[dns-operations] ShellShock exploit through the DNS

Stephane Bortzmeyer bortzmeyer at nic.fr
Tue Oct 14 09:42:54 UTC 2014

On Tue, Oct 14, 2014 at 09:01:02AM +0100,
 Simon Munton <Simon.Munton at cdns.net> wrote 
 a message of 38 lines which said:

> As "/bin/sh" is almost always a symlink to "/bin/bash", 

No. It is not the case for FreeBSD, Debian, NetBSD, ArchLinux...

> assume this to be the case (i.e. use bash specific features, without
> declaring "#!/bin/bash"),

Then, they are buggy. OS like Debian are very picky about that and
report bashisms mercilessly as bug (long before ShellShock).

More information about the dns-operations mailing list