Shellshock bug and ERPNext

[MP]

Hi Team,

Do Shellshock bug affects ERPNext or Frappe in anyway?

Kind regards,
MP

[Pratik Vyas]

On Fri, Sep 26, 2014 at 3:24 PM, MP <mayur....@gmail.com> wrote:
> Hi Team,
>
> Do Shellshock bug affects ERPNext or Frappe in anyway?
>

I tried to exploit with nginx setup, it was safe. I think version 2
(CGI) would be vulnerable.

Although, other a web server, it could aso be exploited from other
services that use bash to interpret vars. Eg dhcpclient,
https://www.trustedsec.com/september-2014/shellshock-dhcp-rce-proof-concept/

Do upgrade to latest bash

Thanks,
--
Pratik
erpnext