Buffalo NAS-Central Forums

F**K ! ! !

After H-E-A-R-T-B-L-E-E-D now we are all S-H-E-L-L-S-H-O-C-K-E-D

If you are not running a rooted nas with the most recent debian (probably 7 or 8) and all your packages up-to-date you are f**ked like me

Expect that everybody can access your files - not only the NSA! Shît happens & live sucks!

List of vulnerable and not vulnerable

• Debian 7 or 8 with most recent updates, bash is ??? - not vulnerable
• FW LS-CHL shonk 1.65 (with modifications by noone?), bash is ??? - not vulnerable
• SteveWonder FW (HS-DHGL_FW_236-shmod16) bash is 2.05b.0(1) - vulnerable
• to be continued... - vulnerable

...we can make a list here - but i guess ALL are vulnerable, expect the good old debian...

Hi,

I have only updated openssl and bash with my own builds from git repos.
I a on ls-chl sbonk 1.65

Regards

Nice one, congreds! Which bash version is it than the one of yours?

Your version might be not compatible with the LS-GL (Pro/Live) v1?

And I guess the version you use is: "FW LS-CHL shonk 1.65" right? With or without modifications? Maybe you want to give a Link here...

thx for your reply... hopefully there are some more people interested in there security... but I guess over 90% of the nas-devices are keep being vulnerable...

greetings

"FW LS-CHL shonk 1.65" is correct

bash 4.3 from git
openssl 1.1.0-dev

what kind of links do you need?
download and install the fw from shonk.
add ipkg manager and install git to get up-to-date sources
or download the sources from official web site.

Regards