Qualys cloud detects Bash Shellshock vulnerability.
TELECOMWORLDWIRE-September 30, 2014-Qualys cloud detects Bash Shellshock vulnerability
(C)1994-2014 M2 COMMUNICATIONS http://www.m2.com
Qualys, Inc. (NASDAQ: QLYS) said that its Qualys Vulnerability Management cloud service detects the GNU Bash Shellshock (CVE-2014-6271) vulnerability.
Qualys customers can detect the Bash bug by scanning with the Qualys Vulnerability Management cloud service as QID 122693 and 13038. This means that Qualys customers can get reports detailing their enterprise-wide exposure whenever they next scan their assets, which allows them to get visibility into the impact in their organization and efficiently track the remediation speed of the issue.
Additionally, a vulnerability check for Shellshock is included in Qualys Freescan, which allows any organization to verify the security status of an Internet facing server.
"Bash allows attackers to specify arbitrary commands to execute by formatting an environment variable in a specific way. Given that the flaw has been around for more than ten years, almost all Linux and Unix machines running will be vulnerable and this could have a bigger impact than Heartbleed which we saw earlier this year," said Wolfgang Kandek, chief technical officer for Qualys, Inc.
Qualys is a pioneer and leading provider of cloud security and compliance solutions with over 6,700 customers in more than 100 countries. Founded in 1999, Qualys has established strategic partnerships with leading managed service providers and consulting organizations. For more information, visit www.qualys.com.
((Comments on this story may be sent to email@example.com))
|Printer friendly Cite/link Email Feedback|
|Date:||Sep 30, 2014|
|Previous Article:||Cadence, ARM expand system-on-chip design collaboration.|
|Next Article:||Intellicheck Mobilisa gets $300K contract to install defense ID system at National Guard Base.|