9.8 - CVE-2014-6271

Executive Summary

This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.

Informations
Name	CVE-2014-6271	First vendor Publication	2014-09-24
Vendor	Cve	Last vendor Modification	2021-11-17

Security-Database Scoring CVSS v3

Cvss vector : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Overall CVSS Score	9.8
Base Score	9.8	Environmental Score	9.8
impact SubScore	5.9	Temporal Score	9.8
Exploitabality Sub Score	3.9

Attack Vector	Network	Attack Complexity	Low
Privileges Required	None	User Interaction	None
Scope	Unchanged	Confidentiality Impact	High
Integrity Impact	High	Availability Impact	High
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:C/I:C/A:C)
Cvss Base Score	10	Attack Range	Network
Cvss Impact Score	10	Attack Complexity	Low
Cvss Expoit Score	10	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka "ShellShock." NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6271

CWE : Common Weakness Enumeration

%	Id	Name
100 %	CWE-78	Improper Sanitization of Special Elements used in an OS Command ('OS Command Injection') (CWE/SANS Top 25)

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:26521

Oval ID:	oval:org.mitre.oval:def:26521
Title:	RHSA-2014:1293: bash security update (Critical)
Description:	The GNU Bourne Again shell (Bash) is a shell and command language interpreter compatible with the Bourne shell (sh). Bash is the default shell for Red Hat Enterprise Linux. A flaw was found in the way Bash evaluated certain specially crafted environment variables. An attacker could use this flaw to override or bypass environment restrictions to execute shell commands. Certain services and applications allow remote unauthenticated attackers to provide environment variables, allowing them to exploit this issue. (CVE-2014-6271) For additional information on the CVE-2014-6271 flaw, refer to the Knowledgebase article at https://access.redhat.com/articles/1200223 Red Hat would like to thank Stephane Chazelas for reporting this issue. All bash users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue.
Family:	unix	Class:	patch
Reference(s):	RHSA-2014:1293-00 CESA-2014:1293 CVE-2014-6271	Version:	3
Platform(s):	Red Hat Enterprise Linux 6 Red Hat Enterprise Linux 5 Red Hat Enterprise Linux 7 CentOS Linux 5 CentOS Linux 6 CentOS Linux 7	Product(s):	bash
Definition Synopsis:
Operation system section Redhat 6 or Centos 6 release The operating system installed on the system is Red Hat Enterprise Linux 6 AND The operating system installed on the system is CentOS Linux 6.x Packages section bash is earlier than 0:4.1.2-15.el6_5.1 AND bash-doc is earlier than 0:4.1.2-15.el6_5.1 AND Operation system section Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x AND bash is earlier than 0:3.2-33.el5.1 AND Operation system section Redhat 7 or Centos 7 release The operating system installed on the system is Red Hat Enterprise Linux 7 AND The operating system installed on the system is CentOS Linux 7.x Packages section bash is earlier than 0:4.2.45-5.el7_0.2 AND bash-doc is earlier than 0:4.2.45-5.el7_0.2

Definition Id: oval:org.mitre.oval:def:26539

Oval ID:	oval:org.mitre.oval:def:26539
Title:	USN-2362-1 -- bash vulnerability
Description:	Bash allowed bypassing environment restrictions in certain environments.
Family:	unix	Class:	patch
Reference(s):	USN-2362-1 CVE-2014-6271	Version:	3
Platform(s):	Ubuntu 14.04 Ubuntu 12.04 Ubuntu 10.04	Product(s):	bash
Definition Synopsis:
Ubuntu 14.04 release section Ubuntu 14.04 is installed AND bash DPKG is earlier than 0:4.3-7ubuntu1.1 AND Ubuntu 12.04 release section Ubuntu 12.04 is installed AND bash DPKG is earlier than 0:4.2-2ubuntu2.2 AND Ubuntu 10.04 release section Ubuntu 10.04 is installed AND bash DPKG is earlier than 0:4.1-2ubuntu3.1

Definition Id: oval:org.mitre.oval:def:26642

Oval ID:	oval:org.mitre.oval:def:26642
Title:	DSA-3032-1 bash - security update
Description:	Stephane Chazelas discovered a vulnerability in bash, the GNU Bourne-Again Shell, related to how environment variables are processed. In many common configurations, this vulnerability is exploitable over the network, especially if bash has been configured as the system shell.
Family:	unix	Class:	patch
Reference(s):	DSA-3032-1 CVE-2014-6271	Version:	3
Platform(s):	Debian GNU/Linux 7.0 Debian GNU/kFreeBSD 7.0	Product(s):	bash
Definition Synopsis:
Debian 7 is installed GNU/Linux or GNU/kFreeBSD kernel Debian GNU/Linux is installed AND Debian GNU/kFreeBSD is installed AND bash DPKG is earlier than 0:4.2+dfsg-0.1+deb7u1

Definition Id: oval:org.mitre.oval:def:26665

Oval ID:	oval:org.mitre.oval:def:26665
Title:	DSA-3035-1 bash - security update
Description:	Tavis Ormandy discovered that the patch applied to fix <a href="https://security-tracker.debian.org/tracker/CVE-2014-6271">CVE-2014-6271</a> released in DSA-3032-1 for bash, the GNU Bourne-Again Shell, was incomplete and could still allow some characters to be injected into another environment (<a href="https://security-tracker.debian.org/tracker/CVE-2014-7169">CVE-2014-7169</a>). With this update prefix and suffix for environment variable names which contain shell functions are added as hardening measure.
Family:	unix	Class:	patch
Reference(s):	DSA-3035-1 CVE-2014-7169 CVE-2014-6271	Version:	3
Platform(s):	Debian GNU/Linux 7.0 Debian GNU/kFreeBSD 7.0	Product(s):	bash
Definition Synopsis:
Debian 7 is installed GNU/Linux or GNU/kFreeBSD kernel Debian GNU/Linux is installed AND Debian GNU/kFreeBSD is installed AND bash DPKG is earlier than 0:4.2+dfsg-0.1+deb7u3

