Shellshock may still be lurking in CENTOS 7 Bash

Support for security such as Firewalls and securing linux
Post Reply
rkoppelh
Posts: 25
Joined: 2015/01/27 03:13:14
Location: Newcastle, NSW, Australia

Shellshock may still be lurking in CENTOS 7 Bash

Post by rkoppelh » 2015/01/27 22:03:59

Ladies & Gents

During recent Centos 7 install decided to confirm removal of shellshock bug and performed tests per attachment using website https://shellshocker.net/ as a guide.

Repeating suggested tests as appears mostly OK but testing individually refer last line. Suggests that CENTOS 7 bash still vulnerable to
Exploit 7 (CVE-2014-6277).

Since I am not an expert on this I am bringing to attention of security forum for further investigation by those with more expertise then I

Regards

User avatar
TrevorH
Site Admin
Posts: 33216
Joined: 2009/09/24 10:40:56
Location: Brighton, UK

Re: Shellshock may still be lurking in CENTOS 7 Bash

Post by TrevorH » 2015/01/28 08:28:20

The future appears to be RHEL or Debian. I think I'm going Debian.
Info for USB installs on http://wiki.centos.org/HowTos/InstallFromUSBkey
CentOS 5 and 6 are deadest, do not use them.
Use the FAQ Luke

Post Reply