News for hackers. Stuff that matters.

A comment on Remote execution bug in BSD ping. Parent comment

Re:Remote execution bug in BSD ping by shashasha2 on Wednesday November 30, 2022 @05:40PM (#33808985)
Workaround : rm /usr/bin/ping
[ Parent | on HN ]
Re:Remote execution bug in BSD ping by bell-cot on Thursday December 01, 2022 @11:06AM (#33818137)
If an old server can't be patched, and is gonna stay that way for longer than "oh, I remember that vulnerability being announced a week ago", then

   chmod 4500 /sbin/ping
   mv /sbin/ping /sbin/ping_CVE-2022-23093
and put a few-lines shell script in /sbin/ping, which spits out a reminder of the vulnerability, and exits non-zero.
[ Parent | on HN ]