Bash Bug: Everything we know about the bug that is “bigger than Heartbleed”

hackers-hacking-hacks52111
A few months after the Heartbleed bug created havoc across the Internet, a new bug has surfaced called the Bash Bug. The bug, also known as Shellshock bug, is said to be capable of compromising anything from major servers to the smallest of connected devices. Here’s what the Bash Bug is all about, which is said to be more dangerous than Heartbleed.
Shellshock essentially exploits security vulnerability on Unix-based software called Bash. Bash has been around since 1989 and is present on all Unix-based systems. The vulnerability was recently discovered by Stephane Chazelas of Akamai Technologies Inc. Programs on these systems run codes in the Bash shell in the background, and the bug can be triggered by hackers by adding an extra code within the lines of Bash code. As a result, hackers can literally take control of the system via the Bash Bug. Some of the devices that run on some form of Unix includes routers, Android phones, and Macs among others.
The reason Bash Bug is considered bigger than Heartbleed is because the latter only exposed passwords and sensitive data to hackers. The former, on the other hand, can allow hackers to take control of a system and let them install and run any programs. The sheer number of software that interact with the Bash shell makes the vulnerability even more dangerous.
Of all devices, the Mac is said to be the most vulnerable to the Bash Bug, and according to a test by Ars Technica Macs running on OS X Mavericks were especially vulnerable to the bug. Hackers will be able to take control of a Mac using a public Wi-Fi using the Bash Bug. Apple has however allayed fears saying not all Macs are vulnerable. In a statement to iMore, Apple said, “The vast majority of OS X users are not at risk to recently reported Bash vulnerabilities.” “Bash, a Unix command shell and language included in OS X, has a weakness that could allow unauthorized users to remotely gain control of vulnerable systems. With OS X, systems are safe by default and not exposed to remote exploits of bash unless users configure advanced Unix services. We are working to quickly provide a software update for our advanced Unix users,” Apple added.
To keep the devices safe from the Bash Bug, manufacturers will have to release security patch. Experts recommend users to update their devices to the latest software version to be safe from the bug.