Description
The prompt parsing in bash allows a local user to execute commands as another user by creating a directory with the name of the command to execute.
Affected products
- gnu / bash2.04
- gnu / bash1.14.0 – 1.14.0
- gnu / bash1.14.1 – 1.14.1
- gnu / bash1.14.2 – 1.14.2
- gnu / bash1.14.3 – 1.14.3
- gnu / bash1.14.4 – 1.14.4
- gnu / bash1.14.5 – 1.14.5
- gnu / bash1.14.6 – 1.14.6
- gnu / bash1.14.7 – 1.14.7
- gnu / bash2.0 – 2.0
- gnu / bash2.01 – 2.01
- gnu / bash2.01.1 – 2.01.1
- gnu / bash2.02 – 2.02
- gnu / bash2.02.1 – 2.02.1
- gnu / bash2.03 – 2.03
- gnu / bash2.05 – 2.05
- gnu / bash2.05 – 2.05
Exploits & proofs of concept
- exploit-dbGNU GNU bash 1.14 - Path Embedded Code Executionby Shadow
Updated 33m ago · 8 sources