- Products
- Network Security
Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
Security ServicesComprehensive security for your network security solution
Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
Capture ATPMulti-engine advanced threat detection
Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
Secure Mobile AccessRemote, best-in-class, secure access
Wireless Access PointsEasy to manage, fast and secure Wi-FI
SwitchesHigh-speed network switching for business connectivity
- Email Security
Email SecurityProtect against today’s advanced email threats
- Cloud Security
Cloud App SecurityVisibility and security for Cloud Apps
Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
Capture ClientStop advanced threats and rollback the damage caused by malware
Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
-
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
-
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
-
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
-
- Support Widget
- Products
- Network Security
- Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
- Security ServicesComprehensive security for your network security solution
- Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
- Capture ATPMulti-engine advanced threat detection
- Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
- Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
- Secure Mobile AccessRemote, best-in-class, secure access
- Wireless Access PointsEasy to manage, fast and secure Wi-FI
- SwitchesHigh-speed network switching for business connectivity
- Email Security
- Email SecurityProtect against today’s advanced email threats
- Cloud Security
- Cloud App SecurityVisibility and security for Cloud Apps
- Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
- Capture ClientStop advanced threats and rollback the damage caused by malware
- Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
-
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
-
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
-
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
-
- Support Widget
What is ShellShock?
03/26/2020 
7 People found this article helpful
98,055 Views
Description
What is ShellShock?
Resolution
Firmware/Software Version: All versions.
What is ShellShock?
ShellShock is a vulnerability that affects the well known Unix/Linux shell environment called Bash (Bourne-again shell). Bash is distributed widely in the GNU operating system and is a default shell on some operating systems. Bash is a command processor, typically in a command text window, where a user can type commands resulting or execute instructions from command script files. The ShellShock vulnerability causes Bash to unintentionally or intentionally execute commands when commands are appended to the of function definitions stored in the values of environment variables. This vulnerability was discovered around mid September in 2014 but had most likely existed since the early days of Bash (1992).
The ShellShock vulnerability has the potential to compromise many servers and other systems and has been compared to the Heartbleed vulnerability in terms of serverity. After the disclosure of the ShellShock vulnerability, attackers within hours of disclosure had already exploited this by creating botnets to implement distributed denial-of-service (DDoS) attacks and vulnerability scanning attacks. In the days after the disclosure of ShellShock, millions of probes and attacks related to ShellShock was discovered by various security companies.
The National Vulnerability Database is tracking ShellShock with (CVE-2014-6271), dated 09/24/2014.
The ShellShock vulnerability has the potential to compromise many servers and other systems and has been compared to the Heartbleed vulnerability in terms of serverity. After the disclosure of the ShellShock vulnerability, attackers within hours of disclosure had already exploited this by creating botnets to implement distributed denial-of-service (DDoS) attacks and vulnerability scanning attacks. In the days after the disclosure of ShellShock, millions of probes and attacks related to ShellShock was discovered by various security companies.
The National Vulnerability Database is tracking ShellShock with (CVE-2014-6271), dated 09/24/2014.
CVE-2014-6271 summary:
"GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka "ShellShock." NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix."
The National Vulnerability Database has a list of vulnerabilities under the ShellShock umbrella and more maybe added:
Related Articles
- Configuring Device Management based on Device ID for SMA 100
- CT with Device Guard is stuck on Identifying when GVC Client is installed
- SMA1000: CT compatibility with 3rd party VPN clients like GVC, Citrix and Fortinet
YES
NO