Bash vulnerability

Login or Register to Reply

 
Thread Tools Search this Thread
# 1  
Bash vulnerability

Not sure if there is a post about it here somewhere already. Anyway:

Remote exploit vulnerability in bash CVE-2014-6271 | CSO Online
These 2 Users Gave Thanks to zaxxon For This Post:
# 2  
Im still half asleep at work but will keep an eye on it, interested to see how it can be exploited
# 3  
I assume that hackers would need to get to the server using ssh with a -c option for command. IMHO, web servers should not have outward facing ssh ports and if they do they should not use port 22 and should use cert based authentication. It seems like this is going to affect companies that don't have good network security, more than those that do.

I would be curious to see what the attack looks like though.
# 4  
Thanks for the heads-up, updating now.

Lots and lots of things use the shell... It's not inconceivable someone could exploit a CGI script for example. It wouldn't be easy, but if they manage it once on a common software like webmin, they have a way into lots of machines.
Login or Register to Reply

|
Thread Tools Search this Thread
Search this Thread:
Advanced Search

More UNIX and Linux Forum Topics You Might Find Helpful
How to run several bash commands put in bash command line?
abdulbadii
How to run several bash commands put in bash command line without needing and requiring a script file. Because I'm actually a windows guy and new here so for illustration is sort of : $ bash "echo ${PATH} & echo have a nice day!" will do output, for example:...... Shell Programming and Scripting
4
Shell Programming and Scripting
Bash to select text and apply it to a selected file in bash
cmccabe
In the bash below I am asking the user for a panel and reading that into bed. Then asking the user for a file and reading that into file1.Is the grep in bold the correct way to apply the selected panel to the file? I am getting a syntax error. Thank you :) ...... Shell Programming and Scripting
4
Shell Programming and Scripting
Solaris bash vulnerability update
jim mcnamara
The patch blog has: https://blogs.oracle.com/patch/entry/solaris_idrs_available_on_mos information on dealing with bash 'shellshock' vulnerability.... Solaris
3
Solaris
how to make your bash script run on a machine with csh and bash
npatwardhan
hi, i have a script that runs on bash and would like to run it on a machine that has csh and bash. the default setting on that machine is csh. i dont want to change my code to run it with a csh shell. is there any way i can run the script (written in bash) on this machine? in other words is there...... Shell Programming and Scripting
3
Shell Programming and Scripting
bash and ksh: variable lost in loop in bash?
estienne
Hi, I use AIX (ksh) and Linux (bash) servers. I'm trying to do scripts to will run in both ksh and bash, and most of the time it works. But this time I don't get it in bash (I'm more familar in ksh). The goal of my script if to read a "config file" (like "ini" file), and make various report....... Shell Programming and Scripting
2
Shell Programming and Scripting