Hackers Using 'Shellshock' Bash Vulnerability to Launch Botnet Attacks

Researchers on Thursday discovered a critical remotely exploitable vulnerability in the widely used command-line shell GNU Bourne Again Shell Bash, dubbed "Shellshock" which affects most of the Linux distributions and servers worldwide, and may already have been exploited in the wild to take over...

Important: Red Hat Security Advisory: bash security update

Updated September 30, 2014 This advisory has been updated with information on restarting system services after applying this update. No changes have been made to the original packages. Updated bash packages that fix one security issue are now available for Red Hat Enterprise Linux 4 Extended Life...

bash security update

CentOS Errata and Security Advisory CESA-2014:1306 Updated September 30, 2014 This advisory has been updated with information on restarting system services after applying this update. No changes have been made to the original packages. Updated bash packages that fix one security issue are now...

bash: code execution via specially-crafted environment (Incomplete fix for CVE-2014-6271)

It was found that the fix for CVE-2014-6271 was incomplete, and Bash still allowed certain characters to be injected into other environments via specially crafted environment variables. An attacker could potentially use this flaw to override or bypass environment restrictions to execute shell...

Important: Red Hat Security Advisory: bash security update

Updated September 30, 2014 This advisory has been updated with information on restarting system services after applying this update. No changes have been made to the original packages. Updated bash packages that fix one security issue are now available for Red Hat Enterprise Linux 5, 6, and 7. Re...

Exploit for OS Command Injection in Gnu Bash

BadBash ======= CVE-2014-6271 ShellShock RCE PoC tool =====...

DHCP Client Bash Environment Variable Code Injection

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rex/proto/dhcp' class Metasploit3 'DHCP Client Bash Environment Variable Code Injection', 'Description' = %q This module exploits a code...

Bash environment variable code injection over HTTP

Added: 09/26/2014 CVE: CVE-2014-6271 BID: 70103 OSVDB: 112004 Background GNU Bash Bourne Again SHell is a command shell commonly used on Linux and Unix systems. Problem The Bash shell executes commands injected after function definitions contained in environment variables. This could be used by a...

Apache mod_cgi Bash Environment Variable Code Injection Exploit

This Metasploit module exploits a code injection in specially crafted environment variables in Bash, specifically targeting Apache modcgi scripts through the HTTPUSERAGENT variable. This module requires Metasploit: http//metasploit.com/download Current source:...

Bash 4.3 远程命令执行漏洞 (破壳)

更新情况版本时间描述第一版2014/9/26 中午第一版完成。第二版2014/9/26 下午1. 新增：加速乐防御平台的攻击统计细节；2. 完善：修复建议；第三版2014/9/27 下午1. 破壳漏洞官网出现：shellshocker.net2. 更新：漏洞概要；3. 新增：补丁绕过后（CVE-2014-7169）的漏洞源码级分析；4. 新增：ZoomEye第四组数据：QNAP NAS漏洞情况；5. 新增：ZoomEye第五组数据：CheckPoint安全网关漏洞情况；6. 完善：修复建议；7. 新增：相关资源链接；第四版2014/10/14 晚1...

CentOS 5 / 6 / 7 : bash (CESA-2014:1306)

Updated bash packages that fix one security issue are now available for Red Hat Enterprise Linux 5, 6, and 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Gnu Bash 4.3 CGI REFERER Command Injection

!/usr/bin/perl Title: Bash/cgi command execution exploit CVE: CVE-2014-6271 Author: Simo Ben youssef Contact: SimoatMorxploitcom Coded: 25 September 2014 Published: 26 September 2014 MorXploit Research http://www.MorXploit.com Description: Perl code to exploit CVE-2014-6271. Injects a Perl connec...

Solaris 9 (x86) : 149080-01

SunOS 5.9x86: bash patch. Date this patch was last updated by Oracle : Sep/26/14 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated by solaris9x86149080.nasl. Disabled on 2014/10/13. C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle...

DHCP Client Bash Environment Variable Code Injection Exploit

This Metasploit module exploits a code injection in specially crafted environment variables in Bash, specifically targeting dhclient network configuration scripts through the HOSTNAME, DOMAINNAME, and URL DHCP options. This module requires Metasploit: http//metasploit.com/download Current source:...

Bash environment variable code injection over HTTP

Added: 09/26/2014 CVE: CVE-2014-6271 BID: 70103 OSVDB: 112004 Background GNU Bash Bourne Again SHell is a command shell commonly used on Linux and Unix systems. Problem The Bash shell executes commands injected after function definitions contained in environment variables. This could be used by a...

RedHat Update for bash RHSA-2014:1306-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gnu Bash 4.3 CGI Scan Remote Command Injection

!/usr/bin/env python http connection import urllib2 Args management import optparse Error managemen import sys banner = """ | .-----.--.--. | .---.-.-----| |--. |. || | | | |. 1 | | --| | |. | |||| |. |.|||| |: 1 | |: 1 \ |::.. . | |::.. . / -------' -------' | Y | | | | | | | | | ||| | |. l |. 1...

Solaris 10 (sparc) : 126546-06

SunOS 5.10: bash patch. Date this patch was last updated by Oracle : Sep/26/14 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Debian DSA-3035-1 : bash - security update

Tavis Ormandy discovered that the patch applied to fix CVE-2014-6271 released in DSA-3032-1 for bash, the GNU Bourne-Again Shell, was incomplete and could still allow some characters to be injected into another environment CVE-2014-7169 . With this update prefix and suffix for environment variabl...

RHEL 5 / 6 / 7 : bash (RHSA-2014:1306)

The remote Redhat Enterprise Linux 5 / 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:1306 advisory. The GNU Bourne Again shell Bash is a shell and command language interpreter compatible with the Bourne shell sh. Bash is the default...