[mythtv-users] Shellshock discussion

[Stephen Worthington]

On Fri, 26 Sep 2014 17:47:16 +0000, you wrote:

>On Fri, Sep 26, 2014 at 5:25 PM, Stephen Worthington
><stephen_agent at jsw.gen.nz> wrote:
>...
>> My Ubiquiti EdgeRouter Lite seems to be running bash - it fails the
>> exploit tests I have tried.  However, since I am not exposing anything
>> on the router to the Internet (I have firewall rules blocking all
>> external access to the router itself), I should be OK until they issue
>> a fix.
>
>Not exposing anything?  Blocking all access?
>
>Do you run dhclient (get your IP address from your
>MSOs dhcp server)?  Not that your MSO likely has a
>compromised DHCP server.....  offering "bad" data
>on (say) option 114 to be passed as an environmental
>variable to your dhclient hook scripts that run bash.....
>
>Yeah, it can get nasty out there once you actually
>understand some of the details.

Yes, I do understand the DHCP vulnerability.  Fortunately, I do not
need to use DHCP as I have a static IP address.