Bash Shellcode truth

There are two Common Vulnerability and Exposure CVE-2014-6271 and CVE-2014-7169

 

Akamai has posted it’s response

CERT has posted it’s vulnerability Note

Red Hat has developed the following test:

$ env x='() { :;}; echo vulnerable' bash -c "echo this is a test"

RedHat Blog also discusses it and has set up a FAQ

Updating Bash on various Linux or Unix systems may not be that easy. as discussed in this Bug-bash thread

But one can safely test as I did here:

shellcode-safe

 

 

As Johannes Ulrich has discussed in his blog entry yesterday  this is not a simple potential vulnerability.

 

In my opinion, this bashcode problem is just starting to be felt as good exploits have yet to be developed.