Infoblox系統不受 Bash Shell漏洞影響
Infoblox KB#3234: NIOS products not vulnerable to CVE-2014-6271, CVE-2014-7169, CVE-2014-7186, and CVE-2014-7187
Published 09/26/2014 03:01 PM | Updated 11/20/2014 12:56 PM
Regarding the recently announced vulnerabilities in the bash shell (CVE-2014-6271, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187):
Our assessment is that Infoblox DDI products running NIOS are not directly vulnerable to these exploits.
However, for NIOS customers using Bloxtools, the Bloxtools custom development environment may be vulnerable.
As a best practice measure, Infoblox has provided the following patches to replace the installed version of the bash shell in current NIOS versions:
NIOS 6.8.10 and NIOS 6.8.11
NIOS 6.10.8 and NIOS 6.10.9
NIOS 6.11.4 and NIOS 6.11.5