BASH exploit - Shellshock

I have confirmed my NV+ (Sparc) is vulnerable when you visit the shares url (but not the admin url). You can test this by modifying the User-Agent string in a browser with some of the code required to exploit vulnerable bash. In this case I used a simple ping command to do it and watched the target machine using tcpdump.

User-Agent: () { :; }; /bin/bash -c "ping -c 5 [ip address]"

I also modified the string to spawn a netcat session back to a listener (reverse shell). Netcat is not installed by default so that did not work. So as an experiment i installed it and found that the default sparc debian package includes the -e option for netcat and made it trivial to open a shell with a fairly simple modification to the User-Agent string.

I tried to update packages and install a newer bash, but I think that the sparc debian packages are not updated yet.

:~# bash -version
GNU bash, version 2.05b.0(1)-release (sparc-unknown-linux-gnu)
Copyright (C) 2002 Free Software Foundation, Inc.

That's all I have done to test this so far.....