NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
skilke
Sep 25, 2014Aspirant
BASH exploit - Shellshock
Hi I have a ReadyNas Ultra 2 and it has version 3.1.17 of BASH installed which has a High risk vulnerability. Can somebody please explain how to patch BASH so that my system is not at risk from...
GibsonLP
Sep 25, 2014Aspirant
Is there any debian repo that is good for the sparc versions? which one is okay for the pro?
Thanks.
As for the sparc fix:
I actually downloaded the compiler available here:
http://kb.netgear.com/app/answers/detai ... s-compiler
I managed to build a patched bash 4.3, Feel free to contact me if you wish to get the compiled binary.
If you want to build it for yourself:
Make sure to untar the tarball to / and have everything in your path.
# Make sure to have yacc (comes with the bison package) as well as build-essentials, This should work on any deb based machine:
sudo apt-get install bison build-essentials
# get bash 4.3 sourcecode
mkdir bashsrc && cd bashsrc
wget http://ftp.gnu.org/gnu/bash/bash-4.3.tar.gz
tar xvf bash-4.3.tar.gz
cd bash-4.3
# download and apply all patches, including shellshock patch
for i in {001..025}; do
wget -nv http://ftp.gnu.org/gnu/bash/bash-4.3-patches/bash43-${i}
patch -p0 < bash43-${i}
done
# compile
./configure --host sparc-linux && make
# Strip
sparc-linux-strip bash
Copy the new bash to it's place.
Does anyone have an NV+ or any other sparc based NAS he is will to test bash 3.2 on? I am a bit afraid to check it on the I have here as if for some reason it would break anything and won't boot I am screwed.
Thanks.
As for the sparc fix:
I actually downloaded the compiler available here:
http://kb.netgear.com/app/answers/detai ... s-compiler
I managed to build a patched bash 4.3, Feel free to contact me if you wish to get the compiled binary.
If you want to build it for yourself:
Make sure to untar the tarball to / and have everything in your path.
# Make sure to have yacc (comes with the bison package) as well as build-essentials, This should work on any deb based machine:
sudo apt-get install bison build-essentials
# get bash 4.3 sourcecode
mkdir bashsrc && cd bashsrc
wget http://ftp.gnu.org/gnu/bash/bash-4.3.tar.gz
tar xvf bash-4.3.tar.gz
cd bash-4.3
# download and apply all patches, including shellshock patch
for i in {001..025}; do
wget -nv http://ftp.gnu.org/gnu/bash/bash-4.3-patches/bash43-${i}
patch -p0 < bash43-${i}
done
# compile
./configure --host sparc-linux && make
# Strip
sparc-linux-strip bash
Copy the new bash to it's place.
Does anyone have an NV+ or any other sparc based NAS he is will to test bash 3.2 on? I am a bit afraid to check it on the I have here as if for some reason it would break anything and won't boot I am screwed.
Related Content
NETGEAR Academy

Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!