Exploitation of the vulnerability could enable arbitrary code execution in CGI scripts executable by certain versions of Bash. The bug involved how Bash passed function definitions to subshells through environment variables. The bug had been present in the source code since August 1989 (version 1.03) and was patched in September 2014 (version 4.3).
exploitation of the vulnerability could enable arbitrary code execution in cgi scripts executable by certain versions of bash the bug involved how bash passed function definitions to subshells through environment variables the bug had been present in the source code since august 1989 (version 103) and was patched in september 2014 (version 43)