Fix your shellshock exposure
September 26, 2014
Shellshock is a bash exploit which allows a malicious user to put extra information into an environment variable and have bash execute it.
Fixes are out for RHEL/CentOS and Ubuntu, update your systems immediately…
Test using:
$ env var='() { ignore this;}; echo vulnerable’ bash -c /bin/true
CentOS/RHEL/Fedora Fix:
$ sudo yum update bash -y
Ubuntu fix:
$ sudo apt-get install –only-upgrade bash
Leave a Reply