How to test if my server is vulnerable to the ShellShock bug?
To check for the CVE-2014-6271 vulnerability env x='() { :;}; echo vulnerable’ bash -c “echo this is a test” it should NOT echo back the word vulnerable. To check for the CVE-2014-7169 vulnerability (warning: if yours fails it will make or overwrite a file called /tmp/echo that you can delete after, and need to delete … Read more