Email address obfuscation in effect -- please
click here to turn it off.
[
Date Prev][
Date Next][
Thread Prev][
Thread Next][
Date Index][
Thread Index]
On Sat, 4 Feb 2006, Phillip Kelchen wrote:
On Saturday 04 February 2006 19:35, Mike Miller wrote:
> So a file name can contain a control character in either bash or tcsh.
> This must occasionally cause some serious problems.
Do you think that this could be a situation where a filename with a ^M
or other character could lead to arbitrary code execution or something
on that order and be a potential vulnerability? Or is the bash/tcsh bug
simply a benign one that would only cause a script/command with such a
character in the filename to fail to execute when called?
I guess I should clarify that I don't think it's a bug in the shells.
The filenames are controlled by the operating system, not by the shells
that run on the operating system. I don't have a deep understanding of
this at all and I'm not sure where the code is that determines which
characters can be included in filenames.
Mike
_______________________________________________
members mailing list
EMAIL:PROTECTED
http://mlug.missouri.edu/mailman/listinfo/members
Home | FAQ | Server | Presentations | Mailing Lists/Archives | Member Tools | Links | Sponsors | Contact