Re: Command injection in /etc/rc.d/netif

Mon, 10 Aug 2026 07:22:02 -0700 

Nami Arjmandi <[email protected]> writes:
> 2. Command-line interface name, including a glob touch '/tmp/;id;'
> service netif start '/tmp/*'

Why would someone run that?

DES
-- 
Dag-Erling Smørgrav - [email protected]

Reply via email to