Re: [Help-bash] Patching shellshock fixes for 2.05

[Chet Ramey]

On 10/2/14, 4:03 PM, Mohan Kannekanti wrote:
> ​Hi Chet, 
> 
> Thanks for the reply. 
> 
> I am sorry, I am bit confused. Do you mean that 2.05 version is not
> vulnerable at all ​or those patches should resolve that vulnerability.

I mean it's not vulnerable.  The test script you run is flawed:

> bash: line 1: syntax error near unexpected token `;'
> bash: line 1: `for x{1..200} in ; do :'
> *CVE-2014-7187 (nested loops off by one): VULNERABLE*

The test case uses a construct that was not available in bash-2.05.

Chet

-- 
``The lyf so short, the craft so long to lerne.'' - Chaucer
                 ``Ars longa, vita brevis'' - Hippocrates
Chet Ramey, ITS, CWRU    address@hidden    http://cnswww.cns.cwru.edu/~chet/