security flaw on Linux default shell "bash"

A security issue on the wide-spreaded linux default shell "bash" was released under tracking id CVE-2014-6271.
This security hole allows the remote execution of code by the internet and allows to take over control of your system.

Therefore it's necessary to update your system immediately.

Most linux distributors have already released an updated bash package which can be installed.

You can check on ssh if your system is vulnerable by using the following command:

$ env x='() { :;}; echo vulnerable' bash -c "echo this is a test"
vulnerable
this is a test


On an already patched system the output will be as follow:

$ env x='() { :;}; echo vulnerable' bash -c "echo this is a test"
bash: warning: x: ignoring function definition attempt
bash: error importing function definition for `x'
this is a test

DedicatedServer4You.com -- BIGGEST Range of Dedicated Servers at the Lowest Price!
Quote · 4 Oct 2014

This was also posted about here: http://www.boonex.com/forums/topic/Shellshock-Flaw.htm

 

Keep in mind the announcement for this was September 24th. There was another fix pushed out on the 25-26th to further address another CVE and the incomplete first update. [To anybody] If you've only updated Bash today, I recommend also checking your system for any signs of intrusion or compromise.

BoonEx Certified Host: Zarconia.net - Fully Supported Shared and Dedicated for Dolphin
Quote · 4 Oct 2014
 
 
Below is the legacy version of the Boonex site, maintained for Dolphin.Pro 7.x support.
The new Dolphin solution is powered by UNA Community Management System.