Shellshock

How do you know whether you are involved in newly discovered  bash security hole?

Try this in your shell

env x='() { :;}; echo Dangerous' bash -c "echo This is a test for your bash"

And if you see Dangerous in your shell, you'd better take action as soon as possible. Imagine that if the code is env x='() { :;}; rm -rf /' bash -c "echo Goodbye!" So, you may want to do those following steps

apt-get update
apt-get upgrade

or you can upgrade bash only

apt-get install --only-upgrade bash

After upgrade, if you execute that command, bash will echo you something like this

bash: warning: x: ignoring function definition attempt
bash: error importing function definition for `x'

Leave a Reply

Your email address will not be published. Required fields are marked *

one × 3 =