Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2014-6271 PoC — GNU Bash 远程代码执行漏洞

Source
https://github.com/npm/ansible-bashpocalypse
Associated Vulnerability
Title:GNU Bash 远程代码执行漏洞 (CVE-2014-6271)
Description:GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka "ShellShock." NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.
Description
Patch for CVE-2014-6271
Readme
# Patch for CVE-2014-6271

https://securityblog.redhat.com/2014/09/24/bash-specially-crafted-environment-variables-code-injection-attack/

# Usage

* install ansible on your local host.
* add the servers you wish to patch to inventory.
* run `ansible-playbook ./deploy.yml -i inventory`.
File Snapshot

 [4.0K]  /data/pocs/20731141503dfc840b8ba7ce5438ec819e279dcf
├── [  55]  ansible.cfg
├── [   2]  bcoe.bashpocalypse -> ./
├── [  63]  deploy.yml
├── [  91]  inventory
├── [ 731]  LICENSE.txt
├── [4.0K]  meta
│   └── [ 275]  main.yml
├── [ 288]  README.md
└── [4.0K]  tasks
    └── [ 202]  main.yml

3 directories, 7 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →