@osxreverser @dirk_gently have you actually replaced /bin/bash & /bin/sh with this?
http://ftp.gnu.org/pub/gnu/bash/bash-3.2-patches/bash32-052 … applies without problems to latest OS X bash source package (compile with Xcode).
-
-
-
@gazoombo@dirk_gently yeah of course.
End of conversation
New conversation -
-
-
@osxreverser Another patch needed! env X='() { (a)=>\' bash -c "echo echo vuln"; [[ "$(cat echo)" == "vuln" ]] && echo "still vulnerable :(" -
@0xf11e yeap, the patch is incomplete. still no updated upstream patch :-( -
@osxreverser pay attention if you also have VMWare on your mac : root priv escalation
End of conversation
New conversation -
-
-
@osxreverser and bash is still vuln :/Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
@osxreverser merci :-)Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.