[mythtv-users] Shellshock discussion

[Daryl McDonald]

On Sep 26, 2014 11:03 AM, "Matt Emmott" <memmott at gmail.com> wrote:
>
>
>
> On Fri, Sep 26, 2014 at 10:38 AM, Raymond Wagner <raymond at wagnerrp.com>
wrote:
>>
>> On 9/25/2014 11:13 PM, Another Sillyname wrote:
>>>
>>> I don't know if people have read about the Shellshock vulnerability
recently discovered.
>>>
>>> Anyone with an Internet exposed mythtv server would be well advised to
do research on it ASAP.
>>
>>
>> If your backend is exposed to the internet, an attacker doesn't need to
use Bash to run anything they want on your system.
>> _______________________________________________
>
>
> What about MythWeb?
>
> _______________________________________________
> mythtv-users mailing list
> mythtv-users at mythtv.org
> http://www.mythtv.org/mailman/listinfo/mythtv-users
> http://wiki.mythtv.org/Mailing_List_etiquette
> MythTV Forums: https://forum.mythtv.org
>

Raymond, are you saying, just for my own clarification, that a firewall
negates the shell shock threat?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.mythtv.org/pipermail/mythtv-users/attachments/20140926/9a9444ce/attachment.html>