[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Bash-4.3 Official Patch 25 Bug 896776 - (CVE-2014-6271)
|
From: |
Greg Wooledge |
|
Subject: |
Re: Bash-4.3 Official Patch 25 Bug 896776 - (CVE-2014-6271) |
|
Date: |
Thu, 25 Sep 2014 16:52:19 -0400 |
|
User-agent: |
Mutt/1.4.2.3i |
On Thu, Sep 25, 2014 at 05:33:38PM +0200, ralf.naegele@she.net wrote:
> env x='() { :;}; echo vulnerable' bash -c "echo this is a test"
Did you *install* the patched version so that it is the first "bash" in
your PATH before running this? If not, you should specify a path to
bash (e.g. ./bash -c "echo ...").