Login or Register to Ask a Question and Join Our Community

Sponsored Content
Full Discussion: Solaris bash vulnerability update
Operating Systems Solaris Solaris bash vulnerability update Post 302919161 by gull04 on Sunday 28th of September 2014 07:13:37 PM
Old 09-28-2014
Hi,

No, the attack does not require the attacker to have an account. They can make use of the account that is running the service that they attack through.

As an example, if you have a web server running - it would normally be run by a user. This could be "apache", "webserver" or if you are very unlucky "root".

The "shellshock" vulnerability will allow an attacker to leverage the owner of a service privileges to potentially gain access to some or all of a server or it's data.

I have seen a large number of assaults on my estate, below are the typical things that you are seeing. So far I haven't had any serious problems, I had started patching before the first attack so was lucky.

Code:
XXX.XXX.93.149 - - [25/Sep/2014:05:08:03 +0100] "GET /w00tw00t.at.blackhats.aaaaaa.aaaa-sec:) HTTP/1.1" 404 319 "-" "ZmEu"
XXX.XXX.93.149 - - [25/Sep/2014:05:08:03 +0100] "GET /something_here/scripts/setup.php HTTP/1.1" 404 306 "-" "ZmEu"
XXX.XX.69.74 - - [25/Sep/2014:18:53:51 +0100] "GET / HTTP/1.1" 200 2455 "() { :; }; /bin/ping -c 1 XXX.XXX.0.69" "() { :; }; /bin/ping -c 1 XXX.XXX.0.69"

As you'll probably be able to see from the above, the attempts to gain access are coming from different IP Addresses I now have lists of several hundred. The most common seem to be trying to gain access to things like Mysql databases, firewall block lists and attempts to clear them along with access to a host of standard setup utilities.

The /bin/ping could just as easily be a "wget" or "ftp" placing malicious code or a million other things designed to make a systems admin unhappy.

Regards

Dave
Last edited by gull04; 09-28-2014 at 08:16 PM.. Reason: More info.
These 2 Users Gave Thanks to gull04 For This Post:
hicksd8 orange47
 

10 More Discussions You Might Find Interesting

1. Shell Programming and Scripting

Constant update echo in BASH

Hi all, Basically Im trying to put the current time in a script in BASH. Tried the watch command, but its not really what I want. I will have lots of things in this script, current date and time being just a few). Any ideas? (4 Replies)
Discussion started by: mikejreading
4 Replies

2. Solaris

Undo the Veritas mirroring and update from Solaris 8 to Solaris 10

Hi all I wish to undo the mirroring for root and update the Solaris version from 8 to 10. Since i am lack of knowledge and experience on this, hope you all can help me double check the step and correct me. Existing disk groups details root@leo # vxdg list NAME STATE ID... (3 Replies)
Discussion started by: SmartAntz
3 Replies

3. Solaris

Install update 6 on solaris with update 3

I want to update my solaris 10 server which is currently on update 3 stage. A new application require it to be on update 6. What is the best way to make it update 6. should i just install the patch or should i go for the liveupgrade?? thanks for you help in advance (3 Replies)
Discussion started by: uxravi
3 Replies

4. Shell Programming and Scripting

Update ksh .profile to launch bash

Hi I don't have chsh option. I want to launch bash instead of ksh ( or launch bash from ksh .profile) how can I do this ? (1 Reply)
Discussion started by: Sivaswami
1 Replies

5. Shell Programming and Scripting

Update a mysql column via bash script

Hello, I want to check the value of all MySQL columns.(column name is "status") via bash script. If value is "0" at I want to make only single column value to "1" I have many "0" values on mysql database(on "status" column) "0" means it is a draft post. I want to publish a post. I... (2 Replies)
Discussion started by: tara123
2 Replies

6. News, Links, Events and Announcements

Bash vulnerability

Not sure if there is a post about it here somewhere already. Anyway: Remote exploit vulnerability in bash CVE-2014-6271 | CSO Online (3 Replies)
Discussion started by: zaxxon
3 Replies

7. Red Hat

RedHat 5 update 9 BASH update issue

Hi i want to update the BASH because of the "shell shock" vulnerability. my RedHat 5 is clean install with the default mirror site. when im running the command: yum update bash im getting a message saying there is no update. you can see in the attach picture... what am i doing wrong? is... (4 Replies)
Discussion started by: guy3145
4 Replies

8. Shell Programming and Scripting

Bash to update files to be used by awk

In the below bash there are 6 .txt files in /home/cmccabe/Desktop/comparison/ref_val/ that are being updated from the 6 .vcf files in /home/cmccabe/Desktop/comparison/validation/files/*.vcf. The awk in the post updates the files with the information, however the files are not being updated so the... (0 Replies)
Discussion started by: cmccabe
0 Replies

9. Shell Programming and Scripting

Bash FPATH code update

In this post at 302451613-post2.html the link to the code comes up not found. The thread is closed, so I was unable to ask on the thread itself and I do not have enough posts yet to send a private message (or write out a proper html link). Does the author (jim mcanamara) have an updated link? ... (2 Replies)
Discussion started by: matthewpersico
2 Replies

10. Solaris

How to update Solaris 10 Update 3 to Update 11?

