Fred Stluka on 26 Sep 2014 08:09:44 -0700


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] 'Shellshock' Bug Spells Trouble for Web Security


Rich,

But only if they try to access a malicious DHCP server to get
assigned an IP address, right?  My web server should never
be able to be tricked into trying to use a remote DHCP server.
It would have to be that the local DHCP server it already uses
has gotten infected, right?

--Fred
------------------------------------------------------------------------
Fred Stluka -- mailto:fred@bristle.com -- http://bristle.com/~fred/
Bristle Software, Inc -- http://bristle.com -- Glad to be of service!
Open Source: Without walls and fences, we need no Windows or Gates.
------------------------------------------------------------------------
On 9/26/14 10:53 AM, Rich Freeman wrote:
On Fri, Sep 26, 2014 at 10:51 AM, Fred Stluka <fred@bristle.com> wrote:
Good point!  I'm also not running a DHCP server.
DHCP servers are fine.  DHCP clients are potentially at risk.

--
Rich
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug



___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug