mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-15 07:40:25 +02:00
0xMarcio
41 lines
2.3 KiB
Markdown
41 lines
2.3 KiB
Markdown
### [CVE-2014-6277](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6277)
|
|
|
|
|
|
|
|
|
|
### Description
|
|
|
|
GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized memory access, and untrusted-pointer read and write operations) via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271 and CVE-2014-7169.
|
|
|
|
### POC
|
|
|
|
#### Reference
|
|
- http://lcamtuf.blogspot.com/2014/10/bash-bug-how-we-finally-cracked.html
|
|
- http://packetstormsecurity.com/files/128567/CA-Technologies-GNU-Bash-Shellshock.html
|
|
- http://www-01.ibm.com/support/docview.wss?uid=swg21685733
|
|
- http://www.qnap.com/i/en/support/con_show.php?cid=61
|
|
- https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c04518183
|
|
|
|
#### Github
|
|
- https://github.com/EvanK/shocktrooper
|
|
- https://github.com/IZAORICASTm/CHARQITO_NET
|
|
- https://github.com/MrCl0wnLab/ShellShockHunter
|
|
- https://github.com/demining/ShellShock-Attack
|
|
- https://github.com/giterlizzi/secdb-feeds
|
|
- https://github.com/googleinurl/Xpl-SHELLSHOCK-Ch3ck
|
|
- https://github.com/hannob/bashcheck
|
|
- https://github.com/ido/macosx-bash-92-shellshock-patched
|
|
- https://github.com/inspirion87/w-test
|
|
- https://github.com/jdauphant/patch-bash-shellshock
|
|
- https://github.com/mrash/afl-cve
|
|
- https://github.com/mubix/shellshocker-pocs
|
|
- https://github.com/mudongliang/LinuxFlaw
|
|
- https://github.com/oneoy/cve-
|
|
- https://github.com/opragel/shellshockFixOSX
|
|
- https://github.com/readloud/ShellShockHunter-v1.0
|
|
- https://github.com/swapravo/cvesploit
|
|
- https://github.com/trhacknon/Xpl-SHELLSHOCK-Ch3ck
|
|
- https://github.com/unixorn/shellshock-patch-osx
|
|
- https://github.com/xdistro/ShellShock
|
|
|