Media Hub vulnerability to Bash bug (Shellshocked)

For those of us who haven't bother to root their Cisco/Linksys NMHxxx Media Hubs, is there any cause for concern regarding the recently announced Bourne Again Shell (Bash) bug / Shell Shocked vulnerability?
Thanks in advance to anyone from the community who can provide insight.

Typically embedded systems use BusyBox shell which isn't effected.
Please remember to Kudo those that help you.
Linksys
Communities Technical Support

Similar Messages

Is CUCM version: 8.0.3.20000-2 affected buy the bash bug - Shellshock

I read CSCur00930 and also Advisory ID: cisco-sa-20140926-bash.
It has several versions of CUCM listed as affected, and also some that are unaffected.
Can someone tell me whether CUCM version 8.0.3.20000-2 is affected by this bug as I can't find it on the lists in the advisory?
Regards.

Unfortunately according to the CSCur00930 the CUCM 8.0 won't get a fix as this version is still supported without any further correction.
Fix should be made available from 8.5 version:
Release 8.5.1 - first fixed release is TBD
Release 8.6.2 - first fixed release is TBD
Release 9.1.2 - first fixed release is TBD
Release 10.0.1 - first fixed release is TBD
Release 10.5.1 - first fixed release is TBD

Shellschock - bash bug

Has anyone heard of the bash bug, shellshock. Google it. I'd like to hear what anyone thinks about how this might affect the average Mac user, as the mac ecosystem runs off linux and many apps us bash, or bourne shell, etc ... and websites that run off apache. Anyone?

... I'd like to hear what anyone thinks about how this might affect the average Mac user,
It's doesn't affect the average Mac user. If you are running a web server, apply the patch by downloading it from the GNU project archive. If you don't know what that is, how to obtain it, or how to apply it to your server, then you are not affected.
Apple announced they are "working to quickly provide a software update for our advanced UNIX users."
There are plenty of bad things that could happen to a system due to existing vulnerabilities, known or unknown. There is no reason for any more concern today than there has ever been. Bash has been included with OS X for years, perhaps since its inception.
Similar vulnerabilities may also be discovered and exploited, now or in the future. The resulting effects, if there are any, cannot be accurately predicted.
Until then:
Ignore hyperventilating popular media outlets that thrive by promoting fear and discord with entertainment products arrogantly presented as "news". Learn what real threats actually exist and how to arm yourself against them.
Do install updates from Apple as they become available. No one knows more about Macs and how to protect them than the company that builds them.

Is it necessary to purchase a shellshock bash bug patch for Mac OS X users?

Is it necessary to purchase a shellshock bash bug patch for Mac OS X users?

claytonfromwa wrote:
Is it necessary to purchase a shellshock bash bug patch for Mac OS X users?
I'm not aware of any being for sale and if there are it's a scam. bash is free software provided to Apple and many other computer software developers.
If you are still running Snow Leopard and you feel the need to patch bash, you will have to compile it for yourself.
Note that Apple is on record as saying:
The vast majority of OS X users are not at risk to recently reported bash vulnerabilities," an Apple spokesperson told iMore. "Bash, a UNIX command shell and language included in OS X, has a weakness that could allow unauthorized users to remotely gain control of vulnerable systems. With OS X, systems are safe by default and not exposed to remote exploits of bash unless users configure advanced UNIX services.

What do I need to manage shell shock or bash bug on my airport router

What do I need to do to manage shell shock or bash bug on my airport router?

I do have shell access to my apple router..
When I run command to test for bash vulnerability.
tcgen4# env x='() { :;}; echo vulnerable' bash -c "echo this is a test"
env: bash: No such file or directory
If I just type bash.
tcgen4# bash
bash: not found
So they have not complied bash into the airport routers.
Apple routers are not running BASH.. you have nothing to worry about.
(I have only tested N wireless models)
It is probably running the standard busybox shell. The env command shows the shell as SHELL=/bin/sh
I do not have the latest version AC models.. but it is certainly not part of the earlier N wireless model airports. I would not think the change to the AC model will make any difference and it is still based on NetBSD.
Thanks to John for sane comments.
Ignore hyperventilating popular media outlets that thrive by promoting fear and discord with entertainment products arrogantly presented as "news". Learn what real threats actually exist and how to arm yourself against them.
Do install updates from Apple as they become available. No one knows more about Macs and how to protect them than the company that builds them.
My Mac is vulnerable.
When I run the command..
env x='() { :;}; echo vulnerable' bash -c "echo this is a test"
vulnerable
this is a test
The output shows that the Mac is allowing commands via bash.
In order to access my computer from outside, a person would need passwords or something shared and open.. I have nothing.. and simply being behind a NAT router provides plenty of protection.. in due course when Apple releases the updates.. (I am fully up to date now).. I will apply it. Until then I suspect I will be more likely to die of heart attack than be hacked..

