CVE-2014-6271— GNU Bash 远程代码执行漏洞
一分钟漏洞结论
影响对象
n/a n/a
利用判断
已确认在野利用，应立即处置
建议动作
优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。
GNU Bash是美国软件开发者布莱恩-福克斯（Brian J. Fox）为GNU计划而编写的一个Shell（命令语言解释器），它运行于类Unix操作系统中（Linux系统的默认Shell），并能够从标准输入设备或文件中读取、执行命令，同时也结合了一部分ksh和csh的特点。 GNU Bash 4.3及之前版本中存在安全漏洞，该漏洞源于程序没有正确处理环境变量值内的函数定义。远程攻击者可借助特制的环境变量利用该漏洞执行任意代码。以下产品和模块可能会被利用：OpenSSH sshd中的ForceComman
公开利用映射 32
ExploitDB · 21
EDB-34777#CVE-2014-6271 [remote]
EDB-35146#CVE-2014-6271 [webapps]
EDB-36609#CVE-2014-6271 [webapps]
EDB-37816#CVE-2014-6271 [webapps]
EDB-42938 [remote]
+16 更多
Metasploit · 10
qmail_bash_env_exec.rb [exploit]
apache_mod_cgi_bash_env.rb#CVE-2014-6271 [auxiliary]
dhclient_bash_env.rb [auxiliary]
vmware_bash_function_root.rb [exploit]
apache_mod_cgi_bash_env_exec.rb#CVE-2014-6271 [exploit]
+5 更多
Nuclei · 1
CVE-2014-6271.yaml [template]
已观察到在野利用
cisa_kev · confirmed
获取后续新漏洞提醒
登录后订阅
一、 漏洞 CVE-2014-6271 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
来源: CVE Program / CVE List V5
Vulnerability Description
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka "ShellShock." NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.
来源: CVE Program / CVE List V5
CVSS Information
N/A
来源: CVE Program / CVE List V5
Vulnerability Type
N/A
来源: CVE Program / CVE List V5
Vulnerability Title
GNU Bash 远程代码执行漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
GNU Bash是美国软件开发者布莱恩-福克斯（Brian J. Fox）为GNU计划而编写的一个Shell（命令语言解释器），它运行于类Unix操作系统中（Linux系统的默认Shell），并能够从标准输入设备或文件中读取、执行命令，同时也结合了一部分ksh和csh的特点。 GNU Bash 4.3及之前版本中存在安全漏洞，该漏洞源于程序没有正确处理环境变量值内的函数定义。远程攻击者可借助特制的环境变量利用该漏洞执行任意代码。以下产品和模块可能会被利用：OpenSSH sshd中的ForceComman
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD
受影响产品
| 厂商 | 产品 | 影响版本 | CPE | 订阅 |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
二、漏洞 CVE-2014-6271 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|---|---|---|
| 1 | Collected fixes for bash CVE-2014-6271 | https://github.com/dlitz/bash-cve-2014-6271-fixes | POC详情 |
| 2 | Patch for CVE-2014-6271 | https://github.com/npm/ansible-bashpocalypse | POC详情 |
| 3 | patched-bash-4.3 for CVE-2014-6271 | https://github.com/ryancnelson/patched-bash-4.3 | POC详情 |
| 4 | Chef cookbook that will fail if bash vulnerability found per CVE-2014-6271 | https://github.com/jblaine/cookbook-bash-CVE-2014-6271 | POC详情 |
| 5 | None | https://github.com/rrreeeyyy/cve-2014-6271-spec | POC详情 |
| 6 | Python Scanner for "ShellShock" (CVE-2014-6271) | https://github.com/scottjpack/shellshock_scanner | POC详情 |
| 7 | Written fro CVE-2014-6271 | https://github.com/Anklebiter87/Cgi-bin_bash_Reverse | POC详情 |
| 8 | a auto script to fix CVE-2014-6271 bash vulnerability | https://github.com/justzx2011/bash-up | POC详情 |
| 9 | None | https://github.com/mattclegg/CVE-2014-6271 | POC详情 |
| 10 | Quick and dirty nessus .audit file to check is bash is vulnerable to CVE-2014-6271 | https://github.com/ilismal/Nessus_CVE-2014-6271_check | POC详情 |
| 11 | CVE-2014-6271 RCE tool | https://github.com/RainMak3r/Rainstorm | POC详情 |
| 12 | Simple script to check for CVE-2014-6271 | https://github.com/gabemarshall/shocknaww | POC详情 |
| 13 | None | https://github.com/woltage/CVE-2014-6271 | POC详情 |
| 14 | CVE-2014-6271の検証用Vagrantfileです | https://github.com/ariarijp/vagrant-shellshock | POC详情 |
| 15 | scripts associate with bourne shell EVN function parsing vulnerability CVE-2014-6271 | https://github.com/themson/shellshock | POC详情 |
| 16 | CVE-2014-6271 (ShellShock) RCE PoC tool | https://github.com/securusglobal/BadBash | POC详情 |
| 17 | scaner for cve-2014-6271 | https://github.com/villadora/CVE-2014-6271 | POC详情 |
| 18 | Salt recipe for shellshock (CVE-2014-6271) | https://github.com/APSL/salt-shellshock | POC详情 |
| 19 | Ansible role to check the CVE-2014-6271 vulnerability | https://github.com/teedeedubya/bash-fix-exploit | POC详情 |
| 20 | Debian Lenny Bash packages with cve-2014-6271 patches (i386 and amd64) | https://github.com/internero/debian-lenny-bash_3.2.52-cve-2014-6271 | POC详情 |
| 21 | None | https://github.com/u20024804/bash-3.2-fixed-CVE-2014-6271 | POC详情 |
| 22 | None | https://github.com/u20024804/bash-4.2-fixed-CVE-2014-6271 | POC详情 |
| 23 | None | https://github.com/u20024804/bash-4.3-fixed-CVE-2014-6271 | POC详情 |
| 24 | A python script to enumerate CGI scripts vulnerable to CVE-2014-6271 on one specific server | https://github.com/francisck/shellshock-cgi | POC详情 |
| 25 | A script, in C, to check if CGI scripts are vulnerable to CVE-2014-6271 (The Bash Bug) | https://github.com/proclnas/ShellShock-CGI-Scan | POC详情 |
| 26 | CVE-2014-6271 Remote Interactive Shell - PoC Exploit | https://github.com/sch3m4/RIS | POC详情 |
| 27 | None | https://github.com/ryeyao/CVE-2014-6271_Test | POC详情 |
| 28 | shellshock CVE-2014-6271 CGI Exploit, Use like Openssh via CGI | https://github.com/cj1324/CGIShell | POC详情 |
| 29 | This module determine the vulnerability of a bash binary to the shellshock exploits (CVE-2014-6271 or CVE-2014-7169) and then patch that where possible | https://github.com/renanvicente/puppet-shellshock | POC详情 |
| 30 | Android app to scan for bash Vulnerability - CVE-2014-6271 also known as Shellshock | https://github.com/indiandragon/Shellshock-Vulnerability-Scan | POC详情 |
AI 生成 POC
高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2014-6271 的情报信息
请登录查看更多情报信息。
CVE-2014-6271 厂商安全公告 (93)
-
https://access.redhat.com/node/1200223 x_refsource_CONFIRM
-
http://www.vmware.com/security/advisories/VMSA-2014-0010.html x_refsource_CONFIRM
-
http://www-01.ibm.com/support/docview.wss?uid=swg21685604 x_refsource_CONFIRM
-
http://www-01.ibm.com/support/docview.wss?uid=swg21686479 x_refsource_CONFIRM
-
http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096315 x_refsource_CONFIRM
-
http://www-01.ibm.com/support/docview.wss?uid=swg21686445 x_refsource_CONFIRM
-
http://www-01.ibm.com/support/docview.wss?uid=swg21686246 x_refsource_CONFIRM
-
http://support.apple.com/kb/HT6495 x_refsource_CONFIRM
-
http://www-01.ibm.com/support/docview.wss?uid=isg3T1021279 x_refsource_CONFIRM
-
http://www-01.ibm.com/support/docview.wss?uid=swg21686084 x_refsource_CONFIRM
-
http://www-01.ibm.com/support/docview.wss?uid=swg21685541 x_refsource_CONFIRM
-
http://www-01.ibm.com/support/docview.wss?uid=swg21685914 x_refsource_CONFIRM
-
http://www-01.ibm.com/support/docview.wss?uid=swg21687079 x_refsource_CONFIRM
-
http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004897 x_refsource_CONFIRM
-
http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004915 x_refsource_CONFIRM
-
https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10648 x_refsource_CONFIRM
-
http://www-01.ibm.com/support/docview.wss?uid=swg21685749 x_refsource_CONFIRM
-
http://advisories.mageia.org/MGASA-2014-0388.html x_refsource_CONFIRM
-
https://support.apple.com/kb/HT6535 x_refsource_CONFIRM
-
https://access.redhat.com/articles/1200223 x_refsource_CONFIRM
-
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10673 x_refsource_CONFIRM
-
http://www-01.ibm.com/support/docview.wss?uid=isg3T1021272 x_refsource_CONFIRM
-
-
http://www-01.ibm.com/support/docview.wss?uid=swg21686494 x_refsource_CONFIRM
-
-
http://www-01.ibm.com/support/docview.wss?uid=swg21686447 x_refsource_CONFIRM
-
http://www-01.ibm.com/support/docview.wss?uid=swg21685733 x_refsource_CONFIRM
-
https://www.suse.com/support/shellshock/ x_refsource_CONFIRM
-
http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004898 x_refsource_CONFIRM
-
https://bugzilla.redhat.com/show_bug.cgi?id=1141597 x_refsource_CONFIRM
-
http://www-01.ibm.com/support/docview.wss?uid=swg21686131 x_refsource_CONFIRM
-
http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004879 x_refsource_CONFIRM
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
http://www.mandriva.com/security/advisories?name=MDVSA-2015:164 vendor-advisory x_refsource_MANDRIVA
-
-
-
-
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140926-bash vendor-advisory x_refsource_CISCO
-
CVE-2014-6271 公开利用代码 (10)
CVE-2014-6271 邮件列表归档 (39)
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
🔗 '[security bulletin] HPSBGN03117 rev.1 - HP Remote Device Access: Virtual Customer Access System (vCA' - MARC 查看完整文章 vendor-advisory x_refsource_HP
-
-
-
-
-
-
-
-
-
-
-
http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00004.html vendor-advisory x_refsource_SUSE
-
http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00049.html vendor-advisory x_refsource_SUSE
-
http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00029.html vendor-advisory x_refsource_SUSE
-
http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00034.html vendor-advisory x_refsource_SUSE
-
-
http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00040.html vendor-advisory x_refsource_SUSE
-
http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00037.html vendor-advisory x_refsource_SUSE
-
http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00044.html vendor-advisory x_refsource_SUSE
-
-
CVE-2014-6271 安全博客文章 (1)
CVE-2014-6271 其他参考 (18)
-
http://support.novell.com/security/cve/CVE-2014-6271.html x_refsource_CONFIRM
-
http://www.qnap.com/i/en/support/con_show.php?cid=61 x_refsource_CONFIRM
-
http://www.novell.com/support/kb/doc.php?id=7015701 x_refsource_CONFIRM
-
http://www.novell.com/support/kb/doc.php?id=7015721 x_refsource_CONFIRM
-
http://www.oracle.com/technetwork/topics/security/bashcve-2014-7169-2317675.html x_refsource_CONFIRM
-
https://kb.bluecoat.com/index?page=content&id=SA82 x_refsource_CONFIRM
-
https://kc.mcafee.com/corporate/index?page=content&id=SB10085 x_refsource_CONFIRM
-
https://support.citrix.com/article/CTX200217 x_refsource_CONFIRM
-
http://linux.oracle.com/errata/ELSA-2014-1294.html x_refsource_CONFIRM
-
https://support.citrix.com/article/CTX200223 x_refsource_CONFIRM
-
http://linux.oracle.com/errata/ELSA-2014-1293.html x_refsource_CONFIRM
-
同批安全公告 · n/a · 2014-09-24 · 共 12 条
| CVE-2014-6693 | Android Juiker应用程序加密问题漏洞 | |
| CVE-2014-6694 | Android 5SOS Family Planet应用程序加密问题漏洞 | |
| CVE-2014-6695 | Android Wedding Photo Frames-Love Pics应用程序加密问题漏洞 | |
| CVE-2014-6696 | Android Candy Girl Party Makeover应用程序加密问题漏洞 | |
| CVE-2014-6697 | Android Morocco Weather应用程序加密问题漏洞 | |
| CVE-2014-6698 | Android Galaxy Online 2应用程序加密问题漏洞 | |
| CVE-2014-6699 | Android Weather Channel应用程序加密问题漏洞 | |
| CVE-2014-6700 | Android NBA Game Time 2013-2014应用程序加密问题漏洞 | |
| CVE-2014-6701 | Android Vendormate Mobile应用程序加密问题漏洞 | |
| CVE-2014-3380 | Cisco Unified Communications Domain Manager Platform Software 安全漏洞 | |
| CVE-2014-5323 | Android Yuko Yuko应用程序加密问题漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2014-6271
暂无评论