CVE-2014-6271: remote code execution through bash (3rd vulnerability?)
It looks to me like this is still an incomplete fix. The third vulnerability I’d like to report is the feature itself in bash that allows functions to be passed in the environment, e.g.
env ls='() { echo vulnerable; }' bash -c ls
A friend of mine said this could be a vulnerability gift that keeps on giving. CVE-2014-7169 was discovered very quickly after CVE-2014-6271. Do you think that’s the end of it?
via: http://seclists.org/oss-sec/2014/q3/748