Is Apple going to release a security update for Snow Leopard to patch the new 'bash' bug?

What are the chances we will see Apple release a security update to patch this bash bug vulnerability? I really love snow leopard and don't want to update. At the same time, I don't want my computer to be vulnerable! Apple is still selling snow leopard, so are they still maintaining it?

STWriter wrote:
OSx 10.6.8 IS INFECTED TOO -- news says ALL for about 25 YEARS !
I posted a site link -- check the thread.
10.6 does have the bash bug (I confirmed that a few replies back in this thread, and I mentioned the 25 years in another reply to this thread). But that is NOT an infection. Bash did not catch it. The bug was not put there on purpose. And the bug itself does not actively do anything. It is a flaw that can allow a web server using server side scripts written in the bash shell scripting language, or a server side script that invokes bash. Or a user that allows anonymous remote ssh logins. Or has enabled the CUPS web management interface.
All of which was said before in this thread. Along with why it is most likely not a problem for the typical Mac consumer.
This is a serious problem for many web servers. And there are instructions for patching bash (see above).
The typical Mac user does not do the things that put them at risk. And if they know how to set their Mac up to put themselves at risk, they are knowledgable enough to follow the patching instructions.

Mac Mini as a Media Hub

This thread answered a lot of my questions, http://discussions.apple.com/thread.jspa?threadID=2217399, but I would like to be completely sure my idea is viable before spending the time and money on the set up.
I have the following Samsung, http://reviews.cnet.com/flat-panel-tvs/samsung-fp-t6374x/4507-6482_7-32552703.ht ml?tag=psum. I would like to use a Mac Mini(the $800 one) as a media hub, in conjunction with a 1TB Time Capsule. The Mini would not be hard wired to the Time Capsule. I also have a MacBook Pro that would also be connected wirelessly. I'm hoping to be able to download movies from the internet, whether it's from a place like megaupload or a torrent site to my MacBook, then transfer to the Mini in order to watch the movies.
Should the above set up accomplish what I'm hoping? And will I be able to find the proper codecs to use with Snow Leopard in order to format the movies properly? I'm new to the whole operation of downloading movies in order to view. I'm open to any suggestions.

Since what you are talking about is basically piracy of movies, generally you'll be on your own when it comes to what it will take to view them. Part of the value of actually purchasing movies is the reliability of function it includes - piracy has no warranty.
If you would like to download movies in a fairly affordable and legal fashion, you should consider Netflix. They have been very good at working with different media player software makers to allow for safe, functional access to your subscribed content.
Otherwise your setup sounds good. The Samsung has the Just Scan setting you'll probably need to use to make the desktop fit properly. I recommend using a DVI to HDMI cable. If you don't have a surround sound, the 3.5mm stereo plug to RCA connections as advised in your TV's manual is what you'll need for audio input to the TV. For surround sound you should use an optical (Toslink) connection.

How do I set a guest password on my media hub?

Page 43 of the NMH405 media hub manual indicates that you can set a guest password on users. It is supposed to be under settings\system and although I see all the other settings under system, that one isn’t there. Maybe they cut the feature at the last minute. I'm running 3.18.15 of the firmware.
My ultimate goal is to have one account that I can use to write new content to the server and one that is read only for my family. I'm worried right now that they will delete the content (which they have done).
Any advice or workarounds to achieve this would be appreciated.
Thanks,
Peter
Th

Guest access can only be used if you'll be accessing the media hub remotely. Network Media Hub also lacks multiple user access.
You may refer to these articles about your Network Media Hub:
- Article ID: 19717: Accessing the Media Hub Remotely as a Guest
- Article ID: 19714: Creating a Guest Password for Remote Access to the Media Hub
- Article ID: 17571: Media Hub Lacks Multiple Users
If everyone needs to believe in something, I believe I'll have another beer..

What's Happening With This Media Hub?

I have the NMH410 version 3.18.15 purchased over 1 month ago. I'm using this hub as a storage device for my converted VHS video tapes. Some strange things are happening:
Files Listed and Not Listed:
I've used the Media Importer to load my converted VHS files onto the Media Hub and in some instances I see those files on the File Browser. However, I do not see some of those same files when I go to select them from the Video icon on the Homepage. Nor, do I find those files when I use the search tool.
Conversely, I see some video files from the Homepage icon that do not appear on the File Browser list. Yet, I know I uploaded those files at an earlier date.
I've used the "Scan" and "Refresh" buttons to no avail. What could be causing these two file problems?
What do the following messages mean?
Transferring data from "Media Hub name"?
Waiting for "Media Hub name"?
These two messages reside on the lower left side of my task bar. My cursor also appears to cycle through some sort of purge process.
Finally, is there a User Guide that can help me with many of the questions I still have concerning this product? Or, are we left to submitting these questions and hoping someone has a timely answer that is easily and rationally understood
Thanks
dutch184.

