Full Disclosure mailing list archives
Re: Possibility to exploit bash "*" processing
From: Jacqui Caren <jacqui.caren () ntlworld com>
Date: Wed, 21 Sep 2011 13:56:22 +0100
On 21/09/2011 10:39, Cédric Jeanneret wrote:
Consider using: rm ./*
I dont see why someone would know how to use '--' for touch and not for rm... [jacqui@dieter test]$ touch -- -f -r [jacqui@dieter test]$ rm * [jacqui@dieter test]$ ls -l total 0 -rw-rw-r-- 1 jacqui jacqui 0 Sep 21 12:53 -f -rw-rw-r-- 1 jacqui jacqui 0 Sep 21 12:53 -r [jacqui@dieter test]$ rm -- * [jacqui@dieter test]$ ls -l total 0 [jacqui@dieter test]$ _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Possibility to exploit bash "*" processing Kirils Solovjovs (Sep 20)
- Re: Possibility to exploit bash "*" processing Valdis . Kletnieks (Sep 20)
- Re: Possibility to exploit bash "*" processing GloW - XD (Sep 20)
- Re: Possibility to exploit bash "*" processing Cédric Jeanneret (Sep 21)
- Re: Possibility to exploit bash "*" processing Jacqui Caren (Sep 21)
- Re: Possibility to exploit bash "*" processing Dan Carpenter (Sep 21)
- Re: Possibility to exploit bash "*" processing Valdis . Kletnieks (Sep 21)
- Re: Possibility to exploit bash "*" processing Andrew Farmer (Sep 21)
- Re: Possibility to exploit bash "*" processing Valdis . Kletnieks (Sep 21)
- Re: Possibility to exploit bash "*" processing Valdis . Kletnieks (Sep 21)
- Re: Possibility to exploit bash "*" processing Valdis . Kletnieks (Sep 20)