/ The Hacker's Encyclopedia 1998 / hackers_encyclopedia.iso / hacking / unix / bashhole.txt

< prev

next >

MacOS 8.1

Win98

DOS

view JSON data

view as text

+--------+-------------------------+-------------------------+--------+--------+
|00000000| 46 72 6f 6d 20 72 6f 75 | 74 65 40 69 6e 66 6f 6e |From rou|te@infon|
|00000010| 65 78 75 73 2e 63 6f 6d | 20 54 68 75 20 41 75 67 |exus.com| Thu Aug|
|00000020| 20 32 32 20 30 39 3a 30 | 38 3a 33 39 20 31 39 39 | 22 09:0|8:39 199|
|00000030| 36 0a 52 65 74 75 72 6e | 2d 50 61 74 68 3a 20 72 |6.Return|-Path: r|
|00000040| 6f 75 74 65 0a 52 65 63 | 65 69 76 65 64 3a 20 28 |oute.Rec|eived: (|
|00000050| 66 72 6f 6d 20 72 6f 75 | 74 65 40 6c 6f 63 61 6c |from rou|te@local|
|00000060| 68 6f 73 74 29 20 62 79 | 20 6f 6e 79 78 2e 69 6e |host) by| onyx.in|
|00000070| 66 6f 6e 65 78 75 73 2e | 63 6f 6d 20 28 38 2e 36 |fonexus.|com (8.6|
|00000080| 2e 31 32 2f 38 2e 36 2e | 39 29 20 69 64 20 4a 41 |.12/8.6.|9) id JA|
|00000090| 41 31 36 33 32 34 20 66 | 6f 72 20 72 6f 6f 74 3b |A16324 f|or root;|
|000000a0| 20 54 68 75 2c 20 32 32 | 20 41 75 67 20 31 39 39 | Thu, 22| Aug 199|
|000000b0| 36 20 30 39 3a 30 38 3a | 33 39 20 2d 30 37 30 30 |6 09:08:|39 -0700|
|000000c0| 0a 46 72 6f 6d 3a 20 69 | 6e 66 69 6e 69 74 79 20 |.From: i|nfinity |
|000000d0| 3c 72 6f 75 74 65 40 69 | 6e 66 6f 6e 65 78 75 73 |<route@i|nfonexus|
|000000e0| 2e 63 6f 6d 3e 0a 4d 65 | 73 73 61 67 65 2d 49 64 |.com>.Me|ssage-Id|
|000000f0| 3a 20 3c 31 39 39 36 30 | 38 32 32 31 36 30 38 2e |: <19960|8221608.|
|00000100| 4a 41 41 31 36 33 32 34 | 40 6f 6e 79 78 2e 69 6e |JAA16324|@onyx.in|
|00000110| 66 6f 6e 65 78 75 73 2e | 63 6f 6d 3e 0a 53 75 62 |fonexus.|com>.Sub|
|00000120| 6a 65 63 74 3a 20 42 6f | 53 3a 20 4d 79 63 72 6f |ject: Bo|S: Mycro|
|00000130| 66 74 69 73 68 20 64 65 | 73 63 72 69 70 74 69 6f |ftish de|scriptio|
|00000140| 6e 20 6f 66 20 62 61 73 | 68 20 68 6f 6c 65 2e 20 |n of bas|h hole. |
|00000150| 28 66 77 64 29 0a 54 6f | 3a 20 72 6f 6f 74 40 69 |(fwd).To|: root@i|
|00000160| 6e 66 6f 6e 65 78 75 73 | 2e 63 6f 6d 20 28 74 68 |nfonexus|.com (th|
|00000170| 6f 75 67 68 74 29 0a 44 | 61 74 65 3a 20 54 68 75 |ought).D|ate: Thu|
|00000180| 2c 20 32 32 20 41 75 67 | 20 31 39 39 36 20 30 39 |, 22 Aug| 1996 09|
|00000190| 3a 30 38 3a 33 37 20 2d | 30 37 30 30 20 28 50 44 |:08:37 -|0700 (PD|
|000001a0| 54 29 0a 58 2d 4d 61 69 | 6c 65 72 3a 20 45 4c 4d |T).X-Mai|ler: ELM|
|000001b0| 20 5b 76 65 72 73 69 6f | 6e 20 32 2e 34 20 50 4c | [versio|n 2.4 PL|
|000001c0| 32 34 5d 0a 4d 49 4d 45 | 2d 56 65 72 73 69 6f 6e |24].MIME|-Version|
|000001d0| 3a 20 31 2e 30 0a 43 6f | 6e 74 65 6e 74 2d 54 79 |: 1.0.Co|ntent-Ty|
|000001e0| 70 65 3a 20 74 65 78 74 | 2f 70 6c 61 69 6e 3b 20 |pe: text|/plain; |
|000001f0| 63 68 61 72 73 65 74 3d | 55 53 2d 41 53 43 49 49 |charset=|US-ASCII|
|00000200| 0a 43 6f 6e 74 65 6e 74 | 2d 54 72 61 6e 73 66 65 |.Content|-Transfe|
|00000210| 72 2d 45 6e 63 6f 64 69 | 6e 67 3a 20 37 62 69 74 |r-Encodi|ng: 7bit|
|00000220| 0a 43 6f 6e 74 65 6e 74 | 2d 4c 65 6e 67 74 68 3a |.Content|-Length:|
|00000230| 20 31 33 39 34 35 20 20 | 20 20 20 0a 53 74 61 74 | 13945  |   .Stat|
|00000240| 75 73 3a 20 4f 0a 0a 4d | 61 74 74 68 65 77 20 41 |us: O..M|atthew A|
|00000250| 6c 64 6f 75 73 27 73 20 | 74 68 6f 75 67 68 74 73 |ldous's |thoughts|
|00000260| 20 77 65 72 65 3a 0a 3e | 46 72 6f 6d 20 62 65 73 | were:.>|From bes|
|00000270| 74 2d 6f 66 2d 73 65 63 | 75 72 69 74 79 2d 72 65 |t-of-sec|urity-re|
|00000280| 71 75 65 73 74 40 73 75 | 62 75 72 62 69 61 2e 6e |quest@su|burbia.n|
|00000290| 65 74 20 54 68 75 20 41 | 75 67 20 32 32 20 30 33 |et Thu A|ug 22 03|
|000002a0| 3a 31 39 3a 33 38 20 31 | 39 39 36 0a 52 65 73 65 |:19:38 1|996.Rese|
|000002b0| 6e 74 2d 44 61 74 65 3a | 20 54 68 75 2c 20 32 32 |nt-Date:| Thu, 22|
|000002c0| 20 41 75 67 20 31 39 39 | 36 20 31 39 3a 31 30 3a | Aug 199|6 19:10:|
|000002d0| 32 39 20 2b 31 30 30 30 | 0a 46 72 6f 6d 3a 20 22 |29 +1000|.From: "|
|000002e0| 4d 61 74 74 68 65 77 20 | 41 6c 64 6f 75 73 22 20 |Matthew |Aldous" |
|000002f0| 3c 6d 64 61 40 64 69 73 | 63 6f 76 65 72 79 2e 6d |<mda@dis|covery.m|
|00000300| 68 72 69 2e 65 64 75 2e | 61 75 3e 0a 4d 65 73 73 |hri.edu.|au>.Mess|
|00000310| 61 67 65 2d 49 64 3a 20 | 3c 39 36 30 38 32 32 31 |age-Id: |<9608221|
|00000320| 36 32 36 2e 5a 4d 35 35 | 33 30 40 64 69 73 63 6f |626.ZM55|30@disco|
|00000330| 76 65 72 79 2e 6d 68 72 | 69 2e 65 64 75 2e 61 75 |very.mhr|i.edu.au|
|00000340| 3e 0a 44 61 74 65 3a 20 | 54 68 75 2c 20 32 32 20 |>.Date: |Thu, 22 |
|00000350| 41 75 67 20 31 39 39 36 | 20 31 36 3a 32 36 3a 35 |Aug 1996| 16:26:5|
|00000360| 36 20 2d 30 34 30 30 0a | 58 2d 46 69 6c 65 73 3a |6 -0400.|X-Files:|
|00000370| 20 54 68 65 20 54 72 75 | 74 68 20 49 73 20 4f 75 | The Tru|th Is Ou|
|00000380| 74 20 54 68 65 72 65 0a | 58 2d 44 69 73 63 6c 61 |t There.|X-Discla|
|00000390| 69 6d 65 72 3a 20 43 6f | 6d 6d 65 6e 74 73 20 63 |imer: Co|mments c|
|000003a0| 6f 6e 74 61 69 6e 65 64 | 20 64 6f 20 6e 6f 74 20 |ontained| do not |
|000003b0| 6e 65 63 65 73 73 61 72 | 69 6c 79 20 72 65 70 72 |necessar|ily repr|
|000003c0| 65 73 65 6e 74 20 74 68 | 6f 73 65 20 6f 66 20 6d |esent th|ose of m|
|000003d0| 79 20 65 6d 70 6c 6f 79 | 65 72 0a 58 2d 43 6f 70 |y employ|er.X-Cop|
|000003e0| 79 72 69 67 68 74 3a 20 | 50 6f 72 74 69 6f 6e 73 |yright: |Portions|
|000003f0| 20 6f 66 20 74 68 69 73 | 20 6d 65 73 73 61 67 65 | of this| message|
|00000400| 20 6d 61 79 20 62 65 20 | 73 75 62 6a 65 63 74 20 | may be |subject |
|00000410| 74 6f 20 63 6f 70 79 72 | 69 67 68 74 2e 20 28 43 |to copyr|ight. (C|
|00000420| 29 20 31 39 39 36 20 4d | 61 74 74 68 65 77 20 41 |) 1996 M|atthew A|
|00000430| 6c 64 6f 75 73 0a 58 2d | 57 61 72 6e 69 6e 67 3a |ldous.X-|Warning:|
|00000440| 20 43 6f 6d 6d 65 6e 74 | 73 20 63 6f 6e 74 61 69 | Comment|s contai|
|00000450| 6e 65 64 20 6d 61 79 20 | 62 65 20 64 65 76 6f 69 |ned may |be devoi|
|00000460| 64 20 6f 66 20 66 61 63 | 74 20 6f 72 20 74 72 75 |d of fac|t or tru|
|00000470| 74 68 2e 0a 58 2d 55 72 | 6c 3a 20 68 74 74 70 3a |th..X-Ur|l: http:|
|00000480| 2f 2f 77 77 77 2e 6d 68 | 72 69 2e 65 64 75 2e 61 |//www.mh|ri.edu.a|
|00000490| 75 0a 58 2d 4d 61 69 6c | 65 72 3a 20 5a 2d 4d 61 |u.X-Mail|er: Z-Ma|
|000004a0| 69 6c 20 28 33 2e 32 2e | 33 20 30 38 66 65 62 39 |il (3.2.|3 08feb9|
|000004b0| 36 20 4d 65 64 69 61 4d | 61 69 6c 29 0a 54 6f 3a |6 MediaM|ail).To:|
|000004c0| 20 6d 65 64 69 74 61 74 | 69 6f 6e 40 67 6e 75 2e | meditat|ion@gnu.|
|000004d0| 61 69 2e 6d 69 74 2e 65 | 64 75 0a 4d 69 6d 65 2d |ai.mit.e|du.Mime-|
|000004e0| 56 65 72 73 69 6f 6e 3a | 20 31 2e 30 0a 43 6f 6e |Version:| 1.0.Con|
|000004f0| 74 65 6e 74 2d 54 79 70 | 65 3a 20 74 65 78 74 2f |tent-Typ|e: text/|
|00000500| 70 6c 61 69 6e 3b 20 63 | 68 61 72 73 65 74 3d 75 |plain; c|harset=u|
|00000510| 73 2d 61 73 63 69 69 0a | 53 65 6e 64 65 72 3a 20 |s-ascii.|Sender: |
|00000520| 70 72 6f 66 66 40 73 75 | 62 75 72 62 69 61 2e 6e |proff@su|burbia.n|
|00000530| 65 74 0a 52 65 73 65 6e | 74 2d 4d 65 73 73 61 67 |et.Resen|t-Messag|
|00000540| 65 2d 49 44 3a 20 3c 22 | 4c 69 55 43 4f 32 2e 30 |e-ID: <"|LiUCO2.0|
|00000550| 2e 36 6d 2e 33 47 32 37 | 6f 22 40 73 75 62 75 72 |.6m.3G27|o"@subur|
|00000560| 62 69 61 3e 0a 52 65 73 | 65 6e 74 2d 46 72 6f 6d |bia>.Res|ent-From|
|00000570| 3a 20 62 65 73 74 2d 6f | 66 2d 73 65 63 75 72 69 |: best-o|f-securi|
|00000580| 74 79 40 73 75 62 75 72 | 62 69 61 2e 6e 65 74 0a |ty@subur|bia.net.|
|00000590| 58 2d 4d 61 69 6c 69 6e | 67 2d 4c 69 73 74 3a 20 |X-Mailin|g-List: |
|000005a0| 3c 62 65 73 74 2d 6f 66 | 2d 73 65 63 75 72 69 74 |<best-of|-securit|
|000005b0| 79 40 73 75 62 75 72 62 | 69 61 2e 6e 65 74 3e 20 |y@suburb|ia.net> |
|000005c0| 61 72 63 68 69 76 65 2f | 6c 61 74 65 73 74 2f 32 |archive/|latest/2|
|000005d0| 34 36 0a 58 2d 4c 6f 6f | 70 3a 20 62 65 73 74 2d |46.X-Loo|p: best-|
|000005e0| 6f 66 2d 73 65 63 75 72 | 69 74 79 40 73 75 62 75 |of-secur|ity@subu|
|000005f0| 72 62 69 61 2e 6e 65 74 | 0a 50 72 65 63 65 64 65 |rbia.net|.Precede|
|00000600| 6e 63 65 3a 20 6c 69 73 | 74 0a 52 65 73 65 6e 74 |nce: lis|t.Resent|
|00000610| 2d 53 65 6e 64 65 72 3a | 20 62 65 73 74 2d 6f 66 |-Sender:| best-of|
|00000620| 2d 73 65 63 75 72 69 74 | 79 2d 72 65 71 75 65 73 |-securit|y-reques|
|00000630| 74 40 73 75 62 75 72 62 | 69 61 2e 6e 65 74 0a 53 |t@suburb|ia.net.S|
|00000640| 75 62 6a 65 63 74 3a 20 | 42 6f 53 3a 20 4d 79 63 |ubject: |BoS: Myc|
|00000650| 72 6f 66 74 69 73 68 20 | 64 65 73 63 72 69 70 74 |roftish |descript|
|00000660| 69 6f 6e 20 6f 66 20 62 | 61 73 68 20 68 6f 6c 65 |ion of b|ash hole|
|00000670| 2e 0a 0a 57 68 69 6c 73 | 74 20 49 20 6b 6e 6f 77 |...Whils|t I know|
|00000680| 20 79 6f 75 20 6d 69 67 | 68 74 20 6e 6f 74 20 63 | you mig|ht not c|
|00000690| 61 72 65 20 66 6f 72 20 | 73 65 63 75 72 69 74 79 |are for |security|
|000006a0| 20 70 72 6f 62 6c 65 6d | 73 20 6f 6e 20 6d 65 64 | problem|s on med|
|000006b0| 69 74 61 74 69 6f 6e 2c | 0a 49 20 6a 75 73 74 20 |itation,|.I just |
|000006c0| 77 61 6e 74 65 64 20 74 | 6f 20 73 70 6c 6f 64 65 |wanted t|o splode|
|000006d0| 20 6f 76 65 72 20 74 68 | 65 20 64 65 73 63 72 69 | over th|e descri|
|000006e0| 70 74 69 6f 6e 20 6f 66 | 20 2a 77 68 79 2a 20 74 |ption of| *why* t|
