How do I determine if my Mac or Linux is vulnerable to Shellshock attacks?

Source: Internet
Author: User
Tags function definition

Shellshock, a recently discovered bash vulnerability that allows attackers to inject code into your machine. This makes Mac OS and Linux under threat of malicious attack. So how do I determine if my Mac or Linux is vulnerable to Shellshock attacks? Believe that a lot of fruit powder is now worried about this ask, let's talk about how to determine if your machine is vulnerable to attack.

Shellshock uses bash scripts to access your computer. Just this, it can run programs, open Services, and receive files on your machine. This script mainly affects the UNIX based operating system, so the Linux system and Mac OS have no doubt been shot.

You can test the system by entering the following command in the terminal:

Env x= ' () {:;}; echo vulnerable ' bash-c ' echo this is a test

If your computer doesn't have an attack, you should see it return:

BASH:WARNING:X: Ignoring function definition attempt bash:error importing function definition for ' x '-a test

If there is a hidden danger of being attacked, the output will be as follows:

Vulnerable this is a test

You can then use the following command line to check your bash version:

Bash--version

If the result is that you are using a bash shell with a release number of 3.2.51 (1)-release, it means you need to upgrade. Most Linux distributions already have patches available. You can refer to some tutorials on the web for upgrades. If you are a Mac OS user, you will need to spend some time waiting for Apple's new patches, but you can also update them manually based on this article.

The above is my Mac or Linux is vulnerable to Shellshock attack view way, I hope to help!

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.