> Worse that heartbleed? In what way? It doesn't have a logo, so it's a bit better in my book.
But seriously, yup, it's probably worse - it likely affects more sites and trivially gives you remote shell. I have written down some technical details about the issue and the problems with all the patches so far: http://lcamtuf.blogspot.com/2014/09/quick-notes-about-bash-bug-its-impact.html Most of the technical discussions seem to be happening on oss-security@. /mz _______________________________________________ Sent through the Full Disclosure mailing list http://nmap.org/mailman/listinfo/fulldisclosure Web Archives & RSS: http://seclists.org/fulldisclosure/