|000006f0| 68 69 73 20 70 72 6f 62 | 6c 65 6d 20 65 78 69 73 |his prob|lem exis|
|00000700| 74 73 2e 0a 0a 28 49 66 | 20 79 6f 75 20 72 65 61 |ts...(If| you rea|
|00000710| 64 20 73 65 63 74 69 6f | 6e 20 42 2c 20 69 74 27 |d sectio|n B, it'|
|00000720| 73 20 76 65 72 79 20 6d | 79 63 72 6f 66 74 69 73 |s very m|ycroftis|
|00000730| 68 2e 29 0a 0a 0a 2d 2d | 2d 2d 2d 2d 2d 2d 2d 2d |h.)...--|--------|
|00000740| 2d 2d 2d 2d 2d 2d 2d 2d | 2d 2d 2d 2d 2d 2d 2d 2d |--------|--------|
|00000750| 2d 2d 2d 2d 2d 2d 2d 2d | 2d 2d 2d 2d 2d 2d 2d 2d |--------|--------|
|00000760| 2d 2d 2d 2d 2d 2d 2d 2d | 2d 2d 2d 2d 2d 2d 2d 2d |--------|--------|
|00000770| 2d 2d 2d 2d 2d 2d 2d 2d | 2d 2d 2d 2d 2d 2d 2d 2d |--------|--------|
|00000780| 2d 2d 2d 2d 0a 72 65 67 | 69 73 74 65 72 20 63 68 |----.reg|ister ch|
|00000790| 61 72 20 2a 73 74 72 69 | 6e 67 3b 20 20 20 20 20 |ar *stri|ng;     |
|000007a0| 20 20 20 20 76 73 2e 20 | 20 20 20 20 20 72 65 67 |    vs. |     reg|
|000007b0| 69 73 74 65 72 20 75 6e | 73 69 67 6e 65 64 20 63 |ister un|signed c|
|000007c0| 68 61 72 20 2a 73 74 72 | 69 6e 67 3b 0a 2d 2d 2d |har *str|ing;.---|
|000007d0| 2d 2d 2d 2d 2d 2d 2d 2d | 2d 2d 2d 2d 2d 2d 2d 2d |--------|--------|
|000007e0| 2d 2d 2d 2d 2d 2d 2d 2d | 2d 2d 2d 2d 2d 2d 2d 2d |--------|--------|
|000007f0| 2d 2d 2d 2d 2d 2d 2d 2d | 2d 2d 2d 2d 2d 2d 2d 2d |--------|--------|
|00000800| 2d 2d 2d 2d 2d 2d 2d 2d | 2d 2d 2d 2d 2d 2d 2d 2d |--------|--------|
|00000810| 2d 2d 2d 2d 2d 2d 2d 2d | 2d 2d 2d 0a 0a 4d 61 74 |--------|---..Mat|
|00000820| 74 0a 2d 2d 2d 2d 2d 42 | 45 47 49 4e 20 50 47 50 |t.-----B|EGIN PGP|
|00000830| 20 53 49 47 4e 45 44 20 | 4d 45 53 53 41 47 45 2d | SIGNED |MESSAGE-|
|00000840| 2d 2d 2d 2d 0a 0a 0a 41 | 55 53 43 45 52 54 20 68 |----...A|USCERT h|
|00000850| 61 73 20 72 65 63 65 69 | 76 65 64 20 74 68 65 20 |as recei|ved the |
|00000860| 66 6f 6c 6c 6f 77 69 6e | 67 20 41 6c 65 72 74 20 |followin|g Alert |
|00000870| 66 72 6f 6d 20 74 68 65 | 20 49 42 4d 20 45 52 53 |from the| IBM ERS|
|00000880| 20 74 65 61 6d 20 63 6f | 6e 63 65 72 6e 69 6e 67 | team co|ncerning|
|00000890| 20 61 0a 76 75 6c 6e 65 | 72 61 62 69 6c 69 74 79 | a.vulne|rability|
|000008a0| 20 69 6e 20 74 68 65 20 | 47 4e 55 20 22 62 61 73 | in the |GNU "bas|
|000008b0| 68 22 20 73 68 65 6c 6c | 2e 20 20 49 74 20 69 73 |h" shell|.  It is|
|000008c0| 20 70 61 73 73 65 64 20 | 6f 6e 20 66 6f 72 20 79 | passed |on for y|
|000008d0| 6f 75 72 20 69 6e 66 6f | 72 6d 61 74 69 6f 6e 2e |our info|rmation.|
|000008e0| 0a 0a 49 66 20 79 6f 75 | 20 62 65 6c 69 65 76 65 |..If you| believe|
|000008f0| 20 74 68 61 74 20 79 6f | 75 72 20 73 79 73 74 65 | that yo|ur syste|
|00000900| 6d 20 68 61 73 20 62 65 | 65 6e 20 63 6f 6d 70 72 |m has be|en compr|
|00000910| 6f 6d 69 73 65 64 2c 20 | 63 6f 6e 74 61 63 74 20 |omised, |contact |
|00000920| 41 55 53 43 45 52 54 20 | 6f 72 20 79 6f 75 72 0a |AUSCERT |or your.|
|00000930| 72 65 70 72 65 73 65 6e | 74 61 74 69 76 65 20 69 |represen|tative i|
|00000940| 6e 20 46 49 52 53 54 20 | 28 46 6f 72 75 6d 20 6f |n FIRST |(Forum o|
|00000950| 66 20 49 6e 63 69 64 65 | 6e 74 20 52 65 73 70 6f |f Incide|nt Respo|
|00000960| 6e 73 65 20 61 6e 64 20 | 53 65 63 75 72 69 74 79 |nse and |Security|
|00000970| 20 54 65 61 6d 73 29 2e | 0a 0a 41 55 53 43 45 52 | Teams).|..AUSCER|
|00000980| 54 20 6d 61 69 6e 74 61 | 69 6e 73 20 61 6e 20 61 |T mainta|ins an a|
|00000990| 6e 6f 6e 79 6d 6f 75 73 | 20 46 54 50 20 73 65 72 |nonymous| FTP ser|
|000009a0| 76 69 63 65 20 77 68 69 | 63 68 20 69 73 20 66 6f |vice whi|ch is fo|
|000009b0| 75 6e 64 20 6f 6e 3a 0a | 66 74 70 3a 2f 2f 66 74 |und on:.|ftp://ft|
|000009c0| 70 2e 61 75 73 63 65 72 | 74 2e 6f 72 67 2e 61 75 |p.auscer|t.org.au|
|000009d0| 2f 70 75 62 2f 2e 20 20 | 54 68 69 73 20 61 72 63 |/pub/.  |This arc|
|000009e0| 68 69 76 65 20 63 6f 6e | 74 61 69 6e 73 20 70 61 |hive con|tains pa|
|000009f0| 73 74 20 53 45 52 54 20 | 61 6e 64 20 41 55 53 43 |st SERT |and AUSC|
|00000a00| 45 52 54 0a 41 64 76 69 | 73 6f 72 69 65 73 2c 20 |ERT.Advi|sories, |
|00000a10| 61 6e 64 20 6f 74 68 65 | 72 20 63 6f 6d 70 75 74 |and othe|r comput|
|00000a20| 65 72 20 73 65 63 75 72 | 69 74 79 20 69 6e 66 6f |er secur|ity info|
|00000a30| 72 6d 61 74 69 6f 6e 2e | 0a 0a 41 55 53 43 45 52 |rmation.|..AUSCER|
|00000a40| 54 20 61 6c 73 6f 20 6d | 61 69 6e 74 61 69 6e 73 |T also m|aintains|
|00000a50| 20 61 20 57 6f 72 6c 64 | 20 57 69 64 65 20 57 65 | a World| Wide We|
|00000a60| 62 20 73 65 72 76 69 63 | 65 20 77 68 69 63 68 20 |b servic|e which |
|00000a70| 69 73 20 66 6f 75 6e 64 | 20 6f 6e 3a 0a 68 74 74 |is found| on:.htt|
|00000a80| 70 3a 2f 2f 77 77 77 2e | 61 75 73 63 65 72 74 2e |p://www.|auscert.|
|00000a90| 6f 72 67 2e 61 75 2f 2e | 0a 0a 49 6e 74 65 72 6e |org.au/.|..Intern|
|00000aa0| 65 74 20 45 6d 61 69 6c | 3a 20 61 75 73 63 65 72 |et Email|: auscer|
|00000ab0| 74 40 61 75 73 63 65 72 | 74 2e 6f 72 67 2e 61 75 |t@auscer|t.org.au|
|00000ac0| 0a 46 61 63 73 69 6d 69 | 6c 65 3a 09 28 30 37 29 |.Facsimi|le:.(07)|
|00000ad0| 20 33 33 36 35 20 34 34 | 37 37 0a 54 65 6c 65 70 | 3365 44|77.Telep|
|00000ae0| 68 6f 6e 65 3a 09 28 30 | 37 29 20 33 33 36 35 20 |hone:.(0|7) 3365 |
|00000af0| 34 34 31 37 20 28 49 6e | 74 65 72 6e 61 74 69 6f |4417 (In|ternatio|
|00000b00| 6e 61 6c 3a 20 2b 36 31 | 20 37 20 33 33 36 35 20 |nal: +61| 7 3365 |
|00000b10| 34 34 31 37 29 0a 09 09 | 41 55 53 43 45 52 54 20 |4417)...|AUSCERT |
|00000b20| 70 65 72 73 6f 6e 6e 65 | 6c 20 61 6e 73 77 65 72 |personne|l answer|
|00000b30| 20 64 75 72 69 6e 67 20 | 51 75 65 65 6e 73 6c 61 | during |Queensla|
|00000b40| 6e 64 20 62 75 73 69 6e | 65 73 73 20 68 6f 75 72 |nd busin|ess hour|
|00000b50| 73 0a 09 09 77 68 69 63 | 68 20 61 72 65 20 47 4d |s...whic|h are GM|
|00000b60| 54 2b 31 30 3a 30 30 20 | 28 41 45 53 54 29 2e 0a |T+10:00 |(AEST)..|
|00000b70| 09 09 4f 6e 20 63 61 6c | 6c 20 61 66 74 65 72 20 |..On cal|l after |
|00000b80| 68 6f 75 72 73 20 66 6f | 72 20 65 6d 65 72 67 65 |hours fo|r emerge|
|00000b90| 6e 63 69 65 73 2e 0a 0a | 2d 20 2d 2d 20 42 65 67 |ncies...|- -- Beg|
|00000ba0| 69 6e 20 49 6e 63 6c 75 | 64 65 64 20 41 64 76 69 |in Inclu|ded Advi|
|00000bb0| 73 6f 72 79 20 2d 2d 0a | 0a 2d 20 2d 2d 45 52 53 |sory --.|.- --ERS|
|00000bc0| 2d 41 4c 45 52 54 2d 2d | 45 52 53 2d 41 4c 45 52 |-ALERT--|ERS-ALER|
|00000bd0| 54 2d 2d 45 52 53 2d 41 | 4c 45 52 54 2d 2d 45 52 |T--ERS-A|LERT--ER|
|00000be0| 53 2d 41 4c 45 52 54 2d | 2d 45 52 53 2d 41 4c 45 |S-ALERT-|-ERS-ALE|
|00000bf0| 52 54 2d 2d 45 52 53 2d | 41 4c 45 52 54 2d 2d 45 |RT--ERS-|ALERT--E|
|00000c00| 52 53 2d 41 4c 45 52 54 | 2d 2d 0a 2d 20 2d 2d 2d |RS-ALERT|--.- ---|
|00000c10| 45 58 54 45 52 4e 41 4c | 20 52 45 4c 45 41 53 45 |EXTERNAL| RELEASE|
|00000c20| 2d 2d 2d 45 58 54 45 52 | 4e 41 4c 20 52 45 4c 45 |---EXTER|NAL RELE|
|00000c30| 41 53 45 2d 2d 2d 45 58 | 54 45 52 4e 41 4c 20 52 |ASE---EX|TERNAL R|
|00000c40| 45 4c 45 41 53 45 2d 2d | 2d 45 58 54 45 52 4e 41 |ELEASE--|-EXTERNA|
|00000c50| 4c 0a 52 45 4c 45 41 53 | 45 2d 2d 2d 0a 0a 20 20 |L.RELEAS|E---..  |
|00000c60| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |        |        |
|00000c70| 3d 3d 3d 3d 3d 3d 3d 20 | 20 3d 3d 3d 3d 3d 3d 3d |======= | =======|
|00000c80| 3d 3d 3d 3d 3d 20 20 20 | 20 3d 3d 3d 3d 3d 3d 20 |=====   | ====== |
|00000c90| 20 20 20 20 20 20 3d 3d | 3d 3d 3d 3d 0a 20 20 20 |      ==|====.   |
|00000ca0| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 3d |        |       =|
|00000cb0| 3d 3d 3d 3d 3d 3d 20 20 | 3d 3d 3d 3d 3d 3d 3d 3d |======  |========|
|00000cc0| 3d 3d 3d 3d 3d 3d 20 20 | 3d 3d 3d 3d 3d 3d 3d 20 |======  |======= |
|00000cd0| 20 20 20 20 3d 3d 3d 3d | 3d 3d 3d 0a 20 20 20 20 |    ====|===.    |
|00000ce0| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |        |        |
|00000cf0| 3d 3d 3d 20 20 20 20 20 | 20 3d 3d 3d 20 20 20 20 |===     | ===    |
|00000d00| 20 3d 3d 3d 3d 20 20 20 | 20 3d 3d 3d 3d 3d 3d 20 | ====   | ====== |
|00000d10| 20 20 3d 3d 3d 3d 3d 3d | 0a 20 20 20 20 20 20 20 |  ======|.       |
|00000d20| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 3d 3d 3d |        |     ===|
|00000d30| 20 20 20 20 20 20 3d 3d | 3d 3d 3d 3d 3d 3d 3d 3d |      ==|========|
|00000d40| 3d 20 20 20 20 20 3d 3d | 3d 3d 3d 3d 3d 20 3d 3d |=     ==|===== ==|
|00000d50| 3d 3d 3d 3d 3d 0a 20 20 | 20 20 20 20 20 20 20 20 |=====.  |        |
|00000d60| 20 20 20 20 20 20 20 20 | 20 20 3d 3d 3d 20 20 20 |        |  ===   |
|00000d70| 20 20 20 3d 3d 3d 3d 3d | 3d 3d 3d 3d 3d 3d 20 20 |   =====|======  |
|00000d80| 20 20 20 3d 3d 3d 20 3d | 3d 3d 3d 3d 3d 3d 20 3d |   === =|====== =|
|00000d90| 3d 3d 0a 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |==.     |        |
|00000da0| 20 20 20 20 20 20 20 3d | 3d 3d 20 20 20 20 20 20 |       =|==      |
|00000db0| 3d 3d 3d 20 20 20 20 20 | 3d 3d 3d 3d 20 20 20 20 |===     |====    |
|00000dc0| 3d 3d 3d 20 20 3d 3d 3d | 3d 3d 20 20 3d 3d 3d 0a |===  ===|==  ===.|
|00000dd0| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |        |        |
|00000de0| 20 20 3d 3d 3d 3d 3d 3d | 3d 20 20 3d 3d 3d 3d 3d |  ======|=  =====|
|00000df0| 3d 3d 3d 3d 3d 3d 3d 3d | 3d 20 20 3d 3d 3d 3d 3d |========|=  =====|
|00000e00| 20 20 20 3d 3d 3d 20 20 | 20 3d 3d 3d 3d 3d 0a 20 |   ===  | =====. |
|00000e10| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |        |        |
|00000e20| 20 3d 3d 3d 3d 3d 3d 3d | 20 20 3d 3d 3d 3d 3d 3d | =======|  ======|
|00000e30| 3d 3d 3d 3d 3d 3d 20 20 | 20 20 3d 3d 3d 3d 3d 20 |======  |  ===== |
|00000e40| 20 20 20 3d 20 20 20 20 | 3d 3d 3d 3d 3d 0a 0a 20 |   =    |=====.. |
|00000e50| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |        |        |
|00000e60| 20 20 20 20 20 20 20 20 | 20 20 45 4d 45 52 47 45 |        |  EMERGE|
|00000e70| 4e 43 59 20 52 45 53 50 | 4f 4e 53 45 20 53 45 52 |NCY RESP|ONSE SER|
|00000e80| 56 49 43 45 0a 09 09 09 | 20 20 53 45 43 55 52 49 |VICE....|  SECURI|
|00000e90| 54 59 20 56 55 4c 4e 45 | 52 41 42 49 4c 49 54 59 |TY VULNE|RABILITY|
|00000ea0| 20 41 4c 45 52 54 0a 0a | 32 31 20 41 75 67 75 73 | ALERT..|21 Augus|
|00000eb0| 74 20 31 39 39 36 20 31 | 33 3a 30 30 20 47 4d 54 |t 1996 1|3:00 GMT|
|00000ec0| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |        |        |
|00000ed0| 20 20 20 20 20 20 20 20 | 20 4e 75 6d 62 65 72 3a |        | Number:|
|00000ee0| 20 45 52 53 2d 53 56 41 | 2d 45 30 31 2d 31 39 39 | ERS-SVA|-E01-199|
|00000ef0| 36 3a 30 30 34 2e 31 0a | 3d 3d 3d 3d 3d 3d 3d 3d |6:004.1.|========|
|00000f00| 3d 3d 3d 3d 3d 3d 3d 3d | 3d 3d 3d 3d 3d 3d 3d 3d |========|========|
|00000f10| 3d 3d 3d 3d 3d 3d 3d 3d | 3d 3d 3d 3d 3d 3d 3d 3d |========|========|
|00000f20| 3d 3d 3d 3d 3d 3d 3d 3d | 3d 3d 3d 3d 3d 3d 3d 3d |========|========|
|00000f30| 3d 3d 3d 3d 3d 3d 3d 3d | 3d 3d 3d 3d 3d 3d 3d 3d |========|========|
|00000f40| 3d 3d 3d 3d 3d 3d 3d 0a | 20 20 20 20 20 20 20 20 |=======.|        |
|00000f50| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |        |        |
|00000f60| 20 20 20 20 20 56 55 4c | 4e 45 52 41 42 49 4c 49 |     VUL|NERABILI|
|00000f70| 54 59 20 20 53 55 4d 4d | 41 52 59 0a 0a 56 55 4c |TY  SUMM|ARY..VUL|
|00000f80| 4e 45 52 41 42 49 4c 49 | 54 59 3a 20 20 41 20 76 |NERABILI|TY:  A v|
|00000f90| 61 72 69 61 62 6c 65 20 | 64 65 63 6c 61 72 61 74 |ariable |declarat|
|00000fa0| 69 6f 6e 20 65 72 72 6f | 72 20 69 6e 20 22 62 61 |ion erro|r in "ba|
|00000fb0| 73 68 22 20 61 6c 6c 6f | 77 73 20 74 68 65 20 63 |sh" allo|ws the c|
|00000fc0| 68 61 72 61 63 74 65 72 | 0a 09 09 77 69 74 68 20 |haracter|...with |
|00000fd0| 76 61 6c 75 65 20 32 35 | 35 20 64 65 63 69 6d 61 |value 25|5 decima|
|00000fe0| 6c 20 74 6f 20 62 65 20 | 75 73 65 64 20 61 73 20 |l to be |used as |
|00000ff0| 61 20 63 6f 6d 6d 61 6e | 64 20 73 65 70 61 72 61 |a comman|d separa|
|00001000| 74 6f 72 2e 0a 0a 50 4c | 41 54 46 4f 52 4d 53 3a |tor...PL|ATFORMS:|
|00001010| 09 42 61 73 68 20 31 2e | 31 34 2e 36 20 61 6e 64 |.Bash 1.|14.6 and|
|00001020| 20 65 61 72 6c 69 65 72 | 20 76 65 72 73 69 6f 6e | earlier| version|
|00001030| 73 2e 0a 0a 53 4f 4c 55 | 54 49 4f 4e 3a 09 41 70 |s...SOLU|TION:.Ap|
|00001040| 70 6c 79 20 74 68 65 20 | 70 61 74 63 68 20 70 72 |ply the |patch pr|
|00001050| 6f 76 69 64 65 64 20 62 | 65 6c 6f 77 2e 0a 0a 54 |ovided b|elow...T|
|00001060| 48 52 45 41 54 3a 09 09 | 57 68 65 6e 20 75 73 65 |HREAT:..|When use|
|00001070| 64 20 69 6e 20 65 6e 76 | 69 72 6f 6e 6d 65 6e 74 |d in env|ironment|
|00001080| 73 20 77 68 65 72 65 20 | 75 73 65 72 73 20 70 72 |s where |users pr|
|00001090| 6f 76 69 64 65 20 73 74 | 72 69 6e 67 73 20 74 6f |ovide st|rings to|
|000010a0| 20 62 65 0a 09 09 75 73 | 65 64 20 61 73 20 63 6f | be...us|ed as co|
|000010b0| 6d 6d 61 6e 64 73 20 6f | 72 20 61 72 67 75 6d 65 |mmands o|r argume|
|000010c0| 6e 74 73 20 74 6f 20 63 | 6f 6d 6d 61 6e 64 73 2c |nts to c|ommands,|
|000010d0| 20 22 62 61 73 68 22 20 | 63 61 6e 20 62 65 0a 09 | "bash" |can be..|
|000010e0| 09 74 72 69 63 6b 65 64 | 20 69 6e 74 6f 20 65 78 |.tricked| into ex|
|000010f0| 65 63 75 74 69 6e 67 20 | 61 72 62 69 74 72 61 72 |ecuting |arbitrar|
|00001100| 79 20 63 6f 6d 6d 61 6e | 64 73 2e 0a 0a 3d 3d 3d |y comman|ds...===|
|00001110| 3d 3d 3d 3d 3d 3d 3d 3d | 3d 3d 3d 3d 3d 3d 3d 3d |========|========|
|00001120| 3d 3d 3d 3d 3d 3d 3d 3d | 3d 3d 3d 3d 3d 3d 3d 3d |========|========|
|00001130| 3d 3d 3d 3d 3d 3d 3d 3d | 3d 3d 3d 3d 3d 3d 3d 3d |========|========|
|00001140| 3d 3d 3d 3d 3d 3d 3d 3d | 3d 3d 3d 3d 3d 3d 3d 3d |========|========|
|00001150| 3d 3d 3d 3d 3d 3d 3d 3d | 3d 3d 3d 3d 0a 20 20 20 |========|====.   |
|00001160| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |        |        |
|00001170| 20 20 20 20 20 20 20 20 | 20 20 20 44 45 54 41 49 |        |   DETAI|
|00001180| 4c 45 44 20 49 4e 46 4f | 52 4d 41 54 49 4f 4e 0a |LED INFO|RMATION.|
|00001190| 0a 49 2e 20 44 65 73 63 | 72 69 70 74 69 6f 6e 0a |.I. Desc|ription.|
|000011a0| 0a 20 20 20 41 2e 20 49 | 6e 74 72 6f 64 75 63 74 |.   A. I|ntroduct|
|000011b0| 69 6f 6e 0a 0a 20 20 20 | 20 20 20 54 68 65 20 47 |ion..   |   The G|
|000011c0| 4e 55 20 50 72 6f 6a 65 | 63 74 27 73 20 42 6f 75 |NU Proje|ct's Bou|
|000011d0| 72 6e 65 20 41 67 61 69 | 6e 20 53 48 65 6c 6c 20 |rne Agai|n SHell |
|000011e0| 28 22 62 61 73 68 22 29 | 20 69 73 20 61 20 64 72 |("bash")| is a dr|
|000011f0| 6f 70 2d 69 6e 20 72 65 | 70 6c 61 63 65 6d 65 6e |op-in re|placemen|
|00001200| 74 0a 20 20 20 20 20 20 | 66 6f 72 20 74 68 65 20 |t.      |for the |
|00001210| 55 4e 49 58 20 42 6f 75 | 72 6e 65 20 73 68 65 6c |UNIX Bou|rne shel|
|00001220| 6c 20 28 2f 62 69 6e 2f | 73 68 29 2e 20 20 49 74 |l (/bin/|sh).  It|
|00001230| 20 6f 66 66 65 72 73 20 | 74 68 65 20 73 61 6d 65 | offers |the same|
|00001240| 20 73 79 6e 74 61 78 20 | 61 73 20 74 68 65 0a 20 | syntax |as the. |
|00001250| 20 20 20 20 20 73 74 61 | 6e 64 61 72 64 20 73 68 |     sta|ndard sh|
|00001260| 65 6c 6c 2c 20 62 75 74 | 20 61 6c 73 6f 20 69 6e |ell, but| also in|
|00001270| 63 6c 75 64 65 73 20 61 | 64 64 69 74 69 6f 6e 61 |cludes a|dditiona|
|00001280| 6c 20 66 75 6e 63 74 69 | 6f 6e 61 6c 69 74 79 20 |l functi|onality |
|00001290| 73 75 63 68 20 61 73 20 | 6a 6f 62 0a 20 20 20 20 |such as |job.    |
|000012a0| 20 20 63 6f 6e 74 72 6f | 6c 2c 20 63 6f 6d 6d 61 |  contro|l, comma|
|000012b0| 6e 64 20 6c 69 6e 65 20 | 65 64 69 74 69 6e 67 2c |nd line |editing,|
|000012c0| 20 61 6e 64 20 68 69 73 | 74 6f 72 79 2e 0a 0a 20 | and his|tory... |
|000012d0| 20 20 20 20 20 41 6c 74 | 68 6f 75 67 68 20 22 62 |     Alt|hough "b|
|000012e0| 61 73 68 22 20 63 61 6e | 20 62 65 20 63 6f 6d 70 |ash" can| be comp|
|000012f0| 69 6c 65 64 20 61 6e 64 | 20 69 6e 73 74 61 6c 6c |iled and| install|
|00001300| 65 64 20 6f 6e 20 61 6c | 6d 6f 73 74 20 61 6e 79 |ed on al|most any|
|00001310| 20 55 4e 49 58 0a 20 20 | 20 20 20 20 70 6c 61 74 | UNIX.  |    plat|
|00001320| 66 6f 72 6d 2c 20 69 74 | 73 20 6d 6f 73 74 20 70 |form, it|s most p|
|00001330| 72 65 76 61 6c 65 6e 74 | 20 75 73 65 20 69 73 20 |revalent| use is |
|00001340| 6f 6e 20 22 66 72 65 65 | 22 20 76 65 72 73 69 6f |on "free|" versio|
|00001350| 6e 73 20 6f 66 20 55 4e | 49 58 20 73 75 63 68 20 |ns of UN|IX such |
|00001360| 61 73 0a 20 20 20 20 20 | 20 4c 69 6e 75 78 2c 20 |as.     | Linux, |
|00001370| 77 68 65 72 65 20 69 74 | 20 68 61 73 20 62 65 65 |where it| has bee|
|00001380| 6e 20 69 6e 73 74 61 6c | 6c 65 64 20 61 73 20 22 |n instal|led as "|
|00001390| 2f 62 69 6e 2f 73 68 22 | 20 28 74 68 65 20 64 65 |/bin/sh"| (the de|
|000013a0| 66 61 75 6c 74 20 73 68 | 65 6c 6c 20 66 6f 72 0a |fault sh|ell for.|
|000013b0| 20 20 20 20 20 20 6d 6f | 73 74 20 75 73 65 73 29 |      mo|st uses)|
|000013c0| 2e 0a 0a 20 20 20 20 20 | 20 54 68 65 20 22 62 61 |...     | The "ba|
|000013d0| 73 68 22 20 73 6f 75 72 | 63 65 20 63 6f 64 65 20 |sh" sour|ce code |
|000013e0| 69 73 20 66 72 65 65 6c | 79 20 61 76 61 69 6c 61 |is freel|y availa|
|000013f0| 62 6c 65 20 66 72 6f 6d | 20 6d 61 6e 79 20 73 69 |ble from| many si|
|00001400| 74 65 73 20 6f 6e 20 74 | 68 65 0a 20 20 20 20 20 |tes on t|he.     |
|00001410| 20 49 6e 74 65 72 6e 65 | 74 2e 0a 0a 20 20 20 42 | Interne|t...   B|
|00001420| 2e 20 56 75 6c 6e 65 72 | 61 62 69 6c 69 74 79 20 |. Vulner|ability |
|00001430| 44 65 74 61 69 6c 73 0a | 0a 20 20 20 20 20 20 54 |Details.|.      T|
|00001440| 68 65 72 65 20 69 73 20 | 61 20 76 61 72 69 61 62 |here is |a variab|
|00001450| 6c 65 20 64 65 63 6c 61 | 72 61 74 69 6f 6e 20 65 |le decla|ration e|
|00001460| 72 72 6f 72 20 69 6e 20 | 74 68 65 20 22 79 79 5f |rror in |the "yy_|
|00001470| 73 74 72 69 6e 67 5f 67 | 65 74 28 29 22 20 66 75 |string_g|et()" fu|
|00001480| 6e 63 74 69 6f 6e 0a 20 | 20 20 20 20 20 69 6e 20 |nction. |     in |
|00001490| 74 68 65 20 22 70 61 72 | 73 65 72 2e 79 22 20 6d |the "par|ser.y" m|
|000014a0| 6f 64 75 6c 65 20 6f 66 | 20 74 68 65 20 22 62 61 |odule of| the "ba|
|000014b0| 73 68 22 20 73 6f 75 72 | 63 65 20 63 6f 64 65 2e |sh" sour|ce code.|
|000014c0| 20 20 54 68 69 73 20 66 | 75 6e 63 74 69 6f 6e 20 |  This f|unction |
|000014d0| 69 73 0a 20 20 20 20 20 | 20 72 65 73 70 6f 6e 73 |is.     | respons|
|000014e0| 69 62 6c 65 20 66 6f 72 | 20 70 61 72 73 69 6e 67 |ible for| parsing|
|000014f0| 20 74 68 65 20 75 73 65 | 72 2d 70 72 6f 76 69 64 | the use|r-provid|
|00001500| 65 64 20 63 6f 6d 6d 61 | 6e 64 20 6c 69 6e 65 20 |ed comma|nd line |
|00001510| 69 6e 74 6f 20 73 65 70 | 61 72 61 74 65 0a 20 20 |into sep|arate.  |
|00001520| 20 20 20 20 74 6f 6b 65 | 6e 73 20 28 63 6f 6d 6d |    toke|ns (comm|
