BASH Vulnerability - please check your servers!

I know most people have probably heard of the BASH flaw that could allow people to run code on your server using freely available PoC that is floating about the internet right now. The bug is 22 years old but has only just been found.

I have a post on my blog on how to find if you have a vulnerable version or not and what to do, here is the link: http://autoim.net/bash-the-22-year-old-vulnerability/

If you don't want to go to the site to read a bit more, this is the bit you need:

1. Log into your server and at a command line, run this:

2. If the output from that command is:

then your BASH is vulnerable and you need to update BASH as soon as possible!!

FB

Upgraded on all our servers immediately once the news about this vulnerability came to light - have to keep the data of my clients secure.

Glad too see someone following the security announcements

Yes, we've upgraded all our server as well along with sending out an email to our clients. We've covered the vulnerability in detail in our blog:
http://poweruphosting.com/how-to-check-if-your-linux-mac-server-is-vulnerable-to-shellshock/

Yes thanks for this information. We already upgraded/updated our servers

Just that you know: The first fix that was sent out by the big linux distributions did not fix the problem (http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-7169) in full. There is now a second fix available for a related problem (http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-6271). Please make sure your servers are protected, since there are attacks currently going on using both vulnerabilities.

Indeed, you would need to make sure you haven't upgraded too soon as far as there is a 2nd vulnerability.
You can check below on how to test it and also how to patch your servers from your ssh access :

http://www.host-stage.net/client-ar...VE-2014-6271-and-CVE-2014-7169---PATCHED.html