Bash CVE: update, patch?
I have created a small check script to validate the running interpreter on my web server using the RBAC account that I run the Apache server with:
<------ code ------------------->
apache@ndwtstp1 /opt/app/apache >cat bash_chk.sh
#!/usr/bin/bash
#
# from web to test CVE of running bash shell
#
# URL: http://www.theregister.co.uk/2014/09/24/bash_shell_vuln/
#-------------------------------------------------------------------
#
echo -e "\tTesting $SHELL ...\n\t`bash --version`\n"
#
env X="() { :;} ; echo '$SHELL - please change your shell'" /bin/sh -c "echo '$SHELL test good'"
#
env X="() { :;} ; echo '$SHELL - please change shell'" `which bash` -c "echo '$SHELL test good'"