A major vulnerability in the bash shell was recently discovered
called ShellShock. This vulnerability
affects the systems that have not updated bash and the one that provide web
hosting in any form. For example WordPress hosting, which allows the remote
attackers to execute arbitrary commands, upload files, send infected emails
etc.
ShellShock
vulnerability got a score of 10/10 which means you must pay attention to it as soon
as possible as it allows the attacker to gain a shell on the infected system.
Additionally, if the bug is exploited over CGI, then the situation will become
even worse. So, it is highly recommended to resolve this issue before it is too
late.
