Let's to know the Shellshock bugs
Shellshock bugs, involving the bash of Mac and Linux. All UNIX-like devices, therefore, are exposed to this bug and multiple updates in recent years, they did not correct this vulnerability. The latter, in fact, has been "around", probably, for 20 years. We will see, then, how to upgrade the bash present on systems running Mac OS X.
Bash is a shell based on the command line and in many operating systems based on Linux and Unix, including Mac OS X. The bash can be used, with a simple script, to launch programs or enable functionality without password and without the user noticing. Hackers could also access the files, confidential information, delete data, run programs and much more. To address this vulnerability in Mac OS X are needed a few lines of code for the terminal, so as to intervene in advance and before Apple releases an update dedicated.
If you open the Terminal window, type the following command line, the enter. Please note that the app terminal can be found through spotlight or in the utilities folder in Applications.
env = x ' ( ) { : ; } ; echo vulnerable ' bash -c " echo this is a test "
If the system is not vulnerable to the bug Shellshock, you will get this response, bash : warning : x : ignoring function definition attempt bash : error importing function definition for ` x ' this is a test, you will be shown this line: vulnerable this is a test Worried about this bug extremely important ? Then you can upgrade to the bash by hand a few lines of code . It will take a few minutes , but the level of security on your computer will increase and you can sleep nights sleep .
Check the version before you upgrade your bash, it is wise to check the current version installed on your Mac. Enter, then, in the window of the Terminal command line, followed by the enter key, you see below bash version. If you get as the version 3.2.51 (1) -release, then you will need to upgrade manually to the new bash version 3.2, which is the 03/02/52.
Download and fill the patches since Apple has not released any update, you must have Xcode installed on your machine to be able to manually fill the new bash. If you do not have this software, you can download it from the Mac App Store. Once the installation of Xcode, it's time to re-open the terminal and type the following line of code.
Each row represents a command, then you must enter seven lines of command and press enter. Example,mkdir bash-fix cd bash-fix curl https://opensource.apple.com/tarballs/bash/bash-92.tar.gz | tar zxf - cd bash-92 / bash-3.2 curl https://ftp.gnu.org/pub/gnu/bash/bash-3.2-patches/bash32-052 | patch -p0 cd .. xcodebuild
The compilation process might take a minute. Everything, in fact, is done by Xcode which is compiling the new version of the bash in your system. Once the process is finished, it will see said"build successed". Before, as a precaution, we will back up the current version of bash. This is possible through two sudo commands that require administrator privileges.
In this reason, you will be asked for the first command to enter the password you use to log in on the Mac. The terminal will not show you any letter typed, but after entering the password, press the enter key and you can do, quietly, backup. sudo cp / bin / bash /bin/bash.old sudo cp / bin / sh /bin/sh.old.
Alright, it is the time to check that you have downloaded the new bash and has been completed and successfull on your computer. Build / Release / bash -version build / Release / sh -version. The output, if all goes well, should confirm that the build version of the bash is 3.2.52 (1) -release. Now we got to the final step, you will in fact make the new version of bash, downloaded and compiled, the default.
how to do this, just type this following commands, sudo cp build / Release / bash / bin sudo cp build / Release / sh / bin. From now on, therefore, your Mac will be more protected thanks to the new bash installed. Look for updates to Shellshock bugs.
0 Comments