# www.mondounix.com - ShellShock bash patch source mkdir /tmp/bash cd /tmp/bash wget http://ftp.gnu.org/gnu/bash/bash-4.3.tar.gz for i in $(seq -f "%03g" 0 30); do wget http://ftp.gnu.org/gnu/bash/bash-4.3-patches/bash43-$i; done tar zxvf bash-4.3.tar.gz cd bash-4.3 for i in $(seq -f "%03g" 0 30);do patch -p0 < ../bash43-$i; done ./configure make make install rm -rf /tmp/bash |
TEST:
# www.mondounix.com - ShellShock Vulnerability test CVE-2014-6271 (original shellshock): not vulnerable CVE-2014-6277 (segfault): not vulnerable CVE-2014-6278 (Florian's patch): not vulnerable CVE-2014-7169 (taviso bug): not vulnerable CVE-2014-7186 (redir_stack bug): not vulnerable CVE-2014-7187 (nested loops off by one): not vulnerable CVE-2014-//// (exploit 3 on http://shellshocker.net/): not vulnerable |
Fonte: http://shellshocker.net
(61)