full-disclosure - [FD] Back To The Future: Unix Wildcards Gone Wild

Open Source and information security mailing list archives

Message-ID: <53ABDC75.7060903@defensecode.com>
Date: Thu, 26 Jun 2014 10:40:21 +0200
From: defensecode <defensecode@...ensecode.com>
To: fulldisclosure@...lists.org
Subject: [FD] Back To The Future: Unix Wildcards Gone Wild

Hi,

We wanted to inform all major *nix distributions via our responsible
disclosure policy about this problem before posting it, because it is
highly likely that this problem could lead to local root access on many
distributions. But, since part of this research contained in the document
was mentioned on some blog entries, we are forced to release it in a
full version.

Download URL:
http://www.defensecode.com/public/DefenseCode_Unix_WildCards_Gone_Wild.txt

Regards,
Leon Juranic

View attachment "defensecode.vcf" of type "text/x-vcard" (4 bytes)

_______________________________________________
Sent through the Full Disclosure mailing list
http://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives