RootCauseunvalidated
writing BASH_CMDS[name]=/path/to/binary populated the command hash table directly — CVE-2019-9924's BASH_CMDS path. Tension: letting the rbash user run arbitrary binaries. Outcome: fixed pre-bash-4.4-beta2 in variables.c:assign_hashcmd lines 1764-1785.
a8b8855f-e189-4d50-961a-588813f8be18
writing BASH_CMDS[name]=/path/to/binary populated the command hash table directly — CVE-2019-9924's BASH_CMDS path. Tension: letting the rbash user run arbitrary binaries. Outcome: fixed pre-bash-4.4-beta2 in variables.c:assign_hashcmd lines 1764-1785.