Security reinforcement of Bash vulnerabilities
Bash vulnerability reinforcement Scheme
1 vulnerability description
Security reinforcement was done some time ago, using Green Alliance's BVS scanning host. According to the scanned report, there are two kinds of Bash vulnerabilities, namely:
① GNU Bash environment variable remote command execution vulnerability (CVE-2014-6271)
GNU Bash 4.3 and previous versions have a security vulnerability when evaluating some constructed environment variables, which can be triggered by adding extra strings to the function definition in the value of the environment variable. * * users can use this vulnerability to change or bypass environment restrictions to execute shell commands.
② GNU BashCVE-2014-6271 incomplete fix remote code execution vulnerability (CVE-2014-7169)
Affected system: GNU Bash
