Re: [exim-dev] [Bug 2118] sendmail -be and ${run} macro secu…

Top Page
This message is part of the following thread:
Mthe complete thread tree sorted by date
Madmin at <-
Madmin at ->
Delete this message
Reply to this message
Author: Andrew C Aitchison
Date:  
To: exim-dev
Subject: Re: [exim-dev] [Bug 2118] sendmail -be and ${run} macro security problem
On Tue, 9 May 2017, admin@??? wrote:

> https://bugs.exim.org/show_bug.cgi?id=2118
>
> Jasen Betts <jasen@???> changed:
>
>           What    |Removed                     |Added
> ----------------------------------------------------------------------------
>                 CC|                            |jasen@???

>
> --- Comment #7 from Jasen Betts <jasen@???> ---
> It looks to me like a "shell injection" flaw in wordpress.

Yes, but exim provides a language for the hacker to
modify the command after wordpress has sanitised it :-( 

-- 
Andrew C Aitchison            Cambridge, UK


This message was posted to the following mailing lists:
Exim-dev
Mailing List Info | Nearby Messages		<-[exim-dev] [Bug 2118] sendmail -be and ${run} macro security problem[exim-dev] [Bug 2118] sendmail -be and ${run} macro security problem->
Tahini and Hummus and Cumin Development Archives administrated by cumin AdminsLurker (version 2.3)