9

I am worried about the millions (actually, worried about mine) of routers/modems that run Linux. How exposed are they to Shellshock?

Improve this question

3 Answers 3

Reset to default
11

Most Linux-based routers are running an OpenWRT/DD-WRT derivative. These routers use BusyBox as their shell (Bash is much too heavyweight for the hardware), and consequently are not vulnerable.

Improve this answer
8
  • 1
    Here is a post from pfsense too. "The base system of pfSense does not include bash."
    – Christos
    Commented Sep 26, 2014 at 7:21
  • 2
    Is there a way to test if my own router is vulnerable?
    – CharlesB
    Commented Sep 26, 2014 at 8:18
  • "Most Linux-based routers are running an OpenWRT/DD-WRT derivative." - lolwut? And busybox is not a shell.
    – Smit Johnth
    Commented Sep 28, 2014 at 1:53
  • 3
    @SmitJohnth, busybox is a multi-call binary that encapsulates most of what you need to run a command-line Linux into a single executable. Run it under the name sh or ash, and you get a shell derived from ash.
    – Mark
    Commented Sep 28, 2014 at 2:24
  • 1
    @SmitJohnth, Sort of maybe if you squint at it right.
    – Mark
    Commented Sep 28, 2014 at 4:47
4

Ubiquiti Routers running EdgeOS have much beefier hardware, and run a derivative of Vayatta on Linux that includes bash. Those are likely vulnerable.

http://community.ubnt.com/t5/EdgeMAX/Re-Bash-shell-vuln-Is-ER-also-vulnerable/m-p/1024785

Improve this answer
1

Endian Community Firewall is also currently vulnerable, even though they have already released a patch for their paying customers. Planning on switching to Sophos UTM soon.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .