#17978: bash patch for shellshock vulnerability
------------------------+------------------------
  Reporter:  anonymous  |      Owner:  developers
      Type:  defect     |     Status:  new
  Priority:  highest    |  Milestone:
 Component:  packages   |    Version:  Trunk
Resolution:             |   Keywords:
------------------------+------------------------

Comment (by anonymous):

 Is this fixed now or what?


 {{{
 env X='() { (a)=>\' sh -c "echo date"; cat echo
 }}}

 still results in:

 {{{
 date
 cat: can't open 'echo': No such file or directory
 }}}

 so echo date is executed?

--
Ticket URL: <https://dev.openwrt.org/ticket/17978#comment:12>
OpenWrt <http://openwrt.org>
Opensource Wireless Router Technology
_______________________________________________
openwrt-tickets mailing list
[email protected]
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-tickets

Reply via email to