<html><head></head><body><div style="font-family: Verdana;font-size: 12.0px;"><div>
<div>Hello. I ran the following in a terminal window: <em>ls -l /bin/sh</em> and the reported shell was <strong>DASH</strong>, rather than <strong>BASH</strong>. I understand <strong>DASH</strong> has been used in DebIan/Ubuntu for quite a long time, and I can find no mention of vulnerability to Shellshock anywhere on the forums.</div>
<div> </div>
<div>Does anyone know if this is right or not?</div>
<div> </div>
<div>hedgehog</div>
<div>
<div name="quote" style="margin:10px 5px 5px 10px; padding: 10px 0 10px 10px; border-left:2px solid #C3D9E5; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
<div style="margin:0 0 10px 0;"><b>Sent:</b> Sunday, September 28, 2014 at 2:25 PM<br/>
<b>From:</b> "Going It Alone" <reggaemaker@gmail.com><br/>
<b>To:</b> "Notts GNU/Linux Users Group" <nottingham@mailman.lug.org.uk><br/>
<b>Subject:</b> Re: [Nottingham] Shellshock</div>
<div name="quoted-content">
<div>
<div>
<div>Thanks.<br/>
</div>
Here's a simple test to see if you are vulnerable.<br/>
<pre style="padding: 3.0px;border: 1.0px inset;width: 98.0%;height: 34.0px;text-align: left;overflow: auto;">env 'x=() { :;}; echo vulnerable' 'BASH_FUNC_x()=() { :;}; echo vulnerable' bash -c "echo test"</pre>
</div>
Source: <a href="http://www.linuxquestions.org/questions/mageia-97/bash-shellshock-cve-2014-6271-cve-2014-7169-protecting-yourself-from-shellshock-4175520323/" target="_blank">http://www.linuxquestions.org/questions/mageia-97/bash-shellshock-cve-2014-6271-cve-2014-7169-protecting-yourself-from-shellshock-4175520323/</a></div>
<div class="gmail_extra">
<div class="gmail_quote">On 28 September 2014 14:19, Jason Irwin <span><<a href="jasonirwin73@gmail.com" target="_parent">jasonirwin73@gmail.com</a>></span> wrote:
<blockquote class="gmail_quote" style="margin: 0 0 0 0.8ex;border-left: 1.0px rgb(204,204,204) solid;padding-left: 1.0ex;">On 27/09/14 00:50, Going It Alone wrote:<br/>
> What implications does this have on routers?<br/>
Prolly not much, unless they have bash (or proxy to something that has<br/>
bash).<br/>
<br/>
A nice (simple!) explanation of the problem can be found here:<br/>
<a href="http://unix.stackexchange.com/a/157331" target="_blank">http://unix.stackexchange.com/a/157331</a><br/>
<br/>
<span class="HOEnZb"><font color="#888888">--<br/>
╔═════════════╦══════════════════════════════════════════╗<br/>
║ Jason Irwin ║ OpenPGP (GPG/PGP) Public Key: 0xD0C592B1 ║<br/>
║ ║ Import from hkp://<a href="http://pgp.mit.edu" target="_blank">pgp.mit.edu</a> ║<br/>
╚═════════════╩══════════════════════════════════════════╝<br/>
<br/>
_______________________________________________<br/>
Nottingham mailing list<br/>
<a href="Nottingham@mailman.lug.org.uk" target="_parent">Nottingham@mailman.lug.org.uk</a><br/>
<a href="https://mailman.lug.org.uk/mailman/listinfo/nottingham" target="_blank">https://mailman.lug.org.uk/mailman/listinfo/nottingham</a></font></span></blockquote>
</div>
<br/>
<br clear="all"/>
<br/>
--
<div>Listen my stuff on:<br/>
<br/>
<a href="https://soundcloud.com/going-it-alone-aka-g-i-a" target="_blank">SoundCloud</a><br/>
<br/>
<a href="http://vimeo.com/goingitalone" target="_blank">Vimeo</a></div>
</div>
_______________________________________________ Nottingham mailing list Nottingham@mailman.lug.org.uk <a href="https://mailman.lug.org.uk/mailman/listinfo/nottingham" target="_blank">https://mailman.lug.org.uk/mailman/listinfo/nottingham</a></div>
</div>
</div>
</div></div></body></html>