Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <20141006175703.GI17130@blisses.org>
Date: Mon, 6 Oct 2014 13:57:04 -0400
From: Mason Loring Bliss <mason@...sses.org>
To: oss-security@...ts.openwall.com
Subject: Re: automated phishing email

On Tue, Oct 07, 2014 at 04:36:20AM +1100, Dave Horsfall wrote:

> Pardon me for being new here, but that looks suspiciously like a Shellshock
> type of attack. Is Procmail also vulnerable to that sort of thing?

That's the question, and yes, Bash is clearly the target. What was initially
confusing me was how they expected to access Bash from that.

-- 
 Mason Loring Bliss         mason@...sses.org        http://blisses.org/  
"I am a brother of jackals, and a companion of ostriches."  (Job 30 : 29)

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.