2 ms·That test doesn't detect the vulnerability - needs to mention /bin/bash not /bin/shby gklyne 12y agoThat test doesn't detect the vulnerability - needs to mention /bin/bash not /bin/shbigbugbag 12y agoWell, maybe you should look at your /bin/sh ls -l /bin/sh lrwxrwxrwx 1 root root 4 Sep 24 08:07 /bin/sh -> bashmakomk 12y agoI think /bin/sh is /bin/bash on CentOS and RedHat, but Debian, Ubuntu and probably other distros use dash as /bin/sh instead which was never vulnerable.