Definition Id: oval:org.mitre.oval:def:26685

Oval ID:	oval:org.mitre.oval:def:26685
Title:	ELSA-2014-1294 -- bash security update (Critical)
Description:	The GNU Bourne Again shell (Bash) is a shell and command language interpreter compatible with the Bourne shell (sh). Bash is the default shell for Red Hat Enterprise Linux. A flaw was found in the way Bash evaluated certain specially crafted environment variables. An attacker could use this flaw to override or bypass environment restrictions to execute shell commands. Certain services and applications allow remote unauthenticated attackers to provide environment variables, allowing them to exploit this issue. (CVE-2014-6271) For additional information on the CVE-2014-6271 flaw, refer to the Knowledgebase article at <A HREF="https://access.redhat.com/articles/1200223">https://access.redhat.com/articles/1200223</A> Red Hat would like to thank Stephane Chazelas for reporting this issue. All bash users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue.
Family:	unix	Class:	patch
Reference(s):	ELSA-2014-1294 CVE-2014-6271	Version:	3
Platform(s):	Oracle Linux 4	Product(s):	bash
Definition Synopsis:
Oracle Linux 4.x AND bash RPM is earlier than 0:3.0-27.0.1.el4

Definition Id: oval:org.mitre.oval:def:26764

Oval ID:	oval:org.mitre.oval:def:26764
Title:	Vulnerability affecting GNU Bash
Description:	GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka "ShellShock." NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2014-6271	Version:	4
Platform(s):	Sun Solaris 10	Product(s):
Definition Synopsis:
Patch 126546-06 or later installed Solaris 10 (SPARC) is installed AND NOT Patch 126546-06 or later installed OR Patch 126547-06 or later installed Solaris 10 (x86) is installed AND NOT Patch 126547-06 or later installed

Definition Id: oval:org.mitre.oval:def:26923

Oval ID:	oval:org.mitre.oval:def:26923
Title:	ELSA-2014-1293 -- bash security update (Critical)
Description:	The GNU Bourne Again shell (Bash) is a shell and command language interpreter compatible with the Bourne shell (sh). Bash is the default shell for Red Hat Enterprise Linux. A flaw was found in the way Bash evaluated certain specially crafted environment variables. An attacker could use this flaw to override or bypass environment restrictions to execute shell commands. Certain services and applications allow remote unauthenticated attackers to provide environment variables, allowing them to exploit this issue. (CVE-2014-6271) For additional information on the CVE-2014-6271 flaw, refer to the Knowledgebase article at <A HREF="https://access.redhat.com/articles/1200223">https://access.redhat.com/articles/1200223</A> Red Hat would like to thank Stephane Chazelas for reporting this issue. All bash users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue.
Family:	unix	Class:	patch
Reference(s):	ELSA-2014-1293 CVE-2014-6271	Version:	3
Platform(s):	Oracle Linux 6 Oracle Linux 7 Oracle Linux 5	Product(s):	bash
Definition Synopsis:
Oracle Linux 6 release section Oracle Linux 6.x Packages match section bash RPM is earlier than 0:4.1.2-15.el6_5.1 AND bash-doc RPM is earlier than 0:4.1.2-15.el6_5.1 AND Oracle Linux 7 release section Oracle Linux 7.x Packages match section bash RPM is earlier than 0:4.2.45-5.el7_0.2 AND bash-doc RPM is earlier than 0:4.2.45-5.el7_0.2 AND Oracle Linux 5 release section Oracle Linux 5.x AND bash RPM is earlier than 0:3.2-33.el5.1

Definition Id: oval:org.mitre.oval:def:27118

Oval ID:	oval:org.mitre.oval:def:27118
Title:	ELSA-2014-1306 -- bash security update (Important)
Description:	The GNU Bourne Again shell (Bash) is a shell and command language interpreter compatible with the Bourne shell (sh). Bash is the default shell for Red Hat Enterprise Linux. It was found that the fix for CVE-2014-6271 was incomplete, and Bash still allowed certain characters to be injected into other environments via specially crafted environment variables. An attacker could potentially use this flaw to override or bypass environment restrictions to execute shell commands. Certain services and applications allow remote unauthenticated attackers to provide environment variables, allowing them to exploit this issue. (CVE-2014-7169) Applications which directly create bash functions as environment variables need to be made aware of changes to the way names are handled by this update. Note that certain services, screen sessions, and tmux sessions may need to be restarted, and affected interactive users may need to re-login. Installing these updated packages without restarting services will address the vulnerability, but functionality may be impacted until affected services are restarted. For more information see the Knowledgebase article at <A HREF="https://access.redhat.com/articles/1200223">https://access.redhat.com/articles/1200223</A> Note: Docker users are advised to use "yum update" within their containers, and to commit the resulting changes. For additional information on CVE-2014-6271 and CVE-2014-7169, refer to the aforementioned Knowledgebase article. All bash users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue.
Family:	unix	Class:	patch
Reference(s):	ELSA-2014-1306 CVE-2014-7169 CVE-2014-7186 CVE-2014-7187 CVE-2014-6271	Version:	3
Platform(s):	Oracle Linux 7 Oracle Linux 6 Oracle Linux 5	Product(s):	bash
Definition Synopsis:
Oracle Linux 7 release section Oracle Linux 7.x Packages match section bash RPM is earlier than 0:4.2.45-5.el7_0.4 AND bash-doc RPM is earlier than 0:4.2.45-5.el7_0.4 AND Oracle Linux 6 release section Oracle Linux 6.x Packages match section bash RPM is earlier than 0:4.1.2-15.el6_5.2 AND bash-doc RPM is earlier than 0:4.1.2-15.el6_5.2 AND Oracle Linux 5 release section Oracle Linux 5.x AND bash RPM is earlier than 0:3.2-33.el5_11.4

Definition Id: oval:org.mitre.oval:def:27830

Oval ID:	oval:org.mitre.oval:def:27830
Title:	SUSE-SU-2014:1260-1 -- bash (critical)
Description:	Bash was updated to fix unexpected code execution with environment variables (CVE-2014-6271).
Family:	unix	Class:	patch
Reference(s):	SUSE-SU-2014:1260-1 CVE-2014-6271	Version:	3
Platform(s):	SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Desktop 12	Product(s):
Definition Synopsis:
SUSE Linux Enterprise Server 12 and SUSE Linux Enterprise Desktop 12 release section Operation system section SUSE Linux Enterprise Server 12 is installed AND SUSE Linux Enterprise Desktop 12 is installed Packages match section bash-doc is earlier than 0:4.2-77.1 AND readline-doc is earlier than 0:6.2-77.1 AND SUSE Linux Enterprise Desktop 12 release section SUSE Linux Enterprise Desktop 12 is installed Packages match section bash is earlier than 0:4.2-77.1 AND bash-debuginfo is earlier than 0:4.2-77.1 AND bash-debugsource is earlier than 0:4.2-77.1 AND libreadline6 is earlier than 0:6.2-77.1 AND libreadline6-debuginfo is earlier than 0:6.2-77.1 AND bash-lang is earlier than 0:4.2-77.1

