Hacker News Reader

It's a good idea, but I would expext most applications vulnerable to not run as root. You would need to be root to patch the bash executable.

Good point. So I guess one would have to combine that with another vulnerability to be able to get root privileges.

We could also imagine a worm contacting the owner of the server and asking her to fix it.