=================================================================
               Bash | GNU Bourne-Again Shell
                  Version 4.2 patchlevel 37

=================================================================

Overview
=================================================================
 This file describes how to solve and test if Shellshock was 
 fixed on Moxa's computer.
  
  1. Upgrade
  2. Test
  3. Reference

===============================================================

  1. Upgrade
===============================================================
 
 To solve the Shellshock (CVE-2014-6271) issue on your Debian 7 
 embedded computer, first make sure your embedded computer can 
 access the Internet, and then run the following commands:
   # apt-get update
   # apt-get install bash
    
===============================================================

  2. Test
===============================================================

 *To verify that the issue has been solved, run the following 
 command to check if the bash version has been updated to the 
 latest version:
   # dpkg -l |grep bash

 The issue has been solved if you see the following result:
 ii bash 4.2+dfsg-0.1+deb7u3 amd64 GNU Bourne Again SHell

 *To test if the "Shellshock" was fixed, just run the following
 command:
   # env x='() { :;}; echo vulnerable' bash -c "echo this is a test"

 The result should be as following without "vulnerable":
   this is a test

===============================================================

  3. Reference
===============================================================

 Check the following web page on the official Debian website 
 for information related to the Shellshock (CVE-2014-6271) patch:
   https://security-tracker.debian.org/tracker/CVE-2014-6271

===============================================================
                                END OF FILE
===============================================================
