9

I am worried about the millions (actually, worried about mine) of routers/modems that run Linux. How exposed are they to Shellshock?

10

Most Linux-based routers are running an OpenWRT/DD-WRT derivative. These routers use BusyBox as their shell (Bash is much too heavyweight for the hardware), and consequently are not vulnerable.

  • 1
    Here is a post from pfsense too. "The base system of pfSense does not include bash." – Christos Sep 26 '14 at 7:21
  • 2
    Is there a way to test if my own router is vulnerable? – CharlesB Sep 26 '14 at 8:18
  • "Most Linux-based routers are running an OpenWRT/DD-WRT derivative." - lolwut? And busybox is not a shell. – Smit Johnth Sep 28 '14 at 1:53
  • 3
    @SmitJohnth, busybox is a multi-call binary that encapsulates most of what you need to run a command-line Linux into a single executable. Run it under the name sh or ash, and you get a shell derived from ash. – Mark Sep 28 '14 at 2:24
  • 1
    @SmitJohnth, Sort of maybe if you squint at it right. – Mark Sep 28 '14 at 4:47
4

Ubiquiti Routers running EdgeOS have much beefier hardware, and run a derivative of Vayatta on Linux that includes bash. Those are likely vulnerable.

http://community.ubnt.com/t5/EdgeMAX/Re-Bash-shell-vuln-Is-ER-also-vulnerable/m-p/1024785

1

Endian Community Firewall is also currently vulnerable, even though they have already released a patch for their paying customers. Planning on switching to Sophos UTM soon.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.