Ok, just tried this again on my Nexus 5 this time with busybox 1.22.1 installed and it is vulnerable. So again, rooted android with bash 4.3 and busybox is vulnerable. Suffice it to say that default ...