Bash Bug Could Leak Data From Connected Devices
Staff Reporter | | Sep 25, 2014 06:11 AM EDT |
(Photo : Reuters)
A security team from Red Hat discovered new vulnerabilities in Linux's Bash shell that could potentially cause an unintentional sharing of information with devices connected to it.
The Bash shell is one of the most widely used and versatile utilities in Linux.
When accessed properly, the Bash bug, also nicknamed Shellshock, lets a hacker's code to be run the moment the shell is invoked, leaving the system vulnerable to a wide variety of attacks. Patching every instance may be difficult for since the bug has been present in Linux for a long time.
Like Us on Facebook
Reports suggest that Shellshock also affects OS X, tech giant Apple's operating system for its computers. While Apple has yet to provide a legitimate solution, information on how Mac users can look for the vulnerability and fix it once detected can be seen on Stack Exchange.
Cloud service providers such as Amazon Web Services are currently giving instructions to consumers on how to solve the problem. Vendors that distribute Linux such as Canonical, Fedora and Red hat have been offering patches to install on Linux devices.
But the bug's most direct effect will be among devices on the Internet of things, smart gadgets and appliances that need remote access, according to VentureBeat's Jordan Novet.
Security expert Troy Hunt said in an interview that the Bash bug can let people with technical knowledge access the devices and retrieve constant data caches in response.
"Certainly Internet-connected stuff is going to be the immediate vulnerability," Hunt said, adding that devices running versions of Bash that haven't been updated in years could be at risk.
Robert David Graham from Errata Security has compared Bash to the Heartbleed security bug discovered in April, since they both have wide and potential long-term effects on the security of computers.
TagsBash, Bug, Bash Bug, Heartbleed, hacker, hack, internet security
©2015 Chinatopix All rights reserved. Do not reproduce without permission
EDITOR'S PICKS
-
Did the Trump administration just announce plans for a trade war with ‘hostile’ China and Russia?
-
US Senate passes Taiwan travel bill slammed by China
-
As Yan Sihong’s family grieves, here are other Chinese students who went missing abroad. Some have never been found
-
Beijing blasts Western critics who ‘smear China’ with the term sharp power
-
China Envoy Seeks to Defuse Tensions With U.S. as a Trade War Brews
-
Singapore's Deputy PM Provides Bitcoin Vote of Confidence Amid China's Blanket Bans
-
China warns investors over risks in overseas virtual currency trading
-
Chinese government most trustworthy: survey
-
Kashima Antlers On Course For Back-To-Back Titles
MOST POPULAR
LATEST NEWS
Zhou Yongkang: China's Former Security Chief Sentenced to Life in Prison
China's former Chief of the Ministry of Public Security, Zhou Yongkang, has been given a life sentence after he was found guilty of abusing his office, bribery and deliberately ... Full Article
TRENDING STORY
-
China Pork Prices Expected to Stabilize As The Supplies Recover
-
Elephone P9000 Smartphone is now on Sale on Amazon India
-
There's a Big Chance Cliffhangers Won't Still Be Resolved When Grey's Anatomy Season 13 Returns
-
Supreme Court Ruled on Samsung vs Apple Dispute for Patent Infringement
-
Microsoft Surface Pro 5 Rumors and Release Date: What is the Latest?