CVE-2014-6278 CVE-2014-6277 - bash: code execution via specially crafted environment variables

Submitted by root on Wed, 10/01/2014 - 09:49

There is a new bash vulnerability for which there are no technical details so I presume it is scarier than the one mentioned few days ago. Fortunately there is already a patch.

Shellshock - Bash Code Injection Vulnerabilty (CVE-2014-6271)

Submitted by root on Thu, 09/25/2014 - 13:52

Security researchers from Red Hat have uncovered a new exploit in the common "Bash" command shell found in OS X, Linux, AIX and many other *nix platforms which can be used to deploy malicious code with minimal effort. Due to the ubiquity of the Bash shell, the exploit can also affect a wide variety of different web-connected devices and properties, including unsecured websites, smart home appliances, servers, and more.

As mentioned above, this vulnerability is not limited to only one platform but in the same time in doesn't affect the average consumer because even if they have "bash" in their computers, they do not use it in a way that it can be vulnerable. Unless you are using your computer as a server that accepts commands from untrusted sources (like web servers for example) (and then only if it sets environment variables based on commands from untrusted sources) you do not have to worry about.

How to remve an ISCSI disk from linux server without reboot

Submitted by root on Tue, 07/15/2014 - 22:45

I am sure this is well known by the ones working daily with this technology but it's still important to have it around. Of course, those who are not aware have better use for what is written in this article.

Networking ABC - questions and answers

Submitted by root on Mon, 07/07/2014 - 22:42

Define Network?

A network is a set of devices connected by physical or virtual media links.
A network is a connection of two or more nodes via a physical or virtual link but also two or more networks connected by one or more nodes.

What is a Link?

Link is the virtual or physical medium used to connect two or more computers.

What is a node?

Taking as example the response from the question above, the computers are called Nodes.

OpenSSL Heartbleed Bug

Submitted by root on Thu, 04/10/2014 - 11:45

What is Heartbleed Bug?
What is the CVE-2014-0160?
How widespread is this?

Many questions, explanations and technical details are mentioned here: http://heartbleed.com/

The goal of this article is not to repeat what is there but rather to make a summary and point out the most important (and some extra stuff too):

How to repair a sparsebundle image

Submitted by root on Fri, 11/01/2013 - 21:55

In this tutorial I will show you how to repair a sparsebundle image. It's not difficult but it can take some time, depending of the size of your image.
Also, please do note that some images are so damaged that they cannot be repaired so do not throw stones at me if you cannot fix yours.

OS X Misc Stuff

Submitted by root on Wed, 02/01/2012 - 20:52

How to start finder from command line:

Open up Terminal and run the command below (dot means current directory).
user@osx$ open .

How to restart the graphical interface of OS X:

user@osx$ sudo killall -HUP WindowServer

How to retrieve CPU information via command line in OS X:

sysctl -n machdep.cpu.brand_string
system_profiler | grep Processor

Linux World

Submitted by root on Fri, 12/09/2011 - 16:24

Solaris World

Submitted by root on Fri, 12/09/2011 - 16:12

Apple World

Submitted by root on Tue, 11/29/2011 - 21:28

Articles, tutorials related to Apple devices and operating systems.

How to assign disks to AIX partition via VIO

Submitted by root on Fri, 10/21/2011 - 18:05

What I am showing you below is not hard at all but it needs extra attention and the steps must be followed accordingly.

First of all you must have the information regarding the assigned LUNS, either created by you or by the storage admin.
Once you have them, open 3 sessions: one to each VIO and another to the target partition. They will be referred below as gzv1, gzv2 and gzaix.

Scan for new devices on first VIO:

gzv1# cfgmgr

HP-UX World

Submitted by root on Sat, 10/15/2011 - 09:51

Tutorials, manuals and other useful information related to HP-UX OS and its hardware.

