{"id":135,"date":"2014-12-10T16:46:10","date_gmt":"2014-12-10T15:46:10","guid":{"rendered":"http:\/\/www.perrini.ch\/?p=135"},"modified":"2014-12-10T16:51:55","modified_gmt":"2014-12-10T15:51:55","slug":"are-you-shellshocked","status":"publish","type":"post","link":"https:\/\/www.perrini.ch\/?p=135","title":{"rendered":"Are you Shellshock(ed)?"},"content":{"rendered":"\n
Tweet<\/a><\/div>\n

The Shellshock bash bug is a critical security hole for all Unix, Linux and *nix based systems. Bash(Unix Shell) is a piece of Software released by Brian Fox\u00a0in 1989 for the GNU Project.<\/p>\n

The bug can affect you trough malicious requests sent to web servers or network devices.<\/p>\n

A number of Cisco products use an affected version of the Bash shell.<\/p>\n

Cisco made an official statement that meraki devices\u00a0are not affected from the Shellshock and Heartbleed vulnerability. See detailed information at the official cisco website.<\/p>\n

Cisco Meraki Shellshock<\/a>
\nCisco Meraki Heartbleed<\/a><\/p>\n

There is a very simple test to check \u00a0if you are vulnerable. Run the following lines in your default shell.<\/p>\n

env x=\"() { :;} ; echo vulnerable\" \/bin\/sh -c \"echo stuff\"\r\nenv x=\"() { :;} ; echo vulnerable\" 'which bash' -c \"echo completed\"<\/pre>\n
Network Application, Service, and Acceleration<\/strong><\/em><\/p>\n