Hacker News Reader

Why does this mean I'm vulnerable? To what attack, exactly? My bash is already patched to not execute code in environment variables, so how is an attacker going to get the above exploit to be running in my shell?

Edit: Using the other test further up thread (which does actually make use of environment variables), my system says "not vulnerable". I think this test is not perfect.

How to patch your system: https://shellshocker.net/

This is the same site that gives the above, incorrect, test. I would trust it about as far as I could throw it, and I assume it's bolted to the rack.

On up-to-date servers (according to aptitude) I get a segfault followed by the "vulnerable" message from that.

Id the seg fault a red herring, or does it suggest I hve a verison of bash that attempts to filter out the problem?

try the other test posted above, this one is... strange