Questions tagged [shellshock]
Shellshock, is a family of security bugs in the widely used Unix Bash shell, the first of which was disclosed on 24 September 2014.
8 questions
3
votes
2
answers
988
views
Problem regarding passing a function to child process in Linux shell
I'm doing the Shellshock lab, the tutorial gives an approach to pass a function to child process by environment variable:
$ foo='() { echo "hello"; }'
$ export foo
$ /bin/bash
$ foo
hello
...
- 39
0
votes
1
answer
2k
views
Ubuntu 14.04 Vulnerable to Shellshock? [duplicate]
I just installed 14.04 today, found seems the system still have Shellshock issue:
dli@srv:~$ lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 14.04.1 LTS
...
- 153
0
votes
1
answer
467
views
Does Ubuntu 14.10 have the security fix for Shellshock bash exploit? [duplicate]
On the internet, I noticed there were Patches for the Shellshock vulnerability which is scaring me a lot. Does Ubuntu 14.10 have this automatically in it?
- 785
1
vote
0
answers
299
views
Unable to reproduce the ShellShock bug locally
I have been trying to reproduce the Shellshock bug on my local 14.04 Ubuntu VM without any luck. I know my local bash version is still vulnerable because the following command prints out the commented ...
- 111
2
votes
1
answer
10k
views
Shellshock: How can I update only Bash without restarting?
I want to fix the Shellshock issue, and the usual solution is to update Ubuntu.
How can I update only Bash and without having to reboot?
- 8,677
0
votes
2
answers
231
views
Install only bash from trusty on old distributions (to be save from Shellshock vulnerability)
Is there a way to just install only bash from the latest distribution on an old mashine?
I once did pinning to a certain version of a package, but that was bevcause I didn't want to update that ...
- 34.4k
32
votes
2
answers
21k
views
Explanation of the command to check shellshock
Here is the command I have used to check my bash shell for the Shellshock bug:
env x='() { :;}; echo vulnerable' bash -c "echo this is a test"
Can anyone please explain the command in details?
- 94.5k
142
votes
5
answers
103k
views
What is the CVE-2014-6271 bash vulnerability (Shellshock) and how do I fix it?
Recently, there have been news going around regarding "CVE-2014-6271" (See USN-2362-1), which is a vulnerability in Bash. How do I know if I am affected by this, how can I fix it, and why should I ...
- 21k