News for hackers. Stuff that matters.

A comment on Bash 'shellshock' bug is wormable. Parent comment

Re:Bash 'shellshock' bug is wormable by timv on Thursday September 25, 2014 @03:58AM (#8366114)
That update appears to only patch CVE-2014-6271 and not CVE-2014-7169 ( See: https://news.ycombinator.com/item?id=8365158 )

Although 7169 appears to be more difficult to exploit than 6271, you're not out of the woods until a patch gets distributed (+applied!) that covers both CVEs.

[ Parent | on HN ]
Re:Bash 'shellshock' bug is wormable by donw on Thursday September 25, 2014 @04:01AM (#8366123)
Good catch, thanks!
[ Parent | on HN ]