[3372] in bugtraq
Re: sh and ^
daemon@ATHENA.MIT.EDU (bitblt@cybercom.net)
Tue Sep 17 12:11:27 1996
Date: Tue, 17 Sep 1996 07:52:34 -0400
Reply-To: bitblt@cybercom.net
From: bitblt@cybercom.net
X-To: Dan Thorson <Dan_Thorson@notes.seagate.com>
To: Multiple recipients of list BUGTRAQ <BUGTRAQ@NETSPACE.ORG>
In-Reply-To: <9609161836.AA6075@notes.seagate.com>
Frankly, I don't see what the hubub is about. This is a standard feature
of sh, and has been since system 7, and possibly earlier. Do we need a
discussion of the ways in which the '^' character has changed in
appearance over the years too? The only CGIs which can be nailed by
stuff like this are ones which invoke a shell, which you shouldn't be
doing in the first place. If you need to call some other program, fork
and exec; don't use system. Aleph1, please kill this thread.
