mailing list archives
Re: majordomo local exploit
From: chip () VALINUX COM (Chip Salzenberg)
Date: Wed, 29 Dec 1999 23:39:14 -0800
According to Henrik Edlund:
There is no need, I believe, to use the sysopen function as someone
else suggested earlier.
But sysopen() is a simpler approach that eliminates all such concerns,
and adds robustness. Simply prepending "< " is not enough to work in
the presence of, say, filenames that begin with whitespace.
PS: I added sysopen() to Perl 5.4. :-)
Chip Salzenberg - a.k.a. - <chip () valinux com>
"Fleagal. Bingo. Drooper. Snork. They're cops." //MST3K