Shellshock [vulnerability with Bash]


it's not that common to serve web pages or other content through shell scripts, doing things like that is not very efficient or useful.
Not many CGI scripts are written in shell script, but some CGI scripts use system("...") or `backticks` to run other commands.

In many cases bash will be involved in that, either as the system shell used to run complex commands, or because the program you're running is written in bash.

Yeah the media exaggerated it, but it is a serious vulnerability and a whole lot of servers have no doubt been turned into DDoS drones in the past few days.
 
Last edited by a moderator:
Back
Top