Yes OSX is not vulnerable to the DHCP exploit. No, the DHCP exploit was not on t... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

thefreeman on Sept 30, 2014 | parent | context | favorite | on: OS X Bash Update 1.0

Yes OSX is not vulnerable to the DHCP exploit.

No, the DHCP exploit was not on the server. It showed a sample payload a malicious DHCP could send to a client to achieve RCE. Also apparently some networks allow other clients to send DHCP commands so even if you trust the DHCP server it doesn't necessarily mean you are safe.

k_roy on Sept 30, 2014 [–]

Ahh, yep. The POC was definitely from server to client, not the other way around. A huge concern for Linux laptops then.

thefreeman on Sept 30, 2014 | [–]

at least until the `apt-get upgrade` or similar :)

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact