Just tested on my N900 (Bash4). Code: ~ $ env x='() { :;}; echo vulnerable' bash -c "echo this is a test" vulnerable this is a test ~ $
~ $ env x='() { :;}; echo vulnerable' bash -c "echo this is a test" vulnerable this is a test ~ $