Definition Id: oval:org.mitre.oval:def:28331

Oval ID:	oval:org.mitre.oval:def:28331
Title:	VMware product updates address critical Bash security vulnerabilities
Description:	GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka "ShellShock." NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2014-6271	Version:	4
Platform(s):	VMWare ESX Server 4.1 VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
Patch ESX410-201410401-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201410401-SG is not installed OR Patch ESX400-201410401-SG is not installed VMware ESX Server 4.0 is installed AND Patch ESX400-201410401-SG is not installed

CPE : Common Platform Enumeration

Type	Description	Count
Application	Gnu Bash cpe:2.3:a:gnu:bash:4.3:::::::* cpe:2.3:a:gnu:bash:4.2:::::::* cpe:2.3:a:gnu:bash:4.1:::::::* cpe:2.3:a:gnu:bash:4.0:rc1:::::: cpe:2.3:a:gnu:bash:4.0:::::::* cpe:2.3:a:gnu:bash:3.2.48:::::::* cpe:2.3:a:gnu:bash:3.2:::::::* cpe:2.3:a:gnu:bash:3.1:::::::* cpe:2.3:a:gnu:bash:3.0.16:::::::* cpe:2.3:a:gnu:bash:3.0:::::::* cpe:2.3:a:gnu:bash:2.05:::::::* cpe:2.3:a:gnu:bash:2.05:b:::::: cpe:2.3:a:gnu:bash:2.05:a:::::: cpe:2.3:a:gnu:bash:2.04:::::::* cpe:2.3:a:gnu:bash:2.03:::::::* cpe:2.3:a:gnu:bash:2.02.1:::::::* cpe:2.3:a:gnu:bash:2.02:::::::* cpe:2.3:a:gnu:bash:2.01.1:::::::* cpe:2.3:a:gnu:bash:2.01:::::::* cpe:2.3:a:gnu:bash:2.0:::::::* cpe:2.3:a:gnu:bash:1.14.7:::::::* cpe:2.3:a:gnu:bash:1.14.6:::::::* cpe:2.3:a:gnu:bash:1.14.5:::::::* cpe:2.3:a:gnu:bash:1.14.4:::::::* cpe:2.3:a:gnu:bash:1.14.3:::::::* cpe:2.3:a:gnu:bash:1.14.2:::::::* cpe:2.3:a:gnu:bash:1.14.1:::::::* cpe:2.3:a:gnu:bash:1.14.0:::::::*	28

SAINT Exploits

Description	Link
Bash environment variable code injection over HTTP	More info here
Bash Environment Variable Handling Shell Command Injection Via CUPS	More info here
ShellShock DHCP Server	More info here

ExploitDB Exploits

id	Description
2014-11-03	PHP 5.x Shellshock Exploit (bypass disable_functions)
2014-10-29	CUPS Filter Bash Environment Variable Code Injection
2014-10-04	OpenVPN 2.2.29 - ShellShock Exploit
2014-10-01	IPFire Cgi Web Interface Authenticated Bash Environment Variable Code Injecti...
2014-09-25	GNU bash Environment Variable Command Injection (MSF)

Information Assurance Vulnerability Management (IAVM)

Date	Description
2014-09-25	IAVM : 2014-A-0142 - GNU Bash Shell Code Execution Vulnerability Severity : Category I - VMSKEY : V0054753

Snort® IPS/IDS

Date	Description
2015-07-13	Linux.Trojan.ChinaZ outbound connection RuleID : 34847 - Revision : 3 - Type : MALWARE-CNC
2014-10-30	Bash environment variable injection attempt RuleID : 32366-community - Revision : 2 - Type : OS-OTHER
2014-12-02	Bash environment variable injection attempt RuleID : 32366 - Revision : 2 - Type : OS-OTHER
2014-10-24	Bash CGI environment variable injection attempt RuleID : 32336-community - Revision : 2 - Type : OS-OTHER
2014-11-25	Bash CGI environment variable injection attempt RuleID : 32336 - Revision : 2 - Type : OS-OTHER
2014-10-24	Bash CGI environment variable injection attempt RuleID : 32335-community - Revision : 2 - Type : OS-OTHER
2014-11-25	Bash CGI environment variable injection attempt RuleID : 32335 - Revision : 2 - Type : OS-OTHER
2014-10-03	Bash environment variable injection attempt RuleID : 32069-community - Revision : 3 - Type : OS-OTHER
2014-11-16	Bash environment variable injection attempt RuleID : 32069 - Revision : 3 - Type : OS-OTHER
2014-10-01	Bash environment variable injection attempt RuleID : 32043-community - Revision : 3 - Type : OS-OTHER
2014-11-16	Bash environment variable injection attempt RuleID : 32043 - Revision : 3 - Type : OS-OTHER
2014-10-01	Bash environment variable injection attempt RuleID : 32042-community - Revision : 4 - Type : OS-OTHER
2014-11-16	Bash environment variable injection attempt RuleID : 32042 - Revision : 4 - Type : OS-OTHER
2014-10-01	Bash environment variable injection attempt RuleID : 32041-community - Revision : 4 - Type : OS-OTHER
2014-11-16	Bash environment variable injection attempt RuleID : 32041 - Revision : 4 - Type : OS-OTHER
2014-10-01	Bash environment variable injection attempt RuleID : 32039-community - Revision : 3 - Type : OS-OTHER
2014-11-16	Bash environment variable injection attempt RuleID : 32039 - Revision : 3 - Type : OS-OTHER
2014-10-01	Bash environment variable injection attempt RuleID : 32038-community - Revision : 3 - Type : OS-OTHER
2014-11-16	Bash environment variable injection attempt RuleID : 32038 - Revision : 3 - Type : OS-OTHER
2014-09-25	Malicious DHCP server bash environment variable injection attempt RuleID : 31985-community - Revision : 6 - Type : OS-OTHER
2014-11-16	Malicious DHCP server bash environment variable injection attempt RuleID : 31985 - Revision : 6 - Type : OS-OTHER
2014-09-25	Bash CGI environment variable injection attempt RuleID : 31978-community - Revision : 5 - Type : OS-OTHER
2014-11-16	Bash CGI environment variable injection attempt RuleID : 31978 - Revision : 5 - Type : OS-OTHER
2014-09-25	Bash CGI environment variable injection attempt RuleID : 31977-community - Revision : 5 - Type : OS-OTHER
2014-11-16	Bash CGI environment variable injection attempt RuleID : 31977 - Revision : 5 - Type : OS-OTHER
2014-09-25	Bash CGI environment variable injection attempt RuleID : 31976-community - Revision : 5 - Type : OS-OTHER
2014-11-16	Bash CGI environment variable injection attempt RuleID : 31976 - Revision : 5 - Type : OS-OTHER
2014-09-25	Bash CGI environment variable injection attempt RuleID : 31975-community - Revision : 6 - Type : OS-OTHER
2014-11-16	Bash CGI environment variable injection attempt RuleID : 31975 - Revision : 6 - Type : OS-OTHER

