Are our WiFI routers and rooftop radios affected by the Bash Shellshock vulnerability?

Then there are the TV sets (both of mine run Linux, but have no means of connecting to the Internet), and both my blu-ray players run Linux (and they do have ethernet ports).

Michael

How many embedded appliances are running Ubuntu, again?

Depends on what one will accept as an "embedded" system; the SheevaPlug definitely qualifies as embedded.

My Sheevaplug servers are fist-sized and the GuruPlug runs Debian. Quick example (noting the short uptime is due to having had to replace a UPS battery recently) noting that root is the only login on such servers:

root@lanserv1:~# date Fri Oct 3 13:14:40 PDT 2014 root@lanserv1:~# uptime 13:14:42 up 55 days, 22:37, 1 user, load average: 0.19, 0.15, 0.12 root@lanserv1:~# cat /etc/issue Ubuntu 9.04 \n \l

root@lanserv1:~# ping thadlabs.com # 12 miles away in Milpitas CA PING thadlabs.com (192.220.75.50) 56(84) bytes of data.

64 bytes from thadlabs.com (192.220.75.50): icmp_seq=1 ttl=53 time=15.7 ms 64 bytes from thadlabs.com (192.220.75.50): icmp_seq=2 ttl=53 time=14.3 ms 64 bytes from thadlabs.com (192.220.75.50): icmp_seq=3 ttl=53 time=15.6 ms 64 bytes from thadlabs.com (192.220.75.50): icmp_seq=4 ttl=53 time=16.3 ms

--- thadlabs.com ping statistics ---

4 packets transmitted, 4 received, 0% packet loss, time 3000ms rtt min/avg/max/mdev = 14.331/15.527/16.375/0.749 ms root@lanserv1:~# bash --version GNU bash, version 3.2.48(1)-release (arm-unknown-linux-gnueabi) Copyright (C) 2007 Free Software Foundation, Inc. root@lanserv1:~# uname -a Linux lanserv1 2.6.22.18 #1 Thu Mar 19 14:46:22 IST 2009 armv5tejl GNU/Linux root@lanserv1:~#

Note the sizes of the SheevaPlugs and GuruPlug which have been running here since 2009:

These consume only 4 to 5 Watts power per a Kill-A-Watt device and they have GiGE ports to serve my LAN (DHCP, DNS, and more) which is all gigabit:

Thad

No it doesn't. It qualifies as a headless server. An embedded system is embedded in another machine such as a car or a radio.

OK, I'll accept that, and this confirms it:

Thanks! Learn something new every day. :-)

Thad