3 ms·

Have you considered you may be using a software stack that is not (obviously) vulnerable? Not every software is vulnerable by default on all URLs, just the ones

Have you considered you may be using a software stack that is not (obviously) vulnerable? Not every software is vulnerable by default on all URLs, just the ones that wind up calling out to bash in a specific way.

pavs 12y ago
If I am not wrong the vulnerability test on shellshocker.net tests bash directly. Either way I could very well be wrong and I might have missed something.
- Inversechi 12y ago
  Did you run the system test from the website? https://shellshocker.net/#systemtest https://shellshocker.net/#systemtest
  - pavs 12y ago
    Yes that's the one I was talking about. Ran the test before and after updating. It was the same (negative). I ran the same test on the relative up todate home computer (Ubuntu) and it was vulnerable on some of the tests. This IS weird.
- iancarroll 12y ago
  No, you would need a vulnerable service running on the VPS in order to exploit it.