Page 2 of 2

Re: Patch for bash?

Posted: 26 Sep 2014, 10:03
by Gordon
Having fun boys?

For those of you concerned about the B3 webserver possibly allowing hackers to use this exploit, I did submit a couple of howto's that can help counter this some time ago.

Publish a web page on your B3 but *not* the admin page
This explains how to reconfigure apache so that you can access all functions on your B3, but people on the outside can't. It includes disabling the use of CGI.

Use Nginx for admin pages
Describes how to replace apache web server by nginx

Re: Patch for bash?

Posted: 26 Sep 2014, 10:12
by Ubi
In the mean time MouettE fixed the source of the problem by supplying us with a new bash version:

http://forum.mybubba.org/viewtopic.php?f=9&t=5664

Re: Patch for bash?

Posted: 29 Sep 2014, 03:43
by johannes
Hi guys, I took away some semi-off-topic posts after a report from a user, hope you don't mind. Now breathe and feel the autumn sun shining at you. It's actually a very nice feeling.