Re: sperl 5.00503 (and newer ;) exploit

[Joey Hess <joey () KITENET NET>]

Olaf Kirch wrote:
> I'm sort of torn between whether to blame sperl for using mail rather
> than syslog, or for doing so without cleaning up the environment.
> Apart from the ~! expansion problem, there seems to be at least
> another one lurking which is that it'll try to load ~/.mailrc, and
> ~ is replaced with the value of $HOME.

... and you just have to set interactive in .mailrc. This works around
the patches I've seen for mailx that stop it from looking at the
environment for that variable.

Another fun one that doesn't require interactive be set at all is:

joey@kite:~>echo hi > foo
joey@kite:~>echo "please don't kill me" > important
joey@kite:~>record=/home/joey/important mail joey < foo
You have new mail.
joey@kite:~>cat important
please don't kill me
> From joey Mon Aug  7 15:25:07 2000
To: joey

hi

--
see shy jo