Shellshock
- This topic has 2 replies, 3 voices, and was last updated 10 years, 5 months ago by
.
Viewing 3 posts - 1 through 3 (of 3 total)
-
Hi Rob,
The vulnerability affects versions 1.14 through 4.3 of GNU Bash. The iSMS has a vulnerable version of bash. However, even though the product contains a vulnerable version of bash, it doesn’t necessarily mean the vulnerability is easily exploitable. The iSMS does not use Apache for the web server which was one avenue to exploit. However, since it does have terminal access via telnet there’s always a possibility of vulnerability whether through a bug or through poor password security.
We’re still working on what else we need to do regarding this security vulnerability.
Viewing 3 posts - 1 through 3 (of 3 total)
- You must be logged in to reply to this topic.