一、检测方法1、redhat、centos 运行命令: $ env x='() { :;}; echo vulnerable' bash -c "echo this is a test" 2.debian、ubuntu 运行命令: $ sudo env x='() { :;}; echo vulnerable' bash -c "echo this is a test" 如果返回以下内容:则请尽快升级。 vulnerable this is test 二、解决方案—升级bash1、redhat、centos 运行: 1. #yum clean all 2. #yum -y update bash
2.debian、ubuntu 运行: $sudo apt-get update $sudo apt-get upgrade 最后测试(以ubuntu为例): 1. test@bogon:~$ sudo env x="() { :;}; echo vulnerable" bash -c "echo this is test" 2. bash: warning: x: ignoring function definition attempt 3. bash: error importing function definition for `x' 4. this is test
返回以上内容表示已升级成功
|