/sc_assets/441/logo.png

Shell Shock Vulnerability CVE-2014-6271

Posted on 26 September 2014

CVE-2014-6271, a serious bug in most versions of the Bash shell for unix, was released, September 24, 2014. The vulnerability allows remote attackers to execute arbitrary code because it processes trailing strings after function definitions in the values of environment variables. 

Due to the seriousness of the bug, we thought we would let you know that we have patched every single server within our network, just like the recent Heartbleed bug, the day it was released was the day we fixed it on our network.

If your running any type of system that runs the Bourn again shell (bash) please make sure you update your bash version.

Check out shellshockvuln.com for more information on what's affected and how you can tell if your system are affected, most importantly how to fix the problem.