Re:Inside Shellshock: How hackers are using it to exploit sy...
by nitrogen on Wednesday October 01, 2014 @04:29AM
(#8393349)
Upon researching this, "() {" will always catch this.
Unless the input is decoded in some way before reaching an environment variable. E.g. HTML entities, hex escapes (percent or backslash), gzip, ... Best just to patch bash and switch to a different /bin/sh.
Unless the input is decoded in some way before reaching an environment variable. E.g. HTML entities, hex escapes (percent or backslash), gzip, ... Best just to patch bash and switch to a different /bin/sh.