Bash specially-crafted environment variables code injection attack

Jan Dušátko jan at dusatko.org
Thu Sep 25 20:05:29 CEST 2014


CVE-2014-6271 and CVE-2014-7169 Bash vulnerability
Everything before 4.3.25 is vulnerable, 4.3.25 should contain the fix.

http://www.vuxml.org/freebsd/71ad81da-4414-11e4-a33e-3c970e169bc2.html



More information about the Users-l mailing list