Shellshock (software bug) (English Wikipedia)

Strohm, Chris; Robertson, Jordan (30 September 2014). "Shellshock Draws Hacker Attacks, Sparks Race to Patch Bug". Businessweek. Retrieved 1 October 2014.{{cite web}}: CS1 maint: deprecated archival service (link)

carbon60.com (Global: low place; English: low place)

lists.archive.carbon60.com

Kyle George (27 September 2014). "qmail is a vector for CVE-2014-6271 (bash shellshock)". qmail (Mailing list).

dwheeler.com (Global: low place; English: low place)

"Shellshock". 13 February 2015. Retrieved 17 September 2016.

fedoraproject.org (Global: 9,728^th place; English: 9,210^th place)

lists.fedoraproject.org

"[SECURITY] Fedora 21 Update: bash-4.3.25-2.fc21". FedoraProject.org. 27 September 2014. Retrieved 2 November 2014.

futuresouth.us (Global: low place; English: low place)

"Yahoo! Shellshocked Like Ninja Turtles!". Archived from the original on 9 October 2014. Retrieved 7 October 2014.

gmane.org (Global: low place; English: low place)

thread.gmane.org

Chazelas, Stéphane (10 October 2014). "when was shellshock introduced". Stéphane Chazelas and Chet Ramey confirm the vulnerability introduction date on Bash official communication channel. Archived from the original on 20 December 2016. Retrieved 14 October 2014.

gnu.org (Global: 1,901^st place; English: 1,743^rd place)

ftp.gnu.org

"BASH PATCH REPORT". GNU.org. 12 September 2014. Retrieved 2 November 2014.
"BASH PATCH REPORT". GNU.org. 25 September 2014. Retrieved 2 November 2014.
"BASH PATCH REPORT". GNU.org. 25 September 2014. Retrieved 2 November 2014.

gnu.org

"Bash Reference Manual: Shell Functions". Retrieved 2 October 2014.

git.savannah.gnu.org

"Bash 4.3 source code, file variables.c, lines 315-388". Retrieved 2 October 2014.

lists.gnu.org

Ramey, Chet. "Re: CVE-2014-7187". lists.gnu.org.

golem.de (Global: 3,418^th place; English: low place)

Hanno Böck (7 October 2014). "Yahoo durch Shellshock angegriffen". Golem - IT-News für Profis (in German). Retrieved 30 October 2014.

heise.de (Global: 905^th place; English: 3,454^th place)

Staff (28 September 2014). "Shellshock, Part 3: Three more security problems in Bash (in german)". Heise Online. Retrieved 28 September 2014.

ibm.com (Global: 1,369^th place; English: 968^th place)

ibm.com

"IBM HMC is a vector for CVE-2014-6271 (bash "shellshock")". IBM. Archived from the original on 19 January 2020.

www-304.ibm.com

"Security Bulletin: Vulnerabilities in Bash affect DS8000 HMC (CVE-2014-6271, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187, CVE-2014-6277, CVE-2014-6278)". IBM. 3 October 2014. Retrieved 2 November 2014.

independent.co.uk (Global: 46^th place; English: 29^th place)

Boren, Zachary (6 October 2014). "Shellshock: Romanian hackers are accessing Yahoo servers, claims security expert". Independent. Retrieved 7 October 2014.

itnews.com.au (Global: low place; English: low place)

Saarinen, Juha (29 September 2014). "Further flaws render Shellshock patch ineffective". iTnews. Retrieved 29 September 2014.
Saarinen, Juha (26 September 2014). "First Shellshock botnet attacks Akamai, US DoD networks". iTnews. Retrieved 26 September 2014.

lcamtuf.blogspot.com (Global: low place; English: low place)

"Bash bug: the other two RCEs, or how we chipped away at the original fix (CVE-2014-6277 and '78)". lcamtuf blog. 1 October 2014. Retrieved 8 October 2014.

macrumors.com (Global: 2,597^th place; English: 1,823^rd place)

Clover, Juli (29 September 2014). "Apple Releases OS X Bash Update to Fix 'Shellshock' Security Flaw in Mavericks, Mountain Lion, and Lion". MacRumors.com. Retrieved 2 October 2014.
Slivka, Eric (30 September 2014). "Apple Releases OS X Yosemite Golden Master Candidate to Developers [Update: Also Public Beta]". MacRumors.com. Retrieved 2 October 2014.

nist.gov (Global: 708^th place; English: 742^nd place)

web.nvd.nist.gov

"Vulnerability Summary for CVE-2014-6271". NIST. 4 October 2014. Retrieved 8 October 2014.
Staff (27 September 2014). "National Cyber Awareness System Vulnerability Summary for CVE-2014-6277". National Institute of Standards and Technology. Retrieved 28 September 2014.
Staff (30 September 2014). "National Cyber Awareness System Vulnerability Summary for CVE-2014-6278". National Institute of Standards and Technology. Retrieved 1 October 2014.
Staff (29 September 2014). "National Cyber Awareness System Vulnerability Summary for CVE-2014-7186". National Institute of Standards and Technology. Retrieved 1 October 2014.
Staff (29 September 2014). "National Cyber Awareness System Vulnerability Summary for CVE-2014-7187". National Institute of Standards and Technology. Retrieved 1 October 2014.

