AKLUG Archive: [aklug] CVE-2014-6271 - critical bash vulnerabili

From: Royce Williams <royce@tycho.org>
Date: Thu Sep 25 2014 - 06:39:31 AKDT

[I wrote this for another list, forwarding in case it's useful]

Flurry of updates, in very rough order of importance/interestingness:

Good summaries to send to anyone joining the party late:

The shellshock/badbash vuln now has a zero-day exploiting 2014-6271:

Rules for original vuln:

Current fix incomplete, new CVE is CVE-2014-7169:

Patch for incomplete patch:

Metasploit module for original vuln:

Some busybox may also be affected:

Informative new posts:

Robert Graham's masscan of just the default page by IP (so a lower bound)
is here, but actually aborted and he'll be re-running:

Exploit possibilities walkthrough, including fetching results:

Tester (not complete; should spider entire site):

Landscape of obvious targets:

Funniest one-liner so far:

https://twitter.com/koizuka/status/515098006895349760
Akihiko Koizuka ‏@koizuka 2h
() { :;}; /usr/bin/eject

---------
To unsubscribe, send email to <aklug-request@aklug.org>
with 'unsubscribe' in the message body.
Received on Thu Sep 25 06:40:21 2014

This archive was generated by hypermail 2.1.8 : Thu Sep 25 2014 - 06:40:21 AKDT

[aklug] CVE-2014-6271 - critical bash vulnerability