Bugtraq mailing list archives

Re: majordomo local exploit


From: chip () VALINUX COM (Chip Salzenberg)
Date: Wed, 29 Dec 1999 23:39:14 -0800


According to Henrik Edlund:
There is no need, I believe, to use the sysopen function as someone
else suggested earlier.

But sysopen() is a simpler approach that eliminates all such concerns,
and adds robustness.  Simply prepending "< " is not enough to work in
the presence of, say, filenames that begin with whitespace.

PS: I added sysopen() to Perl 5.4.  :-)

--
Chip Salzenberg             - a.k.a. -              <chip () valinux com>
     "Fleagal.  Bingo.  Drooper.  Snork.  They're cops."   //MST3K



Current thread: