Shellshock mitigation with BIG-IP iRules
Yesterday, NIST released information on a new network exploitable vulnerability in the GNU Bash shell as demonstrated by vectors involving parts of OpenSSH sshd, the mod_cgi, and mod_cgid modules in ...
Updated Jun 06, 2023
Version 2.0
JAIME_QUIROGA_1
Nimbostratus
NimbostratusI wrote the script if you need put the irule in something virtual server, this is:
!/bin/bash
while read line
do
PART=`echo $line | awk -F ' ' '{print $1}'`
VIRTUAL=`echo $line | awk -F ' ' '{print $2}'`
VER=`tmsh show sys version | head -n5 | tail -n1 | awk '{ print $2}'`
if [ "$VER" == "11.5.1" ]; then {
HAB=`tmsh list ltm virtual /$PART/$VIRTUAL rules |grep Irule | awk '{ print $1}'`
if [ "$HAB" == '' ]; then {
echo "El virtual $VIRTUAL no tiene Irule $HAB"
tmsh modify ltm virtual /$PART/$VIRTUAL rules { Irule_Mitigacion_Vulnerabilidad }
} else {
echo "El virtual $VIRTUAL tiene estos Irule $HAB"
tmsh modify ltm virtual /$PART/$VIRTUAL rules { Irule_Mitigacion_Vulnerabilidad $HAB }
}
fi
tmsh modify ltm virtual /$PART/$VIRTUAL rules { Irule_Mitigacion_Vulnerabilidad }
}
elif [ "$VER" == "10.2.4" ]; then {
tmsh modify cli admin-partitions update-partition $PART
tmsh modify ltm virtual $VIRTUAL rules { Irule_Mitigacion_Vulnerabilidad }
}
fi
done