Tag Info

New answers tagged

1

Bonjour Prior, to Yosemite this could be done via launchctl, so using: sudo launchctl unload -w /System/Library/LaunchDaemons/com.apple.mDNSResponder.plist would turn Bonjour off, and to turn it back on: sudo launchctl load -w /System/Library/LaunchDaemons/com.apple.mDNSResponder.plist Unfortunately /usr/sbin/mDNSResponder is not found on Yosemite. A ...


1

If ping is returning an unwanted IP address for a domain, it almost certainly means something is hijacking your DNS settings. The first step to check would be the hosts file /etc/hosts Then look here to determine what server or process is resolving your DNS /etc/resolv.conf Alternatively, you can use this command scutil --dns Firefox may be working ...


0

The patch for the bug is available here: Apple bash bug patch It is possible to Airdrop connect to another device, transfer the patch DMG from that device and then install the patch - all without connecting the target machine to the internet.


0

Here ia a basic set of pretty simple rules for an end user: Are Macs vulnerable to the Bash shellshock bug?. The purpose is to remove any remote access to a shell, may it be directly /bin/bash or any other shell which may let switch to /bin/bash and use it to escalate priviledge.


0

Please check the version of bash in brew before you do below step: $ sudo ln -s /usr/local/Cellar/bash/4.3.25/bin/bash /bin/bash $ sudo ln -s /usr/local/Cellar/bash/4.3.25/bin/bash /bin/sh The bash version is updated to 4.3.27 so far. if you still link 4.3.25 to /bin/bash, you Mac should not boot. if you have do that, you can boot to recovery mode and ...


-1

Not good, still vulnerable! bash-4.3$ brew upgrade bash Error: bash-4.3.25 already installed bash-4.3$ /usr/local/Cellar/bash/4.3.25/bin/bash bash-4.3$ env x='() { :;}; echo vulnerable' bash -c "echo this is a test" vulnerable this is a test


8

No, as far as I can tell, ordinary OS X desktops are not. OS X DHCP is not vulnerable. These days it doesn’t even invoke a shell at all, and in the versions that used a bootpd that did invoke a shell, that shell was not Bash; some sites have suggested that it would have been tcsh that was executed, but I think it would actually have been /bin/sh, which ...


2

Potentially yes. Examples: You download a picture. While you never open the picture, the OS may generate thumbnails for it. If there's a bug (vulnerability) in the thumbnail generator, it may result in code execution. You download a document. While you never open the document yourself, the Search Indexer reads the file to speed up finding documents. If ...


0

Malicious code needs to be run by your computer, but sometimes you don't have to open the file in order for it to be run. Some browsers can be infected by drive-by-downloads, which infect your machine simply by browsing. But, for your specific question, if you downloaded a file, it will not infect you until you open/run it.


9

First, you don't need to do this unless you are are offering web services to the public internet from your Mac. If you are not, wait until there is an official security update from Apple. However, if you are offering web services, you might want to update. Official Patch Apple has released an Official Bash Security Update Here Checking whether you are ...


2

Business users can mitigate their risk using their perimeter IPS protection (or palo alto nextgen firewalls) for CVE-2014-6271 but need to wait for released protection on the related CVE-2014-7219 over the next 24 hours. Source (in my case palo alto): https://securityadvisories.paloaltonetworks.com/


11

What you'd need to do is determine which processes are running bash. On Linux systems, one vulnerability seems to possibly be in how DHCP requests are handled. You could look at using execsnoop to spot what runs bash and then try doing some normal things - like connecting to a wifi network or browsing webpages that require external helpers (say something ...


36

Define "risk". The core of this attack is to create an environment variable that looks like a Bash scripting function but ends with the invocation of a program, and then cause Bash to be run. Bash will see the environment variable, parse it, and then keep parsing past the end of the function and run the program. Any method of triggering Bash execution ...



Top 50 recent answers are included