Shell Shock

Aims to:

A program contains setuid(geteuid()).

Requirement:

Bash version lower than 4.1

Reason:

When run, bash will load envirment vars, and custom function, like


export foo='(){:;};echo hello bash'

When I try this vulnerability, I type geteuid as getuid, and have not triger this.

Leave a Reply

Your email address will not be published. Required fields are marked *