Linux Bash Shellshock software bug-2014.09.24

为什么80%的码农都做不了架构师？>>>   

CVE-2014-6271, It was announced to the public on 24 September 2014 when Bash updates with the fix were ready for distribution.

相关漏洞还有：CVE-2014-6277, CVE-2014-6278, CVE-2014-7169, CVE-2014-7186, and CVE-2014-7187

可通过[3]中的脚本来批量检测上述漏洞。

[1] Linux服务器被黑遭敲诈，3小时紧急逆袭！http://mp.weixin.qq.com/s/vR9qU5P5ru3BGgJvyltR9Q

[2] https://en.wikipedia.org/wiki/Shellshock_(software_bug)

[3] ShellShock 漏洞检测脚本, https://laravel-china.org/topics/104/shellshock-vulnerability-detection-script

[4] bash代码：https://ftp.gnu.org/gnu/bash/

[5] 知道创宇, 破壳漏洞（ShellShock）应急概要 最终版V4, http://blog.knownsec.com/2014/10/shellshock_response_profile_v4/

转载于:https://my.oschina.net/1pei/blog/1541604