Linux Stories: Bash Shellshock Bug Linux system vulnerability test Options

[gpanagou]

The Bash "Shellshock" bug is used to spread malware using botnets. To make sure that you can prevent your system against Shellshock exploit make sure that your system is up to date. Once you update your system use below vulenrability test to help you find out whether your system is vulnerable to Bash Shellshock attacks.
Simply open a terminal on your Linux system and execute the following command

 

$ env i='() { :;}; echo Your system is Shellshock vulnerable' bash -c "echo Shellshock Linux system vulnerability test"

If your system is vulnerable to the Bash "Shellshock" bug the above command will produce a following output:

Your system is Shellshock vulnerable
Shellshock Linux system vulnerability test

otherwise you will see a following message:

Shellshock Linux system vulnerability test

 

 

Source: http://linuxconfig.org/bash-shellshock-bug-linux-system-vulnerability-test

View the full article

[NickTheGreek]

Bash bug and risks posed by incomplete patches, discovered other two additional bugs

CODE

_x='() { echo vulnerable; }' bash -c '_x 2>/dev/null || echo not vulnerable'

Source : http://securityaffairs.co/wordpress/28909/hacking/bash-bug-incomplete-patches.html