[4318] in WWW Security List Archive
Perl System Call HACKS
daemon@ATHENA.MIT.EDU (Jeff Middleton)
Mon Feb 10 10:40:38 1997
From: "Jeff Middleton" <jeffm@sgiserv3.aws.waii.com>
Date: Mon, 10 Feb 1997 07:46:20 -0800
To: www-security@ns2.rutgers.edu
Errors-To: owner-www-security@ns2.rutgers.edu
Is there a FAQ or information giving some examples as to the way
a perl script that executes sendmail via a PERL system call can
be hacked?
What strings are going to be malicious to the sendmail execution?
Is there a work-around?
You may eMail me directly at jeff.middleton@waii.com.
Thanks in advance.
