'Bash' Security Flaw in OS X Allows for Malicious Attacks on Devices and Services

​

security researchers red hat have uncovered new exploit in common "bash" command shell found in os x , linux can used deploy malicious code minimal effort. due ubiquity of bash shell, exploit can affect wide variety of different web-connected devices , properties, including unsecured websites, smart home appliances, servers, , more.

security researcher robert graham noted on blog bash exploit "as big heartbleed," referring flaw discovered earlier year in popular openssl software secures connections between clients , servers:

quote

internet-of-things devices video cameras vulnerable because lot of software built web-enabled bash scripts. thus, not less patched, more expose vulnerability outside world.

unlike heartbleed, affected specific version of openssl, bash bug has been around long, long time. means there lots of old devices on network vulnerable bug. number of systems needing patched, won't be, larger heartbleed.

click expand...

heartbleed said have affected 66% of internet, although apple announced in april exploit did not affect software or "key services." apple released updates airport extreme , time capsule better secure both web devices against heartbleed.

topic discussing bash exploit on stackexchange notes apple did not include fix bug in latest round of security updates came alongside release of os x mavericks 10.9.5 last week. possible apple release fix os x in near future address exploit, similar has done other security issues in past.

article link: 'bash' security flaw in os x allows malicious attacks on devices , services

 

so problem if ssh sharing enabled?

 

Forums News and Article Discussion MacRumors.com News Discussion

• iPhone
• Mac OS & System Software
• iPad
• Apple Watch
• Notebooks
• iTunes
• Apple ID
• iCloud
• Desktop Computers
• Apple Music
• Professional Applications
• iPod
• iWork
• Apple TV
• iLife
• Wireless