3 ms·
Yes, this exploit can be used on any script or program that uses system(), whatever language you use. Using bash as the default /bin/sh is the real bug here.
by odc 12y ago
Yes, this exploit can be used on any script or program that uses system(), whatever language you use.
Using bash as the default /bin/sh is the real bug here.
- dllthomas 12y ago"Yes, this exploit can be used on any script or program that uses system(), whatever language you use." Unless that script or program sanitizes the environment before calling system(). In practice that might not presently be any scripts or programs, but it principle it's a tiny bit weaker than you say.