This article is misleading. "First of all, this vulnerability has long been patched" - not true, it wasn't patched on RedHat and Debian until yesterday. "many apps are not at risk" - so, what, nothing to worry about? "the functions that are the subject of this vulnerability are obsolete" - obsolete they may be, but a ton of software still uses them. "Taken together, the risk of actual exploits targeting GHOST is rela…
> Let's wait until someone figures this out or the POC exploit is made public.
The release included a POC against Exim (section 5 "exploitation" of the openwall post)