To know if you are vulnerable, you can run:
env X="() { :;} ; echo busted" /bin/sh -c "echo completed"
env X="() { :;} ; echo busted" `which bash` -c "echo completed"
If you see "busted" then you are vulnerable.
Is there a patch yet?
To know if you are vulnerable, you can run:
env X="() { :;} ; echo busted" /bin/sh -c "echo completed"
env X="() { :;} ; echo busted" `which bash` -c "echo completed"
If you see "busted" then you are vulnerable.
Is there a patch yet?