Vulnerability Development mailing list archives

Re: Unix * weirdness


From: hardy () RAINEY BLUENEPTUNE COM (Scott Hardy)
Date: Sat, 1 Jan 2000 14:37:55 -0800


Yes, that is an ancient "feature" that is well known.  You used to
be able to use 'touch' on most systems to make files like that, now
on many (e.g. Solaris) you need to do something like:

echo " ">>'-rf *'

  ...to make newbie-trap files.

Just another good reason to leave '.' out of your path statement.

You can find a similar "feature" in most ftp's mget, where files
named '|sh' and such will execute commands.

-- S.


Current thread: