Rooting idea

Ideas and dreaming will go this forum
Post Reply

bolvan
Posts: 3
Joined: Sat Oct 05, 2013 7:02 am

Rooting idea

Post by bolvan »

Recently vulnerability was found in bash.

Code: Select all

k@wifi:~$ export x='() { :; }; echo "Oh..."'
k@wifi:~$ echo $x
() { :; }; echo "Oh..."
k@wifi:~$ bash
Oh...
To exploit it we need

1) set any env variable
2) trigger execution of bash with any parameters. I guess exedsp often call shell.

UPDATE. False hope. Bash is not present on the system, only sh from busybox.

Post Reply

Return to “[H] Brainstorm”