5,078 reputation
41439
bio website wirespeed.xs4all.nl/mediawiki
location Eindhoven, Netherlands
age 44
visits member for 2 years, 8 months
seen 2 days ago

Do you love your Pets as much as I do? Check the Q&A proposal!

I'm into:

  • Linux;
  • Networking;
  • IT Security;
  • Perl;
  • System integration;
  • Arduino;
  • ATtiny & ATmega Microcontrollers;
  • Analog electronics;

2d
comment Should all other versions of BASH be uninstalled after patching with the latest version?
It is not so much if you need to uninstall old versions, you do have to figure out why the old version is still called while a new version is already available on your system. I am unfamiliar with your distribution, but removing software that is in active use can be dangerous.
Nov
17
awarded  Famous Question
Oct
22
awarded  Notable Question
Sep
29
revised What does env x='() { :;}; command' bash do and why is it insecure?
added 218 characters in body
Sep
28
revised What does env x='() { :;}; command' bash do and why is it insecure?
added 2 characters in body
Sep
28
revised What does env x='() { :;}; command' bash do and why is it insecure?
added 916 characters in body
Sep
26
awarded  Great Question
Sep
26
comment What does env x='() { :;}; command' bash do and why is it insecure?
Nice explanation. This question is receiving a lot of views (probably not everybody being as proficient in bash as the others) and I believe no-one yet spent a couple words on what { :;}; actually says. That would be a nice addition to your answer in my opinion. May explain how you get from your example to the original command in the question?
Sep
25
awarded  Favorite Question
Sep
25
comment What does env x='() { :;}; command' bash do and why is it insecure?
Up until this moment there has not been an accepted answer. I'll probably wait for another couple days before accepting one. The downside of this answer is that it doesn't break down the original command, nor discusses how to get from the original command in the question to the commands in this answer, showing they are identical. Apart from that it is a good explanation.
Sep
25
awarded  Mortarboard
Sep
25
awarded  Famous Question
Sep
25
awarded  Notable Question
Sep
25
awarded  Good Question
Sep
25
answered CVE-2014-6271 Bash Vulnerability example
Sep
25
revised What does env x='() { :;}; command' bash do and why is it insecure?
added 250 characters in body
Sep
25
awarded  Popular Question
Sep
25
reviewed Approve suggested edit on What does env x='() { :;}; command' bash do and why is it insecure?
Sep
25
comment CVE-2014-6271 Bash Vulnerability example
Related: unix.stackexchange.com/questions/157381/…
Sep
24
awarded  Nice Question