3 ms·
If ShellShock is currently un-patched, it is in fact a 0 day right? Just a very public one. Should we like not be connected to the internet until this is fixed?
by swartkrans 12y ago
If ShellShock is currently un-patched, it is in fact a 0 day right? Just a very public one. Should we like not be connected to the internet until this is fixed? Are personal routers vulnerable?
- joepvd 12y agoI guess most personal routers do not ship with bash. This is what mine says: # ls -l /bin/*sh lrwxrwxrwx 1 root root 12 Feb 9 2014 /bin/ash -> /bin/busybox lrwxrwxrwx 1 root root 12 Feb 9 2014 /bin/sh -> /bin/busybox
- SolarNet 12y agoA 0 day means we don't know of it's existence, if it's been previous mentioned and people have failed to patch it then it isn't a 0-day anymore. The term comes from the "zero days to fix". Since we've had time to fix this problem, and failed to, it is no longer a 0-day. Hypothetically, third parties might have been safe from this if they fixed it independently.
- deleted 12y ago[deleted]