Metasploit Database

id	Description
2014-09-29	IPFire Bash Environment Variable Injection (Shellshock)
2014-09-24	CUPS Filter Bash Environment Variable Code Injection (Shellshock)
2014-09-24	Apache mod_cgi Bash Environment Variable Injection (Shellshock) Scanner
2014-09-24	Apache mod_cgi Bash Environment Variable Code Injection (Shellshock)
2015-12-01	Advantech Switch Bash Environment Variable Code Injection (Shellshock)

Nessus® Vulnerability Scanner

Date	Description
2017-12-04	Name : The remote host is missing a vendor-supplied security patch. File : check_point_gaia_sk102673.nasl - Type : ACT_GATHER_INFO
2016-02-02	Name : The remote Solaris system is missing a security patch for third-party software. File : solaris11_bash_20141031_2.nasl - Type : ACT_GATHER_INFO
2015-12-30	Name : The remote VMware ESX host is missing a security-related patch. File : vmware_VMSA-2014-0010_remote.nasl - Type : ACT_GATHER_INFO
2015-08-25	Name : The remote IBM Storwize V7000 Unified device is affected by multiple vulnerab... File : ibm_storwize_1_5_0_4.nasl - Type : ACT_GATHER_INFO
2015-04-06	Name : The remote web server is affected by a remote code execution vulnerability. File : bash_cve_2014_6278.nasl - Type : ACT_ATTACK
2015-03-30	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2015-164.nasl - Type : ACT_GATHER_INFO
2015-03-26	Name : The remote Debian host is missing a security update. File : debian_DLA-63.nasl - Type : ACT_GATHER_INFO
2015-01-19	Name : The remote Solaris system is missing a security patch for third-party software. File : solaris11_bash_20141031.nasl - Type : ACT_GATHER_INFO
2014-12-22	Name : The remote device is affected by multiple vulnerabilities. File : juniper_space_jsa10648.nasl - Type : ACT_GATHER_INFO
2014-11-26	Name : The remote OracleVM host is missing one or more security updates. File : oraclevm_OVMSA-2014-0010.nasl - Type : ACT_GATHER_INFO
2014-11-26	Name : The remote Cisco TelePresence Conductor device is affected by a command injec... File : cisco_telepresence_conductor_CSCur02103.nasl - Type : ACT_GATHER_INFO
2014-11-13	Name : The remote host is affected by a code injection vulnerability known as Shells... File : mcafee_ngfw_SB10085.nasl - Type : ACT_GATHER_INFO
2014-11-12	Name : The remote host has an application installed that is affected by multiple vul... File : vmware_vcenter_converter_2014-0010.nasl - Type : ACT_GATHER_INFO
2014-11-12	Name : The remote host is affected by a code injection vulnerability known as Shells... File : mcafee_web_gateway_sb10085.nasl - Type : ACT_GATHER_INFO
2014-11-11	Name : The remote host is affected by a code injection vulnerability known as Shells... File : mcafee_email_gateway_SB10085.nasl - Type : ACT_GATHER_INFO
2014-11-11	Name : The remote host is missing a vendor-supplied security patch. File : cisco_cups_CSCur05454.nasl - Type : ACT_GATHER_INFO
2014-11-08	Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2014-1354.nasl - Type : ACT_GATHER_INFO
2014-11-08	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2014-1311.nasl - Type : ACT_GATHER_INFO
2014-11-08	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2014-1294.nasl - Type : ACT_GATHER_INFO
2014-11-06	Name : The remote host has a virtualization appliance installed that is affected by ... File : vcenter_operations_manager_vmsa_2014-0010.nasl - Type : ACT_GATHER_INFO
2014-11-04	Name : The remote host has a device management application installed that is affecte... File : vmware_workspace_portal_vmsa2014-0010.nasl - Type : ACT_GATHER_INFO
2014-11-03	Name : The remote SIP server uses scripts that allow remote command execution via Sh... File : shellshock_sip_invite.nasl - Type : ACT_ATTACK
2014-11-03	Name : The remote security device is missing a vendor-supplied security patch. File : cisco-sa-CSCur01959-asa-cx.nasl - Type : ACT_GATHER_INFO
2014-11-03	Name : The management application installed on the remote host is affected by a comm... File : cisco-sa-CSCur01959-prsm.nasl - Type : ACT_GATHER_INFO
2014-11-03	Name : The remote host is affected by a command injection vulnerability. File : vmware_nsx_vmsa_2014_0010.nasl - Type : ACT_GATHER_INFO
2014-10-31	Name : The remote host has a virtualization appliance installed that is affected by ... File : vmware_vsphere_replication_vmsa_2014_0010.nasl - Type : ACT_GATHER_INFO
2014-10-31	Name : The remote host is running a vulnerable version of Bash. File : cisco_ucs_director_CSCur02877.nasl - Type : ACT_GATHER_INFO
2014-10-28	Name : The remote host has a mail agent installed that allows remote command executi... File : shellshock_mail_agents.nasl - Type : ACT_DESTRUCTIVE_ATTACK
2014-10-27	Name : The remote device is running a version of NX-OS that is affected by Shellshock. File : cisco-sa-20140926-bash-nxos.nasl - Type : ACT_GATHER_INFO
2014-10-21	Name : The remote openSUSE host is missing a security update. File : openSUSE-2014-595.nasl - Type : ACT_GATHER_INFO
2014-10-21	Name : The remote openSUSE host is missing a security update. File : openSUSE-2014-594.nasl - Type : ACT_GATHER_INFO
2014-10-21	Name : The version of Cisco TelePresence Video Communication Server installed on the... File : cisco_telepresence_vcs_CSCur01461.nasl - Type : ACT_GATHER_INFO
2014-10-20	Name : The remote host is affected by a remote code execution vulnerability. File : palo_alto_PAN-SA-2014-0004.nasl - Type : ACT_GATHER_INFO
2014-10-17	Name : The remote host is missing a Mac OS X update that fixes multiple vulnerabilit... File : macosx_10_10.nasl - Type : ACT_GATHER_INFO
2014-10-17	Name : The remote host is missing a Mac OS X update that fixes multiple security iss... File : macosx_SecUpd2014-005.nasl - Type : ACT_GATHER_INFO
2014-10-16	Name : The remote host has a virtualization appliance installed that is affected by ... File : vmware_vcenter_server_appliance_vmsa-2014-0010.nasl - Type : ACT_GATHER_INFO
2014-10-13	Name : The remote Solaris system is missing a security patch for third party software. File : solaris11_bash_2014_10_07.nasl - Type : ACT_GATHER_INFO
2014-10-13	Name : A system shell on the remote host is vulnerable to command injection. File : bash_cve_2014_7169.nasl - Type : ACT_ATTACK
2014-10-12	Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2014-419.nasl - Type : ACT_GATHER_INFO
2014-10-12	Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2014-418.nasl - Type : ACT_GATHER_INFO
2014-10-10	Name : The remote openSUSE host is missing a security update. File : openSUSE-2014-567.nasl - Type : ACT_GATHER_INFO
2014-10-10	Name : The remote device is missing a vendor-supplied security patch. File : f5_bigip_SOL15629.nasl - Type : ACT_GATHER_INFO
2014-10-09	Name : The remote host is missing Sun Security Patch number 149080-02 File : solaris9_x86_149080.nasl - Type : ACT_GATHER_INFO
2014-10-09	Name : The remote host is missing Sun Security Patch number 149079-03 File : solaris9_149079.nasl - Type : ACT_GATHER_INFO
2014-10-06	Name : A system shell on the remote host is vulnerable to command injection. File : bash_remote_code_execution2.nasl - Type : ACT_DESTRUCTIVE_ATTACK
2014-10-06	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201409-09.nasl - Type : ACT_GATHER_INFO
2014-10-03	Name : The remote FreeBSD host is missing a security-related update. File : freebsd_pkg_81e2b3084a6c11e4b7116805ca0b3d42.nasl - Type : ACT_GATHER_INFO
2014-10-02	Name : The remote VMware ESX host is missing a security-related patch. File : vmware_VMSA-2014-0010.nasl - Type : ACT_GATHER_INFO
2014-09-30	Name : The remote FTP server is affected by a remote code execution vulnerability. File : proftpd_bash_injection.nasl - Type : ACT_ATTACK
2014-09-30	Name : The remote host is is affected by a remote code execution vulnerability, comm... File : macosx_shellshock_update.nasl - Type : ACT_GATHER_INFO
2014-09-29	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2014-190.nasl - Type : ACT_GATHER_INFO
2014-09-29	Name : The remote Fedora host is missing a security update. File : fedora_2014-11295.nasl - Type : ACT_GATHER_INFO
2014-09-29	Name : The remote Fedora host is missing a security update. File : fedora_2014-11514.nasl - Type : ACT_GATHER_INFO
2014-09-29	Name : The remote Fedora host is missing a security update. File : fedora_2014-11527.nasl - Type : ACT_GATHER_INFO
2014-09-29	Name : The remote Fedora host is missing a security update. File : fedora_2014-11718.nasl - Type : ACT_GATHER_INFO
2014-09-29	Name : The remote openSUSE host is missing a security update. File : openSUSE-2014-563.nasl - Type : ACT_GATHER_INFO
2014-09-29	Name : The remote openSUSE host is missing a security update. File : openSUSE-2014-564.nasl - Type : ACT_GATHER_INFO
2014-09-29	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2014-1306.nasl - Type : ACT_GATHER_INFO
2014-09-29	Name : The remote mail server uses scripts that allow remote command execution via S... File : shellshock_postfix_filters.nasl - Type : ACT_ATTACK
2014-09-29	Name : The remote mail server allows remote command execution via Shellshock. File : shellshock_qmail.nasl - Type : ACT_ATTACK
2014-09-29	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20140926_bash_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2014-09-29	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_bash-140926.nasl - Type : ACT_GATHER_INFO
2014-09-26	Name : The remote host is missing Oracle Security Patch number 126546-06 File : solaris10_126546-06.nasl - Type : ACT_GATHER_INFO
2014-09-26	Name : The remote Fedora host is missing a security update. File : fedora_2014-11360.nasl - Type : ACT_GATHER_INFO
2014-09-26	Name : The remote Fedora host is missing a security update. File : fedora_2014-11503.nasl - Type : ACT_GATHER_INFO
2014-09-26	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20140924_bash_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2014-09-26	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2014-1306.nasl - Type : ACT_GATHER_INFO
2014-09-26	Name : The remote Debian host is missing a security-related update. File : debian_DSA-3035.nasl - Type : ACT_GATHER_INFO
2014-09-26	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201409-10.nasl - Type : ACT_GATHER_INFO
2014-09-26	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2014-1306.nasl - Type : ACT_GATHER_INFO
2014-09-26	Name : The remote host is missing Oracle Security Patch number 126547-06 File : solaris10_x86_126547-06.nasl - Type : ACT_GATHER_INFO
2014-09-26	Name : The remote host is missing Oracle Security Patch number 149079-01 File : solaris9_149079-01.nasl - Type : ACT_GATHER_INFO
2014-09-26	Name : The remote host is missing Oracle Security Patch number 149080-01 File : solaris9_x86_149080-01.nasl - Type : ACT_GATHER_INFO
2014-09-26	Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-2363-2.nasl - Type : ACT_GATHER_INFO
2014-09-26	Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-2363-1.nasl - Type : ACT_GATHER_INFO
2014-09-25	Name : The remote Slackware host is missing a security update. File : Slackware_SSA_2014-267-01.nasl - Type : ACT_GATHER_INFO
2014-09-25	Name : A system shell on the remote host is vulnerable to command injection. File : bash_remote_code_execution_telnet.nasl - Type : ACT_ATTACK
2014-09-25	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2014-1293.nasl - Type : ACT_GATHER_INFO
2014-09-25	Name : The remote Debian host is missing a security-related update. File : debian_DSA-3032.nasl - Type : ACT_GATHER_INFO
2014-09-25	Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_71ad81da441411e4a33e3c970e169bc2.nasl - Type : ACT_GATHER_INFO
2014-09-25	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2014-186.nasl - Type : ACT_GATHER_INFO
2014-09-25	Name : The remote openSUSE host is missing a security update. File : openSUSE-2014-559.nasl - Type : ACT_GATHER_INFO
2014-09-25	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2014-1293.nasl - Type : ACT_GATHER_INFO
2014-09-25	Name : The remote Oracle Linux host is missing a security update. File : oraclelinux_ELSA-2014-1294.nasl - Type : ACT_GATHER_INFO
2014-09-25	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2014-1293.nasl - Type : ACT_GATHER_INFO
2014-09-25	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_bash-140919.nasl - Type : ACT_GATHER_INFO
2014-09-25	Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-2362-1.nasl - Type : ACT_GATHER_INFO
2014-09-24	Name : A system shell on the remote host is vulnerable to command injection. File : bash_remote_code_execution.nasl - Type : ACT_ATTACK
2014-09-24	Name : The remote web server is affected by a remote code execution vulnerability. File : bash_cve_2014_6271_rce.nasl - Type : ACT_ATTACK
2012-09-26	Name : The remote host is missing Sun Security Patch number 126546-10 File : solaris10_126546.nasl - Type : ACT_GATHER_INFO
2012-09-17	Name : The remote host is missing Sun Security Patch number 126547-10 File : solaris10_x86_126547.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

