<div dir="ltr"><div>DASH is immune to this, yes. But as other dependencies /could/ bring BASH in....always good to check.<br><br></div>J.<br></div><div class="gmail_extra"><br><div class="gmail_quote">On 28 September 2014 18:13, Bob Marshall <span dir="ltr"><<a href="mailto:kingsknight3@gmx.com" target="_blank">kingsknight3@gmx.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div style="font-family:Verdana;font-size:12.0px"><div>
<div>Hello. I ran the following in a terminal window: <em>ls -l /bin/sh</em> and the reported shell was <strong>DASH</strong>, rather than <strong>BASH</strong>. I understand <strong>DASH</strong> has been used in DebIan/Ubuntu for quite a long time, and I can find no mention of vulnerability to Shellshock anywhere on the forums.</div>

<div> </div>

<div>Does anyone know if this is right or not?</div>

<div> </div>

<div>hedgehog</div>

<div> 
<div name="quote" style="margin:10px 5px 5px 10px;padding:10px 0 10px 10px;border-left:2px solid #c3d9e5;word-wrap:break-word">
<div style="margin:0 0 10px 0"><b>Sent:</b> Sunday, September 28, 2014 at 2:25 PM<br>
<b>From:</b> "Going It Alone" <<a href="mailto:reggaemaker@gmail.com" target="_blank">reggaemaker@gmail.com</a>><br>
<b>To:</b> "Notts GNU/Linux Users Group" <<a href="mailto:nottingham@mailman.lug.org.uk" target="_blank">nottingham@mailman.lug.org.uk</a>><br>
<b>Subject:</b> Re: [Nottingham] Shellshock</div>

<div name="quoted-content">
<div>
<div>
<div>Thanks.<br>
 </div>
Here's a simple test to see if you are vulnerable.<br>
 
<pre style="padding:3.0px;border:1.0px inset;width:98.0%;min-height:34.0px;text-align:left;overflow:auto">env 'x=() { :;}; echo vulnerable' 'BASH_FUNC_x()=() { :;}; echo vulnerable' bash -c "echo test"</pre>
</div>
Source: <a href="http://www.linuxquestions.org/questions/mageia-97/bash-shellshock-cve-2014-6271-cve-2014-7169-protecting-yourself-from-shellshock-4175520323/" target="_blank">http://www.linuxquestions.org/questions/mageia-97/bash-shellshock-cve-2014-6271-cve-2014-7169-protecting-yourself-from-shellshock-4175520323/</a></div>

<div class="gmail_extra"> 
<div class="gmail_quote"><div><div class="h5">On 28 September 2014 14:19, Jason Irwin <span><<a href="http://jasonirwin73@gmail.com" target="_blank">jasonirwin73@gmail.com</a>></span> wrote:

</div></div><blockquote class="gmail_quote" style="margin:0 0 0 0.8ex;border-left:1.0px rgb(204,204,204) solid;padding-left:1.0ex"><div><div class="h5">On 27/09/14 00:50, Going It Alone wrote:<br>
> What implications does this have on routers?<br>
Prolly not much, unless they have bash (or proxy to something that has<br>
bash).<br>
<br>
A nice (simple!) explanation of the problem can be found here:<br>
<a href="http://unix.stackexchange.com/a/157331" target="_blank">http://unix.stackexchange.com/a/157331</a><br>
<br>
</div></div><span><font color="#888888"><div><div class="h5">--<br>
╔═════════════╦══════════════════════════════════════════╗<br>
║ Jason Irwin ║ OpenPGP (GPG/PGP) Public Key: 0xD0C592B1 ║<br>
║             ║ Import from hkp://<a href="http://pgp.mit.edu" target="_blank">pgp.mit.edu</a>            ║<br>
╚═════════════╩══════════════════════════════════════════╝<br>
<br></div></div>
_______________________________________________<br>
Nottingham mailing list<br>
<a href="http://Nottingham@mailman.lug.org.uk" target="_blank">Nottingham@mailman.lug.org.uk</a><br>
<a href="https://mailman.lug.org.uk/mailman/listinfo/nottingham" target="_blank">https://mailman.lug.org.uk/mailman/listinfo/nottingham</a></font></span></blockquote>
</div>
<br>
<br clear="all">
<br>
--
<div>Listen my stuff on:<br>
<br>
<a href="https://soundcloud.com/going-it-alone-aka-g-i-a" target="_blank">SoundCloud</a><br>
<br>
<a href="http://vimeo.com/goingitalone" target="_blank">Vimeo</a></div>
</div>
_______________________________________________ Nottingham mailing list <a href="mailto:Nottingham@mailman.lug.org.uk" target="_blank">Nottingham@mailman.lug.org.uk</a> <a href="https://mailman.lug.org.uk/mailman/listinfo/nottingham" target="_blank">https://mailman.lug.org.uk/mailman/listinfo/nottingham</a></div>
</div>
</div>
</div></div></div>

<br>_______________________________________________<br>
Nottingham mailing list<br>
<a href="mailto:Nottingham@mailman.lug.org.uk">Nottingham@mailman.lug.org.uk</a><br>
<a href="https://mailman.lug.org.uk/mailman/listinfo/nottingham" target="_blank">https://mailman.lug.org.uk/mailman/listinfo/nottingham</a><br></blockquote></div><br></div>