cron exploit?

[Jeremy Hanmer <jeremy () hq newdream net>]

We just had a Debian (Woody) box get rooted, apparently by a cron
exploit mentioned here:  http://www.codon.org.uk/~mjg59/kern/jmb73bash

We've contacted the package maintainer, but has anybody else seen
anything like this floating around yet?  It's pretty worrisome since we
have a couple hundred linux boxes that must run cron for various
reasons.

Attachment: signature.asc
Description: This is a digitally signed message part