Executing commands remotely on multiple systems via SSH

Submitted by root on Fri, 10/14/2011 - 14:46

Let's assume you have your systems farm. From one of them you are able to connect to all others with ssh keys already configured.
Now, you create a list with all these systems in it. If you want to temporary skip one system, just put # in front of it, like in our example (server2 disabled).
The ssh options are there to assure you that even if you have ssh configuration problems or one server is down, you won't get stuck on that and everything will go smooth to the end.

Strings or File Manipulation

Submitted by root on Fri, 10/14/2011 - 10:36

How to replace tab with newline:

gz@linux:~$ cat list
str1    str2    str3    str4    str5    str6    str7    str8
gz@linux:~$ cat list | tr '\t' '\n' >list2
gz@linux:~$ cat list2
str1
str2
str3
str4
str5
str6
str7
str8

How to get different parts of a string, for example with path and file name:

gz:tips# foo=/tmp/dir/filename.tar.gz
gz:tips# echo ${foo%/*}
/tmp/dir
gz:tips# echo ${foo##*/}
filename.tar.gz
gz:tips# echo ${foo%%.*}
/tmp/dir/filename
gz:tips# echo ${foo%.tar.gz}

Tips & Tricks

Submitted by root on Fri, 10/14/2011 - 10:33

UNIX, Linux, OSX, Windows, Centrify (UNIX/Linux Active Directory). Whatever stuff I had to deal with.

AIX World

Submitted by root on Wed, 10/12/2011 - 16:19

This corner is for AIX related docs.
You can find here tutorials, commands and other useful information.

Recent content

tmutil: command line interface into Time Machine root
macOS: tmutil set quota root
ESXi: how to change the MTU of vmkernek (vmk) interface (when UI fails) root
ESXi: A bunch of useful commands and information root
How to repair a sparsebundle image root
macOS: How to Show and Hide Hidden Files in macOS Finder root
Samsung 870 QVO 2TB: Speed Tests and comparison with Adata SU650 and Kingston K600 root
Ubiquiti EdgeRouter X - thoughts and tips root
Qnap TR-004 short review - why I cannot use it root
Speed test of Icy Box IB-3805-C31, a 5 disks enclosure from Raidsonic root
Asus ROG Sheath in 2024: a HUGE Mousepad, Bigger Than Logitech G840 XL root
Debian DRBD: How to resize drbd and OCFS2 online root
Ubuntu: Fast Install With VMware Fusion root
The one with APC Back-UPS BE850G2-GR: Charge Whatever With It, From Phone to Computer And BEYOND :D root
File Sharing Problems? Downgrade from macOS Ventura to Monterey root
VIOFO A139 Quad HD Dash Camera - 3 Channels Camera in a 2 Channels Package. Confused? root
CarPlay not working with iPhone 15 Pro? Seven Type C cables tested with Mazda 3 BP with USB-A Port root
Apple Watch Series 9? Not Yet! I Still Love My "Seven of Nine" 19 months later root
The Wooden Playhouse Project root
ESXi 7: Create VMFS Partition Via Command Line root
5 Months with iPhone 15 Pro: Not PERFECT But... Must See. From Gaming to ProRes Requirements. root
How to build a 25U 600x600 Server Rack root
Thermaltake Pure 20 fan - HUGE and quiet! root
Docker: how to increase php memory "the docker way" root
Mousepad Logitech G840 root
Global Chip Shortage? Build this oddity: PC From 2009 With GeForce GTX 1050ti 4G root
Brigadier: How to use it to Download Boot Camp Drivers root
Bombardier: How to use it to Download Boot Camp Drivers root
Logitech Pro X Wired Gaming Headset (2nd gen): review + mic test with G HUB on Windows 11 and macOS root
macOS: extract user's image root

#less tar.gz.ro

Stay at 127.0.0.1, wear a 255.255.255.0.

CVE-2014-6278 CVE-2014-6277 - bash: code execution via specially crafted environment variables

Shellshock - Bash Code Injection Vulnerabilty (CVE-2014-6271)

How to remve an ISCSI disk from linux server without reboot