Meteobridge is not "shellshocked"

All about the standard Meteobridge devices based on mobile routers from TP-Link, D-Link, ASUS

Moderator: Mattk

Post Reply
User avatar
admin
Platinum Boarder
Platinum Boarder
Posts: 7874
Joined: Mon Oct 01, 2007 10:51 pm

Meteobridge is not "shellshocked"

Post by admin »

As some requests are coming in, Meteobridges are not affected by the latest bash exploit aka "shellshock".

Reason is, that Meteobridges are based on OpenWRT, which uses a simplified shell called "ash" included
in the "busybox" package. You can also test the exploit check on the shell of Meteobridge, when you login
via ssh (user "root", password "meteobridge") and try the exploit test...

Code: Select all

root@MeteoBridge:~# env X='() { :;} ; echo busted' /bin/bash -c "echo completed"
env: can't execute '/bin/bash': No such file or directory
root@MeteoBridge:~# env X='() { :;} ; echo busted' /bin/ash -c "echo completed"
completed
root@MeteoBridge:~# 
Post Reply