|00001530| 61 6e 64 73 2c 20 73 70 | 65 63 69 61 6c 20 63 68 |ands, sp|ecial ch|
|00001540| 61 72 61 63 74 65 72 73 | 2c 20 61 72 67 75 6d 65 |aracters|, argume|
|00001550| 6e 74 73 2c 20 65 74 63 | 2e 29 2e 20 20 54 68 65 |nts, etc|.).  The|
|00001560| 20 65 72 72 6f 72 0a 20 | 20 20 20 20 20 69 6e 76 | error. |     inv|
|00001570| 6f 6c 76 65 73 20 74 68 | 65 20 76 61 72 69 61 62 |olves th|e variab|
|00001580| 6c 65 20 22 73 74 72 69 | 6e 67 2c 22 20 77 68 69 |le "stri|ng," whi|
|00001590| 63 68 20 68 61 73 20 62 | 65 65 6e 20 64 65 63 6c |ch has b|een decl|
|000015a0| 61 72 65 64 20 74 6f 20 | 62 65 20 6f 66 20 74 79 |ared to |be of ty|
|000015b0| 70 65 0a 20 20 20 20 20 | 20 22 63 68 61 72 20 2a |pe.     | "char *|
|000015c0| 2e 22 0a 0a 20 20 20 20 | 20 20 54 68 65 20 22 73 |."..    |  The "s|
|000015d0| 74 72 69 6e 67 22 20 76 | 61 72 69 61 62 6c 65 20 |tring" v|ariable |
|000015e0| 69 73 20 75 73 65 64 20 | 74 6f 20 74 72 61 76 65 |is used |to trave|
|000015f0| 72 73 65 20 74 68 65 20 | 63 68 61 72 61 63 74 65 |rse the |characte|
|00001600| 72 20 73 74 72 69 6e 67 | 0a 20 20 20 20 20 20 63 |r string|.      c|
|00001610| 6f 6e 74 61 69 6e 69 6e | 67 20 74 68 65 20 63 6f |ontainin|g the co|
|00001620| 6d 6d 61 6e 64 20 6c 69 | 6e 65 20 74 6f 20 62 65 |mmand li|ne to be|
|00001630| 20 70 61 72 73 65 64 2e | 20 20 41 73 20 63 68 61 | parsed.|  As cha|
|00001640| 72 61 63 74 65 72 73 20 | 61 72 65 20 72 65 74 72 |racters |are retr|
|00001650| 69 65 76 65 64 0a 20 20 | 20 20 20 20 66 72 6f 6d |ieved.  |    from|
|00001660| 20 74 68 69 73 20 70 6f | 69 6e 74 65 72 2c 20 74 | this po|inter, t|
|00001670| 68 65 79 20 61 72 65 20 | 73 74 6f 72 65 64 20 69 |hey are |stored i|
|00001680| 6e 20 61 20 76 61 72 69 | 61 62 6c 65 20 6f 66 20 |n a vari|able of |
|00001690| 74 79 70 65 20 22 69 6e | 74 2e 22 20 20 4f 6e 0a |type "in|t."  On.|
|000016a0| 20 20 20 20 20 20 73 79 | 73 74 65 6d 73 2f 63 6f |      sy|stems/co|
|000016b0| 6d 70 69 6c 65 72 73 20 | 77 68 65 72 65 20 74 68 |mpilers |where th|
|000016c0| 65 20 22 63 68 61 72 22 | 20 74 79 70 65 20 64 65 |e "char"| type de|
|000016d0| 66 61 75 6c 74 73 20 74 | 6f 20 22 73 69 67 6e 65 |faults t|o "signe|
|000016e0| 64 20 63 68 61 72 22 2c | 20 74 68 69 73 0a 20 20 |d char",| this.  |
|000016f0| 20 20 20 20 76 61 75 6c | 65 20 77 69 6c 6c 20 62 |    vaul|e will b|
|00001700| 65 20 73 69 67 6e 2d 65 | 78 74 65 6e 64 65 64 20 |e sign-e|xtended |
|00001710| 77 68 65 6e 20 69 74 20 | 69 73 20 61 73 73 69 67 |when it |is assig|
|00001720| 6e 65 64 20 74 6f 20 74 | 68 65 20 22 69 6e 74 22 |ned to t|he "int"|
|00001730| 20 76 61 72 69 61 62 6c | 65 2e 0a 20 20 20 20 20 | variabl|e..     |
|00001740| 20 46 6f 72 20 63 68 61 | 72 61 63 74 65 72 20 63 | For cha|racter c|
|00001750| 6f 64 65 20 32 35 35 20 | 64 65 63 69 6d 61 6c 20 |ode 255 |decimal |
|00001760| 28 2d 31 20 69 6e 20 74 | 77 6f 27 73 20 63 6f 6d |(-1 in t|wo's com|
|00001770| 70 6c 65 6d 65 6e 74 20 | 66 6f 72 6d 29 2c 20 74 |plement |form), t|
|00001780| 68 69 73 20 73 69 67 6e | 0a 20 20 20 20 20 20 65 |his sign|.      e|
|00001790| 78 74 65 6e 73 69 6f 6e | 20 72 65 73 75 6c 74 73 |xtension| results|
|000017a0| 20 69 6e 20 74 68 65 20 | 76 61 6c 75 65 20 28 2d | in the |value (-|
|000017b0| 31 29 20 62 65 69 6e 67 | 20 61 73 73 69 67 6e 65 |1) being| assigne|
|000017c0| 64 20 74 6f 20 74 68 65 | 20 69 6e 74 65 67 65 72 |d to the| integer|
|000017d0| 2e 0a 0a 20 20 20 20 20 | 20 48 6f 77 65 76 65 72 |...     | However|
|000017e0| 2c 20 28 2d 31 29 20 69 | 73 20 75 73 65 64 20 69 |, (-1) i|s used i|
|000017f0| 6e 20 6f 74 68 65 72 20 | 70 61 72 74 73 20 6f 66 |n other |parts of|
|00001800| 20 74 68 65 20 70 61 72 | 73 65 72 20 74 6f 20 69 | the par|ser to i|
|00001810| 6e 64 69 63 61 74 65 20 | 74 68 65 20 65 6e 64 0a |ndicate |the end.|
|00001820| 20 20 20 20 20 20 6f 66 | 20 61 20 63 6f 6d 6d 61 |      of| a comma|
|00001830| 6e 64 2e 20 20 54 68 75 | 73 2c 20 74 68 65 20 63 |nd.  Thu|s, the c|
|00001840| 68 61 72 61 63 74 65 72 | 20 63 6f 64 65 20 32 35 |haracter| code 25|
|00001850| 35 20 64 65 63 69 6d 61 | 6c 20 28 33 37 37 20 6f |5 decima|l (377 o|
|00001860| 63 74 61 6c 29 20 77 69 | 6c 6c 0a 20 20 20 20 20 |ctal) wi|ll.     |
|00001870| 20 73 65 72 76 65 20 61 | 73 20 61 6e 20 75 6e 69 | serve a|s an uni|
|00001880| 6e 74 65 6e 64 65 64 20 | 63 6f 6d 6d 61 6e 64 20 |ntended |command |
|00001890| 73 65 70 61 72 61 74 6f | 72 20 66 6f 72 20 63 6f |separato|r for co|
|000018a0| 6d 6d 61 6e 64 73 20 67 | 69 76 65 6e 20 74 6f 20 |mmands g|iven to |
|000018b0| 22 62 61 73 68 22 0a 20 | 20 20 20 20 20 76 69 61 |"bash". |     via|
|000018c0| 20 74 68 65 20 22 2d 63 | 22 20 6f 70 74 69 6f 6e | the "-c|" option|
|000018d0| 2e 20 20 46 6f 72 20 65 | 78 61 6d 70 6c 65 2c 0a |.  For e|xample,.|
|000018e0| 0a 09 62 61 73 68 20 2d | 63 20 27 6c 73 5c 33 37 |..bash -|c 'ls\37|
|000018f0| 37 77 68 6f 27 0a 0a 20 | 20 20 20 20 20 28 77 68 |7who'.. |     (wh|
|00001900| 65 72 65 20 22 5c 33 37 | 37 22 20 72 65 70 72 65 |ere "\37|7" repre|
|00001910| 73 65 6e 74 73 20 74 68 | 65 20 73 69 6e 67 6c 65 |sents th|e single|
|00001920| 20 63 68 61 72 61 63 74 | 65 72 20 77 69 74 68 20 | charact|er with |
|00001930| 76 61 6c 75 65 20 32 35 | 35 20 64 65 63 69 6d 61 |value 25|5 decima|
|00001940| 6c 29 0a 20 20 20 20 20 | 20 77 69 6c 6c 20 65 78 |l).     | will ex|
|00001950| 65 63 75 74 65 20 74 77 | 6f 20 63 6f 6d 6d 61 6e |ecute tw|o comman|
|00001960| 64 73 2c 20 22 6c 73 22 | 20 61 6e 64 20 22 77 68 |ds, "ls"| and "wh|
|00001970| 6f 2e 22 0a 0a 49 49 2e | 20 49 6d 70 61 63 74 0a |o."..II.| Impact.|
|00001980| 0a 54 68 69 73 20 75 6e | 65 78 70 65 63 74 65 64 |.This un|expected|
|00001990| 20 63 6f 6d 6d 61 6e 64 | 20 73 65 70 61 72 61 74 | command| separat|
|000019a0| 6f 72 20 63 61 6e 20 62 | 65 20 64 61 6e 67 65 72 |or can b|e danger|
|000019b0| 6f 75 73 2c 20 65 73 70 | 65 63 69 61 6c 6c 79 20 |ous, esp|ecially |
|000019c0| 6f 6e 20 73 79 73 74 65 | 6d 73 20 73 75 63 68 0a |on syste|ms such.|
|000019d0| 61 73 20 4c 69 6e 75 78 | 20 77 68 65 72 65 20 22 |as Linux| where "|
|000019e0| 62 61 73 68 22 20 68 61 | 73 20 62 65 65 6e 20 69 |bash" ha|s been i|
|000019f0| 6e 73 74 61 6c 6c 65 64 | 20 61 73 20 22 2f 62 69 |nstalled| as "/bi|
|00001a00| 6e 2f 73 68 2c 22 20 77 | 68 65 6e 20 61 20 70 72 |n/sh," w|hen a pr|
|00001a10| 6f 67 72 61 6d 20 65 78 | 65 63 75 74 65 73 0a 61 |ogram ex|ecutes.a|
|00001a20| 20 63 6f 6d 6d 61 6e 64 | 20 77 69 74 68 20 61 20 | command| with a |
|00001a30| 73 74 72 69 6e 67 20 70 | 72 6f 76 69 64 65 64 20 |string p|rovided |
|00001a40| 62 79 20 61 20 75 73 65 | 72 20 61 73 20 61 6e 20 |by a use|r as an |
|00001a50| 61 72 67 75 6d 65 6e 74 | 20 75 73 69 6e 67 20 74 |argument| using t|
|00001a60| 68 65 20 22 73 79 73 74 | 65 6d 28 29 22 0a 6f 72 |he "syst|em()".or|
|00001a70| 20 22 70 6f 70 65 6e 28 | 29 22 20 66 75 6e 63 74 | "popen(|)" funct|
|00001a80| 69 6f 6e 73 20 28 6f 72 | 20 62 79 20 63 61 6c 6c |ions (or| by call|
|00001a90| 69 6e 67 20 22 2f 62 69 | 6e 2f 73 68 20 2d 63 20 |ing "/bi|n/sh -c |
|00001aa0| 73 74 72 69 6e 67 22 20 | 64 69 72 65 63 74 6c 79 |string" |directly|
|00001ab0| 29 2e 0a 0a 54 68 69 73 | 20 69 73 20 65 73 70 65 |)...This| is espe|
|00001ac0| 63 69 61 6c 6c 79 20 74 | 72 75 65 20 66 6f 72 20 |cially t|rue for |
|00001ad0| 74 68 65 20 43 47 49 20 | 70 72 6f 67 72 61 6d 6d |the CGI |programm|
|00001ae0| 69 6e 67 20 69 6e 74 65 | 72 66 61 63 65 20 69 6e |ing inte|rface in|
|00001af0| 20 57 6f 72 6c 64 20 57 | 69 64 65 20 57 65 62 0a | World W|ide Web.|
|00001b00| 73 65 72 76 65 72 73 2c | 20 6d 61 6e 79 20 6f 66 |servers,| many of|
|00001b10| 20 77 68 69 63 68 20 64 | 6f 20 6e 6f 74 20 73 74 | which d|o not st|
|00001b20| 72 69 70 20 6f 75 74 20 | 63 68 61 72 61 63 74 65 |rip out |characte|
|00001b30| 72 73 20 77 69 74 68 20 | 76 61 6c 75 65 20 32 35 |rs with |value 25|
|00001b40| 35 20 64 65 63 69 6d 61 | 6c 2e 20 20 49 66 0a 61 |5 decima|l.  If.a|
|00001b50| 20 75 73 65 72 20 73 65 | 6e 64 69 6e 67 20 64 61 | user se|nding da|
|00001b60| 74 61 20 74 6f 20 74 68 | 65 20 73 65 72 76 65 72 |ta to th|e server|
|00001b70| 20 63 61 6e 20 73 70 65 | 63 69 66 79 20 74 68 65 | can spe|cify the|
|00001b80| 20 63 68 61 72 61 63 74 | 65 72 20 63 6f 64 65 20 | charact|er code |
|00001b90| 32 35 35 20 69 6e 20 61 | 0a 73 74 72 69 6e 67 20 |255 in a|.string |
|00001ba0| 74 68 61 74 20 69 73 20 | 70 61 73 73 65 64 20 74 |that is |passed t|
|00001bb0| 6f 20 61 20 73 68 65 6c | 6c 2c 20 61 6e 64 20 74 |o a shel|l, and t|
|00001bc0| 68 61 74 20 73 68 65 6c | 6c 20 69 73 20 22 62 61 |hat shel|l is "ba|
|00001bd0| 73 68 2c 22 20 74 68 65 | 20 75 73 65 72 20 63 61 |sh," the| user ca|
|00001be0| 6e 0a 65 78 65 63 75 74 | 65 20 61 6e 79 20 61 72 |n.execut|e any ar|
|00001bf0| 62 69 74 72 61 72 79 20 | 63 6f 6d 6d 61 6e 64 20 |bitrary |command |
|00001c00| 77 69 74 68 20 74 68 65 | 20 75 73 65 72 2d 69 64 |with the| user-id|
|00001c10| 20 61 6e 64 20 70 65 72 | 6d 69 73 73 69 6f 6e 73 | and per|missions|
|00001c20| 20 6f 66 20 74 68 65 20 | 75 73 65 72 0a 72 75 6e | of the |user.run|
|00001c30| 6e 69 6e 67 20 74 68 65 | 20 73 65 72 76 65 72 20 |ning the| server |
|00001c40| 28 66 72 65 71 75 65 6e | 74 6c 79 20 22 72 6f 6f |(frequen|tly "roo|
|00001c50| 74 22 29 2e 0a 0a 54 68 | 65 20 22 62 61 73 68 22 |t")...Th|e "bash"|
|00001c60| 20 62 75 69 6c 74 2d 69 | 6e 20 63 6f 6d 6d 61 6e | built-i|n comman|
|00001c70| 64 73 20 22 65 76 61 6c | 2c 22 20 22 73 6f 75 72 |ds "eval|," "sour|
|00001c80| 63 65 2c 22 20 61 6e 64 | 20 22 66 63 22 20 61 72 |ce," and| "fc" ar|
|00001c90| 65 20 61 6c 73 6f 20 70 | 6f 74 65 6e 74 69 61 6c |e also p|otential|
|00001ca0| 6c 79 0a 76 75 6c 6e 65 | 72 61 62 6c 65 20 74 6f |ly.vulne|rable to|
|00001cb0| 20 74 68 69 73 20 70 72 | 6f 62 6c 65 6d 2e 0a 0a | this pr|oblem...|
|00001cc0| 49 49 49 2e 20 53 6f 6c | 75 74 69 6f 6e 73 0a 0a |III. Sol|utions..|
|00001cd0| 20 20 20 41 2e 20 48 6f | 77 20 74 6f 20 61 6c 6c |   A. Ho|w to all|
|00001ce0| 65 76 69 61 74 65 20 74 | 68 65 20 70 72 6f 62 6c |eviate t|he probl|
|00001cf0| 65 6d 0a 0a 20 20 20 20 | 20 20 54 68 69 73 20 70 |em..    |  This p|
|00001d00| 72 6f 62 6c 65 6d 20 63 | 61 6e 20 62 65 20 61 6c |roblem c|an be al|
|00001d10| 6c 65 76 69 61 74 65 64 | 20 62 79 20 63 68 61 6e |leviated| by chan|
|00001d20| 67 69 6e 67 20 74 68 65 | 20 64 65 63 6c 61 72 61 |ging the| declara|
|00001d30| 74 69 6f 6e 20 6f 66 20 | 74 68 65 0a 20 20 20 20 |tion of |the.    |
|00001d40| 20 20 22 73 74 72 69 6e | 67 22 20 76 61 72 69 61 |  "strin|g" varia|
|00001d50| 62 6c 65 20 69 6e 20 74 | 68 65 20 22 79 79 5f 73 |ble in t|he "yy_s|
|00001d60| 74 72 69 6e 67 5f 67 65 | 74 28 29 22 20 66 75 6e |tring_ge|t()" fun|
|00001d70| 63 74 69 6f 6e 20 66 72 | 6f 6d 20 22 63 68 61 72 |ction fr|om "char|
|00001d80| 20 2a 22 20 74 6f 0a 20 | 20 20 20 20 20 22 75 6e | *" to. |     "un|
|00001d90| 73 69 67 6e 65 64 20 63 | 68 61 72 20 2a 2e 22 0a |signed c|har *.".|
|00001da0| 0a 20 20 20 42 2e 20 4f | 66 66 69 63 69 61 6c 20 |.   B. O|fficial |
|00001db0| 66 69 78 20 66 72 6f 6d | 20 74 68 65 20 22 62 61 |fix from| the "ba|
|00001dc0| 73 68 22 20 6d 61 69 6e | 74 61 69 6e 65 72 73 0a |sh" main|tainers.|
|00001dd0| 0a 20 20 20 20 20 20 54 | 68 65 20 22 62 61 73 68 |.      T|he "bash|
|00001de0| 22 20 6d 61 69 6e 74 61 | 69 6e 65 72 73 20 68 61 |" mainta|iners ha|
|00001df0| 76 65 20 74 6f 6c 64 20 | 75 73 20 74 68 65 79 20 |ve told |us they |
|00001e00| 70 6c 61 6e 20 74 6f 20 | 66 69 78 20 74 68 69 73 |plan to |fix this|
|00001e10| 20 70 72 6f 62 6c 65 6d | 20 69 6e 0a 20 20 20 20 | problem| in.    |
|00001e20| 20 20 56 65 72 73 69 6f | 6e 20 32 2e 30 20 6f 66 |  Versio|n 2.0 of|
|00001e30| 20 22 62 61 73 68 2c 22 | 20 62 75 74 20 74 68 69 | "bash,"| but thi|
|00001e40| 73 20 77 69 6c 6c 20 6e | 6f 74 20 62 65 20 72 65 |s will n|ot be re|
|00001e50| 6c 65 61 73 65 64 20 66 | 6f 72 20 61 74 20 6c 65 |leased f|or at le|
|00001e60| 61 73 74 20 61 20 66 65 | 77 0a 20 20 20 20 20 20 |ast a fe|w.      |
|00001e70| 6d 6f 72 65 20 6d 6f 6e | 74 68 73 2e 0a 0a 20 20 |more mon|ths...  |
|00001e80| 20 43 2e 20 55 6e 6f 66 | 66 69 63 69 61 6c 20 66 | C. Unof|ficial f|
|00001e90| 69 78 20 75 6e 74 69 6c | 20 74 68 65 20 6f 66 66 |ix until| the off|
|00001ea0| 69 63 69 61 6c 20 76 65 | 72 73 69 6f 6e 20 69 73 |icial ve|rsion is|
|00001eb0| 20 72 65 6c 65 61 73 65 | 64 0a 0a 20 20 20 20 20 | release|d..     |
|00001ec0| 20 55 6e 74 69 6c 20 74 | 68 65 20 22 62 61 73 68 | Until t|he "bash|
|00001ed0| 22 20 6d 61 69 6e 74 61 | 69 6e 65 72 73 20 72 65 |" mainta|iners re|
|00001ee0| 6c 65 61 73 65 20 56 65 | 72 73 69 6f 6e 20 32 2e |lease Ve|rsion 2.|
|00001ef0| 30 2c 20 74 68 69 73 20 | 70 72 6f 62 6c 65 6d 20 |0, this |problem |
|00001f00| 63 61 6e 20 62 65 0a 20 | 20 20 20 20 20 66 69 78 |can be. |     fix|
|00001f10| 65 64 20 62 79 20 61 70 | 70 6c 79 69 6e 67 20 74 |ed by ap|plying t|
|00001f20| 68 65 20 70 61 74 63 68 | 20 62 65 6c 6f 77 20 74 |he patch| below t|
|00001f30| 6f 20 74 68 65 20 22 62 | 61 73 68 22 20 73 6f 75 |o the "b|ash" sou|
|00001f40| 72 63 65 20 63 6f 64 65 | 2c 20 72 65 63 6f 6d 70 |rce code|, recomp|
|00001f50| 69 6c 69 6e 67 0a 20 20 | 20 20 20 20 74 68 65 20 |iling.  |    the |
|00001f60| 70 72 6f 67 72 61 6d 2c | 20 61 6e 64 20 69 6e 73 |program,| and ins|
|00001f70| 74 61 6c 6c 69 6e 67 20 | 74 68 65 20 6e 65 77 20 |talling |the new |
|00001f80| 76 65 72 73 69 6f 6e 2e | 0a 0a 20 20 20 20 20 20 |version.|..      |
|00001f90| 54 68 65 20 70 61 74 63 | 68 20 62 65 6c 6f 77 20 |The patc|h below |
|00001fa0| 69 73 20 66 6f 72 20 56 | 65 72 73 69 6f 6e 20 31 |is for V|ersion 1|
|00001fb0| 2e 31 34 2e 36 20 6f 66 | 20 22 62 61 73 68 2e 22 |.14.6 of| "bash."|
|00001fc0| 20 20 53 6f 75 72 63 65 | 20 63 6f 64 65 20 66 6f |  Source| code fo|
|00001fd0| 72 20 74 68 69 73 0a 20 | 20 20 20 20 20 76 65 72 |r this. |     ver|
|00001fe0| 73 69 6f 6e 20 63 61 6e | 20 62 65 20 6f 62 74 61 |sion can| be obta|
|00001ff0| 69 6e 65 64 20 66 72 6f | 6d 0a 0a 09 20 66 74 70 |ined fro|m... ftp|
|00002000| 3a 2f 2f 70 72 65 70 2e | 61 69 2e 6d 69 74 2e 65 |://prep.|ai.mit.e|
|00002010| 64 75 2f 70 75 62 2f 67 | 6e 75 2f 62 61 73 68 2d |du/pub/g|nu/bash-|
|00002020| 31 2e 31 34 2e 36 2e 74 | 61 72 2e 67 7a 0a 0a 20 |1.14.6.t|ar.gz.. |
|00002030| 20 20 20 20 20 61 73 20 | 77 65 6c 6c 20 61 73 20 |     as |well as |
|00002040| 6d 61 6e 79 20 6f 74 68 | 65 72 20 73 69 74 65 73 |many oth|er sites|
|00002050| 20 61 72 6f 75 6e 64 20 | 74 68 65 20 49 6e 74 65 | around |the Inte|
|00002060| 72 6e 65 74 2e 0a 0a 2d | 20 2d 2d 2d 2d 2d 2d 2d |rnet...-| -------|
|00002070| 2d 2d 2d 2d 2d 2d 2d 2d | 2d 2d 2d 2d 2d 2d 2d 2d |--------|--------|
|00002080| 2d 2d 2d 2d 2d 2d 2d 2d | 2d 2d 2d 20 63 75 74 20 |--------|--- cut |
|00002090| 68 65 72 65 0a 2d 2d 2d | 2d 2d 2d 2d 2d 2d 2d 2d |here.---|--------|
|000020a0| 2d 2d 2d 2d 2d 2d 2d 2d | 2d 2d 2d 2d 2d 2d 2d 2d |--------|--------|
|000020b0| 2d 2d 2d 2d 2d 2d 2d 0a | 2a 2a 2a 20 70 61 72 73 |-------.|*** pars|
|000020c0| 65 2e 79 2e 6f 6c 64 20 | 54 68 75 20 4e 6f 76 20 |e.y.old |Thu Nov |
|000020d0| 20 32 20 31 35 3a 30 30 | 3a 35 31 20 31 39 39 35 | 2 15:00|:51 1995|
|000020e0| 0a 2d 20 2d 2d 2d 20 70 | 61 72 73 65 2e 79 20 20 |.- --- p|arse.y  |
|000020f0| 20 20 20 54 75 65 20 41 | 75 67 20 32 30 20 30 39 |   Tue A|ug 20 09|
|00002100| 3a 31 36 3a 34 38 20 31 | 39 39 36 0a 2a 2a 2a 2a |:16:48 1|996.****|
|00002110| 2a 2a 2a 2a 2a 2a 2a 2a | 2a 2a 2a 0a 2a 2a 2a 20 |********|***.*** |
|00002120| 39 30 34 2c 39 31 30 20 | 2a 2a 2a 2a 0a 20 20 73 |904,910 |****.  s|
|00002130| 74 61 74 69 63 20 69 6e | 74 0a 20 20 79 79 5f 73 |tatic in|t.  yy_s|
|00002140| 74 72 69 6e 67 5f 67 65 | 74 20 28 29 0a 20 20 7b |tring_ge|t ().  {|
|00002150| 0a 21 20 20 20 72 65 67 | 69 73 74 65 72 20 63 68 |.!   reg|ister ch|
|00002160| 61 72 20 2a 73 74 72 69 | 6e 67 3b 0a 20 20 20 20 |ar *stri|ng;.    |
|00002170| 72 65 67 69 73 74 65 72 | 20 69 6e 74 20 63 3b 0a |register| int c;.|
|00002180| 0a 20 20 20 20 73 74 72 | 69 6e 67 20 3d 20 62 61 |.    str|ing = ba|
|00002190| 73 68 5f 69 6e 70 75 74 | 2e 6c 6f 63 61 74 69 6f |sh_input|.locatio|
|000021a0| 6e 2e 73 74 72 69 6e 67 | 3b 0a 2d 20 2d 2d 2d 20 |n.string|;.- --- |
|000021b0| 39 30 34 2c 39 31 30 20 | 2d 2d 2d 2d 0a 20 20 73 |904,910 |----.  s|
|000021c0| 74 61 74 69 63 20 69 6e | 74 0a 20 20 79 79 5f 73 |tatic in|t.  yy_s|
|000021d0| 74 72 69 6e 67 5f 67 65 | 74 20 28 29 0a 20 20 7b |tring_ge|t ().  {|
|000021e0| 0a 21 20 20 20 72 65 67 | 69 73 74 65 72 20 75 6e |.!   reg|ister un|
|000021f0| 73 69 67 6e 65 64 20 63 | 68 61 72 20 2a 73 74 72 |signed c|har *str|
|00002200| 69 6e 67 3b 0a 20 20 20 | 20 72 65 67 69 73 74 65 |ing;.   | registe|
|00002210| 72 20 69 6e 74 20 63 3b | 0a 0a 20 20 20 20 73 74 |r int c;|..    st|
|00002220| 72 69 6e 67 20 3d 20 62 | 61 73 68 5f 69 6e 70 75 |ring = b|ash_inpu|
|00002230| 74 2e 6c 6f 63 61 74 69 | 6f 6e 2e 73 74 72 69 6e |t.locati|on.strin|
|00002240| 67 3b 0a 2d 20 2d 2d 2d | 2d 2d 2d 2d 2d 2d 2d 2d |g;.- ---|--------|
|00002250| 2d 2d 2d 2d 2d 2d 2d 2d | 2d 2d 2d 2d 2d 2d 2d 2d |--------|--------|
|00002260| 2d 2d 2d 2d 2d 2d 2d 20 | 63 75 74 20 68 65 72 65 |------- |cut here|
|00002270| 0a 2d 2d 2d 2d 2d 2d 2d | 2d 2d 2d 2d 2d 2d 2d 2d |.-------|--------|
|00002280| 2d 2d 2d 2d 2d 2d 2d 2d | 2d 2d 2d 2d 2d 2d 2d 2d |--------|--------|
|00002290| 2d 2d 2d 0a 0a 20 20 20 | 20 20 20 54 6f 20 61 70 |---..   |   To ap|
|000022a0| 70 6c 79 20 74 68 69 73 | 20 70 61 74 63 68 2c 20 |ply this| patch, |
|000022b0| 73 61 76 65 20 74 68 65 | 20 74 65 78 74 20 62 65 |save the| text be|
|000022c0| 74 77 65 65 6e 20 74 68 | 65 20 74 77 6f 20 22 2d |tween th|e two "-|
|000022d0| 2d 2d 20 63 75 74 20 68 | 65 72 65 20 2d 2d 2d 22 |-- cut h|ere ---"|
|000022e0| 0a 20 20 20 20 20 20 6c | 69 6e 65 73 20 74 6f 20 |.      l|ines to |
|000022f0| 61 20 66 69 6c 65 2c 20 | 63 68 61 6e 67 65 20 64 |a file, |change d|
|00002300| 69 72 65 63 74 6f 72 69 | 65 73 20 74 6f 20 74 68 |irectori|es to th|
|00002310| 65 20 22 62 61 73 68 22 | 20 73 6f 75 72 63 65 20 |e "bash"| source |
|00002320| 64 69 72 65 63 74 6f 72 | 79 2c 20 61 6e 64 0a 20 |director|y, and. |
|00002330| 20 20 20 20 20 69 73 73 | 75 65 20 74 68 65 20 63 |     iss|ue the c|
|00002340| 6f 6d 6d 61 6e 64 0a 0a | 09 70 61 74 63 68 20 3c |ommand..|.patch <|
|00002350| 20 66 69 6c 65 6e 61 6d | 65 0a 0a 20 20 20 20 20 | filenam|e..     |
|00002360| 20 49 66 20 79 6f 75 20 | 64 6f 20 6e 6f 74 20 68 | If you |do not h|
