Worse Than Heartbleed? Meet ShellShock: A New Security Threat For OS X and Linux

[steve2470]

http://www.makeuseof.com/tag/worse-than-heartbleed-meet-shellshock-a-new-security-threat-for-os-x-and-linux/

Matthew Hughes
On 26th September, 2014
Linux, Mac OS X, Security Matters

A serious security issue with the Bash shell – a major component of both most UNIX-like operating systems – has been discovered, with significant implications for computer security worldwide.

The issue is present in all versions of the Bash scripting language up to version 4.3, which effects a majority of Linux machines, and the entirety of computers running OS X. and can see an attacker exploiting this issue to launch their own code.

Curious about how it works and how to protect yourself? Read on for more information.

What Is Bash?

Bash (standing for Bourne Again Shell) is the default command line interpreter used on most Linux and BSD distributions, in addition to OS X. It is used as a method of launching programs, using system utilities and interacting with the underlying operating system by launching commands.

much more at link above

[RKP5637]

1. For some Linux distributions this has already been patched. The test in

the link you sent is great!!! Thanks for posting this !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

[steve2470]

2. my pleasure, I'm always happy to help my fellow DU'ers....

whether it's weather geekery or computer geekery

[TM99]

3. Apple needs to get on the ball with this one.

Over the last 48 hours, Linux distro after Linux distro have been pushing out patches and updates for this.

Mac OS X is still vulnerable, and Apple has yet to push through their update system, a fix.

I use all three systems - Mac, Windows & several Linux distro's. Open Source does have some advantages with a community that is fixing these flaws and vulnerabilities almost as quickly as they are found. Windows has gotten better. Apple, well, seems more focused on 'bendgate' right now.

[justiceischeap]

5. It took me about 5 minutes to fix the problem myself

using this walkthrough...

http://mac-how-to.wonderhowto.com/how-to/every-mac-is-vulnerable-shellshock-bash-exploit-heres-patch-os-x-0157606/

[TM99]

7. Yeah, I fixed it myself as well, but

the majority of Apple users can't and won't know how to do. Until they push a fix out through Apple Updates, millions of systems are going to vulnerable.

Additionally, to fix this manually by the user requires install XCode. That's a pretty big deal for most Apple users who are just not tech savvy.

[justiceischeap]

4. Thanks for this. Just updated bash.

No more vulnerability.

[steve2470]

6. bump nt