On Tue, Feb 3, 2015 at 4:53 AM, Rustom Mody <rustompm...@gmail.com> wrote:
> How many people (actually machines) out here are vulnerable? > > > http://security.stackexchange.com/questions/80210/ghost-bug-is-there-a-simple-way-to-test-if-my-system-is-secure > > shows a python 1-liner to check > -- > https://mail.python.org/mailman/listinfo/python-list > Not very reliable in my experience, this python test does segfault on my *patched* Debian machine root@web:~# python -c 'import socket;y="0"*50000000;socket.gethostbyname(y)' Segmentation fault However, the other test proposed on stackechange correctly reports that I'm not vulnerable ;) root@web:/tmp# wget https://webshare.uchicago.edu/orgs/ITServices/itsec/Downloads/GHOST.c root@web:/tmp# gcc GHOST.c -o GHOST root@web:/tmp# ./GHOST not vulnerable -- Marc
-- https://mail.python.org/mailman/listinfo/python-list
