GNU Bash Environment Variable Command Injection Vulnerability CVE-2014-6278

• Email
• Facebook
• 
  Twitter
• Google+
• Linkedin

  Severity: CRITICAL

  CVE Identifier: CVE-2014-6278

  Advisory Date: SEP 30, 2014

---

  DESCRIPTION

This remote code execution vulnerability exists in the way the Bash shell handles functions. When successfully exploited, remote attackers may execute commands on the vulnerable system.

  OTHER INFORMATION

Shellshock

Shellshock: A Technical Report

About the Shellshock Vulnerability: The Basics of the "Bash Bug"

Trend Micro products and the Shellshock – Linux Bash Vulnerability (Bash Bug) [CVE-2014-6271 and CVE-2014-7169]

Get FREE protection for Shellshock

Related Blog Entries

• Shellshock Vulnerabilities Proliferate, Affect More Protocols

Related Vulnerability

• GNU Bash off-by-one Error Arbitrary Code Execution Vulnerability
• GNU Bash redir_stack Remote Code Execution Vulnerability
• GNU Bash Environment Variable Command Injection Vulnerability (CVE-2014-6277)
• Bash Vulnerability Shellshock (CVE-2014-6271)
• Bash Vulnerability Shellshock (CVE-2014-7169)