Apple fixed Shellshock vulnerability in OS X / ESET NOD32 Blog

Shellshock · os x

esetnod32 September 30, 2014 at 13:13

Apple fixed Shellshock vulnerability in OS X

The company released the APPLE-SA-2014-09-29-1 update, which fixes the recently discovered Shellshock vulnerability for OS X versions of Lion , Mountain Lion, and Mavericks . This update delivers a new version of the Bash v.3.2.53 interpreter and fixes two Shellshock-related vulnerabilities: CVE-2014-6271 (Stephane Chazelas) and CVE-2014-7169 (Tavis Ormandy). The first vulnerability is an initially discovered bug in Bash, which leads to the execution of improper interpreter instructions, and the second is a bug in the first patch to Bash, which also contained an error and could lead to unauthorized execution of instructions.

Tags:

Tags

#Shellshock #os x

Read Next

Web Application Vulnerabilities: XSS SQLi enumeration

Web Application Vulnerabilities: XSS SQLi enumeration

Breakdown of top-3 vulnerabilities in web: user enumeration, XSS, SQL injections. Fix methods for developers: prepared statements, encoding. In-depth pentest guide.

LLM Dialog: Creating a Go Utility for Comparing Language Models

LLM Dialog: Creating a Go Utility for Comparing Language Models

Development of a Graphical Utility in Go for Automating Dialog Between Language Models. LLM Comparison, Context Management, Practical Application for Developers.

Number search algorithms: from Knuth to MCMC

Number search algorithms: from Knuth to MCMC

Breakdown of number guessing strategies in [1,N]: Knuth's maximin O(N²), random O(log N), Metropolis-Hastings MCMC. Code, analysis, benchmarks. Choose the optimal for your N.

IP Camera Certification in India: New Security Rules

IP Camera Certification in India: New Security Rules

India Requires Full Disclosure of Architecture and Supply Chain for IP Cameras. Who Passed Certification, Risks for Hikvision and Dahua. Details for IT Specialists — Read and Adapt Systems.

MTU mismatch in Docker and OpenStack: how to fix CI/CD failure

MTU mismatch in Docker and OpenStack: how to fix CI/CD failure

Diagnosis and solution of MTU mismatch problem between Docker and OpenStack that breaks builds. Step-by-step guide for DevOps.

ARIA snapshots Playwright for AI agents

ARIA snapshots Playwright for AI agents

Learn how Playwright generates semantic YAML ARIA snapshots for web agents. Token optimization, incremental deltas, DOM processing. For middle/senior dev.

Password Strength: Calculations for Developers

Password Strength: Calculations for Developers

Learn the real password strength from calculations: from 5-digit PIN to passphrase. Recommendations on Argon2 hashing, throttling, and 2FA for middle/senior dev. Check your system.

Alertmanager-evateam: integration with EvaTeam

Alertmanager-evateam: integration with EvaTeam

Set up automatic task creation in EvaTeam from Alertmanager alerts. Installation, eva__ fields and templates configuration instructions. For DevOps specialists.

Intel and Hitachi: partnership in physical AI for industry

Intel and Hitachi: partnership in physical AI for industry

Intel and Hitachi join forces in physical AI for industry. Key benefits, market implications, and hidden insights of the deal. Read the analysis.

Digital Twins of Lunar Nuclear Power Plant: Project of Russian Scientists

Digital Twins of Lunar Nuclear Power Plant: Project of Russian Scientists

Russian scientists are creating digital twins of a lunar nuclear power plant with autonomous control. Learn about the timeline, budget, and import substitution in the project. Read more.