Patch Reviews - SUN (MOSC)

MOSC Banner

Bash CVE: update, patch?

edited Nov 6, 2016 8:19AM in Patch Reviews - SUN (MOSC) 6 commentsAnswered ✓

I have created a small check script to validate the running interpreter on my web server using the RBAC account that I run the Apache server with:

<------ code ------------------->

apache@ndwtstp1 /opt/app/apache >cat bash_chk.sh

#!/usr/bin/bash

#

# from web to test CVE of running bash shell

#

# URL: http://www.theregister.co.uk/2014/09/24/bash_shell_vuln/

#-------------------------------------------------------------------

#

echo -e "\tTesting $SHELL ...\n\t`bash --version`\n"

#

env X="() { :;} ; echo '$SHELL - please change your shell'" /bin/sh -c "echo '$SHELL test good'"

#

env X="() { :;} ; echo '$SHELL - please change shell'" `which bash` -c "echo '$SHELL test good'"

Howdy, Stranger!

Log In

To view full details, sign in to My Oracle Support Community.

Register

Don't have a My Oracle Support Community account? Click here to get started.

Category Leaderboard

Top contributors this month

New to My Oracle Support Community? Visit our Welcome Center

MOSC Help Center