[mdlug] shellshock

[Carl T. Miller]

R Kannan wrote:
> On 09/26/2014 02:30 PM, Carl T. Miller wrote:
>> Here's a oneliner to see if you're safe:
>>
>> env x='() { :;}; echo -n NOT\ ' bash -c 'echo safe from shellshock'
>
> bash: warning: x: ignoring function definition attempt
> bash: error importing function definition for `x'
> safe from shellshock
>
> Am I missing something? Why am I getting an error?

The main thing is that you're not vulnerable to shellshock.
The version I got doesn't give an error, it just doesn't
run the "echo -n NOT\ " bit.

What distro are you using?  What version of bash?

c