PPRuNe Forums - View Single Post - Shellshocked ?
Thread: Shellshocked ?
View Single Post
Old 27th Sep 2014, 21:27
  #12 (permalink)  
le Pingouin
 
Join Date: May 2009
Location: YMML
Posts: 1,839
Received 19 Likes on 9 Posts
Until Apple releases a patch it's a fairly pointless exercise running that command - your bash is a vulnerable version. But as mentioned unless you're specifically allowing remote access it's not a problem.

Unfortunately a variation of the vulnerability has surfaced that needs additional patching. You might be patched for the first but not the second:

$ rm -f echo
$ env X='() { (a)=>\' sh -c "echo date"; cat echo

sh: X: line 1: syntax error near unexpected token `='
sh: X: line 1: `' sh: error importing function definition for `X'
Thu 25 Sep 2014 08:50:18 BST

The above output is an example of a vulnerable bash version. If you see a date in the output of that command your bash is vulnerable.
le Pingouin is offline