bugtraq - Re: xpdf vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <UTC200307092036.h69Kaeb02775.aeb@smtp.cwi.nl>
Date: Wed, 9 Jul 2003 22:36:40 +0200 (MEST)
From: Andries.Brouwer@....nl
To: Andries.Brouwer@....nl, shalunov@...ernet2.edu
Subject: Re: xpdf vulnerability - CAN-2003-0434


>> A urlCommand like the default "netscape -remote 'openURL(%s)'"
>> is OK since the %s is protected by single quotes.

> How so?  Consider an argument of
>	'`rm -rf /tmp/test`'

xpdf already filters out single and double quotes, so
these do not occur in arguments.