Vulnerabilityhigh
Shellshock and its early adopters
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2014-6271 | Arbitrary Code Execution in GNU Bash (Shellshock) | — | 100% | KEV | — KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| sha256 | 0fde4c72038189e3d86676d84a1370787bcd284f98d1dff7736707fe05af7d9a | f296957ee0a208003569647f04e585775be1f3992921af996b320cf520b 0fde4c72038189e3d86676d84a1370787bcd284f98d1dff7736707fe05af7d9a 3b13eef9b24919dc7e7071068a83defcc4808a41dc86fadf039e08dce11 |
| sha256 | 2d3e0be24ef668b85ed48e81ebb50dce50612fb8dce96879f80306701bc41614 | 95541c84965fa42c3e257bb349957b3be626dec9d55efcc6ebcba6fa489 2d3e0be24ef668b85ed48e81ebb50dce50612fb8dce96879f80306701bc41614 ae3b4f296957ee0a208003569647f04e585775be1f3992921af996b320c |
| sha256 | 3b13eef9b24919dc7e7071068a83defcc4808a41dc86fadf039e08dce1107f7d | c72038189e3d86676d84a1370787bcd284f98d1dff7736707fe05af7d9a 3b13eef9b24919dc7e7071068a83defcc4808a41dc86fadf039e08dce1107f7d 64b3751182be737c005fb04ffbe8b4dfe5930ed46066e87a9f6344de1d9 |
| sha256 | 64b3751182be737c005fb04ffbe8b4dfe5930ed46066e87a9f6344de1d9985b8 | ef9b24919dc7e7071068a83defcc4808a41dc86fadf039e08dce1107f7d 64b3751182be737c005fb04ffbe8b4dfe5930ed46066e87a9f6344de1d9985b8 |
| sha256 | 73b0d95541c84965fa42c3e257bb349957b3be626dec9d55efcc6ebcba6fa489 | flood !* LOLNOGTFO – Terminate backdoor. Related binaries: 73b0d95541c84965fa42c3e257bb349957b3be626dec9d55efcc6ebcba6fa489 2d3e0be24ef668b85ed48e81ebb50dce50612fb8dce96879f80306701bc |
| sha256 | ae3b4f296957ee0a208003569647f04e585775be1f3992921af996b320cf520b | be24ef668b85ed48e81ebb50dce50612fb8dce96879f80306701bc41614 ae3b4f296957ee0a208003569647f04e585775be1f3992921af996b320cf520b 0fde4c72038189e3d86676d84a1370787bcd284f98d1dff7736707fe05a |
From the original article
2 min read at securelist.com
Shortly after disclosure of the Bash bug called “ Shellshock ” we saw the first attempts by criminals to take advantage of this widespread vulnerability also known as CVE-2014-6271 . The most recent attempts we see to gain control of webservers just create a new instance of bash and redirect it to a remote server listening on a specific TCP port. This is also known as a reverse-connect-shell.
By @Securelist · securelist.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.