Sample Header Ad - 728x90

Is FreeBSD's "sh" shell vulnerable to Shellshock?

1 vote
2 answers
2360 views
I've got a server for personal use running FreeBSD 10, and it doesn't have Bash installed and never did. However, it comes with the its own POSIX-compliant shell "sh". Do I have to worry about the Shellshock bug on my server? I tried running this infamous shell script and **didn't** get the "vulnerable" echo, but I don't know if that ensures that I am safe: env x='() { :;}; echo vulnerable' sh -c 'echo hello'
Asked by sudo (342 rep)
Sep 27, 2014, 05:32 AM
Last activity: Oct 11, 2014, 07:42 PM