The U.S. Department of Homeland Security’s Computer Emergency Readiness Team (US-CERT) issued a warning that Unix-based operating systems, including Linux, as well as Apple’s Mac OS X may be at risk.
According to cybersecurity company Trail of Bits, Heartbleed could allow personal information such as passwords and credit-card details to be stolen, but unlike Bash it could not be used to take over a system.
This is a really bad one. CGI in particular requires caution.
Rumor has it that zsh is also affected, so you should immediately inspect the contents of any scripts that invoke a shell…
For more details, I recommend this blog post → The Bash Vulnerability Is Extremely Serious.
It says:
Because CGI stores parameters in environment variables (*2), modifying an HTTP request header to contain
User-Agent: () { :; }; rm -rf /might give you chills. I have not tested it myself, however.
This is terrifying.
Incidentally, removing Bash as a countermeasure is apparently called “tooth extraction” in Japanese, a pun on the identical pronunciation of the words for removing Bash and extracting a tooth. Clever.
Reference Materials
- A belated verification, including attempts to take control via HTTP and DHCP. / Verification report on arbitrary-code-execution vulnerabilities caused by faulty environment-variable processing in GNU Bash (CVE-2014-6271, CVE-2014-7169) http://bit.ly/1yvnIYM
- A proof of concept for a malicious DHCP server has been published. It exploits the Bash bug on a DHCP client that connects to it and launches an arbitrary command.http://twitter.com/HNTweets/statu/515236804920741888… https://www.trustedsec.com/september-2014shellshock-dhcp-rce-proof-concept/…
- A belated verification, including attempts to take control via HTTP and DHCP. / Verification report on arbitrary-code-execution vulnerabilities caused by faulty environment-variable processing in GNU Bash (CVE-2014-6271, CVE-2014-7169) http://bit.ly/1yvnIYM
- OpenVPN servers can be vulnerable to Shellshock Bash …
Related posts
I Looked into This: “Critical SAML Authentication Vulnerability in Palo Alto Networks Products; U.S. Cyber Command Also Issues Warning”
On July 1, the following article came across my feed. However, the article alone does not explain what kind of vulnerability this actually is, and the…
The XARA Vulnerabilities in MacOS X and iOS
This afternoon (June 18), GigaZine published a sensational article titled “Vulnerability Found That Allows iCloud, Email, and Browser-Saved Passwords to Be Stolen on iOS and OS…