News for hackers. Stuff that matters.

A comment on Ask HN: Could we use Shellshock to patch vulnerable systems?.

Re:Ask HN: Could we use Shellshock to patch vulnerable systems? by JensRantil on Thursday September 25, 2014 @11:51AM (#8367756)
It's a good idea, but I would expext most applications vulnerable to not run as root. You would need to be root to patch the bash executable.
[ Parent | on HN ]
Re:Ask HN: Could we use Shellshock to patch vulnerable systems? by mperd on Thursday September 25, 2014 @11:56AM (#8367798)
Good point. So I guess one would have to combine that with another vulnerability to be able to get root privileges.

We could also imagine a worm contacting the owner of the server and asking her to fix it.

[ Parent | on HN ]