Advertisement
If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)
Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie
Hi there,
There is an issue with role permissions that is being worked on at the moment.
If you are having trouble with access or permissions on regional forums please post here to get access: https://www.boards.ie/discussion/2058365403/you-do-not-have-permission-for-that#latest

Eircom F1000 modem security vs shellshock bash bug

  • 05-10-2014 7:33pm
    #1
    The Algebraist
    Registered Users, Registered Users 2 Posts: 7 ✭


    I read that broadband routers can be affected by the shellshock bug, but I can't find any info about my Eircom F1000 router.

    Does anyone know if / where / how I can check?

    Thanks


Comments

  • #2
    dalta5billion
    Registered Users, Registered Users 2 Posts: 1,034 ✭✭✭dalta5billion


    If you telnet into it it seems to be running the BusyBox Shell, not bash.

    Good for you for checking though, more people should be concerned about shellshock.


  • #3
    Dermot McDonnell
    Registered Users, Registered Users 2 Posts: 224 ✭✭Dermot McDonnell


    dalta5billion wrote: »
    If you telnet into it it seems to be running the BusyBox Shell, not bash.

    Good for you for checking though, more people should be concerned about shellshock.


    You're quite right, modem/routers have traditionally been tight for space. Almost all use busybox to supply a bash like shell and are NOT vulnerable to shell shock.

    Btw, ZyXel firmware releases come with change logs that details bug fixes. Those bugs are present in the Eircom F1000 n the change logs pretty much spell out attack strategies. In any case, Eircom, or any hacker that 'owns' them, can push a firmware update to your device at will, so "router security" is illusory in any case for the vast majority.


  • #4
    MBSnr
    Registered Users, Registered Users 2 Posts: 2,218 ✭✭✭MBSnr


    ^^^
    You can confirm - Telnet to the device and type cat --help
    > cat --help
    BusyBox v1.17.2 (2013-09-17 18:25:50 CST) multi-call binary.

    Usage: cat [FILE]...

    Concatenate FILEs and print them to stdout


Advertisement