| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: Thu, 26 Jun 2014 13:40:58 +0400 From: gremlin@...mlin.ru To: fulldisclosure@...lists.org Subject: Re: [FD] Back To The Future: Unix Wildcards Gone Wild On 26-Jun-2014 10:40:21 +0200, defensecode wrote: > We wanted to inform all major *nix distributions via our > responsible disclosure policy about this problem before posting > it, because it is highly likely that this problem could lead to > local root access on many distributions. > http://www.defensecode.com/public/DefenseCode_Unix_WildCards_Gone_Wild.txt Captain Obvious died in agony, and his final words were: - Never forget of the "--" parameter... :-) -- Alexey V. Vissarionov aka Gremlin from Kremlin <gremlin ПРИ gremlin ТЧК ru> GPG: 8832FE9FA791F7968AC96E4E909DAC45EF3B1FA8 @ hkp://keys.gnupg.net _______________________________________________ Sent through the Full Disclosure mailing list http://nmap.org/mailman/listinfo/fulldisclosure Web Archives & RSS: http://seclists.org/fulldisclosure/
Powered by blists - more mailing lists