Why the bash vulnerability is such a big deal !!
Look at some of the below points:-
- is embedded and accessed in so many ways that we cannot fully understand its depth of use. Many systems you would never think of as having a command line use to run other programs. I have used it myself, a bunch, in programs I have written – and I barely code. We cannot possibly understand all the ways an attacker could interact with to exploit this vulnerability.
- A workable bug that can exploit public web servers is scary. We don’t know for sure, but it looks very very possible.
- There are rumours the patch may be incomplete.
- There is already a Metasploit module.
Enterprise Risk Management | Internal Audit | Global Compliance
10 年Previous patch was a fail !!!