An authenticated flaw that passes a user-supplied command straight to bash is being hammered by attackers who only need one…