Are you vulnerable to Shellshock

The recently reported Bash vulnerability Shellshock should be tackled as soon as possible on all Unix based systems. For me it was my personal server, client servers, desktops, laptops and all servers in our production cluster. That’s a lot of servers.

env x='() { :;}; echo vulnerable' bash -c 'echo this is a test'

If you’re vulnerable you’ll see

vulnerable
this is a test

If you’re all good you’ll see

bash: warning: x: ignoring function definition attempt
bash: error importing function definition for `x'
this is a test

If you’re vulnerable take steps to upgrade bash as soon as possible.