Do you run IPS or IDS? I know with snort or suricata using the
Emerging Threat ruleset (free one) should detect bash exploit
attempts. Most of these snort rules also get posted on git hub as
well. An updated IDS/IPS can help minimize to some degree the risk of
an out of date machine and at minimum alert you to probing; as I say
that I realize it probably doesn't help if you don't have time to
update things. However, working in security, I've found it's better to
invest the time to be proactive then get p0wned later IMO.


--
Jeremy MountainJohnson
Jeremy.MountainJohnson at gmail.com


On Sun, Nov 2, 2014 at 12:53 AM, Mike Miller <mbmiller+l at gmail.com> wrote:
> That's good, but some of my machines are not getting the updates, so I have
> to watch better for these things than I have been.  On the other hand, I'm
> probably vulnerable unless I'm running a CGI-based web server or I have a
> malicious user.  So I might have dodge this bullet.
>
> Mike
>
>
>
> On Sat, 1 Nov 2014, Ryan Coleman wrote:
>
>> Yep. FreeBSD and Ubuntu (my two systems) both had patches up within 48
>> hours.
>>
>>
>>> On Nov 1, 2014, at 5:27 PM, tclug at freakzilla.com wrote:
>>>
>>> Yeah, that was ages ago (in computer terms). Pretty sure all the main
>>> distros have already addressed it.
>>>
>>> On Sat, 1 Nov 2014, Mike Miller wrote:
>>>
>>>> I'm surprised this didn't come up here.
>>>>
>>>> http://en.wikipedia.org/wiki/Shellshock_(software_bug)
>>>>
>>>> I didn't know about it until today.  That's my fault because I get SANS
>>>> Newsletter and I haven't been reading it!
>>>>
>>>> Mike
>>>> _______________________________________________
>>>> TCLUG Mailing List - Minneapolis/St. Paul, Minnesota
>>>> tclug-list at mn-linux.org
>>>> http://mailman.mn-linux.org/mailman/listinfo/tclug-list
>>>>
>>> _______________________________________________
>>> TCLUG Mailing List - Minneapolis/St. Paul, Minnesota
>>> tclug-list at mn-linux.org
>>> http://mailman.mn-linux.org/mailman/listinfo/tclug-list
>>
>>
>> _______________________________________________
>> TCLUG Mailing List - Minneapolis/St. Paul, Minnesota
>> tclug-list at mn-linux.org
>> http://mailman.mn-linux.org/mailman/listinfo/tclug-list
>>
> _______________________________________________
> TCLUG Mailing List - Minneapolis/St. Paul, Minnesota
> tclug-list at mn-linux.org
> http://mailman.mn-linux.org/mailman/listinfo/tclug-list