Archive

Archive for October, 2014

Ubuntu 12.04 LTS Shellshocked

October 6, 2014 Leave a comment

I have a couple of servers running Ubuntu Linux 12.04 LTS that are not getting the new release of bash that resolves the shellshock bug through the standard update mechanism apt-get.

The solution is to download the package and install it manually.

  1. Download the package from http://packages.ubuntu.com/precise/amd64/bash/download
  2. Run the following command to install it:
    sudo dpkg -i bash_4.2-2ubuntu2.5_amd64.deb
  3. You can run the following command to see if you are vulnerable – no output is good!
    x='() { :;};echo Vulnerable!' bash -c true
Advertisements
Categories: Linux