Hi friends, We have a Solaris machine running 10 update 3 -bash-3.2# cat /etc/release Solaris 10 11/06 s10s_u3wos_10 SPARC Copyright 2006 Sun Microsystems, Inc. All Rights Reserved. Use is subject to license terms. ... (6 Replies)
Discussion started by: prvnrk
6 Replies

LEARN ABOUT CENTOS

datetime::locale::gez_et

DateTime::Locale::gez_ET(3)				User Contributed Perl Documentation			       DateTime::Locale::gez_ET(3)

NAME

       DateTime::Locale::gez_ET

SYNOPSIS

	 use DateTime;

	 my $dt = DateTime->now( locale => 'gez_ET' );
	 print $dt->month_name();

DESCRIPTION

       This is the DateTime locale package for Geez Ethiopia.

DATA

       This locale inherits from the DateTime::Locale::gez locale.

       It contains the following data.

   Days
       Wide (format)

	 XXX
	 XXX
	 XXX
	 XXX
	 XXX
	 XXXX
	 XXX

       Abbreviated (format)

	 XXX
	 XXX
	 XXX
	 XXX
	 XXX
	 XXX
	 XXX

       Narrow (format)

	 X
	 X
	 X
	 X
	 X
	 X
	 X

       Wide (stand-alone)

	 XXX
	 XXX
	 XXX
	 XXX
	 XXX
	 XXXX
	 XXX

       Abbreviated (stand-alone)

	 XXX
	 XXX
	 XXX
	 XXX
	 XXX
	 XXX
	 XXX

       Narrow (stand-alone)

	 X
	 X
	 X
	 X
	 X
	 X
	 X

   Months
       Wide (format)

	 XXX
	 XXX
	 XXX
	 XXX
	 XXXX
	 XXX
	 XXX
	 XXX
	 XXX
	 XXX
	 XXX
	 XXX

       Abbreviated (format)

	 XXX
	 XXX
	 XXX
	 XXX
	 XXX
	 XXX
	 XXX
	 XXX
	 XXX
	 XXX
	 XXX
	 XXX

       Narrow (format)

	 X
	 X
	 X
	 X
	 X
	 X
	 X
	 X
	 X
	 X
	 X
	 X

       Wide (stand-alone)

	 XXX
	 XXX
	 XXX
	 XXX
	 XXXX
	 XXX
	 XXX
	 XXX
	 XXX
	 XXX
	 XXX
	 XXX

       Abbreviated (stand-alone)

	 XXX
	 XXX
	 XXX
	 XXX
	 XXX
	 XXX
	 XXX
	 XXX
	 XXX
	 XXX
	 XXX
	 XXX

       Narrow (stand-alone)

	 X
	 X
	 X
	 X
	 X
	 X
	 X
	 X
	 X
	 X
	 X
	 X

   Quarters
       Wide (format)

	 Q1
	 Q2
	 Q3
	 Q4

       Abbreviated (format)

	 Q1
	 Q2
	 Q3
	 Q4

       Narrow (format)

	 1
	 2
	 3
	 4

       Wide (stand-alone)

	 Q1
	 Q2
	 Q3
	 Q4

       Abbreviated (stand-alone)

	 Q1
	 Q2
	 Q3
	 Q4

       Narrow (stand-alone)

	 1
	 2
	 3
	 4

   Eras
       Wide

	 BCE
	 CE

       Abbreviated

	 X/X
	 X/X

       Narrow

	 X/X
	 X/X

   Date Formats
       Full

	  2008-02-05T18:30:30 = XXXX 05 XXX XXXX 2008 X/X
	  1995-12-22T09:05:02 = XXXX 22 XXX XXXX 1995 X/X
	 -0010-09-15T04:44:23 = XXXXX 15 XXX XXXX -10 X/X

       Long

	  2008-02-05T18:30:30 = 05 XXX 2008
	  1995-12-22T09:05:02 = 22 XXX 1995
	 -0010-09-15T04:44:23 = 15 XXX -10

       Medium

	  2008-02-05T18:30:30 = 05-XXX-2008
	  1995-12-22T09:05:02 = 22-XXX-1995
	 -0010-09-15T04:44:23 = 15-XXX--10

       Short

	  2008-02-05T18:30:30 = 05/02/08
	  1995-12-22T09:05:02 = 22/12/95
	 -0010-09-15T04:44:23 = 15/09/-10

       Default

	  2008-02-05T18:30:30 = 05-XXX-2008
	  1995-12-22T09:05:02 = 22-XXX-1995
	 -0010-09-15T04:44:23 = 15-XXX--10

   Time Formats
       Full

	  2008-02-05T18:30:30 = 6:30:30 XXX UTC
	  1995-12-22T09:05:02 = 9:05:02 XXX UTC
	 -0010-09-15T04:44:23 = 4:44:23 XXX UTC

       Long

	  2008-02-05T18:30:30 = 6:30:30 XXX UTC
	  1995-12-22T09:05:02 = 9:05:02 XXX UTC
	 -0010-09-15T04:44:23 = 4:44:23 XXX UTC

       Medium

	  2008-02-05T18:30:30 = 6:30:30 XXX
	  1995-12-22T09:05:02 = 9:05:02 XXX
	 -0010-09-15T04:44:23 = 4:44:23 XXX

       Short

	  2008-02-05T18:30:30 = 6:30 XXX
	  1995-12-22T09:05:02 = 9:05 XXX
	 -0010-09-15T04:44:23 = 4:44 XXX

       Default

	  2008-02-05T18:30:30 = 6:30:30 XXX
	  1995-12-22T09:05:02 = 9:05:02 XXX
	 -0010-09-15T04:44:23 = 4:44:23 XXX

   Datetime Formats
       Full

	  2008-02-05T18:30:30 = XXXX 05 XXX XXXX 2008 X/X 6:30:30 XXX UTC
	  1995-12-22T09:05:02 = XXXX 22 XXX XXXX 1995 X/X 9:05:02 XXX UTC
	 -0010-09-15T04:44:23 = XXXXX 15 XXX XXXX -10 X/X 4:44:23 XXX UTC

       Long

	  2008-02-05T18:30:30 = 05 XXX 2008 6:30:30 XXX UTC
	  1995-12-22T09:05:02 = 22 XXX 1995 9:05:02 XXX UTC
	 -0010-09-15T04:44:23 = 15 XXX -10 4:44:23 XXX UTC

       Medium

	  2008-02-05T18:30:30 = 05-XXX-2008 6:30:30 XXX
	  1995-12-22T09:05:02 = 22-XXX-1995 9:05:02 XXX
	 -0010-09-15T04:44:23 = 15-XXX--10 4:44:23 XXX

       Short

	  2008-02-05T18:30:30 = 05/02/08 6:30 XXX
	  1995-12-22T09:05:02 = 22/12/95 9:05 XXX
	 -0010-09-15T04:44:23 = 15/09/-10 4:44 XXX

       Default

	  2008-02-05T18:30:30 = 05-XXX-2008 6:30:30 XXX
	  1995-12-22T09:05:02 = 22-XXX-1995 9:05:02 XXX
	 -0010-09-15T04:44:23 = 15-XXX--10 4:44:23 XXX

   Available Formats
       d (d)

	  2008-02-05T18:30:30 = 5
	  1995-12-22T09:05:02 = 22
	 -0010-09-15T04:44:23 = 15

       EEEd (d EEE)

	  2008-02-05T18:30:30 = 5 XXX
	  1995-12-22T09:05:02 = 22 XXX
	 -0010-09-15T04:44:23 = 15 XXX

       Hm (H:mm)

	  2008-02-05T18:30:30 = 18:30
	  1995-12-22T09:05:02 = 9:05
	 -0010-09-15T04:44:23 = 4:44

       hm (h:mm a)

	  2008-02-05T18:30:30 = 6:30 XXX
	  1995-12-22T09:05:02 = 9:05 XXX
	 -0010-09-15T04:44:23 = 4:44 XXX

       Hms (H:mm:ss)

	  2008-02-05T18:30:30 = 18:30:30
	  1995-12-22T09:05:02 = 9:05:02
	 -0010-09-15T04:44:23 = 4:44:23

       hms (h:mm:ss a)

	  2008-02-05T18:30:30 = 6:30:30 XXX
	  1995-12-22T09:05:02 = 9:05:02 XXX
	 -0010-09-15T04:44:23 = 4:44:23 XXX

       M (L)

	  2008-02-05T18:30:30 = 2
	  1995-12-22T09:05:02 = 12
	 -0010-09-15T04:44:23 = 9

       Md (M-d)

	  2008-02-05T18:30:30 = 2-5
	  1995-12-22T09:05:02 = 12-22
	 -0010-09-15T04:44:23 = 9-15

       MEd (E, M-d)

