Tag: bash漏洞

Bash漏洞说明以及Centos5/6和RHEL5/RHEL6下解决方案

Dec 3, 2019

—

from

moneyslow

of newest

大致意思就是:攻击者可以利用这个漏洞或绕过环境限制来执行shell命令，某些服务和应用程序允许未经身份验证的远程攻击者提供环境变量。运行命令：
bash破壳漏洞远程代码执行Bash Remote Code Execution (Shellshock)修补方案

Oct 25, 2019

—

from

moneyslow

of newest

Synopsis概述： A system shell on the remote host is vulnerable to command injection. Description漏洞描述 The remote host is running a version of Bash that is vulnerable to command injection via environment variable manipulation. Depending on the configuration of the system, an attacker could remotely execute arbitrary code. Solution解决方案，就是升级bash Update Bash. See Also相关链接 Links: seclists.org nessus.org…