Source	Url
APPLE	http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html
BID	http://www.securityfocus.com/bid/70103
BUGTRAQ	http://www.securityfocus.com/archive/1/533593/100/0/threaded
CERT	http://www.us-cert.gov/ncas/alerts/TA14-268A
CERT-VN	http://www.kb.cert.org/vuls/id/252743
CISCO	http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa...
CONFIRM	http://advisories.mageia.org/MGASA-2014-0388.html http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10673 http://linux.oracle.com/errata/ELSA-2014-1293.html http://linux.oracle.com/errata/ELSA-2014-1294.html http://support.apple.com/kb/HT6495 http://support.novell.com/security/cve/CVE-2014-6271.html http://www-01.ibm.com/support/docview.wss?uid=isg3T1021272 http://www-01.ibm.com/support/docview.wss?uid=isg3T1021279 http://www-01.ibm.com/support/docview.wss?uid=isg3T1021361 http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004879 http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004897 http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004898 http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004915 http://www-01.ibm.com/support/docview.wss?uid=swg21685541 http://www-01.ibm.com/support/docview.wss?uid=swg21685604 http://www-01.ibm.com/support/docview.wss?uid=swg21685733 http://www-01.ibm.com/support/docview.wss?uid=swg21685749 http://www-01.ibm.com/support/docview.wss?uid=swg21685914 http://www-01.ibm.com/support/docview.wss?uid=swg21686084 http://www-01.ibm.com/support/docview.wss?uid=swg21686131 http://www-01.ibm.com/support/docview.wss?uid=swg21686246 http://www-01.ibm.com/support/docview.wss?uid=swg21686445 http://www-01.ibm.com/support/docview.wss?uid=swg21686447 http://www-01.ibm.com/support/docview.wss?uid=swg21686479 http://www-01.ibm.com/support/docview.wss?uid=swg21686494 http://www-01.ibm.com/support/docview.wss?uid=swg21687079 http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096315 http://www.novell.com/support/kb/doc.php?id=7015701 http://www.novell.com/support/kb/doc.php?id=7015721 http://www.oracle.com/technetwork/topics/security/bashcve-2014-7169-2317675.html http://www.qnap.com/i/en/support/con_show.php?cid=61 http://www.vmware.com/security/advisories/VMSA-2014-0010.html http://www.websense.com/support/article/kbarticle/Vulnerabilities-resolved-in... https://access.redhat.com/articles/1200223 https://access.redhat.com/node/1200223 https://bugzilla.redhat.com/show_bug.cgi?id=1141597 https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Cente... https://kb.bluecoat.com/index?page=content&id=SA82 https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10648 https://kc.mcafee.com/corporate/index?page=content&id=SB10085 https://securityblog.redhat.com/2014/09/24/bash-specially-crafted-environment... https://support.apple.com/kb/HT6535 https://support.citrix.com/article/CTX200217 https://support.citrix.com/article/CTX200223 https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15629.html https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr... https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr... https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGovie... https://www.suse.com/support/shellshock/
DEBIAN	http://www.debian.org/security/2014/dsa-3032
EXPLOIT-DB	https://www.exploit-db.com/exploits/34879/ https://www.exploit-db.com/exploits/37816/ https://www.exploit-db.com/exploits/38849/ https://www.exploit-db.com/exploits/39918/ https://www.exploit-db.com/exploits/40619/ https://www.exploit-db.com/exploits/40938/ https://www.exploit-db.com/exploits/42938/
FULLDISC	http://seclists.org/fulldisclosure/2014/Oct/0
HP	http://marc.info/?l=bugtraq&m=141216207813411&w=2 http://marc.info/?l=bugtraq&m=141216668515282&w=2 http://marc.info/?l=bugtraq&m=141235957116749&w=2 http://marc.info/?l=bugtraq&m=141319209015420&w=2 http://marc.info/?l=bugtraq&m=141330425327438&w=2 http://marc.info/?l=bugtraq&m=141330468527613&w=2 http://marc.info/?l=bugtraq&m=141345648114150&w=2 http://marc.info/?l=bugtraq&m=141383026420882&w=2 http://marc.info/?l=bugtraq&m=141383081521087&w=2 http://marc.info/?l=bugtraq&m=141383138121313&w=2 http://marc.info/?l=bugtraq&m=141383196021590&w=2 http://marc.info/?l=bugtraq&m=141383244821813&w=2 http://marc.info/?l=bugtraq&m=141383304022067&w=2 http://marc.info/?l=bugtraq&m=141383353622268&w=2 