|00002370| 61 76 65 20 74 68 65 20 | 22 70 61 74 63 68 22 20 |ave the |"patch" |
|00002380| 70 72 6f 67 72 61 6d 2c | 20 79 6f 75 20 63 61 6e |program,| you can|
|00002390| 20 6f 62 74 61 69 6e 20 | 69 74 20 66 72 6f 6d 0a | obtain |it from.|
|000023a0| 0a 09 66 74 70 3a 2f 2f | 70 72 65 70 2e 61 69 2e |..ftp://|prep.ai.|
|000023b0| 6d 69 74 2e 65 64 75 2f | 70 75 62 2f 67 6e 75 2f |mit.edu/|pub/gnu/|
|000023c0| 70 61 74 63 68 2d 32 2e | 31 2e 74 61 72 2e 67 7a |patch-2.|1.tar.gz|
|000023d0| 0a 0a 20 20 20 20 20 20 | 6f 72 20 79 6f 75 20 63 |..      |or you c|
|000023e0| 61 6e 20 61 70 70 6c 79 | 20 74 68 65 20 70 61 74 |an apply| the pat|
|000023f0| 63 68 20 62 79 20 68 61 | 6e 64 2e 0a 0a 20 20 20 |ch by ha|nd...   |
|00002400| 20 20 20 41 66 74 65 72 | 20 61 70 70 6c 79 69 6e |   After| applyin|
|00002410| 67 20 74 68 65 20 70 61 | 74 63 68 2c 20 72 65 63 |g the pa|tch, rec|
|00002420| 6f 6d 70 69 6c 65 20 61 | 6e 64 20 72 65 69 6e 73 |ompile a|nd reins|
|00002430| 74 61 6c 6c 20 74 68 65 | 20 22 62 61 73 68 22 20 |tall the| "bash" |
|00002440| 70 72 6f 67 72 61 6d 20 | 62 79 0a 20 20 20 20 20 |program |by.     |
|00002450| 20 66 6f 6c 6c 6f 77 69 | 6e 67 20 74 68 65 20 64 | followi|ng the d|
|00002460| 69 72 65 63 74 69 6f 6e | 73 20 69 6e 20 74 68 65 |irection|s in the|
|00002470| 20 22 49 4e 53 54 41 4c | 4c 22 20 66 69 6c 65 2c | "INSTAL|L" file,|
|00002480| 20 69 6e 63 6c 75 64 65 | 64 20 61 73 20 70 61 72 | include|d as par|
|00002490| 74 20 6f 66 20 74 68 65 | 0a 20 20 20 20 20 20 22 |t of the|.      "|
|000024a0| 62 61 73 68 22 20 64 69 | 73 74 72 69 62 75 74 69 |bash" di|stributi|
|000024b0| 6f 6e 2e 0a 0a 20 20 20 | 20 20 20 54 68 69 73 20 |on...   |   This |
|000024c0| 70 61 74 63 68 20 69 73 | 20 70 72 6f 76 69 64 65 |patch is| provide|
|000024d0| 64 20 22 41 53 20 49 53 | 22 20 77 69 74 68 6f 75 |d "AS IS|" withou|
|000024e0| 74 20 77 61 72 72 61 6e | 74 79 20 6f 66 20 61 6e |t warran|ty of an|
|000024f0| 79 20 6b 69 6e 64 2c 20 | 69 6e 63 6c 75 64 69 6e |y kind, |includin|
|00002500| 67 2c 0a 20 20 20 20 20 | 20 77 69 74 68 6f 75 74 |g,.     | without|
|00002510| 20 6c 69 6d 69 74 61 74 | 69 6f 6e 2c 20 61 6e 79 | limitat|ion, any|
|00002520| 20 69 6d 70 6c 69 65 64 | 20 77 61 72 72 61 6e 74 | implied| warrant|
|00002530| 69 65 73 20 6f 66 20 6d | 65 72 63 68 61 6e 74 69 |ies of m|erchanti|
|00002540| 62 69 6c 69 74 79 20 6f | 72 20 66 69 74 6e 65 73 |bility o|r fitnes|
|00002550| 73 0a 20 20 20 20 20 20 | 66 6f 72 20 61 20 70 61 |s.      |for a pa|
|00002560| 72 74 69 63 75 6c 61 72 | 20 70 75 72 70 6f 73 65 |rticular| purpose|
|00002570| 2e 20 20 54 68 69 73 20 | 61 64 76 69 73 6f 72 79 |.  This |advisory|
|00002580| 20 64 6f 65 73 20 6e 6f | 74 20 63 72 65 61 74 65 | does no|t create|
|00002590| 20 6f 72 20 69 6d 70 6c | 79 20 61 6e 79 0a 20 20 | or impl|y any.  |
|000025a0| 20 20 20 20 73 75 70 70 | 6f 72 74 20 6f 62 6c 69 |    supp|ort obli|
|000025b0| 67 61 74 69 6f 6e 73 20 | 6f 72 20 61 6e 79 20 6f |gations |or any o|
|000025c0| 74 68 65 72 20 6c 69 61 | 62 69 6c 69 74 79 20 6f |ther lia|bility o|
|000025d0| 6e 20 74 68 65 20 70 61 | 72 74 20 6f 66 20 49 42 |n the pa|rt of IB|
|000025e0| 4d 20 6f 72 20 69 74 73 | 0a 20 20 20 20 20 20 73 |M or its|.      s|
|000025f0| 75 62 73 69 64 69 61 72 | 69 65 73 2e 0a 0a 49 56 |ubsidiar|ies...IV|
|00002600| 2e 20 41 63 6b 6e 6f 77 | 6c 65 64 67 65 6d 65 6e |. Acknow|ledgemen|
|00002610| 74 73 0a 0a 49 42 4d 2d | 45 52 53 20 77 6f 75 6c |ts..IBM-|ERS woul|
|00002620| 64 20 6c 69 6b 65 20 74 | 6f 20 74 68 61 6e 6b 20 |d like t|o thank |
|00002630| 74 68 65 20 49 42 4d 20 | 47 6c 6f 62 61 6c 20 53 |the IBM |Global S|
|00002640| 65 63 75 72 69 74 79 20 | 41 6e 61 6c 79 73 69 73 |ecurity |Analysis|
|00002650| 20 4c 61 62 6f 72 61 74 | 6f 72 79 20 61 74 20 74 | Laborat|ory at t|
|00002660| 68 65 0a 49 42 4d 20 54 | 2e 20 4a 2e 20 57 61 74 |he.IBM T|. J. Wat|
|00002670| 73 6f 6e 20 52 65 73 65 | 61 72 63 68 20 43 65 6e |son Rese|arch Cen|
|00002680| 74 65 72 20 66 6f 72 20 | 74 68 65 69 72 20 64 69 |ter for |their di|
|00002690| 73 63 6f 76 65 72 79 20 | 6f 66 20 74 68 69 73 20 |scovery |of this |
|000026a0| 76 75 6c 6e 65 72 61 62 | 69 6c 69 74 79 2c 0a 62 |vulnerab|ility,.b|
|000026b0| 72 69 6e 67 69 6e 67 20 | 69 74 20 74 6f 20 6f 75 |ringing |it to ou|
|000026c0| 72 20 61 74 74 65 6e 74 | 69 6f 6e 2c 20 70 72 6f |r attent|ion, pro|
|000026d0| 76 69 64 69 6e 67 20 74 | 68 65 20 70 61 74 63 68 |viding t|he patch|
|000026e0| 20 74 6f 20 66 69 78 20 | 69 74 2c 20 61 6e 64 20 | to fix |it, and |
|000026f0| 61 73 73 69 73 74 61 6e | 63 65 20 69 6e 0a 64 65 |assistan|ce in.de|
|00002700| 76 65 6c 6f 70 69 6e 67 | 20 74 68 69 73 20 61 6c |veloping| this al|
|00002710| 65 72 74 2e 0a 0a 55 4e | 49 58 20 69 73 20 61 20 |ert...UN|IX is a |
|00002720| 74 65 63 68 6e 6f 6c 6f | 67 79 20 74 72 61 64 65 |technolo|gy trade|
|00002730| 6d 61 72 6b 20 6f 66 20 | 58 2f 4f 70 65 6e 20 43 |mark of |X/Open C|
|00002740| 6f 6d 70 61 6e 79 2c 20 | 4c 74 64 2e 0a 0a 3d 3d |ompany, |Ltd...==|
|00002750| 3d 3d 3d 3d 3d 3d 3d 3d | 3d 3d 3d 3d 3d 3d 3d 3d |========|========|
|00002760| 3d 3d 3d 3d 3d 3d 3d 3d | 3d 3d 3d 3d 3d 3d 3d 3d |========|========|
|00002770| 3d 3d 3d 3d 3d 3d 3d 3d | 3d 3d 3d 3d 3d 3d 3d 3d |========|========|
|00002780| 3d 3d 3d 3d 3d 3d 3d 3d | 3d 3d 3d 3d 3d 3d 3d 3d |========|========|
|00002790| 3d 3d 3d 3d 3d 3d 3d 3d | 3d 3d 3d 3d 3d 0a 0a 49 |========|=====..I|
|000027a0| 42 4d 27 73 20 49 6e 74 | 65 72 6e 65 74 20 45 6d |BM's Int|ernet Em|
|000027b0| 65 72 67 65 6e 63 79 20 | 52 65 73 70 6f 6e 73 65 |ergency |Response|
|000027c0| 20 53 65 72 76 69 63 65 | 20 28 49 42 4d 2d 45 52 | Service| (IBM-ER|
|000027d0| 53 29 20 69 73 20 61 20 | 73 75 62 73 63 72 69 70 |S) is a |subscrip|
|000027e0| 74 69 6f 6e 2d 62 61 73 | 65 64 0a 49 6e 74 65 72 |tion-bas|ed.Inter|
|000027f0| 6e 65 74 20 73 65 63 75 | 72 69 74 79 20 72 65 73 |net secu|rity res|
|00002800| 70 6f 6e 73 65 20 73 65 | 72 76 69 63 65 20 74 68 |ponse se|rvice th|
|00002810| 61 74 20 69 6e 63 6c 75 | 64 65 73 20 63 6f 6d 70 |at inclu|des comp|
|00002820| 75 74 65 72 20 73 65 63 | 75 72 69 74 79 20 69 6e |uter sec|urity in|
|00002830| 63 69 64 65 6e 74 0a 72 | 65 73 70 6f 6e 73 65 20 |cident.r|esponse |
|00002840| 61 6e 64 20 6d 61 6e 61 | 67 65 6d 65 6e 74 2c 20 |and mana|gement, |
|00002850| 72 65 67 75 6c 61 72 20 | 65 6c 65 63 74 72 6f 6e |regular |electron|
|00002860| 69 63 20 76 65 72 69 66 | 69 63 61 74 69 6f 6e 20 |ic verif|ication |
|00002870| 6f 66 20 79 6f 75 72 20 | 49 6e 74 65 72 6e 65 74 |of your |Internet|
|00002880| 0a 67 61 74 65 77 61 79 | 28 73 29 2c 20 61 6e 64 |.gateway|(s), and|
|00002890| 20 73 65 63 75 72 69 74 | 79 20 76 75 6c 6e 65 72 | securit|y vulner|
|000028a0| 61 62 69 6c 69 74 79 20 | 61 6c 65 72 74 73 20 73 |ability |alerts s|
|000028b0| 69 6d 69 6c 61 72 20 74 | 6f 20 74 68 69 73 20 6f |imilar t|o this o|
|000028c0| 6e 65 20 74 68 61 74 20 | 61 72 65 0a 74 61 69 6c |ne that |are.tail|
|000028d0| 6f 72 65 64 20 74 6f 20 | 79 6f 75 72 20 73 70 65 |ored to |your spe|
|000028e0| 63 69 66 69 63 20 63 6f | 6d 70 75 74 69 6e 67 20 |cific co|mputing |
|000028f0| 65 6e 76 69 72 6f 6e 6d | 65 6e 74 2e 20 20 42 79 |environm|ent.  By|
|00002900| 20 61 63 74 69 6e 67 20 | 61 73 20 61 6e 20 65 78 | acting |as an ex|
|00002910| 74 65 6e 73 69 6f 6e 0a | 6f 66 20 79 6f 75 72 20 |tension.|of your |
|00002920| 6f 77 6e 20 69 6e 74 65 | 72 6e 61 6c 20 73 65 63 |own inte|rnal sec|
|00002930| 75 72 69 74 79 20 73 74 | 61 66 66 2c 20 49 42 4d |urity st|aff, IBM|
|00002940| 2d 45 52 53 27 73 20 74 | 65 61 6d 20 6f 66 20 49 |-ERS's t|eam of I|
|00002950| 6e 74 65 72 6e 65 74 20 | 73 65 63 75 72 69 74 79 |nternet |security|
|00002960| 0a 65 78 70 65 72 74 73 | 20 68 65 6c 70 73 20 79 |.experts| helps y|
|00002970| 6f 75 20 71 75 69 63 6b | 6c 79 20 64 65 74 65 63 |ou quick|ly detec|
|00002980| 74 20 61 6e 64 20 72 65 | 73 70 6f 6e 64 20 74 6f |t and re|spond to|
|00002990| 20 61 74 74 61 63 6b 73 | 20 61 6e 64 20 65 78 70 | attacks| and exp|
|000029a0| 6f 73 75 72 65 73 20 61 | 63 72 6f 73 73 0a 79 6f |osures a|cross.yo|
|000029b0| 75 72 20 49 6e 74 65 72 | 6e 65 74 20 63 6f 6e 6e |ur Inter|net conn|
|000029c0| 65 63 74 69 6f 6e 28 73 | 29 2e 0a 0a 41 73 20 61 |ection(s|)...As a|
|000029d0| 20 70 61 72 74 20 6f 66 | 20 49 42 4d 27 73 20 42 | part of| IBM's B|
|000029e0| 75 73 69 6e 65 73 73 20 | 52 65 63 6f 76 65 72 79 |usiness |Recovery|
|000029f0| 20 53 65 72 76 69 63 65 | 73 20 6f 72 67 61 6e 69 | Service|s organi|
|00002a00| 7a 61 74 69 6f 6e 2c 20 | 74 68 65 20 49 42 4d 20 |zation, |the IBM |
|00002a10| 49 6e 74 65 72 6e 65 74 | 0a 45 6d 65 72 67 65 6e |Internet|.Emergen|
|00002a20| 63 79 20 52 65 73 70 6f | 6e 73 65 20 53 65 72 76 |cy Respo|nse Serv|
|00002a30| 69 63 65 20 69 73 20 61 | 20 63 6f 6d 70 6f 6e 65 |ice is a| compone|
|00002a40| 6e 74 20 6f 66 20 49 42 | 4d 27 73 20 53 65 63 75 |nt of IB|M's Secu|
|00002a50| 72 65 57 61 79 28 74 6d | 29 20 6c 69 6e 65 20 6f |reWay(tm|) line o|
|00002a60| 66 0a 73 65 63 75 72 69 | 74 79 20 70 72 6f 64 75 |f.securi|ty produ|
|00002a70| 63 74 73 20 61 6e 64 20 | 73 65 72 76 69 63 65 73 |cts and |services|
|00002a80| 2e 20 20 46 72 6f 6d 20 | 68 61 72 64 77 61 72 65 |.  From |hardware|
|00002a90| 20 74 6f 20 73 6f 66 74 | 77 61 72 65 20 74 6f 20 | to soft|ware to |
|00002aa0| 63 6f 6e 73 75 6c 74 69 | 6e 67 2c 0a 53 65 63 75 |consulti|ng,.Secu|
|00002ab0| 72 65 57 61 79 20 73 6f | 6c 75 74 69 6f 6e 73 20 |reWay so|lutions |
|00002ac0| 63 61 6e 20 67 69 76 65 | 20 79 6f 75 20 74 68 65 |can give| you the|
|00002ad0| 20 61 73 73 75 72 61 6e | 63 65 20 61 6e 64 20 65 | assuran|ce and e|
|00002ae0| 78 70 65 72 74 69 73 65 | 20 79 6f 75 20 6e 65 65 |xpertise| you nee|
|00002af0| 64 20 74 6f 0a 70 72 6f | 74 65 63 74 20 79 6f 75 |d to.pro|tect you|
|00002b00| 72 20 76 61 6c 75 61 62 | 6c 65 20 62 75 73 69 6e |r valuab|le busin|
|00002b10| 65 73 73 20 72 65 73 6f | 75 72 63 65 73 2e 20 20 |ess reso|urces.  |
|00002b20| 54 6f 20 66 69 6e 64 20 | 6f 75 74 20 6d 6f 72 65 |To find |out more|
|00002b30| 20 61 62 6f 75 74 20 74 | 68 65 20 49 42 4d 0a 49 | about t|he IBM.I|
|00002b40| 6e 74 65 72 6e 65 74 20 | 45 6d 65 72 67 65 6e 63 |nternet |Emergenc|
|00002b50| 79 20 52 65 73 70 6f 6e | 73 65 20 53 65 72 76 69 |y Respon|se Servi|
|00002b60| 63 65 2c 20 73 65 6e 64 | 20 61 6e 20 65 6c 65 63 |ce, send| an elec|
|00002b70| 74 72 6f 6e 69 63 20 6d | 61 69 6c 20 6d 65 73 73 |tronic m|ail mess|
|00002b80| 61 67 65 20 74 6f 0a 65 | 72 73 2d 73 61 6c 65 73 |age to.e|rs-sales|
|00002b90| 40 76 6e 65 74 2e 69 62 | 6d 2e 63 6f 6d 2c 20 6f |@vnet.ib|m.com, o|
|00002ba0| 72 20 63 61 6c 6c 20 31 | 2d 38 30 30 2d 37 34 32 |r call 1|-800-742|
|00002bb0| 2d 32 34 39 33 20 28 50 | 72 6f 6d 70 74 20 34 29 |-2493 (P|rompt 4)|
|00002bc0| 2e 0a 0a 49 42 4d 2d 45 | 52 53 20 6d 61 69 6e 74 |...IBM-E|RS maint|
|00002bd0| 61 69 6e 73 20 61 20 73 | 69 74 65 20 6f 6e 20 74 |ains a s|ite on t|
|00002be0| 68 65 20 57 6f 72 6c 64 | 20 57 69 64 65 20 57 65 |he World| Wide We|
|00002bf0| 62 20 61 74 20 68 74 74 | 70 3a 2f 2f 77 77 77 2e |b at htt|p://www.|
|00002c00| 65 72 73 2e 69 62 6d 2e | 63 6f 6d 2f 2e 0a 56 69 |ers.ibm.|com/..Vi|
|00002c10| 73 69 74 20 74 68 65 20 | 73 69 74 65 20 66 6f 72 |sit the |site for|
|00002c20| 20 69 6e 66 6f 72 6d 61 | 74 69 6f 6e 20 61 62 6f | informa|tion abo|
|00002c30| 75 74 20 74 68 65 20 73 | 65 72 76 69 63 65 2c 20 |ut the s|ervice, |
|00002c40| 63 6f 70 69 65 73 20 6f | 66 20 73 65 63 75 72 69 |copies o|f securi|
|00002c50| 74 79 20 61 6c 65 72 74 | 73 2c 0a 74 65 61 6d 20 |ty alert|s,.team |
|00002c60| 63 6f 6e 74 61 63 74 20 | 69 6e 66 6f 72 6d 61 74 |contact |informat|
|00002c70| 69 6f 6e 2c 20 61 6e 64 | 20 6f 74 68 65 72 20 69 |ion, and| other i|
|00002c80| 74 65 6d 73 2e 0a 0a 49 | 42 4d 2d 45 52 53 20 75 |tems...I|BM-ERS u|
|00002c90| 73 65 73 20 50 72 65 74 | 74 79 20 47 6f 6f 64 20 |ses Pret|ty Good |
|00002ca0| 50 72 69 76 61 63 79 2a | 20 28 50 47 50 2a 29 20 |Privacy*| (PGP*) |
|00002cb0| 61 73 20 74 68 65 20 64 | 69 67 69 74 61 6c 20 73 |as the d|igital s|
|00002cc0| 69 67 6e 61 74 75 72 65 | 20 6d 65 63 68 61 6e 69 |ignature| mechani|
|00002cd0| 73 6d 20 66 6f 72 0a 73 | 65 63 75 72 69 74 79 20 |sm for.s|ecurity |
|00002ce0| 76 75 6c 6e 65 72 61 62 | 69 6c 69 74 79 20 61 6c |vulnerab|ility al|
|00002cf0| 65 72 74 73 20 61 6e 64 | 20 6f 74 68 65 72 20 64 |erts and| other d|
|00002d00| 69 73 74 72 69 62 75 74 | 65 64 20 69 6e 66 6f 72 |istribut|ed infor|
|00002d10| 6d 61 74 69 6f 6e 2e 20 | 20 54 68 65 20 49 42 4d |mation. | The IBM|
|00002d20| 2d 45 52 53 0a 50 47 50 | 2a 20 70 75 62 6c 69 63 |-ERS.PGP|* public|
|00002d30| 20 6b 65 79 20 69 73 20 | 61 76 61 69 6c 61 62 6c | key is |availabl|
|00002d40| 65 20 66 72 6f 6d 20 68 | 74 74 70 3a 2f 2f 77 77 |e from h|ttp://ww|
|00002d50| 77 2e 65 72 73 2e 69 62 | 6d 2e 63 6f 6d 2f 74 65 |w.ers.ib|m.com/te|
|00002d60| 61 6d 2d 69 6e 66 6f 2f | 70 67 70 6b 65 79 2e 68 |am-info/|pgpkey.h|
|00002d70| 74 6d 6c 2e 0a 22 50 72 | 65 74 74 79 20 47 6f 6f |tml.."Pr|etty Goo|
|00002d80| 64 20 50 72 69 76 61 63 | 79 22 20 61 6e 64 20 22 |d Privac|y" and "|
|00002d90| 50 47 50 22 20 61 72 65 | 20 74 72 61 64 65 6d 61 |PGP" are| tradema|
|00002da0| 72 6b 73 20 6f 66 20 50 | 68 69 6c 69 70 20 5a 69 |rks of P|hilip Zi|
|00002db0| 6d 6d 65 72 6d 61 6e 2e | 0a 0a 49 42 4d 2d 45 52 |mmerman.|..IBM-ER|
|00002dc0| 53 20 69 73 20 61 20 4d | 65 6d 62 65 72 20 54 65 |S is a M|ember Te|
|00002dd0| 61 6d 20 6f 66 20 74 68 | 65 20 46 6f 72 75 6d 20 |am of th|e Forum |
|00002de0| 6f 66 20 49 6e 63 69 64 | 65 6e 74 20 52 65 73 70 |of Incid|ent Resp|
|00002df0| 6f 6e 73 65 20 61 6e 64 | 20 53 65 63 75 72 69 74 |onse and| Securit|
|00002e00| 79 20 54 65 61 6d 73 0a | 28 46 49 52 53 54 29 2c |y Teams.|(FIRST),|
|00002e10| 20 61 20 67 6c 6f 62 61 | 6c 20 6f 72 67 61 6e 69 | a globa|l organi|
|00002e20| 7a 61 74 69 6f 6e 20 65 | 73 74 61 62 6c 69 73 68 |zation e|stablish|
|00002e30| 65 64 20 74 6f 20 66 6f | 73 74 65 72 20 63 6f 6f |ed to fo|ster coo|
|00002e40| 70 65 72 61 74 69 6f 6e | 20 61 6e 64 20 72 65 73 |peration| and res|
|00002e50| 70 6f 6e 73 65 0a 63 6f | 6f 72 64 69 6e 61 74 69 |ponse.co|ordinati|
|00002e60| 6f 6e 20 61 6d 6f 6e 67 | 20 63 6f 6d 70 75 74 65 |on among| compute|
|00002e70| 72 20 73 65 63 75 72 69 | 74 79 20 74 65 61 6d 73 |r securi|ty teams|
|00002e80| 20 77 6f 72 6c 64 77 69 | 64 65 2e 0a 0a 43 6f 70 | worldwi|de...Cop|
|00002e90| 79 72 69 67 68 74 20 31 | 39 39 36 20 49 6e 74 65 |yright 1|996 Inte|
|00002ea0| 72 6e 61 74 69 6f 6e 61 | 6c 20 42 75 73 69 6e 65 |rnationa|l Busine|
|00002eb0| 73 73 20 4d 61 63 68 69 | 6e 65 73 20 43 6f 72 70 |ss Machi|nes Corp|
|00002ec0| 6f 72 61 74 69 6f 6e 2e | 0a 0a 54 68 65 20 69 6e |oration.|..The in|
|00002ed0| 66 6f 72 6d 61 74 69 6f | 6e 20 69 6e 20 74 68 69 |formatio|n in thi|
|00002ee0| 73 20 64 6f 63 75 6d 65 | 6e 74 20 69 73 20 70 72 |s docume|nt is pr|
|00002ef0| 6f 76 69 64 65 64 20 61 | 73 20 61 20 73 65 72 76 |ovided a|s a serv|
|00002f00| 69 63 65 20 74 6f 20 63 | 75 73 74 6f 6d 65 72 73 |ice to c|ustomers|
|00002f10| 20 6f 66 0a 74 68 65 20 | 49 42 4d 20 45 6d 65 72 | of.the |IBM Emer|
|00002f20| 67 65 6e 63 79 20 52 65 | 73 70 6f 6e 73 65 20 53 |gency Re|sponse S|
|00002f30| 65 72 76 69 63 65 2e 20 | 20 4e 65 69 74 68 65 72 |ervice. | Neither|
|00002f40| 20 49 6e 74 65 72 6e 61 | 74 69 6f 6e 61 6c 20 42 | Interna|tional B|
|00002f50| 75 73 69 6e 65 73 73 20 | 4d 61 63 68 69 6e 65 73 |usiness |Machines|
|00002f60| 0a 43 6f 72 70 6f 72 61 | 74 69 6f 6e 2c 20 49 6e |.Corpora|tion, In|
|00002f70| 74 65 67 72 61 74 65 64 | 20 53 79 73 74 65 6d 73 |tegrated| Systems|
|00002f80| 20 53 6f 6c 75 74 69 6f | 6e 73 20 43 6f 72 70 6f | Solutio|ns Corpo|
|00002f90| 72 61 74 69 6f 6e 2c 20 | 6e 6f 72 20 61 6e 79 20 |ration, |nor any |
|00002fa0| 6f 66 20 74 68 65 69 72 | 0a 65 6d 70 6c 6f 79 65 |of their|.employe|
|00002fb0| 65 73 2c 20 6d 61 6b 65 | 73 20 61 6e 79 20 77 61 |es, make|s any wa|
|00002fc0| 72 72 61 6e 74 79 2c 20 | 65 78 70 72 65 73 73 20 |rranty, |express |
|00002fd0| 6f 72 20 69 6d 70 6c 69 | 65 64 2c 20 6f 72 20 61 |or impli|ed, or a|
|00002fe0| 73 73 75 6d 65 73 20 61 | 6e 79 20 6c 65 67 61 6c |ssumes a|ny legal|
|00002ff0| 0a 6c 69 61 62 69 6c 69 | 74 79 20 6f 72 20 72 65 |.liabili|ty or re|
|00003000| 73 70 6f 6e 73 69 62 69 | 6c 69 74 79 20 66 6f 72 |sponsibi|lity for|
|00003010| 20 74 68 65 20 61 63 63 | 75 72 61 63 79 2c 20 63 | the acc|uracy, c|
|00003020| 6f 6d 70 6c 65 74 65 6e | 65 73 73 2c 20 6f 72 20 |ompleten|ess, or |
|00003030| 75 73 65 66 75 6c 6e 65 | 73 73 20 6f 66 0a 61 6e |usefulne|ss of.an|
|00003040| 79 20 69 6e 66 6f 72 6d | 61 74 69 6f 6e 2c 20 61 |y inform|ation, a|
|00003050| 70 70 61 72 61 74 75 73 | 2c 20 70 72 6f 64 75 63 |pparatus|, produc|
|00003060| 74 2c 20 6f 72 20 70 72 | 6f 63 65 73 73 20 63 6f |t, or pr|ocess co|
|00003070| 6e 74 61 69 6e 65 64 20 | 68 65 72 65 69 6e 2c 20 |ntained |herein, |
|00003080| 6f 72 0a 72 65 70 72 65 | 73 65 6e 74 73 20 74 68 |or.repre|sents th|
|00003090| 61 74 20 69 74 73 20 75 | 73 65 20 77 6f 75 6c 64 |at its u|se would|
|000030a0| 20 6e 6f 74 20 69 6e 66 | 72 69 6e 67 65 20 61 6e | not inf|ringe an|
|000030b0| 79 20 70 72 69 76 61 74 | 65 6c 79 20 6f 77 6e 65 |y privat|ely owne|
|000030c0| 64 20 72 69 67 68 74 73 | 2e 0a 52 65 66 65 72 65 |d rights|..Refere|
|000030d0| 6e 63 65 20 68 65 72 65 | 69 6e 20 74 6f 20 61 6e |nce here|in to an|
|000030e0| 79 20 73 70 65 63 69 66 | 69 63 20 63 6f 6d 6d 65 |y specif|ic comme|
|000030f0| 72 63 69 61 6c 20 70 72 | 6f 64 75 63 74 73 2c 20 |rcial pr|oducts, |
|00003100| 70 72 6f 63 65 73 73 2c | 20 6f 72 20 73 65 72 76 |process,| or serv|
|00003110| 69 63 65 20 62 79 0a 74 | 72 61 64 65 20 6e 61 6d |ice by.t|rade nam|
|00003120| 65 2c 20 74 72 61 64 65 | 6d 61 72 6b 2c 20 6d 61 |e, trade|mark, ma|
|00003130| 6e 75 66 61 63 74 75 72 | 65 72 2c 20 6f 72 20 6f |nufactur|er, or o|
|00003140| 74 68 65 72 77 69 73 65 | 2c 20 64 6f 65 73 20 6e |therwise|, does n|
|00003150| 6f 74 20 6e 65 63 65 73 | 73 61 72 69 6c 79 0a 63 |ot neces|sarily.c|
|00003160| 6f 6e 73 74 69 74 75 74 | 65 20 6f 72 20 69 6d 70 |onstitut|e or imp|
|00003170| 6c 79 20 69 74 73 20 65 | 6e 64 6f 72 73 65 6d 65 |ly its e|ndorseme|
|00003180| 6e 74 2c 20 72 65 63 6f | 6d 6d 65 6e 64 61 74 69 |nt, reco|mmendati|
|00003190| 6f 6e 20 6f 72 20 66 61 | 76 6f 72 69 6e 67 20 62 |on or fa|voring b|
|000031a0| 79 20 49 42 4d 20 6f 72 | 0a 69 74 73 20 73 75 62 |y IBM or|.its sub|
|000031b0| 73 69 64 69 61 72 69 65 | 73 2e 20 20 54 68 65 20 |sidiarie|s.  The |
|000031c0| 76 69 65 77 73 20 61 6e | 64 20 6f 70 69 6e 69 6f |views an|d opinio|
|000031d0| 6e 73 20 6f 66 20 61 75 | 74 68 6f 72 73 20 65 78 |ns of au|thors ex|
|000031e0| 70 72 65 73 73 65 64 20 | 68 65 72 65 69 6e 20 64 |pressed |herein d|
|000031f0| 6f 20 6e 6f 74 0a 6e 65 | 63 65 73 73 61 72 69 6c |o not.ne|cessaril|
|00003200| 79 20 73 74 61 74 65 20 | 6f 72 20 72 65 66 6c 65 |y state |or refle|
|00003210| 63 74 20 74 68 6f 73 65 | 20 6f 66 20 49 42 4d 20 |ct those| of IBM |
|00003220| 6f 72 20 69 74 73 20 73 | 75 62 73 69 64 69 61 72 |or its s|ubsidiar|
|00003230| 69 65 73 2c 20 61 6e 64 | 20 6d 61 79 20 6e 6f 74 |ies, and| may not|
|00003240| 20 62 65 0a 75 73 65 64 | 20 66 6f 72 20 61 64 76 | be.used| for adv|
|00003250| 65 72 74 69 73 69 6e 67 | 20 6f 72 20 70 72 6f 64 |ertising| or prod|
|00003260| 75 63 74 20 65 6e 64 6f | 72 73 65 6d 65 6e 74 20 |uct endo|rsement |
|00003270| 70 75 72 70 6f 73 65 73 | 2e 0a 0a 54 68 65 20 6d |purposes|...The m|
|00003280| 61 74 65 72 69 61 6c 20 | 69 6e 20 74 68 69 73 20 |aterial |in this |
|00003290| 73 65 63 75 72 69 74 79 | 20 61 6c 65 72 74 20 6d |security| alert m|
|000032a0| 61 79 20 62 65 20 72 65 | 70 72 6f 64 75 63 65 64 |ay be re|produced|
|000032b0| 20 61 6e 64 20 64 69 73 | 74 72 69 62 75 74 65 64 | and dis|tributed|
|000032c0| 2c 0a 77 69 74 68 6f 75 | 74 20 70 65 72 6d 69 73 |,.withou|t permis|
|000032d0| 73 69 6f 6e 2c 20 69 6e | 20 77 68 6f 6c 65 20 6f |sion, in| whole o|
|000032e0| 72 20 69 6e 20 70 61 72 | 74 2c 20 62 79 20 6f 74 |r in par|t, by ot|
|000032f0| 68 65 72 20 73 65 63 75 | 72 69 74 79 20 69 6e 63 |her secu|rity inc|
|00003300| 69 64 65 6e 74 20 72 65 | 73 70 6f 6e 73 65 0a 74 |ident re|sponse.t|
|00003310| 65 61 6d 73 20 28 62 6f | 74 68 20 63 6f 6d 6d 65 |eams (bo|th comme|
|00003320| 72 63 69 61 6c 20 61 6e | 64 20 6e 6f 6e 2d 63 6f |rcial an|d non-co|
|00003330| 6d 6d 65 72 63 69 61 6c | 29 2c 20 70 72 6f 76 69 |mmercial|), provi|
|00003340| 64 65 64 20 74 68 65 20 | 61 62 6f 76 65 20 63 6f |ded the |above co|
|00003350| 70 79 72 69 67 68 74 20 | 69 73 0a 6b 65 70 74 20 |pyright |is.kept |
|00003360| 69 6e 74 61 63 74 20 61 | 6e 64 20 64 75 65 20 63 |intact a|nd due c|
|00003370| 72 65 64 69 74 20 69 73 | 20 67 69 76 65 6e 20 74 |redit is| given t|
|00003380| 6f 20 49 42 4d 2d 45 52 | 53 2e 0a 0a 54 68 69 73 |o IBM-ER|S...This|
|00003390| 20 73 65 63 75 72 69 74 | 79 20 61 6c 65 72 74 20 | securit|y alert |
|000033a0| 6d 61 79 20 62 65 20 72 | 65 70 72 6f 64 75 63 65 |may be r|eproduce|
|000033b0| 64 20 61 6e 64 20 64 69 | 73 74 72 69 62 75 74 65 |d and di|stribute|
|000033c0| 64 2c 20 77 69 74 68 6f | 75 74 20 70 65 72 6d 69 |d, witho|ut permi|
|000033d0| 73 73 69 6f 6e 2c 0a 69 | 6e 20 69 74 73 20 65 6e |ssion,.i|n its en|
|000033e0| 74 69 72 65 74 79 20 6f | 6e 6c 79 2c 20 62 79 20 |tirety o|nly, by |
|000033f0| 61 6e 79 20 70 65 72 73 | 6f 6e 20 70 72 6f 76 69 |any pers|on provi|
|00003400| 64 65 64 20 73 75 63 68 | 20 72 65 70 72 6f 64 75 |ded such| reprodu|
|00003410| 63 74 69 6f 6e 20 61 6e | 64 2f 6f 72 0a 64 69 73 |ction an|d/or.dis|
|00003420| 74 72 69 62 75 74 69 6f | 6e 20 69 73 20 70 65 72 |tributio|n is per|
|00003430| 66 6f 72 6d 65 64 20 66 | 6f 72 20 6e 6f 6e 2d 63 |formed f|or non-c|
|00003440| 6f 6d 6d 65 72 63 69 61 | 6c 20 70 75 72 70 6f 73 |ommercia|l purpos|
|00003450| 65 73 20 61 6e 64 20 77 | 69 74 68 20 74 68 65 20 |es and w|ith the |
|00003460| 69 6e 74 65 6e 74 20 6f | 66 0a 69 6e 63 72 65 61 |intent o|f.increa|
|00003470| 73 69 6e 67 20 74 68 65 | 20 61 77 61 72 65 6e 65 |sing the| awarene|
|00003480| 73 73 20 6f 66 20 74 68 | 65 20 49 6e 74 65 72 6e |ss of th|e Intern|
|00003490| 65 74 20 63 6f 6d 6d 75 | 6e 69 74 79 2e 0a 0a 2d |et commu|nity...-|
|000034a0| 20 2d 2d 2d 45 58 54 45 | 52 4e 41 4c 20 52 45 4c | ---EXTE|RNAL REL|
|000034b0| 45 41 53 45 2d 2d 2d 45 | 58 54 45 52 4e 41 4c 20 |EASE---E|XTERNAL |
|000034c0| 52 45 4c 45 41 53 45 2d | 2d 2d 45 58 54 45 52 4e |RELEASE-|--EXTERN|
|000034d0| 41 4c 20 52 45 4c 45 41 | 53 45 2d 2d 2d 45 58 54 |AL RELEA|SE---EXT|
|000034e0| 45 52 4e 41 4c 0a 52 45 | 4c 45 41 53 45 2d 2d 2d |ERNAL.RE|LEASE---|
|000034f0| 0a 2d 20 2d 2d 45 52 53 | 2d 41 4c 45 52 54 2d 2d |.- --ERS|-ALERT--|
|00003500| 45 52 53 2d 41 4c 45 52 | 54 2d 2d 45 52 53 2d 41 |ERS-ALER|T--ERS-A|
|00003510| 4c 45 52 54 2d 2d 45 52 | 53 2d 41 4c 45 52 54 2d |LERT--ER|S-ALERT-|
|00003520| 2d 45 52 53 2d 41 4c 45 | 52 54 2d 2d 45 52 53 2d |-ERS-ALE|RT--ERS-|
|00003530| 41 4c 45 52 54 2d 2d 45 | 52 53 2d 41 4c 45 52 54 |ALERT--E|RS-ALERT|
|00003540| 2d 2d 0a 0a 2d 20 2d 2d | 20 45 6e 64 20 49 6e 63 |--..- --| End Inc|
|00003550| 6c 75 64 65 64 20 41 64 | 76 69 73 6f 72 79 20 2d |luded Ad|visory -|
|00003560| 2d 0a 0a 2d 2d 2d 2d 2d | 42 45 47 49 4e 20 50 47 |-..-----|BEGIN PG|
|00003570| 50 20 53 49 47 4e 41 54 | 55 52 45 2d 2d 2d 2d 2d |P SIGNAT|URE-----|
|00003580| 0a 56 65 72 73 69 6f 6e | 3a 20 32 2e 36 2e 32 69 |.Version|: 2.6.2i|
|00003590| 0a 43 6f 6d 6d 65 6e 74 | 3a 20 46 69 6e 67 65 72 |.Comment|: Finger|
|000035a0| 20 70 67 70 40 66 74 70 | 2e 61 75 73 63 65 72 74 | pgp@ftp|.auscert|
|000035b0| 2e 6f 72 67 2e 61 75 20 | 74 6f 20 72 65 74 72 69 |.org.au |to retri|
|000035c0| 65 76 65 20 41 55 53 43 | 45 52 54 27 73 20 70 75 |eve AUSC|ERT's pu|
|000035d0| 62 6c 69 63 20 6b 65 79 | 0a 0a 69 51 43 56 41 77 |blic key|..iQCVAw|
|000035e0| 55 42 4d 68 78 37 78 43 | 68 39 2b 37 31 79 41 32 |UBMhx7xC|h9+71yA2|
|000035f0| 44 4e 41 51 47 6b 74 41 | 50 38 44 35 53 42 62 5a |DNAQGktA|P8D5SBbZ|
|00003600| 52 72 64 6e 39 76 67 56 | 7a 6a 4d 4f 36 5a 74 61 |Rrdn9vgV|zjMO6Zta|
|00003610| 70 57 6d 75 64 53 41 6c | 6d 2b 0a 51 55 6d 59 7a |pWmudSAl|m+.QUmYz|
|00003620| 47 65 62 43 39 41 78 6e | 64 43 6b 63 69 5a 58 39 |GebC9Axn|dCkciZX9|
|00003630| 34 43 71 41 66 64 67 2f | 61 42 4a 59 36 69 36 2f |4CqAfdg/|aBJY6i6/|
|00003640| 5a 30 2b 52 38 44 48 79 | 31 6e 64 41 42 62 51 34 |Z0+R8DHy|1ndABbQ4|
|00003650| 69 47 69 72 7a 6f 74 39 | 49 32 56 0a 54 49 46 55 |iGirzot9|I2V.TIFU|
|00003660| 6b 74 43 76 78 64 69 66 | 52 47 52 34 77 54 4b 4c |ktCvxdif|RGR4wTKL|
|00003670| 48 54 77 46 61 46 64 57 | 2b 62 30 52 32 47 44 68 |HTwFaFdW|+b0R2GDh|
|00003680| 44 73 46 30 35 71 66 35 | 76 4b 46 32 37 71 77 61 |DsF05qf5|vKF27qwa|
|00003690| 6d 65 51 4b 56 30 53 6d | 6f 33 74 41 0a 51 70 4b |meQKV0Sm|o3tA.QpK|
|000036a0| 38 6f 4c 6c 51 4f 34 73 | 3d 0a 3d 2f 4a 59 62 0a |8oLlQO4s|=.=/JYb.|
|000036b0| 2d 2d 2d 2d 2d 45 4e 44 | 20 50 47 50 20 53 49 47 |-----END| PGP SIG|
|000036c0| 4e 41 54 55 52 45 2d 2d | 2d 2d 2d 0a 0a 0a 2d 2d |NATURE--|---...--|
|000036d0| 20 0a 2d 2d 2d 2d 2d 2d | 2d 2d 2d 2d 2d 2d 2d 2d | .------|--------|
|000036e0| 2d 2d 2d 2d 2d 2d 2d 2d | 2d 2d 2d 2d 2d 2d 2d 2d |--------|--------|
|000036f0| 2d 2d 2d 2d 2d 2d 2d 2d | 2d 2d 2d 2d 2d 2d 2d 2d |--------|--------|
|00003700| 2d 2d 2d 2d 2d 2d 2d 2d | 2d 2d 2d 2d 2d 2d 2d 2d |--------|--------|
|00003710| 2d 2d 2d 2d 2d 2d 2d 2d | 2d 2d 2d 2d 2d 2d 2d 2d |--------|--------|
|00003720| 2d 0a 20 20 22 53 79 73 | 74 65 6d 20 41 64 6d 69 |-.  "Sys|tem Admi|
|00003730| 6e 69 73 74 72 61 74 69 | 6f 6e 3a 20 49 74 27 73 |nistrati|on: It's|
|00003740| 20 61 20 64 69 72 74 79 | 20 6a 6f 62 2c 20 62 75 | a dirty| job, bu|
|00003750| 74 20 73 6f 6d 65 6f 6e | 65 20 73 61 69 64 20 49 |t someon|e said I|
|00003760| 20 68 61 64 20 74 6f 20 | 64 6f 20 69 74 2e 22 0a | had to |do it.".|
|00003770| 4d 61 74 74 68 65 77 20 | 41 6c 64 6f 75 73 20 3a |Matthew |Aldous :|
|00003780| 20 30 31 39 33 33 39 36 | 32 39 20 3a 20 6d 64 61 | 0193396|29 : mda|
|00003790| 40 6d 68 72 69 2e 65 64 | 75 2e 61 75 20 3a 20 4d |@mhri.ed|u.au : M|
|000037a0| 65 6e 74 61 6c 20 48 65 | 61 6c 74 68 20 52 65 73 |ental He|alth Res|
|000037b0| 65 61 72 63 68 20 49 6e | 73 74 69 74 75 74 65 0a |earch In|stitute.|
|000037c0| 2d 2d 2d 2d 2d 2d 2d 2d | 2d 2d 2d 2d 2d 2d 2d 2d |--------|--------|
|000037d0| 2d 2d 2d 2d 2d 2d 2d 2d | 2d 2d 2d 2d 2d 2d 2d 2d |--------|--------|
|000037e0| 2d 2d 2d 2d 2d 2d 2d 2d | 2d 2d 2d 2d 2d 2d 2d 2d |--------|--------|
|000037f0| 2d 2d 2d 2d 2d 2d 2d 2d | 2d 2d 2d 2d 2d 2d 2d 2d |--------|--------|
|00003800| 2d 2d 2d 2d 2d 2d 2d 2d | 2d 2d 2d 2d 2d 2d 2d 0a |--------|-------.|
|00003810| 0a 0a 2d 2d 20 0a 5b 20 | 72 6f 75 74 65 40 69 6e |..-- .[ |route@in|
|00003820| 66 6f 6e 65 78 75 73 2e | 63 6f 6d 20 5d 20 20 45 |fonexus.|com ]  E|
|00003830| 64 69 74 6f 72 2c 20 50 | 68 72 61 63 6b 20 4d 61 |ditor, P|hrack Ma|
|00003840| 67 61 7a 69 6e 65 20 2f | 20 47 75 69 6c 64 20 43 |gazine /| Guild C|
|00003850| 6f 72 70 6f 72 61 74 69 | 6f 6e 20 43 68 61 69 72 |orporati|on Chair|
|00003860| 0a 0a 09 20 20 20 20 20 | 20 20 74 68 65 20 67 72 |...     |  the gr|
|00003870| 65 61 74 65 73 74 20 74 | 72 69 63 6b 20 74 68 65 |eatest t|rick the|
|00003880| 20 64 65 76 69 6c 20 65 | 76 65 72 20 70 75 6c 6c | devil e|ver pull|
|00003890| 65 64 20 77 61 73 0a 09 | 09 20 20 20 63 6f 6e 76 |ed was..|.   conv|
|000038a0| 69 6e 63 69 6e 67 20 74 | 68 65 20 77 6f 72 6c 64 |incing t|he world|
|000038b0| 20 68 65 20 64 69 64 6e | 27 74 20 65 78 69 73 74 | he didn|'t exist|
|000038c0| 0a 0a                   |                         |..      |        |
+--------+-------------------------+-------------------------+--------+--------+