Bash Path Embedded Code Execution...

- AV AC AU C I A
发布: 1999-04-20
修订: 2018-10-17

A vulnerability in bash may allow inadvertently running commands embedded in the path to the currently working directory. If an unsuspecting user enters a directory created by some malicious user with embedded commands, and their prompt (PS1) contains '\w' or '\W', and the prompt is displayed the commands will be executed. The vulnerability is in the parsing of the '\w' and '\W' escape codes. As the prompt must be displayed unattended shell scripts are not vulnerable.

0%
当前有1条漏洞利用/PoC
产品及版本信息(CPE)暂不可用