Shellshock [vulnerability with Bash]

[sswam]

it's not that common to serve web pages or other content through shell scripts, doing things like that is not very efficient or useful.

Not many CGI scripts are written in shell script, but some CGI scripts use system("...") or `backticks` to run other commands.

In many cases bash will be involved in that, either as the system shell used to run complex commands, or because the program you're running is written in bash.

Yeah the media exaggerated it, but it is a serious vulnerability and a whole lot of servers have no doubt been turned into DDoS drones in the past few days.

 

[Hồng Thất Công]

How bad is Shellshock?  Please provide your thoughts.

 

[Nintendo]

I've never heard of Heartbleed until now, so meh.

 

[TrashyMG]

How bad is Shellshock?  Please provide your thoughts.

Unless you are running web cgi scripts that runs shell commands I wouldn't worry about it..

 

[sebt3]

Unless you are running web cgi scripts that runs shell commands I wouldn't worry about it..

Well there's also the ability to escape restricted shell...