Shellshock

If you guys haven't heard, there is a pretty big vulnerability in bash
called Shellshock.  It affects most versions of Bash on Windows, Linux,
BSD, and Mac.

This is a remote code execution bug involving the way Bash resolves
environment variables.  Basically you can define a variable as a function
and have that function executed as part of bash assigning the value.  One
affected application, Apache, uses bash variables to pass HTTP request
headers to cgi scripts.  This means that a well crafted HTTP header can
execute code if you run a cgi script.

Just your friendly hide yo wife, hide yo kids, update yo servers reminder.

Summers Pittman
>>Phone:404 941 4698
>>Java is my crack.

_______________________________________________
ajug-members mailing list
[email protected]
http://lists.ajug.org/mailman/listinfo/ajug-members