Bash vulnerability affecting web servers and many other services
A critical vulnerability, CVE-2014-6271 (aka Shell Shock), was found in bash september 24 by Stephane Chazelas. This issue would allow an attacker to execute arbitrary code on a system if he was able to set the value of a bash environment variable. This can also be done remotely.
The information at this time is quite limited so we wanted to try explain what’s going on and how to patch it.