2 ms·
Yes but fixing that is a simple matter of replacing sh with /bin/bash.
by INTPenis 12y ago
Yes but fixing that is a simple matter of replacing sh with /bin/bash.
- sjy 12y agoYou can only do that if you already have shell access (in which case the vulnerability gives you nothing). The remote exploit works because untrusted users can put code into an environment variable, but the target needs to create a new bash to execute the code.