[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Bash-4.3 Official Patch 25 Bug 896776 - (CVE-2014-6271)
|
From: |
Eduardo A . Bustamante López |
|
Subject: |
Re: Bash-4.3 Official Patch 25 Bug 896776 - (CVE-2014-6271) |
|
Date: |
Thu, 25 Sep 2014 13:50:00 -0700 |
|
User-agent: |
Mutt/1.5.21 (2010-09-15) |
On Thu, Sep 25, 2014 at 05:33:38PM +0200, ralf.naegele@she.net wrote:
> Hello,
>
> I've downloaded the source for bash 4.3 and all patches, patched the source
> to Patch 25.
> But according some description I've found (http://heise.de/-2403305 sorry,
> only in German
> available), you can test with the command
>
> env x='() { :;}; echo vulnerable' bash -c "echo this is a test"
Did you install the patched bash properly? If you forgot to install
it, calling 'bash' will launch the still vulnerable version.