Everything you need to know about the Shellshock Bash bug

Re:Everything you need to know about the Shellshock Bash bug by fiedzia on Thursday September 25, 2014 @09:56AM (#8367129)

Out of curiosty: did it cause any problems with intended use of this shell feature? Did anyone complained that it broke something that worked before?

[ Parent | on HN ]

Re:Everything you need to know about the Shellshock Bash bug by jgrahamc on Thursday September 25, 2014 @09:57AM (#8367134)

We have not seen any complaints about this.

[ Parent | on HN ]

Re:Everything you need to know about the Shellshock Bash bug by TorKlingberg on Thursday September 25, 2014 @11:31AM (#8367640)

I assume Cloudflare are filtering HTTP headers. I cannot imagine a valid reason to pass in functions to bash in headers.

[ Parent | on HN ]

Re:Everything you need to know about the Shellshock Bash bug by shangxiao on Thursday September 25, 2014 @01:15PM (#8368273)

And functions with malicious shell script appended at that! ;)

[ Parent | on HN ]

Re:Everything you need to know about the Shellshock Bash bug by informatimago on Thursday September 25, 2014 @01:02PM (#8368198)

There is no intended use, it's a pure evil bug in bash. I wouldn't be surprised if it was discovered that it has been implanted intentionnally.

[ Parent | on HN ]

Re:Everything you need to know about the Shellshock Bash bug by shangxiao on Thursday September 25, 2014 @01:14PM (#8368265)

How can a bug be evil? Don't attach morals to things which should be amoral.

[ Parent | on HN ]

Re:Everything you need to know about the Shellshock Bash bug by avoid3d on Thursday September 25, 2014 @02:16PM (#8368667)

Its a joke, eval(uate) is evil...

[ Parent | on HN ]