Do you run IPS or IDS? I know with snort or suricata using the Emerging Threat ruleset (free one) should detect bash exploit attempts. Most of these snort rules also get posted on git hub as well. An updated IDS/IPS can help minimize to some degree the risk of an out of date machine and at minimum alert you to probing; as I say that I realize it probably doesn't help if you don't have time to update things. However, working in security, I've found it's better to invest the time to be proactive then get p0wned later IMO. -- Jeremy MountainJohnson Jeremy.MountainJohnson at gmail.com On Sun, Nov 2, 2014 at 12:53 AM, Mike Miller <mbmiller+l at gmail.com> wrote: > That's good, but some of my machines are not getting the updates, so I have > to watch better for these things than I have been. On the other hand, I'm > probably vulnerable unless I'm running a CGI-based web server or I have a > malicious user. So I might have dodge this bullet. > > Mike > > > > On Sat, 1 Nov 2014, Ryan Coleman wrote: > >> Yep. FreeBSD and Ubuntu (my two systems) both had patches up within 48 >> hours. >> >> >>> On Nov 1, 2014, at 5:27 PM, tclug at freakzilla.com wrote: >>> >>> Yeah, that was ages ago (in computer terms). Pretty sure all the main >>> distros have already addressed it. >>> >>> On Sat, 1 Nov 2014, Mike Miller wrote: >>> >>>> I'm surprised this didn't come up here. >>>> >>>> http://en.wikipedia.org/wiki/Shellshock_(software_bug) >>>> >>>> I didn't know about it until today. That's my fault because I get SANS >>>> Newsletter and I haven't been reading it! >>>> >>>> Mike >>>> _______________________________________________ >>>> TCLUG Mailing List - Minneapolis/St. Paul, Minnesota >>>> tclug-list at mn-linux.org >>>> http://mailman.mn-linux.org/mailman/listinfo/tclug-list >>>> >>> _______________________________________________ >>> TCLUG Mailing List - Minneapolis/St. Paul, Minnesota >>> tclug-list at mn-linux.org >>> http://mailman.mn-linux.org/mailman/listinfo/tclug-list >> >> >> _______________________________________________ >> TCLUG Mailing List - Minneapolis/St. Paul, Minnesota >> tclug-list at mn-linux.org >> http://mailman.mn-linux.org/mailman/listinfo/tclug-list >> > _______________________________________________ > TCLUG Mailing List - Minneapolis/St. Paul, Minnesota > tclug-list at mn-linux.org > http://mailman.mn-linux.org/mailman/listinfo/tclug-list