News for hackers. Stuff that matters.

A comment on Another ShellShock exploit in the wild. Parent comment

Re:Another ShellShock exploit in the wild by tlrobinson on Thursday September 25, 2014 @12:56PM (#8368175)
And environment variables are typically inherited by subprocesses, so if the CGI script executes anything (that executes anything, recursively) that uses bash (including system() if /bin/sh is bash, e.x. on OS X) this bug becomes exploitable?
[ Parent | on HN ]

There are no comments on this comment yet.