Beefy Boxes and Bandwidth Generously Provided by pair Networks
more useful options
 
PerlMonks  

Re: perlsec question

by Rhandom (Curate)
on Dec 14, 2001 at 03:02 UTC ( [id://131817]=note: print w/replies, xml ) Need Help??


in reply to perlsec question

Another place that you can see it manifest is in the following script:

#!/usr/bin/perl -w -T use strict; print "hello ($0)\n"; #delete $ENV{$_} for qw(PATH BASH_ENV); # may need to add more to list, PATH and BASH_ENV # were all that drove my system crazy exec "$1 foo" if ! @ARGV && $0 =~ m|^([\w\/\.]+)$|;

Save this into a file and try to run it. It will fail until you uncomment that line. Otherwise, you could be syscalling or execing using unsecure information in the PATH and BASH_ENV variables.

my @a=qw(random brilliant braindead); print $a[rand(@a)];

Log In?
Username:
Password:

What's my password?
Create A New User
Domain Nodelet?
Node Status?
node history
Node Type: note [id://131817]
help
Chatterbox?
and the web crawler heard nothing...

How do I use this?Last hourOther CB clients
Other Users?
Others goofing around in the Monastery: (4)
As of 2024-03-29 01:41 GMT
Sections?
Information?
Find Nodes?
Leftovers?
    Voting Booth?

    No recent polls found