Re: A security hole

Article View: comp.bugs.sys5

Article #722

#722

From: brad
Date: Thu, 10 Mar 1988 16:00

5 lines
657 bytes

Also watch out for "IFS=" in the shell with popen and setuid.  On
system V (not BSD), you can set IFS=/; export IFS and if it does a
popen("/xxx/yuyy", "w"); or "r", then all you need is a a program
called xxx in the current working directory.

Technical Details

Message-ID: <15000002@bradley>

Path:

arc1-ca.pugleaf.net!utzoo!mnetor!uunet!husc6!uwvax!oddjob!hao!ames!pacbell!att-ih!ihnp4!inuxc!iuvax!pur-ee!uiucdcs!bradley!brad

References: <120@pcsbst.UUCP>

Show Full Headers

Complete Article Headers

Path: arc1-ca.pugleaf.net!utzoo!mnetor!uunet!husc6!uwvax!oddjob!hao!ames!pacbell!att-ih!ihnp4!inuxc!iuvax!pur-ee!uiucdcs!bradley!brad
From: brad@bradley.UUCP
Newsgroups: comp.bugs.sys5
Subject: Re: A security hole
Message-ID: <15000002@bradley>
Date: 10 Mar 88 16:00:00 GMT
References: <120@pcsbst.UUCP>
Lines: 5
Nf-ID: #R:pcsbst.UUCP:120:bradley:15000002:000:244
Nf-From: bradley.UUCP!brad    Mar 10 10:00:00 1988

Reply to Parent Message