bash 的漏洞，你们中招了吗？

[windyboy]

http://threatpost.com/major-bash-vulnerability-affects-linux-unix-mac-os-x

检测：

$ env x='() { :;}; echo vulnerable' bash -c "echo this is a test"
中招的显示:

vulnerable
this is a test

如果是没有问题，则是下面
$ env x='() { :;}; echo vulnerable' bash -c "echo this is a test"
bash: warning: x: ignoring function definition attempt
bash: error importing function definition for `x'
this is a test

[Earthman]

今晚更新后没问题了

[noikiy]

@Bakemono 反弹之后也是要有可用的exp才可以提权到root吧

[windyboy]

@iac threatpost.com

[fork3rt]

用zsh的飘过