CVE-2014-6271: remote code execution through bash
漏洞具體介紹地址:http://seclists.org/oss-sec/2014/q3/650
能夠執行:
shell
env t='() { :;}; echo You are vulnerable.' bash -c "true"
進行測試,如提示You are vulnerable. 那就存在漏洞,就須要修補。
系統爲cent os ,該漏洞修復方法:
ubuntu
yum update bash -y
系統爲mint ,ubuntu ,該漏洞修復方法:bash
apt-get update apt-get install bash