|
| From: | lolilolicon |
| Subject: | Re: Issues with exported functions |
| Date: | Thu, 25 Sep 2014 03:54:19 +0800 |
I think almost as severe as CVE-2014-6271 is that it's still possible to
mask commands in a bash script by changing it's environment.
For example, true='() { false;}' or grep='() { /bin/id;}' ...
| [Prev in Thread] | Current Thread | [Next in Thread] |