Shellshock Exploit Affects Unix/Linux Systems

Shellshock Exploit Affects Unix/Linux Systems

A recent exploit in the bash shell, known as shellshock, is making headlines. Similar to the Heartbleed bug that reared its ugly head earlier this year, this one is very serious. Many Unix and Linux-based systems, including Red Hat and Mac OS X, use the bash shell by default. Shellshock is a flaw in the way the shell handles environment variables. Needless to say, there is a patch, but it will take quite a while to get it distributed to all the affected systems. In the mean time, most security professionals are recommending using a different shell like tcsh or csh until all the systems are fully patched.

About the Author

avatar KALE: A geek who works in the IT Security field and lives in Dallas, TX. He is also a music geek who has played in several local bands. Previous to his IT career, Kale worked as a photojournalist. He brings technical advice and artistic counterpoint to the podcast.