Shulou(Shulou.com)06/01 Report--

Bash vulnerability reinforcement Scheme

1 vulnerability description

Security reinforcement was done some time ago, using Green Alliance's BVS scanning host. According to the scanned report, there are two kinds of Bash vulnerabilities, namely:

① GNU Bash environment variable remote command execution vulnerability (CVE-2014-6271)

GNU Bash 4.3 and previous versions have a security vulnerability when evaluating some constructed environment variables, which can be triggered by adding extra strings to the function definition in the value of the environment variable. * * users can use this vulnerability to change or bypass environment restrictions to execute shell commands.

② GNU BashCVE-2014-6271 incomplete fix remote code execution vulnerability (CVE-2014-7169)

Affected system: GNU Bash

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.