http://marc.info/?l=bugtraq&m=141383465822787&w=2 http://marc.info/?l=bugtraq&m=141450491804793&w=2 http://marc.info/?l=bugtraq&m=141576728022234&w=2 http://marc.info/?l=bugtraq&m=141577137423233&w=2 http://marc.info/?l=bugtraq&m=141577241923505&w=2 http://marc.info/?l=bugtraq&m=141577297623641&w=2 http://marc.info/?l=bugtraq&m=141585637922673&w=2 http://marc.info/?l=bugtraq&m=141694386919794&w=2 http://marc.info/?l=bugtraq&m=141879528318582&w=2 http://marc.info/?l=bugtraq&m=142113462216480&w=2 http://marc.info/?l=bugtraq&m=142118135300698&w=2 http://marc.info/?l=bugtraq&m=142358026505815&w=2 http://marc.info/?l=bugtraq&m=142358078406056&w=2 http://marc.info/?l=bugtraq&m=142546741516006&w=2 http://marc.info/?l=bugtraq&m=142719845423222&w=2 http://marc.info/?l=bugtraq&m=142721162228379&w=2 http://marc.info/?l=bugtraq&m=142805027510172&w=2
JVN	http://jvn.jp/en/jp/JVN55667175/index.html
JVNDB	http://jvndb.jvn.jp/jvndb/JVNDB-2014-000126
MANDRIVA	http://www.mandriva.com/security/advisories?name=MDVSA-2015:164
MISC	http://lcamtuf.blogspot.com/2014/09/quick-notes-about-bash-bug-its-impact.html http://packetstormsecurity.com/files/128517/VMware-Security-Advisory-2014-001... http://packetstormsecurity.com/files/128567/CA-Technologies-GNU-Bash-Shellsho... http://packetstormsecurity.com/files/128573/Apache-mod_cgi-Remote-Command-Exe... http://packetstormsecurity.com/files/137376/IPFire-Bash-Environment-Variable-... http://packetstormsecurity.com/files/161107/SonicWall-SSL-VPN-Shellshock-Remo... https://www.arista.com/en/support/advisories-notices/security-advisories/1008...
REDHAT	http://rhn.redhat.com/errata/RHSA-2014-1293.html http://rhn.redhat.com/errata/RHSA-2014-1294.html http://rhn.redhat.com/errata/RHSA-2014-1295.html http://rhn.redhat.com/errata/RHSA-2014-1354.html
SECUNIA	http://secunia.com/advisories/58200 http://secunia.com/advisories/59272 http://secunia.com/advisories/59737 http://secunia.com/advisories/59907 http://secunia.com/advisories/60024 http://secunia.com/advisories/60034 http://secunia.com/advisories/60044 http://secunia.com/advisories/60055 http://secunia.com/advisories/60063 http://secunia.com/advisories/60193 http://secunia.com/advisories/60325 http://secunia.com/advisories/60433 http://secunia.com/advisories/60947 http://secunia.com/advisories/61065 http://secunia.com/advisories/61128 http://secunia.com/advisories/61129 http://secunia.com/advisories/61188 http://secunia.com/advisories/61283 http://secunia.com/advisories/61287 http://secunia.com/advisories/61291 http://secunia.com/advisories/61312 http://secunia.com/advisories/61313 http://secunia.com/advisories/61328 http://secunia.com/advisories/61442 http://secunia.com/advisories/61471 http://secunia.com/advisories/61485 http://secunia.com/advisories/61503 http://secunia.com/advisories/61542 http://secunia.com/advisories/61547 http://secunia.com/advisories/61550 http://secunia.com/advisories/61552 http://secunia.com/advisories/61565 http://secunia.com/advisories/61603 http://secunia.com/advisories/61633 http://secunia.com/advisories/61641 http://secunia.com/advisories/61643 http://secunia.com/advisories/61654 http://secunia.com/advisories/61676 http://secunia.com/advisories/61700 http://secunia.com/advisories/61703 http://secunia.com/advisories/61711 http://secunia.com/advisories/61715 http://secunia.com/advisories/61780 http://secunia.com/advisories/61816 http://secunia.com/advisories/61855 http://secunia.com/advisories/61857 http://secunia.com/advisories/61873 http://secunia.com/advisories/62228 http://secunia.com/advisories/62312 http://secunia.com/advisories/62343
SUSE	http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00028.html http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00029.html http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00034.html http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00037.html http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00040.html http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00044.html http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00049.html http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00004.html http://lists.opensuse.org/opensuse-updates/2014-10/msg00023.html http://lists.opensuse.org/opensuse-updates/2014-10/msg00025.html
UBUNTU	http://www.ubuntu.com/usn/USN-2362-1

