infosrch.cgi 'interactive' shell

[rpc () INETARENA COM (rpc)]

Hello All,
  SGI's security advisory regarding infosrch.cgi minimizes the actual
vulnerability. Not only does it allow you to view any file on the system,
an attacker can easily run arbitrary commands. Attached is a simple perl
script that demonstrates this.

--rpc <h () ckz org>

<HR NOSHADE>
<UL>
<LI>TEXT/PLAIN attachment: infosh.pl
</UL>