Jump to content

Shellshock vulnerability

From Wikipedia, the free encyclopedia
This is an old revision of this page, as edited by Tcp-ip (talk | contribs) at 16:07, 25 September 2014 (some improvement). The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

Shellshock vulnerability (aka CVE-2014-6271) is a security bug affecting Unix-like operating systems through the bash shell. Disclosed on September 24 2014, it has been rated 10 (the maximum score) for severity by NIST.[1] Shellshock affects Bash versions between 1.14 and 4.3 which are used on many Linux distributions, Mac OS X, and other operating systems. Some web servers also rely upon Bash to execute CGI scripts, and this bug could allow the execution of malicious code from remote.