#shellshock

Shellshock: A 25-Year-Old Bash Bug Becomes a Global Emergency Patch

Disclosed on September 24, 2014, the Shellshock vulnerability let attackers execute arbitrary commands through a flaw in how Bash processed environment variables — and botnets were scanning for vulnerable systems within hours.