Too bad this has been here for 10 hours and no upvotes or comments. Maybe if you had posted it as a blogpost somewhere and titled it "Privacy slammed by bash b

Too bad this has been here for 10 hours and no upvotes or comments. Maybe if you had posted it as a blogpost somewhere and titled it "Privacy slammed by bash bug, vpn servers kernel wormable" then it would have received attention, like the other gazillion rude titles. Nice find. Any other vectors for vpn servers besides the pre-auth user-pass-verify one described above? I know openvpn can be configured to run some script when client is up or down, and I guess the openvpn server can also exploit a client by passing it dhcp-options which it most probably passess to ifup-down-scripts as env vars. But at least for clients there is script-security setting.