Alert History

If you want to see full details history, please login or register.

Date	Informations
2021-11-18 05:23:20	Multiple Updates
2021-11-10 09:23:39	Multiple Updates
2021-11-05 21:23:20	Multiple Updates
2021-05-04 12:33:47	Multiple Updates
2021-04-22 01:40:56	Multiple Updates
2021-02-02 05:22:46	Multiple Updates
2021-01-26 21:23:20	Multiple Updates
2020-05-23 13:17:05	Multiple Updates
2020-05-23 00:42:01	Multiple Updates
2019-10-10 05:19:30	Multiple Updates
2019-09-27 21:19:48	Multiple Updates
2019-03-19 12:06:32	Multiple Updates
2018-12-01 00:18:57	Multiple Updates
2018-10-10 00:19:52	Multiple Updates
2018-08-09 09:19:22	Multiple Updates
2017-12-05 13:24:05	Multiple Updates
2017-10-05 09:23:10	Multiple Updates
2017-09-17 09:23:30	Multiple Updates
2017-09-13 09:23:26	Multiple Updates
2017-09-03 09:24:00	Multiple Updates
2017-04-26 13:20:57	Multiple Updates
2017-01-07 09:25:42	Multiple Updates
2017-01-03 09:22:54	Multiple Updates
2016-12-08 09:23:32	Multiple Updates
2016-11-29 00:24:56	Multiple Updates
2016-06-29 01:16:23	Multiple Updates
2016-06-21 09:26:33	Multiple Updates
2016-06-17 09:28:33	Multiple Updates
2016-04-27 01:08:49	Multiple Updates
2016-03-07 17:24:18	Multiple Updates
2016-03-04 09:23:56	Multiple Updates
2016-03-04 05:23:48	Multiple Updates
2016-02-03 13:27:47	Multiple Updates
2015-12-31 13:26:07	Multiple Updates
2015-12-01 21:23:43	Multiple Updates
2015-10-18 17:22:51	Multiple Updates
2015-10-04 13:23:56	Multiple Updates
2015-09-25 13:23:54	Multiple Updates
2015-08-27 13:38:37	Multiple Updates
2015-07-24 13:29:09	Multiple Updates
2015-07-18 13:28:15	Multiple Updates
2015-07-13 21:26:55	Multiple Updates
2015-06-10 13:27:35	Multiple Updates
2015-05-19 21:28:55	Multiple Updates
2015-05-14 21:28:22	Multiple Updates
2015-05-12 13:28:19	Multiple Updates
2015-05-12 09:28:01	Multiple Updates
2015-04-24 13:28:46	Multiple Updates
2015-04-14 13:28:44	Multiple Updates
2015-04-10 09:26:26	Multiple Updates
2015-04-07 13:28:42	Multiple Updates
2015-03-31 13:28:45	Multiple Updates
2015-03-31 09:26:43	Multiple Updates
2015-03-27 13:28:31	Multiple Updates
2015-03-27 09:26:52	Multiple Updates
2015-03-21 00:26:16	Multiple Updates
2015-03-20 00:26:16	Multiple Updates
2015-03-18 09:27:22	Multiple Updates
2015-03-13 17:22:52	Multiple Updates
2015-03-13 00:22:17	Multiple Updates
2015-03-12 09:23:38	Multiple Updates
2015-03-07 13:24:35	Multiple Updates
2015-02-26 13:24:15	Multiple Updates
2015-02-17 13:24:57	Multiple Updates
2015-02-05 13:23:45	Multiple Updates
2015-01-31 13:23:07	Multiple Updates
2015-01-22 13:24:59	Multiple Updates
2015-01-21 13:27:02	Multiple Updates
2015-01-13 13:23:40	Multiple Updates
2014-12-24 09:23:58	Multiple Updates
2014-12-23 13:26:36	Multiple Updates
2014-12-07 13:26:18	Multiple Updates
2014-12-03 09:27:14	Multiple Updates
2014-12-02 21:25:51	Multiple Updates
2014-11-28 13:27:33	Multiple Updates
2014-11-27 13:28:35	Multiple Updates
2014-11-25 21:26:39	Multiple Updates
2014-11-21 21:22:23	Multiple Updates
2014-11-20 09:23:43	Multiple Updates
2014-11-19 05:34:52	Multiple Updates
2014-11-18 09:22:23	Multiple Updates
2014-11-16 21:25:17	Multiple Updates
2014-11-14 13:28:50	Multiple Updates
2014-11-14 13:26:28	Multiple Updates
2014-11-14 13:24:27	Multiple Updates
2014-11-13 13:27:10	Multiple Updates
2014-11-12 13:27:18	Multiple Updates
2014-11-08 13:31:55	Multiple Updates
2014-11-07 21:23:51	Multiple Updates
2014-11-07 13:26:25	Multiple Updates
2014-11-05 13:29:13	Multiple Updates
2014-11-05 13:27:59	Multiple Updates
2014-11-04 13:27:33	Multiple Updates
2014-11-01 13:26:40	Multiple Updates
2014-10-31 13:25:24	Multiple Updates
2014-10-30 21:27:03	Multiple Updates
2014-10-30 13:22:55	Multiple Updates
2014-10-29 13:24:30	Multiple Updates
2014-10-28 13:26:30	Multiple Updates
2014-10-28 13:24:53	Multiple Updates
2014-10-24 21:23:09	Multiple Updates
2014-10-24 13:27:20	Multiple Updates
2014-10-22 13:25:59	Multiple Updates
2014-10-21 13:26:04	Multiple Updates
2014-10-18 13:26:11	Multiple Updates
2014-10-17 13:26:49	Multiple Updates
2014-10-17 13:25:29	Multiple Updates
2014-10-16 13:26:41	Multiple Updates
2014-10-16 13:25:35	Multiple Updates
2014-10-12 13:27:28	Multiple Updates
2014-10-11 13:26:24	Multiple Updates
2014-10-10 13:27:31	Multiple Updates
2014-10-10 13:25:53	Multiple Updates
2014-10-08 13:25:05	Multiple Updates
2014-10-07 21:24:25	Multiple Updates
2014-10-05 13:27:03	Multiple Updates
2014-10-04 13:31:42	Multiple Updates
2014-10-04 13:29:26	Multiple Updates
2014-10-03 21:24:13	Multiple Updates
2014-10-03 13:27:19	Multiple Updates
2014-10-02 13:27:43	Multiple Updates
2014-10-01 21:24:50	Multiple Updates
2014-10-01 13:27:24	Multiple Updates
2014-09-30 13:27:33	Multiple Updates
2014-09-28 13:28:48	Multiple Updates
2014-09-27 13:28:22	Multiple Updates
2014-09-27 00:23:03	Multiple Updates
2014-09-26 13:28:59	Multiple Updates
2014-09-26 13:27:29	Multiple Updates
2014-09-26 13:25:26	Multiple Updates
2014-09-25 21:24:17	Multiple Updates
2014-09-25 00:23:56	First insertion

Global Informations

Type	Count
CWE ID(s)	1
Oval ID(s)	10
CPE ID(s)	28
Sources(s)	170
Saint Exploit(s)	3
ExploitDB Exploit(s)	5
Metasploit Exploit(s)	5
IAVM(s)	1
Snort® Rule(s)	29
Nessus® Exploit(s)	91

	Related
10	VU#252743
10	VMSA-2014-0010
10	USN-2362-1
10	TA14-268A
10	RHSA-2014:1865
10	RHSA-2014:1311
10	RHSA-2014:1306
10	RHSA-2014:1294
10	RHSA-2014:1293
10	MDVSA-2015:164
10	MDVSA-2014:190
10	MDVSA-2014:186
10	GLSA-201409-10
10	GLSA-201409-09
10	DSA-3035
10	DSA-3032
10	CVE-2014-7187
10	CVE-2014-7186
10	CVE-2014-7169
10	cisco-sa-201409...
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 20 more Alert(s)