|
Size: 1978
Comment: Added more external links about Shellshock/CVE-2014-6271
|
Size: 2731
Comment: Typo.
|
| Deletions are marked like this. | Additions are marked like this. |
| Line 10: | Line 10: |
| recent items which contain the words "Shellshock" and/or "CVE-2014-6271". | recent items which contain the word "Shellshock". For information about specific vulnerabilities related to Shellshock, you may find better results by searching for terms such as "CVE-2014-6271", "CVE-2014-7169", "CVE-2014-7186", or "CVE-2014-7187". |
| Line 18: | Line 21: |
| * [[https://www.google.com/webhp?tbm=nws#q=CVE-2014-6271&tbm=nws|Search Google News for 'CVE-2014-6271' (no need to limit time range)]] | * [[http://en.wikipedia.org/wiki/Shellshock_(software_bug)|Wikipedia article on Shellshock]] * [[https://access.redhat.com/articles/1200223|Summary article from RedHat on how to determine if a system is vulnerable]] |
| Line 20: | Line 24: |
| * [[https://www.us-cert.gov/ncas/alerts/TA14-268A|Official US-CERT page on CVE-2014-6271]] | * [[https://www.us-cert.gov/ncas/alerts/TA14-268A|Official US-CERT page on CVE-2014-6271, the first vulnerability in the series to be discovered]] |
| Line 23: | Line 27: |
| * [[https://www.youtube.com/watch?v=aKShnpOXqn0|4-minute introductory video for non-programmers]] | * [[https://www.youtube.com/v/aKShnpOXqn0&autoplay=0|4-minute introductory video for non-programmers]] |
| Line 26: | Line 30: |
| * [[http://blog.xeonbd.com/2014/09/every-mac-vulnerable-shellshock-bash-exploit-heres-patch-os-x/|Patch instructions for OSX]] | * [[http://blog.xeonbd.com/2014/09/every-mac-vulnerable-shellshock-bash-exploit-heres-patch-os-x/|Patch instructions for OSX]] |
| Line 29: | Line 33: |
| * [[https://www.google.com/webhp?tbm=nws#q=CVE-2014-6271&tbm=nws|Search Google News for 'CVE-2014-6271']] * [[https://www.google.com/webhp?tbm=nws#q=CVE-2014-7169&tbm=nws|Search Google News for 'CVE-2014-7169']] * [[https://www.google.com/webhp?tbm=nws#q=CVE-2014-7186&tbm=nws|Search Google News for 'CVE-2014-7186']] * [[https://www.google.com/webhp?tbm=nws#q=CVE-2014-7187&tbm=nws|Search Google News for 'CVE-2014-7187']] |
What is the Shellshock vulnerability in Bash?
As of this writing (September 25th, 2014), the situation with Shellshock is changing so rapidly that you're probably better off using your preferred search engine instead of this FAQ. For example, you could search a news site for recent items which contain the word "Shellshock". For information about specific vulnerabilities related to Shellshock, you may find better results by searching for terms such as "CVE-2014-6271", "CVE-2014-7169", "CVE-2014-7186", or "CVE-2014-7187".
After things stabilize a bit, this FAQ page should be updated with a handy summary. In the meantime, here are a few links that should help you get started:
Search Google News for 'Shellshock bash', limited to the last 24 hours
Summary article from RedHat on how to determine if a system is vulnerable
Official US-CERT page on CVE-2014-6271, the first vulnerability in the series to be discovered
"Everything you need to know about the Shellshock Bash bug", by Troy Hunt