Re: [Fwd: BoS: Vulnerability in Majordomo]

[Dave Barr <barr @ cis . ohio-state . edu>]

In message <ufag1rwsmf8.fsf@sina.hpc.uh.edu>, Jason L Tibbitts III writes:
>+    # Squash some special address characters that, while legal, can be used
>+    # to abuse us.
>+    $reply_addr =~ s![~`/]!!g;

I don't agree with these sorts of changes.  Fix the code so it
never invokes the shell, and you stop everything at the source.

--Dave