[dns-operations] ShellShock exploit through the DNS
bortzmeyer at nic.fr
Tue Oct 14 09:42:54 UTC 2014
On Tue, Oct 14, 2014 at 09:01:02AM +0100,
Simon Munton <Simon.Munton at cdns.net> wrote
a message of 38 lines which said:
> As "/bin/sh" is almost always a symlink to "/bin/bash",
No. It is not the case for FreeBSD, Debian, NetBSD, ArchLinux...
> assume this to be the case (i.e. use bash specific features, without
> declaring "#!/bin/bash"),
Then, they are buggy. OS like Debian are very picky about that and
report bashisms mercilessly as bug (long before ShellShock).
More information about the dns-operations