Alert for Apple and Unix/Linux Users - Shellshock Bug

Thanks......

 

This vulnerability is largely being overblown.

In the case of web servers running Linux/BSD, the server would first have to have the affected bash shell implemented and then have it exposed to the Internet. the bash shell (and other command shells like the korn shell and c-shell) are command line interfaces used to administer a server. The standard practice is to NOT expose administrative services like this to the Internet.

The vulnerability also affects other devices like load balancers (use to balance traffic across multiple web servers) and firewalls, but again it would be highly unusual to find these services exposed to the Internet.

Although this is being compared to the widely publicized "Heartbleed" vulnerability which was published earlier in the summer (which had a very real and significant impact to affected web servers and could be publicly exploited); this is different.

 

check here to see if your machine is vulnerable http://lifehacker.com/how-to-check-i...ble-1639211806
Apple's on it already.. As usual with these things, it depends on the user making a few fatal flaws, but its nice to see it being addressed

 

Yeah I think Apple pretty much has the shells secured out of the box, mebbe X server is opened up a bit more (if they even offer it anymore?) Linux and the BSD distros seem to have them running by default, or at least did when I was using them several years ago. But that was pretty much the whole point of using *nix at that time lol