nytimes.com (Global: 7^th place; English: 7^th place)

nytimes.com

Perlroth, Nicole (25 September 2014). "Security Experts Expect 'Shellshock' Software Bug in Bash to Be Significant". New York Times. Retrieved 25 September 2014.

bits.blogs.nytimes.com

Perlroth, Nicole (26 September 2014). "Companies Rush to Fix Shellshock Software Bug as Hackers Launch Thousands of Attacks". New York Times. Retrieved 29 September 2014.

oldlinux.org (Global: low place; English: low place)

Fox, Brian (21 March 1990). "Bash 1.05 ChangeLog". Archived from the original on 6 December 2023. Retrieved 14 October 2014.

opensuse.org (Global: low place; English: low place)

lists.opensuse.org

"SUSE Security Update: Security update for bash". OpenSUSE. 28 September 2014. Retrieved 2 November 2014.

openwall.com (Global: low place; English: low place)

Weimer, Florian (25 September 2014). "Re: CVE-2014-6271: remote code execution through bash". Openwall Project. Retrieved 2 November 2014.

pcworld.com (Global: 1,889^th place; English: 1,323^rd place)

Constatin, Lucian (29 September 2014). "Improved patch tackles new Shellshock Bash bug attack vectors". PC World. Retrieved 1 October 2014.

qualys.com (Global: low place; English: low place)

blog.qualys.com

Wolfgang Kandek (24 September 2014). "The Laws of Vulnerabilities". Qualys.com. Archived from the original on 3 May 2016. Retrieved 26 September 2014.

redhat.com (Global: 6,005^th place; English: 4,993^rd place)

securityblog.redhat.com

"Bash specially-crafted environment variables code injection attack". Red Hat Security. Retrieved 2 October 2014.

rhn.redhat.com

"Important: bash security update". Red Hat. 30 September 2014. Retrieved 2 November 2014.

access.redhat.com

"Bash Code Injection Vulnerability via Specially Crafted Environment Variables (CVE-2014-6271, CVE-2014-7169)". Red Hat. 2 October 2014. Retrieved 2 November 2014.

seclists.org (Global: low place; English: low place)

Florian Weimer (24 September 2014). "Re: CVE-2014-6271: remote code execution through bash". oss-sec (Mailing list). Retrieved 1 November 2014.
Florian Weimer (24 September 2014). "Re: CVE-2014-6271: remote code execution through bash". oss-sec (Mailing list). Retrieved 1 November 2014.

stackexchange.com (Global: 4,114^th place; English: 3,027^th place)

unix.stackexchange.com

Chazelas, Stéphane (25 September 2014). "When was the shellshock (CVE-2014-6271/7169) bug introduced, and what is the patch that fully fixes it?".

technologyreview.com (Global: 2,515^th place; English: 1,716^th place)

Cerrudo, Cesar (30 September 2014). "Why the Shellshock Bug Is Worse than Heartbleed". MIT Technology Review. Retrieved 1 October 2014.

theregister.co.uk (Global: 1,877^th place; English: 1,233^rd place)

Leyden, John (24 September 2014). "Patch Bash NOW: 'Shell Shock' bug blasts OS X, Linux systems wide open". The Register. Retrieved 25 September 2014.

thesafemac.com (Global: low place; English: low place)

Although described in some sources as a "virus," Shellshock is instead a design flaw in a program that comes with some operating systems. See => Staff (25 September 2014). "What does the "Shellshock" bug affect?". The Safe Mac. Archived from the original on 29 September 2014. Retrieved 27 September 2014.

ubuntu.com (Global: 3,845^th place; English: 4,505^th place)

"USN-2364-1: Bash vulnerabilities". Canonical Ltd. 27 September 2014. Retrieved 2 November 2014.

web.archive.org (Global: 1^st place; English: 1^st place)

Although described in some sources as a "virus," Shellshock is instead a design flaw in a program that comes with some operating systems. See => Staff (25 September 2014). "What does the "Shellshock" bug affect?". The Safe Mac. Archived from the original on 29 September 2014. Retrieved 27 September 2014.
Fox, Brian (21 March 1990). "Bash 1.05 ChangeLog". Archived from the original on 6 December 2023. Retrieved 14 October 2014.
Chazelas, Stéphane (10 October 2014). "when was shellshock introduced". Stéphane Chazelas and Chet Ramey confirm the vulnerability introduction date on Bash official communication channel. Archived from the original on 20 December 2016. Retrieved 14 October 2014.
"Yahoo! Shellshocked Like Ninja Turtles!". Archived from the original on 9 October 2014. Retrieved 7 October 2014.
Wolfgang Kandek (24 September 2014). "The Laws of Vulnerabilities". Qualys.com. Archived from the original on 3 May 2016. Retrieved 26 September 2014.
"IBM HMC is a vector for CVE-2014-6271 (bash "shellshock")". IBM. Archived from the original on 19 January 2020.

