help-bash
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Help-bash] Patching shellshock fixes for 2.05


From: Chet Ramey
Subject: Re: [Help-bash] Patching shellshock fixes for 2.05
Date: Thu, 02 Oct 2014 16:58:25 -0400
User-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:24.0) Gecko/20100101 Thunderbird/24.6.0

On 10/2/14, 4:03 PM, Mohan Kannekanti wrote:
> ​Hi Chet, 
> 
> Thanks for the reply. 
> 
> I am sorry, I am bit confused. Do you mean that 2.05 version is not
> vulnerable at all ​or those patches should resolve that vulnerability.

I mean it's not vulnerable.  The test script you run is flawed:

> bash: line 1: syntax error near unexpected token `;'
> bash: line 1: `for x{1..200} in ; do :'
> *CVE-2014-7187 (nested loops off by one): VULNERABLE*

The test case uses a construct that was not available in bash-2.05.

Chet

-- 
``The lyf so short, the craft so long to lerne.'' - Chaucer
                 ``Ars longa, vita brevis'' - Hippocrates
Chet Ramey, ITS, CWRU    address@hidden    http://cnswww.cns.cwru.edu/~chet/



reply via email to

[Prev in Thread] Current Thread [Next in Thread]