OS-OTHER Bash CGI environment variable injection attempt

IPS-NPA

1 SID: 300055

Description

Detects an attempt to exploit CVE-2014-6271, CVE-2014-6277, CVE-2014-6278, and CVE-2014-7169, a known vulnerability that can compromise the target in Bash CGI environment variable.

CVEs

CVE-2014-6271 CVE-2014-6277 CVE-2014-6278 CVE-2014-7169

Related malware families

CVE-2014-6271 Bash

Related blogs

Shellshock and Your Enterprise Cloud Apps – Watch Out for Half-baked Patches

September 25, 20141 min read