wired.com (Global: 254^th place; English: 178^th place)

Greenberg, Andy (25 September 2014). "Hackers Are Already Using the Shellshock Bug to Launch Botnet Attacks". Wired. Retrieved 28 September 2014.

zdnet.com (Global: 1,235^th place; English: 855^th place)

Seltzer, Larry (29 September 2014). "Shellshock makes Heartbleed look insignificant". ZDNet. Retrieved 29 September 2014.
Vaughan-Nichols, Steven (27 September 2014). "Shellshock: Better 'bash' patches now available". ZDNet. Retrieved 29 September 2014.

Shellshock (software bug) (English Wikipedia)

apache.org (Global: 4,440th place; English: 3,599th place)

httpd.apache.org

arstechnica.com (Global: 473rd place; English: 338th place)

bbc.com (Global: 26th place; English: 23rd place)

businessweek.com (Global: 945th place; English: 628th place)

carbon60.com (Global: low place; English: low place)

lists.archive.carbon60.com

dwheeler.com (Global: low place; English: low place)

fedoraproject.org (Global: 9,728th place; English: 9,210th place)

lists.fedoraproject.org

futuresouth.us (Global: low place; English: low place)

gmane.org (Global: low place; English: low place)

thread.gmane.org

gnu.org (Global: 1,901st place; English: 1,743rd place)

ftp.gnu.org

gnu.org

git.savannah.gnu.org

lists.gnu.org

golem.de (Global: 3,418th place; English: low place)

heise.de (Global: 905th place; English: 3,454th place)

ibm.com (Global: 1,369th place; English: 968th place)

ibm.com

www-304.ibm.com

independent.co.uk (Global: 46th place; English: 29th place)

itnews.com.au (Global: low place; English: low place)

lcamtuf.blogspot.com (Global: low place; English: low place)

macrumors.com (Global: 2,597th place; English: 1,823rd place)

nist.gov (Global: 708th place; English: 742nd place)

web.nvd.nist.gov

nytimes.com (Global: 7th place; English: 7th place)

nytimes.com

bits.blogs.nytimes.com

oldlinux.org (Global: low place; English: low place)

opensuse.org (Global: low place; English: low place)

lists.opensuse.org

openwall.com (Global: low place; English: low place)

pcworld.com (Global: 1,889th place; English: 1,323rd place)

qualys.com (Global: low place; English: low place)

blog.qualys.com

redhat.com (Global: 6,005th place; English: 4,993rd place)

securityblog.redhat.com

rhn.redhat.com

access.redhat.com

seclists.org (Global: low place; English: low place)

stackexchange.com (Global: 4,114th place; English: 3,027th place)

unix.stackexchange.com

technologyreview.com (Global: 2,515th place; English: 1,716th place)

theregister.co.uk (Global: 1,877th place; English: 1,233rd place)

thesafemac.com (Global: low place; English: low place)

ubuntu.com (Global: 3,845th place; English: 4,505th place)

web.archive.org (Global: 1st place; English: 1st place)

wired.com (Global: 254th place; English: 178th place)

zdnet.com (Global: 1,235th place; English: 855th place)

apache.org (Global: 4,440^th place; English: 3,599^th place)

arstechnica.com (Global: 473^rd place; English: 338^th place)

bbc.com (Global: 26^th place; English: 23^rd place)

businessweek.com (Global: 945^th place; English: 628^th place)

fedoraproject.org (Global: 9,728^th place; English: 9,210^th place)

gnu.org (Global: 1,901^st place; English: 1,743^rd place)

golem.de (Global: 3,418^th place; English: low place)

heise.de (Global: 905^th place; English: 3,454^th place)

ibm.com (Global: 1,369^th place; English: 968^th place)

independent.co.uk (Global: 46^th place; English: 29^th place)

macrumors.com (Global: 2,597^th place; English: 1,823^rd place)

nist.gov (Global: 708^th place; English: 742^nd place)

nytimes.com (Global: 7^th place; English: 7^th place)

pcworld.com (Global: 1,889^th place; English: 1,323^rd place)

redhat.com (Global: 6,005^th place; English: 4,993^rd place)

stackexchange.com (Global: 4,114^th place; English: 3,027^th place)

technologyreview.com (Global: 2,515^th place; English: 1,716^th place)

theregister.co.uk (Global: 1,877^th place; English: 1,233^rd place)

ubuntu.com (Global: 3,845^th place; English: 4,505^th place)

web.archive.org (Global: 1^st place; English: 1^st place)

wired.com (Global: 254^th place; English: 178^th place)

zdnet.com (Global: 1,235^th place; English: 855^th place)