CGI::Application and recent bash security hole

Dirk Koopman djk at
Fri Sep 26 14:11:49 BST 2014

On 26/09/14 10:24, Dave Cross wrote:
> env X="() { (a)=>\\" bash -c '/dev/stdout date'

But not this:

env X="() { (a)=>\\" bash -c 'date'
bash: X: line 1: syntax error near unexpected token `='
bash: X: line 1: `'
bash: error importing function definition for `X'
Fri Sep 26 14:11:23 BST 2014

More information about the mailing list