A major vulnerability has been discovered that targets bash, the Unix system (including OSX) and Linux commands interpreter. Apparently, this security flaw is also affecting other interpreters, such as ksh, tcsh, zsh and csh. Nevertheless, other shells aren't being affected.
UDS Enterprise servers aren't vulnerable to this fail, so the security of the virrual machines which provide UDS Enterprise remains unaltered.
This vulnerability has been registed as CVE-2014-6271 and it allows to execute certain commands due to the wrong process of the environment variables. Besides, it may be exploited remotely.
The problem lies in the fact that, as all interpreted languages, bash allows functions which are not properly validated when they are storaged in a variable.
You can find more information about this problem here:
Bash specially-crafted environment variables code injection attack
The choice of technology infrastructure is crucial for the growth and competitiveness of businesses. This article analyzes the advantages and disadvantages of “on-premises” and “cloud computing” models, focusing on aspects such as costs, scalability, security, and management.
The definition of “on-premise” refers to the implementation of servers and an IT environment that are either owned exclusively by the company or rented by it.
8 out of 10 rural workers seek improved telecommunications infrastructure
With the growing trend of multiple job holders reaching historic highs in many countries, workplace virtualization is vital for attracting and retaining talent in this new work environment.
Virtual desktop infrastructure plays a fundamental role in remote and hybrid work models by providing workers with flexibility and mobility without compromising security or performance.
The term “Cloud Computing” refers to the use of computing resources (servers, storage, computing capacity, databases, networks, software) over the Internet.
Stay up to date with all the news from UDS ENTERPRISE through our social networks.
0 Comments