Re:Bash 'shellshock' bug is wormable
by wiredfool on Thursday September 25, 2014 @01:02AM
(#8365710)
Someone is going to be going through busybox soon, and then there (potentially) will be a whole bunch more exploitable boxes that don't have a generally have a regular update cycle.
[ Parent
| on HN ]
You're right, of course. Exploitable weaknesses in busybox are going to be killer - I think shellshock will turn out to be the start of something really big.
But, to clarify for others, the existing shellshock PoC doesn't work on the busybox environment I tested (v1.20.2).