"Shellshock" bash bug

[Johnny Rosenberg]

2014-09-27 13:32 GMT+02:00 Nils Kassube <kassube at gmx.net>:

> Colin Law wrote:
> > On 27 September 2014 11:05, Graham Watkins <shellycat.gw at ntlworld.com>
> wrote:
> > > The result I get is:
> > >
> > > "$: command not found"
> >
> > You were not supposed to copy the $, just from env
>
> That's why I leave away the prompt before the commands. A newcomer to
> the command line can't know that it is not part of the command.
>
> > In the terminal you normally see $ at the point where you type the
> > command.
>
> Hmm, that may be the default for Unix machines and it may have been the
> same for early Linux machines. However a Kubuntu 14.04 terminal has this
> prompt:
>
> kubuntu at kubuntu:~$
>
> and for Xubuntu it is similar:
>
> xubuntu at xubuntu:~$
>
> Therefore I suppose it would be "ubuntu at ubuntu:~$" for a Ubuntu system
> and not simply "$".
>

I think he rather meant that you are supposed to write your commands after
the ”$”. The fact that there is something before the ”$” doesn't matter,
since it's different for every distribution, I guess.
SomeText $ Replace this text with your command
I think the $ itself is the same in most cases unless you run as root.
Anyway, it seems to be some kind of defacto standard that you put a $ ahead
of the command so the reader can see that this is a command and this is the
program output:

$ env x='() { :;}; echo vulnerable'  bash -c "echo this is a test"
this is a test
$

The first line is a command, the second line is the output of the command
and the third line is where you put your next command, right after the $.


Johnny Rosenberg

>
>
> Nils
>
>
> --
> ubuntu-users mailing list
> ubuntu-users at lists.ubuntu.com
> Modify settings or unsubscribe at:
> https://lists.ubuntu.com/mailman/listinfo/ubuntu-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/ubuntu-users/attachments/20140927/c72ffa67/attachment.html>