Message: previous - next
Month: October 2014

[OT] shellshock.

From: Felmon Davis <davisf@...>
Date: Sat, 4 Oct 2014 23:38:42 -0400 (EDT)

just hoping for confirmation one way or the other: I've upgraded 
wheezy and bash --version says

GNU bash, version 4.2.37(1)-release (i486-pc-linux-gnu)

when I run the shellshock test script:

env x='() { :;}; echo vulnerable' bash -c "echo this is a test"

this is what I get:

this is a test

I think this says I'm fit but I'm not sure.... some sites say there 
should be an error statement.


Felmon Davis

It is easier to be wise for others than for oneself.  -- La