This topic created in 4250 days ago, the information mentioned may be changed or developed.
Supplement 1 Sep 27, 2014
Supplement 2 Sep 30, 2014
CGI环境漏洞利用项目： https://github.com/cj1324/CGIShell
 | 1 iptux Sep 27, 2014 function import feature 还能这样利用 |
 | 2 Showfom PRO 哎 估计这个漏洞都是黑客玩坏了才丢出来的呢 |
 | 3 bcxx Sep 27, 2014 这补丁真有完没完啊 ~_~ |
 | 4 dearrrfish Sep 27, 2014 评论里关于这个是不是vulnerability 还在争论，很多人说这只是未明示的 feature 。 |
| 5 dearrrfish Sep 27, 2014 还好公司的服务没用 cgi，而且app 服务器大都是 ASG，直接 scale up 然后 terminate old servers 完事。不过剩下一些独立的 instances 还是让人 patch 到手软。 |
| 6 bcxx Sep 27, 2014 @dearrrfish 手软的在这里 ~_~ |
 | 7 wenLiangcan Sep 27, 2014 Arch 表示已收到更新~ @dearrrfish 在 4.3.026 已经不能这么做了，看来不是 feature... |
 | 8 xspoco Sep 27, 2014 没完没了了。。。 |
 | 9 palxex Sep 27, 2014 4.3.26测试还是有LZ提到的这个问题…… |
 | 10 est Sep 27, 2014 via Android 这个已经影响不如前几个大了。至少cgi会把环境变量都弄成大写 |
 | 11 clino Sep 27, 2014 刚发现尝试升级bash又有新版本了,但升了以后楼主的测试还是提示 vulnerable $ env ls='() { echo vulnerable; }' bash -c ls vulnerable $ bash --version GNU bash， 版本 4.3.11(1)-release (x86_64-pc-linux-gnu) Copyright (C) 2013 Free Software Foundation, Inc. 许可证 GPLv3+: GNU GPL 许可证版本3或者更高 <http://gnu.org/licenses/gpl.html> This is free software; you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. |
 | 12 jakes Sep 27, 2014 env ls='() { echo vulnerable; }' bash -c ls CentOS昨天的更新，正常。 GNU bash, version 4.2.45(1)-release (x86_64-redhat-linux-gnu) Copyright (C) 2011 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software; you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. |
| 13 clino Sep 28, 2014 今天更新了又有一版了,试了已经解决了这个问题了 |
Select Language