[dns-operations] ShellShock exploit through the DNS

[Stephane Bortzmeyer]

On Tue, Oct 14, 2014 at 09:01:02AM +0100,
 Simon Munton <Simon.Munton at cdns.net> wrote 
 a message of 38 lines which said:

> As "/bin/sh" is almost always a symlink to "/bin/bash", 

No. It is not the case for FreeBSD, Debian, NetBSD, ArchLinux...

> assume this to be the case (i.e. use bash specific features, without
> declaring "#!/bin/bash"),

Then, they are buggy. OS like Debian are very picky about that and
report bashisms mercilessly as bug (long before ShellShock).