	  2008-02-05T18:30:30 = XXX, 2-5
	  1995-12-22T09:05:02 = XXX, 12-22
	 -0010-09-15T04:44:23 = XXX, 9-15

       MMdd (dd/MM)

	  2008-02-05T18:30:30 = 05/02
	  1995-12-22T09:05:02 = 22/12
	 -0010-09-15T04:44:23 = 15/09

       MMM (LLL)

	  2008-02-05T18:30:30 = XXX
	  1995-12-22T09:05:02 = XXX
	 -0010-09-15T04:44:23 = XXX

       MMMd (MMM d)

	  2008-02-05T18:30:30 = XXX 5
	  1995-12-22T09:05:02 = XXX 22
	 -0010-09-15T04:44:23 = XXX 15

       MMMEd (E MMM d)

	  2008-02-05T18:30:30 = XXX XXX 5
	  1995-12-22T09:05:02 = XXX XXX 22
	 -0010-09-15T04:44:23 = XXX XXX 15

       MMMMd (MMMM d)

	  2008-02-05T18:30:30 = XXX 5
	  1995-12-22T09:05:02 = XXX 22
	 -0010-09-15T04:44:23 = XXX 15

       MMMMdd (dd MMMM)

	  2008-02-05T18:30:30 = 05 XXX
	  1995-12-22T09:05:02 = 22 XXX
	 -0010-09-15T04:44:23 = 15 XXX

       MMMMEd (E MMMM d)

	  2008-02-05T18:30:30 = XXX XXX 5
	  1995-12-22T09:05:02 = XXX XXX 22
	 -0010-09-15T04:44:23 = XXX XXX 15

       ms (mm:ss)

	  2008-02-05T18:30:30 = 30:30
	  1995-12-22T09:05:02 = 05:02
	 -0010-09-15T04:44:23 = 44:23

       y (y)

	  2008-02-05T18:30:30 = 2008
	  1995-12-22T09:05:02 = 1995
	 -0010-09-15T04:44:23 = -10

       yM (y-M)

	  2008-02-05T18:30:30 = 2008-2
	  1995-12-22T09:05:02 = 1995-12
	 -0010-09-15T04:44:23 = -10-9

       yMEd (EEE, y-M-d)

	  2008-02-05T18:30:30 = XXX, 2008-2-5
	  1995-12-22T09:05:02 = XXX, 1995-12-22
	 -0010-09-15T04:44:23 = XXX, -10-9-15

       yMMM (y MMM)

	  2008-02-05T18:30:30 = 2008 XXX
	  1995-12-22T09:05:02 = 1995 XXX
	 -0010-09-15T04:44:23 = -10 XXX

       yMMMEd (EEE, y MMM d)

	  2008-02-05T18:30:30 = XXX, 2008 XXX 5
	  1995-12-22T09:05:02 = XXX, 1995 XXX 22
	 -0010-09-15T04:44:23 = XXX, -10 XXX 15

       yMMMM (y MMMM)

	  2008-02-05T18:30:30 = 2008 XXX
	  1995-12-22T09:05:02 = 1995 XXX
	 -0010-09-15T04:44:23 = -10 XXX

       yQ (y Q)

	  2008-02-05T18:30:30 = 2008 1
	  1995-12-22T09:05:02 = 1995 4
	 -0010-09-15T04:44:23 = -10 3

       yQQQ (y QQQ)

	  2008-02-05T18:30:30 = 2008 Q1
	  1995-12-22T09:05:02 = 1995 Q4
	 -0010-09-15T04:44:23 = -10 Q3

       yyMM (MM/yy)

	  2008-02-05T18:30:30 = 02/08
	  1995-12-22T09:05:02 = 12/95
	 -0010-09-15T04:44:23 = 09/-10

       yyQ (Q yy)

	  2008-02-05T18:30:30 = 1 08
	  1995-12-22T09:05:02 = 4 95
	 -0010-09-15T04:44:23 = 3 -10

       yyyyMMMM (MMMM y)

	  2008-02-05T18:30:30 = XXX 2008
	  1995-12-22T09:05:02 = XXX 1995
	 -0010-09-15T04:44:23 = XXX -10

   Miscellaneous
       Prefers 24 hour time?

       No

       Local first day of the week

       XXXX

SUPPORT

       See DateTime::Locale.

AUTHOR

       Dave Rolsky <autarch@urth.org>

COPYRIGHT

       Copyright (c) 2008 David Rolsky. All rights reserved. This program is free software; you can redistribute it and/or modify it under the
       same terms as Perl itself.

       This module was generated from data provided by the CLDR project, see the LICENSE.cldr in this distribution for details on the CLDR data's
       license.

perl v5.16.3							    2014-06-10					       DateTime::Locale::gez_ET(3)
All times are GMT -4. The time now is 03:57 AM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy