So, they are basically saying that bash is vulnerable to arbitrary command execution?