Re: MDKSA-2000:039 - xchat update

[Decklin Foster <decklin () RED-BEAN COM>]

Joey Hess writes:

> Actually it is. The "netscape (existing)" and "netscape (new window)"
> menu entries are safe,

Actually they're vulnerable too.

http://drugs.org/just/say/'`yes`'

The rule just puts openURL(%s) in single quotes, which can easily be
broken out of as in the above pseudo-URL.

I'm arguing for the use of execvp instead on the xchat mailing list,
we'll see how this goes. It's 3:30 AM and I won't be able to write any
code for it until tomorrow.

--
There is no TRUTH. There is no REALITY. There is no CONSISTENCY. There
are no ABSOLUTE STATEMENTS. I'm very probably wrong. -- BSD fortune(6)