Thanks Mared1784 for taking the time to share your experience with me. But there is no way that I can "backup" almost 290GB of files to reformat the Media Hub drives. Plus, there is no guarantee that these same conditions will not happen again.
I have noticed that this condition (files listed on the file browser, but not accessible from the homepage or search engine), began with files loaded after November 12th. It seems to me that if the files are on the Media Hub (file browser) then I should be able to see and access them from anywhere within the Media Hub.
This tells me there is either a development or programming glitch that needs to have a fix made available through another firmware update. No one should have to go through the gymnastics you went through in order to correct the problem.
I appreciate you sharing your experience and suggestions with me.
Thanks
dutch184

I have purchased itunes tv series, movies and music and have transferred them onto an external hard drive and tried to play them on my tv on a media hub. The file will not load. Is there some form of blocking by itunes or another p[roblem and how d

I have purchased itunes tv series, movies and music and have transferred them onto an external hard drive and tried to play them on my tv on a media hub. The file will not load. Is there some form of blocking by itunes or another p[roblem and how do I fix it?

You can't fix it. iTunes bought content is DRM protected. so it can only be played on authorized devices. i.e devices associated with the apple Id used to purchase the content. Its copyright protection that the rights owners demand.
Circumventing it, is illegal in most countries, and as such cannot be discussed here. If you want to play the content you'll need to connect your computer directly to your TV, or use some other device you can authorize for iTunes content such as an iPad, iPhone , iPod touch or Apple Tv.

Updating Media Hub firmware *without* an Internet connection? (+ A few other questions)

Hi everyone! :-)
I recently purchased an NMH305 in the DSG retail stock clearance, which I am planning on using as a "Black hole" for my audio, video and software collections. Before I begin setting it up though, I need to check on a few things and ask a few questions. :-)
First things first, here's a brief overview of my network and some other stuff:
My network has no connection to the Internet whatsoever. I was previously online with a major UK ISP, but because of numerous connection issues and the fact that a direct connection has negative impacts on my lifestyle, I decided to get rid of it and do without.
Consequently, all of my access to the Internet (E.G: Posting here) is done through local libraries and friends connections.
Most of my systems run Windows XP, but I also have a few Ubuntu, Fedora, and OEM firmware based clients knocking around as well. Windows VII and/or a mass switch-over to Linux may occur in the future.
All network clients are wired up with 100mbps fast ethernet (No wi-fi)
My Media Hub currently has it's 500GB WD Green Caviar installed, but my plan is to replace this with two 500GB 7200rpm Hitachi drives stripped out of USB external caddies for quicker access times, greater peace of mind (I don't really trust Western Digital products) and use the more efficient Caviar as an external HDD insted.
Because I like to keep my systems as "light" as possible; I'd like to skip using the bundled set-up CD (Which'll install a lot of stuff that I don't need) and insted set-up the Media Hub manually using a web browser or terminal connection.
I consider myself to be an experienced and advanced user, and therefore I'm comfortable with the idea of configuring and operating my Media Hub via an SSH or Telnet session.
Downloading, backing-up and restoring Firmware by hand:
Anyhow...The first question I'd like to ask is How can I backup and update the firmware on my media hub using only my local network? I know full well that I can download the firmware images using just a web browser, but I cannot seem to find a direct URL anywhere on the Linksys site. The closest lead I've got so far is http://downloads.linksysbycisco.com/downloads/firmware/NMH_FW_3_18_15_B_ReleaseNotes.txt...But no logical variations of this URL that I've tried (Drop the _ReleaseNotes.txt, try .bin .img .tar .tgz and .tar.gz extensions) have resulted in success. :-(
If anyone has the direct URLs for the firmware images, I'd be most greatful. Failing that, if anyone can tell me the URL that the Media Hub uses to perform a version check (A few packets dumped via WireShark during a check will do) I can follow the HTTP chain from there by hand. :-)
Naturally, I'm assuming that there is a means by which to dump and upload firmware to/from the Media Hub (Via an SSH session, most likely) but if not, would serving the firmware update from one of my own systems (Using a record on my local DNS) work, or does the Media Hub use a secure connection for this?
Operating the Media Hub via SSH/Telnet:
As the Media Hub runs a customised version of Linux, I presume that administration via Telnet and SSH are available. I assume that the default login would be root / admin (I'm assuming the web interface also uses the root account for it's administrative logon) but is that correct...Or would I need different credentials to those for a Telnet/SSH login?
Installing new HDDs: Anything need keeping off the old one?
Finally; As I mentioned above, I'm planning to swap the OEM drive supplied with two others before use. I'm currently leafing through the users manual and am about to come across the procedure given for drive replacement, but given the size of the Media Hub's UI - Which looks to me to be pretty heavily featured - I doubt the whole lot would fit on the Hub's firmware flash...So presumably I'd need to back-up interface data and files from the OEM disk to the new disks first.
Dumping data from one disk to another isn't a problem (dd has become one of my favourite utilities over the past year) but - Thinking from the viewpoint of efficiency - Is it possible to restore the UI data and interface alone (No media lists or cache info - That's better regenerated after) without having to dump the first x sectors from one disk to another?
Also; Given the unit comes with a 5400rpm WD Green Caviar, will the Media Hub's PSU handle two standard 3.5" HDDs (Which could draw about 15-20w each) without problems? :-)
Farewell for now, apologies for the length of this post, and many thanks in advance for any help! >:-)
+++ DieselDragon +++

