[typon]

I'm sure you've heard of the Shellshock bug.

[leephillips]

Shellshock is a flaw in bash parsing and has nothing to do with that fact that bash happens to be written in C. Also, it's only a problem for untrusted input sent to bash. Typically, from the internet.