oss-security - Shellshocker - Repository of "Shellshock" Proof of Concept Code

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <OFFE39D0DA.437BB5E8-ON85257D69.00426946-85257D69.0044BD33@us.ibm.com>
Date: Mon, 6 Oct 2014 08:30:48 -0400
From: Peter G Spera <spera@...ibm.com>
To: Jose R R <Jose.r.r@...ztli-it.com>, oss-security@...ts.openwall.com
Cc: 
Subject: Shellshocker - Repository of "Shellshock" Proof of Concept
 Code


Jose,
It is important to note that the BASH running on z/OS was a proof of
concept from 2001-2002. It was part of a Redbook project and is not part of
any supported IBM z/OS product. IBM suggests that customers keep current
with the latest version of BASH, downloading the source from GNU or working
with vendors like Rocket Software to get a supported version.

Regards,
    Peter
Peter Spera, IBM System z Security, System Integrity Center, Mail:
spera@...ibm.com, IBM STG, Poughkeepsie, NY
-----------------------------------
From:	Jose R R <Jose.r.r@...ztli-it.com>
To:	oss-security@...ts.openwall.com
Date:	10/05/2014 02:49 AM
Subject:	[oss-security] Shellshocker - Repository of "Shellshock" Proof
            of Concept Code
Sent by:	jose.r.r@...ztli.com



Niltze!

Of possible interest:

< https://github.com/mubix/shellshocker-pocs >

I was surprised a (vulnerable) bash has been ported to IBM z/OS

<
http://mainframed767.tumblr.com/post/98446455927/bad-news-is-it-totally-works-in-bash-on-z-os-and

>


Best Professional Regards.

--
Jose R R
http://www.metztli-it.com
---------------------------------------------------------------------------------------------

NEW Apache OpenOffice 4.1.1! Download for GNU/Linux, Mac OS, Windows.
---------------------------------------------------------------------------------------------

Daylight Saving Time in USA & Canada ends: Sunday, November 02, 2014
---------------------------------------------------------------------------------------------

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.