Skip to content

test script for shellshocker and related vulnerabilities

License

Notifications You must be signed in to change notification settings

hammerandtongs/bashcheck

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

13 Commits
 
 
 
 
 
 

Repository files navigation

bashcheck

Test script for Shellshock and related vulnerabilities

background

The Bash vulnerability that is now known as Shellshock had an incomplete fix at first. There are currently 4 public and one supposedly non-public vulnerability.

usage

Just run script: ./bashcheck

CVE-2014-6271

The original vulnerability.

CVE-2014-7169

Further parser error, found by Tavis Ormandy (taviso).

CVE-2014-7186

Out of bound memory read error in redir_stack.

CVE-2014-7187

Off-by-one error in nested loops. (check only works when Bash is built with -fsanitize=address)

CVE-2014-6277

Not yet published parser bug by Michal Zalewski (lcamtuf).

CVE-2014-6278

Another not yet published parser bug by Michal Zalewski (lcamtuf).

About

test script for shellshocker and related vulnerabilities

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published