3 ms·
There are a lot of scripts the do something like: curl 'http://myradframework.com/script.sh' http://myradframework.com/script.sh' | bash That'd be pretty easy
by base698 12y ago
There are a lot of scripts the do something like: curl 'http://myradframework.com/script.sh' http://myradframework.com/script.sh' | bash
That'd be pretty easy to do this if they weren't honest or man in the middle attack the site.
- notdonspaulding 12y agoThat's not really the risk with this vulnerability. Piping a web-sourced script to bash has always been a vulnerability, but it's one that you choose to live with when you do it. The reason this is newsworthy is because there are some network-facing programs (CGI-based web servers, some SSH configurations) that will set the value of some environment variables to a user-supplied value, which bash will then be executed by bash when that program spawns a new process.
- jonhohle 12y agoThat will run arbitrary code regardless