Posts

Showing posts from October, 2014

Redhat / Centos ShellShock remediation

I realize it's old info now but I'm posting this for my own reference.  This info was gleaned from other sites.  I adapted the tests to display results in color.  Hey I'm old, it helps to see things  :-) The tests are listed as Redhat or Centos but the same script should work on any version of Linux and probably Unix as well. BASH ShellShock Remediation Redhat/Centos version: cat /etc/redhat-release BASH version: bash -version     Or rpm -qa | grep bash Test:  clear;env x="() { :;}; echo -e '\033[1;31mVULNERABLE\033[0m'" "BASH_FUNC_x()=() { :;}; echo VULNERABLE" bash -c " echo -ShellShock-Test-"    Or clear;env X="() { :;} ; echo -e '\033[1;31mVULNERABLE\033[0m'" /bin/sh -c "echo -ShellShock-Test-" Result before patching: VULNERABLE bash: BASH_FUNC_x(): line 0: syntax error near unexpected token `)' bash: BASH_FUNC_x(): line 0: `BASH_FUNC_x() () { :;}; echo VULNERA...