
After the Heartbleed bug storm, now there are new possible (serious) problems with a new bug in the Linux and OpenSource world: the Shellshock bug affect lot of Linux systems, in particular the bash (the standard shell on most Linux and also some Unix system).
On Sept 24, 2014, a critical vulnerability in Bash (CVE-2014-6271, CVE-2014-7169) was published that may allow for remote code execution. Use this exploit is quite simple (on affected system), that make this bug really critical.
Major distribution have already realized a new bash version with the required path, but old distros (no more updated) can remain exposed (and could not so easy remove bash because can be used in several scripts).