|
Description
|
|
A vulnerability has been discovered in GNU Bash, which can be exploited by malicious people to compromise a vulnerable system.
The vulnerability is caused due to an error when handling a lookahead character while parsing environment variables and can be exploited to e.g. inject and execute arbitrary shell commands via a specially crafted environment variable value.
The vulnerability is confirmed in version 4.3 and reported in versions 3.0 through 4.2. Other versions may also be affected.
|
