Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.os.linux.networking > #3092

Re: Are our WiFI routers and rooftop radios affected by the Bash Shellshock vulnerability?

From William Unruh <unruh@invalid.ca>
Newsgroups alt.internet.wireless, alt.os.linux, comp.os.linux.networking
Subject Re: Are our WiFI routers and rooftop radios affected by the Bash Shellshock vulnerability?
Date 2014-09-27 01:41 +0000
Organization A noiseless patient Spider
Message-ID <m054l5$uiv$1@dont-email.me> (permalink)
References <m02ugi$rqe$1@news.albasani.net> <cqlb2a9r2vt5s0nnhjf90j3noe4rro4vbv@4ax.com> <m04s7o$9uq$3@dont-email.me> <entb2alc3cv7h6k1d8e0r12sg7p534p3di@4ax.com> <20140926191052.76d69c3e.best_lay@yahoo.com>

Cross-posted to 3 groups.

Show all headers | View raw


On 2014-09-27, Wildman <best_lay@yahoo.com> wrote:
> On Fri, 26 Sep 2014 20:33:10 -0300
> Shadow <Sh@dow.br> wrote:
>
>> On Fri, 26 Sep 2014 23:18:16 +0000 (UTC), William Unruh
>> <unruh@invalid.ca> wrote:
>> 
>> >On 2014-09-26, Shadow <Sh@dow.br> wrote:
>> >> On Fri, 26 Sep 2014 05:44:50 +0000 (UTC), Ger Robertson
>> >><something@something.invalid> wrote:
>> >>
>> >>>Anyone know how we can tell if our WiFI routers and rooftop radios
>> >>>are affected by the Bash Shellshock vulnerability?
>> >>
>> >> 	Telnet (or Putty) into it and
>> >> 	sh
>> >> 	will tell you what shell it runs.
>> >> 	[]'s
>> >
>> >No it will tell you what shell it runs as a replacement for sh. It
>> >may have many shells installed. 
>> >And once you have telneted in, you already have shell access so do
>> >not need shell access. 
>> >The question is whether there are any externally listening programs
>> >which use bash and which can be fed "carefully crafted" environment
>> >variables from outside. 
>> 
>> #sh
>> 
>> BusyBox v1.00 (2012.02.06-00:34+0000) Built-in shell (msh)
>> Enter 'help' for a list of built-in commands.
>> 
>> #cat /etc/services
>> 
>> 	Aw, c'mon, it's a start.
>> 	[]'s
>
> To find out what the default shell is, enter this...
>   echo $SHELL

Different default. This is the default for that particular user-- the
shell that is opened up on a terminal when the user logs in. The
default I was talking about is the default that the system uses in
general- it is usually called sh, but most systems have /bin/sh pointing
to some other shell which also has the same commands as the classic sh
shell (such as bash). Writers expect sh to comply with certain standards
so for example /bin/tcsh would not be a good thing for /bin/sh to point
to because thestructure of tcsh is very different from the old sh.

> If it is bash and there are other shells installed, you can
> change the default shell.
>   chsh -s /bin/dash
> or
>   chsh -s /bin/sh
> or whatever.

That will change your own particular shell that is brought up when you
log in. Actually the latter will probably give you bash anyway, since
/bin/sh is often a link to /bin/bash. 

