GNU Bash Environment Variable Handling RCE Vulnerability (Shellshock, HTTP, CVE-2014-6271/CVE-2014-6278) - Active Check
- Severity
- Not available
- Vulnerability description
- Not available
- Risk description
- Not available
- Recommendation
- Not available
- References
- https://access.redhat.com/security/vulnerabilities/shellshockhttp://www.securityfocus.com/bid/70103https://access.redhat.com/solutions/1207723https://bugzilla.redhat.com/show_bug.cgi?id=1141597https://web.archive.org/web/20210420171418/https://blogs.akamai.com/2014/09/environment-bashing.htmlhttps://blog.qualys.com/vulnerabilities-threat-research/2014/09/24/bash-shellshock-vulnerabilityhttps://blog.qualys.com/vulnerabilities-threat-research/2014/09/24/bash-remote-code-execution-vulnerability-cve-2014-6271https://web.archive.org/web/20150913063755/https://shellshocker.net/https://github.com/wreiske/shellshockerhttp://www.kb.cert.org/vuls/id/252743https://www.cisa.gov/known-exploited-vulnerabilities-catalog
- Codename
- Not available
- Detectable with
- Network Scanner
- Scan engine
- OpenVAS
- Cisa Kev
Yes- Exploitable with Sniper
- No
- CVE Published
- Not available
- Detection added at
- Software Type
- Not available
- Vendor
- Not available
- Product
- Not available
Detect & validate this vulnerability
Go beyond surface scans. Get real validation with proprietary tools designed to prove what’s exploitable in your environment.