> When this gets dereferenced, Mosaic executes the following command:
>
> system("xterm -e telnet x ; rm -rf *");
This could be looked upon as "lazy" programming, which can often
lead to security problems. If the code actually did something like:
if (fork() != 0)
execlp("xterm", "xterm", "-e", "telnet", "<users-args>", 0);
then the <user-args> are passed as a single argument and telnet would
gripe that "x ; rm -rf *" is an unknown host.
----------- Gordon Lack ----------------- gml4410 @
ggr .
co .
uk ------------
The contents of this message *may* reflect my personal opinion. They are
*not* intended to reflect those of my employer, or anyone else.
|
|
