Skip to content

Instantly share code, notes, and snippets.

@phpdude
Created September 25, 2014 15:42
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save phpdude/d38b7ab75933655d250d to your computer and use it in GitHub Desktop.
Save phpdude/d38b7ab75933655d250d to your computer and use it in GitHub Desktop.
Bash critical bug
root# ssh root@ip.bla.bla.bla
Linux ip.bla.bla.bla 3.2.0-4-amd64 #1 SMP Debian 3.2.60-1+deb7u1 x86_64
The programs included with the Debian GNU/Linux system are free software;
the exact distribution terms for each program are described in the
individual files in /usr/share/doc/*/copyright.
Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent
permitted by applicable law.
Last login: Sun Sep 21 18:16:32 2014 from ip.bla.bla.bla
root@vds ~ # env x='() { :;}; echo vulnerable' bash -c "echo this is a test"
vulnerable
this is a test
root@vds ~ #
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment