It offers the same syntax as the standard shell, and it also includes additional functionality such as job control, command line editing, and history. The bash source code is freely available from many sites on the Internet. B. Vulnerability Details 1. However, it appears that this problem does not produce an exploitable vulnerability. This is especially true for the CGI programming interface in World Wide Web servers, many of which do not strip out characters with value 255 decimal.
Solution Install the most current version of bash.
Upgrading to the current version of bash is sufficient. The following is vendor-supplied information. IBM Corporation AIX does not ship with the bash shell. IBM and AIX are registered trademarks of International Business Machines Corporation. This collection of software has been compiled for IRIX as a service to our customers, but is furnished without formal SGI support.