CVE-2014-6271 PoC — GNU Bash 远程代码执行漏洞

Source

Associated Vulnerability

Title:GNU Bash 远程代码执行漏洞 (CVE-2014-6271)
Description:GNU Bash是美国软件开发者布莱恩-福克斯（Brian J. Fox）为GNU计划而编写的一个Shell（命令语言解释器），它运行于类Unix操作系统中（Linux系统的默认Shell），并能够从标准输入设备或文件中读取、执行命令，同时也结合了一部分ksh和csh的特点。 GNU Bash 4.3及之前版本中存在安全漏洞，该漏洞源于程序没有正确处理环境变量值内的函数定义。远程攻击者可借助特制的环境变量利用该漏洞执行任意代码。以下产品和模块可能会被利用：OpenSSH sshd中的ForceComman

Description

Salt recipe for  shellshock (CVE-2014-6271)

Readme

======================
shellshock bash update
======================

This recipe tries to upgrade bash from OS pkg, and falls back to 
compile bash on systems with no update available.

Works for us on old ubuntu/debian.

Bash install script from:
http://askubuntu.com/questions/528101/what-is-the-cve-2014-6271-bash-vulnerability-and-how-do-i-fix-it

Usage
=====

Can be used as an gitfs salt formula:

```yaml
fileserver_backend:
    - roots
    - git
 
gitfs_remotes:
    - git://github.com/APSL/salt-shellshock.git
```

Runit:

```sh
    $ sudo salt "oldubuntu" state.sls shellshock
```

---

bonus: Test shellshock from salt:

https://twitter.com/johan_moreau/status/515226448270213121

```
$ sudo salt -G 'kernel:Linux' cmd.run "env x='() { :;}; echo __bad' bash -c 'echo __good' 2>&1 |grep __"
```

File Snapshot


 [4.0K]  /data/pocs/c2cd2472c5557bbc219bbd7790b9573d0dcf01fd
├── [ 806]  README.md
└── [4.0K]  shellshock
    ├── [ 298]  init.sls
    └── [ 500]  install_bash.sh

1 directory, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!