Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




43 posts

Geek


#153472 27-Sep-2014 22:24
Send private message

I have a ONT and a router provided by telecom for my fibre connection, are they vulnerable to the Shellshock bug?

I couldn't find any information on Spark's website.

Create new topic
2092 posts

Uber Geek


  #1142883 28-Sep-2014 09:28
Send private message

Are either actually accessible to the internet?

You need a process that is internet accessible (apache etc) for it to actually be an issue externally.



43 posts

Geek


  #1142884 28-Sep-2014 09:32
Send private message

wasabi2k: Are either actually accessible to the internet?

You need a process that is internet accessible (apache etc) for it to actually be an issue externally.


i don't run web servers or anything but I do run things like BitTorrent and have configured port forwarding on the router, does that matter?

 
 
 
 


BDFL - Memuneh
67774 posts

Uber Geek

Administrator
Trusted
Geekzone
Lifetime subscriber

  #1142885 28-Sep-2014 09:42
Send private message

He's asking if those processes run on the modem/router itself.





 

 

These links are referral codes

 

Geekzone broadband switch | Eletricity comparison and switch | Hatch investment (NZ$ 10 bonus if NZ$100 deposited within 30 days) | Sharesies | Mighty Ape | Backblaze | Amazon | My technology disclosure 




43 posts

Geek


  #1142887 28-Sep-2014 09:46
Send private message

freitasm: He's asking if those processes run on the modem/router itself.


thanks.

No, the BT client runs on a Windows machine, the router only does port forwarding.

4025 posts

Uber Geek

Trusted

  #1142926 28-Sep-2014 12:35
Send private message

My Guess: Probably not. Most embedded devices in the modem/router category don't tend to run full bash, they tend to run busybox due to its small footprint.
Of course there are exceptions to this, which is why this bug is a problem even for embedded devices.

If you can get a telnet or ssh session open, use bash --version or echo $BASH_VERSION to see if you have it

3455 posts

Uber Geek

Trusted

  #1143005 28-Sep-2014 16:11
Send private message

I'd be more worried about the dynalink routers that a certain ~4th largest ISP in the country was sending out to customers for about 5 years with admin/admin credentials and the port 80 web admin accessible on the WAN interface, with the DSL username and password in plaintext on the ppp settings page sourcecode.




Ray Taylor
Taylor Broadband (rural hawkes bay)
www.ruralkiwi.com

There is no place like localhost
For my general guide to extending your wireless network Click Here




'That VDSL Cat'
12450 posts

Uber Geek

Trusted
Spark
Subscriber

  #1143006 28-Sep-2014 16:13
Send private message

raytaylor: I'd be more worried about the dynalink routers that a certain ~4th largest ISP in the country was sending out to customers for about 5 years with admin/admin credentials and the port 80 web admin accessible on the WAN interface, with the DSL username and password in plaintext on the ppp settings page sourcecode.


dlinks were bad for this too :/




#include <std_disclaimer>

 

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.

 


 
 
 
 




43 posts

Geek


  #1143174 28-Sep-2014 22:07
Send private message

eXDee: My Guess: Probably not. Most embedded devices in the modem/router category don't tend to run full bash, they tend to run busybox due to its small footprint.
Of course there are exceptions to this, which is why this bug is a problem even for embedded devices.

If you can get a telnet or ssh session open, use bash --version or echo $BASH_VERSION to see if you have it

thanks for he information.

I didn't have luck getting telnet or ssh to work, I can get a telnet session but the user/password from the web interface doesn't work for telnet, ssh doesn't even connect.

Create new topic




News »

Freeview On Demand app launches on Sony Android TVs
Posted 6-Aug-2020 13:35


UFB hits more than one million connections
Posted 6-Aug-2020 09:42


D-Link A/NZ extends COVR Wi-Fi EasyMesh System series with new three-pack
Posted 4-Aug-2020 15:01


New Zealand software Rfider tracks coffee from Colombia all the way to New Zealand businesses
Posted 3-Aug-2020 10:35


Logitech G launches Pro X Wireless gaming headset
Posted 3-Aug-2020 10:21


Sony Alpha 7S III provides supreme imaging performance
Posted 3-Aug-2020 10:11


Sony introduces first CFexpress Type A memory card
Posted 3-Aug-2020 10:05


Marsello acquires Goody consolidating online and in-store marketing position
Posted 30-Jul-2020 16:26


Fonterra first major customer for Microsoft's New Zealand datacentre
Posted 30-Jul-2020 08:07


Everything we learnt at the IBM Cloud Forum 2020
Posted 29-Jul-2020 14:45


Dropbox launches native HelloSign workflow and data residency in Australia
Posted 29-Jul-2020 12:48


Spark launches 5G in Palmerston North
Posted 29-Jul-2020 09:50


Lenovo brings speed and smarter features to new 5G mobile gaming phone
Posted 28-Jul-2020 22:00


Withings raises $60 million to enable bridge between patients and healthcare
Posted 28-Jul-2020 21:51


QNAP integrates Catalyst Cloud Object Storage into Hybrid Backup solution
Posted 28-Jul-2020 21:40



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.