Hello,
I can confirm that on my LEAF bering uclibc 4.3.3 routers the bash
shellshock vulnerability exists. I have the bash.lrp package installed
and the vulnerability lives there from my understanding (busybox is not
vulnerable). I haven't tested this in any later versions but I suspect
the vuln
Hello Trev;
Am Donnerstag, 2. Oktober 2014, 09:17:08 schrieb Trev Peterson:
> Hello,
>
> I can confirm that on my LEAF bering uclibc 4.3.3 routers the bash
> shellshock vulnerability exists. I have the bash.lrp package installed
> and the vulnerability lives there from my understanding (busybox
Thanks, I've already removed bash from the leaf.cfg. I just hadn't
seen any news hit the list and wanted to make sure people were aware of
the issue. Thanks for the quick reply and the good work. It sounds
like you already tested but if I can help in another way let me know.
Thanks,
On Sat, 2
