| That's not shipping or has patches added: --------- rutina:~/git/bashcheck@master$ uname -a Darwin rutina.local 14.0.0 Darwin Kernel Version 14.0.0: Fri
Sep 19 00:26:44 PDT 2014; root:xnu-2782.1.97~2/RELEASE_X86_64 x86_64 rutina:~/git/bashcheck@master$ ./bashcheck Testing /bin/bash ... Bash version 3.2.53(1)-release Variable function parser pre/suffixed [__BASH_FUNC<..>(), apple], bugs not exploitable Not vulnerable to CVE-2014-6271 (original shellshock) Not vulnerable to CVE-2014-7169 (taviso bug) Found non-exploitable CVE-2014-7186 (redir_stack bug) Test for CVE-2014-7187 not reliable without address sanitizer Found non-exploitable CVE-2014-6277 (lcamtuf bug #1) Not vulnerable to CVE-2014-6278 (lcamtuf bug #2) |