Re: How to understand bash vulnerability?

[Peng Yu]

> https://securityintelligence.com/articles/shellshock-vulnerability-in-depth/

Is 'env' at the beginning of the three commands necessarily? It seems
that if I remove 'env', "Bash is Infected" can still be printed on a
vulnerable bash session. So 'env' is not necessary?

I don't understand why an environment variable can be interpreted by
bash as source code. It seems to me it should be always treated as
plain text. Could anybody explain why this vulnerability was
introduced in the first place? Thanks.

> More information:
>   https://mywiki.wooledge.org/BashFAQ/111

-- 
Regards,
Peng