[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Help-bash] Patching shellshock fixes for 2.05
From: |
Chet Ramey |
Subject: |
Re: [Help-bash] Patching shellshock fixes for 2.05 |
Date: |
Thu, 02 Oct 2014 16:58:25 -0400 |
User-agent: |
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:24.0) Gecko/20100101 Thunderbird/24.6.0 |
On 10/2/14, 4:03 PM, Mohan Kannekanti wrote:
> Hi Chet,
>
> Thanks for the reply.
>
> I am sorry, I am bit confused. Do you mean that 2.05 version is not
> vulnerable at all or those patches should resolve that vulnerability.
I mean it's not vulnerable. The test script you run is flawed:
> bash: line 1: syntax error near unexpected token `;'
> bash: line 1: `for x{1..200} in ; do :'
> *CVE-2014-7187 (nested loops off by one): VULNERABLE*
The test case uses a construct that was not available in bash-2.05.
Chet
--
``The lyf so short, the craft so long to lerne.'' - Chaucer
``Ars longa, vita brevis'' - Hippocrates
Chet Ramey, ITS, CWRU address@hidden http://cnswww.cns.cwru.edu/~chet/