (4.3-7ubuntu1.1) trusty-security; urgency=medium

* SECURITY UPDATE: incorrect function parsing
- debian/patches/CVE-2014-6271.diff: fix function parsing in
builtins/common.h, builtins/evalstring.c, subst.c, variables.c.
- CVE-2014-6271

-- Marc Deslauriers <marc.deslauriers@ubuntu.com> Mon, 22 Sep 2014 15:26:16 -0400

[Rikhard]

Du kan kontrollera genom att i terminalen skriva:

env x='() { :;}; echo vulnerable' bash -c "echo this is a test"

kom ihåg " på slutet

Se http://www.nydailynews.com/news/nationa ... -1.1952516

Dessa rader

First, open Bash on your computer. On a Mac, open "Terminal."

Then, type this line of text into the shell: env x='() ; echo vulnerable' bash -c "echo this is a test"

Hit "enter" to run the command.

Your computer is safe if the command returns the text: "bash: warning: x: ignoring function definition attempt bash: error importing function definition for `x' this is a test"

If your output says, "vulnerable this is a test," you're at risk.

[Rikhard]

Jag såg att de hade fel kommando i länken jag gav dig, så använd det kommando jag gav dig.

Men outputten ska vara det som står i länken.

[Mikael]

Kod: Markera allt

qiana@qiana-VirtualBox ~ $ env x='() { :;}; echo vulnerable' bash -c "echo this is a test"
bash: varning: x: ignoring function definition attempt
bash: fel vid import av funktionsdefinition för "x"
this is a test
qiana@qiana-VirtualBox ~ $ env x='() ; echo vulnerable' bash -c "echo this is a test"
this is a test
qiana@qiana-VirtualBox ~ $