nerdexam
GIAC

GCIH · Question #435

Why was Shellshock a threat to platforms like DHCP servers and home WiFi routers in addition to web servers?

The correct answer is B. Vulnerability existed within the command line interpreter. Shellshock, also known as Bash Bug, was a vulnerability in the Bourne-Again Shell that enabled attackers to execute *nix command line shell commands of their choosing remotely. Bash is widely run on a variety of devices ranging from PCs and servers to network and Internet-of…

Vulnerability Exploitation & Privilege Escalation

Question

Why was Shellshock a threat to platforms like DHCP servers and home WiFi routers in addition to web servers?

Options

  • AAttack was written in Javascript
  • BVulnerability existed within the command line interpreter
  • CVulnerability existed within web-based admin interfaces
  • DAttack targeted network routing functionality

How the community answered

(37 responses)
  • A
    3% (1)
  • B
    76% (28)
  • C
    16% (6)
  • D
    5% (2)

Explanation

Shellshock, also known as Bash Bug, was a vulnerability in the Bourne-Again Shell that enabled attackers to execute *nix command line shell commands of their choosing remotely. Bash is widely run on a variety of devices ranging from PCs and servers to network and Internet-of- Attacks used Bash commands written using Bash syntax, not Javascript. Any Bash functionality could be targeted, not just networking, and would run with the privileges granted to the

Topics

#Shellshock#bash vulnerability#CVE exploitation#command injection

Community Discussion

No community discussion yet for this question.

Full GCIH Practice