CVE-2014-3671
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- CUPS Filter - Bash Environment Variable Code Injection (Metasploit)2014-10-29 · remote · linux · Verified
- Postfix SMTP 4.2.x < 4.2.48 - 'Shellshock' Remote Command Injection2014-10-06 · remote · linux · Verified
- Bash CGI - 'Shellshock' Remote Command Injection (Metasploit)2014-10-06 · webapps · cgi · Verified
- Pure-FTPd - External Authentication Bash Environment Variable Code Injection (Metasploit)2014-10-02 · remote · linux · Verified
- IPFire - CGI Web Interface (Authenticated) Bash Environment Variable Code Injection2014-10-01 · webapps · cgi · Verified
- GNU Bash - Environment Variable Command Injection (Metasploit)2014-09-25 · remote · cgi · Verified
- Bash - 'Shellshock' Environment Variables Command Injection2014-09-25 · remote · linux · Verified
- GNU Bash - 'Shellshock' Environment Variable Command Injection2014-09-25 · remote · linux · Verified
- Kemp Load Master 7.1.16 - Multiple Vulnerabilities2015-04-02 · webapps · multiple
- QNAP - Web Server Remote Code Execution via Bash Environment Variable Code Injection (Metasploit)2015-03-26 · remote · hardware
- QNAP - Admin Shell via Bash Environment Variable Code Injection (Metasploit)2015-03-26 · remote · hardware
- PHP < 5.6.2 - 'Shellshock' Safe Mode / disable_functions Bypass / Command Injection2014-11-03 · webapps · php
Impact
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-6271, CVE-2014-6277, CVE-2014-6278, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187. Reason: This candidate is a duplicate of CVE-2014-6271, CVE-2014-6277, CVE-2014-6278, CVE-2014-7169, CVE-2014-7186, and CVE-2014-7187. Notes: All CVE users should reference CVE-2014-6271, CVE-2014-6277, CVE-2014-6278, CVE-2014-7169, CVE-2014-7186, and CVE-2014-7187 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.