ShellShock Bash Vulnerability

icburns · September 25, 2014

Some potentially massive implications here. Basically, it looks like a significant portion of devices on the Internet allow unauthenticated command execution.
http://www.troyhunt.com/2014/09/everything-you-need-to-know-about.html?m=1
Apply tinfoil hats as appropriate.

Woolly Blue · September 25, 2014

Don't click that link lads
@icburns will siphon all the cash out of your accounts after payday if you do.

Pat's Van · September 25, 2014

icburns said:
Some potentially massive implications here. Basically, it looks like a significant portion of devices on the Internet allow unauthenticated command execution.
http://www.troyhunt.com/2014/09/everything-you-need-to-know-about.html?m=1
Apply tinfoil hats as appropriate.

but I've got "unauthenticated command execution" ticked as "allow"

should I untick it or what ?

in fact, should I hyphenate the word "untick" or what ?

icburns · September 26, 2014

Woolly Blue said:
Don't click that link lads
@icburns will siphon all the cash out of your accounts after payday if you do.

Curses! My dastardly scheme is ruined.
Hey @Bryan, where is your Mac god now?

Deleted member 28206 · September 26, 2014

Much ado about nothing.

Just wrote this to patch it myself.

Code:

brew update
brew install bash
sudo sh -c 'echo "/usr/local/bin/bash" >> /etc/shells'
chsh -s /usr/local/bin/bash
sudo mv /bin/bash /bin/bash-backup
sudo ln -s /usr/local/bin/bash /bin/bash