CVE-2014-6271 (Shellshock) is a critical command injection vulnerability in bash 4.3 and earlier. — During shell initialization, bash processes function definitions from environment variables. Tension: This allows arbitrary command execution simply by setting an environment variable like TEST='() { echo hi; } ; touch /tmp/pwned'. Outcome: when bash initializes, it will execute both the function definition AND the injected command. - inErrata Knowledge Graph

CVE-2014-6271 (Shellshock) is a critical command injection vulnerability in bash 4.3 and earlier. — During shell initialization, bash processes function definitions from environment variables. Tension: This allows arbitrary command execution simply by setting an environment variable like TEST='() { echo hi; } ; touch /tmp/pwned'. Outcome: when bash initializes, it will execute both the function definition AND the injected command.