maemo.org - Talk

maemo.org - Talk (https://talk.maemo.org/index.php)
-   Maemo 5 / Fremantle (https://talk.maemo.org/forumdisplay.php?f=40)
-   -   Shellshock? Maemo? (https://talk.maemo.org/showthread.php?t=93930)

lancewex 2014-09-25 23:29

Shellshock? Maemo?
 
Is Maemo affected?
Thanks.

endsormeans 2014-09-26 00:19

Re: Shellshock? Meemo?
 
hmm..
are you referring to ....Meemo the global virtual goods distributor?
http://www.meemo.me/

or Meemo ...the New york eatery?...been there...good food BTW...
http://www.meemonyc.net/

A referring point would help concerning this ...shellshock?

Copernicus 2014-09-26 00:20

Re: Shellshock? Meemo?
 
Quote:

Originally Posted by lancewex (Post 1440588)
Is Maemo affected?

I think the default shell on Maemo is "ash", provided by busybox. That shouldn't be affected. You would need to have installed Bash onto your machine to be affected, as it is a Bash bug...

endsormeans 2014-09-26 00:23

Re: Shellshock? Meemo?
 
Ah...this is about the bash bug!
...been all over the national news network here (cbc)
lately...

rotoflex 2014-09-26 02:57

Re: Shellshock? Meemo?
 
Go to xterminal
Type bash
Hit enter
If it says "not found", you don't have bash & don't have to worry about this one

gerbick 2014-09-26 03:04

Re: Shellshock? Meemo?
 
I came here for the geek references to how Maemo was misspelled in the title. Go Advanced Edit and edit the thread title before your original question is overlooked.

sulu 2014-09-26 07:11

Re: Shellshock? Maemo?
 
Run this in xterm:
Code:

env x='() { :;}; echo vulnerable' bash -c "echo this is a test"
If the output looks like this then you're vulnerable:
Code:

$ env x='() { :;}; echo vulnerable' bash -c "echo this is a test"
vulnerable
this is a test

I currently don't have my N900 at hand but I'd bet a lot of money that Fremantle's bash is vulnerable (at this moment).
Of course, if you don't have bash installed you're safe.

Whispering Weasel 2014-09-26 07:47

Re: Shellshock? Maemo?
 
hmm seems like i'm affected (n900), I have busybox 1.22.1, is that it that makes is vulnerable?

sulu 2014-09-26 08:01

Re: Shellshock? Maemo?
 
Quote:

Originally Posted by Whispering Weasel (Post 1440617)
hmm seems like i'm affected (n900), I have busybox 1.22.1, is that it that makes is vulnerable?

No, it's your bash version.

Whispering Weasel 2014-09-26 08:16

Re: Shellshock? Maemo?
 
ah, ok . so yes Maemo is affected with Bash version 3.2-0maemo10


All times are GMT. The time now is 01:58.

vBulletin® Version 3.8.8