Bugtraq: Re: Small problem in AIX write command: Executes shell

[hedley () CS BRIS AC UK (David Hedley)]

    Klaus> At least on our AIX 4.1.5, the "write" command for sending
    Klaus> messages to other users doesn't filter the message to be sent
    Klaus> w.r.t. shell metacharacters: Just pipe a "telnet localhost
    Klaus> chargen" into "write somebody", and you will receive error
    Klaus> messages saying that a "sh" tries to execute parts of the
    Klaus> text being sent. Modify the input to "write" a little bit (to
    Klaus> contain actual shell commands), and they will be executed.

I suggest you RTFM.

> From the solaris 2.5.1 man page:
     If the character ! is found at  the  beginning  of  a  line,
     write  calls  the shell to execute the rest of the line as a
     command.

Regards,

David
--
 David Hedley (hedley () cs bris ac uk)
 finger hedley () cs bris ac uk for PGP key
 Computer Graphics Group | University of Bristol | UK