Shellshock still an issue

[lclev]

Shellshock attacks mail servers | ZDNet

Just found this. So now it can be implanted in an email header.

What the article does not say is if the patch from apple has been applied to a system will the unpatched smtp server that sends the email still "infect" the patched receiving mac computer. (Does what I am trying to say make sense???)

Opinions?

Lisa

 

[bobtomay]

No...

The average Internet user running Windows, Mac OS, iOS or Android is not vulnerable, at least not by default.

On a Mac:

Strictly speaking, yes, and Apple has released an update to fix the initial vulnerabilities. In practice, you need to have enabled services, i.e. a web server with CGI...

For more...