3 ms·

My Zsh seems vulnerable. Anyone else care to replicate this? -- ➜ ~ zsh --version zsh 5.0.2 (x86_64-apple-darwin13.0) ➜ ~ echo $SHELL /bin/zsh ➜ ~ en

My Zsh seems vulnerable. Anyone else care to replicate this? -- ➜ ~ zsh --version zsh 5.0.2 (x86_64-apple-darwin13.0) ➜ ~ echo $SHELL /bin/zsh ➜ ~ env x='() { do_something;}; echo vulnerable' bash -c "echo this is a test" vulnerable this is a test ---

apgwoz 12y ago
You are using bash there...
andruby 12y ago
if you do it correctly by using zsh instead of bash, you would that it is not vulnerable env x='() { do_something;}; echo vulnerable' zsh -c "echo this is a test" this is a test