We know it's a not supported OS, but as with RHEL4, there could be workarounds, how could someone get the bash package for SLES 9, that is fixed regarding the bash shell shock vulnerability?
The right way in these cases is either to contact your support representative or you can search vendor's web site. If you choose to do the latter, you'll find: https://download.novell.com/patch/finder/ and finally https://download.novell.com/Download?buildid=nNXClbWqawg~ (it's such a legacy product, that it seems you have to go to the Novell site instead of SUSE). Question is whether it is available for everybody who has an account to log into the site.
http://suse.com/support/shellshock SUSE seems to provide a prepackaged build for 9 and older releases, even without an LTS contract.