On Sep 25, 2014 8:23 AM, "Luca Costantino" <luca.costantino@gmail.com> wrote:
>
> Letto?
>
> http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-6271
>
> env x='() { :;}; echo vulnerable' bash -c "echo this is a test"
>
Let's upgrade to zsh:
$ env x='() { :;}; echo vulnerable' zsh -c "echo this is a test"
this is a test
;)