>

Back to comp.os.linux.networking | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Are our WiFI routers and rooftop radios affected by the Bash Shellshock vulnerability? Ger Robertson <something@something.invalid> - 2014-09-26 05:44 +0000
  Re: Are our WiFI routers and rooftop radios affected by the Bash Shellshock vulnerability? Chris Ahlstrom <OFeem1987@teleworm.us> - 2014-09-26 05:53 -0400
  Re: Are our WiFI routers and rooftop radios affected by the Bash Shellshock vulnerability? John Hasler <jhasler@newsguy.com> - 2014-09-26 07:51 -0500
    Re: Are our WiFI routers and rooftop radios affected by the Bash Shellshock vulnerability? Caver1 <Caver1@inthemud.org> - 2014-09-26 12:26 -0400
      Re: Are our WiFI routers and rooftop radios affected by the Bash Shellshock vulnerability? Caver1 <Caver1@inthemud.org> - 2014-09-26 12:40 -0400
        Re: Are our WiFI routers and rooftop radios affected by the Bash Shellshock vulnerability? Java Jive <java@evij.com.invalid> - 2014-09-26 20:00 +0100
          Re: Are our WiFI routers and rooftop radios affected by the Bash Shellshock vulnerability? Caver1 <Caver1@inthemud.org> - 2014-09-27 18:52 -0400
      Re: Are our WiFI routers and rooftop radios affected by the Bash Shellshock vulnerability? alexd <troffasky@hotmail.com> - 2014-10-03 20:53 +0100
        Re: Are our WiFI routers and rooftop radios affected by the Bash Shellshock vulnerability? Thad Floryan <thad@thadlabs.com> - 2014-10-03 13:33 -0700
          Re: Are our WiFI routers and rooftop radios affected by the Bash Shellshock vulnerability? John Hasler <jhasler@newsguy.com> - 2014-10-03 15:51 -0500
            Re: Are our WiFI routers and rooftop radios affected by the Bash Shellshock vulnerability? Thad Floryan <thad@thadlabs.com> - 2014-10-03 21:01 -0700
  Re: Are our WiFI routers and rooftop radios affected by the Bash Shellshock vulnerability? Shadow <Sh@dow.br> - 2014-09-26 18:16 -0300
    Re: Are our WiFI routers and rooftop radios affected by the Bash Shellshock vulnerability? William Unruh <unruh@invalid.ca> - 2014-09-26 23:18 +0000
      Re: Are our WiFI routers and rooftop radios affected by the Bash Shellshock vulnerability? Shadow <Sh@dow.br> - 2014-09-26 20:33 -0300
        Re: Are our WiFI routers and rooftop radios affected by the Bash Shellshock vulnerability? Wildman <best_lay@yahoo.com> - 2014-09-26 19:10 -0500
          Re: Are our WiFI routers and rooftop radios affected by the Bash Shellshock vulnerability? William Unruh <unruh@invalid.ca> - 2014-09-27 01:41 +0000
            Re: Are our WiFI routers and rooftop radios affected by the Bash Shellshock vulnerability? Shadow <Sh@dow.br> - 2014-09-26 23:29 -0300
              Re: Are our WiFI routers and rooftop radios affected by the Bash Shellshock vulnerability? Michael Black <et472@ncf.ca> - 2014-09-28 20:37 -0400
            Re: Are our WiFI routers and rooftop radios affected by the Bash Shellshock vulnerability? Wildman <best_lay@yahoo.com> - 2014-09-26 22:10 -0500
              Re: Are our WiFI routers and rooftop radios affected by the Bash Shellshock vulnerability? Chris Ahlstrom <OFeem1987@teleworm.us> - 2014-09-27 06:42 -0400
              Re: Are our WiFI routers and rooftop radios affected by the Bash Shellshock vulnerability? Shadow <Sh@dow.br> - 2014-09-27 08:35 -0300
    Re: Are our WiFI routers and rooftop radios affected by the Bash Shellshock vulnerability? Ger Robertson <something@something.invalid> - 2014-09-27 00:06 +0000
      Re: Are our WiFI routers and rooftop radios affected by the Bash Shellshock vulnerability? Shadow <Sh@dow.br> - 2014-09-26 23:21 -0300
  Re: Are our WiFI routers and rooftop radios affected by the Bash Shellshock vulnerability? William Unruh <unruh@invalid.ca> - 2014-09-26 23:14 +0000
    Re: Are our WiFI routers and rooftop radios affected by the Bash Shellshock vulnerability? Ant <ant@zimage.comANT> - 2014-09-26 22:47 -0700
    Re: Are our WiFI routers and rooftop radios affected by the Bash Shellshock vulnerability? nmassello@yahoo.com (Neill Massello) - 2014-09-27 02:23 -0600

csiph-web