Check out the posts here and another one here .
Better check with the hardware tested list below for the harddrives.
NMH Series Hardware Tested List
Cheers.

Does media hub support mov video format?

Most of my video files are stored as .mov format. I just found out that none of these video files show up the media browser. I carefully checked the datasheet and user manual. On data sheet, it's shown as supported. On user manual, it's not in the list of supported video file format.
Anyone has same experience. How you solved it? Thanks a bunch.

YES, the media hub does support MOV Format. But I would like to clarify your concern when you said that "you can't see the files on the media hub". Do you mean that you can't see the files on the media browser even after copying the file to it? Or you just can't play the MOV files on the media browser even though you can see it? If it's the latter, then it might just be the plugin installed on your internet browser. Just update the plugins on your browser and you should be fine.
Answer ID 17638 Playing Video Files From the NMH
Answer ID 17686 Supported File Types for the Built-In Media Player in the NMH
If installing the necessary plugins is not an option then you can play your files through an External Application on your computer.
Answer ID 17460 Different Play Buttons for Certain Music Files

About bash bug update being available but not showing up in software updates???

Apple has posted a Bash Bug update (as of 9/29/14) for various versions of OS X. It can be downloaded on the downloads page. But why doesn't it show up as an Apple update on the Software Updates page???
When I go there it says "there are no updates available". What's up with that???
thanks.. bob

Have you tried going to the App Store and finding the update there? Or getting the updater from the Apple Downloads site: OS X Mavericks 10.9.1 Update
OT

ITunes / Shadow / Import - Is there ANY way to get iTunes to work on the Media Hub 405?

Since I installed the Linksys Media Hub 405 my iTunes Library has become a mess to manage or enjoy. I'm using the latest software.
1. I have so so so so many duplicates
2. I can't use playlists
3. Some art work shows up others do not.
A. Itunes works great on my Dell Laptop w/ Vista Ultimate and on my iPod
B. The Media Hub is using Import and The Shadow keeps running but gets errors from time to time.
If the ONLY reason I bought the Media Hub is to run iTunes for 4,600 song library what should my settings and software running be to keep it up to date "automaticly" WITHOUT duplicates?
Should Shadow be on or off, and what setting?
Should Import be on or off, and what settings?
Can ANYONE answer this question is a common sense simple manner? Thank you.
Signed,
FRUSTRATED USER

If you worry about duplicate files on your Media Hub then you should use NTI Shadow. When creating a backup job on NTI Shadow make sure your choose "save your folder/file changes to the backup destination every time you save changes to your PC" then for the file versions options choose "Do not save any previous file version".
Check on Step 8 and 9 on this article.
Configure a Backup Job using NTI Shadow

Media Hub not available on windows network

I have a strange problem I've been trying to solve and really need some help. My media hub boots correctly and for a period of about 5-10 minutes, appears as normal over the windows network. I've mapped drives and can access the unit through those as well initially. After that 5-10 minutes, I get an error message when trying to access it through windows file network. The error message is usually about there not being enough system resources and occurs on any computer used to reach it. The media hub CAN BE REACHED by using the web portal or web interface. All the files are there. The web interface shows the hard disks have passed their health check as well. They are set in the Raid1 mode.
I am at a loss. What is happening to this thing to make it loose it's connection at the 5-10 minute mark???

hello there!
If your media hub was working fine before and just started acting up....perhaps this has something to do with the media hub's firmware.. since you can access it through the media browser you can check the configuration page and check if it's updated or not and update it if necessary. By the way, just make sure you are using a wired computer in updating the firmware.
+ leiram +

Media Hub vulnerability to Bash bug (Shellshocked)

Similar Messages

Maybe you are looking for