Everything you need to know about the Shellshock Bash bug

Re:Everything you need to know about the Shellshock Bash bug by spacehunt on Thursday September 25, 2014 @09:27AM (#8366967)

Debian-based systems use dash instead of bash for /bin/sh. But if you have scripts that explicitly use bash, you are still at risk.

[ Parent | on HN ]

Re:Everything you need to know about the Shellshock Bash bug by djengineerllc on Thursday September 25, 2014 @10:09AM (#8367205)

I tried this and it didn't work on my Ubuntu machine, it echoed "stuff". env X="() { :;} ; echo busted" /bin/sh -c "echo stuff"

But then I tried this command and it echoed "vulnerable". env var='() { ignore this;}; echo vulnerable' bash -c /bin/true

[ Parent | on HN ]