Re: system() call in suid programs

[jude () jeeves ucsd edu (Jude Poole)]

Steve,

Exploits basically try to get quotes, semicolons etc into a string used
as an argument to the system call.  Since the system call argumnent is
basically a call to a shell you can do arbitrary nasty things.

Jude