Do we need to worry about Shellshock with Cisco servers running the Red Hat based voice OS

[James Hawkins]

Hi,

There seems to be a lot of buzz about the Shellshock vulnerability with the Bash shell.

It seems normal Red Hat Linux is vulnerable so I am wondering whether it could effect CUCM, UCCX, CUP etc.

My gut feel is that is should not as it is not possible to run a Bash shell (unless I guess you hack the server for root access) but wanted to get other peoples views.

http://www.theregister.co.uk/2014/09/24/bash_shell_vuln/

[Jaime Valencia · Accepted solution]

http://www.cisco.com/web/about/security/intelligence/Cisco_ERP_Bash_09252014.html

Stay tuned for more info