Bash Vulnearbility: CVE-2014-6271

Marco Ramilli
Date
24 September 2014
Read
Share
Test if you are vulnerable

Nothing really to add here. It makes me just thinking.... those things still happens (thxG). More here, here, here, here and here

UPDATE (click to enlarge):

From PasteBin (here)

  No Way... Wondering of many triggering vector would be out there

UPDATE 2

After some days from the original 6271, more than 5 vulnerabilities have been found on the same "way".  My favorite place to stay up-to-date on this topic is that Repository.
If you are still wondering what are the real risks for your company, here some simple examples from (here).
Find out your vulnerable cgi. Get it, and learn from the results...
 
As simple is a curl, remove everything you want (this is freaking scary).

And then be sure everything went as you whished.

Are you wondering.... if I could....  , ... , yes you can !

And, yes.. this vulnerability is "wormable", it might be used for spreading worms.
Marco Ramilli
Date
24 September 2014
Read
Share
← Go back
Latest Posts

i-SOON Data Leak: Key Points

Introduction i-SOON (上海安洵), a prominent contractor for various Chinese government agencies such […]

Date
26.02.2024
Duration
5 min
Text
Marco Ramilli

X Gold Badges: a new proliferating market

When I saw a threat actor hijacking the X account of Google's […]

Date
08.01.2024
Duration
5 min
Text
Marco Ramilli

Technical Data Sheet: LOCKBIT 3.0

LOCKBIT 3.0 is a notorious Ransomware Group that was first identified on […]

Date
20.12.2023
Duration
5 min
Text
Marco Ramilli
1 2 3 … 236
Back to Top
magnifier