Beefy Boxes and Bandwidth Generously Provided by pair Networks
good chemistry is complicated,
and a little bit messy -LW
 
PerlMonks  

Re^2: The importance of avoiding the shell

by ikegami (Patriarch)
on Sep 29, 2014 at 06:30 UTC ( [id://1102317]=note: print w/replies, xml ) Need Help??


in reply to Re: The importance of avoiding the shell
in thread The importance of avoiding the shell

And in Windows, even system LIST with multiple values can invoke the shell. For example, the following should fail given that dir is a shell builtin.

>perl -e"system 'dir', '/b'" foo bar

(Of course, that doesn't matter for the bash vulnerability.)

system BLOCK LIST won't call the shell on any system.

Log In?
Username:
Password:

What's my password?
Create A New User
Domain Nodelet?
Node Status?
node history
Node Type: note [id://1102317]
help
Chatterbox?
and the web crawler heard nothing...

How do I use this?Last hourOther CB clients
Other Users?
Others lurking in the Monastery: (8)
As of 2024-04-18 16:18 GMT
Sections?
Information?
Find Nodes?
Leftovers?
    Voting Booth?

    No recent polls found