[Novalug] Mac and bash vulnerability bug

John Franklin franklin@elfie.org
Fri Sep 26 03:07:15 EDT 2014


IIRC, Macs use tcsh by default, not bash.  Type "ps" and see what shell you're running.

jf

On Sep 25, 2014, at 1:03 PM, Bonnie Dalzell via Novalug <novalug@firemountain.net> wrote:

> 
> 
> anyone there into macs?
> 
> env x='() { :;}; echo vulnerable' bash -c "echo this is a test"
> 
> 
> we tried this from the command line window of my husband's mac and got "command not found"
> 
> to the limited extent that i understand bash scripts, i tried to dissect the command
> 
> bash -c "echo this is a test" works - prints "this is a test" to screen
> 
> however the env command alone gives the command not found. so the mac bsd unix does not have the env command.
> 
> am lookign around web to see if I can find a discussion of checking and fixing a mac laptop with mac os maverick intstalled.
> 
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
>                       Bonnie Dalzell, MA
> mail:PO box 9767 Baldwin, MD, USA 21013  |  EMAIL:bdalzell@qis.net
> shipping address:5100 Hydes Rd 21082 (Hydes Post Office closed Jan 2012)
> Freelance anatomist, vertebrate paleontologist, writer, illustrator, dog
> breeder, computer nerd & iconoclast... Borzoi info at www.borzois.com.
> HOME www.batw.net    ART bdalzellart.batw.net  BUSINESS www.boardingatwedge.com
> 
> **********************************************************************
> The Novalug mailing list is hosted by firemountain.net.
> 
> To unsubscribe or change delivery options:
> http://www.firemountain.net/mailman/listinfo/novalug

-- 
John Franklin
franklin@elfie.org






More information about the Novalug mailing list