Thread: Sailfish OS bash shell is affected by the #shellshock bug
View Single Post
javispedro's Avatar
javispedro is offline javispedro
2014-09-25 , 08:39
Posts: 2,355 | Thanked: 5,249 times | Joined on Jan 2009 @ Barcelona
#6
Originally Posted by LouisDK View Post
Do they still use Bash3 and why? Are they scared of GPLv3 software like Apple are?
Yes, they use an ancient non-GPLv3 version of Bash. I don't understand why and tbh it's my primary complaint against Jolla.

Originally Posted by coderus View Post
@javispedro there are should be some internals accepting environment variables.
So..? At this moment the only way I can think of to exploit this right now would be a suid binary that goes its way around bash "don't-run-me-suid" protection (e.g. set{e}uid then system). Which would be pretty nasty in itself since there's another 300 ways to attack those. So if you know one of those please report it.

Virtually the only situations where this bug can cause trouble is everywhere where a backlist/whitelist of environment variables is used to filter out such variables by name only. Because with this bug there are no "safe" env variable names.
Last edited by javispedro; 2014-09-25 at 08:41.