Re: Command injection in /etc/rc.d/netif
- Reply: Nami Arjmandi : "Re: Command injection in /etc/rc.d/netif"
- In reply to: Nami Arjmandi : "Re: Command injection in /etc/rc.d/netif"
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Mon, 10 Aug 2026 14:21:12 UTC
Nami Arjmandi <namiarjmandi@gmail.com> writes: > 2. Command-line interface name, including a glob touch '/tmp/;id;' > service netif start '/tmp/*' Why would someone run that? DES -- Dag-Erling Smørgrav - des@FreeBSD.org