shellshock

[docstrange]

Perhaps you've not heard? Bash, when handed some rotten ENV components, messes up badly and can allow someone able to set the ENV to execute arbitrary commands

Comments

Dear clueless assholes: stop bashing bash and GNU.

[livejournal]

User weev referenced to your post from Dear clueless assholes: stop bashing bash and GNU. saying: [...] you execute a UNIX command with untrusted input, you clear away the environment variables first [...]