Coming soon - Get a detailed view of why an account is flagged as spam!
view details

This post has been de-listed

It is no longer included in search results and normal feeds (front page, hot posts, subreddit posts, etc). It remains visible only via the author's post history.

17
Critical Bash vulnerability (Shellshock, CVE-2014-6271), be sure to update your servers
Post Body

There is a critical bug within a core *nix binary present in most distributions, including Debian, Ubuntu, Arch and CentOS. This bug has been assigned CVE-2014-6271 and technical details can be found at Everything you need to know about Shellshock.

This vulnerability allows remote code execution on any vulnerable system. This vulnerability is exploitable through Apache, nginx and a number of scripts (such as PyWhatauto and autodl).

On Debian-like systems run the below:

sudo apt-get update
sudo apt-get upgrade -y
sudo kill -1 `ps -edf | grep bash |awk '{print $2}'`

At Feral Hosting we have already implemented the patches and our status page has been updated to reflect this. Existing Bash sessions have been killed as a precaution.

This bug is considered critical and you should implement the fixes immediately.

Author
Account Strength
100%
Account Age
13 years
Verified Email
Yes
Verified Flair
No
Total Karma
14,062
Link Karma
951
Comment Karma
13,111
Profile updated: 2 days ago
Posts updated: 4 months ago

Subreddit

Post Details

We try to extract some basic information from the post title. This is not always successful or accurate, please use your best judgement and compare these values to the post title and body for confirmation.
Posted
10 years ago